volume_key-0.3.12-29.fc44

List of Findings

Error: SHELLCHECK_WARNING (CWE-156): [#def1]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:21:3: warning[SC2046]: Quote this to prevent word splitting.
#   19|   #
#   20|   
#   21|-> . $(dirname $0)/utest.sh
#   22|   
#   23|   initialize $0

Error: SHELLCHECK_WARNING (CWE-670): [#def2]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:56:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#   54|   # Prepare test environment.
#   55|   function setup() {
#   56|->   banner "::$FUNCNAME"
#   57|     runcmd "Creating $ESCROW_DIR" \
#   58|            "mkdir -p $ESCROW_DIR"

Error: SHELLCHECK_WARNING (CWE-670): [#def3]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:72:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#   70|   # Basic escrow-receive test.
#   71|   function test_escrow_receive() {
#   72|->   banner "::$FUNCNAME"
#   73|     # Ensure there is no old products/processes:
#   74|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-140): [#def4]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:94:11: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#   92|     assert_linematch $SINK_FILE "$(re_escape 'You should now remove the escrow packet file from your computer.')"
#   93|     # Verify the received packet:
#   94|->   FILES=( $(enumerate_files $ESCROW_DIR "$BOB_VALID_PACKET_RE") )
#   95|     assert_equal ${#FILES[@]} 1 "number of files in $ESCROW_DIR matching $BOB_VALID_PACKET_RE is 1"
#   96|     assert_identical ${FILES[0]} $TEST_PACKET

Error: SHELLCHECK_WARNING (CWE-670): [#def5]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:112:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  110|   # Test the reaction on malformed email (missing MD5 checksum).
#  111|   function test_escrow_receive_missing_md5_checksum() {
#  112|->   banner "::$FUNCNAME"
#  113|     # Ensure there is no old products:
#  114|     sweep_escrow_receive_products

Error: SHELLCHECK_WARNING (CWE-140): [#def6]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:119:11: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#  117|            "$HERE/sendpkt.py --from \"$BOB\" --to \"$ALICE\" --packet $TEST_PACKET --dump | sed -e '/^MD5 checksum:/d' | $HERE/../escrow-receive -H $LOCALADDR -a $ADMIN_EMAIL -d $ESCROW_DIR -l $LOGFILE" 1
#  118|     # Verify the received packet:
#  119|->   FILES=( $(enumerate_files $ESCROW_DIR "$BOB_PACKET_RE") )
#  120|     assert_equal ${#FILES[@]} 1 "number of files in $ESCROW_DIR matching $BOB_PACKET_RE is 1"
#  121|     assert_identical ${FILES[0]} $TEST_PACKET

Error: SHELLCHECK_WARNING (CWE-670): [#def7]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:136:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  134|   # Test the reaction on malformed email (missing sender).
#  135|   function test_escrow_receive_missing_sender() {
#  136|->   banner "::$FUNCNAME"
#  137|     # Ensure there is no old products:
#  138|     sweep_escrow_receive_products

Error: SHELLCHECK_WARNING (CWE-670): [#def8]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:159:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  157|   # missing).
#  158|   function test_escrow_receive_missing_both() {
#  159|->   banner "::$FUNCNAME"
#  160|     # Ensure there is no old products:
#  161|     sweep_escrow_receive_products

Error: SHELLCHECK_WARNING (CWE-670): [#def9]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:181:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  179|   # Test the reaction on bad MD5 checksum.
#  180|   function test_escrow_receive_bad_md5_checksum() {
#  181|->   banner "::$FUNCNAME"
#  182|     # Ensure there is no old products/processes:
#  183|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-140): [#def10]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:202:11: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#  200|     assert_linematch $SINK_FILE "$(re_escape 'Error receiving your backup passphrase packet!')"
#  201|     # Verify the received packet:
#  202|->   FILES=( $(enumerate_files $ESCROW_DIR "$BOB_CHECKSUM_ERROR_RE") )
#  203|     assert_equal ${#FILES[@]} 1 "number of files in $ESCROW_DIR matching $BOB_CHECKSUM_ERROR_RE is 1"
#  204|     assert_identical ${FILES[0]} $TEST_PACKET

Error: SHELLCHECK_WARNING (CWE-670): [#def11]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:220:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  218|   # Test the reaction on refused email.
#  219|   function test_escrow_receive_recipients_refused() {
#  220|->   banner "::$FUNCNAME"
#  221|     # Ensure there is no old products/processes:
#  222|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-140): [#def12]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:234:11: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#  232|     kill_smtp_server
#  233|     # Verify the received packet:
#  234|->   FILES=( $(enumerate_files $ESCROW_DIR "$BOB_VALID_PACKET_UNKNOWN_SENDER_RE") )
#  235|     assert_equal ${#FILES[@]} 1 "number of files in $ESCROW_DIR matching $BOB_VALID_PACKET_UNKNOWN_SENDER_RE is 1"
#  236|     assert_identical ${FILES[0]} $TEST_PACKET

Error: SHELLCHECK_WARNING (CWE-670): [#def13]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-receive:277:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  275|   # Remove auxiliary files and processes.
#  276|   function cleanup() {
#  277|->   banner "::$FUNCNAME"
#  278|     kill_smtp_server
#  279|     sweep_escrow_receive_products

Error: SHELLCHECK_WARNING (CWE-156): [#def14]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:21:3: warning[SC2046]: Quote this to prevent word splitting.
#   19|   #
#   20|   
#   21|-> . $(dirname $0)/utest.sh
#   22|   
#   23|   initialize $0

Error: SHELLCHECK_WARNING (CWE-140): [#def15]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:52:16: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   50|   export BLOCKSIZE NBLOCKS
#   51|   
#   52|-> FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|   FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   

Error: SHELLCHECK_WARNING (CWE-140): [#def16]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:52:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   50|   export BLOCKSIZE NBLOCKS
#   51|   
#   52|-> FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|   FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   

Error: SHELLCHECK_WARNING (CWE-140): [#def17]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:52:35: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   50|   export BLOCKSIZE NBLOCKS
#   51|   
#   52|-> FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|   FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   

Error: SHELLCHECK_WARNING (CWE-140): [#def18]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:52:45: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   50|   export BLOCKSIZE NBLOCKS
#   51|   
#   52|-> FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|   FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   

Error: SHELLCHECK_WARNING (CWE-140): [#def19]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:53:15: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   51|   
#   52|   FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|-> FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   
#   55|   CERTBITS=4096

Error: SHELLCHECK_WARNING (CWE-140): [#def20]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:53:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   51|   
#   52|   FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|-> FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   
#   55|   CERTBITS=4096

Error: SHELLCHECK_WARNING (CWE-140): [#def21]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:53:35: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   51|   
#   52|   FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|-> FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   
#   55|   CERTBITS=4096

Error: SHELLCHECK_WARNING (CWE-140): [#def22]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:53:45: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   51|   
#   52|   FAKESDA_LIST=( $FAKESDA $FAKESDA1 $FAKESDA2 $FAKESDA3 )
#   53|-> FAKEDM_LIST=( $FAKEDM_0 $FAKEDM_1 $FAKEDM_2 $FAKEDM_3 )
#   54|   
#   55|   CERTBITS=4096

Error: SHELLCHECK_WARNING (CWE-156): [#def23]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:80:49: warning[SC2046]: Quote this to prevent word splitting.
#   78|   ET_MAIL_RECIP=$(cat $HERE/../$ET_NAME | grep -E '^MAIL_RECIP = ' | sed -E -e 's/^MAIL_RECIP = "(.*)"$/\1/g')
#   79|   ESCROW_DIR=$HERE/escrows
#   80|-> ENCRYPTED_FAKESDA2_PACKET_RE="escrow$(re_escape $(echo -n $FAKESDA2 | sed -e s,/,-,g))-backup-passphrase-[[:alnum:]]{6}"
#   81|   COMPANY=company.com
#   82|   ALICE=alice@$COMPANY

Error: SHELLCHECK_WARNING (CWE-88): [#def24]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:135:14: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#  133|       echo "major minor  #blocks  name"
#  134|       echo ""
#  135|->     for P in ${FAKESDA_LIST[@]}; do
#  136|         T=${P##*/}
#  137|         N=${T//[a-z]/}; N=${N:-0}

Error: SHELLCHECK_WARNING (CWE-88): [#def25]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:140:14: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#  138|         echo "   8        ${N}         ${NBLOCKS} ${T}"
#  139|       done
#  140|->     for P in ${FAKEDM_LIST[@]}; do
#  141|         T=${P##*/}
#  142|         N=${T//[a-z-]/}

Error: SHELLCHECK_WARNING (CWE-670): [#def26]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:171:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  169|   # Prepare test environment.
#  170|   function setup() {
#  171|->   banner "::$FUNCNAME"
#  172|     runcmd "Creating $ESCROW_DIR" \
#  173|            "mkdir -p $ESCROW_DIR"

Error: SHELLCHECK_WARNING (CWE-88): [#def27]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:200:12: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#  198|     runcmd "- creating fake volume_key" \
#  199|            "create_fake_script $VOLUME_KEY 1"
#  200|->   for P in ${FAKESDA_LIST[@]}; do
#  201|       runcmd "- copying $TEST_IMG_BK to $P" \
#  202|              "cp $TEST_IMG_BK $P"

Error: SHELLCHECK_WARNING (CWE-88): [#def28]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:204:12: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#  202|              "cp $TEST_IMG_BK $P"
#  203|     done
#  204|->   for P in ${FAKEDM_LIST[@]}; do
#  205|       runcmd "- copying $TEST_IMG_BK to $P" \
#  206|              "cp $TEST_IMG_BK $P"

Error: SHELLCHECK_WARNING (CWE-670): [#def29]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:219:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  217|     local C
#  218|   
#  219|->   banner "::$FUNCNAME"
#  220|     # Run the test:
#  221|     C="$HERE/../$ET_NAME -V --only-stdout"

Error: SHELLCHECK_WARNING (CWE-670): [#def30]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:239:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  237|     local C
#  238|   
#  239|->   banner "::$FUNCNAME"
#  240|     # Run the test:
#  241|     C="$HERE/../$ET_NAME --only-stdout -f $TEST_PACKET --foo -c $CERT --bar baz"

Error: SHELLCHECK_WARNING (CWE-670): [#def31]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:259:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  257|     local C
#  258|   
#  259|->   banner "::$FUNCNAME"
#  260|     # Run the test:
#  261|     C="$HERE/../$ET_NAME -v -f $TEST_PACKET -c $CERT --only-stdout"

Error: SHELLCHECK_WARNING (CWE-670): [#def32]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:279:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  277|     local C
#  278|   
#  279|->   banner "::$FUNCNAME"
#  280|     # Run the test:
#  281|     C="$HERE/../$ET_NAME -v --only-stdout"

Error: SHELLCHECK_WARNING (CWE-670): [#def33]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:299:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  297|     local C
#  298|   
#  299|->   banner "::$FUNCNAME"
#  300|     # Run the test:
#  301|     C="$HERE/../$ET_NAME -v -I $BAD_HOST -f $TEST_PACKET --only-stdout"

Error: SHELLCHECK_WARNING (CWE-670): [#def34]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:320:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  318|     local C
#  319|   
#  320|->   banner "::$FUNCNAME"
#  321|     # Run the test:
#  322|     C="$HERE/../$ET_NAME -v -I $GOOD_HOST:$BAD_PORT -f $TEST_PACKET --only-stdout"

Error: SHELLCHECK_WARNING (CWE-670): [#def35]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:341:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  339|     local C
#  340|   
#  341|->   banner "::$FUNCNAME"
#  342|     # Clean previous garbage:
#  343|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def36]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:392:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  390|     local C
#  391|   
#  392|->   banner "::$FUNCNAME"
#  393|     # Clean previous garbage:
#  394|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def37]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:430:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  428|     local C
#  429|   
#  430|->   banner "::$FUNCNAME"
#  431|     # Clean previous garbage:
#  432|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def38]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:473:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  471|     local C
#  472|   
#  473|->   banner "::$FUNCNAME"
#  474|     # Clean previous garbage:
#  475|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def39]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:511:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  509|     local C
#  510|   
#  511|->   banner "::$FUNCNAME"
#  512|     # Clean previous garbage:
#  513|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def40]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:555:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  553|     local C
#  554|   
#  555|->   banner "::$FUNCNAME"
#  556|     # Clean previous garbage:
#  557|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def41]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:597:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  595|     local C
#  596|   
#  597|->   banner "::$FUNCNAME"
#  598|     # Clean previous garbage:
#  599|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def42]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:641:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  639|     local C
#  640|   
#  641|->   banner "::$FUNCNAME"
#  642|     # Clean previous garbage:
#  643|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def43]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:684:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  682|     local C
#  683|   
#  684|->   banner "::$FUNCNAME"
#  685|     # Clean previous garbage:
#  686|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-140): [#def44]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:714:11: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#  712|     assert_linematch $STDOUT "Using escrow packet $(re_escape $ESCROW_DIR)/$ENCRYPTED_FAKESDA2_PACKET_RE\."
#  713|     # Check that a packet was created:
#  714|->   FILES=( $(enumerate_files $ESCROW_DIR "$ENCRYPTED_FAKESDA2_PACKET_RE") )
#  715|     assert_equal ${#FILES[@]} 1 "number of files in $ESCROW_DIR matching $ENCRYPTED_FAKESDA2_PACKET_RE is 1"
#  716|     # Check that no email was received:

Error: SHELLCHECK_WARNING (CWE-670): [#def45]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:730:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  728|     local C
#  729|   
#  730|->   banner "::$FUNCNAME"
#  731|     # Clean previous garbage:
#  732|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-140): [#def46]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:765:11: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#  763|     assert_linematch $STDOUT "$(re_escape "Remove the escrow packet after receiving confirmation e-mail.")"
#  764|     # Check the packet:
#  765|->   FILES=( $(enumerate_files $ESCROW_DIR "$ENCRYPTED_FAKESDA2_PACKET_RE") )
#  766|     assert_equal ${#FILES[@]} 1 "number of files in $ESCROW_DIR matching $ENCRYPTED_FAKESDA2_PACKET_RE is 1"
#  767|     CHECKSUM=$(md5sum ${FILES[0]} | sed -E -e 's/^([0-9A-Fa-f]+).*$/\1/g')

Error: SHELLCHECK_WARNING (CWE-670): [#def47]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:786:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  784|     local C
#  785|   
#  786|->   banner "::$FUNCNAME"
#  787|     # Clean previous garbage:
#  788|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def48]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:838:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  836|     local C
#  837|   
#  838|->   banner "::$FUNCNAME"
#  839|     # Clean previous garbage:
#  840|     kill_smtp_server

Error: SHELLCHECK_WARNING (CWE-670): [#def49]
/usr/share/doc/volume_key/contrib/email/tests/test-escrow-transit:907:13: warning[SC2128]: Expanding an array without an index only gives the first element.
#  905|   # Remove auxiliary files and processes.
#  906|   function cleanup() {
#  907|->   banner "::$FUNCNAME"
#  908|     kill_smtp_server
#  909|     sweep_escrow_transit_products

Error: SHELLCHECK_WARNING (CWE-758): [#def50]
/usr/share/doc/volume_key/contrib/email/tests/utest.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> #
#    2|   # Common test utilities.
#    3|   #

Error: SHELLCHECK_WARNING (CWE-398): [#def51]
/usr/share/doc/volume_key/contrib/email/tests/utest.sh:155:12: warning[SC2045]: Iterating over ls output is fragile. Use globs.
#  153|   # Enumerate all files in DIR that matches PATTERN.
#  154|   function enumerate_files() {
#  155|->   for f in $(ls -a1 $1); do
#  156|       if [[ $f =~ ^$2$ ]]; then
#  157|         echo "$1/$f"

Error: SHELLCHECK_WARNING (CWE-88): [#def52]
/usr/share/doc/volume_key/contrib/email/tests/utest.sh:379:12: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#  377|     dophase setup
#  378|     [[ $S -ne 0 ]] && exit 0
#  379|->   for t in ${TESTS[@]}; do
#  380|       dophase $t
#  381|     done

Error: COMPILER_WARNING (CWE-477): [#def53]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'encrypt_asymmetric'
volume_key-0.3.12/lib/crypto.c:192:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  192 |   res = g_memdup (dest_item.data, dest_item.len);
#      |   ^~~
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
volume_key-0.3.12/lib/crypto.c:27: included_from: Included from here.
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  190|   
#  191|     *res_size = dest_item.len;
#  192|->   res = g_memdup (dest_item.data, dest_item.len);
#  193|     PORT_FreeArena (res_arena, PR_FALSE);
#  194|     NSS_CMSMessage_Destroy (cmsg);

Error: COMPILER_WARNING (CWE-477): [#def54]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'decrypt_asymmetric'
volume_key-0.3.12/lib/crypto.c:237:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  237 |   res = g_memdup (dest->data, dest->len);
#      |   ^~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  235|         goto err_cmsg;
#  236|       }
#  237|->   res = g_memdup (dest->data, dest->len);
#  238|     *res_size = dest->len;
#  239|   

Error: COMPILER_WARNING (CWE-477): [#def55]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'wrap_asymmetric'
volume_key-0.3.12/lib/crypto.c:343:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  343 |   *wrapped_secret = g_memdup (wrapped_secret_item.data,
#      |   ^
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  341|     PK11_FreeSymKey (secret_key);
#  342|   
#  343|->   *wrapped_secret = g_memdup (wrapped_secret_item.data,
#  344|   			      wrapped_secret_item.len);
#  345|     *wrapped_secret_size = wrapped_secret_item.len;

Error: COMPILER_WARNING (CWE-477): [#def56]
volume_key-0.3.12/lib/crypto.c:347:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  347 |   *issuer = g_memdup (isn->derIssuer.data, isn->derIssuer.len);
#      |   ^
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  345|     *wrapped_secret_size = wrapped_secret_item.len;
#  346|     SECITEM_FreeItem (&wrapped_secret_item, PR_FALSE);
#  347|->   *issuer = g_memdup (isn->derIssuer.data, isn->derIssuer.len);
#  348|     *issuer_size = isn->derIssuer.len;
#  349|     *sn = g_memdup (isn->serialNumber.data, isn->serialNumber.len);

Error: COMPILER_WARNING (CWE-477): [#def57]
volume_key-0.3.12/lib/crypto.c:349:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  349 |   *sn = g_memdup (isn->serialNumber.data, isn->serialNumber.len);
#      |   ^
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  347|     *issuer = g_memdup (isn->derIssuer.data, isn->derIssuer.len);
#  348|     *issuer_size = isn->derIssuer.len;
#  349|->   *sn = g_memdup (isn->serialNumber.data, isn->serialNumber.len);
#  350|     *sn_size = isn->serialNumber.len;
#  351|     PORT_FreeArena (isn_arena, PR_FALSE);

Error: COMPILER_WARNING (CWE-477): [#def58]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'unwrap_asymmetric'
volume_key-0.3.12/lib/crypto.c:432:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  432 |   ret = g_memdup (clear_secret_item->data, clear_secret_item->len);
#      |   ^~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  430|       }
#  431|     clear_secret_item = PK11_GetKeyData (secret_key);
#  432|->   ret = g_memdup (clear_secret_item->data, clear_secret_item->len);
#  433|     *clear_secret_size = clear_secret_item->len;
#  434|     PK11_FreeSymKey (secret_key);

Error: COMPILER_WARNING (CWE-477): [#def59]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'wrap_symmetric'
volume_key-0.3.12/lib/crypto.c:506:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  506 |   *iv = g_memdup (iv_data, iv_data_size);
#      |   ^
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  504|   
#  505|     iv_data = PK11_IVFromParam (mechanism, wrapping_param, &iv_data_size);
#  506|->   *iv = g_memdup (iv_data, iv_data_size);
#  507|     *iv_size = iv_data_size;
#  508|     SECITEM_FreeItem (wrapping_param, PR_TRUE);

Error: COMPILER_WARNING (CWE-477): [#def60]
volume_key-0.3.12/lib/crypto.c:510:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  510 |   *wrapped_secret = g_memdup (wrapped_secret_item.data,
#      |   ^
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  508|     SECITEM_FreeItem (wrapping_param, PR_TRUE);
#  509|   
#  510|->   *wrapped_secret = g_memdup (wrapped_secret_item.data,
#  511|   			      wrapped_secret_item.len);
#  512|     *wrapped_secret_size = wrapped_secret_item.len;

Error: COMPILER_WARNING (CWE-477): [#def61]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'unwrap_symmetric'
volume_key-0.3.12/lib/crypto.c:565:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  565 |   ret = g_memdup (clear_secret_item->data, clear_secret_item->len);
#      |   ^~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  563|       }
#  564|     clear_secret_item = PK11_GetKeyData (secret_key);
#  565|->   ret = g_memdup (clear_secret_item->data, clear_secret_item->len);
#  566|     *clear_secret_size = clear_secret_item->len;
#  567|     PK11_FreeSymKey (secret_key);

Error: COMPILER_WARNING (CWE-477): [#def62]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'encrypt_with_passphrase'
volume_key-0.3.12/lib/crypto.c:721:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  721 |   res = g_memdup (gpgme_res, *res_size);
#      |   ^~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  719|         goto err_ctx;
#  720|       }
#  721|->   res = g_memdup (gpgme_res, *res_size);
#  722|     gpgme_free (gpgme_res);
#  723|   

Error: COMPILER_WARNING (CWE-477): [#def63]
volume_key-0.3.12/lib/crypto.c: scope_hint: In function 'decrypt_with_passphrase'
volume_key-0.3.12/lib/crypto.c:777:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  777 |   res = g_memdup (gpgme_res, *res_size);
#      |   ^~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  775|         goto err_ctx;
#  776|       }
#  777|->   res = g_memdup (gpgme_res, *res_size);
#  778|     gpgme_free (gpgme_res);
#  779|   

Error: COMPILER_WARNING (CWE-477): [#def64]
volume_key-0.3.12/lib/kmip.c: scope_hint: In function 'kmip_key_value_set_bytes'
volume_key-0.3.12/lib/kmip.c:101:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  101 |   value->v.bytes.data = g_memdup (bytes, len);
#      |   ^~~~~
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
volume_key-0.3.12/lib/kmip.c:25: included_from: Included from here.
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#   99|     kmip_key_value_free_v (value);
#  100|     value->type = KMIP_KEY_VALUE_BYTES;
#  101|->   value->v.bytes.data = g_memdup (bytes, len);
#  102|     value->v.bytes.len = len;
#  103|   }

Error: COMPILER_WARNING (CWE-477): [#def65]
volume_key-0.3.12/lib/kmip.c: scope_hint: In function 'kmip_key_value_set_symmetric_key'
volume_key-0.3.12/lib/kmip.c:113:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  113 |   value->v.key->data = g_memdup (key, len);
#      |   ^~~~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  111|     value->type = KMIP_KEY_VALUE_SYMMETRIC_KEY;
#  112|     value->v.key = g_new (struct kmip_symmetric_key, 1);
#  113|->   value->v.key->data = g_memdup (key, len);
#  114|     value->v.key->len = len;
#  115|   }

Error: COMPILER_WARNING (CWE-477): [#def66]
volume_key-0.3.12/lib/kmip.c: scope_hint: In function 'get_bytes'
volume_key-0.3.12/lib/kmip.c:923:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  923 |   *bytes = g_memdup (kmip->data, s);
#      |   ^
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  921|         return -1;
#  922|       }
#  923|->   *bytes = g_memdup (kmip->data, s);
#  924|     *size = s;
#  925|     kmip->data += s;

Error: CPPCHECK_WARNING (CWE-190): [#def67]
volume_key-0.3.12/lib/kmip.c:1225: error[integerOverflow]: Signed integer overflow for expression 'KMIP_WRAPPING_LIBVK_ENCRYPT_KEY_ONLY+1'.
# 1223|         || get_enum (&k, &res->method, KMIP_TAG_WRAPPING_METHOD,
# 1224|   		   KMIP_WRAPPING_LIBVK_ENCRYPT_KEY_ONLY,
# 1225|-> 		   KMIP_WRAPPING_LIBVK_ENCRYPT_KEY_ONLY + 1, error) != 0)
# 1226|       goto err;
# 1227|     if (kmip_next_tag_is (&k, KMIP_TAG_ENCRYPTION_KEY_INFO))

Error: CLANG_WARNING: [#def68]
volume_key-0.3.12/lib/kmip.c:1487:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'res'
# 1485|    err:
# 1486|     kmip_libvk_packet_free (res);
# 1487|->   return -1;
# 1488|   }
# 1489|   

Error: CLANG_WARNING: [#def69]
volume_key-0.3.12/lib/kmip.c:1607:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'kmip.data'
# 1605|     if (kmip_encode_libvk_packet (&kmip, KMIP_TAG_LIBVK_PACKET, packet,
# 1606|   				error) != 0)
# 1607|->     g_return_val_if_reached (NULL);
# 1608|     *size = kmip.size;
# 1609|     return kmip.data;

Error: COMPILER_WARNING (CWE-477): [#def70]
volume_key-0.3.12/lib/kmip.c: scope_hint: In function 'kmip_libvk_packet_wrap_secret_symmetric'
volume_key-0.3.12/lib/kmip.c:1887:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
# 1887 |   key_block->wrapping->iv = g_memdup (iv, iv_len);
#      |   ^~~~~~~~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
# 1885|     key_block->wrapping->method = KMIP_WRAPPING_LIBVK_ENCRYPT_KEY_ONLY;
# 1886|     key_block->wrapping->encryption_key = encryption_key;
# 1887|->   key_block->wrapping->iv = g_memdup (iv, iv_len);
# 1888|     key_block->wrapping->iv_len = iv_len;
# 1889|   

Error: CLANG_WARNING: [#def71]
volume_key-0.3.12/lib/kmip.c:2101:2: warning[deadcode.DeadStores]: Value stored to 'data' is never read
# 2099|   	t = g_locale_from_utf8 ((const gchar *)data, data_size, &bytes_read,
# 2100|   				NULL, NULL);
# 2101|-> 	data += data_size;
# 2102|   	consumed += data_size;
# 2103|   	if (t == NULL)

Error: COMPILER_WARNING: [#def72]
volume_key-0.3.12/lib/libvolume_key.c:49:47: warning[-Wunterminated-string-initialization]: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (12 chars into 11 available)
#   49 | static const unsigned char packet_magic[11] = "\0volume_key";
#      |                                               ^~~~~~~~~~~~~~
#   47|   };
#   48|   
#   49|-> static const unsigned char packet_magic[11] = "\0volume_key";
#   50|   
#   51|   /* Prepend packet header with FORMAT to KMIP with KMIP_SIZE.

Error: COMPILER_WARNING (CWE-477): [#def73]
volume_key-0.3.12/lib/volume.c: scope_hint: In function 'volume_create_data_encryption_key_packet'
volume_key-0.3.12/lib/volume.c:86:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#   86 |   key_value->v.key->data = g_memdup (key, key_bytes);
#      |   ^~~~~~~~~
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
volume_key-0.3.12/lib/volume.c:25: included_from: Included from here.
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#   84|     key_value->type = KMIP_KEY_VALUE_SYMMETRIC_KEY;
#   85|     key_value->v.key = g_new (struct kmip_symmetric_key, 1);
#   86|->   key_value->v.key->data = g_memdup (key, key_bytes);
#   87|     key_value->v.key->len = key_bytes;
#   88|     key_value->attributes = g_ptr_array_new ();

Error: COMPILER_WARNING (CWE-477): [#def74]
volume_key-0.3.12/lib/volume.c: scope_hint: In function 'volume_create_passphrase_packet'
volume_key-0.3.12/lib/volume.c:132:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  132 |   key_value->v.bytes.data = g_memdup (passphrase, size);
#      |   ^~~~~~~~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  130|     key_value = g_new (struct kmip_key_value, 1);
#  131|     key_value->type = KMIP_KEY_VALUE_BYTES;
#  132|->   key_value->v.bytes.data = g_memdup (passphrase, size);
#  133|     key_value->v.bytes.len = size;
#  134|     key_value->attributes = g_ptr_array_new ();

Error: CLANG_WARNING: [#def75]
volume_key-0.3.12/lib/volume.c:284:7: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
#  282|     g_return_if_fail (vol != NULL);
#  283|   
#  284|->   if (strcmp (vol->format, LIBVK_VOLUME_FORMAT_LUKS) == 0
#  285|         && vol->v.luks != NULL)
#  286|       luks_volume_free (vol->v.luks);

Error: COMPILER_WARNING (CWE-477): [#def76]
volume_key-0.3.12/lib/volume_luks.c: scope_hint: In function 'luks_replace_key'
volume_key-0.3.12/lib/volume_luks.c:157:3: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  157 |   luks->key = g_memdup (key, luks->key_bytes);
#      |   ^~~~
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
volume_key-0.3.12/lib/volume_luks.c:24: included_from: Included from here.
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  155|         g_free (luks->key);
#  156|       }
#  157|->   luks->key = g_memdup (key, luks->key_bytes);
#  158|   }
#  159|   

Error: COMPILER_WARNING: [#def77]
volume_key-0.3.12/lib/volume_luks.c: scope_hint: In function 'luks_volume_dump_properties'
volume_key-0.3.12/lib/volume_luks.c:245:35: warning[-Wunterminated-string-initialization]: initializer-string for array of 'char' truncates NUL terminator but destination lacks 'nonstring' attribute (17 chars into 16 available)
#  245 |       static const char hex[16] = "0123456789ABCDEF";
#      |                                   ^~~~~~~~~~~~~~~~~~
#  243|     if (with_secrets != 0 && luks->key != NULL)
#  244|       {
#  245|->       static const char hex[16] = "0123456789ABCDEF";
#  246|   
#  247|         char *s;

Error: CLANG_WARNING: [#def78]
volume_key-0.3.12/lib/volume_luks.c:452:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'key'
#  450|         if (r < 0)
#  451|   	{
#  452|-> 	  error_from_cryptsetup (error, LIBVK_ERROR_PACKET_VOLUME_MISMATCH, r,
#  453|   				 last_log_entry);
#  454|   	  g_prefix_error (error, _("LUKS passphrase in packet is invalid: "));

Error: COMPILER_WARNING (CWE-477): [#def79]
volume_key-0.3.12/lib/volume_luks.c: scope_hint: In function 'luks_parse_escrow_packet'
volume_key-0.3.12/lib/volume_luks.c:794:11: warning[-Wdeprecated-declarations]: 'g_memdup' is deprecated: Use 'g_memdup2' instead
#  794 |           vol->v.luks->key = g_memdup (key_value->v.key->data,
#      |           ^~~
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  338 | gpointer              g_memdup         (gconstpointer mem,
#      |                       ^~~~~~~~
#  792|   	      goto err;
#  793|   	    }
#  794|-> 	  vol->v.luks->key = g_memdup (key_value->v.key->data,
#  795|   				       key_value->v.key->len);
#  796|   	}

Error: CPPCHECK_WARNING (CWE-457): [#def80]
volume_key-0.3.12/python/python3/volume_key_wrap.c:705: warning[uninitvar]: Uninitialized variable: buff
#  703|       *r = 0;
#  704|     }
#  705|->   return buff;
#  706|   }
#  707|   

Error: CPPCHECK_WARNING (CWE-476): [#def81]
volume_key-0.3.12/python/python3/volume_key_wrap.c:788: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: newstr
#  786|     PyBytes_AsStringAndSize(str, &cstr, &len);
#  787|     newstr = (char *) malloc(len+1);
#  788|->   memcpy(newstr, cstr, len+1);
#  789|     Py_XDECREF(str);
#  790|     return newstr;

Error: GCC_ANALYZER_WARNING (CWE-126): [#def82]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1166:57: warning[-Wanalyzer-out-of-bounds]: buffer over-read
volume_key-0.3.12/python/python3/volume_key_wrap.c:5952:15: note: in expansion of macro 'SWIG_InternalNewPointerObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6034:1: note: in expansion of macro 'SWIG_init'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6151:3: note: in expansion of macro 'SWIG_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1422:3: note: in expansion of macro 'Py_INCREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5963:9: note: in expansion of macro 'Py_DECREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5952:15: note: in expansion of macro 'SWIG_InternalNewPointerObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1166:57: note: read of 8 bytes from after the end of 'swig_const_table'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5952:15: note: in expansion of macro 'SWIG_InternalNewPointerObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1166:57: note: valid subscripts for 'swig_const_table' are '[0]' to '[0]'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5952:15: note: in expansion of macro 'SWIG_InternalNewPointerObj'
# 1164|   #endif
# 1165|   
# 1166|-> #define SWIG_InternalNewPointerObj(ptr, type, flags)	SWIG_Python_NewPointerObj(NULL, ptr, type, flags)
# 1167|   
# 1168|   #define SWIG_CheckImplicit(ty)                          SWIG_Python_CheckImplicit(ty) 

Error: GCC_ANALYZER_WARNING (CWE-126): [#def83]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:57: warning[-Wanalyzer-out-of-bounds]: buffer over-read
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6034:1: note: in expansion of macro 'SWIG_init'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6151:3: note: in expansion of macro 'SWIG_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1422:3: note: in expansion of macro 'Py_INCREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5963:9: note: in expansion of macro 'Py_DECREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:57: note: read of 8 bytes from after the end of 'swig_const_table'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:57: note: valid subscripts for 'swig_const_table' are '[0]' to '[0]'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
# 1172|   /* for raw packed data */
# 1173|   #define SWIG_ConvertPacked(obj, ptr, sz, ty)            SWIG_Python_ConvertPacked(obj, ptr, sz, ty)
# 1174|-> #define SWIG_NewPackedObj(ptr, sz, type)                SWIG_Python_NewPackedObj(ptr, sz, type)
# 1175|   
# 1176|   /* for class or struct pointers */

Error: CPPCHECK_WARNING (CWE-476): [#def84]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1461: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1459|       SwigPyClientData *data = (SwigPyClientData *)malloc(sizeof(SwigPyClientData));
# 1460|       /* the klass element */
# 1461|->     data->klass = obj;
# 1462|       Py_INCREF(data->klass);
# 1463|       /* the newraw method and newargs arguments used to create a new raw instance */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def85]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SwigPyClientData_New'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1461:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'data'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5366:51: note: in expansion of macro 'SWIG_NewClientData'
# 1459|       SwigPyClientData *data = (SwigPyClientData *)malloc(sizeof(SwigPyClientData));
# 1460|       /* the klass element */
# 1461|->     data->klass = obj;
# 1462|       Py_INCREF(data->klass);
# 1463|       /* the newraw method and newargs arguments used to create a new raw instance */

Error: CPPCHECK_WARNING (CWE-476): [#def86]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1462: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1460|       /* the klass element */
# 1461|       data->klass = obj;
# 1462|->     Py_INCREF(data->klass);
# 1463|       /* the newraw method and newargs arguments used to create a new raw instance */
# 1464|       if (PyClass_Check(obj)) {

Error: CPPCHECK_WARNING (CWE-476): [#def87]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1484: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1482|       }
# 1483|       /* the destroy method, aka as the C++ delete method */
# 1484|->     data->destroy = PyObject_GetAttrString(data->klass, (char *)"__swig_destroy__");
# 1485|       if (PyErr_Occurred()) {
# 1486|         PyErr_Clear();

Error: CPPCHECK_WARNING (CWE-476): [#def88]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1489: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1487|         data->destroy = 0;
# 1488|       }
# 1489|->     if (data->destroy) {
# 1490|         int flags;
# 1491|         Py_INCREF(data->destroy);

Error: CPPCHECK_WARNING (CWE-476): [#def89]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1501: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1499|         data->delargs = 0;
# 1500|       }
# 1501|->     data->implicitconv = 0;
# 1502|       data->pytype = 0;
# 1503|       return data;

Error: CPPCHECK_WARNING (CWE-476): [#def90]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1502: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1500|       }
# 1501|       data->implicitconv = 0;
# 1502|->     data->pytype = 0;
# 1503|       return data;
# 1504|     }

Error: COMPILER_WARNING (CWE-843): [#def91]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1819:23: warning[-Wcast-function-type]: cast between incompatible function types from 'PyObject * (*)(PyObject *)' {aka 'struct _object * (*)(struct _object *)'} to 'PyObject * (*)(PyObject *, PyObject *)' {aka 'struct _object * (*)(struct _object *, struct _object *)'}
# 1819 |   {(char *)"disown",  (PyCFunction)SwigPyObject_disown,  METH_NOARGS,  (char *)"releases ownership of the pointer"},
#      |                       ^
# 1817|   static PyMethodDef
# 1818|   swigobject_methods[] = {
# 1819|->   {(char *)"disown",  (PyCFunction)SwigPyObject_disown,  METH_NOARGS,  (char *)"releases ownership of the pointer"},
# 1820|     {(char *)"acquire", (PyCFunction)SwigPyObject_acquire, METH_NOARGS,  (char *)"acquires ownership of the pointer"},
# 1821|     {(char *)"own",     (PyCFunction)SwigPyObject_own,     METH_VARARGS, (char *)"returns/sets ownership of the pointer"},

Error: COMPILER_WARNING (CWE-843): [#def92]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1820:23: warning[-Wcast-function-type]: cast between incompatible function types from 'PyObject * (*)(PyObject *)' {aka 'struct _object * (*)(struct _object *)'} to 'PyObject * (*)(PyObject *, PyObject *)' {aka 'struct _object * (*)(struct _object *, struct _object *)'}
# 1820 |   {(char *)"acquire", (PyCFunction)SwigPyObject_acquire, METH_NOARGS,  (char *)"acquires ownership of the pointer"},
#      |                       ^
# 1818|   swigobject_methods[] = {
# 1819|     {(char *)"disown",  (PyCFunction)SwigPyObject_disown,  METH_NOARGS,  (char *)"releases ownership of the pointer"},
# 1820|->   {(char *)"acquire", (PyCFunction)SwigPyObject_acquire, METH_NOARGS,  (char *)"acquires ownership of the pointer"},
# 1821|     {(char *)"own",     (PyCFunction)SwigPyObject_own,     METH_VARARGS, (char *)"returns/sets ownership of the pointer"},
# 1822|     {(char *)"append",  (PyCFunction)SwigPyObject_append,  METH_O,       (char *)"appends another 'this' object"},

Error: COMPILER_WARNING (CWE-843): [#def93]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1823:23: warning[-Wcast-function-type]: cast between incompatible function types from 'PyObject * (*)(PyObject *)' {aka 'struct _object * (*)(struct _object *)'} to 'PyObject * (*)(PyObject *, PyObject *)' {aka 'struct _object * (*)(struct _object *, struct _object *)'}
# 1823 |   {(char *)"next",    (PyCFunction)SwigPyObject_next,    METH_NOARGS,  (char *)"returns the next 'this' object"},
#      |                       ^
# 1821|     {(char *)"own",     (PyCFunction)SwigPyObject_own,     METH_VARARGS, (char *)"returns/sets ownership of the pointer"},
# 1822|     {(char *)"append",  (PyCFunction)SwigPyObject_append,  METH_O,       (char *)"appends another 'this' object"},
# 1823|->   {(char *)"next",    (PyCFunction)SwigPyObject_next,    METH_NOARGS,  (char *)"returns the next 'this' object"},
# 1824|     {(char *)"__repr__",(PyCFunction)SwigPyObject_repr,    METH_NOARGS,  (char *)"returns object representation"},
# 1825|     {0, 0, 0, 0}  

Error: COMPILER_WARNING (CWE-843): [#def94]
volume_key-0.3.12/python/python3/volume_key_wrap.c:1824:23: warning[-Wcast-function-type]: cast between incompatible function types from 'PyObject * (*)(SwigPyObject *)' {aka 'struct _object * (*)(SwigPyObject *)'} to 'PyObject * (*)(PyObject *, PyObject *)' {aka 'struct _object * (*)(struct _object *, struct _object *)'}
# 1824 |   {(char *)"__repr__",(PyCFunction)SwigPyObject_repr,    METH_NOARGS,  (char *)"returns object representation"},
#      |                       ^
# 1822|     {(char *)"append",  (PyCFunction)SwigPyObject_append,  METH_O,       (char *)"appends another 'this' object"},
# 1823|     {(char *)"next",    (PyCFunction)SwigPyObject_next,    METH_NOARGS,  (char *)"returns the next 'this' object"},
# 1824|->   {(char *)"__repr__",(PyCFunction)SwigPyObject_repr,    METH_NOARGS,  (char *)"returns object representation"},
# 1825|     {0, 0, 0, 0}  
# 1826|   };

Error: COMPILER_WARNING (CWE-909): [#def95]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SwigPyObject_TypeOnce'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1982:5: warning[-Wmissing-field-initializers]: missing initializer for field 'tp_vectorcall' of 'PyTypeObject' {aka 'const struct _typeobject'}
# 1982 |     };
#      |     ^
/usr/include/python3.14/object.h:771: included_from: Included from here.
/usr/include/python3.14/Python.h:81: included_from: Included from here.
volume_key-0.3.12/python/python3/volume_key_wrap.c:149: included_from: Included from here.
/usr/include/python3.14/cpython/object.h:231:20: note: 'tp_vectorcall' declared here
#  231 |     vectorcallfunc tp_vectorcall;
#      |                    ^~~~~~~~~~~~~
# 1980|         0                                     /* tp_next */
# 1981|   #endif
# 1982|->     };
# 1983|       swigpyobject_type = tmp;
# 1984|       type_init = 1;

Error: COMPILER_WARNING (CWE-909): [#def96]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SwigPyPacked_TypeOnce'
volume_key-0.3.12/python/python3/volume_key_wrap.c:2169:5: warning[-Wmissing-field-initializers]: missing initializer for field 'tp_vectorcall' of 'PyTypeObject' {aka 'const struct _typeobject'}
# 2169 |     };
#      |     ^
/usr/include/python3.14/cpython/object.h:231:20: note: 'tp_vectorcall' declared here
#  231 |     vectorcallfunc tp_vectorcall;
#      |                    ^~~~~~~~~~~~~
# 2167|         0                                     /* tp_next */
# 2168|   #endif
# 2169|->     };
# 2170|       swigpypacked_type = tmp;
# 2171|       type_init = 1;

Error: COMPILER_WARNING (CWE-694): [#def97]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_NewShadowInstance'
volume_key-0.3.12/python/python3/volume_key_wrap.c:2483:65: warning[-Wshadow]: declaration of 'swig_this' shadows a global declaration
# 2483 | SWIG_Python_NewShadowInstance(SwigPyClientData *data, PyObject *swig_this)
#      |                                                       ~~~~~~~~~~^~~~~~~~~
volume_key-0.3.12/python/python3/volume_key_wrap.c:2224:18: note: shadowed declaration is here
# 2224 | static PyObject *swig_this = NULL;
#      |                  ^~~~~~~~~
# 2481|   
# 2482|   SWIGRUNTIME PyObject* 
# 2483|-> SWIG_Python_NewShadowInstance(SwigPyClientData *data, PyObject *swig_this)
# 2484|   {
# 2485|   #if (PY_VERSION_HEX >= 0x02020000)

Error: COMPILER_WARNING (CWE-694): [#def98]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_SetSwigThis'
volume_key-0.3.12/python/python3/volume_key_wrap.c:2558:51: warning[-Wshadow]: declaration of 'swig_this' shadows a global declaration
# 2558 | SWIG_Python_SetSwigThis(PyObject *inst, PyObject *swig_this)
#      |                                         ~~~~~~~~~~^~~~~~~~~
volume_key-0.3.12/python/python3/volume_key_wrap.c:2224:18: note: shadowed declaration is here
# 2224 | static PyObject *swig_this = NULL;
#      |                  ^~~~~~~~~
# 2556|   
# 2557|   SWIGRUNTIME void
# 2558|-> SWIG_Python_SetSwigThis(PyObject *inst, PyObject *swig_this)
# 2559|   {
# 2560|    PyObject *dict;

Error: COMPILER_WARNING (CWE-704): [#def99]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'PyString_AsStringAndSize'
volume_key-0.3.12/python/python3/volume_key_wrap.c:2998:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 2998 |   *buffer = b;
#      |           ^
# 2996|     if (b == NULL)
# 2997|       return -1;
# 2998|->   *buffer = b;
# 2999|     return 0;
# 3000|   }

Error: COMPILER_WARNING (CWE-909): [#def100]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'swig_varlink_type'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5893:7: warning[-Wmissing-field-initializers]: missing initializer for field 'tp_vectorcall' of 'PyTypeObject' {aka 'const struct _typeobject'}
# 5893 |       };
#      |       ^
/usr/include/python3.14/cpython/object.h:231:20: note: 'tp_vectorcall' declared here
#  231 |     vectorcallfunc tp_vectorcall;
#      |                    ^~~~~~~~~~~~~
# 5891|           0                                   /* tp_next */
# 5892|   #endif
# 5893|->       };
# 5894|         varlink_type = tmp;
# 5895|         type_init = 1;

Error: GCC_ANALYZER_WARNING (CWE-126): [#def101]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5949:29: warning[-Wanalyzer-out-of-bounds]: buffer over-read
volume_key-0.3.12/python/python3/volume_key_wrap.c:6034:1: note: in expansion of macro 'SWIG_init'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6151:3: note: in expansion of macro 'SWIG_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
/usr/include/python3.14/Python.h:82: included_from: Included from here.
volume_key-0.3.12/python/python3/volume_key_wrap.c:149: included_from: Included from here.
volume_key-0.3.12/python/python3/volume_key_wrap.c:1422:3: note: in expansion of macro 'Py_INCREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5963:9: note: in expansion of macro 'Py_DECREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5949:29: note: read of 4 bytes from after the end of 'swig_const_table'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5949:29: note: valid subscripts for 'swig_const_table' are '[0]' to '[0]'
# 5947|       PyObject *obj = 0;
# 5948|       size_t i;
# 5949|->     for (i = 0; constants[i].type; ++i) {
# 5950|         switch(constants[i].type) {
# 5951|         case SWIG_PY_POINTER:

Error: GCC_ANALYZER_WARNING (CWE-126): [#def102]
volume_key-0.3.12/python/python3/volume_key_wrap.c:5952:78: warning[-Wanalyzer-out-of-bounds]: buffer over-read
volume_key-0.3.12/python/python3/volume_key_wrap.c:1166:94: note: in definition of macro 'SWIG_InternalNewPointerObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6034:1: note: in expansion of macro 'SWIG_init'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6151:3: note: in expansion of macro 'SWIG_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1422:3: note: in expansion of macro 'Py_INCREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5963:9: note: in expansion of macro 'Py_DECREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1166:94: note: in definition of macro 'SWIG_InternalNewPointerObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5952:78: note: read of 8 bytes from after the end of 'swig_const_table'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1166:94: note: in definition of macro 'SWIG_InternalNewPointerObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5952:78: note: valid subscripts for 'swig_const_table' are '[0]' to '[0]'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1166:94: note: in definition of macro 'SWIG_InternalNewPointerObj'
# 5950|         switch(constants[i].type) {
# 5951|         case SWIG_PY_POINTER:
# 5952|->         obj = SWIG_InternalNewPointerObj(constants[i].pvalue, *(constants[i]).ptype,0);
# 5953|           break;
# 5954|         case SWIG_PY_BINARY:

Error: GCC_ANALYZER_WARNING (CWE-126): [#def103]
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:66: warning[-Wanalyzer-out-of-bounds]: buffer over-read
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:87: note: in definition of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6034:1: note: in expansion of macro 'SWIG_init'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6151:3: note: in expansion of macro 'SWIG_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1422:3: note: in expansion of macro 'Py_INCREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5963:9: note: in expansion of macro 'Py_DECREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:87: note: in definition of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:66: note: read of 8 bytes from after the end of 'swig_const_table'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:87: note: in definition of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:66: note: valid subscripts for 'swig_const_table' are '[0]' to '[0]'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:87: note: in definition of macro 'SWIG_NewPackedObj'
# 5953|           break;
# 5954|         case SWIG_PY_BINARY:
# 5955|->         obj = SWIG_NewPackedObj(constants[i].pvalue, constants[i].lvalue, *(constants[i].ptype));
# 5956|           break;
# 5957|         default:

Error: GCC_ANALYZER_WARNING (CWE-126): [#def104]
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:89: warning[-Wanalyzer-out-of-bounds]: buffer over-read
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:91: note: in definition of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6034:1: note: in expansion of macro 'SWIG_init'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5545:17: note: in expansion of macro 'SWIG_GetModule'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6151:3: note: in expansion of macro 'SWIG_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1422:3: note: in expansion of macro 'Py_INCREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:15: note: in expansion of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5963:9: note: in expansion of macro 'Py_DECREF'
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'SWIG_Python_InstallConstants'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:91: note: in definition of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:89: note: read of 8 bytes from after the end of 'swig_const_table'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:91: note: in definition of macro 'SWIG_NewPackedObj'
volume_key-0.3.12/python/python3/volume_key_wrap.c:5955:89: note: valid subscripts for 'swig_const_table' are '[0]' to '[0]'
volume_key-0.3.12/python/python3/volume_key_wrap.c:1174:91: note: in definition of macro 'SWIG_NewPackedObj'
# 5953|           break;
# 5954|         case SWIG_PY_BINARY:
# 5955|->         obj = SWIG_NewPackedObj(constants[i].pvalue, constants[i].lvalue, *(constants[i].ptype));
# 5956|           break;
# 5957|         default:

Error: COMPILER_WARNING: [#def105]
volume_key-0.3.12/python/python3/volume_key_wrap.c: scope_hint: In function 'PyInit__volume_key'
volume_key-0.3.12/python/python3/volume_key_wrap.c:6005:15: warning[-Wstringop-truncation]: '__strncpy_chk' output truncated before terminating nul copying 10 bytes from a string of the same length
# 6005 |               strncpy(buff, "swig_ptr: ", 10);
#      |               ^
# 6003|                 strncpy(buff, methods[i].ml_doc, ldoc);
# 6004|                 buff += ldoc;
# 6005|->               strncpy(buff, "swig_ptr: ", 10);
# 6006|                 buff += 10;
# 6007|                 SWIG_PackVoidPtr(buff, ptr, ty->name, lptr);

Error: COMPILER_WARNING (CWE-477): [#def106]
volume_key-0.3.12/src/volume_key.c: scope_hint: In function ‘read_batch_string’
volume_key-0.3.12/src/volume_key.c:390:3: warning[-Wdeprecated-declarations]: ‘g_memdup’ is deprecated: Use 'g_memdup2' instead
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
volume_key-0.3.12/src/volume_key.c:30: included_from: Included from here.
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  388|         return NULL;
#  389|       }
#  390|->   res = g_memdup (buf, len);
#  391|     free (buf);
#  392|     return res;

Error: CLANG_WARNING: [#def107]
volume_key-0.3.12/src/volume_key.c:438:7: warning[unix.Stream]: File position of the stream might be 'indeterminate' after a failed operation. Can cause undefined behavior
#  436|       {
#  437|         (void)tcsetattr (fileno (in_file), TCSAFLUSH, &otermios);
#  438|->       putc ('\n', out_file);
#  439|       }
#  440|   

Error: COMPILER_WARNING (CWE-477): [#def108]
volume_key-0.3.12/src/volume_key.c: scope_hint: In function ‘generic_ui_cb’
volume_key-0.3.12/src/volume_key.c:529:7: warning[-Wdeprecated-declarations]: ‘g_memdup’ is deprecated: Use 'g_memdup2' instead
/usr/include/glib-2.0/glib/gstrfuncs.h:338:23: note: declared here
#  527|   	  return NULL;
#  528|   	}
#  529|->       res = g_memdup (buf, len + 1);
#  530|         free (buf);
#  531|         return res;

Error: COMPILER_WARNING: [#def109]
volume_key-0.3.12/src/volume_key.c: scope_hint: In function ‘generate_random_passphrase’
volume_key-0.3.12/src/volume_key.c:778:35: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (65 chars into 64 available)
#  778 |   static const char charset[64] = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"
#      |                                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  776|     /* Keep the character set size a power of two to make sure all characters are
#  777|        equally likely. */
#  778|->   static const char charset[64] = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"
#  779|       "abcdefghijklmnopqrstuvwxyz./";
#  780|

Scan Properties

analyzer-version-clang21.1.6
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer15.2.1
analyzer-version-shellcheck0.11.0
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-228.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namevolume_key-0.3.12-29.fc44
store-results-to/tmp/tmpu7yujglx/volume_key-0.3.12-29.fc44.tar.xz
time-created2025-11-23 10:14:24
time-finished2025-11-23 10:16:23
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'clang,gcc,shellcheck,cppcheck' '-o' '/tmp/tmpu7yujglx/volume_key-0.3.12-29.fc44.tar.xz' '--gcc-analyze' '/tmp/tmpu7yujglx/volume_key-0.3.12-29.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9