bind-9.18.30-2.fc42

List of Findings

Error: SHELLCHECK_WARNING (CWE-477): [#def1]
/usr/libexec/setup-named-chroot.sh:13:19: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#   11|   }
#   12|   
#   13|-> if ! [ "$#" -ge 2 -a "$#" -le 3 ]; then
#   14|     echo 'Wrong number of arguments'
#   15|     usage

Error: SHELLCHECK_WARNING (CWE-88): [#def2]
/usr/libexec/setup-named-chroot.sh:37:35: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   35|     shift
#   36|     if ! [ -e "$DEVNAME" ]; then
#   37|->     /bin/mknod -m 0664 "$DEVNAME" $@
#   38|       /bin/chgrp named "$DEVNAME"
#   39|       if [ -x /usr/sbin/selinuxenabled -a -x /sbin/restorecon ]; then

Error: SHELLCHECK_WARNING (CWE-477): [#def3]
/usr/libexec/setup-named-chroot.sh:39:38: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#   37|       /bin/mknod -m 0664 "$DEVNAME" $@
#   38|       /bin/chgrp named "$DEVNAME"
#   39|->     if [ -x /usr/sbin/selinuxenabled -a -x /sbin/restorecon ]; then
#   40|         /usr/sbin/selinuxenabled && /sbin/restorecon "$DEVNAME" > /dev/null || :
#   41|       fi

Error: SHELLCHECK_WARNING (CWE-156): [#def4]
/usr/libexec/setup-named-chroot.sh:74:41: warning[SC2046]: Quote this to prevent word splitting.
#   72|         if ! [ -d "$all" ]; then
#   73|           # mount it only if it is not present in chroot or it is empty
#   74|->         if ! [ -e "$ROOTDIR$all" ] || [ `stat -c'%s' "$ROOTDIR$all"` -eq 0 ]; then
#   75|             touch "$ROOTDIR$all"
#   76|             mount --bind "$all" "$ROOTDIR$all"

Error: SHELLCHECK_WARNING (CWE-156): [#def5]
/usr/libexec/setup-named-chroot.sh:81:31: warning[SC2046]: Quote this to prevent word splitting.
#   79|           # Mount source is a directory. Mount it only if directory in chroot is
#   80|           # empty.
#   81|->         if [ -e "$all" ] && [ `ls -1A $ROOTDIR$all | wc -l` -eq 0 ]; then
#   82|             mount --bind --make-private "$all" "$ROOTDIR$all"
#   83|           fi

Error: SHELLCHECK_WARNING (CWE-88): [#def6]
/usr/libexec/setup-named-softhsm.sh:26:11: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   24|   echo_i()
#   25|   {
#   26|-> 	echo "#" $@
#   27|   }
#   28|   

Error: SHELLCHECK_WARNING (CWE-477): [#def7]
/usr/libexec/setup-named-softhsm.sh:44:30: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#   42|   }
#   43|   
#   44|-> if [ "$SOFTHSM2_CONF" = "-A" -a -z "$TOKENPATH" ]; then
#   45|   	TOKENPATH=$(mktemp -d /var/tmp/softhsm-XXXXXX)
#   46|   fi

Error: SHELLCHECK_WARNING (CWE-477): [#def8]
/usr/libexec/setup-named-softhsm.sh:48:26: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   46|   fi
#   47|   
#   48|-> if [ -z "$SOFTHSM2_CONF" -o -z "$TOKENPATH" ]; then
#   49|   	usage >&2
#   50|   	exit 1

Error: SHELLCHECK_WARNING (CWE-563): [#def9]
/usr/libexec/setup-named-softhsm.sh:61:2: warning[SC2034]: MODE appears unused. Verify use (or export if used externally).
#   59|   	TOKENPATH="$TOKENPATH/tokens"
#   60|   else
#   61|-> 	MODE=legacy
#   62|   fi
#   63|   

Error: SHELLCHECK_WARNING: [#def10]
/usr/libexec/setup-named-softhsm.sh:106:8: warning[SC3037]: In POSIX sh, echo flags are undefined.
#  104|   	SO_PIN=$(random 18)
#  105|   	if [ -n "$PIN_SOURCE" ]; then
#  106|-> 		echo -n "$PIN" > "$PIN_SOURCE"
#  107|   		echo -n "$SO_PIN" > "$SOPIN_SOURCE"
#  108|   	fi

Error: SHELLCHECK_WARNING: [#def11]
/usr/libexec/setup-named-softhsm.sh:107:8: warning[SC3037]: In POSIX sh, echo flags are undefined.
#  105|   	if [ -n "$PIN_SOURCE" ]; then
#  106|   		echo -n "$PIN" > "$PIN_SOURCE"
#  107|-> 		echo -n "$SO_PIN" > "$SOPIN_SOURCE"
#  108|   	fi
#  109|   

Error: GCC_ANALYZER_WARNING (CWE-465): [#def12]
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c: scope_hint: In function ‘get_rndckey’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:888:12: warning[-Wanalyzer-deref-before-check]: check of ‘isc__mem_get(mctx, 48, 0)’ for NULL after already dereferencing it
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:806:27: note: in definition of macro ‘CHECK’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:834:9: note: in expansion of macro ‘CHECK’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:806:27: note: in definition of macro ‘CHECK’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:835:9: note: in expansion of macro ‘CHECK’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:806:27: note: in definition of macro ‘CHECK’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:837:9: note: in expansion of macro ‘CHECK’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:24: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/mem.h:138:27: note: in expansion of macro ‘ISCMEMFUNC’
bind-9.18.30-build/bind-9.18.30/bin/named/controlconf.c:839:17: note: in expansion of macro ‘isc_mem_get’
#  886|   
#  887|   cleanup:
#  888|-> 	if (keyid != NULL) {
#  889|   		free_controlkey(keyid, mctx);
#  890|   	}

Error: GCC_ANALYZER_WARNING: [#def13]
bind-9.18.30-build/bind-9.18.30/bin/named/os.c: scope_hint: In function ‘named_os_daemonize’
bind-9.18.30-build/bind-9.18.30/bin/named/os.c:332:31: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘0’
#  330|   		if (devnullfd != STDIN_FILENO) {
#  331|   			(void)close(STDIN_FILENO);
#  332|-> 			(void)dup2(devnullfd, STDIN_FILENO);
#  333|   		}
#  334|   		if (devnullfd != STDOUT_FILENO) {

Error: GCC_ANALYZER_WARNING: [#def14]
bind-9.18.30-build/bind-9.18.30/bin/named/os.c:336:31: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘1’
#  334|   		if (devnullfd != STDOUT_FILENO) {
#  335|   			(void)close(STDOUT_FILENO);
#  336|-> 			(void)dup2(devnullfd, STDOUT_FILENO);
#  337|   		}
#  338|   		if (devnullfd != STDERR_FILENO && !named_g_keepstderr) {

Error: GCC_ANALYZER_WARNING: [#def15]
bind-9.18.30-build/bind-9.18.30/bin/named/os.c:340:31: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘2’
#  338|   		if (devnullfd != STDERR_FILENO && !named_g_keepstderr) {
#  339|   			(void)close(STDERR_FILENO);
#  340|-> 			(void)dup2(devnullfd, STDERR_FILENO);
#  341|   		}
#  342|   	}

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
bind-9.18.30-build/bind-9.18.30/bin/tests/system/dlzexternal/driver/driver.c: scope_hint: In function 'dlz_create'
bind-9.18.30-build/bind-9.18.30/bin/tests/system/dlzexternal/driver/driver.c:325:9: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
bind-9.18.30-build/bind-9.18.30/bin/tests/system/dlzexternal/driver/driver.c: scope_hint: In function 'dlz_create'
#  323|   
#  324|   failure:
#  325|-> 	free(state);
#  326|   	return (result);
#  327|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def17]
bind-9.18.30-build/bind-9.18.30/bin/tests/system/hooks/driver/test-async.c: scope_hint: In function 'async_query_done_begin'
bind-9.18.30-build/bind-9.18.30/bin/tests/system/hooks/driver/test-async.c:319:18: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/atomic.h:22: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/types.h:16: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:19: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/buffer.h:111: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/bin/tests/system/hooks/driver/test-async.c:22: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:142:17: note: in expansion of macro 'RUNTIME_CHECK'
bind-9.18.30-build/bind-9.18.30/bin/tests/system/hooks/driver/test-async.c:206:9: note: in expansion of macro 'LOCK'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:148:17: note: in expansion of macro 'RUNTIME_CHECK'
bind-9.18.30-build/bind-9.18.30/bin/tests/system/hooks/driver/test-async.c:209:9: note: in expansion of macro 'UNLOCK'
#  317|   
#  318|   	logmsg("done begin hook");
#  319|-> 	if (state->async) {
#  320|   		/* resuming */
#  321|   		state->async = false;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def18]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/filesystem/dlz_filesystem_dynamic.c: scope_hint: In function ‘dlz_create’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/filesystem/dlz_filesystem_dynamic.c:865:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  863|   	/* we require 5 command line args. */
#  864|   	if (argc != 6) {
#  865|-> 		cd->log(ISC_LOG_ERROR, "Filesystem driver requires "
#  866|   				       "6 command line args.");
#  867|   		result = ISC_R_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def19]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/filesystem/dlz_filesystem_dynamic.c:872:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  870|   
#  871|   	if (strlen(argv[5]) > 1) {
#  872|-> 		cd->log(ISC_LOG_ERROR, "Filesystem driver can only "
#  873|   				       "accept a single character for "
#  874|   				       "separator.");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/filesystem/dlz_filesystem_dynamic.c:882:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  880|   	len = strlen(argv[1]);
#  881|   	if (argv[1][len - 1] != '\\' && argv[1][len - 1] != '/') {
#  882|-> 		cd->log(ISC_LOG_ERROR,
#  883|   			"Base dir parameter for filesystem driver "
#  884|   			"should end with %s",

Error: GCC_ANALYZER_WARNING (CWE-476): [#def21]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/filesystem/dlz_filesystem_dynamic.c:923:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  921|   	cd->splitcnt = strtol(argv[4], &endp, 10);
#  922|   	if (*endp != '\0' || cd->splitcnt < 0) {
#  923|-> 		cd->log(ISC_LOG_ERROR, "Directory split count must be zero (0) "
#  924|   				       "or a positive number");
#  925|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def22]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c: scope_hint: In function ‘dlz_ldap_checkURL’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:119:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  117|   
#  118|   	if (!ldap_is_ldap_url(URL)) {
#  119|-> 		db->log(ISC_LOG_ERROR, "%s query is not a valid LDAP URL", msg);
#  120|   		result = ISC_R_FAILURE;
#  121|   		goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def23]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:126:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  124|   	ldap_result = ldap_url_parse(URL, &ldap_url);
#  125|   	if (ldap_result != LDAP_SUCCESS || ldap_url == NULL) {
#  126|-> 		db->log(ISC_LOG_ERROR, "parsing %s query failed", msg);
#  127|   		result = ISC_R_FAILURE;
#  128|   		goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def24]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:132:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  130|   
#  131|   	if (ldap_count_values(ldap_url->lud_attrs) < attrCnt) {
#  132|-> 		db->log(ISC_LOG_ERROR,
#  133|   			"%s query must specify at least "
#  134|   			"%d attributes to return",

Error: GCC_ANALYZER_WARNING (CWE-476): [#def25]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:141:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  139|   
#  140|   	if (ldap_url->lud_host != NULL) {
#  141|-> 		db->log(ISC_LOG_ERROR, "%s query must not specify a host", msg);
#  142|   		result = ISC_R_FAILURE;
#  143|   		goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def26]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:147:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  145|   
#  146|   	if (ldap_url->lud_port != 389) {
#  147|-> 		db->log(ISC_LOG_ERROR, "%s query must not specify a port", msg);
#  148|   		result = ISC_R_FAILURE;
#  149|   		goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def27]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:153:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  151|   
#  152|   	if (ldap_url->lud_dn == NULL || strlen(ldap_url->lud_dn) < 1) {
#  153|-> 		db->log(ISC_LOG_ERROR, "%s query must specify a search base",
#  154|   			msg);
#  155|   		result = ISC_R_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def28]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:160:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  158|   
#  159|   	if (ldap_url->lud_exts != NULL || ldap_url->lud_crit_exts != 0) {
#  160|-> 		db->log(ISC_LOG_ERROR,
#  161|   			"%s uses extensions. "
#  162|   			"The driver does not support LDAP extensions.",

Error: GCC_ANALYZER_WARNING (CWE-476): [#def29]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c: scope_hint: In function ‘dlz_create’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:915:9: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  913|   
#  914|   	/* if debugging, let user know we are multithreaded. */
#  915|-> 	ldap->log(ISC_LOG_DEBUG(1), "LDAP driver running multithreaded");
#  916|   
#  917|   	if (argc < 9) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def30]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:918:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  916|   
#  917|   	if (argc < 9) {
#  918|-> 		ldap->log(ISC_LOG_ERROR, "LDAP driver requires at least "
#  919|   					 "8 command line args.");
#  920|   		goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def31]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:925:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  923|   	/* no more than 13 arg's should be passed to the driver */
#  924|   	if (argc > 12) {
#  925|-> 		ldap->log(ISC_LOG_ERROR, "LDAP driver cannot accept more than "
#  926|   					 "11 command line args.");
#  927|   		goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def32]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:936:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  934|   		protocol = 3;
#  935|   	} else {
#  936|-> 		ldap->log(ISC_LOG_ERROR,
#  937|   			  "LDAP driver protocol must be either %s or %s", V2,
#  938|   			  V3);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def33]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:950:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  948|   		method = LDAP_AUTH_KRBV42;
#  949|   	} else {
#  950|-> 		ldap->log(ISC_LOG_ERROR,
#  951|   			  "LDAP driver authentication method must be "
#  952|   			  "one of %s, %s or %s",

Error: GCC_ANALYZER_WARNING (CWE-476): [#def34]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:960:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  958|   	dbcount = strtol(argv[1], &endp, 10);
#  959|   	if (*endp != '\0' || dbcount < 0) {
#  960|-> 		ldap->log(ISC_LOG_ERROR, "LDAP driver database connection "
#  961|   					 "count "
#  962|   					 "must be positive.");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def35]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:1067:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/include/dlz_dbi.h:25: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:41: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:1032:9: note: in expansion of macro ‘DLZ_LIST_INIT’
# 1065|   
# 1066|   		if (result == ISC_R_SUCCESS) {
# 1067|-> 			ldap->log(ISC_LOG_DEBUG(2), "LDAP driver created "
# 1068|   						    "database instance "
# 1069|   						    "object.");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def36]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:1071:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/ldap/dlz_ldap_dynamic.c:1032:9: note: in expansion of macro ‘DLZ_LIST_INIT’
# 1069|   						    "object.");
# 1070|   		} else { /* unsuccessful?, log err msg and cleanup. */
# 1071|-> 			ldap->log(ISC_LOG_ERROR, "LDAP driver could not create "
# 1072|   						 "database instance object.");
# 1073|   			goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def37]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c: scope_hint: In function ‘dlz_create’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:799:24: warning[-Wanalyzer-malloc-leak]: leak of ‘mysql’
#  797|   	mysql = calloc(1, sizeof(mysql_instance_t));
#  798|   	if (mysql == NULL) {
#  799|-> 		return (ISC_R_NOMEMORY);
#  800|   	}
#  801|   	memset(mysql, 0, sizeof(mysql_instance_t));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def38]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:811:9: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  809|   
#  810|   	/* if debugging, let user know we are multithreaded. */
#  811|-> 	mysql->log(ISC_LOG_DEBUG(1), "MySQL module running multithreaded");
#  812|   
#  813|   	/* verify we have at least 4 arg's passed to the module */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def39]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:815:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  813|   	/* verify we have at least 4 arg's passed to the module */
#  814|   	if (argc < 4) {
#  815|-> 		mysql->log(ISC_LOG_ERROR, "MySQL module requires "
#  816|   					  "at least 4 command line args.");
#  817|   		return (ISC_R_FAILURE);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def40]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:822:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  820|   	/* no more than 8 arg's should be passed to the module */
#  821|   	if (argc > 8) {
#  822|-> 		mysql->log(ISC_LOG_ERROR, "MySQL module cannot accept "
#  823|   					  "more than 7 command line args.");
#  824|   		return (ISC_R_FAILURE);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def41]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:830:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  828|   	mysql->dbname = get_parameter_value(argv[1], "dbname=");
#  829|   	if (mysql->dbname == NULL) {
#  830|-> 		mysql->log(ISC_LOG_ERROR, "MySQL module requires a dbname "
#  831|   					  "parameter.");
#  832|   		result = ISC_R_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def42]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:843:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  841|   		mysql->port = strtol(tmp, &endp, 10);
#  842|   		if (*endp != '\0' || mysql->port < 0) {
#  843|-> 			mysql->log(ISC_LOG_ERROR, "Mysql module: port "
#  844|   						  "must be a positive number.");
#  845|   			free(tmp);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def43]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:890:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  888|   		dbcount = strtol(tmp, &endp, 10);
#  889|   		if (*endp != '\0' || dbcount < 1) {
#  890|-> 			mysql->log(ISC_LOG_ERROR, "MySQL database connection "
#  891|   						  "count "
#  892|   						  "must be positive.");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def44]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:946:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/include/dlz_dbi.h:25: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:42: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysql/dlz_mysql_dynamic.c:908:9: note: in expansion of macro ‘DLZ_LIST_INIT’
#  944|   
#  945|   		if (result != ISC_R_SUCCESS) {
#  946|-> 			mysql->log(ISC_LOG_ERROR, "MySQL module could not "
#  947|   						  "create "
#  948|   						  "database instance object.");

Error: GCC_ANALYZER_WARNING (CWE-685): [#def45]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c: scope_hint: In function ‘build_query’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:417:31: warning[-Wanalyzer-va-list-exhausted]: ‘ap1’ has no more arguments (1 consumed)
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:55: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:347:9: note: in expansion of macro ‘DLZ_LINK_INIT’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:350:9: note: in expansion of macro ‘DLZ_LIST_APPEND’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:350:9: note: in expansion of macro ‘DLZ_LIST_APPEND’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:347:9: note: in expansion of macro ‘DLZ_LINK_INIT’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:350:9: note: in expansion of macro ‘DLZ_LIST_APPEND’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:350:9: note: in expansion of macro ‘DLZ_LIST_APPEND’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:347:9: note: in expansion of macro ‘DLZ_LINK_INIT’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:350:9: note: in expansion of macro ‘DLZ_LIST_APPEND’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:350:9: note: in expansion of macro ‘DLZ_LIST_APPEND’
#  415|   			}
#  416|   
#  417|-> 			tmp = sanitize(dbi, va_arg(ap1, const char *));
#  418|   			if (tmp == NULL) {
#  419|   				goto fail;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def46]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:464:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘arglist.head’
#  462|   	va_end(ap1);
#  463|   
#  464|-> 	while ((item = DLZ_LIST_HEAD(arglist)) != NULL) {
#  465|   		DLZ_LIST_UNLINK(arglist, item, link);
#  466|   		if (item->arg != NULL) {

Error: COMPILER_WARNING (CWE-457): [#def47]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c: scope_hint: In function ‘build_query’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:464:48: warning[-Wmaybe-uninitialized]: ‘arglist.head’ may be used uninitialized
#  464 |         while ((item = DLZ_LIST_HEAD(arglist)) != NULL) {
#      |                                                ^
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c:371:25: note: ‘arglist.head’ was declared here
#  371 |         mysql_arglist_t arglist;
#      |                         ^~~~~~~
#  462|   	va_end(ap1);
#  463|   
#  464|-> 	while ((item = DLZ_LIST_HEAD(arglist)) != NULL) {
#  465|   		DLZ_LIST_UNLINK(arglist, item, link);
#  466|   		if (item->arg != NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def48]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c: scope_hint: In function ‘dlz_create’
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:870:24: warning[-Wanalyzer-malloc-leak]: leak of ‘s3’
#  868|   	s3 = calloc(1, sizeof(sqlite3_instance_t));
#  869|   	if (s3 == NULL) {
#  870|-> 		return (ISC_R_NOMEMORY);
#  871|   	}
#  872|   	memset(s3, 0, sizeof(sqlite3_instance_t));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def49]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:882:9: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  880|   
#  881|   	/* if debugging, let user know we are multithreaded. */
#  882|-> 	s3->log(ISC_LOG_DEBUG(1), "SQLite3 module: running multithreaded");
#  883|   
#  884|   	/* verify we have at least 4 arg's passed to the module */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def50]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:886:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  884|   	/* verify we have at least 4 arg's passed to the module */
#  885|   	if (argc < 4) {
#  886|-> 		s3->log(ISC_LOG_ERROR, "SQLite3 module requires "
#  887|   				       "at least 4 command line args.");
#  888|   		return (ISC_R_FAILURE);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def51]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:893:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  891|   	/* no more than 8 arg's should be passed to the module */
#  892|   	if (argc > 8) {
#  893|-> 		s3->log(ISC_LOG_ERROR, "SQLite3 module cannot accept "
#  894|   				       "more than 8 command line args.");
#  895|   		return (ISC_R_FAILURE);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def52]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:901:17: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  899|   	s3->dbname = get_parameter_value(argv[1], "dbname=");
#  900|   	if (s3->dbname == NULL) {
#  901|-> 		s3->log(ISC_LOG_ERROR, "SQLite3 module requires a dbname "
#  902|   				       "parameter.");
#  903|   		result = ISC_R_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def53]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:914:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
#  912|   		dbcount = strtol(tmp, &endp, 10);
#  913|   		if (*endp != '\0' || dbcount < 1) {
#  914|-> 			s3->log(ISC_LOG_ERROR, "SQLite3 module: database "
#  915|   					       "connection count "
#  916|   					       "must be positive.");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def54]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:968:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/include/dlz_dbi.h:25: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:41: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:932:9: note: in expansion of macro ‘DLZ_LIST_INIT’
#  966|   
#  967|   		if (result != ISC_R_SUCCESS) {
#  968|-> 			s3->log(ISC_LOG_ERROR, "SQLite3 module: could not "
#  969|   					       "create "
#  970|   					       "database instance object.");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def55]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:978:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:932:9: note: in expansion of macro ‘DLZ_LIST_INIT’
#  976|   		ret = sqlite3_initialize();
#  977|   		if (ret != SQLITE_OK) {
#  978|-> 			s3->log(ISC_LOG_ERROR, "SQLite3 module: could not "
#  979|   					       "initialize database object.");
#  980|   			result = ISC_R_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def56]
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:986:25: warning[-Wanalyzer-jump-through-null]: jump through null pointer
bind-9.18.30-build/bind-9.18.30/build/contrib/dlz/modules/sqlite3/dlz_sqlite3_dynamic.c:932:9: note: in expansion of macro ‘DLZ_LIST_INIT’
#  984|   		ret = sqlite3_open(s3->dbname, &dbc);
#  985|   		if (ret != SQLITE_OK) {
#  986|-> 			s3->log(ISC_LOG_ERROR,
#  987|   				"SQLite3 module: could not "
#  988|   				"open '%s'.",

Error: CPPCHECK_WARNING (CWE-758): [#def57]
bind-9.18.30-build/bind-9.18.30/lib/dns/adb.c:386: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  384|    */
#  385|   enum {
#  386|-> 	FIND_EVENT_SENT = 1 << 31,
#  387|   	FIND_EVENT_FREED = 1 << 30,
#  388|   };

Error: CPPCHECK_WARNING (CWE-758): [#def58]
bind-9.18.30-build/bind-9.18.30/lib/dns/adb.c:396: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  394|    */
#  395|   enum {
#  396|-> 	NAME_IS_DEAD = 1 << 31,
#  397|   	NAME_NEEDS_POKE = 1 << 30,
#  398|   };

Error: CPPCHECK_WARNING (CWE-758): [#def59]
bind-9.18.30-build/bind-9.18.30/lib/dns/adb.c:414: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  412|    */
#  413|   enum {
#  414|-> 	ENTRY_IS_DEAD = 1 << 31,
#  415|   };
#  416|   

Error: CPPCHECK_WARNING (CWE-457): [#def60]
bind-9.18.30-build/bind-9.18.30/lib/dns/adb.c:954: error[uninitvar]: Uninitialized variable: &in6a
#  952|   			INSIST(rdata.length == 16);
#  953|   			memmove(in6a.s6_addr, rdata.data, 16);
#  954|-> 			isc_sockaddr_fromin6(&sockaddr, &in6a, 0);
#  955|   			hookhead = &adbname->v6;
#  956|   		}

Error: CPPCHECK_WARNING (CWE-457): [#def61]
bind-9.18.30-build/bind-9.18.30/lib/dns/dns64.c:465: error[uninitvar]: Uninitialized variable: &ina6
#  463|   			memset(ina6.s6_addr, 0, sizeof(ina6.s6_addr));
#  464|   			memmove(ina6.s6_addr, rd1.data, oplen / 8);
#  465|-> 			isc_netaddr_fromin6(&prefix[count].addr, &ina6);
#  466|   			prefix[count].prefixlen = oplen;
#  467|   			count++;

Error: CPPCHECK_WARNING (CWE-758): [#def62]
bind-9.18.30-build/bind-9.18.30/lib/dns/hmac_link.c:386: error[missingReturn]: Found an exit path from function with non-void return type that has missing return statement
#  384|   		return (TAG_HMACSHA512_KEY);
#  385|   	} else {
#  386|-> 		UNREACHABLE();
#  387|   	}
#  388|   }

Error: CPPCHECK_WARNING (CWE-758): [#def63]
bind-9.18.30-build/bind-9.18.30/lib/dns/hmac_link.c:405: error[missingReturn]: Found an exit path from function with non-void return type that has missing return statement
#  403|   		return (TAG_HMACSHA512_BITS);
#  404|   	} else {
#  405|-> 		UNREACHABLE();
#  406|   	}
#  407|   }

Error: CPPCHECK_WARNING (CWE-758): [#def64]
bind-9.18.30-build/bind-9.18.30/lib/dns/hmac_link.c:457: error[missingReturn]: Found an exit path from function with non-void return type that has missing return statement
#  455|   		return (DST_ALG_HMACSHA512);
#  456|   	} else {
#  457|-> 		UNREACHABLE();
#  458|   	}
#  459|   }

Error: CPPCHECK_WARNING (CWE-457): [#def65]
bind-9.18.30-build/bind-9.18.30/lib/dns/masterdump.c:1120: warning[uninitvar]: Uninitialized variables: sorted.magic, sorted.methods, sorted.link, sorted.rdclass, sorted.type, sorted.ttl, sorted.trust, sorted.covers, sorted.attributes, sorted.count, sorted.resign, sorted.private1, sorted.private2, sorted.private3, sorted.privateuint4, sorted.private5, sorted.private6, sorted.private7
# 1118|   	INSIST(n <= MAXSORT);
# 1119|   
# 1120|-> 	qsort(sorted, n, sizeof(sorted[0]), dump_order_compare);
# 1121|   
# 1122|   	for (i = 0; i < n; i++) {

Error: CPPCHECK_WARNING (CWE-476): [#def66]
bind-9.18.30-build/bind-9.18.30/lib/dns/rbtdb.c:3732: warning[nullPointer]: Possible null pointer dereference: firstp
# 3730|   
# 3731|   	for (;;) {
# 3732|-> 		if (*firstp) {
# 3733|   			/*
# 3734|   			 * Construct the name of the second node to check.

Error: CPPCHECK_WARNING (CWE-457): [#def67]
bind-9.18.30-build/bind-9.18.30/lib/dns/rdata.c:556: error[uninitvar]: Uninitialized variable: len
#  554|   	unsigned int i;
#  555|   
#  556|-> 	for (i = 0; i < sr->length; i += len) {
#  557|   		/*
#  558|   		 * Check for overflow.

Error: CPPCHECK_WARNING (CWE-457): [#def68]
bind-9.18.30-build/bind-9.18.30/lib/dns/resolver.c:7201: error[uninitvar]: Uninitialized variable: &in6a
# 7199|   			INSIST(rdata.length == sizeof(in6a.s6_addr));
# 7200|   			memmove(in6a.s6_addr, rdata.data, sizeof(in6a.s6_addr));
# 7201|-> 			isc_netaddr_fromin6(&netaddr, &in6a);
# 7202|   		}
# 7203|   

Error: CPPCHECK_WARNING (CWE-190): [#def69]
bind-9.18.30-build/bind-9.18.30/lib/dns/resolver.c:10473: error[integerOverflow]: Signed integer overflow for expression '-2-1'.
#10471|   		 */
#10472|   		result = isc_task_create_bound(
#10473|-> 			taskmgr, 0, &res->buckets[i].task, ISC_NM_TASK_SLOW(i));
#10474|   		if (result != ISC_R_SUCCESS) {
#10475|   			ntasks = i;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def70]
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c: scope_hint: In function 'base32_decode_char'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:209:38: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*ctx.val[1]'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:393:17: note: in expansion of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/list.h:16: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:203: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/atomic.h:22: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/types.h:16: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/base32.h:29: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:18: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:57:18: note: in definition of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:301:22: note: in expansion of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/buffer.h:111: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:19: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
#  207|   			return (ISC_R_BADBASE32);
#  208|   		case 2:
#  209|-> 			if ((ctx->val[1] & 0x03) != 0) {
#  210|   				return (ISC_R_BADBASE32);
#  211|   			}

Error: GCC_ANALYZER_WARNING (CWE-457): [#def71]
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:217:38: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*ctx.val[3]'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:393:17: note: in expansion of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:57:18: note: in definition of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:301:22: note: in expansion of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
#  215|   			return (ISC_R_BADBASE32);
#  216|   		case 4:
#  217|-> 			if ((ctx->val[3] & 0x0f) != 0) {
#  218|   				return (ISC_R_BADBASE32);
#  219|   			}

Error: GCC_ANALYZER_WARNING (CWE-457): [#def72]
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:223:38: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*ctx.val[4]'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:393:17: note: in expansion of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:57:18: note: in definition of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:301:22: note: in expansion of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
#  221|   			break;
#  222|   		case 5:
#  223|-> 			if ((ctx->val[4] & 0x01) != 0) {
#  224|   				return (ISC_R_BADBASE32);
#  225|   			}

Error: GCC_ANALYZER_WARNING (CWE-457): [#def73]
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:231:38: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*ctx.val[6]'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:393:17: note: in expansion of macro 'RETERR'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:57:18: note: in definition of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:301:22: note: in expansion of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/region.h:54:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:394:17: note: in expansion of macro 'isc_region_consume'
bind-9.18.30-build/bind-9.18.30/lib/isc/base32.c:27:36: note: in definition of macro 'RETERR'
#  229|   			return (ISC_R_BADBASE32);
#  230|   		case 7:
#  231|-> 			if ((ctx->val[6] & 0x07) != 0) {
#  232|   				return (ISC_R_BADBASE32);
#  233|   			}

Error: CPPCHECK_WARNING (CWE-457): [#def74]
bind-9.18.30-build/bind-9.18.30/lib/isc/hash.c:121: warning[uninitvar]: Uninitialized variable: input
#  119|   			input[i] = maptolower[((const uint8_t *)data)[i]];
#  120|   		}
#  121|-> 		isc_siphash24(isc_hash_key, input, length, (uint8_t *)&hval);
#  122|   	}
#  123|   

Error: CPPCHECK_WARNING (CWE-457): [#def75]
bind-9.18.30-build/bind-9.18.30/lib/isc/hash.c:144: warning[uninitvar]: Uninitialized variable: input
#  142|   			input[i] = maptolower[((const uint8_t *)data)[i]];
#  143|   		}
#  144|-> 		isc_halfsiphash24(isc_hash_key, input, length,
#  145|   				  (uint8_t *)&hval);
#  146|   	}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def76]
bind-9.18.30-build/bind-9.18.30/lib/isc/netmgr/udp.c: scope_hint: In function 'start_udp_child'
bind-9.18.30-build/bind-9.18.30/lib/isc/netmgr/udp.c:133:27: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dup(fd)'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/list.h:16: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:203: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/atomic.h:22: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/netmgr/udp.c:17: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:301:22: note: in expansion of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/netmgr/udp.c:132:17: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:301:22: note: in expansion of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isc/netmgr/udp.c:132:17: note: in expansion of macro 'INSIST'
#  131|   	} else {
#  132|   		INSIST(fd >= 0);
#  133|-> 		csock->fd = dup(fd);
#  134|   	}
#  135|   	INSIST(csock->fd >= 0);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def77]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c: scope_hint: In function 'isc_siphash24'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:125:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/list.h:16: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:203: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/atomic.h:22: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/types.h:16: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/siphash.h:19: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:19: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:92:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:96:23: note: in expansion of macro 'U8TO64_LE'
#  123|   	switch (left) {
#  124|   	case 7:
#  125|-> 		b |= ((uint64_t)in[6]) << 48;
#  126|   		FALLTHROUGH;
#  127|   	case 6:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def78]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:128:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:92:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:96:23: note: in expansion of macro 'U8TO64_LE'
#  126|   		FALLTHROUGH;
#  127|   	case 6:
#  128|-> 		b |= ((uint64_t)in[5]) << 40;
#  129|   		FALLTHROUGH;
#  130|   	case 5:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def79]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:131:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:92:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:96:23: note: in expansion of macro 'U8TO64_LE'
#  129|   		FALLTHROUGH;
#  130|   	case 5:
#  131|-> 		b |= ((uint64_t)in[4]) << 32;
#  132|   		FALLTHROUGH;
#  133|   	case 4:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def80]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:134:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:92:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:96:23: note: in expansion of macro 'U8TO64_LE'
#  132|   		FALLTHROUGH;
#  133|   	case 4:
#  134|-> 		b |= ((uint64_t)in[3]) << 24;
#  135|   		FALLTHROUGH;
#  136|   	case 3:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def81]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:137:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:92:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:96:23: note: in expansion of macro 'U8TO64_LE'
#  135|   		FALLTHROUGH;
#  136|   	case 3:
#  137|-> 		b |= ((uint64_t)in[2]) << 16;
#  138|   		FALLTHROUGH;
#  139|   	case 2:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def82]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:140:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:92:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:96:23: note: in expansion of macro 'U8TO64_LE'
#  138|   		FALLTHROUGH;
#  139|   	case 2:
#  140|-> 		b |= ((uint64_t)in[1]) << 8;
#  141|   		FALLTHROUGH;
#  142|   	case 1:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def83]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:143:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:92:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:93:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:94:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:96:23: note: in expansion of macro 'U8TO64_LE'
#  141|   		FALLTHROUGH;
#  142|   	case 1:
#  143|-> 		b |= ((uint64_t)in[0]);
#  144|   		FALLTHROUGH;
#  145|   	case 0:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def84]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c: scope_hint: In function 'isc_halfsiphash24'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:205:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:173:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:174:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:174:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:175:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:175:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:177:23: note: in expansion of macro 'U8TO32_LE'
#  203|   	switch (left) {
#  204|   	case 3:
#  205|-> 		b |= ((uint32_t)in[2]) << 16;
#  206|   		FALLTHROUGH;
#  207|   	case 2:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def85]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:208:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:173:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:174:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:174:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:175:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:175:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:177:23: note: in expansion of macro 'U8TO32_LE'
#  206|   		FALLTHROUGH;
#  207|   	case 2:
#  208|-> 		b |= ((uint32_t)in[1]) << 8;
#  209|   		FALLTHROUGH;
#  210|   	case 1:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def86]
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:211:35: warning[-Wanalyzer-null-dereference]: dereference of NULL 'in'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:173:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:174:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:174:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/assertions.h:45:18: note: in definition of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:175:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:175:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/siphash.c:177:23: note: in expansion of macro 'U8TO32_LE'
#  209|   		FALLTHROUGH;
#  210|   	case 1:
#  211|-> 		b |= ((uint32_t)in[0]);
#  212|   		FALLTHROUGH;
#  213|   	case 0:

Error: CPPCHECK_WARNING (CWE-401): [#def87]
bind-9.18.30-build/bind-9.18.30/lib/isccc/sexpr.c:83: error[memleak]: Memory leak: sexpr.value
#   81|   	}
#   82|   
#   83|-> 	return (sexpr);
#   84|   }
#   85|   

Error: CPPCHECK_WARNING (CWE-401): [#def88]
bind-9.18.30-build/bind-9.18.30/lib/isccc/sexpr.c:117: error[memleak]: Memory leak: sexpr.value
#  115|   	sexpr->value.as_region.rstart[region_size] = '\0';
#  116|   
#  117|-> 	return (sexpr);
#  118|   }
#  119|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def89]
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c: scope_hint: In function 'cfg_parse_netprefix'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:3121:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'netaddr.family'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/buffer.h:106: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:49: included_from: Included from here.
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:2968:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:84:27: note: in definition of macro 'CHECK'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:84:27: note: in definition of macro 'CHECK'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:3110:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:3111:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:3111:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:2933:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:2934:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:2934:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:84:27: note: in definition of macro 'CHECK'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:84:27: note: in definition of macro 'CHECK'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:297:22: note: in expansion of macro 'ISC_REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:3379:9: note: in expansion of macro 'REQUIRE'
bind-9.18.30-build/bind-9.18.30/lib/isc/include/isc/util.h:301:22: note: in expansion of macro 'ISC_INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:3397:25: note: in expansion of macro 'INSIST'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:84:27: note: in definition of macro 'CHECK'
bind-9.18.30-build/bind-9.18.30/lib/isccfg/parser.c:2936:9: note: in expansion of macro 'CHECK'
# 3119|   		CHECK(result);
# 3120|   	}
# 3121|-> 	switch (netaddr.family) {
# 3122|   	case AF_INET:
# 3123|   		addrlen = 32;

Error: CPPCHECK_WARNING (CWE-476): [#def90]
bind-9.18.30-build/bind-9.18.30/lib/ns/client.c:2394: warning[nullPointer]: Possible null pointer dereference: mgr
# 2392|   		REQUIRE(VALID_MANAGER(mgr));
# 2393|   		REQUIRE(client != NULL);
# 2394|-> 		REQUIRE(mgr->tid == isc_nm_tid());
# 2395|   
# 2396|   		*client = (ns_client_t){ .magic = 0, .tid = mgr->tid };

Error: CPPCHECK_WARNING (CWE-476): [#def91]
bind-9.18.30-build/bind-9.18.30/lib/ns/client.c:2396: warning[nullPointer]: Possible null pointer dereference: mgr
# 2394|   		REQUIRE(mgr->tid == isc_nm_tid());
# 2395|   
# 2396|-> 		*client = (ns_client_t){ .magic = 0, .tid = mgr->tid };
# 2397|   
# 2398|   		isc_mem_attach(mgr->mctx, &client->mctx);

Error: CPPCHECK_WARNING (CWE-476): [#def92]
bind-9.18.30-build/bind-9.18.30/lib/ns/client.c:2398: warning[nullPointer]: Possible null pointer dereference: mgr
# 2396|   		*client = (ns_client_t){ .magic = 0, .tid = mgr->tid };
# 2397|   
# 2398|-> 		isc_mem_attach(mgr->mctx, &client->mctx);
# 2399|   		clientmgr_attach(mgr, &client->manager);
# 2400|   		ns_server_attach(mgr->sctx, &client->sctx);

Error: CPPCHECK_WARNING (CWE-476): [#def93]
bind-9.18.30-build/bind-9.18.30/lib/ns/client.c:2400: warning[nullPointer]: Possible null pointer dereference: mgr
# 2398|   		isc_mem_attach(mgr->mctx, &client->mctx);
# 2399|   		clientmgr_attach(mgr, &client->manager);
# 2400|-> 		ns_server_attach(mgr->sctx, &client->sctx);
# 2401|   		isc_task_attach(mgr->task, &client->task);
# 2402|   

Error: CPPCHECK_WARNING (CWE-476): [#def94]
bind-9.18.30-build/bind-9.18.30/lib/ns/client.c:2401: warning[nullPointer]: Possible null pointer dereference: mgr
# 2399|   		clientmgr_attach(mgr, &client->manager);
# 2400|   		ns_server_attach(mgr->sctx, &client->sctx);
# 2401|-> 		isc_task_attach(mgr->task, &client->task);
# 2402|   
# 2403|   		dns_message_create(client->mctx, DNS_MESSAGE_INTENTPARSE,

Error: CPPCHECK_WARNING (CWE-476): [#def95]
bind-9.18.30-build/bind-9.18.30/lib/ns/listenlist.c:50: warning[nullPointer]: Possible null pointer dereference: tls_params
#   48|   		 * order to avoid excessive TLS contexts creation.
#   49|   		 */
#   50|-> 		result = isc_tlsctx_cache_find(tlsctx_cache, tls_params->name,
#   51|   					       transport, family, &sslctx,
#   52|   					       &found_store, NULL);

Error: CPPCHECK_WARNING (CWE-457): [#def96]
bind-9.18.30-build/bind-9.18.30/lib/ns/query.c:3751: error[uninitvar]: Uninitialized variable: &in6a
# 3749|   				INSIST(rdata.length == 16);
# 3750|   				memmove(in6a.s6_addr, rdata.data, 16);
# 3751|-> 				isc_netaddr_fromin6(&netaddr, &in6a);
# 3752|   				break;
# 3753|   			default:

Error: CPPCHECK_WARNING (CWE-457): [#def97]
bind-9.18.30-build/bind-9.18.30/lib/ns/query.c:4577: error[uninitvar]: Uninitialized variable: &in6a
# 4575|   		INSIST(rdata->length == 16);
# 4576|   		memmove(in6a.s6_addr, rdata->data, 16);
# 4577|-> 		isc_netaddr_fromin6(netaddr, &in6a);
# 4578|   		return (ISC_R_SUCCESS);
# 4579|   	default:

Scan Properties

analyzer-version-clippy1.82.0
analyzer-version-cppcheck2.16.0
analyzer-version-gcc14.2.1
analyzer-version-gcc-analyzer15.0.0
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-80.us-west-2.compute.internal
mock-configfedora-rawhide-gcc-latest-x86_64
project-namebind-9.18.30-2.fc42
store-results-to/tmp/tmpvx7bmqr0/bind-9.18.30-2.fc42.tar.xz
time-created2024-11-12 23:22:51
time-finished2024-11-12 23:34:07
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmpvx7bmqr0/bind-9.18.30-2.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpvx7bmqr0/bind-9.18.30-2.fc42.src.rpm'
tool-versioncsmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9