Task #1662 - mbedtls-2.28.7-1.fc40/scan-results.err
back to task #1662download
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/aes.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/aes.c:1277:31: warning[core.UndefinedBinaryOperatorResult]: The right operand of '^' is a garbage value
# 1275| for (i = 0; i < leftover; i++) {
# 1276| output[i] = prev_output[i];
# 1277|-> tmp[i] = input[i] ^ t[i];
# 1278| }
# 1279|
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/asn1parse.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/asn1write.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/base64.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c:812:23: warning[core.NullDereference]: Array access (via field 'p') results in a null pointer dereference
# 810|
# 811| for (i = 0; i < buflen; i++) {
# 812|-> X->p[i / ciL] |= ((mbedtls_mpi_uint) buf[i]) << ((i % ciL) << 3);
# 813| }
# 814|
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c:845:9: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 843| if (buflen != 0) {
# 844| Xp = (unsigned char *) X->p;
# 845|-> memcpy(Xp + overhead, buf, buflen);
# 846|
# 847| mpi_bigendian_to_host(X->p, limbs);
Error: CPPCHECK_WARNING (CWE-758):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c:1603: error[shiftTooManyBits]: Shifting 32-bit value by 64 bits is undefined behaviour
# 1601|
# 1602| #if defined(MBEDTLS_HAVE_UDBL)
# 1603|-> dividend = (mbedtls_t_udbl) u1 << biL;
# 1604| dividend |= (mbedtls_t_udbl) u0;
# 1605| quotient = dividend / d;
Error: CPPCHECK_WARNING (CWE-758):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c:1606: error[shiftTooManyBits]: Shifting 32-bit value by 64 bits is undefined behaviour
# 1604| dividend |= (mbedtls_t_udbl) u0;
# 1605| quotient = dividend / d;
# 1606|-> if (quotient > ((mbedtls_t_udbl) 1 << biL) - 1) {
# 1607| quotient = ((mbedtls_t_udbl) 1 << biL) - 1;
# 1608| }
Error: CPPCHECK_WARNING (CWE-758):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c:1607: error[shiftTooManyBits]: Shifting 32-bit value by 64 bits is undefined behaviour
# 1605| quotient = dividend / d;
# 1606| if (quotient > ((mbedtls_t_udbl) 1 << biL) - 1) {
# 1607|-> quotient = ((mbedtls_t_udbl) 1 << biL) - 1;
# 1608| }
# 1609|
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c:2459:5: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 2457| }
# 2458|
# 2459|-> memset(X->p, 0, overhead);
# 2460| memset((unsigned char *) X->p + limbs * ciL, 0, (X->n - limbs) * ciL);
# 2461| MBEDTLS_MPI_CHK(f_rng(p_rng, (unsigned char *) X->p + overhead, n_bytes));
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/bignum.c:2928:13: warning[core.NullDereference]: Array access (via field 'p') results in a null pointer dereference
# 2926| MBEDTLS_MPI_CHK(mbedtls_mpi_fill_random(X, n * ciL, f_rng, p_rng));
# 2927| /* make sure generated number is at least (nbits-1)+0.5 bits (FIPS 186-4 §B.3.3 steps 4.4, 5.5) */
# 2928|-> if (X->p[n-1] < CEIL_MAXUINT_DIV_SQRT2) {
# 2929| continue;
# 2930| }
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/blowfish.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/camellia.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ccm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/chacha20.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/chachapoly.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/cipher.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-476):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:16: included_from: Included from here.
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘ssl_session_save’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/common.h:282:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5342:9: note: in expansion of macro ‘MBEDTLS_PUT_UINT64_BE’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘ssl_session_save’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5342:9: note: in expansion of macro ‘MBEDTLS_PUT_UINT64_BE’
# 280| #define MBEDTLS_PUT_UINT64_BE(n, data, offset) \
# 281| { \
# 282|-> (data)[(offset)] = MBEDTLS_BYTE_7(n); \
# 283| (data)[(offset) + 1] = MBEDTLS_BYTE_6(n); \
# 284| (data)[(offset) + 2] = MBEDTLS_BYTE_5(n); \
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ctr_drbg.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/debug.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/des.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/dhm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ecp_curves.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/entropy.c:484:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 482| unsigned char buf[MBEDTLS_ENTROPY_BLOCK_SIZE];
# 483|
# 484|-> if ((ret = mbedtls_entropy_func(ctx, buf, MBEDTLS_ENTROPY_BLOCK_SIZE)) != 0) {
# 485| ret = MBEDTLS_ERR_ENTROPY_SOURCE_FAILED;
# 486| goto exit;
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/error.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/gcm.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/havege.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/hkdf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/hmac_drbg.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/hmac_drbg.c:170:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 168|
# 169| /* IV. Gather entropy_len bytes of entropy for the seed */
# 170|-> if ((ret = ctx->f_entropy(ctx->p_entropy,
# 171| seed, ctx->entropy_len)) != 0) {
# 172| return MBEDTLS_ERR_HMAC_DRBG_ENTROPY_SOURCE_FAILED;
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/hmac_drbg.c:186:14: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 184| * entropy source implementation can emit in a single
# 185| * call in configurations disabling SHA-512. */
# 186|-> if ((ret = ctx->f_entropy(ctx->p_entropy,
# 187| seed + seedlen,
# 188| ctx->entropy_len / 2)) != 0) {
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/md.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/md.c:737:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'ipad'
# 735|
# 736| cleanup:
# 737|-> mbedtls_platform_zeroize(sum, sizeof(sum));
# 738|
# 739| return ret;
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/md5.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c: scope_hint: In function ‘mbedtls_net_connect’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:193:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘socket(*cur.ai_family, *cur.ai_socktype, *cur.ai_protocol)’
# 191| }
# 192|
# 193|-> if (connect(ctx->fd, cur->ai_addr, MSVC_INT_CAST cur->ai_addrlen) == 0) {
# 194| ret = 0;
# 195| break;
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c: scope_hint: In function ‘mbedtls_net_bind’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:250:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*ctx.fd’
# 248| }
# 249|
# 250|-> if (bind(ctx->fd, cur->ai_addr, MSVC_INT_CAST cur->ai_addrlen) != 0) {
# 251| close(ctx->fd);
# 252| ret = MBEDTLS_ERR_NET_BIND_FAILED;
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:258:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*ctx.fd’
# 256| /* Listen only makes sense for TCP */
# 257| if (proto == MBEDTLS_NET_PROTO_TCP) {
# 258|-> if (listen(ctx->fd, MBEDTLS_NET_LISTEN_BACKLOG) != 0) {
# 259| close(ctx->fd);
# 260| ret = MBEDTLS_ERR_NET_LISTEN_FAILED;
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:270:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*ctx.fd’
# 268| }
# 269|
# 270|-> freeaddrinfo(addr_list);
# 271|
# 272| return ret;
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:350:30: warning[-Wanalyzer-fd-leak]: leak of file descriptor
# 348| if (type == SOCK_STREAM) {
# 349| /* TCP: actual accept() */
# 350|-> ret = client_ctx->fd = (int) accept(bind_ctx->fd,
# 351| (struct sockaddr *) &client_addr, &n);
# 352| } else {
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c: scope_hint: In function ‘mbedtls_net_accept’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:350:30: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*bind_ctx.fd’
# 348| if (type == SOCK_STREAM) {
# 349| /* TCP: actual accept() */
# 350|-> ret = client_ctx->fd = (int) accept(bind_ctx->fd,
# 351| (struct sockaddr *) &client_addr, &n);
# 352| } else {
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:382:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*bind_ctx.fd’
# 380| int one = 1;
# 381|
# 382|-> if (connect(bind_ctx->fd, (struct sockaddr *) &client_addr, n) != 0) {
# 383| return MBEDTLS_ERR_NET_ACCEPT_FAILED;
# 384| }
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:399:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*bind_ctx.fd’
# 397| }
# 398|
# 399|-> if (bind(bind_ctx->fd, (struct sockaddr *) &local_addr, n) != 0) {
# 400| return MBEDTLS_ERR_NET_BIND_FAILED;
# 401| }
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:409:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor
# 407| *ip_len = sizeof(addr4->sin_addr.s_addr);
# 408|
# 409|-> if (buf_size < *ip_len) {
# 410| return MBEDTLS_ERR_NET_BUFFER_TOO_SMALL;
# 411| }
Error: GCC_ANALYZER_WARNING (CWE-775):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/net_sockets.c:418:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor
# 416| *ip_len = sizeof(addr6->sin6_addr.s6_addr);
# 417|
# 418|-> if (buf_size < *ip_len) {
# 419| return MBEDTLS_ERR_NET_BUFFER_TOO_SMALL;
# 420| }
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/oid.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pem.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-688):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pem.c: scope_hint: In function ‘mbedtls_pem_write_buffer’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pem.c:494:9: warning[-Wanalyzer-null-argument]: use of NULL ‘c’ where non-null expected
<built-in>: note: argument 2 of ‘__builtin_memcpy’ must be non-null
# 492| while (use_len) {
# 493| len = (use_len > 64) ? 64 : use_len;
# 494|-> memcpy(p, c, len);
# 495| use_len -= len;
# 496| p += len;
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pem.c:494:9: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 492| while (use_len) {
# 493| len = (use_len > 64) ? 64 : use_len;
# 494|-> memcpy(p, c, len);
# 495| use_len -= len;
# 496| p += len;
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkcs12.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-457):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkcs12.c: scope_hint: In function ‘mbedtls_pkcs12_derivation’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkcs12.c:429:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘hash_block[<unknown>]’
# 427| // B += 1
# 428| for (i = v; i > 0; i--) {
# 429|-> if (++hash_block[i - 1] != 0) {
# 430| break;
# 431| }
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkcs5.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkparse.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkparse.c:320:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 318|
# 319| /* Ignore seed BIT STRING OPTIONAL */
# 320|-> if ((ret = mbedtls_asn1_get_tag(&p, end_curve, &len, MBEDTLS_ASN1_BIT_STRING)) == 0) {
# 321| p += len;
# 322| }
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkparse.c:534:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 532| }
# 533|
# 534|-> if ((ret = mbedtls_rsa_import_raw(rsa, *p, len, NULL, 0, NULL, 0,
# 535| NULL, 0, NULL, 0)) != 0) {
# 536| return MBEDTLS_ERR_PK_INVALID_PUBKEY;
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkparse.c:546:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 544| }
# 545|
# 546|-> if ((ret = mbedtls_rsa_import_raw(rsa, NULL, 0, NULL, 0, NULL, 0,
# 547| NULL, 0, *p, len)) != 0) {
# 548| return MBEDTLS_ERR_PK_INVALID_PUBKEY;
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/pkwrite.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/poly1305.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/psa_crypto.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/psa_crypto_aead.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/psa_crypto_cipher.c:357:9: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 355| if (input_length > 0) {
# 356| /* Save unprocessed bytes for later processing */
# 357|-> memcpy(&(ctx->unprocessed_data[ctx->unprocessed_len]),
# 358| input, input_length);
# 359| ctx->unprocessed_len += input_length;
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/psa_crypto_mac.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/psa_crypto_slot_management.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/psa_crypto_storage.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ripemd160.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/rsa.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/rsa.c:2125:16: warning[core.UndefinedBinaryOperatorResult]: The left operand of '>>' is a garbage value
# 2123| msb = mbedtls_mpi_bitlen(&ctx->N) - 1;
# 2124|
# 2125|-> if (buf[0] >> (8 - siglen * 8 + msb)) {
# 2126| return MBEDTLS_ERR_RSA_BAD_INPUT_DATA;
# 2127| }
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/sha1.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/sha256.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/sha512.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_cache.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_cli.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_cli.c:284:5: warning[deadcode.DeadStores]: Value stored to 'p' is never read
# 282|
# 283| MBEDTLS_PUT_UINT16_BE(sig_alg_len, p, 0);
# 284|-> p += 2;
# 285|
# 286| *olen = 6 + sig_alg_len;
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_cli.c:358:5: warning[deadcode.DeadStores]: Value stored to 'p' is never read
# 356|
# 357| MBEDTLS_PUT_UINT16_BE(elliptic_curve_len, p, 0);
# 358|-> p += 2;
# 359|
# 360| *olen = 6 + elliptic_curve_len;
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_cookie.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_msg.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_msg.c:649:5: warning[deadcode.DeadStores]: Value stored to 'post_avail' is never read
# 647|
# 648| data = rec->buf + rec->data_offset;
# 649|-> post_avail = rec->buf_len - (rec->data_len + rec->data_offset);
# 650| MBEDTLS_SSL_DEBUG_BUF(4, "before encrypt: output payload",
# 651| data, rec->data_len);
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_msg.c:910:9: warning[deadcode.DeadStores]: Value stored to 'post_avail' is never read
# 908| transform->taglen);
# 909| /* Account for authentication tag. */
# 910|-> post_avail -= transform->taglen;
# 911|
# 912| /*
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_msg.c:1068:13: warning[deadcode.DeadStores]: Value stored to 'post_avail' is never read
# 1066|
# 1067| rec->data_len += transform->maclen;
# 1068|-> post_avail -= transform->maclen;
# 1069| auth_done++;
# 1070|
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_srv.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-476):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_srv.c: scope_hint: In function ‘ssl_get_ecdh_params_from_cert’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_srv.c:3154:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_srv.c:15: included_from: Included from here.
# 3152|
# 3153| if ((ret = mbedtls_ecdh_get_params(&ssl->handshake->ecdh_ctx,
# 3154|-> mbedtls_pk_ec(*own_key),
# 3155| MBEDTLS_ECDH_OURS)) != 0) {
# 3156| MBEDTLS_SSL_DEBUG_RET(1, ("mbedtls_ecdh_get_params"), ret);
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_srv.c:3909:50: warning[core.UndefinedBinaryOperatorResult]: The right operand of '&' is a garbage value
# 3907| * data-dependent branches. */
# 3908| for (i = 0; i < ssl->handshake->pmslen; i++) {
# 3909|-> pms[i] = (mask & fake_pms[i]) | ((~mask) & peer_pms[i]);
# 3910| }
# 3911|
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_ticket.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-401):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘mbedtls_ssl_session_copy’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:215:9: warning[-Wanalyzer-malloc-leak]: leak of ‘**ssl.session_negotiate.ticket’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:20: included_from: Included from here.
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:210:23: note: in expansion of macro ‘mbedtls_calloc’
# 213| }
# 214|
# 215|-> memcpy(dst->ticket, src->ticket, src->ticket_len);
# 216| }
# 217| #endif /* MBEDTLS_SSL_SESSION_TICKETS && MBEDTLS_SSL_CLI_C */
Error: GCC_ANALYZER_WARNING (CWE-476):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5388:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘ssl_session_save’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5388:16: note: in expansion of macro ‘MBEDTLS_BYTE_2’
# 5386|
# 5387| if (used <= buf_len) {
# 5388|-> *p++ = MBEDTLS_BYTE_2(cert_len);
# 5389| *p++ = MBEDTLS_BYTE_1(cert_len);
# 5390| *p++ = MBEDTLS_BYTE_0(cert_len);
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5388:14: warning[core.NullDereference]: Dereference of null pointer
# 5386|
# 5387| if (used <= buf_len) {
# 5388|-> *p++ = MBEDTLS_BYTE_2(cert_len);
# 5389| *p++ = MBEDTLS_BYTE_1(cert_len);
# 5390| *p++ = MBEDTLS_BYTE_0(cert_len);
Error: GCC_ANALYZER_WARNING (CWE-476):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5424:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘ssl_session_save’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5424:16: note: in expansion of macro ‘MBEDTLS_BYTE_2’
# 5422|
# 5423| if (used <= buf_len) {
# 5424|-> *p++ = MBEDTLS_BYTE_2(session->ticket_len);
# 5425| *p++ = MBEDTLS_BYTE_1(session->ticket_len);
# 5426| *p++ = MBEDTLS_BYTE_0(session->ticket_len);
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5424:14: warning[core.NullDereference]: Dereference of null pointer
# 5422|
# 5423| if (used <= buf_len) {
# 5424|-> *p++ = MBEDTLS_BYTE_2(session->ticket_len);
# 5425| *p++ = MBEDTLS_BYTE_1(session->ticket_len);
# 5426| *p++ = MBEDTLS_BYTE_0(session->ticket_len);
Error: GCC_ANALYZER_WARNING (CWE-476):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5445:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘ssl_session_save’
# 5443|
# 5444| if (used <= buf_len) {
# 5445|-> *p++ = session->mfl_code;
# 5446| }
# 5447| #endif
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5445:14: warning[core.NullDereference]: Dereference of null pointer
# 5443|
# 5444| if (used <= buf_len) {
# 5445|-> *p++ = session->mfl_code;
# 5446| }
# 5447| #endif
Error: GCC_ANALYZER_WARNING (CWE-476):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5453:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘ssl_session_save’
# 5451|
# 5452| if (used <= buf_len) {
# 5453|-> *p++ = (unsigned char) ((session->trunc_hmac) & 0xFF);
# 5454| }
# 5455| #endif
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5453:14: warning[core.NullDereference]: Dereference of null pointer
# 5451|
# 5452| if (used <= buf_len) {
# 5453|-> *p++ = (unsigned char) ((session->trunc_hmac) & 0xFF);
# 5454| }
# 5455| #endif
Error: GCC_ANALYZER_WARNING (CWE-476):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5461:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c: scope_hint: In function ‘ssl_session_save’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/common.h:94:40: note: in definition of macro ‘MBEDTLS_BYTE_0’
# 5459|
# 5460| if (used <= buf_len) {
# 5461|-> *p++ = MBEDTLS_BYTE_0(session->encrypt_then_mac);
# 5462| }
# 5463| #endif
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:5461:14: warning[core.NullDereference]: Dereference of null pointer
# 5459|
# 5460| if (used <= buf_len) {
# 5461|-> *p++ = MBEDTLS_BYTE_0(session->encrypt_then_mac);
# 5462| }
# 5463| #endif
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/ssl_tls.c:6355:17: warning[deadcode.DeadStores]: Value stored to 'p' is never read
# 6353| if (ssl->alpn_chosen != NULL) {
# 6354| memcpy(p, ssl->alpn_chosen, alpn_len);
# 6355|-> p += alpn_len;
# 6356| }
# 6357| }
Error: GCC_ANALYZER_WARNING (CWE-457):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c: scope_hint: In function ‘mbedtls_timing_get_delay’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c:334:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(mbedtls_timing_delay_context *)data.fin_ms’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c:427:13: note: in expansion of macro ‘FAIL’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c:12: included_from: Included from here.
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c:378:13: note: in expansion of macro ‘mbedtls_printf’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c:427:13: note: in expansion of macro ‘FAIL’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c:382:13: note: in expansion of macro ‘mbedtls_printf’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/timing.c:427:13: note: in expansion of macro ‘FAIL’
# 332| unsigned long elapsed_ms;
# 333|
# 334|-> if (ctx->fin_ms == 0) {
# 335| return -1;
# 336| }
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_create.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_crl.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_crl.c:346:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 344| * signatureValue BIT STRING }
# 345| */
# 346|-> if ((ret = mbedtls_asn1_get_tag(&p, end, &len,
# 347| MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE)) != 0) {
# 348| mbedtls_x509_crl_free(crl);
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_crl.c:391:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 389| crl->version++;
# 390|
# 391|-> if ((ret = mbedtls_x509_get_sig_alg(&crl->sig_oid, &sig_params1,
# 392| &crl->sig_md, &crl->sig_pk,
# 393| &crl->sig_opts)) != 0) {
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_crt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_crt.c:1123:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 1121| * signatureValue BIT STRING }
# 1122| */
# 1123|-> if ((ret = mbedtls_asn1_get_tag(&p, end, &len,
# 1124| MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE)) != 0) {
# 1125| mbedtls_x509_crt_free(crt);
Error: GCC_ANALYZER_WARNING (CWE-457):
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_crt.c: scope_hint: In function ‘mbedtls_x509_parse_subject_alt_name’
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_crt.c:1907:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&other_name’
# 1905| memset(san, 0, sizeof(mbedtls_x509_subject_alternative_name));
# 1906| san->type = MBEDTLS_X509_SAN_OTHER_NAME;
# 1907|-> memcpy(&san->san.other_name,
# 1908| &other_name, sizeof(other_name));
# 1909|
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_csr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_csr.c:104:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 102| * }
# 103| */
# 104|-> if ((ret = mbedtls_asn1_get_tag(&p, end, &len,
# 105| MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE)) != 0) {
# 106| mbedtls_x509_csr_free(csr);
Error: CLANG_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509_csr.c:201:10: warning[deadcode.DeadStores]: Although the value stored to 'ret' is used in the enclosing expression, the value is never actually read from 'ret'
# 199| }
# 200|
# 201|-> if ((ret = mbedtls_x509_get_sig_alg(&csr->sig_oid, &sig_params,
# 202| &csr->sig_md, &csr->sig_pk,
# 203| &csr->sig_opts)) != 0) {
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509write_crt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING:
mbedtls-2.28.7-build/mbedtls-2.28.7/library/x509write_csr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.