dogtag-pki-11.5.0-3.fc41.1

List of Defects

Error: CPPCHECK_WARNING: [#def1]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def2]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:35:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_EnableWrap’
#   35 | SECU_EnableWrap(PRBool enable)
#      | ^~~~~~~~~~~~~~~
#   33|   
#   34|   void
#   35|-> SECU_EnableWrap(PRBool enable)
#   36|   {
#   37|       wrapEnabled = enable;

Error: COMPILER_WARNING (CWE-758): [#def3]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:41:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_GetWrapEnabled’
#   41 | SECU_GetWrapEnabled(void)
#      | ^~~~~~~~~~~~~~~~~~~
#   39|   
#   40|   PRBool
#   41|-> SECU_GetWrapEnabled(void)
#   42|   {
#   43|       return wrapEnabled;

Error: COMPILER_WARNING: [#def4]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c: scope_hint: In function ‘SECU_PrintErrMsg’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:58:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintErrMsg’ might be a candidate for ‘gnu_printf’ format attribute
#   58 |     vfprintf(out, msg, args);
#      |     ^~~~~~~~
#   56|       SECU_Indent(out, level);
#   57|       fprintf(out, "%s: ", progName);
#   58|->     vfprintf(out, msg, args);
#   59|       if (errString != NULL && PORT_Strlen(errString) > 0)
#   60|           fprintf(out, ": %s\n", errString);

Error: COMPILER_WARNING: [#def5]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c: scope_hint: In function ‘SECU_PrintError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:78:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintError’ might be a candidate for ‘gnu_printf’ format attribute
#   78 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#   76|   
#   77|       fprintf(stderr, "%s: ", progName);
#   78|->     vfprintf(stderr, msg, args);
#   79|   
#   80|       if (errName != NULL) {

Error: COMPILER_WARNING: [#def6]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c: scope_hint: In function ‘SECU_PrintSystemError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:99:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintSystemError’ might be a candidate for ‘gnu_printf’ format attribute
#   99 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#   97|       va_start(args, msg);
#   98|       fprintf(stderr, "%s: ", progName);
#   99|->     vfprintf(stderr, msg, args);
#  100|       fprintf(stderr, ": %s\n", strerror(errno));
#  101|       va_end(args);

Error: COMPILER_WARNING (CWE-758): [#def7]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:105:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_StdinToItem’
#  105 | secu_StdinToItem(SECItem *dst)
#      | ^~~~~~~~~~~~~~~~
#  103|   
#  104|   SECStatus
#  105|-> secu_StdinToItem(SECItem *dst)
#  106|   {
#  107|       unsigned char buf[1000];

Error: COMPILER_WARNING (CWE-563): [#def8]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c: scope_hint: In function ‘SECU_ParseCommandLine’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:486:52: warning[-Wunused-parameter]: unused parameter ‘progName’
#  486 | SECU_ParseCommandLine(int argc, char **argv, char *progName,
#      |                                              ~~~~~~^~~~~~~~
#  484|   
#  485|   SECStatus
#  486|-> SECU_ParseCommandLine(int argc, char **argv, char *progName,
#  487|                         const secuCommand *cmd)
#  488|   {

Error: CLANG_WARNING: [#def9]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:570:28: warning[core.NullDereference]: Dereference of null pointer
#  568|               if (option == '\0')
#  569|                   option = '\377'; /* force unequal with all flags */
#  570|->             optstatelong = longopts[optstate->longOptIndex].longOptName;
#  571|           }
#  572|   

Error: COMPILER_WARNING (CWE-758): [#def10]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.c:648:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_StringToSignatureAlgTag’
#  648 | SECU_StringToSignatureAlgTag(const char *alg)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  646|   
#  647|   SECOidTag
#  648|-> SECU_StringToSignatureAlgTag(const char *alg)
#  649|   {
#  650|       SECOidTag hashAlgTag = SEC_OID_UNKNOWN;

Error: COMPILER_WARNING (CWE-758): [#def11]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/moreoids.c:52:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_cert_fetchOID’
#   52 | SECU_cert_fetchOID(SECOidTag *data, const SECOidData *src)
#      | ^~~~~~~~~~~~~~~~~~
#   50|   /* Fetch and register an oid if it hasn't been done already */
#   51|   void
#   52|-> SECU_cert_fetchOID(SECOidTag *data, const SECOidData *src)
#   53|   {
#   54|       if (*data == SEC_OID_UNKNOWN) {

Error: COMPILER_WARNING (CWE-758): [#def12]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/moreoids.c:61:11: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_GetNewTagFromOffset’
#   61 | SECOidTag SECU_GetNewTagFromOffset(unsigned int offset) {
#      |           ^~~~~~~~~~~~~~~~~~~~~~~~
#   59|   }
#   60|   
#   61|-> SECOidTag SECU_GetNewTagFromOffset(unsigned int offset) {
#   62|       if(offset >= numOids) {
#   63|           return SEC_OID_UNKNOWN;

Error: COMPILER_WARNING (CWE-758): [#def13]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/moreoids.c:69:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_RegisterDynamicOids’
#   69 | SECU_RegisterDynamicOids(void)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
#   67|   
#   68|   SECStatus
#   69|-> SECU_RegisterDynamicOids(void)
#   70|   {
#   71|       unsigned int i;

Error: CPPCHECK_WARNING: [#def14]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def15]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:137:1: warning[-Wmissing-prototypes]: no previous prototype for ‘P12U_NicknameCollisionCallback’
#  137 | P12U_NicknameCollisionCallback(SECItem *old_nick, PRBool *cancel, void *wincx)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  135|   
#  136|   SECItem *
#  137|-> P12U_NicknameCollisionCallback(SECItem *old_nick, PRBool *cancel, void *wincx)
#  138|   {
#  139|       char *nick = NULL;

Error: COMPILER_WARNING (CWE-758): [#def16]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:260:1: warning[-Wmissing-prototypes]: no previous prototype for ‘P12U_UnicodeConversion’
#  260 | P12U_UnicodeConversion(PLArenaPool *arena, SECItem *dest, SECItem *src,
#      | ^~~~~~~~~~~~~~~~~~~~~~
#  258|   
#  259|   SECStatus
#  260|-> P12U_UnicodeConversion(PLArenaPool *arena, SECItem *dest, SECItem *src,
#  261|                          PRBool toUnicode, PRBool swapBytes)
#  262|   {

Error: COMPILER_WARNING (CWE-758): [#def17]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:289:1: warning[-Wmissing-prototypes]: no previous prototype for ‘P12U_GetP12FilePassword’
#  289 | P12U_GetP12FilePassword(PRBool confirmPw, secuPWData *p12FilePw)
#      | ^~~~~~~~~~~~~~~~~~~~~~~
#  287|    */
#  288|   SECItem *
#  289|-> P12U_GetP12FilePassword(PRBool confirmPw, secuPWData *p12FilePw)
#  290|   {
#  291|       char *p0 = NULL;

Error: COMPILER_WARNING (CWE-704): [#def18]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c: scope_hint: In function ‘P12U_GetP12FilePassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:299:41: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_GetPasswordString’ discards ‘const’ qualifier from pointer target type
#  299 |                                         "Enter password for PKCS12 file: ");
#      |                                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:20: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:97:47: note: expected ‘char *’ but argument is of type ‘const char *’
#   97 | char *SECU_GetPasswordString(void *arg, char *prompt);
#      |                                         ~~~~~~^~~~~~
#  297|           for (;;) {
#  298|               p0 = SECU_GetPasswordString(NULL,
#  299|->                                         "Enter password for PKCS12 file: ");
#  300|               if (!confirmPw || p0 == NULL)
#  301|                   break;

Error: COMPILER_WARNING (CWE-704): [#def19]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:302:47: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_GetPasswordString’ discards ‘const’ qualifier from pointer target type
#  302 |             p1 = SECU_GetPasswordString(NULL, "Re-enter password: ");
#      |                                               ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:97:47: note: expected ‘char *’ but argument is of type ‘const char *’
#   97 | char *SECU_GetPasswordString(void *arg, char *prompt);
#      |                                         ~~~~~~^~~~~~
#  300|               if (!confirmPw || p0 == NULL)
#  301|                   break;
#  302|->             p1 = SECU_GetPasswordString(NULL, "Re-enter password: ");
#  303|               if (p1 == NULL) {
#  304|                   PORT_ZFree(p0, PL_strlen(p0));

Error: COMPILER_WARNING (CWE-758): [#def20]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:332:1: warning[-Wmissing-prototypes]: no previous prototype for ‘P12U_InitSlot’
#  332 | P12U_InitSlot(PK11SlotInfo *slot, secuPWData *slotPw)
#      | ^~~~~~~~~~~~~
#  330|   
#  331|   SECStatus
#  332|-> P12U_InitSlot(PK11SlotInfo *slot, secuPWData *slotPw)
#  333|   {
#  334|       SECStatus rv;

Error: COMPILER_WARNING (CWE-758): [#def21]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:365:1: warning[-Wmissing-prototypes]: no previous prototype for ‘p12U_ReadPKCS12File’
#  365 | p12U_ReadPKCS12File(SECItem *uniPwp, char *in_file, PK11SlotInfo *slot,
#      | ^~~~~~~~~~~~~~~~~~~
#  363|    */
#  364|   SEC_PKCS12DecoderContext *
#  365|-> p12U_ReadPKCS12File(SECItem *uniPwp, char *in_file, PK11SlotInfo *slot,
#  366|                       secuPWData *slotPw, secuPWData *p12FilePw)
#  367|   {

Error: COMPILER_WARNING (CWE-758): [#def22]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:504:1: warning[-Wmissing-prototypes]: no previous prototype for ‘P12U_ImportPKCS12Object’
#  504 | P12U_ImportPKCS12Object(char *in_file, PK11SlotInfo *slot,
#      | ^~~~~~~~~~~~~~~~~~~~~~~
#  502|    */
#  503|   PRIntn
#  504|-> P12U_ImportPKCS12Object(char *in_file, PK11SlotInfo *slot,
#  505|                           secuPWData *slotPw, secuPWData *p12FilePw)
#  506|   {

Error: COMPILER_WARNING (CWE-758): [#def23]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:640:1: warning[-Wmissing-prototypes]: no previous prototype for ‘P12U_ExportPKCS12Object’
#  640 | P12U_ExportPKCS12Object(char *nn, char *outfile, PK11SlotInfo *inSlot,
#      | ^~~~~~~~~~~~~~~~~~~~~~~
#  638|   
#  639|   void
#  640|-> P12U_ExportPKCS12Object(char *nn, char *outfile, PK11SlotInfo *inSlot,
#  641|                           SECOidTag cipher, SECOidTag certCipher, SECOidTag hash,
#  642|                           secuPWData *slotPw, secuPWData *p12FilePw)

Error: COMPILER_WARNING (CWE-758): [#def24]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:780:1: warning[-Wmissing-prototypes]: no previous prototype for ‘P12U_ListPKCS12File’
#  780 | P12U_ListPKCS12File(char *in_file, PK11SlotInfo *slot,
#      | ^~~~~~~~~~~~~~~~~~~
#  778|   
#  779|   PRIntn
#  780|-> P12U_ListPKCS12File(char *in_file, PK11SlotInfo *slot,
#  781|                       secuPWData *slotPw, secuPWData *p12FilePw)
#  782|   {

Error: COMPILER_WARNING (CWE-704): [#def25]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c: scope_hint: In function ‘P12U_ListPKCS12File’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:833:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
#  833 |                                               "Encryption algorithm", 1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:177:71: note: expected ‘char *’ but argument is of type ‘const char *’
#  177 | extern void SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m,
#      |                                                                 ~~~~~~^
#  831|                       if (dip->shroudAlg) {
#  832|                           SECU_PrintAlgorithmID(stdout, dip->shroudAlg,
#  833|->                                               "Encryption algorithm", 1);
#  834|                       }
#  835|                       break;

Error: COMPILER_WARNING (CWE-704): [#def26]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:848:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
#  848 |                                               "Encryption algorithm", 1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:177:71: note: expected ‘char *’ but argument is of type ‘const char *’
#  177 | extern void SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m,
#      |                                                                 ~~~~~~^
#  846|                       if (dip->shroudAlg) {
#  847|                           SECU_PrintAlgorithmID(stdout, dip->shroudAlg,
#  848|->                                               "Encryption algorithm", 1);
#  849|                       }
#  850|                       break;

Error: COMPILER_WARNING (CWE-758): [#def27]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:874:1: warning[-Wmissing-prototypes]: no previous prototype for ‘PKCS12U_FindTagFromString’
#  874 | PKCS12U_FindTagFromString(char *cipherString)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
#  872|   
#  873|   SECOidTag
#  874|-> PKCS12U_FindTagFromString(char *cipherString)
#  875|   {
#  876|       SECOidTag tag;

Error: COMPILER_WARNING (CWE-758): [#def28]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:899:1: warning[-Wmissing-prototypes]: no previous prototype for ‘PKCS12U_MapCipherFromString’
#  899 | PKCS12U_MapCipherFromString(char *cipherString, int keyLen)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
#  897|    */
#  898|   SECOidTag
#  899|-> PKCS12U_MapCipherFromString(char *cipherString, int keyLen)
#  900|   {
#  901|       SECOidTag tag;

Error: CLANG_WARNING: [#def29]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:914:5: warning[deadcode.DeadStores]: Value stored to 'cipher' is never read
#  912|       }
#  913|   
#  914|->     cipher = SEC_OID_UNKNOWN;
#  915|       /* we found a match... get the PBE version of this
#  916|        * cipher... */

Error: COMPILER_WARNING (CWE-758): [#def30]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:935:1: warning[-Wmissing-prototypes]: no previous prototype for ‘PKCS12U_MapHashFromString’
#  935 | PKCS12U_MapHashFromString(char *hashString)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
#  933|   
#  934|   SECOidTag
#  935|-> PKCS12U_MapHashFromString(char *hashString)
#  936|   {
#  937|       SECOidTag hashAlg;

Error: COMPILER_WARNING (CWE-909): [#def31]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1015:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1015 |       { /* opt_CertDir         */ 'd', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:18: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1013|   static secuCommandFlag pk12util_options[] =
# 1014|       {
# 1015|->       { /* opt_CertDir	       */ 'd', PR_TRUE, 0, PR_FALSE },
# 1016|         { /* opt_TokenName	       */ 'h', PR_TRUE, 0, PR_FALSE },
# 1017|         { /* opt_Import	       */ 'i', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def32]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1016:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1016 |       { /* opt_TokenName               */ 'h', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1014|       {
# 1015|         { /* opt_CertDir	       */ 'd', PR_TRUE, 0, PR_FALSE },
# 1016|->       { /* opt_TokenName	       */ 'h', PR_TRUE, 0, PR_FALSE },
# 1017|         { /* opt_Import	       */ 'i', PR_TRUE, 0, PR_FALSE },
# 1018|         { /* opt_SlotPWFile	       */ 'k', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def33]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1017:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1017 |       { /* opt_Import          */ 'i', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1015|         { /* opt_CertDir	       */ 'd', PR_TRUE, 0, PR_FALSE },
# 1016|         { /* opt_TokenName	       */ 'h', PR_TRUE, 0, PR_FALSE },
# 1017|->       { /* opt_Import	       */ 'i', PR_TRUE, 0, PR_FALSE },
# 1018|         { /* opt_SlotPWFile	       */ 'k', PR_TRUE, 0, PR_FALSE },
# 1019|         { /* opt_SlotPW	       */ 'K', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def34]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1018:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1018 |       { /* opt_SlotPWFile              */ 'k', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1016|         { /* opt_TokenName	       */ 'h', PR_TRUE, 0, PR_FALSE },
# 1017|         { /* opt_Import	       */ 'i', PR_TRUE, 0, PR_FALSE },
# 1018|->       { /* opt_SlotPWFile	       */ 'k', PR_TRUE, 0, PR_FALSE },
# 1019|         { /* opt_SlotPW	       */ 'K', PR_TRUE, 0, PR_FALSE },
# 1020|         { /* opt_List              */ 'l', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def35]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1019:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1019 |       { /* opt_SlotPW          */ 'K', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1017|         { /* opt_Import	       */ 'i', PR_TRUE, 0, PR_FALSE },
# 1018|         { /* opt_SlotPWFile	       */ 'k', PR_TRUE, 0, PR_FALSE },
# 1019|->       { /* opt_SlotPW	       */ 'K', PR_TRUE, 0, PR_FALSE },
# 1020|         { /* opt_List              */ 'l', PR_TRUE, 0, PR_FALSE },
# 1021|         { /* opt_Nickname	       */ 'n', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def36]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1020:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1020 |       { /* opt_List              */ 'l', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1018|         { /* opt_SlotPWFile	       */ 'k', PR_TRUE, 0, PR_FALSE },
# 1019|         { /* opt_SlotPW	       */ 'K', PR_TRUE, 0, PR_FALSE },
# 1020|->       { /* opt_List              */ 'l', PR_TRUE, 0, PR_FALSE },
# 1021|         { /* opt_Nickname	       */ 'n', PR_TRUE, 0, PR_FALSE },
# 1022|         { /* opt_Export	       */ 'o', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def37]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1021:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1021 |       { /* opt_Nickname        */ 'n', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1019|         { /* opt_SlotPW	       */ 'K', PR_TRUE, 0, PR_FALSE },
# 1020|         { /* opt_List              */ 'l', PR_TRUE, 0, PR_FALSE },
# 1021|->       { /* opt_Nickname	       */ 'n', PR_TRUE, 0, PR_FALSE },
# 1022|         { /* opt_Export	       */ 'o', PR_TRUE, 0, PR_FALSE },
# 1023|         { /* opt_Raw   	       */ 'r', PR_FALSE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def38]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1022:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1022 |       { /* opt_Export          */ 'o', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1020|         { /* opt_List              */ 'l', PR_TRUE, 0, PR_FALSE },
# 1021|         { /* opt_Nickname	       */ 'n', PR_TRUE, 0, PR_FALSE },
# 1022|->       { /* opt_Export	       */ 'o', PR_TRUE, 0, PR_FALSE },
# 1023|         { /* opt_Raw   	       */ 'r', PR_FALSE, 0, PR_FALSE },
# 1024|         { /* opt_P12FilePWFile     */ 'w', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def39]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1023:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1023 |       { /* opt_Raw             */ 'r', PR_FALSE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1021|         { /* opt_Nickname	       */ 'n', PR_TRUE, 0, PR_FALSE },
# 1022|         { /* opt_Export	       */ 'o', PR_TRUE, 0, PR_FALSE },
# 1023|->       { /* opt_Raw   	       */ 'r', PR_FALSE, 0, PR_FALSE },
# 1024|         { /* opt_P12FilePWFile     */ 'w', PR_TRUE, 0, PR_FALSE },
# 1025|         { /* opt_P12FilePW	       */ 'W', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def40]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1024:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1024 |       { /* opt_P12FilePWFile     */ 'w', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1022|         { /* opt_Export	       */ 'o', PR_TRUE, 0, PR_FALSE },
# 1023|         { /* opt_Raw   	       */ 'r', PR_FALSE, 0, PR_FALSE },
# 1024|->       { /* opt_P12FilePWFile     */ 'w', PR_TRUE, 0, PR_FALSE },
# 1025|         { /* opt_P12FilePW	       */ 'W', PR_TRUE, 0, PR_FALSE },
# 1026|         { /* opt_DBPrefix	       */ 'P', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def41]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1025:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1025 |       { /* opt_P12FilePW               */ 'W', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1023|         { /* opt_Raw   	       */ 'r', PR_FALSE, 0, PR_FALSE },
# 1024|         { /* opt_P12FilePWFile     */ 'w', PR_TRUE, 0, PR_FALSE },
# 1025|->       { /* opt_P12FilePW	       */ 'W', PR_TRUE, 0, PR_FALSE },
# 1026|         { /* opt_DBPrefix	       */ 'P', PR_TRUE, 0, PR_FALSE },
# 1027|         { /* opt_Debug	       */ 'v', PR_FALSE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def42]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1026:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1026 |       { /* opt_DBPrefix        */ 'P', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1024|         { /* opt_P12FilePWFile     */ 'w', PR_TRUE, 0, PR_FALSE },
# 1025|         { /* opt_P12FilePW	       */ 'W', PR_TRUE, 0, PR_FALSE },
# 1026|->       { /* opt_DBPrefix	       */ 'P', PR_TRUE, 0, PR_FALSE },
# 1027|         { /* opt_Debug	       */ 'v', PR_FALSE, 0, PR_FALSE },
# 1028|         { /* opt_Cipher	       */ 'c', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def43]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1027:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1027 |       { /* opt_Debug           */ 'v', PR_FALSE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1025|         { /* opt_P12FilePW	       */ 'W', PR_TRUE, 0, PR_FALSE },
# 1026|         { /* opt_DBPrefix	       */ 'P', PR_TRUE, 0, PR_FALSE },
# 1027|->       { /* opt_Debug	       */ 'v', PR_FALSE, 0, PR_FALSE },
# 1028|         { /* opt_Cipher	       */ 'c', PR_TRUE, 0, PR_FALSE },
# 1029|         { /* opt_CertCipher	       */ 'C', PR_TRUE, 0, PR_FALSE },

Error: COMPILER_WARNING (CWE-909): [#def44]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1028:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1028 |       { /* opt_Cipher          */ 'c', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1026|         { /* opt_DBPrefix	       */ 'P', PR_TRUE, 0, PR_FALSE },
# 1027|         { /* opt_Debug	       */ 'v', PR_FALSE, 0, PR_FALSE },
# 1028|->       { /* opt_Cipher	       */ 'c', PR_TRUE, 0, PR_FALSE },
# 1029|         { /* opt_CertCipher	       */ 'C', PR_TRUE, 0, PR_FALSE },
# 1030|         { /* opt_KeyLength         */ 'm', PR_TRUE, 0, PR_FALSE, "key_len" },

Error: COMPILER_WARNING (CWE-909): [#def45]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1029:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘longform’ of ‘secuCommandFlag’
# 1029 |       { /* opt_CertCipher              */ 'C', PR_TRUE, 0, PR_FALSE },
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/basicutil.h:102:11: note: ‘longform’ declared here
#  102 |     char *longform;
#      |           ^~~~~~~~
# 1027|         { /* opt_Debug	       */ 'v', PR_FALSE, 0, PR_FALSE },
# 1028|         { /* opt_Cipher	       */ 'c', PR_TRUE, 0, PR_FALSE },
# 1029|->       { /* opt_CertCipher	       */ 'C', PR_TRUE, 0, PR_FALSE },
# 1030|         { /* opt_KeyLength         */ 'm', PR_TRUE, 0, PR_FALSE, "key_len" },
# 1031|         { /* opt_CertKeyLength     */ 0, PR_TRUE, 0, PR_FALSE, "cert_key_len" },

Error: COMPILER_WARNING (CWE-704): [#def46]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1030:64: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 1030 |       { /* opt_KeyLength         */ 'm', PR_TRUE, 0, PR_FALSE, "key_len" },
#      |                                                                ^~~~~~~~~
# 1028|         { /* opt_Cipher	       */ 'c', PR_TRUE, 0, PR_FALSE },
# 1029|         { /* opt_CertCipher	       */ 'C', PR_TRUE, 0, PR_FALSE },
# 1030|->       { /* opt_KeyLength         */ 'm', PR_TRUE, 0, PR_FALSE, "key_len" },
# 1031|         { /* opt_CertKeyLength     */ 0, PR_TRUE, 0, PR_FALSE, "cert_key_len" },
# 1032|         { /* opt_Mac               */ 'M', PR_TRUE, 0, PR_FALSE, PR_FALSE }

Error: COMPILER_WARNING (CWE-704): [#def47]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1031:62: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 1031 |       { /* opt_CertKeyLength     */ 0, PR_TRUE, 0, PR_FALSE, "cert_key_len" },
#      |                                                              ^~~~~~~~~~~~~~
# 1029|         { /* opt_CertCipher	       */ 'C', PR_TRUE, 0, PR_FALSE },
# 1030|         { /* opt_KeyLength         */ 'm', PR_TRUE, 0, PR_FALSE, "key_len" },
# 1031|->       { /* opt_CertKeyLength     */ 0, PR_TRUE, 0, PR_FALSE, "cert_key_len" },
# 1032|         { /* opt_Mac               */ 'M', PR_TRUE, 0, PR_FALSE, PR_FALSE }
# 1033|       };

Error: COMPILER_WARNING (CWE-704): [#def48]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c: scope_hint: In function ‘main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/p12tool.c:1044:22: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 1044 |     char *dbprefix = "";
#      |                      ^~
# 1042|       char *import_file = NULL;
# 1043|       char *export_file = NULL;
# 1044|->     char *dbprefix = "";
# 1045|       SECStatus rv;
# 1046|       SECOidTag cipher = 

Error: COMPILER_WARNING (CWE-909): [#def49]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:35:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   35 |       offsetof(CERTPolicyQualifier, qualifierID) },
#      |       ^~~~~~~~
/usr/include/nss3/secoid.h:18: included_from: Included from here.
/usr/include/nss3/secmodt.h:9: included_from: Included from here.
/usr/include/nss3/keythi.h:11: included_from: Included from here.
/usr/include/nss3/cert.h:21: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:12: included_from: Included from here.
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   33|         0, NULL, sizeof(CERTPolicyQualifier) },
#   34|       { SEC_ASN1_OBJECT_ID,
#   35|->       offsetof(CERTPolicyQualifier, qualifierID) },
#   36|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   37|         offsetof(CERTPolicyQualifier, qualifierValue) },

Error: COMPILER_WARNING (CWE-909): [#def50]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:37:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   37 |       offsetof(CERTPolicyQualifier, qualifierValue) },
#      |       ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   35|         offsetof(CERTPolicyQualifier, qualifierID) },
#   36|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   37|->       offsetof(CERTPolicyQualifier, qualifierValue) },
#   38|       { 0 }
#   39|   };

Error: COMPILER_WARNING (CWE-909): [#def51]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:45:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   45 |       offsetof(CERTPolicyInfo, policyID) },
#      |       ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   43|         0, NULL, sizeof(CERTPolicyInfo) },
#   44|       { SEC_ASN1_OBJECT_ID,
#   45|->       offsetof(CERTPolicyInfo, policyID) },
#   46|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   47|         offsetof(CERTPolicyInfo, policyQualifiers),

Error: COMPILER_WARNING (CWE-909): [#def52]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:48:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   48 |       secu_PolicyQualifierTemplate },
#      |       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
#   46|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   47|         offsetof(CERTPolicyInfo, policyQualifiers),
#   48|->       secu_PolicyQualifierTemplate },
#   49|       { 0 }
#   50|   };

Error: COMPILER_WARNING (CWE-563): [#def53]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c: scope_hint: In function ‘secu_PrintUserNoticeQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:139:37: warning[-Wunused-parameter]: unused parameter ‘msg’
#  139 |                               char *msg, int level)
#      |                               ~~~~~~^~~
#  137|   static SECStatus
#  138|   secu_PrintUserNoticeQualifier(FILE *out, SECItem *qualifierValue,
#  139|->                               char *msg, int level)
#  140|   {
#  141|       CERTUserNotice *userNotice = NULL;

Error: COMPILER_WARNING: [#def54]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:182:20: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  182 |                 if (SECSuccess == rv)
#      |                    ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:185:13: note: here
#  185 |             case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#      |             ^~~~
#  180|               case SEC_OID_PKIX_USER_NOTICE_QUALIFIER:
#  181|                   rv = secu_PrintUserNoticeQualifier(out, qualifierValue, msg, level);
#  182|->                 if (SECSuccess == rv)
#  183|                       break;
#  184|               /* fall through on error */

Error: COMPILER_WARNING (CWE-563): [#def55]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:194:67: warning[-Wunused-parameter]: unused parameter ‘msg’
#  194 | secu_PrintPolicyInfo(FILE *out, CERTPolicyInfo *policyInfo, char *msg, int level)
#      |                                                             ~~~~~~^~~
#  192|   
#  193|   static SECStatus
#  194|-> secu_PrintPolicyInfo(FILE *out, CERTPolicyInfo *policyInfo, char *msg, int level)
#  195|   {
#  196|       CERTPolicyQualifier **policyQualifiers;

Error: COMPILER_WARNING (CWE-704): [#def56]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:202:59: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPolicyQualifier’ discards ‘const’ qualifier from pointer target type
#  202 |         secu_PrintPolicyQualifier(out, *policyQualifiers, "", level + 1);
#      |                                                           ^~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:168:33: note: expected ‘char *’ but argument is of type ‘const char *’
#  168 |                           char *msg, int level)
#      |                           ~~~~~~^~~
#  200|   
#  201|       while (policyQualifiers && *policyQualifiers != NULL) {
#  202|->         secu_PrintPolicyQualifier(out, *policyQualifiers, "", level + 1);
#  203|           policyQualifiers++;
#  204|       }

Error: COMPILER_WARNING (CWE-704): [#def57]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c: scope_hint: In function ‘SECU_PrintPolicy’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:227:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPolicyInfo’ discards ‘const’ qualifier from pointer target type
#  227 |         secu_PrintPolicyInfo(out, *policyInfos, "", level);
#      |                                                 ^~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/pppolicy.c:194:67: note: expected ‘char *’ but argument is of type ‘const char *’
#  194 | secu_PrintPolicyInfo(FILE *out, CERTPolicyInfo *policyInfo, char *msg, int level)
#      |                                                             ~~~~~~^~~
#  225|       policyInfos = policies->policyInfos;
#  226|       while (policyInfos && *policyInfos != NULL) {
#  227|->         secu_PrintPolicyInfo(out, *policyInfos, "", level);
#  228|           policyInfos++;
#  229|       }

Error: CPPCHECK_WARNING: [#def58]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def59]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_GetPasswordString’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:86:30: warning[-Wunused-parameter]: unused parameter ‘arg’
#   86 | SECU_GetPasswordString(void *arg, char *prompt)
#      |                        ~~~~~~^~~
#   84|   
#   85|   char *
#   86|-> SECU_GetPasswordString(void *arg, char *prompt)
#   87|   {
#   88|   #ifndef _WINDOWS

Error: COMPILER_WARNING (CWE-704): [#def60]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_GetModulePassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:222:40: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  222 |     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#      |                                        ^~~~~~~~~~
#  220|       secuPWData *pwdata = (secuPWData *)arg;
#  221|       secuPWData pwnull = { PW_NONE, 0 };
#  222|->     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#  223|   
#  224|       if (pwdata == NULL)

Error: COMPILER_WARNING: [#def61]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:246:13: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  246 |             char *pw = SECU_GetPasswordString(NULL, prompt);
#      |             ^~~~
#  244|                       "Press Enter, then enter PIN for \"%s\" on external device.\n",
#  245|                       PK11_GetTokenName(slot));
#  246|->             char *pw = SECU_GetPasswordString(NULL, prompt);
#  247|               PORT_Free(pw);
#  248|           /* Fall Through */

Error: COMPILER_WARNING (CWE-758): [#def62]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:260:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_InitSlotPassword’
#  260 | secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#      | ^~~~~~~~~~~~~~~~~~~~~
#  258|   
#  259|   char *
#  260|-> secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#  261|   {
#  262|       char *p0 = NULL;

Error: COMPILER_WARNING (CWE-704): [#def63]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_InitSlotPassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:319:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SEC_GetPassword’ discards ‘const’ qualifier from pointer target type
#  319 |         p0 = SEC_GetPassword(input, output, "Enter new password: ",
#      |                                             ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:19: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:92:57: note: expected ‘char *’ but argument is of type ‘const char *’
#   92 | extern char *SEC_GetPassword(FILE *in, FILE *out, char *msg,
#      |                                                   ~~~~~~^~~
#  317|           if (p0)
#  318|               PORT_Free(p0);
#  319|->         p0 = SEC_GetPassword(input, output, "Enter new password: ",
#  320|                                SEC_BlindCheckPassword);
#  321|   

Error: COMPILER_WARNING (CWE-704): [#def64]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:324:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SEC_GetPassword’ discards ‘const’ qualifier from pointer target type
#  324 |         p1 = SEC_GetPassword(input, output, "Re-enter password: ",
#      |                                             ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:92:57: note: expected ‘char *’ but argument is of type ‘const char *’
#   92 | extern char *SEC_GetPassword(FILE *in, FILE *out, char *msg,
#      |                                                   ~~~~~~^~~
#  322|           if (p1)
#  323|               PORT_Free(p1);
#  324|->         p1 = SEC_GetPassword(input, output, "Re-enter password: ",
#  325|                                SEC_BlindCheckPassword);
#  326|           if (p0 && p1 && !PORT_Strcmp(p0, p1)) {

Error: COMPILER_WARNING (CWE-704): [#def65]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_ConfigDirectory’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:475:18: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  475 |             home = "";
#      |                  ^
#  473|           home = PR_GetEnvSecure("HOME");
#  474|           if (!home)
#  475|->             home = "";
#  476|   
#  477|           if (*home && home[strlen(home) - 1] == '/')

Error: COMPILER_WARNING: [#def66]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_ReadDERFromFile’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:514:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  514 |         char *asc = (char *)filedata.data;
#      |         ^~~~
#  512|               return rv;
#  513|           }
#  514|->         char *asc = (char *)filedata.data;
#  515|           asc[filedata.len - 1] = '\0';
#  516|   

Error: COMPILER_WARNING: [#def67]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:522:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  522 |         char *body;
#      |         ^~~~
#  520|           }
#  521|   
#  522|->         char *body;
#  523|           /* check for headers and trailers and remove them */
#  524|           if ((body = strstr(asc, "-----BEGIN")) != NULL) {

Error: COMPILER_WARNING (CWE-758): [#def68]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:571:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_StripTagAndLength’
#  571 | SECU_StripTagAndLength(SECItem *i)
#      | ^~~~~~~~~~~~~~~~~~~~~~
#  569|    */
#  570|   SECStatus
#  571|-> SECU_StripTagAndLength(SECItem *i)
#  572|   {
#  573|       unsigned int start;

Error: COMPILER_WARNING (CWE-758): [#def69]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:614:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_ExtractBERAndStep’
#  614 | SECU_ExtractBERAndStep(SECItem *in, SECItem *out)
#      | ^~~~~~~~~~~~~~~~~~~~~~
#  612|    */
#  613|   SECStatus
#  614|-> SECU_ExtractBERAndStep(SECItem *in, SECItem *out)
#  615|   {
#  616|       if (!in || !in->data || in->len < 2) { /* must be at least tag and length */

Error: COMPILER_WARNING (CWE-758): [#def70]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:968:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedBoolean’
#  968 | SECU_PrintEncodedBoolean(FILE *out, const SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
#  966|   /* Print a DER encoded Boolean */
#  967|   void
#  968|-> SECU_PrintEncodedBoolean(FILE *out, const SECItem *i, const char *m, int level)
#  969|   {
#  970|       SECItem my = *i;

Error: COMPILER_WARNING (CWE-758): [#def71]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:977:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedInteger’
#  977 | SECU_PrintEncodedInteger(FILE *out, const SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
#  975|   /* Print a DER encoded integer */
#  976|   void
#  977|-> SECU_PrintEncodedInteger(FILE *out, const SECItem *i, const char *m, int level)
#  978|   {
#  979|       SECItem my = *i;

Error: COMPILER_WARNING (CWE-758): [#def72]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:986:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedObjectID’
#  986 | SECU_PrintEncodedObjectID(FILE *out, const SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
#  984|   /* Print a DER encoded OID */
#  985|   SECOidTag
#  986|-> SECU_PrintEncodedObjectID(FILE *out, const SECItem *i, const char *m, int level)
#  987|   {
#  988|       SECItem my = *i;

Error: COMPILER_WARNING (CWE-909): [#def73]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1191:5: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1191 |     { SEC_ASN1_OCTET_STRING, offsetof(secuPBEParams, salt) },
#      |     ^
/usr/include/nss3/secoid.h:18: included_from: Included from here.
/usr/include/nss3/secmodt.h:9: included_from: Included from here.
/usr/include/nss3/keythi.h:11: included_from: Included from here.
/usr/include/nss3/cryptohi.h:17: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:18: included_from: Included from here.
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
# 1189|   const SEC_ASN1Template secuKDF2Params[] = {
# 1190|       { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(secuPBEParams) },
# 1191|->     { SEC_ASN1_OCTET_STRING, offsetof(secuPBEParams, salt) },
# 1192|       { SEC_ASN1_INTEGER, offsetof(secuPBEParams, iterationCount) },
# 1193|       { SEC_ASN1_INTEGER, offsetof(secuPBEParams, keyLength) },

Error: COMPILER_WARNING (CWE-909): [#def74]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1192:5: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1192 |     { SEC_ASN1_INTEGER, offsetof(secuPBEParams, iterationCount) },
#      |     ^
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
# 1190|       { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(secuPBEParams) },
# 1191|       { SEC_ASN1_OCTET_STRING, offsetof(secuPBEParams, salt) },
# 1192|->     { SEC_ASN1_INTEGER, offsetof(secuPBEParams, iterationCount) },
# 1193|       { SEC_ASN1_INTEGER, offsetof(secuPBEParams, keyLength) },
# 1194|       { SEC_ASN1_INLINE | SEC_ASN1_XTRN, offsetof(secuPBEParams, kdfAlg),

Error: COMPILER_WARNING (CWE-909): [#def75]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1193:5: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1193 |     { SEC_ASN1_INTEGER, offsetof(secuPBEParams, keyLength) },
#      |     ^
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
# 1191|       { SEC_ASN1_OCTET_STRING, offsetof(secuPBEParams, salt) },
# 1192|       { SEC_ASN1_INTEGER, offsetof(secuPBEParams, iterationCount) },
# 1193|->     { SEC_ASN1_INTEGER, offsetof(secuPBEParams, keyLength) },
# 1194|       { SEC_ASN1_INLINE | SEC_ASN1_XTRN, offsetof(secuPBEParams, kdfAlg),
# 1195|         SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },

Error: COMPILER_WARNING (CWE-909): [#def76]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1195:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1195 |       SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
#      |       ^~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
# 1193|       { SEC_ASN1_INTEGER, offsetof(secuPBEParams, keyLength) },
# 1194|       { SEC_ASN1_INLINE | SEC_ASN1_XTRN, offsetof(secuPBEParams, kdfAlg),
# 1195|->       SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
# 1196|       { 0 }
# 1197|   };

Error: COMPILER_WARNING (CWE-909): [#def77]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1202:5: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1202 |     { SEC_ASN1_OCTET_STRING, offsetof(secuPBEParams, salt) },
#      |     ^
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
# 1200|   const SEC_ASN1Template secuPBEParamsTemp[] = {
# 1201|       { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(secuPBEParams) },
# 1202|->     { SEC_ASN1_OCTET_STRING, offsetof(secuPBEParams, salt) },
# 1203|       { SEC_ASN1_INTEGER, offsetof(secuPBEParams, iterationCount) },
# 1204|       { 0 }

Error: COMPILER_WARNING (CWE-909): [#def78]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1203:5: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1203 |     { SEC_ASN1_INTEGER, offsetof(secuPBEParams, iterationCount) },
#      |     ^
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
# 1201|       { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(secuPBEParams) },
# 1202|       { SEC_ASN1_OCTET_STRING, offsetof(secuPBEParams, salt) },
# 1203|->     { SEC_ASN1_INTEGER, offsetof(secuPBEParams, iterationCount) },
# 1204|       { 0 }
# 1205|   };

Error: COMPILER_WARNING (CWE-909): [#def79]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1211:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1211 |       SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
#      |       ^~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
# 1209|       { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(secuPBEParams) },
# 1210|       { SEC_ASN1_INLINE | SEC_ASN1_XTRN, offsetof(secuPBEParams, kdfAlg),
# 1211|->       SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
# 1212|       { SEC_ASN1_INLINE | SEC_ASN1_XTRN, offsetof(secuPBEParams, cipherAlg),
# 1213|         SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },

Error: COMPILER_WARNING (CWE-909): [#def80]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1213:7: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
# 1213 |       SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
#      |       ^~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
# 1211|         SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
# 1212|       { SEC_ASN1_INLINE | SEC_ASN1_XTRN, offsetof(secuPBEParams, cipherAlg),
# 1213|->       SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
# 1214|       { 0 }
# 1215|   };

Error: COMPILER_WARNING (CWE-758): [#def81]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1218:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_PrintRSAPSSParams’
# 1218 | secu_PrintRSAPSSParams(FILE *out, SECItem *value, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~
# 1216|   
# 1217|   void
# 1218|-> secu_PrintRSAPSSParams(FILE *out, SECItem *value, char *m, int level)
# 1219|   {
# 1220|       PLArenaPool *pool = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);

Error: COMPILER_WARNING (CWE-758): [#def82]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1282:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_PrintKDF2Params’
# 1282 | secu_PrintKDF2Params(FILE *out, SECItem *value, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~
# 1280|   
# 1281|   void
# 1282|-> secu_PrintKDF2Params(FILE *out, SECItem *value, char *m, int level)
# 1283|   {
# 1284|       PLArenaPool *pool = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);

Error: COMPILER_WARNING (CWE-704): [#def83]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintKDF2Params’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1306:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 1306 |         SECU_PrintAlgorithmID(out, &param.kdfAlg, "KDF algorithm", level + 1);
#      |                                                   ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:177:71: note: expected ‘char *’ but argument is of type ‘const char *’
#  177 | extern void SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m,
#      |                                                                 ~~~~~~^
# 1304|                             level + 1);
# 1305|           SECU_PrintInteger(out, &param.keyLength, "Key Length", level + 1);
# 1306|->         SECU_PrintAlgorithmID(out, &param.kdfAlg, "KDF algorithm", level + 1);
# 1307|       }
# 1308|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-758): [#def84]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1312:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_PrintPKCS5V2Params’
# 1312 | secu_PrintPKCS5V2Params(FILE *out, SECItem *value, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~
# 1310|   
# 1311|   void
# 1312|-> secu_PrintPKCS5V2Params(FILE *out, SECItem *value, char *m, int level)
# 1313|   {
# 1314|       PLArenaPool *pool = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);

Error: COMPILER_WARNING (CWE-704): [#def85]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS5V2Params’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1332:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 1332 |         SECU_PrintAlgorithmID(out, &param.kdfAlg, "KDF", level + 1);
#      |                                                   ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:177:71: note: expected ‘char *’ but argument is of type ‘const char *’
#  177 | extern void SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m,
#      |                                                                 ~~~~~~^
# 1330|       rv = SEC_QuickDERDecodeItem(pool, &param, secuPBEV2Params, value);
# 1331|       if (rv == SECSuccess) {
# 1332|->         SECU_PrintAlgorithmID(out, &param.kdfAlg, "KDF", level + 1);
# 1333|           SECU_PrintAlgorithmID(out, &param.cipherAlg, "Cipher", level + 1);
# 1334|       }

Error: COMPILER_WARNING (CWE-704): [#def86]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1333:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 1333 |         SECU_PrintAlgorithmID(out, &param.cipherAlg, "Cipher", level + 1);
#      |                                                      ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:177:71: note: expected ‘char *’ but argument is of type ‘const char *’
#  177 | extern void SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m,
#      |                                                                 ~~~~~~^
# 1331|       if (rv == SECSuccess) {
# 1332|           SECU_PrintAlgorithmID(out, &param.kdfAlg, "KDF", level + 1);
# 1333|->         SECU_PrintAlgorithmID(out, &param.cipherAlg, "Cipher", level + 1);
# 1334|       }
# 1335|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-758): [#def87]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1339:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_PrintPBEParams’
# 1339 | secu_PrintPBEParams(FILE *out, SECItem *value, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~
# 1337|   
# 1338|   void
# 1339|-> secu_PrintPBEParams(FILE *out, SECItem *value, char *m, int level)
# 1340|   {
# 1341|       PLArenaPool *pool = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);

Error: COMPILER_WARNING (CWE-704): [#def88]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintAlgorithmID’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1377:59: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintKDF2Params’ discards ‘const’ qualifier from pointer target type
# 1377 |                 secu_PrintKDF2Params(out, &a->parameters, "Parameters", level + 1);
#      |                                                           ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1282:55: note: expected ‘char *’ but argument is of type ‘const char *’
# 1282 | secu_PrintKDF2Params(FILE *out, SECItem *value, char *m, int level)
#      |                                                 ~~~~~~^
# 1375|           switch (algtag) {
# 1376|               case SEC_OID_PKCS5_PBKDF2:
# 1377|->                 secu_PrintKDF2Params(out, &a->parameters, "Parameters", level + 1);
# 1378|                   break;
# 1379|               case SEC_OID_PKCS5_PBES2:

Error: COMPILER_WARNING (CWE-704): [#def89]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1380:62: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS5V2Params’ discards ‘const’ qualifier from pointer target type
# 1380 |                 secu_PrintPKCS5V2Params(out, &a->parameters, "Encryption", level + 1);
#      |                                                              ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1312:58: note: expected ‘char *’ but argument is of type ‘const char *’
# 1312 | secu_PrintPKCS5V2Params(FILE *out, SECItem *value, char *m, int level)
#      |                                                    ~~~~~~^
# 1378|                   break;
# 1379|               case SEC_OID_PKCS5_PBES2:
# 1380|->                 secu_PrintPKCS5V2Params(out, &a->parameters, "Encryption", level + 1);
# 1381|                   break;
# 1382|               case SEC_OID_PKCS5_PBMAC1:

Error: COMPILER_WARNING (CWE-704): [#def90]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1383:62: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS5V2Params’ discards ‘const’ qualifier from pointer target type
# 1383 |                 secu_PrintPKCS5V2Params(out, &a->parameters, "MAC", level + 1);
#      |                                                              ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1312:58: note: expected ‘char *’ but argument is of type ‘const char *’
# 1312 | secu_PrintPKCS5V2Params(FILE *out, SECItem *value, char *m, int level)
#      |                                                    ~~~~~~^
# 1381|                   break;
# 1382|               case SEC_OID_PKCS5_PBMAC1:
# 1383|->                 secu_PrintPKCS5V2Params(out, &a->parameters, "MAC", level + 1);
# 1384|                   break;
# 1385|               default:

Error: COMPILER_WARNING (CWE-704): [#def91]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1386:58: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPBEParams’ discards ‘const’ qualifier from pointer target type
# 1386 |                 secu_PrintPBEParams(out, &a->parameters, "Parameters", level + 1);
#      |                                                          ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1339:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1339 | secu_PrintPBEParams(FILE *out, SECItem *value, char *m, int level)
#      |                                                ~~~~~~^
# 1384|                   break;
# 1385|               default:
# 1386|->                 secu_PrintPBEParams(out, &a->parameters, "Parameters", level + 1);
# 1387|                   break;
# 1388|           }

Error: COMPILER_WARNING (CWE-704): [#def92]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1397:53: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRSAPSSParams’ discards ‘const’ qualifier from pointer target type
# 1397 |         secu_PrintRSAPSSParams(out, &a->parameters, "Parameters", level + 1);
#      |                                                     ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1218:57: note: expected ‘char *’ but argument is of type ‘const char *’
# 1218 | secu_PrintRSAPSSParams(FILE *out, SECItem *value, char *m, int level)
#      |                                                   ~~~~~~^
# 1395|           /* No arguments or NULL argument */
# 1396|       } else if (algtag == SEC_OID_PKCS1_RSA_PSS_SIGNATURE) {
# 1397|->         secu_PrintRSAPSSParams(out, &a->parameters, "Parameters", level + 1);
# 1398|       } else {
# 1399|           /* Print args to algorithm */

Error: COMPILER_WARNING (CWE-563): [#def93]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1490:56: warning[-Wunused-parameter]: unused parameter ‘arena’
# 1490 | secu_PrintSubjectPublicKeyInfo(FILE *out, PLArenaPool *arena,
#      |                                           ~~~~~~~~~~~~~^~~~~
# 1488|   
# 1489|   static void
# 1490|-> secu_PrintSubjectPublicKeyInfo(FILE *out, PLArenaPool *arena,
# 1491|                                  CERTSubjectPublicKeyInfo *i, char *msg, int level)
# 1492|   {

Error: COMPILER_WARNING (CWE-704): [#def94]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintSubjectPublicKeyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1497:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 1497 |     SECU_PrintAlgorithmID(out, &i->algorithm, "Public Key Algorithm", level + 1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 1495|       SECU_Indent(out, level);
# 1496|       fprintf(out, "%s:\n", msg);
# 1497|->     SECU_PrintAlgorithmID(out, &i->algorithm, "Public Key Algorithm", level + 1);
# 1498|   
# 1499|       pk = SECKEY_ExtractPublicKey(i);

Error: COMPILER_WARNING (CWE-704): [#def95]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1503:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintRSAPublicKey’ discards ‘const’ qualifier from pointer target type
# 1503 |                 SECU_PrintRSAPublicKey(out, pk, "RSA Public Key", level + 1);
#      |                                                 ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1465:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 1465 | SECU_PrintRSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m, int level)
#      |                                                        ~~~~~~^
# 1501|           switch (pk->keyType) {
# 1502|               case rsaKey:
# 1503|->                 SECU_PrintRSAPublicKey(out, pk, "RSA Public Key", level + 1);
# 1504|                   break;
# 1505|   

Error: COMPILER_WARNING (CWE-704): [#def96]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1507:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintDSAPublicKey’ discards ‘const’ qualifier from pointer target type
# 1507 |                 SECU_PrintDSAPublicKey(out, pk, "DSA Public Key", level + 1);
#      |                                                 ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1479:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 1479 | SECU_PrintDSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m, int level)
#      |                                                        ~~~~~~^
# 1505|   
# 1506|               case dsaKey:
# 1507|->                 SECU_PrintDSAPublicKey(out, pk, "DSA Public Key", level + 1);
# 1508|                   break;
# 1509|   

Error: COMPILER_WARNING (CWE-704): [#def97]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1511:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintECPublicKey’ discards ‘const’ qualifier from pointer target type
# 1511 |                 secu_PrintECPublicKey(out, pk, "EC Public Key", level + 1);
#      |                                                ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1445:61: note: expected ‘char *’ but argument is of type ‘const char *’
# 1445 | secu_PrintECPublicKey(FILE *out, SECKEYPublicKey *pk, char *m, int level)
#      |                                                       ~~~~~~^
# 1509|   
# 1510|               case ecKey:
# 1511|->                 secu_PrintECPublicKey(out, pk, "EC Public Key", level + 1);
# 1512|                   break;
# 1513|   

Error: COMPILER_WARNING (CWE-563): [#def98]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintDumpDerIssuerAndSerial’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1548:65: warning[-Wunused-parameter]: unused parameter ‘m’
# 1548 | SECU_PrintDumpDerIssuerAndSerial(FILE *out, SECItem *der, char *m,
#      |                                                           ~~~~~~^
# 1546|   
# 1547|   int
# 1548|-> SECU_PrintDumpDerIssuerAndSerial(FILE *out, SECItem *der, char *m,
# 1549|                                    int level)
# 1550|   {

Error: COMPILER_WARNING (CWE-563): [#def99]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1549:38: warning[-Wunused-parameter]: unused parameter ‘level’
# 1549 |                                  int level)
#      |                                  ~~~~^~~~~
# 1547|   int
# 1548|   SECU_PrintDumpDerIssuerAndSerial(FILE *out, SECItem *der, char *m,
# 1549|->                                  int level)
# 1550|   {
# 1551|       PLArenaPool *arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);

Error: COMPILER_WARNING (CWE-704): [#def100]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintX509InvalidDate’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1635:70: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘CERT_GenTime2FormattedAscii’ discards ‘const’ qualifier from pointer target type
# 1635 |             formattedTime = CERT_GenTime2FormattedAscii(invalidTime, "%a %b %d %H:%M:%S %Y");
#      |                                                                      ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:15: included_from: Included from here.
/usr/include/nss3/secder.h:158:64: note: expected ‘char *’ but argument is of type ‘const char *’
#  158 | extern char *CERT_GenTime2FormattedAscii(PRTime genTime, char *format);
#      |                                                          ~~~~~~^~~~~~
# 1633|           rv = DER_GeneralizedTimeToTime(&invalidTime, &decodedValue);
# 1634|           if (rv == SECSuccess) {
# 1635|->             formattedTime = CERT_GenTime2FormattedAscii(invalidTime, "%a %b %d %H:%M:%S %Y");
# 1636|               SECU_Indent(out, level + 1);
# 1637|               fprintf(out, "%s: %s\n", msg, formattedTime);

Error: COMPILER_WARNING (CWE-563): [#def101]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintX509KeyUsage’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1748:57: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1748 | secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level)
#      |                                                   ~~~~~~^~~
# 1746|   /* X509KeyUsage is merely a bit string whose bits are displayed symbolically */
# 1747|   static void
# 1748|-> secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level)
# 1749|   {
# 1750|       int unused;

Error: COMPILER_WARNING (CWE-704): [#def102]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintGeneralName’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1842:58: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintIPAddress’ discards ‘const’ qualifier from pointer target type
# 1842 |             secu_PrintIPAddress(out, &gname->name.other, "IP Address", level);
#      |                                                          ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1783:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1783 | secu_PrintIPAddress(FILE *out, SECItem *value, char *msg, int level)
#      |                                                ~~~~~~^~~
# 1840|               break;
# 1841|           case certIPAddress:
# 1842|->             secu_PrintIPAddress(out, &gname->name.other, "IP Address", level);
# 1843|               break;
# 1844|           case certRegisterID:

Error: COMPILER_WARNING (CWE-563): [#def103]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1872:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1872 | secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1870|   
# 1871|   static void
# 1872|-> secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level)
# 1873|   {
# 1874|       CERTAuthKeyID *kid = NULL;

Error: COMPILER_WARNING (CWE-704): [#def104]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintAuthKeyIDExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1894:61: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1894 |             secu_PrintGeneralName(out, kid->authCertIssuer, "Issuer", level);
#      |                                                             ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1817:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1817 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1892|               SECU_PrintAsHex(out, &kid->keyID, "Key ID", level);
# 1893|           if (issuerPresent)
# 1894|->             secu_PrintGeneralName(out, kid->authCertIssuer, "Issuer", level);
# 1895|           if (snPresent)
# 1896|               SECU_PrintInteger(out, &kid->authCertSerialNumber,

Error: COMPILER_WARNING (CWE-563): [#def105]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1931:64: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1931 | secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1929|   
# 1930|   static void
# 1931|-> secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1932|   {
# 1933|       CERTCrlDistributionPoints *dPoints;

Error: COMPILER_WARNING (CWE-704): [#def106]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintCRLDistPtsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1963:63: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1963 |                 secu_PrintGeneralName(out, pPoint->crlIssuer, "CRL issuer",
#      |                                                               ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1817:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1817 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1961|               }
# 1962|               if (pPoint->crlIssuer) {
# 1963|->                 secu_PrintGeneralName(out, pPoint->crlIssuer, "CRL issuer",
# 1964|                                         level + 1);
# 1965|               }

Error: COMPILER_WARNING (CWE-563): [#def107]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1993:69: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1993 | secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                               ~~~~~~^~~
# 1991|   
# 1992|   static void
# 1993|-> secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1994|   {
# 1995|       CERTNameConstraints *cnstrnts;

Error: COMPILER_WARNING (CWE-704): [#def108]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2009:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNameConstraintSubtree’ discards ‘const’ qualifier from pointer target type
# 2009 |                                             "Permitted", level);
#      |                                             ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1976:39: note: expected ‘char *’ but argument is of type ‘const char *’
# 1976 |                                 char *msg, int level)
#      |                                 ~~~~~~^~~
# 2007|           if (cnstrnts->permited)
# 2008|               secu_PrintNameConstraintSubtree(out, cnstrnts->permited,
# 2009|->                                             "Permitted", level);
# 2010|           if (cnstrnts->excluded)
# 2011|               secu_PrintNameConstraintSubtree(out, cnstrnts->excluded,

Error: COMPILER_WARNING (CWE-704): [#def109]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2012:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNameConstraintSubtree’ discards ‘const’ qualifier from pointer target type
# 2012 |                                             "Excluded", level);
#      |                                             ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1976:39: note: expected ‘char *’ but argument is of type ‘const char *’
# 1976 |                                 char *msg, int level)
#      |                                 ~~~~~~^~~
# 2010|           if (cnstrnts->excluded)
# 2011|               secu_PrintNameConstraintSubtree(out, cnstrnts->excluded,
# 2012|->                                             "Excluded", level);
# 2013|       }
# 2014|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-563): [#def110]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2018:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 2018 | secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 2016|   
# 2017|   static void
# 2018|-> secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
# 2019|   {
# 2020|       CERTAuthInfoAccess **infos = NULL;

Error: COMPILER_WARNING (CWE-704): [#def111]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintAuthorityInfoAcess’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2041:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 2041 |                 secu_PrintGeneralName(out, info->location, "Location", level);
#      |                                                            ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1817:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1817 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 2039|               }
# 2040|               if (info->location) {
# 2041|->                 secu_PrintGeneralName(out, info->location, "Location", level);
# 2042|               } else {
# 2043|                   SECU_PrintAny(out, &info->derLocation, "Location", level);

Error: COMPILER_WARNING (CWE-704): [#def112]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintExtensions’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2079:61: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintX509InvalidDate’ discards ‘const’ qualifier from pointer target type
# 2079 |                     secu_PrintX509InvalidDate(out, tmpitem, "Date", level);
#      |                                                             ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1621:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 1621 | secu_PrintX509InvalidDate(FILE *out, SECItem *value, char *msg, int level)
#      |                                                      ~~~~~~^~~
# 2077|                   case SEC_OID_X509_INVALID_DATE:
# 2078|                   case SEC_OID_NS_CERT_EXT_CERT_RENEWAL_TIME:
# 2079|->                     secu_PrintX509InvalidDate(out, tmpitem, "Date", level);
# 2080|                       break;
# 2081|                   case SEC_OID_X509_CERTIFICATE_POLICIES:

Error: COMPILER_WARNING (CWE-704): [#def113]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2082:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintPolicy’ discards ‘const’ qualifier from pointer target type
# 2082 |                     SECU_PrintPolicy(out, tmpitem, "Data", level);
#      |                                                    ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.h:282:63: note: expected ‘char *’ but argument is of type ‘const char *’
#  282 | extern void SECU_PrintPolicy(FILE *out, SECItem *value, char *msg, int level);
#      |                                                         ~~~~~~^~~
# 2080|                       break;
# 2081|                   case SEC_OID_X509_CERTIFICATE_POLICIES:
# 2082|->                     SECU_PrintPolicy(out, tmpitem, "Data", level);
# 2083|                       break;
# 2084|                   case SEC_OID_NS_CERT_EXT_BASE_URL:

Error: COMPILER_WARNING (CWE-704): [#def114]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2103:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNSCertType’ discards ‘const’ qualifier from pointer target type
# 2103 |                     secu_PrintNSCertType(out, tmpitem, "Data", level);
#      |                                                        ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1700:55: note: expected ‘char *’ but argument is of type ‘const char *’
# 1700 | secu_PrintNSCertType(FILE *out, SECItem *value, char *msg, int level)
#      |                                                 ~~~~~~^~~
# 2101|                       break;
# 2102|                   case SEC_OID_NS_CERT_EXT_CERT_TYPE:
# 2103|->                     secu_PrintNSCertType(out, tmpitem, "Data", level);
# 2104|                       break;
# 2105|                   case SEC_OID_X509_BASIC_CONSTRAINTS:

Error: COMPILER_WARNING (CWE-704): [#def115]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2106:62: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintBasicConstraints’ discards ‘const’ qualifier from pointer target type
# 2106 |                     secu_PrintBasicConstraints(out, tmpitem, "Data", level);
#      |                                                              ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1664:61: note: expected ‘char *’ but argument is of type ‘const char *’
# 1664 | secu_PrintBasicConstraints(FILE *out, SECItem *value, char *msg, int level)
#      |                                                       ~~~~~~^~~
# 2104|                       break;
# 2105|                   case SEC_OID_X509_BASIC_CONSTRAINTS:
# 2106|->                     secu_PrintBasicConstraints(out, tmpitem, "Data", level);
# 2107|                       break;
# 2108|                   case SEC_OID_X509_EXT_KEY_USAGE:

Error: COMPILER_WARNING (CWE-704): [#def116]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintNameQuotesOptional’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2209:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2209 |         str = "(empty)";
#      |             ^
# 2207|       }
# 2208|       if (!name->rdns || !name->rdns[0]) {
# 2209|->         str = "(empty)";
# 2210|       } else {
# 2211|           str = nameStr = CERT_NameToAscii(name);

Error: COMPILER_WARNING (CWE-704): [#def117]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2214:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2214 |         str = "!Invalid AVA!";
#      |             ^
# 2212|       }
# 2213|       if (!str) {
# 2214|->         str = "!Invalid AVA!";
# 2215|       }
# 2216|       my.data = (unsigned char *)str;

Error: COMPILER_WARNING (CWE-704): [#def118]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintCertNickname’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2285:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2285 |         name = "(NULL)";
#      |              ^
# 2283|       }
# 2284|       if (!name || !name[0]) {
# 2285|->         name = "(NULL)";
# 2286|       }
# 2287|   

Error: COMPILER_WARNING (CWE-758): [#def119]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2303:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_DecodeAndPrintExtensions’
# 2303 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2301|   
# 2302|   int
# 2303|-> SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
# 2304|   {
# 2305|       CERTCertExtension **extensions = NULL;

Error: COMPILER_WARNING (CWE-758): [#def120]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2324:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfExtensions’
# 2324 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 2322|   /* print a decoded SET OF or SEQUENCE OF Extensions */
# 2323|   int
# 2324|-> SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
# 2325|   {
# 2326|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def121]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintSetOfExtensions’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2332:58: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_DecodeAndPrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2332 |         rv |= SECU_DecodeAndPrintExtensions(out, any[0], "", level);
#      |                                                          ^~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2303:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 2303 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
#      |                                                        ~~~~~~^
# 2330|       }
# 2331|       while (any && any[0]) {
# 2332|->         rv |= SECU_DecodeAndPrintExtensions(out, any[0], "", level);
# 2333|           any++;
# 2334|       }

Error: COMPILER_WARNING (CWE-758): [#def122]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2340:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfAny’
# 2340 | SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~
# 2338|   /* print a decoded SET OF or SEQUENCE OF "ANY" */
# 2339|   int
# 2340|-> SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
# 2341|   {
# 2342|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def123]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2355:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttribute’
# 2355 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~
# 2353|   
# 2354|   int
# 2355|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
# 2356|   {
# 2357|       int rv = 0;

Error: COMPILER_WARNING (CWE-563): [#def124]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2355:63: warning[-Wunused-parameter]: unused parameter ‘m’
# 2355 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
#      |                                                         ~~~~~~^
# 2353|   
# 2354|   int
# 2355|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
# 2356|   {
# 2357|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def125]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintCertAttribute’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2361:62: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintSetOfExtensions’ discards ‘const’ qualifier from pointer target type
# 2361 |         rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
#      |                                                              ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2324:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 2324 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
#      |                                                     ~~~~~~^
# 2359|       tag = SECU_PrintObjectID(out, &attr->attrType, "Attribute Type", level);
# 2360|       if (tag == SEC_OID_PKCS9_EXTENSION_REQUEST) {
# 2361|->         rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
# 2362|       } else {
# 2363|           rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);

Error: COMPILER_WARNING (CWE-704): [#def126]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2363:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintSetOfAny’ discards ‘const’ qualifier from pointer target type
# 2363 |         rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);
#      |                                                       ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2340:52: note: expected ‘char *’ but argument is of type ‘const char *’
# 2340 | SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
#      |                                              ~~~~~~^
# 2361|           rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
# 2362|       } else {
# 2363|->         rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);
# 2364|       }
# 2365|       return rv;

Error: COMPILER_WARNING (CWE-758): [#def127]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2369:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttributes’
# 2369 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 2367|   
# 2368|   int
# 2369|-> SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
# 2370|   {
# 2371|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def128]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintCertificateRequest’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2408:36: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘secu_PrintSubjectPublicKeyInfo’ discards ‘const’ qualifier from pointer target type
# 2408 |                                    "Subject Public Key Info", level + 1);
#      |                                    ^~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1491:67: note: expected ‘char *’ but argument is of type ‘const char *’
# 1491 |                                CERTSubjectPublicKeyInfo *i, char *msg, int level)
#      |                                                             ~~~~~~^~~
# 2406|           SECU_Newline(out);
# 2407|       secu_PrintSubjectPublicKeyInfo(out, arena, &cr->subjectPublicKeyInfo,
# 2408|->                                    "Subject Public Key Info", level + 1);
# 2409|       if (cr->attributes)
# 2410|           SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def129]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2410:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCertAttributes’ discards ‘const’ qualifier from pointer target type
# 2410 |         SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level + 1);
#      |                                                       ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2369:66: note: expected ‘char *’ but argument is of type ‘const char *’
# 2369 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
#      |                                                            ~~~~~~^
# 2408|                                      "Subject Public Key Info", level + 1);
# 2409|       if (cr->attributes)
# 2410|->         SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level + 1);
# 2411|       rv = 0;
# 2412|   loser:

Error: COMPILER_WARNING (CWE-704): [#def130]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintCertificate’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2449:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2449 |     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level + 1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2447|   
# 2448|       SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level + 1);
# 2449|->     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level + 1);
# 2450|       SECU_PrintName(out, &c->issuer, "Issuer", level + 1);
# 2451|       if (!SECU_GetWrapEnabled()) /*SECU_PrintName didn't add newline*/

Error: COMPILER_WARNING (CWE-704): [#def131]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2453:43: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintValidity’ discards ‘const’ qualifier from pointer target type
# 2453 |     secu_PrintValidity(out, &c->validity, "Validity", level + 1);
#      |                                           ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1140:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1140 | secu_PrintValidity(FILE *out, CERTValidity *v, char *m, int level)
#      |                                                ~~~~~~^
# 2451|       if (!SECU_GetWrapEnabled()) /*SECU_PrintName didn't add newline*/
# 2452|           SECU_Newline(out);
# 2453|->     secu_PrintValidity(out, &c->validity, "Validity", level + 1);
# 2454|       SECU_PrintName(out, &c->subject, "Subject", level + 1);
# 2455|       if (!SECU_GetWrapEnabled()) /*SECU_PrintName didn't add newline*/

Error: COMPILER_WARNING (CWE-704): [#def132]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2458:36: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘secu_PrintSubjectPublicKeyInfo’ discards ‘const’ qualifier from pointer target type
# 2458 |                                    "Subject Public Key Info", level + 1);
#      |                                    ^~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1491:67: note: expected ‘char *’ but argument is of type ‘const char *’
# 1491 |                                CERTSubjectPublicKeyInfo *i, char *msg, int level)
#      |                                                             ~~~~~~^~~
# 2456|           SECU_Newline(out);
# 2457|       secu_PrintSubjectPublicKeyInfo(out, arena, &c->subjectPublicKeyInfo,
# 2458|->                                    "Subject Public Key Info", level + 1);
# 2459|       if (c->issuerID.data)
# 2460|           secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def133]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2463:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2463 |     SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level + 1);
#      |                                              ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2052:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 2052 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2461|       if (c->subjectID.data)
# 2462|           secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level + 1);
# 2463|->     SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level + 1);
# 2464|   loser:
# 2465|       PORT_FreeArena(arena, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def134]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintCertificateBasicInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2496:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2496 |     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level + 1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2494|       fprintf(out, "%s:\n", m);
# 2495|       SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level + 1);
# 2496|->     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level + 1);
# 2497|       SECU_PrintName(out, &c->issuer, "Issuer", level + 1);
# 2498|       if (!SECU_GetWrapEnabled()) /*SECU_PrintName didn't add newline*/

Error: COMPILER_WARNING (CWE-704): [#def135]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2500:43: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintValidity’ discards ‘const’ qualifier from pointer target type
# 2500 |     secu_PrintValidity(out, &c->validity, "Validity", level + 1);
#      |                                           ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1140:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1140 | secu_PrintValidity(FILE *out, CERTValidity *v, char *m, int level)
#      |                                                ~~~~~~^
# 2498|       if (!SECU_GetWrapEnabled()) /*SECU_PrintName didn't add newline*/
# 2499|           SECU_Newline(out);
# 2500|->     secu_PrintValidity(out, &c->validity, "Validity", level + 1);
# 2501|       SECU_PrintName(out, &c->subject, "Subject", level + 1);
# 2502|       if (!SECU_GetWrapEnabled()) /*SECU_PrintName didn't add newline*/

Error: COMPILER_WARNING (CWE-704): [#def136]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintSubjectPublicKeyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2529:40: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘secu_PrintSubjectPublicKeyInfo’ discards ‘const’ qualifier from pointer target type
# 2529 |                                        "Subject Public Key Info", level + 1);
#      |                                        ^~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1491:67: note: expected ‘char *’ but argument is of type ‘const char *’
# 1491 |                                CERTSubjectPublicKeyInfo *i, char *msg, int level)
#      |                                                             ~~~~~~^~~
# 2527|           }
# 2528|           secu_PrintSubjectPublicKeyInfo(out, arena, &spki,
# 2529|->                                        "Subject Public Key Info", level + 1);
# 2530|       }
# 2531|   

Error: COMPILER_WARNING (CWE-704): [#def137]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintPrivateKey’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2555:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2555 |     SECU_PrintAlgorithmID(out, &key.algorithm, "Encryption Algorithm",
#      |                                                ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2553|       SECU_Indent(out, level);
# 2554|       fprintf(out, "%s:\n", m);
# 2555|->     SECU_PrintAlgorithmID(out, &key.algorithm, "Encryption Algorithm",
# 2556|                             level + 1);
# 2557|       SECU_PrintAsHex(out, &key.encryptedData, "Encrypted Data", level + 1);

Error: COMPILER_WARNING (CWE-563): [#def138]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2643:42: warning[-Wunused-parameter]: unused parameter ‘state’
# 2643 |                           secuPKCS7State state, const char *m, int level)
#      |                           ~~~~~~~~~~~~~~~^~~~~
# 2641|   static int
# 2642|   secu_PrintPKCS7EncContent(FILE *out, SEC_PKCS7EncryptedContentInfo *src,
# 2643|->                           secuPKCS7State state, const char *m, int level)
# 2644|   {
# 2645|       if (src->contentTypeTag == NULL)

Error: COMPILER_WARNING (CWE-704): [#def139]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS7EncContent’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2655:27: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2655 |                           "Content Encryption Algorithm", level + 1);
#      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2653|                                             : "Unknown");
# 2654|       SECU_PrintAlgorithmID(out, &(src->contentEncAlg),
# 2655|->                           "Content Encryption Algorithm", level + 1);
# 2656|       SECU_PrintAsHex(out, &(src->encContent),
# 2657|                       "Encrypted Content", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def140]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintRecipientInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2680:27: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2680 |                           "Key Encryption Algorithm", level + 1);
#      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2678|       /* Parse and display encrypted key */
# 2679|       SECU_PrintAlgorithmID(out, &(info->keyEncAlg),
# 2680|->                           "Key Encryption Algorithm", level + 1);
# 2681|       SECU_PrintAsHex(out, &(info->encKey), "Encrypted Key", level + 1);
# 2682|   }

Error: COMPILER_WARNING (CWE-704): [#def141]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintSignerInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2705:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2705 |     SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",
#      |                                                    ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2703|                         "Serial Number", level + 1);
# 2704|   
# 2705|->     SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",
# 2706|                             level + 1);
# 2707|   

Error: COMPILER_WARNING (CWE-704): [#def142]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2720:27: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2720 |                           "Digest Encryption Algorithm", level + 1);
#      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2718|       /* Parse and display signature */
# 2719|       SECU_PrintAlgorithmID(out, &(info->digestEncAlg),
# 2720|->                           "Digest Encryption Algorithm", level + 1);
# 2721|       SECU_PrintAsHex(out, &(info->encDigest), "Encrypted Digest", level + 1);
# 2722|   

Error: COMPILER_WARNING (CWE-704): [#def143]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintCRLInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2752:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2752 |     SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
#      |                                                      ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2750|       SECU_Indent(out, level + 1);
# 2751|       fprintf(out, "%s: %d (0x%x)\n", "Version", iv + 1, iv);
# 2752|->     SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
# 2753|                             level + 1);
# 2754|       SECU_PrintName(out, &(crl->name), "Issuer", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def144]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2770:34: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2770 |                                  "Entry Extensions", level + 2);
#      |                                  ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2052:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 2052 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2768|                                    "Revocation Date", level + 2);
# 2769|               SECU_PrintExtensions(out, entry->extensions,
# 2770|->                                  "Entry Extensions", level + 2);
# 2771|           }
# 2772|       }

Error: COMPILER_WARNING (CWE-704): [#def145]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2773:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2773 |     SECU_PrintExtensions(out, crl->extensions, "CRL Extensions", level + 1);
#      |                                                ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2052:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 2052 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2771|           }
# 2772|       }
# 2773|->     SECU_PrintExtensions(out, crl->extensions, "CRL Extensions", level + 1);
# 2774|   }
# 2775|   

Error: COMPILER_WARNING (CWE-704): [#def146]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Signed’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2836:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2836 |                                   "Signature Algorithm", level + 3);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2834|               fprintf(out, "%s:\n", om);
# 2835|               SECU_PrintAlgorithmID(out, &aCrl->signatureWrap.signatureAlgorithm,
# 2836|->                                   "Signature Algorithm", level + 3);
# 2837|               DER_ConvertBitString(&aCrl->signatureWrap.signature);
# 2838|               SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",

Error: COMPILER_WARNING (CWE-704): [#def147]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2840:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCRLInfo’ discards ‘const’ qualifier from pointer target type
# 2840 |             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
#      |                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2740:50: note: expected ‘char *’ but argument is of type ‘const char *’
# 2740 | SECU_PrintCRLInfo(FILE *out, CERTCrl *crl, char *m, int level)
#      |                                            ~~~~~~^
# 2838|               SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",
# 2839|                               level + 3);
# 2840|->             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
# 2841|                                 level + 3);
# 2842|           }

Error: COMPILER_WARNING (CWE-704): [#def148]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS7SignedAndEnveloped’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2963:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2963 |                                   "Signature Algorithm", level + 3);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2961|               fprintf(out, "%s:\n", om);
# 2962|               SECU_PrintAlgorithmID(out, &aCrl->signatureWrap.signatureAlgorithm,
# 2963|->                                   "Signature Algorithm", level + 3);
# 2964|               DER_ConvertBitString(&aCrl->signatureWrap.signature);
# 2965|               SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",

Error: COMPILER_WARNING (CWE-704): [#def149]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2967:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCRLInfo’ discards ‘const’ qualifier from pointer target type
# 2967 |             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
#      |                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2740:50: note: expected ‘char *’ but argument is of type ‘const char *’
# 2740 | SECU_PrintCRLInfo(FILE *out, CERTCrl *crl, char *m, int level)
#      |                                            ~~~~~~^
# 2965|               SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",
# 2966|                               level + 3);
# 2967|->             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
# 2968|                                 level + 3);
# 2969|           }

Error: COMPILER_WARNING (CWE-704): [#def150]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Digested’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3038:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 3038 |     SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
#      |                                                 ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 3036|       SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 3037|   
# 3038|->     SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
# 3039|                             level + 1);
# 3040|       secu_PrintPKCS7ContentInfo(out, &src->contentInfo, state,

Error: COMPILER_WARNING (CWE-704): [#def151]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS12Bag’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3158:39: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintPrivateKey’ discards ‘const’ qualifier from pointer target type
# 3158 |                                       "Encrypted Private Key", level);
#      |                                       ^~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2537:53: note: expected ‘char *’ but argument is of type ‘const char *’
# 2537 | SECU_PrintPrivateKey(FILE *out, SECItem *der, char *m, int level)
#      |                                               ~~~~~~^
# 3156|           case SEC_OID_PKCS12_V1_PKCS8_SHROUDED_KEY_BAG_ID:
# 3157|               rv = SECU_PrintPrivateKey(out, &bagValue,
# 3158|->                                       "Encrypted Private Key", level);
# 3159|               break;
# 3160|           case SEC_OID_PKCS12_V1_CERT_BAG_ID:

Error: COMPILER_WARNING (CWE-758): [#def152]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3404:1: warning[-Wmissing-prototypes]: no previous prototype for ‘printFlags’
# 3404 | printFlags(FILE *out, unsigned int flags, int level)
#      | ^~~~~~~~~~
# 3402|   
# 3403|   void
# 3404|-> printFlags(FILE *out, unsigned int flags, int level)
# 3405|   {
# 3406|       if (flags & CERTDB_TERMINAL_RECORD) {

Error: COMPILER_WARNING (CWE-704): [#def153]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintSignedDataSigOpt’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3519:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘inner’ discards ‘const’ qualifier from pointer target type
# 3519 |     rv = (*inner)(out, &sd->data, "Data", level + 1);
#      |                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3519:35: note: expected ‘char *’ but argument is of type ‘const char *’
# 3517|           level -= 1;
# 3518|       }
# 3519|->     rv = (*inner)(out, &sd->data, "Data", level + 1);
# 3520|   
# 3521|       if (signatureOption == withSignature) {

Error: COMPILER_WARNING (CWE-704): [#def154]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3522:61: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 3522 |         SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",
#      |                                                             ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 3520|   
# 3521|       if (signatureOption == withSignature) {
# 3522|->         SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",
# 3523|                                 level + 1);
# 3524|           DER_ConvertBitString(&sd->signature);

Error: COMPILER_WARNING (CWE-704): [#def155]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3527:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintFingerprints’ discards ‘const’ qualifier from pointer target type
# 3527 |     SECU_PrintFingerprints(out, der, "Fingerprint", level + 1);
#      |                                      ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:2564:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 2564 | SECU_PrintFingerprints(FILE *out, SECItem *derCert, char *m, int level)
#      |                                                     ~~~~~~^
# 3525|           SECU_PrintAsHex(out, &sd->signature, "Signature", level + 1);
# 3526|       }
# 3527|->     SECU_PrintFingerprints(out, der, "Fingerprint", level + 1);
# 3528|   loser:
# 3529|       PORT_FreeArena(arena, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def156]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SEC_PrintCertificateAndTrust’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3601:30: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTrustFlags’ discards ‘const’ qualifier from pointer target type
# 3601 |                              "Certificate Trust Flags", 1);
#      |                              ^~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3445:61: note: expected ‘char *’ but argument is of type ‘const char *’
# 3445 | SECU_PrintTrustFlags(FILE *out, CERTCertTrust *trust, char *m, int level)
#      |                                                       ~~~~~~^
# 3599|       if (trust) {
# 3600|           SECU_PrintTrustFlags(stdout, trust,
# 3601|->                              "Certificate Trust Flags", 1);
# 3602|       } else if (CERT_GetCertTrust(cert, &certTrust) == SECSuccess) {
# 3603|           SECU_PrintTrustFlags(stdout, &certTrust,

Error: COMPILER_WARNING (CWE-704): [#def157]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3604:30: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTrustFlags’ discards ‘const’ qualifier from pointer target type
# 3604 |                              "Certificate Trust Flags", 1);
#      |                              ^~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3445:61: note: expected ‘char *’ but argument is of type ‘const char *’
# 3445 | SECU_PrintTrustFlags(FILE *out, CERTCertTrust *trust, char *m, int level)
#      |                                                       ~~~~~~^
# 3602|       } else if (CERT_GetCertTrust(cert, &certTrust) == SECSuccess) {
# 3603|           SECU_PrintTrustFlags(stdout, &certTrust,
# 3604|->                              "Certificate Trust Flags", 1);
# 3605|       }
# 3606|   

Error: COMPILER_WARNING (CWE-704): [#def158]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_displayVerifyLog’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3709:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3709 |                             errstr = "Cert cannot sign.";
#      |                                    ^
# 3707|                       switch (flags) {
# 3708|                           case KU_DIGITAL_SIGNATURE:
# 3709|->                             errstr = "Cert cannot sign.";
# 3710|                               break;
# 3711|                           case KU_KEY_ENCIPHERMENT:

Error: COMPILER_WARNING (CWE-704): [#def159]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3712:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3712 |                             errstr = "Cert cannot encrypt.";
#      |                                    ^
# 3710|                               break;
# 3711|                           case KU_KEY_ENCIPHERMENT:
# 3712|->                             errstr = "Cert cannot encrypt.";
# 3713|                               break;
# 3714|                           case KU_KEY_CERT_SIGN:

Error: COMPILER_WARNING (CWE-704): [#def160]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3715:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3715 |                             errstr = "Cert cannot sign other certs.";
#      |                                    ^
# 3713|                               break;
# 3714|                           case KU_KEY_CERT_SIGN:
# 3715|->                             errstr = "Cert cannot sign other certs.";
# 3716|                               break;
# 3717|                           default:

Error: COMPILER_WARNING (CWE-704): [#def161]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3718:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3718 |                             errstr = "[unknown usage].";
#      |                                    ^
# 3716|                               break;
# 3717|                           default:
# 3718|->                             errstr = "[unknown usage].";
# 3719|                               break;
# 3720|                       }

Error: COMPILER_WARNING (CWE-704): [#def162]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3727:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3727 |                             errstr = "Cert cannot be used for SSL.";
#      |                                    ^
# 3725|                           case NS_CERT_TYPE_SSL_CLIENT:
# 3726|                           case NS_CERT_TYPE_SSL_SERVER:
# 3727|->                             errstr = "Cert cannot be used for SSL.";
# 3728|                               break;
# 3729|                           case NS_CERT_TYPE_SSL_CA:

Error: COMPILER_WARNING (CWE-704): [#def163]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3730:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3730 |                             errstr = "Cert cannot be used as an SSL CA.";
#      |                                    ^
# 3728|                               break;
# 3729|                           case NS_CERT_TYPE_SSL_CA:
# 3730|->                             errstr = "Cert cannot be used as an SSL CA.";
# 3731|                               break;
# 3732|                           case NS_CERT_TYPE_EMAIL:

Error: COMPILER_WARNING (CWE-704): [#def164]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3733:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3733 |                             errstr = "Cert cannot be used for SMIME.";
#      |                                    ^
# 3731|                               break;
# 3732|                           case NS_CERT_TYPE_EMAIL:
# 3733|->                             errstr = "Cert cannot be used for SMIME.";
# 3734|                               break;
# 3735|                           case NS_CERT_TYPE_EMAIL_CA:

Error: COMPILER_WARNING (CWE-704): [#def165]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3736:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3736 |                             errstr = "Cert cannot be used as an SMIME CA.";
#      |                                    ^
# 3734|                               break;
# 3735|                           case NS_CERT_TYPE_EMAIL_CA:
# 3736|->                             errstr = "Cert cannot be used as an SMIME CA.";
# 3737|                               break;
# 3738|                           case NS_CERT_TYPE_OBJECT_SIGNING:

Error: COMPILER_WARNING (CWE-704): [#def166]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3739:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3739 |                             errstr = "Cert cannot be used for object signing.";
#      |                                    ^
# 3737|                               break;
# 3738|                           case NS_CERT_TYPE_OBJECT_SIGNING:
# 3739|->                             errstr = "Cert cannot be used for object signing.";
# 3740|                               break;
# 3741|                           case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: COMPILER_WARNING (CWE-704): [#def167]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3742:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3742 |                             errstr = "Cert cannot be used as an object signing CA.";
#      |                                    ^
# 3740|                               break;
# 3741|                           case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3742|->                             errstr = "Cert cannot be used as an object signing CA.";
# 3743|                               break;
# 3744|                           default:

Error: COMPILER_WARNING (CWE-704): [#def168]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3745:36: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3745 |                             errstr = "[unknown usage].";
#      |                                    ^
# 3743|                               break;
# 3744|                           default:
# 3745|->                             errstr = "[unknown usage].";
# 3746|                               break;
# 3747|                       }

Error: COMPILER_WARNING (CWE-195): [#def169]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_StoreCRL’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3789:62: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘unsigned int’
# 3789 |             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
#      |                                                              ^~
# 3787|                          NS_CRL_TRAILER);
# 3788|           } else {
# 3789|->             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
# 3790|                   return SECFailure;
# 3791|               }

Error: COMPILER_WARNING (CWE-563): [#def170]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_FindCrlIssuer’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:3967:35: warning[-Wunused-parameter]: unused parameter ‘authorityKeyID’
# 3967 |                    CERTAuthKeyID *authorityKeyID, PRTime validTime)
#      |                    ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
# 3965|   CERTCertificate *
# 3966|   SECU_FindCrlIssuer(CERTCertDBHandle *dbhandle, SECItem *subject,
# 3967|->                    CERTAuthKeyID *authorityKeyID, PRTime validTime)
# 3968|   {
# 3969|       CERTCertificate *issuerCert = NULL;

Error: COMPILER_WARNING: [#def171]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘countItems’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4221:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4221 |     char *p = strtok(str, ",");
#      |     ^~~~
# 4219|           return SECFailure;
# 4220|       }
# 4221|->     char *p = strtok(str, ",");
# 4222|       while (p) {
# 4223|           ++(*numItems);

Error: COMPILER_WARNING (CWE-758): [#def172]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4278:1: warning[-Wmissing-prototypes]: no previous prototype for ‘schemeNameToScheme’
# 4278 | schemeNameToScheme(const char *name)
#      | ^~~~~~~~~~~~~~~~~~
# 4276|   
# 4277|   SSLSignatureScheme
# 4278|-> schemeNameToScheme(const char *name)
# 4279|   {
# 4280|   #define compareScheme(x)                                \

Error: COMPILER_WARNING: [#def173]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘parseSigSchemeList’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4330:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4330 |     char *str = PORT_Strdup(arg);
#      |     ^~~~
# 4328|   
# 4329|       /* Get group names. */
# 4330|->     char *str = PORT_Strdup(arg);
# 4331|       if (!str) {
# 4332|           goto done;

Error: COMPILER_WARNING: [#def174]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4334:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4334 |     char *p = strtok(str, ",");
#      |     ^~~~
# 4332|           goto done;
# 4333|       }
# 4334|->     char *p = strtok(str, ",");
# 4335|       while (p) {
# 4336|           SSLSignatureScheme scheme = schemeNameToScheme(p);

Error: COMPILER_WARNING: [#def175]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘parseExporter’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4370:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4370 |     char *labelEnd = strchr(str, ':');
#      |     ^~~~
# 4368|       }
# 4369|   
# 4370|->     char *labelEnd = strchr(str, ':');
# 4371|       if (labelEnd) {
# 4372|           *labelEnd = '\0';

Error: COMPILER_WARNING: [#def176]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4376:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4376 |         char *outputEnd = strchr(labelEnd, ':');
#      |         ^~~~
# 4374|   
# 4375|           /* To extract CONTEXT, first skip OUTPUT-LENGTH */
# 4376|->         char *outputEnd = strchr(labelEnd, ':');
# 4377|           if (outputEnd) {
# 4378|               *outputEnd = '\0';

Error: COMPILER_WARNING: [#def177]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4405:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4405 |     char *label = PORT_Strdup(str);
#      |     ^~~~
# 4403|       }
# 4404|   
# 4405|->     char *label = PORT_Strdup(str);
# 4406|       exporter->label.data = (unsigned char *)label;
# 4407|       exporter->label.len = strlen(label);

Error: COMPILER_WARNING: [#def178]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘parseExporters’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4439:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4439 |     char *str = PORT_Strdup(arg);
#      |     ^~~~
# 4437|   
# 4438|       /* Get exporter definitions. */
# 4439|->     char *str = PORT_Strdup(arg);
# 4440|       if (!str) {
# 4441|           goto done;

Error: COMPILER_WARNING: [#def179]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4443:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4443 |     char *p = strtok(str, ",");
#      |     ^~~~
# 4441|           goto done;
# 4442|       }
# 4443|->     char *p = strtok(str, ",");
# 4444|       while (p) {
# 4445|           SECStatus rv = parseExporter(p, &exporters[count++]);

Error: COMPILER_WARNING: [#def180]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘exportKeyingMaterial’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4493:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4493 |     SECItem temp = { siBuffer, out, exporter->outputLength };
#      |     ^~~~~~~
# 4491|       SECU_Indent(stdout, 1);
# 4492|       fprintf(stdout, "Length: %u\n", exporter->outputLength);
# 4493|->     SECItem temp = { siBuffer, out, exporter->outputLength };
# 4494|       SECU_PrintAsHex(stdout, &temp, "Keying Material", 1);
# 4495|   

Error: COMPILER_WARNING: [#def181]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘readPSK’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4527:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4527 |     char *pskBytes = strtok(str, ":");
#      |     ^~~~
# 4525|       }
# 4526|   
# 4527|->     char *pskBytes = strtok(str, ":");
# 4528|       if (!pskBytes) {
# 4529|           goto cleanup;

Error: COMPILER_WARNING: [#def182]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4540:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 4540 |     SECItem labelItem = { siBuffer, NULL, 0 };
#      |     ^~~~~~~
# 4538|       }
# 4539|   
# 4540|->     SECItem labelItem = { siBuffer, NULL, 0 };
# 4541|       char *inLabel = strtok(NULL, ":");
# 4542|       if (inLabel) {

Error: COMPILER_WARNING (CWE-704): [#def183]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS12DigestInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4607:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 4607 |                               mAlgID ? mAlgID : DIGEST_ALGID_STRING, level);
#      |                                               ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:1368:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1368 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 4605|       if (rv == SECSuccess) {
# 4606|           SECU_PrintAlgorithmID(out, &digestAlgID,
# 4607|->                               mAlgID ? mAlgID : DIGEST_ALGID_STRING, level);
# 4608|       }
# 4609|       if (mAlgID)

Error: COMPILER_WARNING (CWE-704): [#def184]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘secu_PrintPKCS12MacData’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4657:62: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS12DigestInfo’ discards ‘const’ qualifier from pointer target type
# 4657 |     if (SECSuccess != secu_PrintPKCS12DigestInfo(out, &hash, "Mac", level)) {
#      |                                                              ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4573:63: note: expected ‘char *’ but argument is of type ‘const char *’
# 4573 | secu_PrintPKCS12DigestInfo(FILE *out, const SECItem *t, char *m, int level)
#      |                                                         ~~~~~~^
# 4655|           return SECFailure;
# 4656|       }
# 4657|->     if (SECSuccess != secu_PrintPKCS12DigestInfo(out, &hash, "Mac", level)) {
# 4658|           return SECFailure;
# 4659|       }

Error: COMPILER_WARNING (CWE-704): [#def185]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c: scope_hint: In function ‘SECU_PrintPKCS12’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4728:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS12MacData’ discards ‘const’ qualifier from pointer target type
# 4728 |                                               "Mac Data", level)) {
#      |                                               ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p12tool/secutil.c:4635:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 4635 | secu_PrintPKCS12MacData(FILE *out, const SECItem *t, char *m, int level)
#      |                                                      ~~~~~~^
# 4726|       }
# 4727|       if (SECSuccess != secu_PrintPKCS12MacData(out, &macData,
# 4728|->                                               "Mac Data", level)) {
# 4729|           return SECFailure;
# 4730|       }

Error: CPPCHECK_WARNING: [#def186]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def187]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c: scope_hint: In function ‘decryption_allowed’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:128:36: warning[-Wunused-parameter]: unused parameter ‘algid’
#  128 | decryption_allowed(SECAlgorithmID *algid, PK11SymKey *key)
#      |                    ~~~~~~~~~~~~~~~~^~~~~
#  126|    */
#  127|   static PRBool
#  128|-> decryption_allowed(SECAlgorithmID *algid, PK11SymKey *key)
#  129|   {
#  130|       return PR_TRUE;

Error: COMPILER_WARNING (CWE-563): [#def188]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:128:55: warning[-Wunused-parameter]: unused parameter ‘key’
#  128 | decryption_allowed(SECAlgorithmID *algid, PK11SymKey *key)
#      |                                           ~~~~~~~~~~~~^~~
#  126|    */
#  127|   static PRBool
#  128|-> decryption_allowed(SECAlgorithmID *algid, PK11SymKey *key)
#  129|   {
#  130|       return PR_TRUE;

Error: COMPILER_WARNING (CWE-758): [#def189]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:134:1: warning[-Wmissing-prototypes]: no previous prototype for ‘DecodeAndPrintFile’
#  134 | DecodeAndPrintFile(FILE *out, PRFileDesc *in, char *progName, int ascii,
#      | ^~~~~~~~~~~~~~~~~~
#  132|   
#  133|   int
#  134|-> DecodeAndPrintFile(FILE *out, PRFileDesc *in, char *progName, int ascii,
#  135|                     char *prefix)
#  136|   {

Error: COMPILER_WARNING: [#def190]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c: scope_hint: In function ‘DecodeAndPrintFile’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:234:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  234 |     SECItem **items = NULL;
#      |     ^~~~~~~
#  232|   
#  233|       /* write out certs */
#  234|->     SECItem **items = NULL;
#  235|       SECOidTag kind;
#  236|   

Error: COMPILER_WARNING: [#def191]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:251:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  251 |     int i= 0;
#      |     ^~~
#  249|       }
#  250|   
#  251|->     int i= 0;
#  252|       if (items != NULL) {
#  253|           CERTCertificate *cert;

Error: COMPILER_WARNING (CWE-704): [#def192]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:255:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  255 |             prefix = "chaincert";
#      |                    ^
#  253|           CERTCertificate *cert;
#  254|           if (prefix == NULL) {
#  255|->             prefix = "chaincert";
#  256|           }
#  257|           while ((items[i]) != NULL) {

Error: COMPILER_WARNING: [#def193]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:259:13: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  259 |             FILE *outFile;
#      |             ^~~~
#  257|           while ((items[i]) != NULL) {
#  258|               cert = (CERTCertificate*) items[i]->data;
#  259|->             FILE *outFile;
#  260|               char filename[256];
#  261|               int nb = 0;

Error: COMPILER_WARNING (CWE-563): [#def194]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:261:17: warning[-Wunused-but-set-variable]: variable ‘nb’ set but not used
#  261 |             int nb = 0;
#      |                 ^~
#  259|               FILE *outFile;
#  260|               char filename[256];
#  261|->             int nb = 0;
#  262|   
#  263|               sprintf(filename, "%s%d.der", prefix, i);

Error: CLANG_WARNING: [#def195]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:271:13: warning[deadcode.DeadStores]: Value stored to 'nb' is never read
#  269|                   break;
#  270|               }
#  271|->             nb = fwrite((char *) cert, 1, items[i]->len, outFile);
#  272|               fclose(outFile);
#  273|   

Error: COMPILER_WARNING (CWE-704): [#def196]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c: scope_hint: In function ‘main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/p7tool.c:341:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  339|   
#  340|         case 'p':
#  341|->         prefix = optstate->value;
#  342|           break;
#  343|   

Error: COMPILER_WARNING (CWE-563): [#def197]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/pppolicy.c: scope_hint: In function ‘secu_PrintUserNoticeQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/pppolicy.c:184:43: warning[-Wunused-parameter]: unused parameter ‘msg’
#  184 |                               const char *msg, int level)
#      |                               ~~~~~~~~~~~~^~~
#  182|   static SECStatus
#  183|   secu_PrintUserNoticeQualifier(FILE *out, SECItem * qualifierValue,
#  184|->                               const char *msg, int level)
#  185|   {
#  186|       CERTUserNotice *userNotice = NULL;

Error: COMPILER_WARNING: [#def198]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/pppolicy.c:227:11: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  227 |        if (SECSuccess == rv)
#      |           ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/pppolicy.c:230:4: note: here
#  230 |    case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#      |    ^~~~
#  225|      case SEC_OID_PKIX_USER_NOTICE_QUALIFIER:
#  226|          rv = secu_PrintUserNoticeQualifier(out, qualifierValue, msg, level);
#  227|->        if (SECSuccess == rv)
#  228|   	   break;
#  229|          /* fall through on error */

Error: COMPILER_WARNING (CWE-563): [#def199]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/pppolicy.c:239:73: warning[-Wunused-parameter]: unused parameter ‘msg’
#  239 | secu_PrintPolicyInfo(FILE *out, CERTPolicyInfo *policyInfo, const char *msg, int level)
#      |                                                             ~~~~~~~~~~~~^~~
#  237|   
#  238|   static SECStatus
#  239|-> secu_PrintPolicyInfo(FILE *out, CERTPolicyInfo *policyInfo, const char *msg, int level)
#  240|   {
#  241|      CERTPolicyQualifier **policyQualifiers;

Error: CPPCHECK_WARNING: [#def200]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secerror.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-252): [#def201]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secpwd.c: scope_hint: In function ‘SEC_GetPassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secpwd.c:69:21: warning[-Wunused-result]: ignoring return value of ‘fgets’ declared with attribute ‘warn_unused_result’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secpwd.c:117:9: note: in expansion of macro ‘QUIET_FGETS’
#   67|   static char * quiet_fgets (char *buf, int length, FILE *input);
#   68|   #else
#   69|-> #define QUIET_FGETS fgets
#   70|   #endif
#   71|   

Error: CPPCHECK_WARNING: [#def202]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING: [#def203]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_PrintErrMsg’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:119:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintErrMsg’ might be a candidate for ‘gnu_printf’ format attribute
#  119 |     vfprintf(out, msg, args);
#      |     ^~~~~~~~
#  117|       SECU_Indent(out, level);
#  118|       fprintf(out, "%s: ", progName);
#  119|->     vfprintf(out, msg, args);
#  120|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  121|   	fprintf(out, ": %s\n", errString);

Error: COMPILER_WARNING: [#def204]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_PrintError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:138:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintError’ might be a candidate for ‘gnu_printf’ format attribute
#  138 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  136|   
#  137|       fprintf(stderr, "%s: ", progName);
#  138|->     vfprintf(stderr, msg, args);
#  139|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  140|   	fprintf(stderr, ": %s\n", errString);

Error: COMPILER_WARNING: [#def205]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_PrintSystemError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:154:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintSystemError’ might be a candidate for ‘gnu_printf’ format attribute
#  154 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  152|       va_start(args, msg);
#  153|       fprintf(stderr, "%s: ", progName);
#  154|->     vfprintf(stderr, msg, args);
#  155|   #if defined(_WIN32_WCE)
#  156|       fprintf(stderr, ": %d\n", PR_GetOSError());

Error: COMPILER_WARNING (CWE-563): [#def206]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_GetPasswordString’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:173:30: warning[-Wunused-parameter]: unused parameter ‘arg’
#  173 | SECU_GetPasswordString(void *arg, char *prompt)
#      |                        ~~~~~~^~~
#  171|   
#  172|   char *
#  173|-> SECU_GetPasswordString(void *arg, char *prompt)
#  174|   {
#  175|   #ifndef _WINDOWS

Error: COMPILER_WARNING (CWE-563): [#def207]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_FilePasswd’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:223:31: warning[-Wunused-parameter]: unused parameter ‘slot’
#  223 | SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#      |                 ~~~~~~~~~~~~~~^~~~
#  221|    */
#  222|   char *
#  223|-> SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#  224|   {
#  225|       unsigned char phrase[200];

Error: COMPILER_WARNING (CWE-563): [#def208]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_ChangePW’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:378:15: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  378 |     SECStatus rv;
#      |               ^~
#  376|   SECU_ChangePW(PK11SlotInfo *slot, char *passwd, char *pwFile)
#  377|   {
#  378|->     SECStatus rv;
#  379|       secuPWData pwdata, newpwdata;
#  380|       char *oldpw = NULL, *newpw = NULL;

Error: CLANG_WARNING: [#def209]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:395:2: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  393|       if (PK11_NeedUserInit(slot)) {
#  394|   	newpw = secu_InitSlotPassword(slot, PR_FALSE, &pwdata);
#  395|-> 	rv = PK11_InitPin(slot, (char*)NULL, newpw);
#  396|   	goto done;
#  397|       }

Error: COMPILER_WARNING (CWE-563): [#def210]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_GetClientAuthData’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:507:47: warning[-Wunused-parameter]: unused parameter ‘fd’
#  507 | SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#      |                                   ~~~~~~~~~~~~^~
#  505|   /* This gets called by SSL when server wants our cert & key */
#  506|   int
#  507|-> SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  508|   		       struct CERTDistNamesStr *caNames,
#  509|                         struct CERTCertificateStr **pRetCert,

Error: COMPILER_WARNING (CWE-563): [#def211]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:508:49: warning[-Wunused-parameter]: unused parameter ‘caNames’
#  508 |                        struct CERTDistNamesStr *caNames,
#      |                        ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  506|   int
#  507|   SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  508|-> 		       struct CERTDistNamesStr *caNames,
#  509|                         struct CERTCertificateStr **pRetCert,
#  510|                         struct SECKEYPrivateKeyStr **pRetKey)

Error: CLANG_WARNING: [#def212]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:677:2: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  675|   
#  676|   	/* Read in ascii data */
#  677|-> 	rv = SECU_FileToItem(&filedata, inFile);
#  678|   	asc = (char *)filedata.data;
#  679|   	if (!asc) {

Error: CLANG_WARNING: [#def213]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:678:6: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
#  676|   	/* Read in ascii data */
#  677|   	rv = SECU_FileToItem(&filedata, inFile);
#  678|-> 	asc = (char *)filedata.data;
#  679|   	if (!asc) {
#  680|   	    fprintf(stderr, "unable to read data from input file\n");

Error: COMPILER_WARNING (CWE-563): [#def214]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘secu_PrintSubjectPublicKeyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:1517:56: warning[-Wunused-parameter]: unused parameter ‘arena’
# 1517 | secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1515|   
# 1516|   static void
# 1517|-> secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1518|   		       CERTSubjectPublicKeyInfo *i,  const char *msg, int level)
# 1519|   {

Error: COMPILER_WARNING (CWE-563): [#def215]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘secu_PrintX509KeyUsage’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:1692:57: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1692 | secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level)
#      |                                                   ~~~~~~^~~
# 1690|   /* X509KeyUsage is merely a bit string whose bits are displayed symbolically */
# 1691|   static void
# 1692|-> secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level) 
# 1693|   {
# 1694|       int     unused;

Error: COMPILER_WARNING (CWE-563): [#def216]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘secu_PrintAuthKeyIDExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:1806:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1806 | secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1804|   
# 1805|   static void
# 1806|-> secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level) 
# 1807|   {
# 1808|       CERTAuthKeyID *kid  = NULL;

Error: COMPILER_WARNING (CWE-563): [#def217]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘secu_PrintCRLDistPtsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:1874:64: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1874 | secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1872|   
# 1873|   static void
# 1874|-> secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1875|   {
# 1876|       CERTCrlDistributionPoints * dPoints;

Error: COMPILER_WARNING (CWE-563): [#def218]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:1933:75: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1933 | secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, const char *msg, int level)
#      |                                                               ~~~~~~~~~~~~^~~
# 1931|   
# 1932|   static void
# 1933|-> secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, const char *msg, int level)
# 1934|   {
# 1935|       CERTNameConstraints * cnstrnts;

Error: COMPILER_WARNING (CWE-563): [#def219]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘secu_PrintAuthorityInfoAcess’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:1959:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1959 | secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1957|   
# 1958|   static void
# 1959|-> secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
# 1960|   {
# 1961|       CERTAuthInfoAccess **infos = NULL;

Error: COMPILER_WARNING (CWE-477): [#def220]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘printflags’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:2153:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2153 |     if (flags & CERTDB_VALID_PEER)
#      |     ^~
# 2151|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2152|   	    PORT_Strcat(trusts, "c");
# 2153|->     if (flags & CERTDB_VALID_PEER)
# 2154|   	if (!(flags & CERTDB_TRUSTED))
# 2155|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-563): [#def221]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_PrintCertAttribute’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:2265:69: warning[-Wunused-parameter]: unused parameter ‘m’
# 2265 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
#      |                                                         ~~~~~~~~~~~~^
# 2263|   
# 2264|   static int
# 2265|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
# 2266|   {
# 2267|       int rv = 0;

Error: COMPILER_WARNING (CWE-477): [#def222]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘printFlags’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:2953:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2953 |     if ( flags & CERTDB_VALID_PEER ) {
#      |     ^~
# 2951|   printFlags(FILE *out, unsigned int flags, int level)
# 2952|   {
# 2953|->     if ( flags & CERTDB_VALID_PEER ) {
# 2954|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2955|       }

Error: COMPILER_WARNING (CWE-563): [#def223]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_ParseCommandLine’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3029:52: warning[-Wunused-parameter]: unused parameter ‘progName’
# 3029 | SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
#      |                                              ~~~~~~^~~~~~~~
# 3027|   
# 3028|   SECStatus
# 3029|-> SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
# 3030|   {
# 3031|       PRBool found;

Error: CLANG_WARNING: [#def224]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3049:14: warning[unix.Malloc]: Potential leak of memory pointed to by 'optstring'
# 3047|       }
# 3048|       optstring[j] = '\0';
# 3049|->     optstate = PL_CreateOptState(argc, argv, optstring);
# 3050|   
# 3051|       /* Parse command line arguments */

Error: COMPILER_WARNING (CWE-704): [#def225]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3291:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3291 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3289|   	    switch (node->error) {
# 3290|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3291|-> 		flags = (unsigned int)node->arg;
# 3292|   		switch (flags) {
# 3293|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING: [#def226]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3292:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3292 |                 switch (flags) {
#      |                 ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3306:13: note: here
# 3306 |             case SEC_ERROR_INADEQUATE_CERT_TYPE:
#      |             ^~~~
# 3290|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3291|   		flags = (unsigned int)node->arg;
# 3292|-> 		switch (flags) {
# 3293|   		case KU_DIGITAL_SIGNATURE:
# 3294|   		    errstr = "Cert cannot sign.";

Error: CLANG_WARNING: [#def227]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3294:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3292|   		switch (flags) {
# 3293|   		case KU_DIGITAL_SIGNATURE:
# 3294|-> 		    errstr = "Cert cannot sign.";
# 3295|   		    break;
# 3296|   		case KU_KEY_ENCIPHERMENT:

Error: CLANG_WARNING: [#def228]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3297:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3295|   		    break;
# 3296|   		case KU_KEY_ENCIPHERMENT:
# 3297|-> 		    errstr = "Cert cannot encrypt.";
# 3298|   		    break;
# 3299|   		case KU_KEY_CERT_SIGN:

Error: CLANG_WARNING: [#def229]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3300:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3298|   		    break;
# 3299|   		case KU_KEY_CERT_SIGN:
# 3300|-> 		    errstr = "Cert cannot sign other certs.";
# 3301|   		    break;
# 3302|   		default:

Error: CLANG_WARNING: [#def230]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3303:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3301|   		    break;
# 3302|   		default:
# 3303|-> 		    errstr = "[unknown usage].";
# 3304|   		    break;
# 3305|   		}

Error: COMPILER_WARNING (CWE-704): [#def231]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3307:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3307 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3305|   		}
# 3306|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3307|-> 		flags = (unsigned int)node->arg;
# 3308|   		switch (flags) {
# 3309|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING: [#def232]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3308:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3308 |                 switch (flags) {
#      |                 ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3332:13: note: here
# 3332 |             case SEC_ERROR_UNKNOWN_ISSUER:
#      |             ^~~~
# 3306|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3307|   		flags = (unsigned int)node->arg;
# 3308|-> 		switch (flags) {
# 3309|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3310|   		case NS_CERT_TYPE_SSL_SERVER:

Error: CLANG_WARNING: [#def233]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3311:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3309|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3310|   		case NS_CERT_TYPE_SSL_SERVER:
# 3311|-> 		    errstr = "Cert cannot be used for SSL.";
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_SSL_CA:

Error: CLANG_WARNING: [#def234]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3314:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_SSL_CA:
# 3314|-> 		    errstr = "Cert cannot be used as an SSL CA.";
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL:

Error: CLANG_WARNING: [#def235]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3317:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL:
# 3317|-> 		    errstr = "Cert cannot be used for SMIME.";
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_EMAIL_CA:

Error: CLANG_WARNING: [#def236]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3320:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_EMAIL_CA:
# 3320|-> 		    errstr = "Cert cannot be used as an SMIME CA.";
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING:

Error: CLANG_WARNING: [#def237]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3323:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING:
# 3323|-> 		    errstr = "Cert cannot be used for object signing.";
# 3324|   		    break;
# 3325|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: CLANG_WARNING: [#def238]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3326:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3324|   		    break;
# 3325|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3326|-> 		    errstr = "Cert cannot be used as an object signing CA.";
# 3327|   		    break;
# 3328|   		default:

Error: CLANG_WARNING: [#def239]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3329:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3327|   		    break;
# 3328|   		default:
# 3329|-> 		    errstr = "[unknown usage].";
# 3330|   		    break;
# 3331|   		}

Error: COMPILER_WARNING (CWE-195): [#def240]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_StoreCRL’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3391:62: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘unsigned int’
# 3391 |             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
#      |                                                              ^~
# 3389|                          NS_CRL_TRAILER);
# 3390|           } else {
# 3391|->             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
# 3392|                   return SECFailure;
# 3393|               }

Error: COMPILER_WARNING (CWE-563): [#def241]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_FindCrlIssuer’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/p7tool/secutil.c:3605:35: warning[-Wunused-parameter]: unused parameter ‘authorityKeyID’
# 3605 |                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
#      |                    ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
# 3603|   CERTCertificate *
# 3604|   SECU_FindCrlIssuer(CERTCertDBHandle *dbhandle, SECItem* subject,
# 3605|->                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
# 3606|   {
# 3607|       CERTCertificate *issuerCert = NULL;

Error: COMPILER_WARNING (CWE-704): [#def242]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:91:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_GenerateSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   91 | #define FIRST_SESSION_KEY_SHARE                "first"
#      |                                                ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1187:42: note: in expansion of macro ‘FIRST_SESSION_KEY_SHARE’
# 1187 |                                          FIRST_SESSION_KEY_SHARE,
#      |                                          ^~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:236:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | TKS_GenerateSessionKeyShare( char           *sessionKeyShareName,
#      |                              ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   89|   #define CTRL_C                                 3
#   90|   
#   91|-> #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"

Error: COMPILER_WARNING (CWE-704): [#def243]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:91:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_InputSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   91 | #define FIRST_SESSION_KEY_SHARE                "first"
#      |                                                ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1206:46: note: in expansion of macro ‘FIRST_SESSION_KEY_SHARE’
# 1206 |                                              FIRST_SESSION_KEY_SHARE,
#      |                                              ^~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:241:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  241 | TKS_InputSessionKeyShare( char          *sessionKeyShareName,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   89|   #define CTRL_C                                 3
#   90|   
#   91|-> #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"

Error: COMPILER_WARNING (CWE-704): [#def244]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:93:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_GenerateSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   93 | #define SECOND_SESSION_KEY_SHARE               "second"
#      |                                                ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1271:43: note: in expansion of macro ‘SECOND_SESSION_KEY_SHARE’
# 1271 |                                           SECOND_SESSION_KEY_SHARE,
#      |                                           ^~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:236:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | TKS_GenerateSessionKeyShare( char           *sessionKeyShareName,
#      |                              ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   91|   #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|-> #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|   #define THIRD_SESSION_KEY_SHARE                "third"

Error: COMPILER_WARNING (CWE-704): [#def245]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:93:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_InputSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   93 | #define SECOND_SESSION_KEY_SHARE               "second"
#      |                                                ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1290:47: note: in expansion of macro ‘SECOND_SESSION_KEY_SHARE’
# 1290 |                                               SECOND_SESSION_KEY_SHARE,
#      |                                               ^~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:241:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  241 | TKS_InputSessionKeyShare( char          *sessionKeyShareName,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   91|   #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|-> #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|   #define THIRD_SESSION_KEY_SHARE                "third"

Error: COMPILER_WARNING (CWE-704): [#def246]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:95:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_GenerateSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   95 | #define THIRD_SESSION_KEY_SHARE                "third"
#      |                                                ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1422:42: note: in expansion of macro ‘THIRD_SESSION_KEY_SHARE’
# 1422 |                                          THIRD_SESSION_KEY_SHARE,
#      |                                          ^~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:236:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | TKS_GenerateSessionKeyShare( char           *sessionKeyShareName,
#      |                              ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|-> #define THIRD_SESSION_KEY_SHARE                "third"
#   96|   #define THIRD_SESSION_KEY_SHARE_LENGTH         16
#   97|   #define HEX_SESSION_KEY_BUF_LENGTH             32

Error: COMPILER_WARNING (CWE-704): [#def247]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:95:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_InputSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   95 | #define THIRD_SESSION_KEY_SHARE                "third"
#      |                                                ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1441:46: note: in expansion of macro ‘THIRD_SESSION_KEY_SHARE’
# 1441 |                                              THIRD_SESSION_KEY_SHARE,
#      |                                              ^~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:241:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  241 | TKS_InputSessionKeyShare( char          *sessionKeyShareName,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|-> #define THIRD_SESSION_KEY_SHARE                "third"
#   96|   #define THIRD_SESSION_KEY_SHARE_LENGTH         16
#   97|   #define HEX_SESSION_KEY_BUF_LENGTH             32

Error: COMPILER_WARNING (CWE-704): [#def248]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:132:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_ImportSymmetricKey’ discards ‘const’ qualifier from pointer target type
#  132 | #define FIRST_SYMMETRIC_KEY                    "first"
#      |                                                ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1569:21: note: in expansion of macro ‘FIRST_SYMMETRIC_KEY’
# 1569 |                     FIRST_SYMMETRIC_KEY,
#      |                     ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:246:44: note: expected ‘char *’ but argument is of type ‘const char *’
#  246 | TKS_ImportSymmetricKey( char              *symmetricKeyName,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  130|   #endif
#  131|   
#  132|-> #define FIRST_SYMMETRIC_KEY                    "first"
#  133|   #define SECOND_SYMMETRIC_KEY                   "second"
#  134|   #define THIRD_SYMMETRIC_KEY                    "third"

Error: COMPILER_WARNING (CWE-704): [#def249]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:133:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_DeriveSymmetricKey’ discards ‘const’ qualifier from pointer target type
#  133 | #define SECOND_SYMMETRIC_KEY                   "second"
#      |                                                ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1624:21: note: in expansion of macro ‘SECOND_SYMMETRIC_KEY’
# 1624 |                     SECOND_SYMMETRIC_KEY,
#      |                     ^~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:254:44: note: expected ‘char *’ but argument is of type ‘const char *’
#  254 | TKS_DeriveSymmetricKey( char              *symmetricKeyName,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  131|   
#  132|   #define FIRST_SYMMETRIC_KEY                    "first"
#  133|-> #define SECOND_SYMMETRIC_KEY                   "second"
#  134|   #define THIRD_SYMMETRIC_KEY                    "third"
#  135|   #define MASTER_KEY                             "master"

Error: COMPILER_WARNING (CWE-704): [#def250]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:134:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_DeriveSymmetricKey’ discards ‘const’ qualifier from pointer target type
#  134 | #define THIRD_SYMMETRIC_KEY                    "third"
#      |                                                ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1684:21: note: in expansion of macro ‘THIRD_SYMMETRIC_KEY’
# 1684 |                     THIRD_SYMMETRIC_KEY,
#      |                     ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:254:44: note: expected ‘char *’ but argument is of type ‘const char *’
#  254 | TKS_DeriveSymmetricKey( char              *symmetricKeyName,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  132|   #define FIRST_SYMMETRIC_KEY                    "first"
#  133|   #define SECOND_SYMMETRIC_KEY                   "second"
#  134|-> #define THIRD_SYMMETRIC_KEY                    "third"
#  135|   #define MASTER_KEY                             "master"
#  136|   #define RESIDENT_KEY                           "resident"

Error: COMPILER_WARNING (CWE-704): [#def251]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:136:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  136 | #define RESIDENT_KEY                           "resident"
#      |                                                ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1840:57: note: in expansion of macro ‘RESIDENT_KEY’
# 1840 |                                                         RESIDENT_KEY,
#      |                                                         ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:230:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  230 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  134|   #define THIRD_SYMMETRIC_KEY                    "third"
#  135|   #define MASTER_KEY                             "master"
#  136|-> #define RESIDENT_KEY                           "resident"
#  137|   #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"

Error: COMPILER_WARNING (CWE-704): [#def252]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:137:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  137 | #define SESSION_KEY                            "session"
#      |                                                ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:998:53: note: in expansion of macro ‘SESSION_KEY’
#  998 |                                                     SESSION_KEY,
#      |                                                     ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:487:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  487 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  135|   #define MASTER_KEY                             "master"
#  136|   #define RESIDENT_KEY                           "resident"
#  137|-> #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|   #define TRANSPORT_KEY                          "transport"

Error: COMPILER_WARNING (CWE-704): [#def253]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:139:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_StoreSymmetricKeyAndNameIt’ discards ‘const’ qualifier from pointer target type
#  139 | #define TRANSPORT_KEY                          "transport"
#      |                                                ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1739:62: note: in expansion of macro ‘TRANSPORT_KEY’
# 1739 |         rvSymmetricKeyname = TKS_StoreSymmetricKeyAndNameIt( TRANSPORT_KEY,
#      |                                                              ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:263:52: note: expected ‘char *’ but argument is of type ‘const char *’
#  263 | TKS_StoreSymmetricKeyAndNameIt( char              *symmetricKeyName,
#      |                                 ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  137|   #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|-> #define TRANSPORT_KEY                          "transport"
#  140|   #define UNWRAPPED_KEY                          "unwrapped"
#  141|   #define WRAPPED_KEY                            "wrapped"

Error: COMPILER_WARNING (CWE-704): [#def254]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_StoreSymmetricKeyAndNameIt’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:139:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  139 | #define TRANSPORT_KEY                          "transport"
#      |                                                ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:1376:61: note: in expansion of macro ‘TRANSPORT_KEY’
# 1376 |                                                             TRANSPORT_KEY,
#      |                                                             ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:487:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  487 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  137|   #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|-> #define TRANSPORT_KEY                          "transport"
#  140|   #define UNWRAPPED_KEY                          "unwrapped"
#  141|   #define WRAPPED_KEY                            "wrapped"

Error: COMPILER_WARNING (CWE-704): [#def255]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:140:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  140 | #define UNWRAPPED_KEY                          "unwrapped"
#      |                                                ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2498:43: note: in expansion of macro ‘UNWRAPPED_KEY’
# 2498 |                                           UNWRAPPED_KEY,
#      |                                           ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:230:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  230 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|   #define TRANSPORT_KEY                          "transport"
#  140|-> #define UNWRAPPED_KEY                          "unwrapped"
#  141|   #define WRAPPED_KEY                            "wrapped"
#  142|   

Error: COMPILER_WARNING (CWE-704): [#def256]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:141:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  141 | #define WRAPPED_KEY                            "wrapped"
#      |                                                ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2863:57: note: in expansion of macro ‘WRAPPED_KEY’
# 2863 |                                                         WRAPPED_KEY,
#      |                                                         ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:230:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  230 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  139|   #define TRANSPORT_KEY                          "transport"
#  140|   #define UNWRAPPED_KEY                          "unwrapped"
#  141|-> #define WRAPPED_KEY                            "wrapped"
#  142|   
#  143|   #define CONTINUATION_MESSAGE                   "Press enter to continue " \

Error: CPPCHECK_WARNING: [#def257]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/file.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def258]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/file.c: scope_hint: In function ‘TKS_ReadInputFileIntoSECItem’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/file.c:26:40: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#   26 |                               char    *wrappedKeyName,
#      |                               ~~~~~~~~~^~~~~~~~~~~~~~
#   24|                                 char    *hexInternalKeyKCV,
#   25|                                 int      hexInternalKeyKCVLength,
#   26|->                               char    *wrappedKeyName,
#   27|                                 SECItem *wrappedKey )
#   28|   {

Error: COMPILER_WARNING (CWE-563): [#def259]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/file.c: scope_hint: In function ‘TKS_WriteSECItemIntoOutputFile’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/file.c:318:42: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#  318 |                                 char    *wrappedKeyName,
#      |                                 ~~~~~~~~~^~~~~~~~~~~~~~
#  316|   SECStatus
#  317|   TKS_WriteSECItemIntoOutputFile( SECItem *wrappedKey,
#  318|->                                 char    *wrappedKeyName,
#  319|                                   char    *hexInternalKeyKCV,
#  320|                                   int      hexInternalKeyKCVLength,

Error: CPPCHECK_WARNING: [#def260]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/find.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def261]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/help.c: scope_hint: In function ‘TKS_PrintHelp’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/help.c:86:22: warning[-Wunused-parameter]: unused parameter ‘progName’
#   86 | TKS_PrintHelp( char *progName )
#      |                ~~~~~~^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#   84|   
#   85|   void
#   86|-> TKS_PrintHelp( char *progName )
#   87|   {
#   88|       /**********************/

Error: CPPCHECK_WARNING: [#def262]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-195): [#def263]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘InputHexSessionKey’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:224:19: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘PRUint32’ {aka ‘unsigned int’}
#  224 |     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                   ^
#  222|       /* Print appropriate key share padding length */
#  223|       PR_fprintf( PR_STDOUT, "\n                             " );
#  224|->     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  225|           PR_fprintf( PR_STDOUT, " " );
#  226|       }

Error: COMPILER_WARNING (CWE-195): [#def264]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:229:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘unsigned int’
#  229 |     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#      |                       ^
#  227|   
#  228|       /* Print second DES_LENGTH bytes */
#  229|->     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#  230|           PR_fprintf( PR_STDOUT,
#  231|                       "%c%c%c%c ",

Error: COMPILER_WARNING (CWE-195): [#def265]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_GenerateSessionKeyShare’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:974:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘PRUint32’ {aka ‘unsigned int’}
#  974 |         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                       ^
#  972|           /* Print appropriate key share padding length */
#  973|           PR_fprintf( PR_STDOUT, "\n                             " );
#  974|->         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  975|               PR_fprintf( PR_STDOUT, " " );
#  976|           }

Error: COMPILER_WARNING (CWE-195): [#def266]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:979:27: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘unsigned int’
#  979 |         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#      |                           ^
#  977|   
#  978|           /* Print second DES_LENGTH bytes */
#  979|->         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#  980|               PR_fprintf( PR_STDOUT,
#  981|                           "%c%c%c%c ",

Error: GCC_ANALYZER_WARNING (CWE-457): [#def267]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_GenerateSessionKeyShare’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:1031:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘hexSessionKeyShare.data’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
# 1029|   destroyHexSessionKeyShare:
# 1030|       /* Destroy the hex session key share */
# 1031|->     if( hexSessionKeyShare.data != NULL ) {
# 1032|           PORT_ZFree( ( unsigned char * )
# 1033|                       hexSessionKeyShare.data,

Error: COMPILER_WARNING (CWE-457): [#def268]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_GenerateSessionKeyShare’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:1031:7: warning[-Wmaybe-uninitialized]: ‘hexSessionKeyShare.data’ may be used uninitialized
# 1031 |     if( hexSessionKeyShare.data != NULL ) {
#      |       ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:896:18: note: ‘hexSessionKeyShare.data’ was declared here
#  896 |     SECItem      hexSessionKeyShare;
#      |                  ^~~~~~~~~~~~~~~~~~
# 1029|   destroyHexSessionKeyShare:
# 1030|       /* Destroy the hex session key share */
# 1031|->     if( hexSessionKeyShare.data != NULL ) {
# 1032|           PORT_ZFree( ( unsigned char * )
# 1033|                       hexSessionKeyShare.data,

Error: CLANG_WARNING: [#def269]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:1031:33: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value
# 1029|   destroyHexSessionKeyShare:
# 1030|       /* Destroy the hex session key share */
# 1031|->     if( hexSessionKeyShare.data != NULL ) {
# 1032|           PORT_ZFree( ( unsigned char * )
# 1033|                       hexSessionKeyShare.data,

Error: COMPILER_WARNING (CWE-457): [#def270]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:1032:9: warning[-Wmaybe-uninitialized]: ‘hexSessionKeyShare.len’ may be used uninitialized
# 1032 |         PORT_ZFree( ( unsigned char * )
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1033 |                     hexSessionKeyShare.data,
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~
# 1034 |                     hexSessionKeyShare.len );
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:896:18: note: ‘hexSessionKeyShare.len’ was declared here
#  896 |     SECItem      hexSessionKeyShare;
#      |                  ^~~~~~~~~~~~~~~~~~
# 1030|       /* Destroy the hex session key share */
# 1031|       if( hexSessionKeyShare.data != NULL ) {
# 1032|->         PORT_ZFree( ( unsigned char * )
# 1033|                       hexSessionKeyShare.data,
# 1034|                       hexSessionKeyShare.len );

Error: COMPILER_WARNING: [#def271]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_DetectKeyAlgorithm’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/key.c:1482:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 1482 |     CK_MECHANISM_TYPE mechanism = PK11_GetMechanism(key);
#      |     ^~~~~~~~~~~~~~~~~
# 1480|           return KEY_ALG_UNKNOWN;
# 1481|   
# 1482|->     CK_MECHANISM_TYPE mechanism = PK11_GetMechanism(key);
# 1483|       return TKS_DetectKeyAlgorithmFromMechanism(mechanism);
# 1484|   }

Error: COMPILER_WARNING (CWE-563): [#def272]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/list.c: scope_hint: In function ‘TKS_ListKeys’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/list.c:153:19: warning[-Wunused-parameter]: unused parameter ‘index’
#  153 |               int index,
#      |               ~~~~^~~~~
#  151|                 PK11SlotInfo *slot,
#  152|                 char *keyname,
#  153|->               int index, 
#  154|                 PRBool dopriv,
#  155|                 secuPWData *pwdata )

Error: COMPILER_WARNING (CWE-563): [#def273]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/list.c:154:22: warning[-Wunused-parameter]: unused parameter ‘dopriv’
#  154 |               PRBool dopriv,
#      |               ~~~~~~~^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/modules.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/modules.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#  152|                 char *keyname,
#  153|                 int index, 
#  154|->               PRBool dopriv,
#  155|                 secuPWData *pwdata )
#  156|   {

Error: CPPCHECK_WARNING: [#def274]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def275]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:160:36: warning[-Wunused-but-set-variable]: variable ‘DBDir’ set but not used
#  160 |     char                          *DBDir                       = NULL;
#      |                                    ^~~~~
#  158|       SECStatus                      status                      = PR_FALSE;
#  159|       char                           commandToRun                = '\0';
#  160|->     char                          *DBDir                       = NULL;
#  161|       char                          *DBPrefix                    = "";
#  162|       char                          *input                       = NULL;

Error: COMPILER_WARNING (CWE-704): [#def276]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c: scope_hint: In function ‘main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:161:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  161 |     char                          *DBPrefix                    = "";
#      |                                                                  ^~
#  159|       char                           commandToRun                = '\0';
#  160|       char                          *DBDir                       = NULL;
#  161|->     char                          *DBPrefix                    = "";
#  162|       char                          *input                       = NULL;
#  163|       char                          *keyname                     = NULL;

Error: COMPILER_WARNING (CWE-704): [#def277]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:167:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  167 |     char                          *slotname                    = "internal";
#      |                                                                  ^~~~~~~~~~
#  165|       char                          *output                      = NULL;
#  166|       char                          *SeedNoise                   = NULL;
#  167|->     char                          *slotname                    = "internal";
#  168|       char                          *transport_keyname           = NULL;
#  169|       int                            keyAlg                      = 0;

Error: CLANG_WARNING: [#def278]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:566:13: warning[deadcode.DeadStores]: Value stored to 'DBDir' is never read
#  564|       if( pistool.options[opt_DBDir].activated ) {
#  565|           if( pistool.options[opt_DBDir].arg ) {
#  566|->             DBDir = SECU_ConfigDirectory( pistool.options[opt_DBDir].arg );
#  567|           } else {
#  568|               PR_fprintf( PR_STDERR, 

Error: CLANG_WARNING: [#def279]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:650:21: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
#  648|   
#  649|           // String to unsigned long, base-10
#  650|->         keyLength = strtoul(keyLengthStr, NULL, 10);
#  651|       }
#  652|       else if(keyAlg == KEY_ALG_AES)

Error: COMPILER_WARNING (CWE-195): [#def280]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:996:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  996 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
#  994|           PRInt32 errLen = PR_GetErrorTextLength();
#  995|   
#  996|->         if( errLen > 0 && errLen < sizeof buffer ) {
#  997|               PR_GetErrorText( buffer );
#  998|           }

Error: COMPILER_WARNING (CWE-195): [#def281]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1006:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 1006 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
# 1004|                       "NSS_Initialize() failed" );
# 1005|   
# 1006|->         if( errLen > 0 && errLen < sizeof buffer ) {
# 1007|               PR_fprintf( PR_STDERR, "\t%s\n", buffer );
# 1008|           } else {

Error: COMPILER_WARNING (CWE-195): [#def282]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1037:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 1037 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
# 1035|               PRInt32 errLen = PR_GetErrorTextLength();
# 1036|   
# 1037|->             if( errLen > 0 && errLen < sizeof buffer ) {
# 1038|                   PR_GetErrorText( buffer );
# 1039|               }

Error: COMPILER_WARNING (CWE-195): [#def283]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1049:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 1049 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
# 1047|                           "\" exists!" );
# 1048|   
# 1049|->             if( errLen > 0 && errLen < sizeof buffer ) {
# 1050|                   PR_fprintf( PR_STDERR, "\t%s\n", buffer );
# 1051|               } else {

Error: COMPILER_WARNING: [#def284]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1816:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 1816 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
#      |         ^~~~~~~~~~~~
# 1814|   
# 1815|           /* Detect the key type (AES or DES) */
# 1816|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
# 1817|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 1818|           {

Error: COMPILER_WARNING (CWE-1023): [#def285]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:1827:9: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 1827 |         switch(detectedAlg)
#      |         ^~~~~~
# 1825|   
# 1826|           PR_fprintf(PR_STDOUT, "This key is of type: ");
# 1827|->         switch(detectedAlg)
# 1828|           {
# 1829|           case KEY_ALG_AES: PR_fprintf(PR_STDOUT, ALG_AES" . . .\n\n"); break;

Error: COMPILER_WARNING: [#def286]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2178:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2178 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
#      |         ^~~~~~~~~~~~
# 2176|   
# 2177|           /* Detect the key type (AES or DES) */
# 2178|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
# 2179|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 2180|           {

Error: COMPILER_WARNING (CWE-1023): [#def287]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2189:9: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 2189 |         switch(detectedAlg)
#      |         ^~~~~~
# 2187|   
# 2188|           PR_fprintf(PR_STDOUT, "This key is of type: ");
# 2189|->         switch(detectedAlg)
# 2190|           {
# 2191|           case KEY_ALG_AES: PR_fprintf(PR_STDOUT, ALG_AES" . . .\n\n"); break;

Error: COMPILER_WARNING: [#def288]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2378:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2378 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
#      |         ^~~~~~~~~~~~
# 2376|            * algorithm given on the command line
# 2377|            */
# 2378|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
# 2379|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 2380|           {

Error: COMPILER_WARNING (CWE-1023): [#def289]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2389:9: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 2389 |         switch(detectedAlg)
#      |         ^~~~~~
# 2387|   
# 2388|           PR_fprintf(PR_STDOUT, "The transport key is of type: ");
# 2389|->         switch(detectedAlg)
# 2390|           {
# 2391|           case KEY_ALG_AES: PR_fprintf(PR_STDOUT, ALG_AES" . . .\n\n"); break;

Error: COMPILER_WARNING: [#def290]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2564:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2564 |         SECItem seciCKAExtractable;
#      |         ^~~~~~~
# 2562|           //PAS MOD FE4
# 2563|           //This code flips the CKA_Extractible bit from true to false.
# 2564|->         SECItem seciCKAExtractable;
# 2565|           CK_BBOOL f = CK_FALSE;
# 2566|   

Error: COMPILER_WARNING: [#def291]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2698:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2698 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
#      |         ^~~~~~~~~~~~
# 2696|            * must match.
# 2697|            */
# 2698|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
# 2699|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 2700|           {

Error: COMPILER_WARNING (CWE-195): [#def292]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2707:29: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘KeyAlgorithm’ and ‘int’
# 2707 |         else if(detectedAlg != keyAlg)
#      |                             ^~
# 2705|               goto shutdown;
# 2706|           }
# 2707|->         else if(detectedAlg != keyAlg)
# 2708|           {
# 2709|               char *detectedAlgString;

Error: COMPILER_WARNING (CWE-1023): [#def293]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2710:13: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 2710 |             switch(detectedAlg)
#      |             ^~~~~~
# 2708|           {
# 2709|               char *detectedAlgString;
# 2710|->             switch(detectedAlg)
# 2711|               {
# 2712|               case KEY_ALG_AES: detectedAlgString = ALG_AES; break;

Error: COMPILER_WARNING (CWE-704): [#def294]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2712:49: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2712 |             case KEY_ALG_AES: detectedAlgString = ALG_AES; break;
#      |                                                 ^
# 2710|               switch(detectedAlg)
# 2711|               {
# 2712|->             case KEY_ALG_AES: detectedAlgString = ALG_AES; break;
# 2713|               case KEY_ALG_DES: detectedAlgString = ALG_DES; break;
# 2714|               }

Error: COMPILER_WARNING (CWE-704): [#def295]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2713:49: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2713 |             case KEY_ALG_DES: detectedAlgString = ALG_DES; break;
#      |                                                 ^
# 2711|               {
# 2712|               case KEY_ALG_AES: detectedAlgString = ALG_AES; break;
# 2713|->             case KEY_ALG_DES: detectedAlgString = ALG_DES; break;
# 2714|               }
# 2715|   

Error: COMPILER_WARNING (CWE-457): [#def296]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2716:13: warning[-Wmaybe-uninitialized]: ‘detectedAlgString’ may be used uninitialized
# 2716 |             PR_fprintf(PR_STDERR,
#      |             ^~~~~~~~~~~~~~~~~~~~~
# 2717 |                     "The transport key type (%s) does not match the -a algorithm"
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2718 |                     " parameter. Exiting.\n\n", detectedAlgString);
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2709:19: note: ‘detectedAlgString’ was declared here
# 2709 |             char *detectedAlgString;
#      |                   ^~~~~~~~~~~~~~~~~
# 2714|               }
# 2715|   
# 2716|->             PR_fprintf(PR_STDERR,
# 2717|                       "The transport key type (%s) does not match the -a algorithm"
# 2718|                       " parameter. Exiting.\n\n", detectedAlgString);

Error: COMPILER_WARNING: [#def297]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:2962:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2962 |         SECItem seciCKAExtractable;
#      |         ^~~~~~~
# 2960|           //PAS MOD FE4
# 2961|           //This code flips the CKA_Extractible bit from true to false.
# 2962|->         SECItem seciCKAExtractable;
# 2963|           CK_BBOOL f = CK_FALSE;
# 2964|           seciCKAExtractable.data = (unsigned char *)PR_Malloc(sizeof(CK_BBOOL));

Error: CLANG_WARNING: [#def298]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pistool.c:3146:9: warning[deadcode.DeadStores]: Value stored to 'KCVLen' is never read
# 3144|                       KCVLen );
# 3145|           KCV = NULL;
# 3146|->         KCVLen = 0;
# 3147|       }
# 3148|   

Error: COMPILER_WARNING (CWE-909): [#def299]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:76:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   76 |           offsetof(CERTPolicyQualifier, qualifierID) },
#      |           ^~~~~~~~
/usr/include/nss3/secoid.h:18: included_from: Included from here.
/usr/include/nss3/secmodt.h:9: included_from: Included from here.
/usr/include/nss3/keythi.h:11: included_from: Included from here.
/usr/include/nss3/cert.h:21: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:53: included_from: Included from here.
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   74|   	  0, NULL, sizeof(CERTPolicyQualifier) },
#   75|       { SEC_ASN1_OBJECT_ID,
#   76|-> 	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|   	  offsetof(CERTPolicyQualifier, qualifierValue) },

Error: COMPILER_WARNING (CWE-909): [#def300]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:78:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   78 |           offsetof(CERTPolicyQualifier, qualifierValue) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   76|   	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|-> 	  offsetof(CERTPolicyQualifier, qualifierValue) },
#   79|       { 0 }
#   80|   };

Error: COMPILER_WARNING (CWE-909): [#def301]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:86:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   86 |           offsetof(CERTPolicyInfo, policyID) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   84|   	  0, NULL, sizeof(CERTPolicyInfo) },
#   85|       { SEC_ASN1_OBJECT_ID,
#   86|-> 	  offsetof(CERTPolicyInfo, policyID) },
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),

Error: COMPILER_WARNING (CWE-909): [#def302]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:89:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   89 |           secu_PolicyQualifierTemplate },
#      |           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),
#   89|-> 	  secu_PolicyQualifierTemplate },
#   90|       { 0 }
#   91|   };

Error: COMPILER_WARNING (CWE-563): [#def303]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:181:37: warning[-Wunused-parameter]: unused parameter ‘msg’
#  181 |                               char *msg, int level)
#      |                               ~~~~~~^~~
#  179|   static SECStatus
#  180|   secu_PrintUserNoticeQualifier(FILE *out, SECItem * qualifierValue,
#  181|->                               char *msg, int level)
#  182|   {
#  183|       CERTUserNotice *userNotice = NULL;

Error: COMPILER_WARNING (CWE-704): [#def304]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintUserNoticeQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:200:30: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
#  200 |                              "Display Text", level+1);
#      |                              ^~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:283:60: note: expected ‘char *’ but argument is of type ‘const char *’
#  283 | extern void SECU_PrintString(FILE *out, SECItem *si, char *m, int level);
#      |                                                      ~~~~~~^
#  198|   	if (userNotice->displayText.len != 0) {
#  199|   	    SECU_PrintString(out,&userNotice->displayText,
#  200|-> 			     "Display Text", level+1);
#  201|   	}
#  202|   	CERT_DestroyUserNotice(userNotice);

Error: COMPILER_WARNING (CWE-704): [#def305]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:216:41: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
#  216 |                                         "Policy Qualifier Name", level);
#      |                                         ^~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:200:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  200 | extern SECOidTag SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level);
#      |                                                              ~~~~~~^
#  214|   
#  215|      SECU_PrintObjectID(out, &policyQualifier->qualifierID , 
#  216|-> 					"Policy Qualifier Name", level);
#  217|      if (!qualifierValue->data) {
#  218|   	SECU_Indent(out, level);

Error: COMPILER_WARNING: [#def306]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:224:11: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  224 |        if (SECSuccess == rv)
#      |           ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:227:4: note: here
#  227 |    case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#      |    ^~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/random.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/random.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/retrieve.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/retrieve.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#  222|      case SEC_OID_PKIX_USER_NOTICE_QUALIFIER:
#  223|          rv = secu_PrintUserNoticeQualifier(out, qualifierValue, msg, level);
#  224|->        if (SECSuccess == rv)
#  225|   	   break;
#  226|          /* fall through on error */

Error: COMPILER_WARNING (CWE-704): [#def307]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:229:44: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
#  229 |         SECU_PrintAny(out, qualifierValue, "Policy Qualifier Data", level);
#      |                                            ^~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:284:56: note: expected ‘char *’ but argument is of type ‘const char *’
#  284 | extern void SECU_PrintAny(FILE *out, SECItem *i, char *m, int level);
#      |                                                  ~~~~~~^
#  227|      case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#  228|      default:
#  229|-> 	SECU_PrintAny(out, qualifierValue, "Policy Qualifier Data", level);
#  230|   	break;
#  231|      }

Error: COMPILER_WARNING (CWE-563): [#def308]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:236:65: warning[-Wunused-parameter]: unused parameter ‘msg’
#  236 | secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,char *msg,int level)
#      |                                                           ~~~~~~^~~
#  234|   
#  235|   static SECStatus
#  236|-> secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,char *msg,int level)
#  237|   {
#  238|      CERTPolicyQualifier **policyQualifiers;

Error: COMPILER_WARNING (CWE-704): [#def309]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:241:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
#  241 |    SECU_PrintObjectID(out, &policyInfo->policyID , "Policy Name", level);
#      |                                                    ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:200:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  200 | extern SECOidTag SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level);
#      |                                                              ~~~~~~^
#  239|   
#  240|      policyQualifiers = policyInfo->policyQualifiers;
#  241|->    SECU_PrintObjectID(out, &policyInfo->policyID , "Policy Name", level);
#  242|      
#  243|      while (policyQualifiers && *policyQualifiers != NULL) {

Error: COMPILER_WARNING (CWE-704): [#def310]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:244:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPolicyQualifier’ discards ‘const’ qualifier from pointer target type
#  244 |         secu_PrintPolicyQualifier(out,*policyQualifiers,"",level+1);
#      |                                                         ^~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:210:33: note: expected ‘char *’ but argument is of type ‘const char *’
#  210 |                           char *msg,int level)
#      |                           ~~~~~~^~~
#  242|      
#  243|      while (policyQualifiers && *policyQualifiers != NULL) {
#  244|-> 	secu_PrintPolicyQualifier(out,*policyQualifiers,"",level+1);
#  245|   	policyQualifiers++;
#  246|      }

Error: COMPILER_WARNING (CWE-704): [#def311]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘SECU_PrintPolicy’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:263:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
#  263 |         SECU_PrintAny(out, value, "Invalid Policy Data", level);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:284:56: note: expected ‘char *’ but argument is of type ‘const char *’
#  284 | extern void SECU_PrintAny(FILE *out, SECItem *i, char *m, int level);
#      |                                                  ~~~~~~^
#  261|      policies = secu_DecodeCertificatePoliciesExtension(value);
#  262|      if (policies == NULL) {
#  263|-> 	SECU_PrintAny(out, value, "Invalid Policy Data", level);
#  264|   	return;
#  265|      }

Error: COMPILER_WARNING (CWE-704): [#def312]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:269:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPolicyInfo’ discards ‘const’ qualifier from pointer target type
#  269 |         secu_PrintPolicyInfo(out,*policyInfos,"",level);
#      |                                               ^~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:236:65: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,char *msg,int level)
#      |                                                           ~~~~~~^~~
#  267|      policyInfos = policies->policyInfos;
#  268|      while (policyInfos && *policyInfos != NULL) {
#  269|-> 	secu_PrintPolicyInfo(out,*policyInfos,"",level);
#  270|   	policyInfos++;
#  271|      }

Error: COMPILER_WARNING (CWE-704): [#def313]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘SECU_PrintPrivKeyUsagePeriodExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:292:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintGeneralizedTime’ discards ‘const’ qualifier from pointer target type
#  292 |         SECU_PrintGeneralizedTime(out, &prd->notBefore, "Not Before", level);
#      |                                                         ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:224:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  224 | extern void SECU_PrintGeneralizedTime(FILE *out, SECItem *t, char *m,
#      |                                                              ~~~~~~^
#  290|       }
#  291|       if (prd->notBefore.data) {
#  292|-> 	SECU_PrintGeneralizedTime(out, &prd->notBefore, "Not Before", level);
#  293|       }
#  294|       if (prd->notAfter.data) {

Error: COMPILER_WARNING (CWE-704): [#def314]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/pppolicy.c:295:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintGeneralizedTime’ discards ‘const’ qualifier from pointer target type
#  295 |         SECU_PrintGeneralizedTime(out, &prd->notAfter,  "Not After ", level);
#      |                                                         ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:224:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  224 | extern void SECU_PrintGeneralizedTime(FILE *out, SECItem *t, char *m,
#      |                                                              ~~~~~~^
#  293|       }
#  294|       if (prd->notAfter.data) {
#  295|-> 	SECU_PrintGeneralizedTime(out, &prd->notAfter,  "Not After ", level);
#  296|       }
#  297|       if (!prd->notBefore.data && !prd->notAfter.data) {

Error: CPPCHECK_WARNING: [#def315]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/retrieve.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def316]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secerror.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def317]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secerror.c:74:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_Strerror’
#   74 | SECU_Strerror(PRErrorCode errNum) {
#      | ^~~~~~~~~~~~~
#   72|    */
#   73|   const char *
#   74|-> SECU_Strerror(PRErrorCode errNum) {
#   75|       PRInt32 low  = 0;
#   76|       PRInt32 high = numStrings - 1;

Error: COMPILER_WARNING (CWE-252): [#def318]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secpwd.c: scope_hint: In function ‘SEC_GetPassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secpwd.c:69:21: warning[-Wunused-result]: ignoring return value of ‘fgets’ declared with attribute ‘warn_unused_result’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secpwd.c:117:9: note: in expansion of macro ‘QUIET_FGETS’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secpwd.c:44: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#   67|   static char * quiet_fgets (char *buf, int length, FILE *input);
#   68|   #else
#   69|-> #define QUIET_FGETS fgets
#   70|   #endif
#   71|   

Error: CPPCHECK_WARNING: [#def319]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def320]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:99:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_GetString’
#   99 | SECU_GetString(int16 error_number)
#      | ^~~~~~~~~~~~~~
#   97|   
#   98|   char *
#   99|-> SECU_GetString(int16 error_number)
#  100|   {
#  101|   

Error: COMPILER_WARNING (CWE-758): [#def321]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintErrMsg’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      | ^~~~~~~~~~~~~~~~
#  106|   
#  107|   void 
#  108|-> SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#  109|   {
#  110|       va_list args;

Error: COMPILER_WARNING: [#def322]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintErrMsg’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:118:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintErrMsg’ might be a candidate for ‘gnu_printf’ format attribute
#  118 |     vfprintf(out, msg, args);
#      |     ^~~~~~~~
#  116|       SECU_Indent(out, level);
#  117|       fprintf(out, "%s: ", progName);
#  118|->     vfprintf(out, msg, args);
#  119|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  120|   	fprintf(out, ": %s\n", errString);

Error: COMPILER_WARNING: [#def323]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:137:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintError’ might be a candidate for ‘gnu_printf’ format attribute
#  137 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  135|   
#  136|       fprintf(stderr, "%s: ", progName);
#  137|->     vfprintf(stderr, msg, args);
#  138|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  139|   	fprintf(stderr, ": %s\n", errString);

Error: COMPILER_WARNING: [#def324]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSystemError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:153:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintSystemError’ might be a candidate for ‘gnu_printf’ format attribute
#  153 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  151|       va_start(args, msg);
#  152|       fprintf(stderr, "%s: ", progName);
#  153|->     vfprintf(stderr, msg, args);
#  154|   #if defined(_WIN32_WCE)
#  155|       fprintf(stderr, ": %d\n", PR_GetOSError());

Error: COMPILER_WARNING (CWE-563): [#def325]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_GetPasswordString’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:172:30: warning[-Wunused-parameter]: unused parameter ‘arg’
#  172 | SECU_GetPasswordString(void *arg, char *prompt)
#      |                        ~~~~~~^~~
#  170|   
#  171|   char *
#  172|-> SECU_GetPasswordString(void *arg, char *prompt)
#  173|   {
#  174|   #ifndef _WINDOWS

Error: CPPCHECK_WARNING (CWE-404): [#def326]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:188: error[resourceLeak]: Resource leak: input
#  186|       if (output == NULL) {
#  187|   	fprintf(stderr, "Error opening output terminal for write\n");
#  188|-> 	return NULL;
#  189|       }
#  190|   

Error: COMPILER_WARNING (CWE-563): [#def327]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_FilePasswd’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:221:31: warning[-Wunused-parameter]: unused parameter ‘slot’
#  221 | SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#      |                 ~~~~~~~~~~~~~~^~~~
#  219|    */
#  220|   char *
#  221|-> SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#  222|   {
#  223|       unsigned char phrase[200];

Error: COMPILER_WARNING (CWE-704): [#def328]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_GetModulePassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:262:40: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  262 |     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#      |                                        ^~~~~~~~~~
#  260|       secuPWData *pwdata = (secuPWData *)arg;
#  261|       secuPWData pwnull = { PW_NONE, 0 };
#  262|->     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#  263|       char *pw;
#  264|   

Error: COMPILER_WARNING (CWE-758): [#def329]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:307:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_InitSlotPassword’
#  307 | secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#      | ^~~~~~~~~~~~~~~~~~~~~
#  305|   
#  306|   char *
#  307|-> secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#  308|   {
#  309|       char *p0 = NULL;

Error: CPPCHECK_WARNING (CWE-404): [#def330]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:342: error[resourceLeak]: Resource leak: input
#  340|       if (output == NULL) {
#  341|   	PR_fprintf(PR_STDERR, "Error opening output terminal for write\n");
#  342|-> 	return NULL;
#  343|       }
#  344|   

Error: COMPILER_WARNING (CWE-704): [#def331]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_InitSlotPassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:349:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SEC_GetPassword’ discards ‘const’ qualifier from pointer target type
#  349 |         p0 = SEC_GetPassword(input, output, "Enter new password: ",
#      |                                             ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:123:57: note: expected ‘char *’ but argument is of type ‘const char *’
#  123 | extern char *SEC_GetPassword(FILE *in, FILE *out, char *msg,
#      |                                                   ~~~~~~^~~
#  347|   	if (p0) 
#  348|   	    PORT_Free(p0);
#  349|-> 	p0 = SEC_GetPassword(input, output, "Enter new password: ",
#  350|   			     SEC_BlindCheckPassword);
#  351|   

Error: COMPILER_WARNING (CWE-704): [#def332]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:354:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SEC_GetPassword’ discards ‘const’ qualifier from pointer target type
#  354 |         p1 = SEC_GetPassword(input, output, "Re-enter password: ",
#      |                                             ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:123:57: note: expected ‘char *’ but argument is of type ‘const char *’
#  123 | extern char *SEC_GetPassword(FILE *in, FILE *out, char *msg,
#      |                                                   ~~~~~~^~~
#  352|   	if (p1)
#  353|   	    PORT_Free(p1);
#  354|-> 	p1 = SEC_GetPassword(input, output, "Re-enter password: ",
#  355|   			     SEC_BlindCheckPassword);
#  356|   	if (p0 && p1 && !PORT_Strcmp(p0, p1)) {

Error: COMPILER_WARNING (CWE-563): [#def333]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_ChangePW’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:374:15: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  374 |     SECStatus rv;
#      |               ^~
#  372|   SECU_ChangePW(PK11SlotInfo *slot, char *passwd, char *pwFile)
#  373|   {
#  374|->     SECStatus rv;
#  375|       secuPWData pwdata, newpwdata;
#  376|       char *oldpw = NULL, *newpw = NULL;

Error: CLANG_WARNING: [#def334]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:391:2: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  389|       if (PK11_NeedUserInit(slot)) {
#  390|   	newpw = secu_InitSlotPassword(slot, PR_FALSE, &pwdata);
#  391|-> 	rv = PK11_InitPin(slot, (char*)NULL, newpw);
#  392|   	goto done;
#  393|       }

Error: COMPILER_WARNING (CWE-704): [#def335]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_ConfigDirectory’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:483:25: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  483 |         if (!home) home = "";
#      |                         ^
#  481|       if (base == NULL || *base == 0) {
#  482|   	home = PR_GetEnv("HOME");
#  483|-> 	if (!home) home = "";
#  484|   
#  485|   	if (*home && home[strlen(home) - 1] == '/')

Error: COMPILER_WARNING (CWE-563): [#def336]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_GetClientAuthData’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:503:47: warning[-Wunused-parameter]: unused parameter ‘fd’
#  503 | SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#      |                                   ~~~~~~~~~~~~^~
#  501|   /* This gets called by SSL when server wants our cert & key */
#  502|   int
#  503|-> SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  504|   		       struct CERTDistNamesStr *caNames,
#  505|                         struct CERTCertificateStr **pRetCert,

Error: COMPILER_WARNING (CWE-563): [#def337]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:504:49: warning[-Wunused-parameter]: unused parameter ‘caNames’
#  504 |                        struct CERTDistNamesStr *caNames,
#      |                        ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  502|   int
#  503|   SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  504|-> 		       struct CERTDistNamesStr *caNames,
#  505|                         struct CERTCertificateStr **pRetCert,
#  506|                         struct SECKEYPrivateKeyStr **pRetKey)

Error: COMPILER_WARNING (CWE-758): [#def338]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:544:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_StdinToItem’
#  544 | secu_StdinToItem(SECItem *dst)
#      | ^~~~~~~~~~~~~~~~
#  542|   
#  543|   SECStatus
#  544|-> secu_StdinToItem(SECItem *dst)
#  545|   {
#  546|       unsigned char buf[1000];

Error: CLANG_WARNING: [#def339]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:673:2: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  671|   
#  672|   	/* Read in ascii data */
#  673|-> 	rv = SECU_FileToItem(&filedata, inFile);
#  674|   	asc = (char *)filedata.data;
#  675|   	if (!asc) {

Error: CLANG_WARNING: [#def340]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:674:6: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
#  672|   	/* Read in ascii data */
#  673|   	rv = SECU_FileToItem(&filedata, inFile);
#  674|-> 	asc = (char *)filedata.data;
#  675|   	if (!asc) {
#  676|   	    fprintf(stderr, "unable to read data from input file\n");

Error: COMPILER_WARNING (CWE-758): [#def341]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:875:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_StripTagAndLength’
#  875 | SECU_StripTagAndLength(SECItem *i)
#      | ^~~~~~~~~~~~~~~~~~~~~~
#  873|   
#  874|   SECStatus
#  875|-> SECU_StripTagAndLength(SECItem *i)
#  876|   {
#  877|       unsigned int start;

Error: COMPILER_WARNING (CWE-758): [#def342]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1075:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSet’
# 1075 | SECU_PrintSet(FILE *out, SECItem *t, char *m, int level)
#      | ^~~~~~~~~~~~~
# 1073|   /* This prints a SET or SEQUENCE */
# 1074|   void
# 1075|-> SECU_PrintSet(FILE *out, SECItem *t, char *m, int level)
# 1076|   {
# 1077|       int            type        = t->data[0] & SEC_ASN1_TAGNUM_MASK;

Error: COMPILER_WARNING (CWE-758): [#def343]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1207:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedBoolean’
# 1207 | SECU_PrintEncodedBoolean(FILE *out, SECItem *i, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1205|   /* Print a DER encoded Boolean */
# 1206|   void
# 1207|-> SECU_PrintEncodedBoolean(FILE *out, SECItem *i, char *m, int level)
# 1208|   {
# 1209|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def344]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1216:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedInteger’
# 1216 | SECU_PrintEncodedInteger(FILE *out, SECItem *i, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1214|   /* Print a DER encoded integer */
# 1215|   void
# 1216|-> SECU_PrintEncodedInteger(FILE *out, SECItem *i, char *m, int level)
# 1217|   {
# 1218|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def345]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1225:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedObjectID’
# 1225 | SECU_PrintEncodedObjectID(FILE *out, SECItem *i, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 1223|   /* Print a DER encoded OID */
# 1224|   void
# 1225|-> SECU_PrintEncodedObjectID(FILE *out, SECItem *i, char *m, int level)
# 1226|   {
# 1227|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-704): [#def346]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintValidity’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1379:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 1379 |     SECU_PrintTimeChoice(out, &v->notBefore, "Not Before", level+1);
#      |                                              ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 1377|   {
# 1378|       SECU_Indent(out, level);  fprintf(out, "%s:\n", m);
# 1379|->     SECU_PrintTimeChoice(out, &v->notBefore, "Not Before", level+1);
# 1380|       SECU_PrintTimeChoice(out, &v->notAfter,  "Not After ", level+1);
# 1381|       return 0;

Error: COMPILER_WARNING (CWE-704): [#def347]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1380:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 1380 |     SECU_PrintTimeChoice(out, &v->notAfter,  "Not After ", level+1);
#      |                                              ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 1378|       SECU_Indent(out, level);  fprintf(out, "%s:\n", m);
# 1379|       SECU_PrintTimeChoice(out, &v->notBefore, "Not Before", level+1);
# 1380|->     SECU_PrintTimeChoice(out, &v->notAfter,  "Not After ", level+1);
# 1381|       return 0;
# 1382|   }

Error: COMPILER_WARNING (CWE-704): [#def348]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAttribute’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1445:44: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1445 |     SECU_PrintObjectID(out, &(attr->type), "Type", level+1);
#      |                                            ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1443|        * and print the value(s) appropriately!
# 1444|        */
# 1445|->     SECU_PrintObjectID(out, &(attr->type), "Type", level+1);
# 1446|       if (attr->values != NULL) {
# 1447|   	i = 0;

Error: COMPILER_WARNING (CWE-704): [#def349]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintRSAPublicKey’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1474:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1474 |     SECU_PrintInteger(out, &pk->u.rsa.modulus, "Modulus", level+1);
#      |                                                ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1472|   
# 1473|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1474|->     SECU_PrintInteger(out, &pk->u.rsa.modulus, "Modulus", level+1);
# 1475|       SECU_PrintInteger(out, &pk->u.rsa.publicExponent, "Exponent", level+1);
# 1476|       if (pk->u.rsa.publicExponent.len == 1 &&

Error: COMPILER_WARNING (CWE-704): [#def350]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1475:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1475 |     SECU_PrintInteger(out, &pk->u.rsa.publicExponent, "Exponent", level+1);
#      |                                                       ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1473|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1474|       SECU_PrintInteger(out, &pk->u.rsa.modulus, "Modulus", level+1);
# 1475|->     SECU_PrintInteger(out, &pk->u.rsa.publicExponent, "Exponent", level+1);
# 1476|       if (pk->u.rsa.publicExponent.len == 1 &&
# 1477|           pk->u.rsa.publicExponent.data[0] == 1) {

Error: COMPILER_WARNING (CWE-704): [#def351]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintDSAPublicKey’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1486:53: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1486 |     SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
#      |                                                     ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1484|   {
# 1485|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1486|->     SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
# 1487|       SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|       SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);

Error: COMPILER_WARNING (CWE-704): [#def352]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1487:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1487 |     SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
#      |                                                        ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1485|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1486|       SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
# 1487|->     SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|       SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
# 1489|       SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);

Error: COMPILER_WARNING (CWE-704): [#def353]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1488:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1488 |     SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
#      |                                                    ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1486|       SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
# 1487|       SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|->     SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
# 1489|       SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);
# 1490|   }

Error: COMPILER_WARNING (CWE-704): [#def354]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1489:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1489 |     SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);
#      |                                                    ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1487|       SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|       SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
# 1489|->     SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);
# 1490|   }
# 1491|   

Error: COMPILER_WARNING (CWE-563): [#def355]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1513:56: warning[-Wunused-parameter]: unused parameter ‘arena’
# 1513 | secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1511|   
# 1512|   static void
# 1513|-> secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1514|   		       CERTSubjectPublicKeyInfo *i,  char *msg, int level)
# 1515|   {

Error: COMPILER_WARNING (CWE-704): [#def356]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintSubjectPublicKeyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1519:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 1519 |     SECU_PrintAlgorithmID(out, &i->algorithm, "Public Key Algorithm", level+1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 1517|   
# 1518|       SECU_Indent(out, level); fprintf(out, "%s:\n", msg);
# 1519|->     SECU_PrintAlgorithmID(out, &i->algorithm, "Public Key Algorithm", level+1);
# 1520|   
# 1521|       pk = SECKEY_ExtractPublicKey(i);

Error: COMPILER_WARNING (CWE-704): [#def357]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1525:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRSAPublicKey’ discards ‘const’ qualifier from pointer target type
# 1525 |             secu_PrintRSAPublicKey(out, pk, "RSA Public Key", level +1);
#      |                                             ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1470:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 1470 | secu_PrintRSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m, int level)
#      |                                                        ~~~~~~^
# 1523|   	switch (pk->keyType) {
# 1524|   	case rsaKey:
# 1525|-> 	    secu_PrintRSAPublicKey(out, pk, "RSA Public Key", level +1);
# 1526|   	    break;
# 1527|   

Error: COMPILER_WARNING (CWE-704): [#def358]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1529:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDSAPublicKey’ discards ‘const’ qualifier from pointer target type
# 1529 |             secu_PrintDSAPublicKey(out, pk, "DSA Public Key", level +1);
#      |                                             ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1483:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 1483 | secu_PrintDSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m, int level)
#      |                                                        ~~~~~~^
# 1527|   
# 1528|   	case dsaKey:
# 1529|-> 	    secu_PrintDSAPublicKey(out, pk, "DSA Public Key", level +1);
# 1530|   	    break;
# 1531|   

Error: COMPILER_WARNING (CWE-704): [#def359]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1551:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1551 |         SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
#      |                                      ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1549|   	PORT_FreeArena(pk->arena, PR_FALSE);
# 1550|       } else {
# 1551|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
# 1552|   loser:
# 1553|   	if (i->subjectPublicKey.data) {

Error: COMPILER_WARNING (CWE-704): [#def360]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1551:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1551 |         SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
#      |                                               ^~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1549|   	PORT_FreeArena(pk->arena, PR_FALSE);
# 1550|       } else {
# 1551|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
# 1552|   loser:
# 1553|   	if (i->subjectPublicKey.data) {

Error: COMPILER_WARNING (CWE-704): [#def361]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1554:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1554 |             SECU_PrintAny(out, &i->subjectPublicKey, "Raw", level);
#      |                                                      ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1552|   loser:
# 1553|   	if (i->subjectPublicKey.data) {
# 1554|-> 	    SECU_PrintAny(out, &i->subjectPublicKey, "Raw", level);
# 1555|   	}
# 1556|       }

Error: COMPILER_WARNING (CWE-704): [#def362]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintX509InvalidDate’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1575:43: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘CERT_GenTime2FormattedAscii’ discards ‘const’ qualifier from pointer target type
# 1575 |                             (invalidTime, "%a %b %d %H:%M:%S %Y");
#      |                                           ^~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:54: included_from: Included from here.
/usr/include/nss3/secder.h:158:64: note: expected ‘char *’ but argument is of type ‘const char *’
#  158 | extern char *CERT_GenTime2FormattedAscii(PRTime genTime, char *format);
#      |                                                          ~~~~~~^~~~~~
# 1573|   	if (rv == SECSuccess) {
# 1574|   	    formattedTime = CERT_GenTime2FormattedAscii
# 1575|-> 			    (invalidTime, "%a %b %d %H:%M:%S %Y");
# 1576|   	    SECU_Indent(out, level +1);
# 1577|   	    fprintf (out, "%s: %s\n", msg, formattedTime);

Error: COMPILER_WARNING (CWE-704): [#def363]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintNSCertType’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1649:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1649 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1647|       if ((my.data[0] != SEC_ASN1_BIT_STRING) || 
# 1648|           SECSuccess != SECU_StripTagAndLength(&my)) {
# 1649|-> 	SECU_PrintAny(out, value, "Data", level);
# 1650|   	return SECSuccess;
# 1651|       }

Error: COMPILER_WARNING (CWE-563): [#def364]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1688:57: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1688 | secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level)
#      |                                                   ~~~~~~^~~
# 1686|   /* X509KeyUsage is merely a bit string whose bits are displayed symbolically */
# 1687|   static void
# 1688|-> secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level) 
# 1689|   {
# 1690|       int     unused;

Error: COMPILER_WARNING (CWE-704): [#def365]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintX509KeyUsage’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1698:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1698 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1696|       if ((my.data[0] != SEC_ASN1_BIT_STRING) || 
# 1697|           SECSuccess != SECU_StripTagAndLength(&my)) {
# 1698|-> 	SECU_PrintAny(out, value, "Data", level);
# 1699|   	return;
# 1700|       }

Error: COMPILER_WARNING (CWE-704): [#def366]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintGeneralName’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1766:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1766 |         SECU_PrintAny(     out, &gname->name.OthName.name, "Other Name", level);
#      |                                                            ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1764|       switch (gname->type) {
# 1765|       case certOtherName :
# 1766|-> 	SECU_PrintAny(     out, &gname->name.OthName.name, "Other Name", level);
# 1767|   	SECU_PrintObjectID(out, &gname->name.OthName.oid,  "OID",      level+1);
# 1768|   	break;

Error: COMPILER_WARNING (CWE-704): [#def367]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1767:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1767 |         SECU_PrintObjectID(out, &gname->name.OthName.oid,  "OID",      level+1);
#      |                                                            ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1765|       case certOtherName :
# 1766|   	SECU_PrintAny(     out, &gname->name.OthName.name, "Other Name", level);
# 1767|-> 	SECU_PrintObjectID(out, &gname->name.OthName.oid,  "OID",      level+1);
# 1768|   	break;
# 1769|       case certDirectoryName :

Error: COMPILER_WARNING (CWE-704): [#def368]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1770:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 1770 |         SECU_PrintName(out, &gname->name.directoryName, "Directory Name", level);
#      |                                                         ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:293:61: note: expected ‘char *’ but argument is of type ‘const char *’
#  293 | extern void SECU_PrintName(FILE *out, CERTName *name, char *msg, int level);
#      |                                                       ~~~~~~^~~
# 1768|   	break;
# 1769|       case certDirectoryName :
# 1770|-> 	SECU_PrintName(out, &gname->name.directoryName, "Directory Name", level);
# 1771|   	break;
# 1772|       case certRFC822Name :

Error: COMPILER_WARNING (CWE-704): [#def369]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1773:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRawString’ discards ‘const’ qualifier from pointer target type
# 1773 |         secu_PrintRawString(   out, &gname->name.other, "RFC822 Name", level);
#      |                                                         ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:922:51: note: expected ‘char *’ but argument is of type ‘const char *’
#  922 | secu_PrintRawString(FILE *out, SECItem *si, char *m, int level)
#      |                                             ~~~~~~^
# 1771|   	break;
# 1772|       case certRFC822Name :
# 1773|-> 	secu_PrintRawString(   out, &gname->name.other, "RFC822 Name", level);
# 1774|   	break;
# 1775|       case certDNSName :

Error: COMPILER_WARNING (CWE-704): [#def370]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1776:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRawString’ discards ‘const’ qualifier from pointer target type
# 1776 |         secu_PrintRawString(   out, &gname->name.other, "DNS name", level);
#      |                                                         ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:922:51: note: expected ‘char *’ but argument is of type ‘const char *’
#  922 | secu_PrintRawString(FILE *out, SECItem *si, char *m, int level)
#      |                                             ~~~~~~^
# 1774|   	break;
# 1775|       case certDNSName :
# 1776|-> 	secu_PrintRawString(   out, &gname->name.other, "DNS name", level);
# 1777|   	break;
# 1778|       case certURI :

Error: COMPILER_WARNING (CWE-704): [#def371]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1779:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRawString’ discards ‘const’ qualifier from pointer target type
# 1779 |         secu_PrintRawString(   out, &gname->name.other, "URI", level);
#      |                                                         ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:922:51: note: expected ‘char *’ but argument is of type ‘const char *’
#  922 | secu_PrintRawString(FILE *out, SECItem *si, char *m, int level)
#      |                                             ~~~~~~^
# 1777|   	break;
# 1778|       case certURI :
# 1779|-> 	secu_PrintRawString(   out, &gname->name.other, "URI", level);
# 1780|   	break;
# 1781|       case certIPAddress :

Error: COMPILER_WARNING (CWE-704): [#def372]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1782:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintIPAddress’ discards ‘const’ qualifier from pointer target type
# 1782 |         secu_PrintIPAddress(out, &gname->name.other, "IP Address", level);
#      |                                                      ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1723:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1723 | secu_PrintIPAddress(FILE *out, SECItem *value, char *msg, int level)
#      |                                                ~~~~~~^~~
# 1780|   	break;
# 1781|       case certIPAddress :
# 1782|-> 	secu_PrintIPAddress(out, &gname->name.other, "IP Address", level);
# 1783|   	break;
# 1784|       case certRegisterID :

Error: COMPILER_WARNING (CWE-704): [#def373]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1785:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1785 |         SECU_PrintObjectID( out, &gname->name.other, "Registered ID", level);
#      |                                                      ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1783|   	break;
# 1784|       case certRegisterID :
# 1785|-> 	SECU_PrintObjectID( out, &gname->name.other, "Registered ID", level);
# 1786|   	break;
# 1787|       case certX400Address :

Error: COMPILER_WARNING (CWE-704): [#def374]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1788:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1788 |         SECU_PrintAny(      out, &gname->name.other, "X400 Address", level);
#      |                                                      ^~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1786|   	break;
# 1787|       case certX400Address :
# 1788|-> 	SECU_PrintAny(      out, &gname->name.other, "X400 Address", level);
# 1789|   	break;
# 1790|       case certEDIPartyName :

Error: COMPILER_WARNING (CWE-704): [#def375]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1791:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1791 |         SECU_PrintAny(      out, &gname->name.other, "EDI Party", level);
#      |                                                      ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1789|   	break;
# 1790|       case certEDIPartyName :
# 1791|-> 	SECU_PrintAny(      out, &gname->name.other, "EDI Party", level);
# 1792|   	break;
# 1793|       default:

Error: COMPILER_WARNING (CWE-563): [#def376]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1802:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1802 | secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1800|   
# 1801|   static void
# 1802|-> secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level) 
# 1803|   {
# 1804|       CERTAuthKeyID *kid  = NULL;

Error: COMPILER_WARNING (CWE-704): [#def377]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAuthKeyIDExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1808:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1808 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1806|   
# 1807|       if (!pool) {
# 1808|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1809|   	return;
# 1810|       }

Error: COMPILER_WARNING (CWE-704): [#def378]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1808:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1808 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1806|   
# 1807|       if (!pool) {
# 1808|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1809|   	return;
# 1810|       }

Error: COMPILER_WARNING (CWE-704): [#def379]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1813:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1813 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1811|       kid = CERT_DecodeAuthKeyID(pool, value);
# 1812|       if (!kid) {
# 1813|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1814|   	SECU_PrintAny(out, value, "Data", level);
# 1815|       } else {

Error: COMPILER_WARNING (CWE-704): [#def380]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1813:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1813 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1811|       kid = CERT_DecodeAuthKeyID(pool, value);
# 1812|       if (!kid) {
# 1813|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1814|   	SECU_PrintAny(out, value, "Data", level);
# 1815|       } else {

Error: COMPILER_WARNING (CWE-704): [#def381]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1814:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1814 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1812|       if (!kid) {
# 1813|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1814|-> 	SECU_PrintAny(out, value, "Data", level);
# 1815|       } else {
# 1816|   	int keyIDPresent  = (kid->keyID.data && kid->keyID.len);

Error: COMPILER_WARNING (CWE-704): [#def382]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1832:61: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1832 |             secu_PrintGeneralName(out, kid->authCertIssuer, "Issuer", level);
#      |                                                             ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1758:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1758 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1830|   	    SECU_PrintAsHex(out, &kid->keyID, "Key ID", level);
# 1831|   	if (issuerPresent)
# 1832|-> 	    secu_PrintGeneralName(out, kid->authCertIssuer, "Issuer", level);
# 1833|   	if (snPresent)
# 1834|   	    SECU_PrintInteger(out, &kid->authCertSerialNumber, 

Error: COMPILER_WARNING (CWE-704): [#def383]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1835:29: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1835 |                             "Serial Number", level);
#      |                             ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1833|   	if (snPresent)
# 1834|   	    SECU_PrintInteger(out, &kid->authCertSerialNumber, 
# 1835|-> 	                    "Serial Number", level);
# 1836|       }
# 1837|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def384]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAltNameExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1849:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1849 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1847|   
# 1848|       if (!pool) {
# 1849|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1850|   	return;
# 1851|       }

Error: COMPILER_WARNING (CWE-704): [#def385]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1849:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1849 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1847|   
# 1848|       if (!pool) {
# 1849|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1850|   	return;
# 1851|       }

Error: COMPILER_WARNING (CWE-704): [#def386]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1858:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1858 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1856|   	    PORT_SetError(SEC_ERROR_EXTENSION_VALUE_INVALID);
# 1857|   	}
# 1858|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1859|   	SECU_PrintAny(out, value, "Data", level);
# 1860|       } else {

Error: COMPILER_WARNING (CWE-704): [#def387]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1858:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1858 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1856|   	    PORT_SetError(SEC_ERROR_EXTENSION_VALUE_INVALID);
# 1857|   	}
# 1858|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1859|   	SECU_PrintAny(out, value, "Data", level);
# 1860|       } else {

Error: COMPILER_WARNING (CWE-704): [#def388]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1859:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1859 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1857|   	}
# 1858|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1859|-> 	SECU_PrintAny(out, value, "Data", level);
# 1860|       } else {
# 1861|   	do {

Error: COMPILER_WARNING (CWE-563): [#def389]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1870:64: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1870 | secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1868|   
# 1869|   static void
# 1870|-> secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1871|   {
# 1872|       CERTCrlDistributionPoints * dPoints;

Error: COMPILER_WARNING (CWE-704): [#def390]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintCRLDistPtsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1876:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1876 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1874|   
# 1875|       if (!pool) {
# 1876|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1877|   	return;
# 1878|       }

Error: COMPILER_WARNING (CWE-704): [#def391]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1876:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1876 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1874|   
# 1875|       if (!pool) {
# 1876|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1877|   	return;
# 1878|       }

Error: COMPILER_WARNING (CWE-704): [#def392]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1893:59: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1893 |                 SECU_PrintAny(out, &pPoint->derDistPoint, "Point", level);
#      |                                                           ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1891|   #endif
# 1892|   	    } else if (pPoint->derDistPoint.data) {
# 1893|-> 		SECU_PrintAny(out, &pPoint->derDistPoint, "Point", level);
# 1894|   	    }
# 1895|   	    if (pPoint->reasons.data) {

Error: COMPILER_WARNING (CWE-704): [#def393]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1896:67: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDecodedBitString’ discards ‘const’ qualifier from pointer target type
# 1896 |                 secu_PrintDecodedBitString(out, &pPoint->reasons, "Reasons",
#      |                                                                   ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1188:57: note: expected ‘char *’ but argument is of type ‘const char *’
# 1188 | secu_PrintDecodedBitString(FILE *out, SECItem *i, char *m, int level)
#      |                                                   ~~~~~~^
# 1894|   	    }
# 1895|   	    if (pPoint->reasons.data) {
# 1896|-> 		secu_PrintDecodedBitString(out, &pPoint->reasons, "Reasons", 
# 1897|   		                           level);
# 1898|   	    }

Error: COMPILER_WARNING (CWE-704): [#def394]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1900:63: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1900 |                 secu_PrintGeneralName(out, pPoint->crlIssuer, "Issuer", level);
#      |                                                               ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1758:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1758 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1898|   	    }
# 1899|   	    if (pPoint->crlIssuer) {
# 1900|-> 		secu_PrintGeneralName(out, pPoint->crlIssuer, "Issuer", level);
# 1901|   	    }
# 1902|   	}

Error: COMPILER_WARNING (CWE-704): [#def395]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1904:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1904 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1902|   	}
# 1903|       } else {
# 1904|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1905|   	SECU_PrintAny(out, value, "Data", level);
# 1906|       }

Error: COMPILER_WARNING (CWE-704): [#def396]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1904:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1904 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1902|   	}
# 1903|       } else {
# 1904|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1905|   	SECU_PrintAny(out, value, "Data", level);
# 1906|       }

Error: COMPILER_WARNING (CWE-704): [#def397]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1905:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1905 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1903|       } else {
# 1904|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1905|-> 	SECU_PrintAny(out, value, "Data", level);
# 1906|       }
# 1907|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def398]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintSubtree’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1921:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1921 |             SECU_PrintInteger(out, &value->min, "Minimum", level+1);
#      |                                                 ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1919|   	secu_PrintGeneralName(out, &value->name, NULL, level);
# 1920|   	if (value->min.data)
# 1921|-> 	    SECU_PrintInteger(out, &value->min, "Minimum", level+1);
# 1922|   	if (value->max.data)
# 1923|   	    SECU_PrintInteger(out, &value->max, "Maximum", level+1);

Error: COMPILER_WARNING (CWE-704): [#def399]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1923:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1923 |             SECU_PrintInteger(out, &value->max, "Maximum", level+1);
#      |                                                 ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1921|   	    SECU_PrintInteger(out, &value->min, "Minimum", level+1);
# 1922|   	if (value->max.data)
# 1923|-> 	    SECU_PrintInteger(out, &value->max, "Maximum", level+1);
# 1924|   	value = CERT_GetNextNameConstraint(value);
# 1925|       } while (value != head);

Error: COMPILER_WARNING (CWE-563): [#def400]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1929:69: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1929 | secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                               ~~~~~~^~~
# 1927|   
# 1928|   static void
# 1929|-> secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1930|   {
# 1931|       CERTNameConstraints * cnstrnts;

Error: COMPILER_WARNING (CWE-704): [#def401]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1935:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1935 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1933|   
# 1934|       if (!pool) {
# 1935|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1936|   	return;
# 1937|       }

Error: COMPILER_WARNING (CWE-704): [#def402]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1935:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1935 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1933|   
# 1934|       if (!pool) {
# 1935|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1936|   	return;
# 1937|       }

Error: COMPILER_WARNING (CWE-704): [#def403]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1940:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1940 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1938|       cnstrnts = CERT_DecodeNameConstraintsExtension(pool, value);
# 1939|       if (!cnstrnts) {
# 1940|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1941|       	SECU_PrintAny(out, value, "Raw", level);
# 1942|       } else {

Error: COMPILER_WARNING (CWE-704): [#def404]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1940:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1940 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1938|       cnstrnts = CERT_DecodeNameConstraintsExtension(pool, value);
# 1939|       if (!cnstrnts) {
# 1940|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1941|       	SECU_PrintAny(out, value, "Raw", level);
# 1942|       } else {

Error: COMPILER_WARNING (CWE-704): [#def405]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1941:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1941 |         SECU_PrintAny(out, value, "Raw", level);
#      |                                   ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1939|       if (!cnstrnts) {
# 1940|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1941|->     	SECU_PrintAny(out, value, "Raw", level);
# 1942|       } else {
# 1943|   	if (cnstrnts->permited)

Error: COMPILER_WARNING (CWE-704): [#def406]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1945:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNameConstraintSubtree’ discards ‘const’ qualifier from pointer target type
# 1945 |                                             "Permitted", level);
#      |                                             ^~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1913:39: note: expected ‘char *’ but argument is of type ‘const char *’
# 1913 |                                 char *msg, int level)
#      |                                 ~~~~~~^~~
# 1943|   	if (cnstrnts->permited)
# 1944|   	    secu_PrintNameConstraintSubtree(out, cnstrnts->permited, 
# 1945|-> 	                                    "Permitted", level);
# 1946|   	if (cnstrnts->excluded)
# 1947|   	    secu_PrintNameConstraintSubtree(out, cnstrnts->excluded, 

Error: COMPILER_WARNING (CWE-704): [#def407]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1948:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNameConstraintSubtree’ discards ‘const’ qualifier from pointer target type
# 1948 |                                             "Excluded", level);
#      |                                             ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1913:39: note: expected ‘char *’ but argument is of type ‘const char *’
# 1913 |                                 char *msg, int level)
#      |                                 ~~~~~~^~~
# 1946|   	if (cnstrnts->excluded)
# 1947|   	    secu_PrintNameConstraintSubtree(out, cnstrnts->excluded, 
# 1948|-> 	                                    "Excluded", level);
# 1949|       }
# 1950|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-563): [#def408]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1955:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1955 | secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1953|   
# 1954|   static void
# 1955|-> secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
# 1956|   {
# 1957|       CERTAuthInfoAccess **infos = NULL;

Error: COMPILER_WARNING (CWE-704): [#def409]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAuthorityInfoAcess’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1961:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1961 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1959|   
# 1960|       if (!pool) {
# 1961|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1962|   	return;
# 1963|       }

Error: COMPILER_WARNING (CWE-704): [#def410]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1961:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1961 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1959|   
# 1960|       if (!pool) {
# 1961|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1962|   	return;
# 1963|       }

Error: COMPILER_WARNING (CWE-704): [#def411]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1966:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1966 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1964|       infos = CERT_DecodeAuthInfoAccessExtension(pool, value);
# 1965|       if (!infos) {
# 1966|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1967|       	SECU_PrintAny(out, value, "Raw", level);
# 1968|       } else {

Error: COMPILER_WARNING (CWE-704): [#def412]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1966:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1966 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1964|       infos = CERT_DecodeAuthInfoAccessExtension(pool, value);
# 1965|       if (!infos) {
# 1966|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1967|       	SECU_PrintAny(out, value, "Raw", level);
# 1968|       } else {

Error: COMPILER_WARNING (CWE-704): [#def413]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1967:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1967 |         SECU_PrintAny(out, value, "Raw", level);
#      |                                   ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1965|       if (!infos) {
# 1966|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1967|->     	SECU_PrintAny(out, value, "Raw", level);
# 1968|       } else {
# 1969|   	CERTAuthInfoAccess *info;

Error: COMPILER_WARNING (CWE-704): [#def414]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1972:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1972 |                 SECU_PrintObjectID(out, &info->method, "Method", level);
#      |                                                        ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1970|   	while (NULL != (info = *infos++)) {
# 1971|   	    if (info->method.data) {
# 1972|-> 		SECU_PrintObjectID(out, &info->method, "Method", level);
# 1973|   	    } else {
# 1974|   	    	SECU_Indent(out,level);

Error: COMPILER_WARNING (CWE-704): [#def415]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1978:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1978 |                 secu_PrintGeneralName(out, info->location, "Location", level);
#      |                                                            ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1758:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1758 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1976|   	    }
# 1977|   	    if (info->location) {
# 1978|-> 		secu_PrintGeneralName(out, info->location, "Location", level);
# 1979|   	    } else {
# 1980|   		SECU_PrintAny(out, &info->derLocation, "Location", level);

Error: COMPILER_WARNING (CWE-704): [#def416]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1980:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1980 |                 SECU_PrintAny(out, &info->derLocation, "Location", level);
#      |                                                        ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1978|   		secu_PrintGeneralName(out, info->location, "Location", level);
# 1979|   	    } else {
# 1980|-> 		SECU_PrintAny(out, &info->derLocation, "Location", level);
# 1981|   	    }
# 1982|   	}

Error: COMPILER_WARNING (CWE-704): [#def417]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintExtensions’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2003:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 2003 |             SECU_PrintObjectID(out, tmpitem, "Name", level);
#      |                                              ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 2001|   
# 2002|   	    tmpitem = &(*extensions)->id;
# 2003|-> 	    SECU_PrintObjectID(out, tmpitem, "Name", level);
# 2004|   
# 2005|   	    tmpitem = &(*extensions)->critical;

Error: COMPILER_WARNING (CWE-704): [#def418]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2016:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintX509InvalidDate’ discards ‘const’ qualifier from pointer target type
# 2016 |                    secu_PrintX509InvalidDate(out, tmpitem, "Date", level );
#      |                                                            ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1560:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 1560 | secu_PrintX509InvalidDate(FILE *out, SECItem *value, char *msg, int level)
#      |                                                      ~~~~~~^~~
# 2014|   	      	case SEC_OID_X509_INVALID_DATE:
# 2015|   		case SEC_OID_NS_CERT_EXT_CERT_RENEWAL_TIME:
# 2016|-> 		   secu_PrintX509InvalidDate(out, tmpitem, "Date", level );
# 2017|   		   break;
# 2018|   		case SEC_OID_X509_CERTIFICATE_POLICIES:

Error: COMPILER_WARNING (CWE-704): [#def419]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2019:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintPolicy’ discards ‘const’ qualifier from pointer target type
# 2019 |                    SECU_PrintPolicy(out, tmpitem, "Data", level );
#      |                                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:286:63: note: expected ‘char *’ but argument is of type ‘const char *’
#  286 | extern void SECU_PrintPolicy(FILE *out, SECItem *value, char *msg, int level);
#      |                                                         ~~~~~~^~~
# 2017|   		   break;
# 2018|   		case SEC_OID_X509_CERTIFICATE_POLICIES:
# 2019|-> 		   SECU_PrintPolicy(out, tmpitem, "Data", level );
# 2020|   		   break;
# 2021|   		case SEC_OID_NS_CERT_EXT_BASE_URL:

Error: COMPILER_WARNING (CWE-704): [#def420]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2031:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
# 2031 |                     SECU_PrintString(out,tmpitem, "URL", level);
#      |                                                   ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:954:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  954 | SECU_PrintString(FILE *out, SECItem *si, char *m, int level)
#      |                                          ~~~~~~^
# 2029|   		case SEC_OID_NS_CERT_EXT_LOST_PASSWORD_URL:
# 2030|   		case SEC_OID_OCSP_RESPONDER:
# 2031|-> 		    SECU_PrintString(out,tmpitem, "URL", level);
# 2032|   		    break;
# 2033|   		case SEC_OID_NS_CERT_EXT_COMMENT:

Error: COMPILER_WARNING (CWE-704): [#def421]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2034:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
# 2034 |                     SECU_PrintString(out,tmpitem, "Comment", level);
#      |                                                   ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:954:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  954 | SECU_PrintString(FILE *out, SECItem *si, char *m, int level)
#      |                                          ~~~~~~^
# 2032|   		    break;
# 2033|   		case SEC_OID_NS_CERT_EXT_COMMENT:
# 2034|-> 		    SECU_PrintString(out,tmpitem, "Comment", level);
# 2035|   		    break;
# 2036|   		case SEC_OID_NS_CERT_EXT_SSL_SERVER_NAME:

Error: COMPILER_WARNING (CWE-704): [#def422]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2037:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
# 2037 |                     SECU_PrintString(out,tmpitem, "ServerName", level);
#      |                                                   ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:954:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  954 | SECU_PrintString(FILE *out, SECItem *si, char *m, int level)
#      |                                          ~~~~~~^
# 2035|   		    break;
# 2036|   		case SEC_OID_NS_CERT_EXT_SSL_SERVER_NAME:
# 2037|-> 		    SECU_PrintString(out,tmpitem, "ServerName", level);
# 2038|   		    break;
# 2039|   		case SEC_OID_NS_CERT_EXT_CERT_TYPE:

Error: COMPILER_WARNING (CWE-704): [#def423]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2040:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNSCertType’ discards ‘const’ qualifier from pointer target type
# 2040 |                     secu_PrintNSCertType(out,tmpitem,"Data",level);
#      |                                                      ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1639:55: note: expected ‘char *’ but argument is of type ‘const char *’
# 1639 | secu_PrintNSCertType(FILE *out, SECItem *value, char *msg, int level)
#      |                                                 ~~~~~~^~~
# 2038|   		    break;
# 2039|   		case SEC_OID_NS_CERT_EXT_CERT_TYPE:
# 2040|-> 		    secu_PrintNSCertType(out,tmpitem,"Data",level);
# 2041|   		    break;
# 2042|   		case SEC_OID_X509_BASIC_CONSTRAINTS:

Error: COMPILER_WARNING (CWE-704): [#def424]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2043:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintBasicConstraints’ discards ‘const’ qualifier from pointer target type
# 2043 |                     secu_PrintBasicConstraints(out,tmpitem,"Data",level);
#      |                                                            ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1604:61: note: expected ‘char *’ but argument is of type ‘const char *’
# 1604 | secu_PrintBasicConstraints(FILE *out, SECItem *value, char *msg, int level) {
#      |                                                       ~~~~~~^~~
# 2041|   		    break;
# 2042|   		case SEC_OID_X509_BASIC_CONSTRAINTS:
# 2043|-> 		    secu_PrintBasicConstraints(out,tmpitem,"Data",level);
# 2044|   		    break;
# 2045|   		case SEC_OID_X509_EXT_KEY_USAGE:

Error: COMPILER_WARNING (CWE-704): [#def425]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2108:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 2108 |                     SECU_PrintAny(out, tmpitem, "Data", level);
#      |                                                 ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 2106|   
# 2107|   	        default:
# 2108|-> 		    SECU_PrintAny(out, tmpitem, "Data", level);
# 2109|   		break;
# 2110|   	    }

Error: COMPILER_WARNING (CWE-704): [#def426]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintName’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2128:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2128 |         str = "!Invalid AVA!";
#      |             ^
# 2126|       str = nameStr = CERT_NameToAscii(name);
# 2127|       if (!str) {
# 2128|->     	str = "!Invalid AVA!";
# 2129|       }
# 2130|       my.data = (unsigned char *)str;

Error: COMPILER_WARNING (CWE-477): [#def427]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘printflags’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2149:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2147|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2148|   	    PORT_Strcat(trusts, "c");
# 2149|->     if (flags & CERTDB_VALID_PEER)
# 2150|   	if (!(flags & CERTDB_TRUSTED))
# 2151|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-704): [#def428]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertNickname’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2192:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2192 |         name = "(NULL)";
#      |              ^
# 2190|       }
# 2191|       if (!name || !name[0]) {
# 2192|->         name = "(NULL)";
# 2193|       }
# 2194|   

Error: COMPILER_WARNING (CWE-758): [#def429]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2211:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_DecodeAndPrintExtensions’
# 2211 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2209|   
# 2210|   int
# 2211|-> SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
# 2212|   {
# 2213|       CERTCertExtension **extensions = NULL;

Error: COMPILER_WARNING (CWE-758): [#def430]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2232:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfExtensions’
# 2232 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 2230|   /* print a decoded SET OF or SEQUENCE OF Extensions */
# 2231|   int
# 2232|-> SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
# 2233|   {
# 2234|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def431]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSetOfExtensions’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2239:58: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_DecodeAndPrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2239 |         rv |= SECU_DecodeAndPrintExtensions(out, any[0], "", level);
#      |                                                          ^~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2211:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 2211 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
#      |                                                        ~~~~~~^
# 2237|       }
# 2238|       while (any && any[0]) {
# 2239|->     	rv |= SECU_DecodeAndPrintExtensions(out, any[0], "", level);
# 2240|   	any++;
# 2241|       }

Error: COMPILER_WARNING (CWE-758): [#def432]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2247:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfAny’
# 2247 | SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~
# 2245|   /* print a decoded SET OF or SEQUENCE OF "ANY" */
# 2246|   int
# 2247|-> SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
# 2248|   {
# 2249|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def433]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSetOfAny’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2254:36: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 2254 |         SECU_PrintAny(out, any[0], "", level);
#      |                                    ^~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 2252|       }
# 2253|       while (any && any[0]) {
# 2254|->     	SECU_PrintAny(out, any[0], "", level);
# 2255|   	any++;
# 2256|       }

Error: COMPILER_WARNING (CWE-758): [#def434]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2261:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttribute’
# 2261 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~
# 2259|   
# 2260|   int
# 2261|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
# 2262|   {
# 2263|       int rv = 0;

Error: COMPILER_WARNING (CWE-563): [#def435]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2261:63: warning[-Wunused-parameter]: unused parameter ‘m’
# 2261 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
#      |                                                         ~~~~~~^
# 2259|   
# 2260|   int
# 2261|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
# 2262|   {
# 2263|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def436]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertAttribute’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2265:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 2265 |     tag = SECU_PrintObjectID(out, &attr->attrType, "Attribute Type", level);
#      |                                                    ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 2263|       int rv = 0;
# 2264|       SECOidTag tag;
# 2265|->     tag = SECU_PrintObjectID(out, &attr->attrType, "Attribute Type", level);
# 2266|       if (tag == SEC_OID_PKCS9_EXTENSION_REQUEST) {
# 2267|   	rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);

Error: COMPILER_WARNING (CWE-704): [#def437]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2267:62: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintSetOfExtensions’ discards ‘const’ qualifier from pointer target type
# 2267 |         rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
#      |                                                              ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2232:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 2232 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
#      |                                                     ~~~~~~^
# 2265|       tag = SECU_PrintObjectID(out, &attr->attrType, "Attribute Type", level);
# 2266|       if (tag == SEC_OID_PKCS9_EXTENSION_REQUEST) {
# 2267|-> 	rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
# 2268|       } else {
# 2269|   	rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);

Error: COMPILER_WARNING (CWE-704): [#def438]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2269:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintSetOfAny’ discards ‘const’ qualifier from pointer target type
# 2269 |         rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);
#      |                                                       ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2247:52: note: expected ‘char *’ but argument is of type ‘const char *’
# 2247 | SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
#      |                                              ~~~~~~^
# 2267|   	rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
# 2268|       } else {
# 2269|-> 	rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);
# 2270|       }
# 2271|       return rv;

Error: COMPILER_WARNING (CWE-758): [#def439]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2275:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttributes’
# 2275 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 2273|   
# 2274|   int
# 2275|-> SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
# 2276|   {
# 2277|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def440]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertificateRequest’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2307:42: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2307 |     SECU_PrintInteger(out, &cr->version, "Version", level+1);
#      |                                          ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2305|       /* Pretty print it out */
# 2306|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2307|->     SECU_PrintInteger(out, &cr->version, "Version", level+1);
# 2308|       SECU_PrintName(out, &cr->subject, "Subject", level+1);
# 2309|       secu_PrintSubjectPublicKeyInfo(out, arena, &cr->subjectPublicKeyInfo,

Error: COMPILER_WARNING (CWE-704): [#def441]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2308:39: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2308 |     SECU_PrintName(out, &cr->subject, "Subject", level+1);
#      |                                       ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2306|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2307|       SECU_PrintInteger(out, &cr->version, "Version", level+1);
# 2308|->     SECU_PrintName(out, &cr->subject, "Subject", level+1);
# 2309|       secu_PrintSubjectPublicKeyInfo(out, arena, &cr->subjectPublicKeyInfo,
# 2310|   			      "Subject Public Key Info", level+1);

Error: COMPILER_WARNING (CWE-704): [#def442]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2310:31: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘secu_PrintSubjectPublicKeyInfo’ discards ‘const’ qualifier from pointer target type
# 2310 |                               "Subject Public Key Info", level+1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1514:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 1514 |                        CERTSubjectPublicKeyInfo *i,  char *msg, int level)
#      |                                                      ~~~~~~^~~
# 2308|       SECU_PrintName(out, &cr->subject, "Subject", level+1);
# 2309|       secu_PrintSubjectPublicKeyInfo(out, arena, &cr->subjectPublicKeyInfo,
# 2310|-> 			      "Subject Public Key Info", level+1);
# 2311|       if (cr->attributes)
# 2312|   	SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level+1);

Error: COMPILER_WARNING (CWE-704): [#def443]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2312:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCertAttributes’ discards ‘const’ qualifier from pointer target type
# 2312 |         SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level+1);
#      |                                                       ^~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2275:66: note: expected ‘char *’ but argument is of type ‘const char *’
# 2275 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
#      |                                                            ~~~~~~^
# 2310|   			      "Subject Public Key Info", level+1);
# 2311|       if (cr->attributes)
# 2312|-> 	SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level+1);
# 2313|       rv = 0;
# 2314|   loser:

Error: COMPILER_WARNING (CWE-704): [#def444]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertificate’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2339:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 2339 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 2337|       if (rv) {
# 2338|           SECU_Indent(out, level); 
# 2339|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 2340|   	SECU_PrintAny(out, der, "Raw", level);
# 2341|   	goto loser;

Error: COMPILER_WARNING (CWE-704): [#def445]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2339:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 2339 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 2337|       if (rv) {
# 2338|           SECU_Indent(out, level); 
# 2339|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 2340|   	SECU_PrintAny(out, der, "Raw", level);
# 2341|   	goto loser;

Error: COMPILER_WARNING (CWE-704): [#def446]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2340:33: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 2340 |         SECU_PrintAny(out, der, "Raw", level);
#      |                                 ^~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 2338|           SECU_Indent(out, level); 
# 2339|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 2340|-> 	SECU_PrintAny(out, der, "Raw", level);
# 2341|   	goto loser;
# 2342|       }

Error: COMPILER_WARNING (CWE-704): [#def447]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2348:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2348 |     SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
#      |                                              ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2346|       SECU_Indent(out, level+1); fprintf(out, "%s: %d (0x%x)\n", "Version", iv + 1, iv);
# 2347|   
# 2348|->     SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
# 2349|       SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);

Error: COMPILER_WARNING (CWE-704): [#def448]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2349:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2349 |     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2347|   
# 2348|       SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
# 2349|->     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|       secu_PrintValidity(out, &c->validity, "Validity", level+1);

Error: COMPILER_WARNING (CWE-704): [#def449]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2350:37: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2350 |     SECU_PrintName(out, &c->issuer, "Issuer", level+1);
#      |                                     ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2348|       SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
# 2349|       SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|->     SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|       secu_PrintValidity(out, &c->validity, "Validity", level+1);
# 2352|       SECU_PrintName(out, &c->subject, "Subject", level+1);

Error: COMPILER_WARNING (CWE-704): [#def450]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2351:43: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintValidity’ discards ‘const’ qualifier from pointer target type
# 2351 |     secu_PrintValidity(out, &c->validity, "Validity", level+1);
#      |                                           ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1376:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1376 | secu_PrintValidity(FILE *out, CERTValidity *v, char *m, int level)
#      |                                                ~~~~~~^
# 2349|       SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|->     secu_PrintValidity(out, &c->validity, "Validity", level+1);
# 2352|       SECU_PrintName(out, &c->subject, "Subject", level+1);
# 2353|       secu_PrintSubjectPublicKeyInfo(out, arena, &c->subjectPublicKeyInfo,

Error: COMPILER_WARNING (CWE-704): [#def451]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2352:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2352 |     SECU_PrintName(out, &c->subject, "Subject", level+1);
#      |                                      ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|       secu_PrintValidity(out, &c->validity, "Validity", level+1);
# 2352|->     SECU_PrintName(out, &c->subject, "Subject", level+1);
# 2353|       secu_PrintSubjectPublicKeyInfo(out, arena, &c->subjectPublicKeyInfo,
# 2354|   			      "Subject Public Key Info", level+1);

Error: COMPILER_WARNING (CWE-704): [#def452]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2354:31: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘secu_PrintSubjectPublicKeyInfo’ discards ‘const’ qualifier from pointer target type
# 2354 |                               "Subject Public Key Info", level+1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1514:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 1514 |                        CERTSubjectPublicKeyInfo *i,  char *msg, int level)
#      |                                                      ~~~~~~^~~
# 2352|       SECU_PrintName(out, &c->subject, "Subject", level+1);
# 2353|       secu_PrintSubjectPublicKeyInfo(out, arena, &c->subjectPublicKeyInfo,
# 2354|-> 			      "Subject Public Key Info", level+1);
# 2355|       if (c->issuerID.data) 
# 2356|   	secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);

Error: COMPILER_WARNING (CWE-704): [#def453]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2356:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDecodedBitString’ discards ‘const’ qualifier from pointer target type
# 2356 |         secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);
#      |                                                       ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1188:57: note: expected ‘char *’ but argument is of type ‘const char *’
# 1188 | secu_PrintDecodedBitString(FILE *out, SECItem *i, char *m, int level)
#      |                                                   ~~~~~~^
# 2354|   			      "Subject Public Key Info", level+1);
# 2355|       if (c->issuerID.data) 
# 2356|-> 	secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);
# 2357|       if (c->subjectID.data) 
# 2358|   	secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);

Error: COMPILER_WARNING (CWE-704): [#def454]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2358:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDecodedBitString’ discards ‘const’ qualifier from pointer target type
# 2358 |         secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);
#      |                                                        ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1188:57: note: expected ‘char *’ but argument is of type ‘const char *’
# 1188 | secu_PrintDecodedBitString(FILE *out, SECItem *i, char *m, int level)
#      |                                                   ~~~~~~^
# 2356|   	secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);
# 2357|       if (c->subjectID.data) 
# 2358|-> 	secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);
# 2359|       SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level+1);
# 2360|   loser:

Error: COMPILER_WARNING (CWE-704): [#def455]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2359:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2359 |     SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level+1);
#      |                                              ^~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1990:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 1990 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2357|       if (c->subjectID.data) 
# 2358|   	secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);
# 2359|->     SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level+1);
# 2360|   loser:
# 2361|       PORT_FreeArena(arena, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def456]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7EncContent’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2482:27: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2482 |                           "Content Encryption Algorithm", level+1);
#      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2480|   					  : "Unknown");
# 2481|       SECU_PrintAlgorithmID(out, &(src->contentEncAlg),
# 2482|-> 			  "Content Encryption Algorithm", level+1);
# 2483|       SECU_PrintAsHex(out, &(src->encContent), 
# 2484|   		    "Encrypted Content", level+1);

Error: COMPILER_WARNING (CWE-704): [#def457]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintRecipientInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2496:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2496 |     SECU_PrintInteger(out, &(info->version), "Version", level + 1);
#      |                                              ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2494|   {
# 2495|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2496|->     SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2497|   
# 2498|       SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 

Error: COMPILER_WARNING (CWE-704): [#def458]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2498:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2498 |     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer",
#      |                                                       ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2496|       SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2497|   
# 2498|->     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 
# 2499|   		 level + 1);
# 2500|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 

Error: COMPILER_WARNING (CWE-704): [#def459]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2501:23: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2501 |                       "Serial Number", level + 1);
#      |                       ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2499|   		 level + 1);
# 2500|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 
# 2501|-> 		      "Serial Number", level + 1);
# 2502|   
# 2503|       /* Parse and display encrypted key */

Error: COMPILER_WARNING (CWE-704): [#def460]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2505:25: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2505 |                         "Key Encryption Algorithm", level + 1);
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2503|       /* Parse and display encrypted key */
# 2504|       SECU_PrintAlgorithmID(out, &(info->keyEncAlg), 
# 2505|-> 			"Key Encryption Algorithm", level + 1);
# 2506|       SECU_PrintAsHex(out, &(info->encKey), "Encrypted Key", level + 1);
# 2507|   }

Error: COMPILER_WARNING (CWE-704): [#def461]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintSignerInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2521:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2521 |     SECU_PrintInteger(out, &(info->version), "Version", level + 1);
#      |                                              ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2519|       
# 2520|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2521|->     SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2522|   
# 2523|       SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 

Error: COMPILER_WARNING (CWE-704): [#def462]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2523:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2523 |     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer",
#      |                                                       ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2521|       SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2522|   
# 2523|->     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 
# 2524|   		 level + 1);
# 2525|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 

Error: COMPILER_WARNING (CWE-704): [#def463]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2526:23: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2526 |                       "Serial Number", level + 1);
#      |                       ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2524|   		 level + 1);
# 2525|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 
# 2526|-> 		      "Serial Number", level + 1);
# 2527|     
# 2528|       SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",

Error: COMPILER_WARNING (CWE-704): [#def464]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2528:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2528 |     SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",
#      |                                                    ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2526|   		      "Serial Number", level + 1);
# 2527|     
# 2528|->     SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",
# 2529|   			  level + 1);
# 2530|       

Error: COMPILER_WARNING (CWE-704): [#def465]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2543:25: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2543 |                         "Digest Encryption Algorithm", level + 1);
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2541|       /* Parse and display signature */
# 2542|       SECU_PrintAlgorithmID(out, &(info->digestEncAlg), 
# 2543|-> 			"Digest Encryption Algorithm", level + 1);
# 2544|       SECU_PrintAsHex(out, &(info->encDigest), "Encrypted Digest", level + 1);
# 2545|       

Error: COMPILER_WARNING (CWE-704): [#def466]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCRLInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2574:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2574 |     SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
#      |                                                      ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2572|       SECU_Indent(out, level+1); 
# 2573|       	fprintf(out, "%s: %d (0x%x)\n", "Version", iv + 1, iv);
# 2574|->     SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
# 2575|   			  level + 1);
# 2576|       SECU_PrintName(out, &(crl->name), "Issuer", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def467]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2576:39: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2576 |     SECU_PrintName(out, &(crl->name), "Issuer", level + 1);
#      |                                       ^~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2574|       SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
# 2575|   			  level + 1);
# 2576|->     SECU_PrintName(out, &(crl->name), "Issuer", level + 1);
# 2577|       SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
# 2578|       if (crl->nextUpdate.data && crl->nextUpdate.len) /* is optional */

Error: COMPILER_WARNING (CWE-704): [#def468]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2577:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 2577 |     SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
#      |                                                   ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 2575|   			  level + 1);
# 2576|       SECU_PrintName(out, &(crl->name), "Issuer", level + 1);
# 2577|->     SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
# 2578|       if (crl->nextUpdate.data && crl->nextUpdate.len) /* is optional */
# 2579|   	SECU_PrintTimeChoice(out, &(crl->nextUpdate), "Next Update", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def469]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2579:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 2579 |         SECU_PrintTimeChoice(out, &(crl->nextUpdate), "Next Update", level + 1);
#      |                                                       ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 2577|       SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
# 2578|       if (crl->nextUpdate.data && crl->nextUpdate.len) /* is optional */
# 2579|-> 	SECU_PrintTimeChoice(out, &(crl->nextUpdate), "Next Update", level + 1);
# 2580|       
# 2581|       if (crl->entries != NULL) {

Error: COMPILER_WARNING (CWE-704): [#def470]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2586:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2586 |             SECU_PrintInteger(out, &(entry->serialNumber), "Serial Number",
#      |                                                            ^~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2584|   	    sprintf(om, "Entry (%x):\n", iv); 
# 2585|   	    SECU_Indent(out, level + 1); fprintf(out, "%s", om);
# 2586|-> 	    SECU_PrintInteger(out, &(entry->serialNumber), "Serial Number",
# 2587|   			      level + 2);
# 2588|   	    SECU_PrintTimeChoice(out, &(entry->revocationDate), 

Error: COMPILER_WARNING (CWE-704): [#def471]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2589:34: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 2589 |                                  "Revocation Date", level + 2);
#      |                                  ^~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 2587|   			      level + 2);
# 2588|   	    SECU_PrintTimeChoice(out, &(entry->revocationDate), 
# 2589|-> 	                         "Revocation Date", level + 2);
# 2590|   	    SECU_PrintExtensions(out, entry->extensions, 
# 2591|   	                         "Entry Extensions", level + 2);

Error: COMPILER_WARNING (CWE-704): [#def472]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2591:34: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2591 |                                  "Entry Extensions", level + 2);
#      |                                  ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1990:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 1990 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2589|   	                         "Revocation Date", level + 2);
# 2590|   	    SECU_PrintExtensions(out, entry->extensions, 
# 2591|-> 	                         "Entry Extensions", level + 2);
# 2592|   	}
# 2593|       }

Error: COMPILER_WARNING (CWE-704): [#def473]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2594:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2594 |     SECU_PrintExtensions(out, crl->extensions, "CRL Extensions", level + 1);
#      |                                                ^~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1990:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 1990 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2592|   	}
# 2593|       }
# 2594|->     SECU_PrintExtensions(out, crl->extensions, "CRL Extensions", level + 1);
# 2595|   }
# 2596|   

Error: COMPILER_WARNING (CWE-704): [#def474]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Signed’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2613:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2613 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2611|   
# 2612|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2613|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2614|   
# 2615|       /* Parse and list digest algorithms (if any) */

Error: COMPILER_WARNING (CWE-704): [#def475]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2627:37: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7ContentInfo’ discards ‘const’ qualifier from pointer target type
# 2627 |                                     "Content Information", level + 1);
#      |                                     ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2462:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 2462 | secu_PrintPKCS7ContentInfo(FILE *, SEC_PKCS7ContentInfo *, char *, int);
#      |                                                            ^~~~~~
# 2625|       /* Now for the content */
# 2626|       rv = secu_PrintPKCS7ContentInfo(out, &(src->contentInfo), 
# 2627|-> 				    "Content Information", level + 1);
# 2628|       if (rv != 0)
# 2629|   	return rv;

Error: COMPILER_WARNING (CWE-704): [#def476]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2653:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2653 |                                   "Signature Algorithm", level+3);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2651|   	    SECU_Indent(out, level + 2);  fprintf(out, "%s:\n", om);
# 2652|   	    SECU_PrintAlgorithmID(out, &aCrl->signatureWrap.signatureAlgorithm, 
# 2653|-> 				  "Signature Algorithm", level+3);
# 2654|   	    DER_ConvertBitString(&aCrl->signatureWrap.signature);
# 2655|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",

Error: COMPILER_WARNING (CWE-704): [#def477]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2657:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCRLInfo’ discards ‘const’ qualifier from pointer target type
# 2657 |             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
#      |                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2563:50: note: expected ‘char *’ but argument is of type ‘const char *’
# 2563 | SECU_PrintCRLInfo(FILE *out, CERTCrl *crl, char *m, int level)
#      |                                            ~~~~~~^
# 2655|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",
# 2656|   			    level+3);
# 2657|-> 	    SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List", 
# 2658|   			  level + 3); 
# 2659|   	}

Error: COMPILER_WARNING (CWE-704): [#def478]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Enveloped’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2689:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2689 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2687|   
# 2688|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2689|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2690|   
# 2691|       /* Parse and list recipients (this is not optional) */

Error: COMPILER_WARNING (CWE-704): [#def479]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2703:31: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7EncContent’ discards ‘const’ qualifier from pointer target type
# 2703 |                               "Encrypted Content Information", level + 1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2470:33: note: expected ‘char *’ but argument is of type ‘const char *’
# 2470 |                           char *m, int level)
#      |                           ~~~~~~^
# 2701|   
# 2702|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 
# 2703|-> 			      "Encrypted Content Information", level + 1);
# 2704|   }
# 2705|   

Error: COMPILER_WARNING (CWE-704): [#def480]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7SignedAndEnveloped’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2724:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2724 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2722|   
# 2723|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2724|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2725|   
# 2726|       /* Parse and list recipients (this is not optional) */

Error: COMPILER_WARNING (CWE-704): [#def481]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2748:31: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7EncContent’ discards ‘const’ qualifier from pointer target type
# 2748 |                               "Encrypted Content Information", level + 1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2470:33: note: expected ‘char *’ but argument is of type ‘const char *’
# 2470 |                           char *m, int level)
#      |                           ~~~~~~^
# 2746|   
# 2747|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 
# 2748|-> 			      "Encrypted Content Information", level + 1);
# 2749|   
# 2750|       /* Parse and list certificates (if any) */

Error: COMPILER_WARNING (CWE-704): [#def482]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2772:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2772 |                                   "Signature Algorithm", level+3);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2770|   	    SECU_Indent(out, level + 2);  fprintf(out, "%s:\n", om);
# 2771|   	    SECU_PrintAlgorithmID(out, &aCrl->signatureWrap.signatureAlgorithm, 
# 2772|-> 				  "Signature Algorithm", level+3);
# 2773|   	    DER_ConvertBitString(&aCrl->signatureWrap.signature);
# 2774|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",

Error: COMPILER_WARNING (CWE-704): [#def483]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2776:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCRLInfo’ discards ‘const’ qualifier from pointer target type
# 2776 |             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
#      |                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2563:50: note: expected ‘char *’ but argument is of type ‘const char *’
# 2563 | SECU_PrintCRLInfo(FILE *out, CERTCrl *crl, char *m, int level)
#      |                                            ~~~~~~^
# 2774|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",
# 2775|   			    level+3);
# 2776|-> 	    SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List", 
# 2777|   			  level + 3); 
# 2778|   	}

Error: COMPILER_WARNING (CWE-704): [#def484]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Encrypted’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2829:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2829 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2827|   {
# 2828|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2829|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2830|   
# 2831|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 

Error: COMPILER_WARNING (CWE-704): [#def485]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2832:31: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7EncContent’ discards ‘const’ qualifier from pointer target type
# 2832 |                               "Encrypted Content Information", level + 1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2470:33: note: expected ‘char *’ but argument is of type ‘const char *’
# 2470 |                           char *m, int level)
#      |                           ~~~~~~^
# 2830|   
# 2831|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 
# 2832|-> 			      "Encrypted Content Information", level + 1);
# 2833|   }
# 2834|   

Error: COMPILER_WARNING (CWE-704): [#def486]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Digested’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2844:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2844 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2842|   {
# 2843|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2844|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2845|       
# 2846|       SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",

Error: COMPILER_WARNING (CWE-704): [#def487]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2846:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2846 |     SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
#      |                                                 ^~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2844|       SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2845|       
# 2846|->     SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
# 2847|   			  level + 1);
# 2848|       secu_PrintPKCS7ContentInfo(out, &src->contentInfo, "Content Information",

Error: COMPILER_WARNING (CWE-704): [#def488]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2848:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7ContentInfo’ discards ‘const’ qualifier from pointer target type
# 2848 |     secu_PrintPKCS7ContentInfo(out, &src->contentInfo, "Content Information",
#      |                                                        ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2462:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 2462 | secu_PrintPKCS7ContentInfo(FILE *, SEC_PKCS7ContentInfo *, char *, int);
#      |                                                            ^~~~~~
# 2846|       SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
# 2847|   			  level + 1);
# 2848|->     secu_PrintPKCS7ContentInfo(out, &src->contentInfo, "Content Information",
# 2849|   			       level + 1);
# 2850|       SECU_PrintAsHex(out, &src->digest, "Digest", level + 1);  

Error: COMPILER_WARNING (CWE-758): [#def489]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2946:1: warning[-Wmissing-prototypes]: no previous prototype for ‘printFlags’
# 2946 | printFlags(FILE *out, unsigned int flags, int level)
#      | ^~~~~~~~~~
# 2944|   
# 2945|   void
# 2946|-> printFlags(FILE *out, unsigned int flags, int level)
# 2947|   {
# 2948|       if ( flags & CERTDB_VALID_PEER ) {

Error: COMPILER_WARNING (CWE-477): [#def490]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘printFlags’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2948:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2946|   printFlags(FILE *out, unsigned int flags, int level)
# 2947|   {
# 2948|->     if ( flags & CERTDB_VALID_PEER ) {
# 2949|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2950|       }

Error: COMPILER_WARNING (CWE-704): [#def491]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSignedData’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3010:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘inner’ discards ‘const’ qualifier from pointer target type
# 3010 |     rv = (*inner)(out, &sd->data, "Data", level+1);
#      |                                   ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3010:35: note: expected ‘char *’ but argument is of type ‘const char *’
# 3008|   
# 3009|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 3010|->     rv = (*inner)(out, &sd->data, "Data", level+1);
# 3011|   
# 3012|       SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",

Error: COMPILER_WARNING (CWE-704): [#def492]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3012:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 3012 |     SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",
#      |                                                         ^~~~~~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 3010|       rv = (*inner)(out, &sd->data, "Data", level+1);
# 3011|   
# 3012|->     SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",
# 3013|   			  level+1);
# 3014|       DER_ConvertBitString(&sd->signature);

Error: COMPILER_WARNING (CWE-704): [#def493]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3016:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintFingerprints’ discards ‘const’ qualifier from pointer target type
# 3016 |     SECU_PrintFingerprints(out, der, "Fingerprint", level+1);
#      |                                      ^~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:2416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 2416 | SECU_PrintFingerprints(FILE *out, SECItem *derCert, char *m, int level)
#      |                                                     ~~~~~~^
# 3014|       DER_ConvertBitString(&sd->signature);
# 3015|       SECU_PrintAsHex(out, &sd->signature, "Signature", level+1);
# 3016|->     SECU_PrintFingerprints(out, der, "Fingerprint", level+1);
# 3017|   loser:
# 3018|       PORT_FreeArena(arena, PR_FALSE);

Error: COMPILER_WARNING (CWE-563): [#def494]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_ParseCommandLine’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3024:52: warning[-Wunused-parameter]: unused parameter ‘progName’
# 3024 | SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
#      |                                              ~~~~~~^~~~~~~~
# 3022|   
# 3023|   SECStatus
# 3024|-> SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
# 3025|   {
# 3026|       PRBool found;

Error: CLANG_WARNING: [#def495]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3044:14: warning[unix.Malloc]: Potential leak of memory pointed to by 'optstring'
# 3042|       }
# 3043|       optstring[j] = '\0';
# 3044|->     optstate = PL_CreateOptState(argc, argv, optstring);
# 3045|   
# 3046|       /* Parse command line arguments */

Error: COMPILER_WARNING (CWE-195): [#def496]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintPRandOSError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3224:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3224 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3222|       char buffer[513];
# 3223|       PRInt32     errLen = PR_GetErrorTextLength();
# 3224|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3225|           PR_GetErrorText(buffer);
# 3226|       }

Error: COMPILER_WARNING (CWE-704): [#def497]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3227:31: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 3227 |     SECU_PrintError(progName, "function failed");
#      |                               ^~~~~~~~~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 3225|           PR_GetErrorText(buffer);
# 3226|       }
# 3227|->     SECU_PrintError(progName, "function failed");
# 3228|       if (errLen > 0 && errLen < sizeof buffer) {
# 3229|           PR_fprintf(PR_STDERR, "\t%s\n", buffer);

Error: COMPILER_WARNING (CWE-195): [#def498]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3228:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3228 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3226|       }
# 3227|       SECU_PrintError(progName, "function failed");
# 3228|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3229|           PR_fprintf(PR_STDERR, "\t%s\n", buffer);
# 3230|       }

Error: COMPILER_WARNING (CWE-704): [#def499]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3288:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3286|   	    switch (node->error) {
# 3287|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3288|-> 		flags = (unsigned int)node->arg;
# 3289|   		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING: [#def500]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3289:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3289 |                 switch (flags) {
#      |                 ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3303:13: note: here
# 3303 |             case SEC_ERROR_INADEQUATE_CERT_TYPE:
#      |             ^~~~
# 3287|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3288|   		flags = (unsigned int)node->arg;
# 3289|-> 		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:
# 3291|   		    errstr = "Cert cannot sign.";

Error: CLANG_WARNING: [#def501]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3291:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3289|   		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:
# 3291|-> 		    errstr = "Cert cannot sign.";
# 3292|   		    break;
# 3293|   		case KU_KEY_ENCIPHERMENT:

Error: COMPILER_WARNING (CWE-704): [#def502]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3291:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3291 |                     errstr = "Cert cannot sign.";
#      |                            ^
# 3289|   		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:
# 3291|-> 		    errstr = "Cert cannot sign.";
# 3292|   		    break;
# 3293|   		case KU_KEY_ENCIPHERMENT:

Error: CLANG_WARNING: [#def503]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3294:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3292|   		    break;
# 3293|   		case KU_KEY_ENCIPHERMENT:
# 3294|-> 		    errstr = "Cert cannot encrypt.";
# 3295|   		    break;
# 3296|   		case KU_KEY_CERT_SIGN:

Error: COMPILER_WARNING (CWE-704): [#def504]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3294:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3294 |                     errstr = "Cert cannot encrypt.";
#      |                            ^
# 3292|   		    break;
# 3293|   		case KU_KEY_ENCIPHERMENT:
# 3294|-> 		    errstr = "Cert cannot encrypt.";
# 3295|   		    break;
# 3296|   		case KU_KEY_CERT_SIGN:

Error: CLANG_WARNING: [#def505]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3297:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3295|   		    break;
# 3296|   		case KU_KEY_CERT_SIGN:
# 3297|-> 		    errstr = "Cert cannot sign other certs.";
# 3298|   		    break;
# 3299|   		default:

Error: COMPILER_WARNING (CWE-704): [#def506]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3297:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3297 |                     errstr = "Cert cannot sign other certs.";
#      |                            ^
# 3295|   		    break;
# 3296|   		case KU_KEY_CERT_SIGN:
# 3297|-> 		    errstr = "Cert cannot sign other certs.";
# 3298|   		    break;
# 3299|   		default:

Error: CLANG_WARNING: [#def507]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3300:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3298|   		    break;
# 3299|   		default:
# 3300|-> 		    errstr = "[unknown usage].";
# 3301|   		    break;
# 3302|   		}

Error: COMPILER_WARNING (CWE-704): [#def508]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3300:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3300 |                     errstr = "[unknown usage].";
#      |                            ^
# 3298|   		    break;
# 3299|   		default:
# 3300|-> 		    errstr = "[unknown usage].";
# 3301|   		    break;
# 3302|   		}

Error: COMPILER_WARNING (CWE-704): [#def509]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3304:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:60: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
# 3302|   		}
# 3303|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3304|-> 		flags = (unsigned int)node->arg;
# 3305|   		switch (flags) {
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING: [#def510]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3305:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3305 |                 switch (flags) {
#      |                 ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3329:13: note: here
# 3329 |             case SEC_ERROR_UNKNOWN_ISSUER:
#      |             ^~~~
# 3303|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3304|   		flags = (unsigned int)node->arg;
# 3305|-> 		switch (flags) {
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3307|   		case NS_CERT_TYPE_SSL_SERVER:

Error: CLANG_WARNING: [#def511]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3308:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3307|   		case NS_CERT_TYPE_SSL_SERVER:
# 3308|-> 		    errstr = "Cert cannot be used for SSL.";
# 3309|   		    break;
# 3310|   		case NS_CERT_TYPE_SSL_CA:

Error: COMPILER_WARNING (CWE-704): [#def512]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3308:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3308 |                     errstr = "Cert cannot be used for SSL.";
#      |                            ^
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3307|   		case NS_CERT_TYPE_SSL_SERVER:
# 3308|-> 		    errstr = "Cert cannot be used for SSL.";
# 3309|   		    break;
# 3310|   		case NS_CERT_TYPE_SSL_CA:

Error: CLANG_WARNING: [#def513]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3311:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3309|   		    break;
# 3310|   		case NS_CERT_TYPE_SSL_CA:
# 3311|-> 		    errstr = "Cert cannot be used as an SSL CA.";
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_EMAIL:

Error: COMPILER_WARNING (CWE-704): [#def514]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3311:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3311 |                     errstr = "Cert cannot be used as an SSL CA.";
#      |                            ^
# 3309|   		    break;
# 3310|   		case NS_CERT_TYPE_SSL_CA:
# 3311|-> 		    errstr = "Cert cannot be used as an SSL CA.";
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_EMAIL:

Error: CLANG_WARNING: [#def515]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3314:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_EMAIL:
# 3314|-> 		    errstr = "Cert cannot be used for SMIME.";
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL_CA:

Error: COMPILER_WARNING (CWE-704): [#def516]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3314:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3314 |                     errstr = "Cert cannot be used for SMIME.";
#      |                            ^
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_EMAIL:
# 3314|-> 		    errstr = "Cert cannot be used for SMIME.";
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL_CA:

Error: CLANG_WARNING: [#def517]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3317:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL_CA:
# 3317|-> 		    errstr = "Cert cannot be used as an SMIME CA.";
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_OBJECT_SIGNING:

Error: COMPILER_WARNING (CWE-704): [#def518]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3317:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3317 |                     errstr = "Cert cannot be used as an SMIME CA.";
#      |                            ^
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL_CA:
# 3317|-> 		    errstr = "Cert cannot be used as an SMIME CA.";
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_OBJECT_SIGNING:

Error: CLANG_WARNING: [#def519]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3320:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_OBJECT_SIGNING:
# 3320|-> 		    errstr = "Cert cannot be used for object signing.";
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: COMPILER_WARNING (CWE-704): [#def520]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3320:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3320 |                     errstr = "Cert cannot be used for object signing.";
#      |                            ^
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_OBJECT_SIGNING:
# 3320|-> 		    errstr = "Cert cannot be used for object signing.";
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: CLANG_WARNING: [#def521]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3323:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3323|-> 		    errstr = "Cert cannot be used as an object signing CA.";
# 3324|   		    break;
# 3325|   		default:

Error: COMPILER_WARNING (CWE-704): [#def522]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3323:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3323 |                     errstr = "Cert cannot be used as an object signing CA.";
#      |                            ^
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3323|-> 		    errstr = "Cert cannot be used as an object signing CA.";
# 3324|   		    break;
# 3325|   		default:

Error: CLANG_WARNING: [#def523]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3326:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3324|   		    break;
# 3325|   		default:
# 3326|-> 		    errstr = "[unknown usage].";
# 3327|   		    break;
# 3328|   		}

Error: COMPILER_WARNING (CWE-704): [#def524]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3326:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3326 |                     errstr = "[unknown usage].";
#      |                            ^
# 3324|   		    break;
# 3325|   		default:
# 3326|-> 		    errstr = "[unknown usage].";
# 3327|   		    break;
# 3328|   		}

Error: COMPILER_WARNING (CWE-195): [#def525]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_StoreCRL’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3388:62: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘unsigned int’
# 3388 |             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
#      |                                                              ^~
# 3386|                          NS_CRL_TRAILER);
# 3387|           } else {
# 3388|->             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
# 3389|                   return SECFailure;
# 3390|               }

Error: COMPILER_WARNING (CWE-805): [#def526]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_DerSignDataCRL’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3544:30: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘memset’ call is the same expression as the destination; did you mean to dereference it?
# 3544 |     PORT_Memset(sd, 0, sizeof(sd));
#      |                              ^
# 3542|   
# 3543|       /* Fill out SignedData object */
# 3544|->     PORT_Memset(sd, 0, sizeof(sd));
# 3545|       sd->data.data = buf;
# 3546|       sd->data.len = len;

Error: COMPILER_WARNING (CWE-563): [#def527]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_FindCrlIssuer’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/secutil.c:3604:35: warning[-Wunused-parameter]: unused parameter ‘authorityKeyID’
# 3604 |                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
#      |                    ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
# 3602|   CERTCertificate *
# 3603|   SECU_FindCrlIssuer(CERTCertDBHandle *dbhandle, SECItem* subject,
# 3604|->                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
# 3605|   {
# 3606|       CERTCertificate *issuerCert = NULL;

Error: COMPILER_WARNING (CWE-758): [#def528]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:348:1: warning[-Wmissing-prototypes]: no previous prototype for ‘TKS_ClearScreen’
#  348 | TKS_ClearScreen()
#      | ^~~~~~~~~~~~~~~
#  346|   
#  347|   PR_IMPLEMENT( void )
#  348|-> TKS_ClearScreen()
#  349|   {
#  350|   #if defined(XP_UNIX) && !defined(VMS)

Error: COMPILER_WARNING (CWE-252): [#def529]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c: scope_hint: In function ‘TKS_ClearScreen’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:351:5: warning[-Wunused-result]: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#  349|   {
#  350|   #if defined(XP_UNIX) && !defined(VMS)
#  351|->     system( "tput clear" );
#  352|   #else
#  353|       system( "cls" );

Error: COMPILER_WARNING (CWE-758): [#def530]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:359:1: warning[-Wmissing-prototypes]: no previous prototype for ‘TKS_WaitForUser’
#  359 | TKS_WaitForUser()
#      | ^~~~~~~~~~~~~~~
#  357|   
#  358|   PR_IMPLEMENT( void )
#  359|-> TKS_WaitForUser()
#  360|   {
#  361|       int            c;

Error: COMPILER_WARNING (CWE-758): [#def531]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:377:1: warning[-Wmissing-prototypes]: no previous prototype for ‘TKS_TypeProceedToContinue’
#  377 | TKS_TypeProceedToContinue()
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
#  375|   
#  376|   PR_IMPLEMENT( void )
#  377|-> TKS_TypeProceedToContinue()
#  378|   {
#  379|       int            fd;

Error: COMPILER_WARNING (CWE-563): [#def532]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:383:20: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  383 |     int            rv = 0;
#      |                    ^~
#  381|       int            count;
#  382|       int            c;
#  383|->     int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;

Error: COMPILER_WARNING (CWE-563): [#def533]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:385:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_min’ set but not used
#  385 |     cc_t           orig_cc_min;
#      |                    ^~~~~~~~~~~
#  383|       int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|->     cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;

Error: COMPILER_WARNING (CWE-563): [#def534]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:386:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_time’ set but not used
#  386 |     cc_t           orig_cc_time;
#      |                    ^~~~~~~~~~~~
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;
#  386|->     cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;
#  388|       struct termios tio;

Error: COMPILER_WARNING (CWE-563): [#def535]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c: scope_hint: In function ‘TKS_TypeProceedToContinue’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:387:20: warning[-Wunused-but-set-variable]: variable ‘orig_lflag’ set but not used
#  387 |     tcflag_t       orig_lflag;
#      |                    ^~~~~~~~~~
#  385|       cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|->     tcflag_t       orig_lflag;
#  388|       struct termios tio;
#  389|   #endif

Error: CLANG_WARNING: [#def536]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:401:5: warning[deadcode.DeadStores]: Value stored to 'orig_lflag' is never read
#  399|   #if defined( XP_UNIX ) && !defined( VMS )
#  400|       tcgetattr( fd, &tio );
#  401|->     orig_lflag       = tio.c_lflag;
#  402|       orig_cc_min      = tio.c_cc[VMIN];
#  403|       orig_cc_time     = tio.c_cc[VTIME];

Error: CLANG_WARNING: [#def537]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:402:5: warning[deadcode.DeadStores]: Value stored to 'orig_cc_min' is never read
#  400|       tcgetattr( fd, &tio );
#  401|       orig_lflag       = tio.c_lflag;
#  402|->     orig_cc_min      = tio.c_cc[VMIN];
#  403|       orig_cc_time     = tio.c_cc[VTIME];
#  404|       tio.c_lflag     &= ~ECHO;

Error: CLANG_WARNING: [#def538]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:403:5: warning[deadcode.DeadStores]: Value stored to 'orig_cc_time' is never read
#  401|       orig_lflag       = tio.c_lflag;
#  402|       orig_cc_min      = tio.c_cc[VMIN];
#  403|->     orig_cc_time     = tio.c_cc[VTIME];
#  404|       tio.c_lflag     &= ~ECHO;
#  405|       tio.c_lflag     &= ~ICANON;

Error: CLANG_WARNING: [#def539]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:423:13: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  421|           /* break on EOF */
#  422|           if( c == EOF ) {
#  423|->             rv = -1;
#  424|               break;
#  425|           }

Error: CLANG_WARNING: [#def540]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/pistool/src/util.c:429:13: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  427|           /* break on ^C */
#  428|           if( c == CTRL_C ) {
#  429|->             rv = -1;
#  430|               break;
#  431|           }

Error: CPPCHECK_WARNING: [#def541]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def542]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:125:8: warning[-Wmissing-prototypes]: no previous prototype for ‘ownPasswd’
#  125 | char * ownPasswd( PK11SlotInfo *slot, PRBool retry, void *arg)
#      |        ^~~~~~~~~
#  123|   
#  124|   
#  125|-> char * ownPasswd( PK11SlotInfo *slot, PRBool retry, void *arg)
#  126|   {
#  127|       char *passwd = NULL;

Error: COMPILER_WARNING (CWE-563): [#def543]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘ownPasswd’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:125:33: warning[-Wunused-parameter]: unused parameter ‘slot’
#  125 | char * ownPasswd( PK11SlotInfo *slot, PRBool retry, void *arg)
#      |                   ~~~~~~~~~~~~~~^~~~
#  123|   
#  124|   
#  125|-> char * ownPasswd( PK11SlotInfo *slot, PRBool retry, void *arg)
#  126|   {
#  127|       char *passwd = NULL;

Error: COMPILER_WARNING (CWE-563): [#def544]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘myBadCertHandler’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:199:25: warning[-Wunused-parameter]: unused parameter ‘arg’
#  199 | myBadCertHandler( void *arg, PRFileDesc *fd)
#      |                   ~~~~~~^~~
#  197|   
#  198|   static SECStatus 
#  199|-> myBadCertHandler( void *arg, PRFileDesc *fd)
#  200|   {
#  201|       /* int err = PR_GetError(); */

Error: COMPILER_WARNING (CWE-563): [#def545]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:199:42: warning[-Wunused-parameter]: unused parameter ‘fd’
#  199 | myBadCertHandler( void *arg, PRFileDesc *fd)
#      |                              ~~~~~~~~~~~~^~
#  197|   
#  198|   static SECStatus 
#  199|-> myBadCertHandler( void *arg, PRFileDesc *fd)
#  200|   {
#  201|       /* int err = PR_GetError(); */

Error: COMPILER_WARNING (CWE-758): [#def546]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:209:1: warning[-Wmissing-prototypes]: no previous prototype for ‘my_GetClientAuthData’
#  209 | my_GetClientAuthData(void *                       arg,
#      | ^~~~~~~~~~~~~~~~~~~~
#  207|   
#  208|   SECStatus
#  209|-> my_GetClientAuthData(void *                       arg,
#  210|                         PRFileDesc *                 socket,
#  211|                 struct CERTDistNamesStr *    caNames,

Error: COMPILER_WARNING (CWE-704): [#def547]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘my_GetClientAuthData’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:227:59: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  227 |     FPRINTF(stderr,"   mygetclientauthdata - cert = %x\n",(unsigned int)cert);
#      |                                                           ^
#  225|     if (chosenNickName) {
#  226|       cert = PK11_FindCertFromNickname(chosenNickName, proto_win);
#  227|->     FPRINTF(stderr,"   mygetclientauthdata - cert = %x\n",(unsigned int)cert);
#  228|       if ( cert ) {
#  229|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);

Error: COMPILER_WARNING (CWE-704): [#def548]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:230:64: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  230 |       FPRINTF(stderr,"   mygetclientauthdata - privkey = %x\n",(unsigned int)privkey);
#      |                                                                ^
#  228|       if ( cert ) {
#  229|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);
#  230|->       FPRINTF(stderr,"   mygetclientauthdata - privkey = %x\n",(unsigned int)privkey);
#  231|         if ( privkey ) {
#  232|       rv = SECSuccess;

Error: COMPILER_WARNING (CWE-758): [#def549]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:277:1: warning[-Wmissing-prototypes]: no previous prototype for ‘printSecurityInfo’
#  277 | printSecurityInfo(PRFileDesc *fd)
#      | ^~~~~~~~~~~~~~~~~
#  275|   
#  276|   void 
#  277|-> printSecurityInfo(PRFileDesc *fd)
#  278|   {
#  279|       char * cp;	/* bulk cipher name */

Error: COMPILER_WARNING: [#def550]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:311:19: warning[-Wunused-const-variable=]: ‘outHeader’ defined but not used
#  311 | static const char outHeader[] = {
#      |                   ^~~~~~~~~
#  309|   PRBool useModelSocket = PR_TRUE;
#  310|   
#  311|-> static const char outHeader[] = {
#  312|       "HTTP/1.0 200 OK\r\n"
#  313|       "Server: Netscape-Enterprise/2.0a\r\n"

Error: COMPILER_WARNING (CWE-758): [#def551]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:321:1: warning[-Wmissing-prototypes]: no previous prototype for ‘do_writes’
#  321 | do_writes(
#      | ^~~~~~~~~
#  319|   
#  320|   PRInt32
#  321|-> do_writes(
#  322|       void *       a
#  323|   )

Error: COMPILER_WARNING (CWE-758): [#def552]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:357:1: warning[-Wmissing-prototypes]: no previous prototype for ‘do_io’
#  357 | do_io( PRFileDesc *ssl_sock, int connection)
#      | ^~~~~
#  355|   
#  356|   SECStatus
#  357|-> do_io( PRFileDesc *ssl_sock, int connection)
#  358|   {
#  359|       int	    countRead = 0;

Error: COMPILER_WARNING (CWE-758): [#def553]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:425:1: warning[-Wmissing-prototypes]: no previous prototype for ‘do_connect’
#  425 | do_connect(
#      | ^~~~~~~~~~
#  423|   
#  424|   int
#  425|-> do_connect(
#  426|       PRNetAddr *addr,
#  427|       PRFileDesc *model_sock,

Error: COMPILER_WARNING (CWE-563): [#def554]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘do_connect’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:433:25: warning[-Wunused-but-set-variable]: variable ‘result’ set but not used
#  433 |     SECStatus           result;
#      |                         ^~~~~~
#  431|       PRFileDesc *        tcp_sock;
#  432|       PRStatus            prStatus;
#  433|->     SECStatus           result;
#  434|       int                 rv = SECSuccess;
#  435|       PRSocketOptionData  opt;

Error: CLANG_WARNING: [#def555]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:482:5: warning[deadcode.DeadStores]: Value stored to 'result' is never read
#  480|       }
#  481|   
#  482|->     result = do_io( ssl_sock, connection);
#  483|   
#  484|       if( ssl_sock != NULL ) {

Error: COMPILER_WARNING (CWE-758): [#def556]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:496:1: warning[-Wmissing-prototypes]: no previous prototype for ‘getIPAddress’
#  496 | getIPAddress(const char * hostName)
#      | ^~~~~~~~~~~~
#  494|   */
#  495|   PRUint32
#  496|-> getIPAddress(const char * hostName) 
#  497|   {
#  498|       const unsigned char *p;

Error: COMPILER_WARNING (CWE-758): [#def557]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:518:1: warning[-Wmissing-prototypes]: no previous prototype for ‘client_main’
#  518 | client_main(
#      | ^~~~~~~~~~~
#  516|   
#  517|   void
#  518|-> client_main(
#  519|       unsigned short      port, 
#  520|       int                 connections, 

Error: COMPILER_WARNING (CWE-563): [#def558]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:520:25: warning[-Wunused-parameter]: unused parameter ‘connections’
#  520 |     int                 connections,
#      |     ~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~
#  518|   client_main(
#  519|       unsigned short      port, 
#  520|->     int                 connections, 
#  521|       SECKEYPrivateKey ** privKey,
#  522|       CERTCertificate **  cert, 

Error: COMPILER_WARNING (CWE-563): [#def559]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:521:25: warning[-Wunused-parameter]: unused parameter ‘privKey’
#  521 |     SECKEYPrivateKey ** privKey,
#      |     ~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  519|       unsigned short      port, 
#  520|       int                 connections, 
#  521|->     SECKEYPrivateKey ** privKey,
#  522|       CERTCertificate **  cert, 
#  523|       const char *        hostName,

Error: COMPILER_WARNING (CWE-563): [#def560]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:522:25: warning[-Wunused-parameter]: unused parameter ‘cert’
#  522 |     CERTCertificate **  cert,
#      |     ~~~~~~~~~~~~~~~~~~~~^~~~
#  520|       int                 connections, 
#  521|       SECKEYPrivateKey ** privKey,
#  522|->     CERTCertificate **  cert, 
#  523|       const char *        hostName,
#  524|       char *              nickName)

Error: COMPILER_WARNING: [#def561]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘client_main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:544:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  544 |     PRAddrInfo *ai;
#      |     ^~~~~~~~~~
#  542|        */
#  543|   
#  544|->     PRAddrInfo *ai;
#  545|       void *iter;
#  546|       PRNetAddr addr;

Error: CLANG_WARNING: [#def562]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:553:17: warning[deadcode.DeadStores]: Although the value stored to 'iter' is used in the enclosing expression, the value is never actually read from 'iter'
#  551|           FPRINTF( stderr, "addr='%s'\n", PR_GetCanonNameFromAddrInfo( ai ) );
#  552|           iter = NULL;
#  553|->         while ((iter = PR_EnumerateAddrInfo(iter, ai, 0, &addr)) != NULL) {
#  554|               family = PR_NetAddrFamily(&addr);
#  555|               FPRINTF( stderr, "family='%d'\n", family );

Error: CLANG_WARNING: [#def563]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:616:5: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  614|       /* end of ssl configuration. */
#  615|   
#  616|->     rv = do_connect(&addr, model_sock, 1);
#  617|   
#  618|       if( model_sock != NULL ) {

Error: COMPILER_WARNING (CWE-758): [#def564]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:626:1: warning[-Wmissing-prototypes]: no previous prototype for ‘createRequest’
#  626 | createRequest(char * serials, char *reason, char *invalidity, int take_off_hold)
#      | ^~~~~~~~~~~~~
#  624|   
#  625|   SECStatus
#  626|-> createRequest(char * serials, char *reason, char *invalidity, int take_off_hold)
#  627|   {
#  628|       int		tmpI;

Error: CLANG_WARNING: [#def565]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:658:5: warning[deadcode.DeadStores]: Value stored to 's' is never read
#  656|   	*/
#  657|   
#  658|->     s = serials;
#  659|       s = strchr(serials,'-');
#  660|       if (s != NULL) {

Error: COMPILER_WARNING (CWE-704): [#def566]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘createRequest’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:678:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  678 |         old = "";
#      |             ^
#  676|   
#  677|       if (range == 0) {
#  678|->         old = "";
#  679|           for (i=0; i<count; i++) {
#  680|               filter = PR_smprintf("%s(certRecordId%%3D%s)",old,strs[i]);

Error: COMPILER_WARNING (CWE-704): [#def567]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:688:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  688 |     iDate = "";
#      |           ^
#  686|       }
#  687|   
#  688|->     iDate = "";
#  689|       if (invalidity != NULL) {
#  690|           time( &ltime );

Error: COMPILER_WARNING (CWE-704): [#def568]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:727:39: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  727 |     char *              dir         = ".";
#      |                                       ^~~
#  725|   main(int argc, char **argv)
#  726|   {
#  727|->     char *              dir         = ".";
#  728|       char *              hostName    = NULL;
#  729|       char *              nickName    = NULL;

Error: COMPILER_WARNING (CWE-704): [#def569]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:839:35: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  839 |                 revocation_reason = "0";
#      |                                   ^
#  837|   
#  838|   	if (revocation_reason == NULL) {
#  839|-> 		revocation_reason = "0";
#  840|   	}
#  841|   

Error: CLANG_WARNING: [#def570]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:893:11: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value
#  891|       NSS_Shutdown();
#  892|       PR_Cleanup();
#  893|->     if(fp != NULL) {
#  894|           fclose(fp);
#  895|           fp = NULL;

Error: COMPILER_WARNING (CWE-457): [#def571]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c: scope_hint: In function ‘main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:894:9: warning[-Wmaybe-uninitialized]: ‘fp’ may be used uninitialized
#  894 |         fclose(fp);
#      |         ^~~~~~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/revoker/revoker.c:745:15: note: ‘fp’ was declared here
#  745 |         FILE *fp;
#      |               ^~
#  892|       PR_Cleanup();
#  893|       if(fp != NULL) {
#  894|->         fclose(fp);
#  895|           fp = NULL;
#  896|       }

Error: CPPCHECK_WARNING: [#def572]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/b64.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def573]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/b64.c: scope_hint: In function ‘ldif_base64_encode_internal’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/b64.c:38:21: warning[-Wunused-but-set-variable]: variable ‘len’ set but not used
#   38 |     int     i, pad, len;
#      |                     ^~~
#   36|       char        *out;
#   37|       unsigned long   bits;
#   38|->     int     i, pad, len;
#   39|   
#   40|       len = 0;

Error: CLANG_WARNING: [#def574]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/b64.c:40:5: warning[deadcode.DeadStores]: Value stored to 'len' is never read
#   38|       int     i, pad, len;
#   39|   
#   40|->     len = 0;
#   41|       out = dst;
#   42|       stop = src + srclen;

Error: COMPILER_WARNING (CWE-758): [#def575]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/b64.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/b64.c:98:1: warning[-Wmissing-prototypes]: no previous prototype for ‘ldif_base64_encode’
#   98 | ldif_base64_encode( unsigned char *src, char *dst, int srclen, int lenused )
#      | ^~~~~~~~~~~~~~~~~~
#   96|   
#   97|   int
#   98|-> ldif_base64_encode( unsigned char *src, char *dst, int srclen, int lenused )
#   99|   {
#  100|       return ldif_base64_encode_internal( src, dst, srclen, lenused, 200);

Error: CPPCHECK_WARNING: [#def576]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def577]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:84:10: warning[unix.Malloc]: Potential memory leak
#   82|        return ("Options file could not be opened for reading\n");
#   83|     }
#   84|->   while (fgets(buffer,1024,fp)) {
#   85|        if (buffer[strlen(buffer)-1] == '\n') buffer[strlen(buffer)-1] = '\0';
#   86|        if (buffer[strlen(buffer)-1] == '\r') buffer[strlen(buffer)-1] = '\0';

Error: GCC_ANALYZER_WARNING (CWE-688): [#def578]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:103:8: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘arg’ where non-null expected
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:26: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:25: included_from: Included from here.
/usr/include/string.h:159:12: note: argument 1 of ‘strncmp’ must be non-null
#  101|     OPTION *new_opt;
#  102|   
#  103|->   if (!strncmp(arg,"optfile=",8)) {
#  104|        return OPT_parseOptFile(&arg[8],validlist);
#  105|     }

Error: COMPILER_WARNING (CWE-704): [#def579]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c: scope_hint: In function ‘OPT_parseArgument’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:104:13: warning[-Wdiscarded-qualifiers]: return discards ‘const’ qualifier from pointer target type
#  102|   
#  103|     if (!strncmp(arg,"optfile=",8)) {
#  104|->      return OPT_parseOptFile(&arg[8],validlist);
#  105|     }
#  106|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def580]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c: scope_hint: In function ‘OPT_parseArgument.part.0’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:109:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘new_opt’
#  107|     new_opt = (OPTION*)malloc(sizeof(OPTION));
#  108|     
#  109|->   new_opt->next = NULL;
#  110|     new_opt->name = strdup(arg);
#  111|     eq = strchr(new_opt->name,'=');

Error: GCC_ANALYZER_WARNING (CWE-688): [#def581]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:111:8: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘strdup(arg)’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_strchr’ must be non-null
#  109|     new_opt->next = NULL;
#  110|     new_opt->name = strdup(arg);
#  111|->   eq = strchr(new_opt->name,'=');
#  112|     if (eq) {
#  113|       *eq = 0;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def582]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c: scope_hint: In function ‘OPT_parseArgument’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:122:19: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(&buffer)’
/usr/include/stdlib.h:32: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/options.c:27: included_from: Included from here.
#  120|     }
#  121|   
#  122|->   if (option_list == NULL) {
#  123|       option_list = new_opt;
#  124|       last_option = new_opt;

Error: CPPCHECK_WARNING: [#def583]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def584]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:115:39: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
#  113|       char *errbuf;
#  114|     
#  115|->     errbuf = malloc(strlen(errstring)+strlen(programName)+10);
#  116|   
#  117|       sprintf(errbuf,"%s error : %s\n",programName,errstring);

Error: COMPILER_WARNING (CWE-758): [#def585]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:138:8: warning[-Wmissing-prototypes]: no previous prototype for ‘trim_strdup’
#  138 | char * trim_strdup(char *s)
#      |        ^~~~~~~~~~~
#  136|     the duplicate string begins with the first non-whitespace character */
#  137|   
#  138|-> char * trim_strdup(char *s)
#  139|   {
#  140|       while (*s == ' ' || *s == '\t') {

Error: COMPILER_WARNING (CWE-758): [#def586]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:147:6: warning[-Wmissing-prototypes]: no previous prototype for ‘readInputFile’
#  147 | void readInputFile() {
#      |      ^~~~~~~~~~~~~
#  145|   }
#  146|   
#  147|-> void readInputFile() {
#  148|       int more_to_read=1;
#  149|       char *thedn = NULL;

Error: CLANG_WARNING: [#def587]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:190:23: warning[unix.Malloc]: Potential leak of memory pointed to by 'thedn'
#  188|                   }
#  189|           
#  190|->                 if (! strncmp("pin:",line,4)) {
#  191|                       thepin = trim_strdup(&line[4]);
#  192|                   }

Error: CLANG_WARNING: [#def588]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:194:22: warning[unix.Malloc]: Potential leak of memory pointed to by 'thepin'
#  192|                   }
#  193|           
#  194|->             } while (strlen(line));
#  195|         
#  196|               /* first check to see if that dn is already in the hashtable */

Error: COMPILER_WARNING (CWE-758): [#def589]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:359:6: warning[-Wmissing-prototypes]: no previous prototype for ‘do_setup’
#  359 | void do_setup() {
#      |      ^~~~~~~~
#  357|   */
#  358|   
#  359|-> void do_setup() {
#  360|       int i;
#  361|   

Error: COMPILER_WARNING (CWE-704): [#def590]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘do_setup’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:384:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  384 |         x.mod_type = "attributetypes";
#      |                    ^
#  382|           x_values[1] = NULL;
#  383|           x.mod_op = LDAP_MOD_ADD;
#  384|->         x.mod_type = "attributetypes";
#  385|           x.mod_values = x_values;
#  386|           mods[0] = &x;

Error: COMPILER_WARNING (CWE-704): [#def591]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:408:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  408 |         x.mod_type = "objectclasses";
#      |                    ^
#  406|           x_values[1] = NULL;
#  407|           x.mod_op = LDAP_MOD_ADD;
#  408|->         x.mod_type = "objectclasses";
#  409|           x.mod_values = x_values;
#  410|           mods[0] = &x;

Error: COMPILER_WARNING (CWE-704): [#def592]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:439:22: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  439 |         a1_values[0] = "pinmanager";
#      |                      ^
#  437|           fprintf(stderr,"Adding user: %s\n",o_pinmanager);
#  438|   
#  439|->         a1_values[0] = "pinmanager";
#  440|           a1_values[1] = NULL;
#  441|           a1.mod_op = 0;

Error: COMPILER_WARNING (CWE-704): [#def593]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:442:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  442 |         a1.mod_type = "sn";
#      |                     ^
#  440|           a1_values[1] = NULL;
#  441|           a1.mod_op = 0;
#  442|->         a1.mod_type = "sn";
#  443|           a1.mod_values = a1_values;
#  444|   

Error: COMPILER_WARNING (CWE-704): [#def594]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:445:22: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  445 |         a2_values[0] = "pinmanager";
#      |                      ^
#  443|           a1.mod_values = a1_values;
#  444|   
#  445|->         a2_values[0] = "pinmanager";
#  446|           a2_values[1] = NULL;
#  447|           a2.mod_op = 0;

Error: COMPILER_WARNING (CWE-704): [#def595]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:448:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  448 |         a2.mod_type = "cn";
#      |                     ^
#  446|           a2_values[1] = NULL;
#  447|           a2.mod_op = 0;
#  448|->         a2.mod_type = "cn";
#  449|           a2.mod_values = a2_values;
#  450|   

Error: COMPILER_WARNING (CWE-704): [#def596]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:454:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  454 |         a3.mod_type = "userPassword";
#      |                     ^
#  452|           a3_values[1] = NULL;
#  453|           a3.mod_op = 0;
#  454|->         a3.mod_type = "userPassword";
#  455|           a3.mod_values = a3_values;
#  456|   

Error: COMPILER_WARNING (CWE-704): [#def597]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:457:22: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  457 |         a4_values[0] = "person";
#      |                      ^
#  455|           a3.mod_values = a3_values;
#  456|   
#  457|->         a4_values[0] = "person";
#  458|           a4_values[1] = NULL;
#  459|           a4.mod_op = 0;

Error: COMPILER_WARNING (CWE-704): [#def598]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:460:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  460 |         a4.mod_type = "objectclass";
#      |                     ^
#  458|           a4_values[1] = NULL;
#  459|           a4.mod_op = 0;
#  460|->         a4.mod_type = "objectclass";
#  461|           a4.mod_values = a4_values;
#  462|   

Error: COMPILER_WARNING (CWE-704): [#def599]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:507:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  507 |         x.mod_type = "aci";
#      |                    ^
#  505|           x_values[2] = NULL;
#  506|           x.mod_op = LDAP_MOD_ADD;
#  507|->         x.mod_type = "aci";
#  508|           x.mod_values = x_values;
#  509|   

Error: COMPILER_WARNING (CWE-681): [#def600]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘sha256_pw_enc’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:545:38: warning[-Wpointer-sign]: pointer targets in passing argument 3 of ‘PK11_HashBuf’ differ in signedness
#  545 |     PK11_HashBuf(SEC_OID_SHA256,hash,pwd,strlen(pwd));
#      |                                      ^~~
#      |                                      |
#      |                                      char *
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:70:52: note: expected ‘const unsigned char *’ but argument is of type ‘char *’
#   70 |                               const unsigned char *in,
#      |                               ~~~~~~~~~~~~~~~~~~~~~^~
#  543|   
#  544|       /* SHA246 hash the user's key */
#  545|->     PK11_HashBuf(SEC_OID_SHA256,hash,pwd,strlen(pwd));
#  546|       enc = malloc(256);
#  547|   

Error: COMPILER_WARNING (CWE-758): [#def601]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:558:5: warning[-Wmissing-prototypes]: no previous prototype for ‘isstring’
#  558 | int isstring(char *s) {
#      |     ^~~~~~~~
#  556|   /* check the first 8 characters to see if this is a string */
#  557|   
#  558|-> int isstring(char *s) {
#  559|       int i=0;
#  560|   

Error: COMPILER_WARNING (CWE-758): [#def602]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:570:6: warning[-Wmissing-prototypes]: no previous prototype for ‘doLDAPBind’
#  570 | void doLDAPBind() {
#      |      ^~~~~~~~~~
#  568|   
#  569|   
#  570|-> void doLDAPBind() {
#  571|       char errbuf[1024];
#  572|       char ldapuri[1024];

Error: COMPILER_WARNING: [#def603]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘doLDAPBind’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:610:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  610 |     struct berval credential;
#      |     ^~~~~~
#  608|       }
#  609|      
#  610|->     struct berval credential; 
#  611|       credential.bv_val = o_bindpw;
#  612|       credential.bv_len= strlen(o_bindpw);

Error: COMPILER_WARNING (CWE-758): [#def604]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:646:6: warning[-Wmissing-prototypes]: no previous prototype for ‘doLDAPUnbind’
#  646 | void doLDAPUnbind(){
#      |      ^~~~~~~~~~~~
#  644|   }
#  645|   
#  646|-> void doLDAPUnbind(){
#  647|       ldap_unbind_ext_s(ld, NULL, NULL);
#  648|   }

Error: COMPILER_WARNING (CWE-563): [#def605]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:664:9: warning[-Wunused-but-set-variable]: variable ‘change’ set but not used
#  664 |     int change=0;
#      |         ^~~~~~
#  662|       BerElement *ber;
#  663|       char *objectclass_values[]={NULL,NULL};
#  664|->     int change=0;
#  665|       int pin_objectclass_exists=0;
#  666|       LDAPMod objectclass, pinattribute;

Error: CLANG_WARNING: [#def606]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:715:9: warning[deadcode.DeadStores]: Value stored to 'change' is never read
#  713|   
#  714|           pin_objectclass_exists = 0;
#  715|->         change = 0;
#  716|   
#  717|   #define ACTION_NONE    0

Error: COMPILER_WARNING (CWE-704): [#def607]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘processSearchResults’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:733:29: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  733 |                         bin = "<binary>";
#      |                             ^
#  731|                       for ( i = 0; vals[i] != NULL; i++ ) {
#  732|                           char *bin;
#  733|->                         bin = "<binary>";
#  734|                           if (isstring(vals[i]->bv_val)) {
#  735|                               bin = vals[i]->bv_val;

Error: CLANG_WARNING: [#def608]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:751:35: warning[core.NullDereference]: Access to field 'bv_val' results in a dereference of a null pointer
#  749|                   if (o_saltattribute != NULL) {
#  750|                       if (!strcasecmp(a,o_saltattribute)) {
#  751|->                         saltval = vals[0]->bv_val;
#  752|                           if (o_debug) {
#  753|                               fprintf(stderr," setting salt value to: %s\n",saltval);

Error: COMPILER_WARNING (CWE-704): [#def609]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:809:34: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  809 |             objectclass.mod_type = "objectclass";
#      |                                  ^
#  807|               objectclass_values[1] = NULL;
#  808|               objectclass.mod_op = LDAP_MOD_ADD;
#  809|->             objectclass.mod_type = "objectclass";
#  810|               objectclass.mod_values = objectclass_values;
#  811|               mods[0] = &objectclass;

Error: CLANG_WARNING: [#def610]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:854:24: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
#  852|   
#  853|               hashbuf_source =
#  854|->                 malloc(strlen(saltval) + strlen(generatedPassword) + 10);
#  855|               if (hashbuf_source == NULL) {
#  856|                   errcode=12;

Error: CLANG_WARNING: [#def611]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:911:42: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
#  909|               /* Do last resort no hash version */
#  910|               hashbuf_dest[0] = SENTINEL_NONE;
#  911|->             memcpy(hashbuf_dest + 1, dn, strlen(dn));
#  912|               memcpy(hashbuf_dest + 1 + strlen(dn) ,generatedPassword, strlen(generatedPassword));
#  913|   

Error: COMPILER_WARNING (CWE-704): [#def612]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:960:46: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  960 |             fprintf(stderr,"o_write = %0x\n",(unsigned int)o_write);
#      |                                              ^
#  958|           fprintf(output,"%s:%s\n",o_attribute,generatedPassword);
#  959|           if (o_debug) {
#  960|->             fprintf(stderr,"o_write = %0x\n",(unsigned int)o_write);
#  961|           }
#  962|           if (! o_write) {

Error: COMPILER_WARNING (CWE-758): [#def613]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1016:6: warning[-Wmissing-prototypes]: no previous prototype for ‘buildCharpool’
# 1016 | void buildCharpool() {
#      |      ^~~~~~~~~~~~~
# 1014|   /* build the pool of characters we can use for the password */
# 1015|   
# 1016|-> void buildCharpool() {
# 1017|       char err_buf[1024];
# 1018|       charpool = (char*) malloc(256);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def614]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘buildCharpool’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1020:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘charpool’
# 1018|       charpool = (char*) malloc(256);
# 1019|   
# 1020|->     charpool[0] = '\0';
# 1021|       
# 1022|       if ( o_case == NULL) {

Error: COMPILER_WARNING (CWE-758): [#def615]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1057:6: warning[-Wmissing-prototypes]: no previous prototype for ‘initrandom’
# 1057 | void initrandom() {
#      |      ^~~~~~~~~~
# 1055|   /* initialize random number generator */
# 1056|   
# 1057|-> void initrandom() {
# 1058|     char err_buf[1024];
# 1059|   #ifdef USE_NSS_RANDOM

Error: COMPILER_WARNING (CWE-758): [#def616]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1078:16: warning[-Wmissing-prototypes]: no previous prototype for ‘getRandomShort’
# 1078 | unsigned short getRandomShort() {
#      |                ^~~~~~~~~~~~~~
# 1076|   
# 1077|     
# 1078|-> unsigned short getRandomShort() {
# 1079|     unsigned short r;
# 1080|   #ifdef USE_NSS_RANDOM

Error: COMPILER_WARNING (CWE-758): [#def617]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1120:16: warning[-Wmissing-prototypes]: no previous prototype for ‘getRandomInRange’
# 1120 | unsigned short getRandomInRange(unsigned short max) {
#      |                ^~~~~~~~~~~~~~~~
# 1118|   */
# 1119|   
# 1120|-> unsigned short getRandomInRange(unsigned short max) {
# 1121|       unsigned short rno;
# 1122|       unsigned short result;

Error: COMPILER_WARNING (CWE-758): [#def618]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1139:8: warning[-Wmissing-prototypes]: no previous prototype for ‘newPassword’
# 1139 | char * newPassword() {
#      |        ^~~~~~~~~~~
# 1137|   
# 1138|   
# 1139|-> char * newPassword() {
# 1140|       static char *pw_buf=NULL;
# 1141|       unsigned short l;

Error: COMPILER_WARNING (CWE-758): [#def619]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1172:6: warning[-Wmissing-prototypes]: no previous prototype for ‘testpingen’
# 1172 | void testpingen() {
#      |      ^~~~~~~~~~
# 1170|   
# 1171|   
# 1172|-> void testpingen() {
# 1173|       int count=25;
# 1174|       int i,j;

Error: CLANG_WARNING: [#def620]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1190:14: warning[unix.MallocSizeof]: Result of 'malloc' is converted to a pointer of type 'unsigned int', which is incompatible with sizeof operand type 'int'
# 1188|   
# 1189|       /* last spot is used to hold invalid chars */
# 1190|->     totals = malloc(sizeof(int)*(charpoolsize+1));
# 1191|       if (totals != NULL) {
# 1192|           for (i=0;i<(charpoolsize);i++) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def621]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘testpingen’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:1209:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*pw’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin.c:45: included_from: Included from here.
/usr/include/string.h:407:15: note: argument 1 of ‘strlen’ must be a pointer to a null-terminated string
# 1207|                       fprintf(output,"%d:%s\n",i+1,pw);
# 1208|                   }
# 1209|->                 pwlen = strlen(pw);
# 1210|                   for (j=0;j<pwlen;j++) {
# 1211|                       c = pw[j];

Error: CPPCHECK_WARNING: [#def622]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def623]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:82:6: warning[-Wmissing-prototypes]: no previous prototype for ‘setDefaultOptions’
#   82 | void setDefaultOptions() {
#      |      ^~~~~~~~~~~~~~~~~
#   80|     *o_setup,*o_pinmanager,*o_pinmanagerpwd,*o_schemachange;
#   81|   
#   82|-> void setDefaultOptions() {
#   83|    o_certdb=   ".";
#   84|    o_nickname= NULL; 

Error: COMPILER_WARNING (CWE-704): [#def624]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: In function ‘setDefaultOptions’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:83:10: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   83 |  o_certdb=   ".";
#      |          ^
#   81|   
#   82|   void setDefaultOptions() {
#   83|->  o_certdb=   ".";
#   84|    o_nickname= NULL; 
#   85|    o_binddn=   NULL;

Error: COMPILER_WARNING (CWE-704): [#def625]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:96:7: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   96 |  o_gen=      "RNG-alphanum";
#      |       ^
#   94|    o_minlength=NULL;
#   95|    o_maxlength=NULL;
#   96|->  o_gen=      "RNG-alphanum";
#   97|    o_case=     NULL;
#   98|    o_attribute="pin";

Error: COMPILER_WARNING (CWE-704): [#def626]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:98:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   98 |  o_attribute="pin";
#      |             ^
#   96|    o_gen=      "RNG-alphanum";
#   97|    o_case=     NULL;
#   98|->  o_attribute="pin";
#   99|    o_hash=     "sha256";
#  100|    o_objectclass="pinPerson";

Error: COMPILER_WARNING (CWE-704): [#def627]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:99:8: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   99 |  o_hash=     "sha256";
#      |        ^
#   97|    o_case=     NULL;
#   98|    o_attribute="pin";
#   99|->  o_hash=     "sha256";
#  100|    o_objectclass="pinPerson";
#  101|    o_output=   NULL;

Error: COMPILER_WARNING (CWE-704): [#def628]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:100:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  100 |  o_objectclass="pinPerson";
#      |               ^
#   98|    o_attribute="pin";
#   99|    o_hash=     "sha256";
#  100|->  o_objectclass="pinPerson";
#  101|    o_output=   NULL;
#  102|    o_retry=    "5";

Error: COMPILER_WARNING (CWE-704): [#def629]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:102:9: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  102 |  o_retry=    "5";
#      |         ^
#  100|    o_objectclass="pinPerson";
#  101|    o_output=   NULL;
#  102|->  o_retry=    "5";
#  103|    o_debug=    NULL;
#  104|    o_write=    NULL;

Error: COMPILER_WARNING (CWE-758): [#def630]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:114:6: warning[-Wmissing-prototypes]: no previous prototype for ‘getOptions’
#  114 | void getOptions() {
#      |      ^~~~~~~~~~
#  112|   }
#  113|   
#  114|-> void getOptions() {
#  115|     int i;
#  116|     char *c;

Error: COMPILER_WARNING (CWE-704): [#def631]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: In function ‘getOptions’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:128:18: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  128 |   if (i)   o_ssl = "yes";
#      |                  ^
#  126|     OPT_getValue("filter",   &o_filter);
#  127|     i = OPT_getValue("ssl",      &o_ssl);
#  128|->   if (i)   o_ssl = "yes";
#  129|     OPT_getValue("basedn",   &o_basedn);
#  130|     OPT_getValue("input",    &o_input);

Error: COMPILER_WARNING (CWE-704): [#def632]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:159:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  159 |       o_debug = "yes";
#      |               ^
#  157|     if (i) {
#  158|       if (! o_debug) { 
#  159|->       o_debug = "yes";
#  160|       } 
#  161|     }

Error: COMPILER_WARNING (CWE-704): [#def633]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:163:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  163 |   if (i)   o_write = "yes";
#      |                    ^
#  161|     }
#  162|     i = OPT_getValue("write",    &o_write);
#  163|->   if (i)   o_write = "yes";
#  164|     i = OPT_getValue("clobber",    &o_clobber);
#  165|     if (i) o_clobber = "yes";

Error: COMPILER_WARNING (CWE-704): [#def634]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:165:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  165 |   if (i) o_clobber = "yes";
#      |                    ^
#  163|     if (i)   o_write = "yes";
#  164|     i = OPT_getValue("clobber",    &o_clobber);
#  165|->   if (i) o_clobber = "yes";
#  166|     OPT_getValue("saltattribute",    &o_saltattribute);
#  167|     i = OPT_getValue("testpingen",    &o_testpingen);

Error: COMPILER_WARNING (CWE-704): [#def635]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:170:30: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  170 |                 o_testpingen = "25";
#      |                              ^
#  168|     if (i) {
#  169|   	if (!o_testpingen) {
#  170|-> 		o_testpingen = "25";
#  171|   	}
#  172|     }

Error: COMPILER_WARNING (CWE-758): [#def636]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:181:5: warning[-Wmissing-prototypes]: no previous prototype for ‘equals’
#  181 | int equals(const char *s, const char *t) {
#      |     ^~~~~~
#  179|   }
#  180|   
#  181|-> int equals(const char *s, const char *t) {
#  182|     return !(strcmp(s,t));
#  183|   }

Error: COMPILER_WARNING (CWE-758): [#def637]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/setpin/setpin_options.c:185:6: warning[-Wmissing-prototypes]: no previous prototype for ‘validateOptions’
#  185 | void validateOptions() {
#      |      ^~~~~~~~~~~~~~~
#  183|   }
#  184|   
#  185|-> void validateOptions() {
#  186|     char errbuf[ERR_BUF_LENGTH];
#  187|   

Error: CPPCHECK_WARNING: [#def638]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def639]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘ownPasswd’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:126:26: warning[-Wunused-parameter]: unused parameter ‘slot’
#  126 | ownPasswd( PK11SlotInfo *slot, PRBool retry, void *arg)
#      |            ~~~~~~~~~~~~~~^~~~
#  124|   
#  125|   static char*
#  126|-> ownPasswd( PK11SlotInfo *slot, PRBool retry, void *arg)
#  127|   {
#  128|       char *passwd = NULL;

Error: COMPILER_WARNING (CWE-563): [#def640]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘myBadCertHandler’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:190:25: warning[-Wunused-parameter]: unused parameter ‘arg’
#  190 | myBadCertHandler( void *arg, PRFileDesc *fd)
#      |                   ~~~~~~^~~
#  188|   
#  189|   static SECStatus 
#  190|-> myBadCertHandler( void *arg, PRFileDesc *fd)
#  191|   {
#  192|       /* int err = PR_GetError(); */

Error: COMPILER_WARNING (CWE-563): [#def641]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:190:42: warning[-Wunused-parameter]: unused parameter ‘fd’
#  190 | myBadCertHandler( void *arg, PRFileDesc *fd)
#      |                              ~~~~~~~~~~~~^~
#  188|   
#  189|   static SECStatus 
#  190|-> myBadCertHandler( void *arg, PRFileDesc *fd)
#  191|   {
#  192|       /* int err = PR_GetError(); */

Error: COMPILER_WARNING (CWE-758): [#def642]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:200:1: warning[-Wmissing-prototypes]: no previous prototype for ‘my_GetClientAuthData’
#  200 | my_GetClientAuthData(void *                       arg,
#      | ^~~~~~~~~~~~~~~~~~~~
#  198|   
#  199|   SECStatus
#  200|-> my_GetClientAuthData(void *                       arg,
#  201|                         PRFileDesc *                 socket,
#  202|                 struct CERTDistNamesStr *    caNames,

Error: COMPILER_WARNING (CWE-704): [#def643]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘my_GetClientAuthData’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:218:59: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  216|     if (chosenNickName) {
#  217|       cert = PK11_FindCertFromNickname(chosenNickName, proto_win);
#  218|->     FPRINTF(stderr,"   mygetclientauthdata - cert = %x\n",(unsigned int)cert);
#  219|       if ( cert ) {
#  220|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);

Error: COMPILER_WARNING (CWE-704): [#def644]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:221:64: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  219|       if ( cert ) {
#  220|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);
#  221|->       FPRINTF(stderr,"   mygetclientauthdata - privkey = %x\n",(unsigned int)privkey);
#  222|         if ( privkey ) {
#  223|       rv = SECSuccess;

Error: COMPILER_WARNING (CWE-758): [#def645]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:268:1: warning[-Wmissing-prototypes]: no previous prototype for ‘printSecurityInfo’
#  268 | printSecurityInfo(PRFileDesc *fd)
#      | ^~~~~~~~~~~~~~~~~
#  266|   
#  267|   void 
#  268|-> printSecurityInfo(PRFileDesc *fd)
#  269|   {
#  270|       char * cp;	/* bulk cipher name */

Error: CLANG_WARNING: [#def646]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:421:23: warning[deadcode.DeadStores]: Value stored to 'ret' is never read
#  419|                    }
#  420|   
#  421|->                  for (ret=0; rv < 13 ; rv += ret) {
#  422|                        ret = PR_Read(ssl_sock, buf2, RD_BUF_SIZE - rv); 
#  423|                        if (ret <  0 ) {

Error: COMPILER_WARNING: [#def647]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘do_io’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:451:14: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  451 |              char *status_string = PL_strndup(buf+9, 3);
#      |              ^~~~
#  449|                }
#  450|   
#  451|->              char *status_string = PL_strndup(buf+9, 3);
#  452|                int status = atoi(status_string);
#  453|                PL_strfree(status_string);

Error: COMPILER_WARNING (CWE-563): [#def648]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘do_connect’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:485:25: warning[-Wunused-but-set-variable]: variable ‘result’ set but not used
#  485 |     SECStatus           result;
#      |                         ^~~~~~
#  483|       PRFileDesc *        tcp_sock;
#  484|       PRStatus            prStatus;
#  485|->     SECStatus           result;
#  486|       int                 rv = SECSuccess;
#  487|       PRSocketOptionData  opt;

Error: CLANG_WARNING: [#def649]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:534:5: warning[deadcode.DeadStores]: Value stored to 'result' is never read
#  532|       }
#  533|   
#  534|->     result = do_io( ssl_sock, connection);
#  535|   
#  536|       if( ssl_sock != NULL ) {

Error: COMPILER_WARNING (CWE-1164): [#def650]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:548:1: warning[-Wunused-function]: ‘getIPAddress’ defined but not used
#  548 | getIPAddress(const char * hostName)
#      | ^~~~~~~~~~~~
#  546|   */
#  547|   static PRUint32
#  548|-> getIPAddress(const char * hostName) 
#  549|   {
#  550|       const unsigned char *p;

Error: COMPILER_WARNING (CWE-563): [#def651]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:572:25: warning[-Wunused-parameter]: unused parameter ‘connections’
#  572 |     int                 connections,
#      |     ~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~
#  570|   client_main(
#  571|       unsigned short      port, 
#  572|->     int                 connections, 
#  573|       SECKEYPrivateKey ** privKey,
#  574|       CERTCertificate **  cert, 

Error: COMPILER_WARNING (CWE-563): [#def652]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:573:25: warning[-Wunused-parameter]: unused parameter ‘privKey’
#  573 |     SECKEYPrivateKey ** privKey,
#      |     ~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  571|       unsigned short      port, 
#  572|       int                 connections, 
#  573|->     SECKEYPrivateKey ** privKey,
#  574|       CERTCertificate **  cert, 
#  575|       const char *        hostName,

Error: COMPILER_WARNING (CWE-563): [#def653]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:574:25: warning[-Wunused-parameter]: unused parameter ‘cert’
#  574 |     CERTCertificate **  cert,
#      |     ~~~~~~~~~~~~~~~~~~~~^~~~
#  572|       int                 connections, 
#  573|       SECKEYPrivateKey ** privKey,
#  574|->     CERTCertificate **  cert, 
#  575|       const char *        hostName,
#  576|       char *              nickName)

Error: COMPILER_WARNING: [#def654]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘client_main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:673:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  673 |     PRAddrInfo *ai;
#      |     ^~~~~~~~~~
#  671|        */
#  672|   
#  673|->     PRAddrInfo *ai;
#  674|       void *iter;
#  675|       PRNetAddr addr;

Error: CLANG_WARNING: [#def655]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:744:13: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  742|               /* end of ssl configuration. */
#  743|   
#  744|->             rv = do_connect(&addr, model_sock, 1);
#  745|   
#  746|               if( model_sock != NULL ) {

Error: COMPILER_WARNING (CWE-704): [#def656]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/sslget/sslget.c:797:39: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  797 |     char *              dir         = ".";
#      |                                       ^~~
#  795|   main(int argc, char **argv)
#  796|   {
#  797|->     char *              dir         = ".";
#  798|       char *              hostName    = NULL;
#  799|       char *              nickName    = NULL;

Error: CPPCHECK_WARNING: [#def657]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/file.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def658]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/file.c: scope_hint: In function ‘TKS_ReadInputFileIntoSECItem’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/file.c:26:40: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#   26 |                               char    *wrappedKeyName,
#      |                               ~~~~~~~~~^~~~~~~~~~~~~~
#   24|                                 char    *hexInternalKeyKCV,
#   25|                                 int      hexInternalKeyKCVLength,
#   26|->                               char    *wrappedKeyName,
#   27|                                 SECItem *wrappedKey )
#   28|   {

Error: COMPILER_WARNING (CWE-563): [#def659]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/file.c: scope_hint: In function ‘TKS_WriteSECItemIntoOutputFile’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/file.c:318:42: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#  318 |                                 char    *wrappedKeyName,
#      |                                 ~~~~~~~~~^~~~~~~~~~~~~~
#  316|   SECStatus
#  317|   TKS_WriteSECItemIntoOutputFile( SECItem *wrappedKey,
#  318|->                                 char    *wrappedKeyName,
#  319|                                   char    *hexInternalKeyKCV,
#  320|                                   int      hexInternalKeyKCVLength,

Error: CPPCHECK_WARNING: [#def660]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/find.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def661]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/help.c: scope_hint: In function ‘TKS_PrintHelp’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/help.c:86:22: warning[-Wunused-parameter]: unused parameter ‘progName’
#   86 | TKS_PrintHelp( char *progName )
#      |                ~~~~~~^~~~~~~~
#   84|   
#   85|   void
#   86|-> TKS_PrintHelp( char *progName )
#   87|   {
#   88|       /**********************/

Error: CPPCHECK_WARNING: [#def662]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-195): [#def663]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c: scope_hint: In function ‘InputHexSessionKey’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:229:19: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘PRUint32’ {aka ‘unsigned int’}
#  229 |     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                   ^
#  227|       /* Print appropriate key share padding length */
#  228|       PR_fprintf( PR_STDOUT, "\n                             " );
#  229|->     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  230|           PR_fprintf( PR_STDOUT, " " );
#  231|       }

Error: COMPILER_WARNING (CWE-195): [#def664]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:234:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘unsigned int’
#  234 |     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#      |                       ^
#  232|   
#  233|       /* Print second DES_LENGTH bytes */
#  234|->     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#  235|           PR_fprintf( PR_STDOUT,
#  236|                       "%c%c%c%c ",

Error: COMPILER_WARNING (CWE-195): [#def665]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c: scope_hint: In function ‘TKS_GenerateSessionKeyShare’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:904:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘PRUint32’ {aka ‘unsigned int’}
#  904 |         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                       ^
#  902|           /* Print appropriate key share padding length */
#  903|           PR_fprintf( PR_STDOUT, "\n                             " );
#  904|->         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  905|               PR_fprintf( PR_STDOUT, " " );
#  906|           }

Error: COMPILER_WARNING (CWE-195): [#def666]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:909:27: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘unsigned int’
#  909 |         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#      |                           ^
#  907|   
#  908|           /* Print second DES_LENGTH bytes */
#  909|->         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#  910|               PR_fprintf( PR_STDOUT,
#  911|                           "%c%c%c%c ",

Error: COMPILER_WARNING (CWE-563): [#def667]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:1077:44: warning[-Wunused-parameter]: unused parameter ‘mechanism’
# 1077 |                         CK_MECHANISM_TYPE  mechanism,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~
# 1075|   TKS_ImportSymmetricKey( const char        *symmetricKeyName,
# 1076|                           PK11SlotInfo      *slot,
# 1077|->                         CK_MECHANISM_TYPE  mechanism,
# 1078|                           CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,

Error: COMPILER_WARNING (CWE-563): [#def668]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:1078:44: warning[-Wunused-parameter]: unused parameter ‘operation’
# 1078 |                         CK_ATTRIBUTE_TYPE  operation,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~
# 1076|                           PK11SlotInfo      *slot,
# 1077|                           CK_MECHANISM_TYPE  mechanism,
# 1078|->                         CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,
# 1080|                           secuPWData        *pwdata, PRBool isPerm )

Error: COMPILER_WARNING (CWE-694): [#def669]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c: scope_hint: In function ‘TKS_ImportSymmetricKey’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:1080:44: warning[-Wshadow]: declaration of ‘pwdata’ shadows a global declaration
# 1080 |                         secuPWData        *pwdata, PRBool isPerm )
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:22:15: note: shadowed declaration is here
#   22 | secuPWData    pwdata = { PW_NONE,
#      |               ^~~~~~
# 1078|                           CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,
# 1080|->                         secuPWData        *pwdata, PRBool isPerm )
# 1081|   {
# 1082|       PK11Origin  origin = PK11_OriginGenerated;

Error: COMPILER_WARNING (CWE-563): [#def670]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:1080:44: warning[-Wunused-parameter]: unused parameter ‘pwdata’
# 1080 |                         secuPWData        *pwdata, PRBool isPerm )
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~
# 1078|                           CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,
# 1080|->                         secuPWData        *pwdata, PRBool isPerm )
# 1081|   {
# 1082|       PK11Origin  origin = PK11_OriginGenerated;

Error: COMPILER_WARNING (CWE-563): [#def671]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/key.c:1082:17: warning[-Wunused-variable]: unused variable ‘origin’
# 1082 |     PK11Origin  origin = PK11_OriginGenerated;
#      |                 ^~~~~~
# 1080|                           secuPWData        *pwdata, PRBool isPerm )
# 1081|   {
# 1082|->     PK11Origin  origin = PK11_OriginGenerated;
# 1083|       PK11SymKey *symKey = NULL;
# 1084|       PK11SymKey *sessKey = NULL;

Error: COMPILER_WARNING (CWE-563): [#def672]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/list.c: scope_hint: In function ‘TKS_ListKeys’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/list.c:132:19: warning[-Wunused-parameter]: unused parameter ‘index’
#  132 |               int index,
#      |               ~~~~^~~~~
#  130|                 PK11SlotInfo *slot,
#  131|                 char *keyname,
#  132|->               int index, 
#  133|                 PRBool dopriv,
#  134|                 secuPWData *pwdata )

Error: COMPILER_WARNING (CWE-563): [#def673]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/list.c:133:22: warning[-Wunused-parameter]: unused parameter ‘dopriv’
#  133 |               PRBool dopriv,
#      |               ~~~~~~~^~~~~~
#  131|                 char *keyname,
#  132|                 int index, 
#  133|->               PRBool dopriv,
#  134|                 secuPWData *pwdata )
#  135|   {

Error: COMPILER_WARNING (CWE-909): [#def674]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:76:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   76 |           offsetof(CERTPolicyQualifier, qualifierID) },
#      |           ^~~~~~~~
/usr/include/nss3/secoid.h:18: included_from: Included from here.
/usr/include/nss3/secmodt.h:9: included_from: Included from here.
/usr/include/nss3/keythi.h:11: included_from: Included from here.
/usr/include/nss3/cert.h:21: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:53: included_from: Included from here.
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   74|   	  0, NULL, sizeof(CERTPolicyQualifier) },
#   75|       { SEC_ASN1_OBJECT_ID,
#   76|-> 	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|   	  offsetof(CERTPolicyQualifier, qualifierValue) },

Error: COMPILER_WARNING (CWE-909): [#def675]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:78:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   78 |           offsetof(CERTPolicyQualifier, qualifierValue) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   76|   	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|-> 	  offsetof(CERTPolicyQualifier, qualifierValue) },
#   79|       { 0 }
#   80|   };

Error: COMPILER_WARNING (CWE-909): [#def676]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:86:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   86 |           offsetof(CERTPolicyInfo, policyID) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   84|   	  0, NULL, sizeof(CERTPolicyInfo) },
#   85|       { SEC_ASN1_OBJECT_ID,
#   86|-> 	  offsetof(CERTPolicyInfo, policyID) },
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),

Error: COMPILER_WARNING (CWE-909): [#def677]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:89:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   89 |           secu_PolicyQualifierTemplate },
#      |           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),
#   89|-> 	  secu_PolicyQualifierTemplate },
#   90|       { 0 }
#   91|   };

Error: COMPILER_WARNING (CWE-563): [#def678]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c: scope_hint: In function ‘secu_PrintUserNoticeQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:181:43: warning[-Wunused-parameter]: unused parameter ‘msg’
#  181 |                               const char *msg, int level)
#      |                               ~~~~~~~~~~~~^~~
#  179|   static SECStatus
#  180|   secu_PrintUserNoticeQualifier(FILE *out, SECItem * qualifierValue,
#  181|->                               const char *msg, int level)
#  182|   {
#  183|       CERTUserNotice *userNotice = NULL;

Error: COMPILER_WARNING: [#def679]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:224:11: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  224 |        if (SECSuccess == rv)
#      |           ^
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:227:4: note: here
#  227 |    case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#      |    ^~~~
#  222|      case SEC_OID_PKIX_USER_NOTICE_QUALIFIER:
#  223|          rv = secu_PrintUserNoticeQualifier(out, qualifierValue, msg, level);
#  224|->        if (SECSuccess == rv)
#  225|   	   break;
#  226|          /* fall through on error */

Error: COMPILER_WARNING (CWE-563): [#def680]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/pppolicy.c:236:71: warning[-Wunused-parameter]: unused parameter ‘msg’
#  236 | secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,const char *msg,int level)
#      |                                                           ~~~~~~~~~~~~^~~
#  234|   
#  235|   static SECStatus
#  236|-> secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,const char *msg,int level)
#  237|   {
#  238|      CERTPolicyQualifier **policyQualifiers;

Error: CPPCHECK_WARNING: [#def681]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/retrieve.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def682]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secerror.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def683]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secerror.c:74:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_Strerror’
#   74 | SECU_Strerror(PRErrorCode errNum) {
#      | ^~~~~~~~~~~~~
#   72|    */
#   73|   const char *
#   74|-> SECU_Strerror(PRErrorCode errNum) {
#   75|       PRInt32 low  = 0;
#   76|       PRInt32 high = numStrings - 1;

Error: COMPILER_WARNING (CWE-252): [#def684]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secpwd.c: scope_hint: In function ‘SEC_GetPassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secpwd.c:69:21: warning[-Wunused-result]: ignoring return value of ‘fgets’ declared with attribute ‘warn_unused_result’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secpwd.c:117:9: note: in expansion of macro ‘QUIET_FGETS’
#   67|   static char * quiet_fgets (char *buf, int length, FILE *input);
#   68|   #else
#   69|-> #define QUIET_FGETS fgets
#   70|   #endif
#   71|   

Error: CPPCHECK_WARNING: [#def685]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-758): [#def686]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:99:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_GetString’
#   99 | SECU_GetString(int16 error_number)
#      | ^~~~~~~~~~~~~~
#   97|   
#   98|   char *
#   99|-> SECU_GetString(int16 error_number)
#  100|   {
#  101|   

Error: COMPILER_WARNING (CWE-758): [#def687]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:108:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintErrMsg’
#  108 | SECU_PrintErrMsg(FILE *out, int level, const char *progName, const char *msg, ...)
#      | ^~~~~~~~~~~~~~~~
#  106|   
#  107|   void 
#  108|-> SECU_PrintErrMsg(FILE *out, int level, const char *progName, const char *msg, ...)
#  109|   {
#  110|       va_list args;

Error: COMPILER_WARNING: [#def688]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintErrMsg’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:118:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintErrMsg’ might be a candidate for ‘gnu_printf’ format attribute
#  118 |     vfprintf(out, msg, args);
#      |     ^~~~~~~~
#  116|       SECU_Indent(out, level);
#  117|       fprintf(out, "%s: ", progName);
#  118|->     vfprintf(out, msg, args);
#  119|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  120|   	fprintf(out, ": %s\n", errString);

Error: COMPILER_WARNING: [#def689]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:137:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintError’ might be a candidate for ‘gnu_printf’ format attribute
#  137 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  135|   
#  136|       fprintf(stderr, "%s: ", progName);
#  137|->     vfprintf(stderr, msg, args);
#  138|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  139|   	fprintf(stderr, ": %s\n", errString);

Error: COMPILER_WARNING: [#def690]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintSystemError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:153:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintSystemError’ might be a candidate for ‘gnu_printf’ format attribute
#  153 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  151|       va_start(args, msg);
#  152|       fprintf(stderr, "%s: ", progName);
#  153|->     vfprintf(stderr, msg, args);
#  154|   #if defined(_WIN32_WCE)
#  155|       fprintf(stderr, ": %d\n", PR_GetOSError());

Error: COMPILER_WARNING (CWE-563): [#def691]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_GetPasswordString’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:172:30: warning[-Wunused-parameter]: unused parameter ‘arg’
#  172 | SECU_GetPasswordString(void *arg, char *prompt)
#      |                        ~~~~~~^~~
#  170|   
#  171|   char *
#  172|-> SECU_GetPasswordString(void *arg, char *prompt)
#  173|   {
#  174|   #ifndef _WINDOWS

Error: COMPILER_WARNING (CWE-563): [#def692]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_FilePasswd’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:222:31: warning[-Wunused-parameter]: unused parameter ‘slot’
#  222 | SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#      |                 ~~~~~~~~~~~~~~^~~~
#  220|    */
#  221|   char *
#  222|-> SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#  223|   {
#  224|       unsigned char phrase[200];

Error: COMPILER_WARNING (CWE-704): [#def693]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_GetModulePassword’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:263:40: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  263 |     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#      |                                        ^~~~~~~~~~
#  261|       secuPWData *pwdata = (secuPWData *)arg;
#  262|       secuPWData pwnull = { PW_NONE, 0 };
#  263|->     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#  264|       char *pw;
#  265|   

Error: COMPILER_WARNING (CWE-758): [#def694]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:308:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_InitSlotPassword’
#  308 | secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#      | ^~~~~~~~~~~~~~~~~~~~~
#  306|   
#  307|   char *
#  308|-> secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#  309|   {
#  310|       char *p0 = NULL;

Error: COMPILER_WARNING (CWE-563): [#def695]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ChangePW’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:376:15: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  376 |     SECStatus rv;
#      |               ^~
#  374|   SECU_ChangePW(PK11SlotInfo *slot, char *passwd, char *pwFile)
#  375|   {
#  376|->     SECStatus rv;
#  377|       secuPWData pwdata, newpwdata;
#  378|       char *oldpw = NULL, *newpw = NULL;

Error: CLANG_WARNING: [#def696]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:393:2: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  391|       if (PK11_NeedUserInit(slot)) {
#  392|   	newpw = secu_InitSlotPassword(slot, PR_FALSE, &pwdata);
#  393|-> 	rv = PK11_InitPin(slot, (char*)NULL, newpw);
#  394|   	goto done;
#  395|       }

Error: COMPILER_WARNING (CWE-704): [#def697]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ConfigDirectory’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:485:25: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  485 |         if (!home) home = "";
#      |                         ^
#  483|       if (base == NULL || *base == 0) {
#  484|   	home = PR_GetEnv("HOME");
#  485|-> 	if (!home) home = "";
#  486|   
#  487|   	if (*home && home[strlen(home) - 1] == '/')

Error: COMPILER_WARNING (CWE-563): [#def698]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_GetClientAuthData’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:505:47: warning[-Wunused-parameter]: unused parameter ‘fd’
#  505 | SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#      |                                   ~~~~~~~~~~~~^~
#  503|   /* This gets called by SSL when server wants our cert & key */
#  504|   int
#  505|-> SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  506|   		       struct CERTDistNamesStr *caNames,
#  507|                         struct CERTCertificateStr **pRetCert,

Error: COMPILER_WARNING (CWE-563): [#def699]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:506:49: warning[-Wunused-parameter]: unused parameter ‘caNames’
#  506 |                        struct CERTDistNamesStr *caNames,
#      |                        ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  504|   int
#  505|   SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  506|-> 		       struct CERTDistNamesStr *caNames,
#  507|                         struct CERTCertificateStr **pRetCert,
#  508|                         struct SECKEYPrivateKeyStr **pRetKey)

Error: COMPILER_WARNING (CWE-758): [#def700]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:546:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_StdinToItem’
#  546 | secu_StdinToItem(SECItem *dst)
#      | ^~~~~~~~~~~~~~~~
#  544|   
#  545|   SECStatus
#  546|-> secu_StdinToItem(SECItem *dst)
#  547|   {
#  548|       unsigned char buf[1000];

Error: COMPILER_WARNING (CWE-909): [#def701]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ReadDERFromFile’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:671:9: warning[-Wmissing-field-initializers]: missing initializer for field ‘len’ of ‘SECItem’ {aka ‘struct SECItemStr’}
#  671 |         SECItem filedata = {siBuffer,0};
#      |         ^~~~~~~
/usr/include/nss3/blapit.h:11: included_from: Included from here.
/usr/include/nss3/cryptohi.h:11: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:59: included_from: Included from here.
/usr/include/nss3/seccomon.h:53:18: note: ‘len’ declared here
#   53 |     unsigned int len;
#      |                  ^~~
#  669|       if (ascii) {
#  670|   	/* First convert ascii to binary */
#  671|-> 	SECItem filedata = {siBuffer,0};
#  672|   	char *asc, *body;
#  673|   

Error: CLANG_WARNING: [#def702]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:675:2: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  673|   
#  674|   	/* Read in ascii data */
#  675|-> 	rv = SECU_FileToItem(&filedata, inFile);
#  676|   	asc = (char *)filedata.data;
#  677|   	if (!asc) {

Error: COMPILER_WARNING (CWE-758): [#def703]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:877:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_StripTagAndLength’
#  877 | SECU_StripTagAndLength(SECItem *i)
#      | ^~~~~~~~~~~~~~~~~~~~~~
#  875|   
#  876|   SECStatus
#  877|-> SECU_StripTagAndLength(SECItem *i)
#  878|   {
#  879|       unsigned int start;

Error: COMPILER_WARNING (CWE-758): [#def704]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1077:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSet’
# 1077 | SECU_PrintSet(FILE *out, SECItem *t, const char *m, int level)
#      | ^~~~~~~~~~~~~
# 1075|   /* This prints a SET or SEQUENCE */
# 1076|   void
# 1077|-> SECU_PrintSet(FILE *out, SECItem *t, const char *m, int level)
# 1078|   {
# 1079|       int            type        = t->data[0] & SEC_ASN1_TAGNUM_MASK;

Error: COMPILER_WARNING (CWE-758): [#def705]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1209:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedBoolean’
# 1209 | SECU_PrintEncodedBoolean(FILE *out, SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1207|   /* Print a DER encoded Boolean */
# 1208|   void
# 1209|-> SECU_PrintEncodedBoolean(FILE *out, SECItem *i, const char *m, int level)
# 1210|   {
# 1211|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def706]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1218:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedInteger’
# 1218 | SECU_PrintEncodedInteger(FILE *out, SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1216|   /* Print a DER encoded integer */
# 1217|   void
# 1218|-> SECU_PrintEncodedInteger(FILE *out, SECItem *i, const char *m, int level)
# 1219|   {
# 1220|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def707]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1227:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedObjectID’
# 1227 | SECU_PrintEncodedObjectID(FILE *out, SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 1225|   /* Print a DER encoded OID */
# 1226|   void
# 1227|-> SECU_PrintEncodedObjectID(FILE *out, SECItem *i, const char *m, int level)
# 1228|   {
# 1229|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-563): [#def708]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintSubjectPublicKeyInfo’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1515:56: warning[-Wunused-parameter]: unused parameter ‘arena’
# 1515 | secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1513|   
# 1514|   static void
# 1515|-> secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1516|   		       CERTSubjectPublicKeyInfo *i, const char *msg, int level)
# 1517|   {

Error: COMPILER_WARNING (CWE-563): [#def709]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintX509KeyUsage’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1690:57: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1690 | secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level)
#      |                                                   ~~~~~~^~~
# 1688|   /* X509KeyUsage is merely a bit string whose bits are displayed symbolically */
# 1689|   static void
# 1690|-> secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level) 
# 1691|   {
# 1692|       int     unused;

Error: COMPILER_WARNING (CWE-563): [#def710]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintAuthKeyIDExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1804:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1804 | secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1802|   
# 1803|   static void
# 1804|-> secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level) 
# 1805|   {
# 1806|       CERTAuthKeyID *kid  = NULL;

Error: COMPILER_WARNING (CWE-563): [#def711]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintCRLDistPtsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1872:64: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1872 | secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1870|   
# 1871|   static void
# 1872|-> secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1873|   {
# 1874|       CERTCrlDistributionPoints * dPoints;

Error: COMPILER_WARNING (CWE-563): [#def712]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintsExtension’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1931:69: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1931 | secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                               ~~~~~~^~~
# 1929|   
# 1930|   static void
# 1931|-> secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1932|   {
# 1933|       CERTNameConstraints * cnstrnts;

Error: COMPILER_WARNING (CWE-563): [#def713]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintAuthorityInfoAcess’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:1957:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1957 | secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1955|   
# 1956|   static void
# 1957|-> secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
# 1958|   {
# 1959|       CERTAuthInfoAccess **infos = NULL;

Error: COMPILER_WARNING (CWE-704): [#def714]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintName’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2130:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2130 |         str = "!Invalid AVA!";
#      |             ^
# 2128|       str = nameStr = CERT_NameToAscii(name);
# 2129|       if (!str) {
# 2130|->     	str = "!Invalid AVA!";
# 2131|       }
# 2132|       my.data = (unsigned char *)str;

Error: COMPILER_WARNING (CWE-477): [#def715]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘printflags’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2151:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2151 |     if (flags & CERTDB_VALID_PEER)
#      |     ^~
# 2149|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2150|   	    PORT_Strcat(trusts, "c");
# 2151|->     if (flags & CERTDB_VALID_PEER)
# 2152|   	if (!(flags & CERTDB_TRUSTED))
# 2153|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-704): [#def716]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintCertNickname’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2194:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2194 |         name = "(NULL)";
#      |              ^
# 2192|       }
# 2193|       if (!name || !name[0]) {
# 2194|->         name = "(NULL)";
# 2195|       }
# 2196|   

Error: COMPILER_WARNING (CWE-758): [#def717]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2213:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_DecodeAndPrintExtensions’
# 2213 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2211|   
# 2212|   int
# 2213|-> SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, const char *m, int level)
# 2214|   {
# 2215|       CERTCertExtension **extensions = NULL;

Error: COMPILER_WARNING (CWE-758): [#def718]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2234:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfExtensions’
# 2234 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 2232|   /* print a decoded SET OF or SEQUENCE OF Extensions */
# 2233|   int
# 2234|-> SECU_PrintSetOfExtensions(FILE *out, SECItem **any, const char *m, int level)
# 2235|   {
# 2236|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def719]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2249:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfAny’
# 2249 | SECU_PrintSetOfAny(FILE *out, SECItem **any, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~
# 2247|   /* print a decoded SET OF or SEQUENCE OF "ANY" */
# 2248|   int
# 2249|-> SECU_PrintSetOfAny(FILE *out, SECItem **any, const char *m, int level)
# 2250|   {
# 2251|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def720]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2263:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttribute’
# 2263 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~
# 2261|   
# 2262|   int
# 2263|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
# 2264|   {
# 2265|       int rv = 0;

Error: COMPILER_WARNING (CWE-563): [#def721]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintCertAttribute’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2263:69: warning[-Wunused-parameter]: unused parameter ‘m’
# 2263 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
#      |                                                         ~~~~~~~~~~~~^
# 2261|   
# 2262|   int
# 2263|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
# 2264|   {
# 2265|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def722]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2277:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttributes’
# 2277 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 2275|   
# 2276|   int
# 2277|-> SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, const char *m, int level)
# 2278|   {
# 2279|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def723]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2952:1: warning[-Wmissing-prototypes]: no previous prototype for ‘printFlags’
# 2952 | printFlags(FILE *out, unsigned int flags, int level)
#      | ^~~~~~~~~~
# 2950|   
# 2951|   void
# 2952|-> printFlags(FILE *out, unsigned int flags, int level)
# 2953|   {
# 2954|       if ( flags & CERTDB_VALID_PEER ) {

Error: COMPILER_WARNING (CWE-477): [#def724]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘printFlags’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:2954:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2954 |     if ( flags & CERTDB_VALID_PEER ) {
#      |     ^~
# 2952|   printFlags(FILE *out, unsigned int flags, int level)
# 2953|   {
# 2954|->     if ( flags & CERTDB_VALID_PEER ) {
# 2955|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2956|       }

Error: COMPILER_WARNING (CWE-563): [#def725]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ParseCommandLine’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3030:52: warning[-Wunused-parameter]: unused parameter ‘progName’
# 3030 | SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
#      |                                              ~~~~~~^~~~~~~~
# 3028|   
# 3029|   SECStatus
# 3030|-> SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
# 3031|   {
# 3032|       PRBool found;

Error: COMPILER_WARNING (CWE-195): [#def726]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintPRandOSError’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3235:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3235 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3233|       char buffer[513];
# 3234|       PRInt32     errLen = PR_GetErrorTextLength();
# 3235|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3236|           PR_GetErrorText(buffer);
# 3237|       }

Error: COMPILER_WARNING (CWE-195): [#def727]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3239:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3239 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3237|       }
# 3238|       SECU_PrintError(progName, "function failed");
# 3239|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3240|           PR_fprintf(PR_STDERR, "\t%s\n", buffer);
# 3241|       }

Error: COMPILER_WARNING (CWE-704): [#def728]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3299:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3299 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3297|   	    switch (node->error) {
# 3298|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3299|-> 		flags = (unsigned int)node->arg;
# 3300|   		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING: [#def729]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3300:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3300 |                 switch (flags) {
#      |                 ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3314:13: note: here
# 3314 |             case SEC_ERROR_INADEQUATE_CERT_TYPE:
#      |             ^~~~
# 3298|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3299|   		flags = (unsigned int)node->arg;
# 3300|-> 		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:
# 3302|   		    errstr = "Cert cannot sign.";

Error: CLANG_WARNING: [#def730]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3302:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3300|   		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:
# 3302|-> 		    errstr = "Cert cannot sign.";
# 3303|   		    break;
# 3304|   		case KU_KEY_ENCIPHERMENT:

Error: COMPILER_WARNING (CWE-704): [#def731]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3302:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3302 |                     errstr = "Cert cannot sign.";
#      |                            ^
# 3300|   		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:
# 3302|-> 		    errstr = "Cert cannot sign.";
# 3303|   		    break;
# 3304|   		case KU_KEY_ENCIPHERMENT:

Error: CLANG_WARNING: [#def732]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3305:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3303|   		    break;
# 3304|   		case KU_KEY_ENCIPHERMENT:
# 3305|-> 		    errstr = "Cert cannot encrypt.";
# 3306|   		    break;
# 3307|   		case KU_KEY_CERT_SIGN:

Error: COMPILER_WARNING (CWE-704): [#def733]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3305:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3305 |                     errstr = "Cert cannot encrypt.";
#      |                            ^
# 3303|   		    break;
# 3304|   		case KU_KEY_ENCIPHERMENT:
# 3305|-> 		    errstr = "Cert cannot encrypt.";
# 3306|   		    break;
# 3307|   		case KU_KEY_CERT_SIGN:

Error: CLANG_WARNING: [#def734]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3308:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3306|   		    break;
# 3307|   		case KU_KEY_CERT_SIGN:
# 3308|-> 		    errstr = "Cert cannot sign other certs.";
# 3309|   		    break;
# 3310|   		default:

Error: COMPILER_WARNING (CWE-704): [#def735]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3308:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3308 |                     errstr = "Cert cannot sign other certs.";
#      |                            ^
# 3306|   		    break;
# 3307|   		case KU_KEY_CERT_SIGN:
# 3308|-> 		    errstr = "Cert cannot sign other certs.";
# 3309|   		    break;
# 3310|   		default:

Error: CLANG_WARNING: [#def736]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3311:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3309|   		    break;
# 3310|   		default:
# 3311|-> 		    errstr = "[unknown usage].";
# 3312|   		    break;
# 3313|   		}

Error: COMPILER_WARNING (CWE-704): [#def737]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3311:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3311 |                     errstr = "[unknown usage].";
#      |                            ^
# 3309|   		    break;
# 3310|   		default:
# 3311|-> 		    errstr = "[unknown usage].";
# 3312|   		    break;
# 3313|   		}

Error: COMPILER_WARNING (CWE-704): [#def738]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3315:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3315 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3313|   		}
# 3314|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3315|-> 		flags = (unsigned int)node->arg;
# 3316|   		switch (flags) {
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING: [#def739]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3316:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3316 |                 switch (flags) {
#      |                 ^~~~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3340:13: note: here
# 3340 |             case SEC_ERROR_UNKNOWN_ISSUER:
#      |             ^~~~
# 3314|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3315|   		flags = (unsigned int)node->arg;
# 3316|-> 		switch (flags) {
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3318|   		case NS_CERT_TYPE_SSL_SERVER:

Error: CLANG_WARNING: [#def740]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3319:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3318|   		case NS_CERT_TYPE_SSL_SERVER:
# 3319|-> 		    errstr = "Cert cannot be used for SSL.";
# 3320|   		    break;
# 3321|   		case NS_CERT_TYPE_SSL_CA:

Error: COMPILER_WARNING (CWE-704): [#def741]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3319:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3319 |                     errstr = "Cert cannot be used for SSL.";
#      |                            ^
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3318|   		case NS_CERT_TYPE_SSL_SERVER:
# 3319|-> 		    errstr = "Cert cannot be used for SSL.";
# 3320|   		    break;
# 3321|   		case NS_CERT_TYPE_SSL_CA:

Error: CLANG_WARNING: [#def742]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3322:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3320|   		    break;
# 3321|   		case NS_CERT_TYPE_SSL_CA:
# 3322|-> 		    errstr = "Cert cannot be used as an SSL CA.";
# 3323|   		    break;
# 3324|   		case NS_CERT_TYPE_EMAIL:

Error: COMPILER_WARNING (CWE-704): [#def743]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3322:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3322 |                     errstr = "Cert cannot be used as an SSL CA.";
#      |                            ^
# 3320|   		    break;
# 3321|   		case NS_CERT_TYPE_SSL_CA:
# 3322|-> 		    errstr = "Cert cannot be used as an SSL CA.";
# 3323|   		    break;
# 3324|   		case NS_CERT_TYPE_EMAIL:

Error: CLANG_WARNING: [#def744]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3325:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3323|   		    break;
# 3324|   		case NS_CERT_TYPE_EMAIL:
# 3325|-> 		    errstr = "Cert cannot be used for SMIME.";
# 3326|   		    break;
# 3327|   		case NS_CERT_TYPE_EMAIL_CA:

Error: COMPILER_WARNING (CWE-704): [#def745]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3325:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3325 |                     errstr = "Cert cannot be used for SMIME.";
#      |                            ^
# 3323|   		    break;
# 3324|   		case NS_CERT_TYPE_EMAIL:
# 3325|-> 		    errstr = "Cert cannot be used for SMIME.";
# 3326|   		    break;
# 3327|   		case NS_CERT_TYPE_EMAIL_CA:

Error: CLANG_WARNING: [#def746]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3328:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3326|   		    break;
# 3327|   		case NS_CERT_TYPE_EMAIL_CA:
# 3328|-> 		    errstr = "Cert cannot be used as an SMIME CA.";
# 3329|   		    break;
# 3330|   		case NS_CERT_TYPE_OBJECT_SIGNING:

Error: COMPILER_WARNING (CWE-704): [#def747]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3328:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3328 |                     errstr = "Cert cannot be used as an SMIME CA.";
#      |                            ^
# 3326|   		    break;
# 3327|   		case NS_CERT_TYPE_EMAIL_CA:
# 3328|-> 		    errstr = "Cert cannot be used as an SMIME CA.";
# 3329|   		    break;
# 3330|   		case NS_CERT_TYPE_OBJECT_SIGNING:

Error: CLANG_WARNING: [#def748]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3331:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3329|   		    break;
# 3330|   		case NS_CERT_TYPE_OBJECT_SIGNING:
# 3331|-> 		    errstr = "Cert cannot be used for object signing.";
# 3332|   		    break;
# 3333|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: COMPILER_WARNING (CWE-704): [#def749]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3331:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3331 |                     errstr = "Cert cannot be used for object signing.";
#      |                            ^
# 3329|   		    break;
# 3330|   		case NS_CERT_TYPE_OBJECT_SIGNING:
# 3331|-> 		    errstr = "Cert cannot be used for object signing.";
# 3332|   		    break;
# 3333|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: CLANG_WARNING: [#def750]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3334:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3332|   		    break;
# 3333|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3334|-> 		    errstr = "Cert cannot be used as an object signing CA.";
# 3335|   		    break;
# 3336|   		default:

Error: COMPILER_WARNING (CWE-704): [#def751]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3334:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3334 |                     errstr = "Cert cannot be used as an object signing CA.";
#      |                            ^
# 3332|   		    break;
# 3333|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3334|-> 		    errstr = "Cert cannot be used as an object signing CA.";
# 3335|   		    break;
# 3336|   		default:

Error: CLANG_WARNING: [#def752]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3337:7: warning[deadcode.DeadStores]: Value stored to 'errstr' is never read
# 3335|   		    break;
# 3336|   		default:
# 3337|-> 		    errstr = "[unknown usage].";
# 3338|   		    break;
# 3339|   		}

Error: COMPILER_WARNING (CWE-704): [#def753]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3337:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3337 |                     errstr = "[unknown usage].";
#      |                            ^
# 3335|   		    break;
# 3336|   		default:
# 3337|-> 		    errstr = "[unknown usage].";
# 3338|   		    break;
# 3339|   		}

Error: COMPILER_WARNING (CWE-195): [#def754]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_StoreCRL’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3399:62: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘unsigned int’
# 3399 |             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
#      |                                                              ^~
# 3397|                          NS_CRL_TRAILER);
# 3398|           } else {
# 3399|->             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
# 3400|                   return SECFailure;
# 3401|               }

Error: COMPILER_WARNING (CWE-563): [#def755]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_FindCrlIssuer’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/secutil.c:3613:35: warning[-Wunused-parameter]: unused parameter ‘authorityKeyID’
# 3613 |                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
#      |                    ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
# 3611|   CERTCertificate *
# 3612|   SECU_FindCrlIssuer(CERTCertDBHandle *dbhandle, SECItem* subject,
# 3613|->                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
# 3614|   {
# 3615|       CERTCertificate *issuerCert = NULL;

Error: CPPCHECK_WARNING: [#def756]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-704): [#def757]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c: scope_hint: In function ‘main’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:155:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  155 |     char                          *DBPrefix                    = "";
#      |                                                                  ^~
#  153|       char                           commandToRun                = '\0';
#  154|       char                          *DBDir                       = NULL;
#  155|->     char                          *DBPrefix                    = "";
#  156|       char                          *input                       = NULL;
#  157|       char                          *keyname                     = NULL;

Error: COMPILER_WARNING (CWE-704): [#def758]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:161:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  161 |     char                          *slotname                    = "internal";
#      |                                                                  ^~~~~~~~~~
#  159|       char                          *output                      = NULL;
#  160|       char                          *SeedNoise                   = NULL;
#  161|->     char                          *slotname                    = "internal";
#  162|       char                          *transport_keyname           = NULL;
#  163|       int                            commandsEntered             = 0;

Error: CLANG_WARNING: [#def759]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:634:13: warning[unix.Malloc]: Potential leak of memory pointed to by 'DBPrefix'
#  632|                                                opt_NewKeyname );
#  633|           } else {
#  634|->             PR_fprintf( PR_STDERR, 
#  635|                           "%s -%c: the \"-r\" option must contain a "
#  636|                           "\"new_keyname\" argument:\n\n",

Error: COMPILER_WARNING (CWE-195): [#def760]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:878:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  878 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
#  876|           PRInt32 errLen = PR_GetErrorTextLength();
#  877|   
#  878|->         if( errLen > 0 && errLen < sizeof buffer ) {
#  879|               PR_GetErrorText( buffer );
#  880|           }

Error: COMPILER_WARNING (CWE-195): [#def761]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:888:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  888 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
#  886|                       "NSS_Initialize() failed" );
#  887|   
#  888|->         if( errLen > 0 && errLen < sizeof buffer ) {
#  889|               PR_fprintf( PR_STDERR, "\t%s\n", buffer );
#  890|           } else {

Error: COMPILER_WARNING (CWE-195): [#def762]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:919:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  919 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
#  917|               PRInt32 errLen = PR_GetErrorTextLength();
#  918|   
#  919|->             if( errLen > 0 && errLen < sizeof buffer ) {
#  920|                   PR_GetErrorText( buffer );
#  921|               }

Error: COMPILER_WARNING (CWE-195): [#def763]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:931:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  931 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
#  929|                           "\" exists!" );
#  930|   
#  931|->             if( errLen > 0 && errLen < sizeof buffer ) {
#  932|                   PR_fprintf( PR_STDERR, "\t%s\n", buffer );
#  933|               } else {

Error: CLANG_WARNING: [#def764]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/tkstool.c:2629:9: warning[deadcode.DeadStores]: Value stored to 'KCVLen' is never read
# 2627|                       KCVLen );
# 2628|           KCV = NULL;
# 2629|->         KCVLen = 0;
# 2630|       }
# 2631|   

Error: COMPILER_WARNING (CWE-758): [#def765]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:348:1: warning[-Wmissing-prototypes]: no previous prototype for ‘TKS_ClearScreen’
#  348 | TKS_ClearScreen()
#      | ^~~~~~~~~~~~~~~
#  346|   
#  347|   PR_IMPLEMENT( void )
#  348|-> TKS_ClearScreen()
#  349|   {
#  350|   #if defined(XP_UNIX) && !defined(VMS)

Error: COMPILER_WARNING (CWE-252): [#def766]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c: scope_hint: In function ‘TKS_ClearScreen’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:351:5: warning[-Wunused-result]: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’
#  349|   {
#  350|   #if defined(XP_UNIX) && !defined(VMS)
#  351|->     system( "tput clear" );
#  352|   #else
#  353|       system( "cls" );

Error: COMPILER_WARNING (CWE-758): [#def767]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:359:1: warning[-Wmissing-prototypes]: no previous prototype for ‘TKS_WaitForUser’
#  359 | TKS_WaitForUser()
#      | ^~~~~~~~~~~~~~~
#  357|   
#  358|   PR_IMPLEMENT( void )
#  359|-> TKS_WaitForUser()
#  360|   {
#  361|       int            c;

Error: COMPILER_WARNING (CWE-758): [#def768]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:377:1: warning[-Wmissing-prototypes]: no previous prototype for ‘TKS_TypeProceedToContinue’
#  377 | TKS_TypeProceedToContinue()
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
#  375|   
#  376|   PR_IMPLEMENT( void )
#  377|-> TKS_TypeProceedToContinue()
#  378|   {
#  379|       int            fd;

Error: COMPILER_WARNING (CWE-563): [#def769]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:383:20: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  383 |     int            rv = 0;
#      |                    ^~
#  381|       int            count;
#  382|       int            c;
#  383|->     int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;

Error: COMPILER_WARNING (CWE-563): [#def770]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:385:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_min’ set but not used
#  385 |     cc_t           orig_cc_min;
#      |                    ^~~~~~~~~~~
#  383|       int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|->     cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;

Error: COMPILER_WARNING (CWE-563): [#def771]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:386:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_time’ set but not used
#  386 |     cc_t           orig_cc_time;
#      |                    ^~~~~~~~~~~~
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;
#  386|->     cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;
#  388|       struct termios tio;

Error: COMPILER_WARNING (CWE-563): [#def772]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c: scope_hint: In function ‘TKS_TypeProceedToContinue’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:387:20: warning[-Wunused-but-set-variable]: variable ‘orig_lflag’ set but not used
#  387 |     tcflag_t       orig_lflag;
#      |                    ^~~~~~~~~~
#  385|       cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|->     tcflag_t       orig_lflag;
#  388|       struct termios tio;
#  389|   #endif

Error: CLANG_WARNING: [#def773]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:401:5: warning[deadcode.DeadStores]: Value stored to 'orig_lflag' is never read
#  399|   #if defined( XP_UNIX ) && !defined( VMS )
#  400|       tcgetattr( fd, &tio );
#  401|->     orig_lflag       = tio.c_lflag;
#  402|       orig_cc_min      = tio.c_cc[VMIN];
#  403|       orig_cc_time     = tio.c_cc[VTIME];

Error: CLANG_WARNING: [#def774]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:402:5: warning[deadcode.DeadStores]: Value stored to 'orig_cc_min' is never read
#  400|       tcgetattr( fd, &tio );
#  401|       orig_lflag       = tio.c_lflag;
#  402|->     orig_cc_min      = tio.c_cc[VMIN];
#  403|       orig_cc_time     = tio.c_cc[VTIME];
#  404|       tio.c_lflag     &= ~ECHO;

Error: CLANG_WARNING: [#def775]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:403:5: warning[deadcode.DeadStores]: Value stored to 'orig_cc_time' is never read
#  401|       orig_lflag       = tio.c_lflag;
#  402|       orig_cc_min      = tio.c_cc[VMIN];
#  403|->     orig_cc_time     = tio.c_cc[VTIME];
#  404|       tio.c_lflag     &= ~ECHO;
#  405|       tio.c_lflag     &= ~ICANON;

Error: CLANG_WARNING: [#def776]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:423:13: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  421|           /* break on EOF */
#  422|           if( c == EOF ) {
#  423|->             rv = -1;
#  424|               break;
#  425|           }

Error: CLANG_WARNING: [#def777]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tkstool/util.c:429:13: warning[deadcode.DeadStores]: Value stored to 'rv' is never read
#  427|           /* break on ^C */
#  428|           if( c == CTRL_C ) {
#  429|->             rv = -1;
#  430|               break;
#  431|           }

Error: CPPCHECK_WARNING: [#def778]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/src/main/Util.cpp: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-563): [#def779]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/src/main/Util.cpp: scope_hint: In static member function ‘static PK11SymKey* Util::DiversifyKey(PK11SymKey*, Buffer&, PK11SlotInfo*)’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/src/main/Util.cpp:528:14: warning[-Wunused-but-set-variable]: variable ‘status’ set but not used
#  528 |     PRStatus status = PR_FAILURE ;
#      |              ^~~~~~
#  526|   {
#  527|       PK11SymKey *key = NULL;
#  528|->     PRStatus status = PR_FAILURE ;
#  529|       PK11Context *context = NULL;
#  530|   #ifdef DES2_WORKAROUND

Error: CLANG_WARNING: [#def780]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/src/main/Util.cpp:575:5: warning[deadcode.DeadStores]: Value stored to 'status' is never read
#  573|                   &keyItem, CKF_SIGN | CKF_ENCRYPT, PR_FALSE, 0);
#  574|   
#  575|->     status = PR_SUCCESS;
#  576|       
#  577|   done:

Error: CPPCHECK_WARNING: [#def781]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Client.cpp: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING (CWE-628): [#def782]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Client.cpp:206: error[sprintfOverlappingData]: Undefined behavior: Variable 'output' is used as parameter and destination in sprintf().
#  204|     for (i = 0; i < (int) buf.size (); ++i)
#  205|       {
#  206|->       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#  207|       }
#  208|   }

Error: COMPILER_WARNING: [#def783]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Client.cpp: scope_hint: In member function ‘RA_Client::OpTokenStatus(NameValueSet*)’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Client.cpp:206:27: warning[-Wformat-overflow=]: ‘%02x’ directive writing 2 bytes into a region of size between 1 and 2048
#  206 |       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#      |                           ^~~~
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Client.cpp:206:24: note: directive argument in the range [0, 255]
#  206 |       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#      |                        ^~~~~~~~
/usr/include/bits/stdio2.h:30:34: note: ‘__sprintf_chk’ output between 3 and 2050 bytes into a destination of size 2048
#   30 |   return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
#      |          ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   31 |                                   __glibc_objsize (__s), __fmt,
#      |                                   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   32 |                                   __va_arg_pack ());
#      |                                   ~~~~~~~~~~~~~~~~~
#  204|     for (i = 0; i < (int) buf.size (); ++i)
#  205|       {
#  206|->       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#  207|       }
#  208|   }

Error: CLANG_WARNING: [#def784]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Client.cpp:910:10: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
#  908|       }
#  909|   
#  910|->   status = arg[0].status;
#  911|   
#  912|     if(arg) {

Error: CLANG_WARNING: [#def785]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Client.cpp:983:10: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
#  981|       }
#  982|   
#  983|->   status = arg[0].status;
#  984|   
#  985|     if(arg) {

Error: CPPCHECK_WARNING: [#def786]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-1164): [#def787]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp:156:1: warning[-Wunused-function]: ‘void printBuf(Buffer*)’ defined but not used
#  156 | printBuf (Buffer * buf)
#      | ^~~~~~~~
#  154|   
#  155|   static void
#  156|-> printBuf (Buffer * buf)
#  157|   {
#  158|     int sum = 0;

Error: COMPILER_WARNING (CWE-1164): [#def788]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp: scope_hint: At global scope
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp:213:1: warning[-Wunused-function]: ‘PRUint32 GetIPAddress(const char*)’ defined but not used
#  213 | GetIPAddress (const char *hostName)
#      | ^~~~~~~~~~~~
#  211|   
#  212|   static PRUint32
#  213|-> GetIPAddress (const char *hostName)
#  214|   {
#  215|     const unsigned char *p;

Error: CLANG_WARNING: [#def789]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp:260:15: warning[deadcode.DeadStores]: Although the value stored to 'iter' is used in the enclosing expression, the value is never actually read from 'iter'
#  258|     if (ai) {
#  259|         iter = NULL;
#  260|->       while ((iter = PR_EnumerateAddrInfo(iter, ai, 0, &addr)) != NULL) {
#  261|             family = PR_NetAddrFamily(&addr);
#  262|             break;

Error: COMPILER_WARNING (CWE-563): [#def790]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp: scope_hint: In function ‘int ReadResponseHeader(PRFileDesc*)’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp:445:11: warning[-Wunused-but-set-variable]: variable ‘rc’ set but not used
#  445 |   PRInt32 rc;
#      |           ^~
#  443|   {
#  444|     char buf[1024];
#  445|->   PRInt32 rc;
#  446|     char *cur = buf;
#  447|     int i;

Error: CLANG_WARNING: [#def791]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Conn.cpp:455:7: warning[deadcode.DeadStores]: Value stored to 'rc' is never read
#  453|     while (1)
#  454|       {
#  455|->       rc = PR_Recv (fd, cur, 1, 0, 1000000);
#  456|         if (buf[0] == '\r' &&
#  457|   	  buf[1] == '\n' && buf[2] == '\r' && buf[3] == '\n')

Error: CPPCHECK_WARNING: [#def792]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING (CWE-710): [#def793]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:59:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   59 |   { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#      |     ^~~~~~~~~~~
#   57|   static CurveNameTagPair nameTagPair[] =
#   58|   { 
#   59|->   { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#   60|     { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},

Error: COMPILER_WARNING (CWE-710): [#def794]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:60:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   60 |   { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#      |     ^~~~~~~~~~
#   58|   { 
#   59|     { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#   60|->   { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},

Error: COMPILER_WARNING (CWE-710): [#def795]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:61:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   61 |   { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#      |     ^~~~~~~~~~~
#   59|     { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#   60|     { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|->   { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},

Error: COMPILER_WARNING (CWE-710): [#def796]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:62:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   62 |   { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#      |     ^~~~~~~~~~~
#   60|     { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|->   { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},

Error: COMPILER_WARNING (CWE-710): [#def797]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:63:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   63 |   { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#      |     ^~~~~~~~~~
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|->   { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},

Error: COMPILER_WARNING (CWE-710): [#def798]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:64:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   64 |   { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#      |     ^~~~~~~~~~~
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|->   { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},

Error: COMPILER_WARNING (CWE-710): [#def799]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:65:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   65 |   { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#      |     ^~~~~~~~~~~
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|->   { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},

Error: COMPILER_WARNING (CWE-710): [#def800]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:66:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   66 |   { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#      |     ^~~~~~~~~~~
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|->   { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},

Error: COMPILER_WARNING (CWE-710): [#def801]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:67:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   67 |   { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#      |     ^~~~~~~~~~
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|->   { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},

Error: COMPILER_WARNING (CWE-710): [#def802]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:68:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   68 |   { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#      |     ^~~~~~~~~~~
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|->   { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},

Error: COMPILER_WARNING (CWE-710): [#def803]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:69:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   69 |   { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#      |     ^~~~~~~~~~
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|->   { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},

Error: COMPILER_WARNING (CWE-710): [#def804]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:70:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   70 |   { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#      |     ^~~~~~~~~~~
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|->   { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},

Error: COMPILER_WARNING (CWE-710): [#def805]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:71:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   71 |   { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#      |     ^~~~~~~~~~~
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|->   { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},

Error: COMPILER_WARNING (CWE-710): [#def806]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:72:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   72 |   { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#      |     ^~~~~~~~~~
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|->   { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},

Error: COMPILER_WARNING (CWE-710): [#def807]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:73:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   73 |   { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#      |     ^~~~~~~~~~~
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|->   { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},

Error: COMPILER_WARNING (CWE-710): [#def808]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:74:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   74 |   { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#      |     ^~~~~~~~~~
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|->   { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},

Error: COMPILER_WARNING (CWE-710): [#def809]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:75:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   75 |   { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#      |     ^~~~~~~~~~~
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|->   { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},

Error: COMPILER_WARNING (CWE-710): [#def810]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:76:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   76 |   { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#      |     ^~~~~~~~~~
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|->   { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},

Error: COMPILER_WARNING (CWE-710): [#def811]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:77:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   77 |   { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#      |     ^~~~~~~~~~~
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|->   { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},

Error: COMPILER_WARNING (CWE-710): [#def812]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:78:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   78 |   { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#      |     ^~~~~~~~~~
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|->   { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},

Error: COMPILER_WARNING (CWE-710): [#def813]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:79:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   79 |   { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#      |     ^~~~~~~~~~~
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|->   { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},

Error: COMPILER_WARNING (CWE-710): [#def814]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:80:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   80 |   { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#      |     ^~~~~~~~~~
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|->   { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},

Error: COMPILER_WARNING (CWE-710): [#def815]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:81:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   81 |   { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#      |     ^~~~~~~~~~~
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|->   { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},

Error: COMPILER_WARNING (CWE-710): [#def816]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:82:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   82 |   { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#      |     ^~~~~~~~~~
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|->   { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},

Error: COMPILER_WARNING (CWE-710): [#def817]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:83:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   83 |   { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#      |     ^~~~~~~~~~~
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|->   { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},

Error: COMPILER_WARNING (CWE-710): [#def818]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:84:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   84 |   { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#      |     ^~~~~~~~~~~
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|->   { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},

Error: COMPILER_WARNING (CWE-710): [#def819]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:85:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   85 |   { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#      |     ^~~~~~~~~~~
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|->   { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},

Error: COMPILER_WARNING (CWE-710): [#def820]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:86:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   86 |   { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#      |     ^~~~~~~~~~~
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|->   { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},

Error: COMPILER_WARNING (CWE-710): [#def821]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:87:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   87 |   { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#      |     ^~~~~~~~~~~
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|->   { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},

Error: COMPILER_WARNING (CWE-710): [#def822]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:88:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   88 |   { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#      |     ^~~~~~~~~~
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|->   { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},

Error: COMPILER_WARNING (CWE-710): [#def823]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:89:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   89 |   { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#      |     ^~~~~~~~~~~
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|->   { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},

Error: COMPILER_WARNING (CWE-710): [#def824]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:90:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   90 |   { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#      |     ^~~~~~~~~~~
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|->   { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},

Error: COMPILER_WARNING (CWE-710): [#def825]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:91:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   91 |   { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#      |     ^~~~~~~~~~
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|->   { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},

Error: COMPILER_WARNING (CWE-710): [#def826]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:92:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   92 |   { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#      |     ^~~~~~~~~~~
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|->   { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},

Error: COMPILER_WARNING (CWE-710): [#def827]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:93:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   93 |   { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#      |     ^~~~~~~~~~~
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|->   { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},

Error: COMPILER_WARNING (CWE-710): [#def828]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:94:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   94 |   { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#      |     ^~~~~~~~~~
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|->   { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},

Error: COMPILER_WARNING (CWE-710): [#def829]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:95:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   95 |   { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#      |     ^~~~~~~~~~~
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|->   { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|     { "secp521r1", SEC_OID_SECG_EC_SECP521R1},

Error: COMPILER_WARNING (CWE-710): [#def830]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:96:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   96 |   { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#      |     ^~~~~~~~~~
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|->   { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|     { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#   98|     { "nistp521", SEC_OID_SECG_EC_SECP521R1},

Error: COMPILER_WARNING (CWE-710): [#def831]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:97:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   97 |   { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#      |     ^~~~~~~~~~~
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|->   { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#   98|     { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#   99|   

Error: COMPILER_WARNING (CWE-710): [#def832]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:98:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   98 |   { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#      |     ^~~~~~~~~~
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|     { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#   98|->   { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#   99|   
#  100|     { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },

Error: COMPILER_WARNING (CWE-710): [#def833]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:100:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  100 |   { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#      |     ^~~~~~~~~~~~
#   98|     { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#   99|   
#  100|->   { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#  101|     { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },

Error: COMPILER_WARNING (CWE-710): [#def834]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:101:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  101 |   { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#      |     ^~~~~~~~~~~~
#   99|   
#  100|     { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#  101|->   { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },

Error: COMPILER_WARNING (CWE-710): [#def835]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:102:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  102 |   { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#      |     ^~~~~~~~~~~~
#  100|     { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#  101|     { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|->   { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|     { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },

Error: COMPILER_WARNING (CWE-710): [#def836]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:103:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  103 |   { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#      |     ^~~~~~~~~~~~
#  101|     { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|->   { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|     { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#  105|     { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },

Error: COMPILER_WARNING (CWE-710): [#def837]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:104:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  104 |   { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#      |     ^~~~~~~~~~~~
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|->   { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#  105|     { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#  106|   

Error: COMPILER_WARNING (CWE-710): [#def838]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:105:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  105 |   { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#      |     ^~~~~~~~~~~~
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|     { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#  105|->   { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#  106|   
#  107|     { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },

Error: COMPILER_WARNING (CWE-710): [#def839]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:107:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  107 |   { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#      |     ^~~~~~~~~~~~
#  105|     { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#  106|   
#  107|->   { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#  108|     { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },

Error: COMPILER_WARNING (CWE-710): [#def840]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:108:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  108 |   { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#      |     ^~~~~~~~~~~~
#  106|   
#  107|     { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#  108|->   { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },

Error: COMPILER_WARNING (CWE-710): [#def841]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:109:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  109 |   { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#      |     ^~~~~~~~~~~~
#  107|     { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#  108|     { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|->   { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },

Error: COMPILER_WARNING (CWE-710): [#def842]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:110:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  110 |   { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#      |     ^~~~~~~~~~~~
#  108|     { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|->   { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },

Error: COMPILER_WARNING (CWE-710): [#def843]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:111:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  111 |   { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#      |     ^~~~~~~~~~~~
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|->   { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },

Error: COMPILER_WARNING (CWE-710): [#def844]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:112:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  112 |   { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#      |     ^~~~~~~~~~~~
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|->   { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },

Error: COMPILER_WARNING (CWE-710): [#def845]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:113:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  113 |   { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#      |     ^~~~~~~~~~~~
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|->   { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },

Error: COMPILER_WARNING (CWE-710): [#def846]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:114:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  114 |   { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#      |     ^~~~~~~~~~~~
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|->   { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },

Error: COMPILER_WARNING (CWE-710): [#def847]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:115:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  115 |   { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#      |     ^~~~~~~~~~~~
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|->   { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },

Error: COMPILER_WARNING (CWE-710): [#def848]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:116:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  116 |   { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#      |     ^~~~~~~~~~~~
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|->   { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },

Error: COMPILER_WARNING (CWE-710): [#def849]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:117:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  117 |   { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#      |     ^~~~~~~~~~~~
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|->   { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },

Error: COMPILER_WARNING (CWE-710): [#def850]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:118:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  118 |   { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#      |     ^~~~~~~~~~~~
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|->   { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },

Error: COMPILER_WARNING (CWE-710): [#def851]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:119:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  119 |   { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#      |     ^~~~~~~~~~~~
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|->   { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },

Error: COMPILER_WARNING (CWE-710): [#def852]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:120:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  120 |   { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#      |     ^~~~~~~~~~~~
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|->   { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },

Error: COMPILER_WARNING (CWE-710): [#def853]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:121:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  121 |   { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#      |     ^~~~~~~~~~~~
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|->   { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },

Error: COMPILER_WARNING (CWE-710): [#def854]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:122:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  122 |   { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#      |     ^~~~~~~~~~~~
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|->   { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },

Error: COMPILER_WARNING (CWE-710): [#def855]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:123:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  123 |   { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#      |     ^~~~~~~~~~~~
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|->   { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|     { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },

Error: COMPILER_WARNING (CWE-710): [#def856]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:124:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  124 |   { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#      |     ^~~~~~~~~~~~
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|->   { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|     { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#  126|     { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },

Error: COMPILER_WARNING (CWE-710): [#def857]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:125:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  125 |   { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#      |     ^~~~~~~~~~~~
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|->   { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#  126|     { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#  127|   

Error: COMPILER_WARNING (CWE-710): [#def858]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:126:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  126 |   { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#      |     ^~~~~~~~~~~~
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|     { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#  126|->   { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#  127|   
#  128|     { "secp112r1", SEC_OID_SECG_EC_SECP112R1},

Error: COMPILER_WARNING (CWE-710): [#def859]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:128:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  128 |   { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#      |     ^~~~~~~~~~~
#  126|     { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#  127|   
#  128|->   { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#  129|     { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|     { "secp128r1", SEC_OID_SECG_EC_SECP128R1},

Error: COMPILER_WARNING (CWE-710): [#def860]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:129:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  129 |   { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#      |     ^~~~~~~~~~~
#  127|   
#  128|     { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#  129|->   { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|     { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#  131|     { "secp128r2", SEC_OID_SECG_EC_SECP128R2},

Error: COMPILER_WARNING (CWE-710): [#def861]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:130:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  130 |   { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#      |     ^~~~~~~~~~~
#  128|     { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#  129|     { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|->   { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#  131|     { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#  132|   

Error: COMPILER_WARNING (CWE-710): [#def862]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:131:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  131 |   { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#      |     ^~~~~~~~~~~
#  129|     { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|     { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#  131|->   { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#  132|   
#  133|     { "sect113r1", SEC_OID_SECG_EC_SECT113R1},

Error: COMPILER_WARNING (CWE-710): [#def863]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:133:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  133 |   { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#      |     ^~~~~~~~~~~
#  131|     { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#  132|   
#  133|->   { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#  134|     { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|     { "sect131r1", SEC_OID_SECG_EC_SECT131R1},

Error: COMPILER_WARNING (CWE-710): [#def864]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:134:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  134 |   { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#      |     ^~~~~~~~~~~
#  132|   
#  133|     { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#  134|->   { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|     { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#  136|     { "sect131r2", SEC_OID_SECG_EC_SECT131R2},

Error: COMPILER_WARNING (CWE-710): [#def865]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:135:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  135 |   { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#      |     ^~~~~~~~~~~
#  133|     { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#  134|     { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|->   { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#  136|     { "sect131r2", SEC_OID_SECG_EC_SECT131R2},
#  137|   };

Error: COMPILER_WARNING (CWE-710): [#def866]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:136:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  136 |   { "sect131r2", SEC_OID_SECG_EC_SECT131R2},
#      |     ^~~~~~~~~~~
#  134|     { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|     { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#  136|->   { "sect131r2", SEC_OID_SECG_EC_SECT131R2},
#  137|   };
#  138|   

Error: COMPILER_WARNING (CWE-710): [#def867]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp: scope_hint: In member function ‘void RA_Token::SetMSN(Buffer&)’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:348:25: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  348 |     m_msn = *(ToBuffer ("FFFFFFFF"));
#      |                         ^~~~~~~~~~
#  346|       // Supply a default value of 'FFFFFFFF' for 'msn'
#  347|       printf ("RA_Token::SetMSN - Use 'FFFFFFFF' instead of specified 'msn'!\n");
#  348|->     m_msn = *(ToBuffer ("FFFFFFFF"));
#  349|     } else {
#  350|       m_msn = msn;

Error: COMPILER_WARNING (CWE-563): [#def868]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp: scope_hint: In member function ‘PK11SymKey* RA_Token::CreateSessionKey(keyType, Buffer&, Buffer&)’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:761:8: warning[-Wunused-but-set-variable]: variable ‘input’ set but not used
#  761 |   char input[16];
#      |        ^~~~~
#  759|   {
#  760|     BYTE *key = NULL;
#  761|->   char input[16];
#  762|     int i;
#  763|     BYTE *cc = (BYTE *) card_challenge;

Error: COMPILER_WARNING (CWE-563): [#def869]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp: scope_hint: In member function ‘APDU_Response* RA_Token::ProcessGenerateKey(Generate_Key_APDU*, NameValueSet*, NameValueSet*)’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1076:13: warning[-Wunused-but-set-variable]: variable ‘algtag’ set but not used
# 1076 |   SECOidTag algtag;
#      |             ^~~~~~
# 1074|   {
# 1075|     CK_MECHANISM_TYPE mechanism;
# 1076|->   SECOidTag algtag;
# 1077|     PK11RSAGenParams rsaparams;
# 1078|     void *x_params;

Error: CLANG_WARNING: [#def870]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1122:3: warning[deadcode.DeadStores]: Value stored to 'algtag' is never read
# 1120|     rsaparams.pe = publicExponent;
# 1121|     mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN;
# 1122|->   algtag = SEC_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION;
# 1123|     x_params = &rsaparams;
# 1124|   

Error: COMPILER_WARNING (CWE-710): [#def871]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp: scope_hint: In member function ‘APDU_Response* RA_Token::ProcessGenerateKeyECC(Generate_Key_ECC_APDU*, NameValueSet*, NameValueSet*)’
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1380:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1380 |         keycurve = "nistp256";
#      |                    ^~~~~~~~~~
# 1378|       /* only three curves are supported by token */
# 1379|       if (keysize == 256) {
# 1380|->         keycurve = "nistp256";
# 1381|       } else if (keysize == 384) {
# 1382|           keycurve = "nistp384";

Error: COMPILER_WARNING (CWE-710): [#def872]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1382:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1382 |         keycurve = "nistp384";
#      |                    ^~~~~~~~~~
# 1380|           keycurve = "nistp256";
# 1381|       } else if (keysize == 384) {
# 1382|->         keycurve = "nistp384";
# 1383|       } else if (keysize == 521) {
# 1384|           keycurve = "nistp521";

Error: COMPILER_WARNING (CWE-710): [#def873]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1384:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1384 |         keycurve = "nistp521";
#      |                    ^~~~~~~~~~
# 1382|           keycurve = "nistp384";
# 1383|       } else if (keysize == 521) {
# 1384|->         keycurve = "nistp521";
# 1385|       } else {
# 1386|           Output("unsupported key size: %d, default to nistp256", keysize);

Error: COMPILER_WARNING (CWE-710): [#def874]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1387:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1387 |         keycurve = "nistp256";
#      |                    ^~~~~~~~~~
# 1385|       } else {
# 1386|           Output("unsupported key size: %d, default to nistp256", keysize);
# 1387|->         keycurve = "nistp256";
# 1388|       }
# 1389|   

Error: COMPILER_WARNING (CWE-563): [#def875]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1397:19: warning[-Wunused-variable]: unused variable ‘attrFlags’
# 1397 |     PK11AttrFlags attrFlags = 0;
#      |                   ^~~~~~~~~
# 1395|           wrapped_challenge_len);
# 1396|   
# 1397|->     PK11AttrFlags attrFlags = 0;
# 1398|   
# 1399|       /* generate key pair */

Error: COMPILER_WARNING (CWE-563): [#def876]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1418:17: warning[-Wunused-variable]: unused variable ‘n’
# 1418 |             int n = ReadLine(fd_slotname, slotname, 500, &removed_return);
#      |                 ^
# 1416|           } else {
# 1417|               fd_slotname = PR_Open(slotnamefile, PR_RDWR, 00400|00200);
# 1418|->             int n = ReadLine(fd_slotname, slotname, 500, &removed_return);
# 1419|               slot = PK11_FindSlotByName(slotname);
# 1420|           }

Error: CLANG_WARNING: [#def877]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1418:17: warning[deadcode.DeadStores]: Value stored to 'n' during its initialization is never read
# 1416|           } else {
# 1417|               fd_slotname = PR_Open(slotnamefile, PR_RDWR, 00400|00200);
# 1418|->             int n = ReadLine(fd_slotname, slotname, 500, &removed_return);
# 1419|               slot = PK11_FindSlotByName(slotname);
# 1420|           }

Error: COMPILER_WARNING (CWE-563): [#def878]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1521:28: warning[-Wunused-variable]: unused variable ‘pkeyb’
# 1521 |             unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
#      |                            ^~~~~
# 1519|               printf("begin verifying proof");
# 1520|   #endif
# 1521|->             unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
# 1522|               int pkeyb_len = data_blob.size ();
# 1523|   

Error: CLANG_WARNING: [#def879]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1521:28: warning[deadcode.DeadStores]: Value stored to 'pkeyb' during its initialization is never read
# 1519|               printf("begin verifying proof");
# 1520|   #endif
# 1521|->             unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
# 1522|               int pkeyb_len = data_blob.size ();
# 1523|   

Error: COMPILER_WARNING (CWE-563): [#def880]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1522:17: warning[-Wunused-variable]: unused variable ‘pkeyb_len’
# 1522 |             int pkeyb_len = data_blob.size ();
#      |                 ^~~~~~~~~
# 1520|   #endif
# 1521|               unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
# 1522|->             int pkeyb_len = data_blob.size ();
# 1523|   
# 1524|   Output("skipping VerifyProof");

Error: CLANG_WARNING: [#def881]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/tools/raclient/RA_Token.cpp:1522:17: warning[deadcode.DeadStores]: Value stored to 'pkeyb_len' during its initialization is never read
# 1520|   #endif
# 1521|               unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
# 1522|->             int pkeyb_len = data_blob.size ();
# 1523|   
# 1524|   Output("skipping VerifyProof");

Error: COMPILER_WARNING: [#def882]
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/src/include/main/NameValueSet.h:36: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/src/main/NameValueSet.cpp:28: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/redhat-linux-build/config.h:42:9: warning: "XP_UNIX" redefined
#   42 | #define XP_UNIX 1
#      |         ^~~~~~~
/usr/include/nspr4/prtypes.h:26: included_from: Included from here.
/usr/include/nspr4/prmem.h:14: included_from: Included from here.
dogtag-pki-11.5.0-build/pki-11.5.0/base/tools/src/main/native/tpsclient/src/main/NameValueSet.cpp:23: included_from: Included from here.
/usr/include/nspr4/prcpucfg.h:15:9: note: this is the location of the previous definition
#   15 | #define XP_UNIX
#      |         ^~~~~~~
#   40|   /**************************** PLATTFORM ****************************/
#   41|   
#   42|-> #define XP_UNIX 1
#   43|   /* #undef VMS */
#   44|   

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-151.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namedogtag-pki-11.5.0-3.fc41.1
store-results-to/tmp/tmpnq0o8p5j/dogtag-pki-11.5.0-3.fc41.1.tar.xz
time-created2024-07-03 12:32:17
time-finished2024-07-03 12:37:25
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpnq0o8p5j/dogtag-pki-11.5.0-3.fc41.1.tar.xz' '--gcc-analyze' '/tmp/tmpnq0o8p5j/dogtag-pki-11.5.0-3.fc41.1.src.rpm'
tool-versioncsmock-3.5.3-1.el9