Task #925 - nettle-3.10-2.fc41/scan-results.err
back to task #925download
Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/arctwo.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/blowfish-bcrypt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/blowfish.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: COMPILER_WARNING: nettle-3.10-build/nettle-3.10/conftest.s: scope_hint: Assembler messages nettle-3.10-build/nettle-3.10/conftest.s:2: Error: alignment not a power of 2 Error: COMPILER_WARNING: nettle-3.10-build/nettle-3.10/conftest.s: scope_hint: Assembler messages nettle-3.10-build/nettle-3.10/conftest.s:4: Error: unknown pseudo-op: `.def' Error: COMPILER_WARNING: nettle-3.10-build/nettle-3.10/conftest.s: scope_hint: Assembler messages nettle-3.10-build/nettle-3.10/conftest.s:4: Error: unrecognized symbol type "" Error: COMPILER_WARNING: nettle-3.10-build/nettle-3.10/conftest.s:5: Error: unknown pseudo-op: `.scl' Error: COMPILER_WARNING: nettle-3.10-build/nettle-3.10/conftest.s:6: Error: Missing symbol name in directive Error: COMPILER_WARNING: nettle-3.10-build/nettle-3.10/conftest.s:6: Error: unrecognized symbol type "32" Error: COMPILER_WARNING: nettle-3.10-build/nettle-3.10/conftest.s:7: Error: unknown pseudo-op: `.endef' Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/der-iterator.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/drbg-ctr-aes256.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/dsa-gen-params.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/eccdata.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/examples/hogweed-benchmark.c: scope_hint: In function ‘bench_eddsa_init’ nettle-3.10-build/nettle-3.10/examples/hogweed-benchmark.c:532:3: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(248)’ # 530| # 531| ctx = xalloc (sizeof(*ctx)); # 532|-> switch (size) { # 533| case 255: # 534| ctx->sign = ed25519_sha512_sign; Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/examples/hogweed-benchmark.c: scope_hint: In function ‘bench_curve_init’ nettle-3.10-build/nettle-3.10/examples/hogweed-benchmark.c:796:3: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(128)’ # 794| struct curve_ctx *ctx = xalloc (sizeof (*ctx)); # 795| knuth_lfib_init (&lfib, 17); # 796|-> switch (size) # 797| { # 798| case 255: Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/examples/io.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/examples/nettle-benchmark.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/examples/rsa-decrypt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING (CWE-457): nettle-3.10-build/nettle-3.10/examples/rsa-decrypt.c:246: error[uninitvar]: Uninitialized variable: &session # 244| mpz_clear(x); # 245| # 246|-> rsa_session_set_decrypt_key(&ctx, &session); # 247| # 248| if (!process_file(&ctx, Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/examples/rsa-encrypt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/examples/rsa-keygen.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/fat-x86_64.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/getopt.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-457): nettle-3.10-build/nettle-3.10/gosthash94.c: scope_hint: In function ‘gost_block_compress’ nettle-3.10-build/nettle-3.10/gosthash94.c:76:40: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘v[1]’ nettle-3.10-build/nettle-3.10/gosthash94.c:41: included_from: Included from here. nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’ nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’ nettle-3.10-build/nettle-3.10/macros.h:207:9: note: in expansion of macro ‘COMPRESS’ nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’ nettle-3.10-build/nettle-3.10/macros.h:207:9: note: in expansion of macro ‘COMPRESS’ nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’ nettle-3.10-build/nettle-3.10/gosthash94.c:275:25: note: in expansion of macro ‘LE_READ_UINT32’ # 74| # 75| /* w := u xor v */ # 76|-> w[0] = u[0] ^ v[0], w[1] = u[1] ^ v[1]; # 77| w[2] = u[2] ^ v[2], w[3] = u[3] ^ v[3]; # 78| w[4] = u[4] ^ v[4], w[5] = u[5] ^ v[5]; Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/knuth-lfib.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-122): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:10: included_from: Included from here. nettle-3.10-build/nettle-3.10/macros.h:162:8: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/macros.h:161:29: note: in definition of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ # 160| do { \ # 161| unsigned increment_i = (size) - 1; \ # 162|-> if (++(ctr)[increment_i] == 0) \ # 163| while (increment_i > 0 \ # 164| && ++(ctr)[--increment_i] == 0 ) \ Error: GCC_ANALYZER_WARNING (CWE-122): nettle-3.10-build/nettle-3.10/macros.h:162:16: warning[-Wanalyzer-out-of-bounds]: heap-based buffer over-read nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/macros.h:161:29: note: in definition of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ # └─────────────────┘ # ^ # 160| do { \ # 161| unsigned increment_i = (size) - 1; \ # 162|-> if (++(ctr)[increment_i] == 0) \ # 163| while (increment_i > 0 \ # 164| && ++(ctr)[--increment_i] == 0 ) \ Error: GCC_ANALYZER_WARNING (CWE-122): nettle-3.10-build/nettle-3.10/macros.h:164:14: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/macros.h:161:29: note: in definition of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ # 162| if (++(ctr)[increment_i] == 0) \ # 163| while (increment_i > 0 \ # 164|-> && ++(ctr)[--increment_i] == 0 ) \ # 165| ; \ # 166| } while (0) Error: GCC_ANALYZER_WARNING (CWE-122): nettle-3.10-build/nettle-3.10/macros.h:164:24: warning[-Wanalyzer-out-of-bounds]: heap-based buffer over-read nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/macros.h:161:29: note: in definition of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:698:5: note: in expansion of macro ‘INCREMENT’ # └─────────────────┘ # ^ # 162| if (++(ctr)[increment_i] == 0) \ # 163| while (increment_i > 0 \ # 164|-> && ++(ctr)[--increment_i] == 0 ) \ # 165| ; \ # 166| } while (0) Error: GCC_ANALYZER_WARNING (CWE-471): nettle-3.10-build/nettle-3.10/eccdata.c:43: included_from: Included from here. nettle-3.10-build/nettle-3.10/mini-gmp.c: scope_hint: In function ‘mpn_set_str_bits’ nettle-3.10-build/nettle-3.10/mini-gmp.c:1328:20: warning[-Wanalyzer-write-to-const]: write to ‘const’ object ‘dummy_limb’ nettle-3.10-build/nettle-3.10/mini-gmp.c:44: included_from: Included from here. nettle-3.10-build/nettle-3.10/mini-gmp.c:45: included_from: Included from here. nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4370:12: note: in expansion of macro ‘MPZ_REALLOC’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4370:12: note: in expansion of macro ‘MPZ_REALLOC’ nettle-3.10-build/nettle-3.10/mini-gmp.c:1412:26: note: declared here # 1326| if (shift == 0) # 1327| { # 1328|-> rp[rn++] = sp[j]; # 1329| shift += bits; # 1330| } Error: GCC_ANALYZER_WARNING (CWE-471): nettle-3.10-build/nettle-3.10/mini-gmp.c:1333:20: warning[-Wanalyzer-write-to-const]: write to ‘const’ object ‘dummy_limb’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4370:12: note: in expansion of macro ‘MPZ_REALLOC’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4370:12: note: in expansion of macro ‘MPZ_REALLOC’ nettle-3.10-build/nettle-3.10/mini-gmp.c:1412:26: note: declared here # 1331| else # 1332| { # 1333|-> rp[rn-1] |= (mp_limb_t) sp[j] << shift; # 1334| shift += bits; # 1335| if (shift >= GMP_LIMB_BITS) Error: GCC_ANALYZER_WARNING (CWE-471): nettle-3.10-build/nettle-3.10/mini-gmp.c:1339:26: warning[-Wanalyzer-write-to-const]: write to ‘const’ object ‘dummy_limb’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4331:26: note: in expansion of macro ‘gmp_xalloc’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4370:12: note: in expansion of macro ‘MPZ_REALLOC’ nettle-3.10-build/nettle-3.10/mini-gmp.c:4370:12: note: in expansion of macro ‘MPZ_REALLOC’ nettle-3.10-build/nettle-3.10/mini-gmp.c:1412:26: note: declared here # 1337| shift -= GMP_LIMB_BITS; # 1338| if (shift > 0) # 1339|-> rp[rn++] = (mp_limb_t) sp[j] >> (bits - shift); # 1340| } # 1341| } Error: CPPCHECK_WARNING (CWE-758): nettle-3.10-build/nettle-3.10/mini-gmp.c:1492: error[shiftTooManyBits]: Shifting 64-bit value by 64 bits is undefined behaviour # 1490| { # 1491| int LOCAL_GMP_LIMB_BITS = GMP_LIMB_BITS; # 1492|-> while (x >>= LOCAL_GMP_LIMB_BITS) # 1493| { # 1494| ++ r->_mp_size; Error: CPPCHECK_WARNING (CWE-758): nettle-3.10-build/nettle-3.10/mini-gmp.c:1614: error[shiftTooManyBits]: Shifting 64-bit value by 64 bits is undefined behaviour # 1612| n = GMP_MIN (n, 1 + (mp_size_t) (GMP_ULONG_BITS - 1) / GMP_LIMB_BITS); # 1613| while (--n >= 0) # 1614|-> r = (r << LOCAL_GMP_LIMB_BITS) + u->_mp_d[n]; # 1615| return r; # 1616| } Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/pgp-encode.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/rsa-keygen.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/sexp.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/sexp2dsa.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/sexp2rsa.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/testsuite/testutils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_aead’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*aead.context_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_aead’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*aead.digest_size)’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:841:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:842:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:843:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:13: included_from: Included from here. # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*armor.decode_context_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_armor’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*armor.encode_context_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher_cfb’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*cipher.block_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher_cfb’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*cipher.context_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_hash’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*hash.context_size)’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*hash.digest_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_mac’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*mac.context_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc((long unsigned int)*mac.digest_size)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(*armor.decode_length(ascii_length) + 1)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(*cipher.length + 1)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(*cipher.length)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(*cleartext.length + (long unsigned int)*aead.block_size + 18446744073709551615)’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:841:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:842:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:843:3: note: in expansion of macro ‘ASSERT’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher_cfb8’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(*cleartext.length + 1)’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:477:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:480:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:481:3: note: in expansion of macro ‘ASSERT’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(*cleartext.length)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(*digest.length)’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(ascii_length + 1)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:38:7: warning[-Wanalyzer-malloc-leak]: leak of ‘xalloc(length)’ # 36| { # 37| void *p = malloc(size); # 38|-> if (size && !p) # 39| { # 40| fprintf(stderr, "Virtual memory exhausted.\n"); Error: GCC_ANALYZER_WARNING (CWE-476): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘tstring_alloc’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:53:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xalloc(length + 24)’ # 51| { # 52| struct tstring *s = xalloc(sizeof(struct tstring) + length); # 53|-> s->length = length; # 54| s->next = tstring_first; # 55| /* NUL-terminate, for convenience. */ Error: COMPILER_WARNING (CWE-563): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘mark_bytes_undefined’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:144:30: warning[-Wunused-parameter]: unused parameter ‘size’ # 144 | mark_bytes_undefined (size_t size, const void *p) {} # | ~~~~~~~^~~~ # 142| #else # 143| void # 144|-> mark_bytes_undefined (size_t size, const void *p) {} # 145| void # 146| mark_bytes_defined (size_t size, const void *p) {} Error: COMPILER_WARNING (CWE-563): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:144:48: warning[-Wunused-parameter]: unused parameter ‘p’ # 144 | mark_bytes_undefined (size_t size, const void *p) {} # | ~~~~~~~~~~~~^ # 142| #else # 143| void # 144|-> mark_bytes_undefined (size_t size, const void *p) {} # 145| void # 146| mark_bytes_defined (size_t size, const void *p) {} Error: COMPILER_WARNING (CWE-563): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘mark_bytes_defined’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:146:28: warning[-Wunused-parameter]: unused parameter ‘size’ # 146 | mark_bytes_defined (size_t size, const void *p) {} # | ~~~~~~~^~~~ # 144| mark_bytes_undefined (size_t size, const void *p) {} # 145| void # 146|-> mark_bytes_defined (size_t size, const void *p) {} # 147| #endif # 148| Error: COMPILER_WARNING (CWE-563): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:146:46: warning[-Wunused-parameter]: unused parameter ‘p’ # 146 | mark_bytes_defined (size_t size, const void *p) {} # | ~~~~~~~~~~~~^ # 144| mark_bytes_undefined (size_t size, const void *p) {} # 145| void # 146|-> mark_bytes_defined (size_t size, const void *p) {} # 147| #endif # 148| Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher_cbc’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:245:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*cipher.block_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:237:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:240:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:241:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 243| data = xalloc(length); # 244| cipher->set_encrypt_key(ctx, key->data); # 245|-> memcpy(iv, iiv->data, cipher->block_size); # 246| # 247| cbc_encrypt(ctx, cipher->encrypt, Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher_cfb’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:308:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*cipher.block_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:298:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:301:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:302:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 306| # 307| cipher->set_encrypt_key(ctx, key->data); # 308|-> memcpy(iv, iiv->data, cipher->block_size); # 309| # 310| cfb_encrypt(ctx, cipher->encrypt, Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher_cfb8’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:491:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*cipher.block_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:477:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:480:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:481:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 489| # 490| cipher->set_encrypt_key(ctx, key->data); # 491|-> memcpy(iv, iiv->data, cipher->block_size); # 492| # 493| memset(data, 0x17, length + 1); Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:493:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*cleartext.length + 1)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:477:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:480:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:481:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 491| memcpy(iv, iiv->data, cipher->block_size); # 492| # 493|-> memset(data, 0x17, length + 1); # 494| for (i = 0; i + block <= length; i += block) # 495| { Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:521:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*cleartext.length + 1)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:477:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:480:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:481:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:516:7: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 519| memcpy(iv, iiv->data, cipher->block_size); # 520| # 521|-> memset(data2, 0x17, length + 1); # 522| for (i = 0; i + block <= length; i += block) # 523| { Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:548:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*cipher.block_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:477:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:480:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:481:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 546| # 547| cipher->set_encrypt_key(ctx, key->data); # 548|-> memcpy(iv, iiv->data, cipher->block_size); # 549| memcpy(data, cleartext->data, length); # 550| Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:549:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*cleartext.length + 1)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:477:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:480:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:481:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 547| cipher->set_encrypt_key(ctx, key->data); # 548| memcpy(iv, iiv->data, cipher->block_size); # 549|-> memcpy(data, cleartext->data, length); # 550| # 551| cfb8_encrypt(ctx, cipher->encrypt, Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_cipher_ctr’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:693:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*cipher.block_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 691| ASSERT (nblocks < 0x100); # 692| # 693|-> memcpy (octr, ictr->data, cipher->block_size - 1); # 694| low = ictr->data[cipher->block_size - 1] + nblocks; # 695| octr[cipher->block_size - 1] = low; Error: GCC_ANALYZER_WARNING (CWE-122): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:695:32: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ # 693| memcpy (octr, ictr->data, cipher->block_size - 1); # 694| low = ictr->data[cipher->block_size - 1] + nblocks; # 695|-> octr[cipher->block_size - 1] = low; # 696| # 697| if (low >= 0x100) Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:706:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*cipher.block_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 704| for (i = 0; i <= length; i++) # 705| { # 706|-> memcpy(ctr, ictr->data, cipher->block_size); # 707| memset(data, 17, length); # 708| Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:707:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*cleartext.length)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 705| { # 706| memcpy(ctr, ictr->data, cipher->block_size); # 707|-> memset(data, 17, length); # 708| # 709| ctr_crypt(ctx, cipher->encrypt, Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_aead’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:854:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*cleartext.length + (long unsigned int)*aead.block_size + 18446744073709551615) + (sizetype)in_align’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:841:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:842:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:843:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 852| unsigned out_align = 3*in_align % aead->block_size; # 853| size_t offset; # 854|-> memcpy (in + in_align, cleartext->data, cleartext->length); # 855| for (offset = 0; offset <= cleartext->length; offset += aead->block_size) # 856| { Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:893:15: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*aead.digest_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:841:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:842:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:843:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:892:15: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 891| { # 892| ASSERT (digest->length <= aead->digest_size); # 893|-> memset(buffer, 0, aead->digest_size); # 894| aead->digest(ctx, digest->length, buffer); # 895| if (!MEMEQ(digest->length, buffer, digest->data)) Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_aead_message’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1016:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*cipher.length)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:961:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:962:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:963:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null # 1014| FAIL(); # 1015| } # 1016|-> memcpy (copy, cipher->data, cipher->length); # 1017| copy[0] ^= 4; # 1018| if (aead->decrypt (ctx, Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_hash’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1129:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*digest.length)’ where non-null expected <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 1127| } # 1128| # 1129|-> memset(buffer, 0, digest->length); # 1130| # 1131| hash->update(ctx, msg->length, msg->data); Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1142:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*msg.length + 16)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1132:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1135:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1137:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 1140| for (offset = 0; offset < 16; offset++) # 1141| { # 1142|-> memset (input, 0, msg->length + 16); # 1143| memcpy (input + offset, msg->data, msg->length); # 1144| hash->update (ctx, msg->length, input + offset); Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_hash_large’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1173:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(length)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1171:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 1171| ASSERT (digest->length == hash->digest_size); # 1172| # 1173|-> memset(data, c, length); # 1174| # 1175| hash->init(ctx); Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_armor’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1275:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(ascii_length + 1)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1271:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1273:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 1273| ASSERT(data_length <= armor->decode_length(ascii_length)); # 1274| # 1275|-> memset(buffer, 0x33, 1 + ascii_length); # 1276| memset(check, 0x55, 1 + data_length); # 1277| Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1276:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*armor.decode_length(ascii_length) + 1)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1271:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1273:3: note: in expansion of macro ‘ASSERT’ <built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null # 1274| # 1275| memset(buffer, 0x33, 1 + ascii_length); # 1276|-> memset(check, 0x55, 1 + data_length); # 1277| # 1278| armor->encode_init(encode); Error: GCC_ANALYZER_WARNING (CWE-688): nettle-3.10-build/nettle-3.10/testsuite/testutils.h:343:31: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc((long unsigned int)*cipher.block_size)’ where non-null expected nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:728:11: note: in expansion of macro ‘MEMEQ’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:683:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:686:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:687:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:691:3: note: in expansion of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:728:11: note: in expansion of macro ‘MEMEQ’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:349:11: note: in definition of macro ‘ASSERT’ nettle-3.10-build/nettle-3.10/testsuite/testutils.c:728:11: note: in expansion of macro ‘MEMEQ’ nettle-3.10-build/nettle-3.10/testsuite/testutils.h:13: included_from: Included from here. /usr/include/string.h:64:12: note: argument 1 of ‘memcmp’ must be non-null # 341| #define H(x) (SHEX(x)->data) # 342| # 343|-> #define MEMEQ(length, a, b) (!memcmp((a), (b), (length))) # 344| # 345| #define FAIL() abort() Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/tools/nettle-hash.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-775): nettle-3.10-build/nettle-3.10/tools/nettle-hash.c: scope_hint: In function ‘main’ nettle-3.10-build/nettle-3.10/tools/nettle-hash.c:226:11: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(*<unknown>, "rb")’ # 224| if (!f) # 225| die ("Cannot open `%s': %s\n", argv[i], strerror(errno)); # 226|-> printf("%s: ", argv[i]); # 227| if (!digest_file (alg, length, raw, f)) # 228| die("Reading `%s' failed: %s\n", argv[i], strerror(errno)); Error: GCC_ANALYZER_WARNING (CWE-401): nettle-3.10-build/nettle-3.10/tools/nettle-hash.c:226:11: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(*<unknown>, "rb")’ # 224| if (!f) # 225| die ("Cannot open `%s': %s\n", argv[i], strerror(errno)); # 226|-> printf("%s: ", argv[i]); # 227| if (!digest_file (alg, length, raw, f)) # 228| die("Reading `%s' failed: %s\n", argv[i], strerror(errno)); Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/tools/nettle-pbkdf2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/tools/output.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/twofish.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/umac-l2.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches. Error: GCC_ANALYZER_WARNING (CWE-457): nettle-3.10-build/nettle-3.10/umac64.c: scope_hint: In function ‘nettle_umac64_digest’ nettle-3.10-build/nettle-3.10/umac64.c:139:3: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&tag’ nettle-3.10-build/nettle-3.10/umac64.c:36: included_from: Included from here. # 137| tag[1] = pad[1] ^ ctx->l3_key2[1] ^ _nettle_umac_l3 (ctx->l3_key1 + 8, # 138| ctx->l2_state + 2); # 139|-> memcpy (digest, tag, length); # 140| # 141| /* Reinitialize */ Error: CPPCHECK_WARNING: nettle-3.10-build/nettle-3.10/yarrow256.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.