opendnssec-2.1.14-0.3rc1.fc42

List of Findings

Error: SHELLCHECK_WARNING (CWE-156): [#def1]
/usr/bin/ods-kasp2html:31:17: warning[SC2046]: Quote this to prevent word splitting.
#   29|   
#   30|   if [ ! -x "$XMLLINT" ]; then
#   31|-> 	XMLLINT=$(find $(echo "$PATH" | tr : ' ') -maxdepth 1 -name xmllint -print -quit)
#   32|   	if [ ! -x "$XMLLINT" ]; then
#   33|   		echo "error: xmllint required, but not found"

Error: SHELLCHECK_WARNING (CWE-156): [#def2]
/usr/bin/ods-kasp2html:39:18: warning[SC2046]: Quote this to prevent word splitting.
#   37|   
#   38|   if [ ! -x "$XSLTPROC" ]; then
#   39|-> 	XSLTPROC=$(find $(echo "$PATH" | tr : ' ') -maxdepth 1 -name xsltproc -print -quit)
#   40|   	if [ ! -x "$XSLTPROC" ]; then
#   41|   		echo "error: xsltproc required, but not found"

Error: SHELLCHECK_WARNING (CWE-88): [#def3]
/usr/sbin/ods-control:39:24: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   37|   'hsm')
#   38|   	shift
#   39|-> 	"$bindir/ods-hsmutil" $@
#   40|   	;;
#   41|   

Error: SHELLCHECK_WARNING (CWE-149): [#def4]
/usr/share/opendnssec/migration/1.4-2.0_db_convert/convert_mysql:24:17: warning[SC2027]: The surrounding quotes actually unquote this. Remove or escape them.
#   22|   	p) DB_PWD=$OPTARG ;;
#   23|   	*)
#   24|-> 		echo "usage: "$0" -i DATABASE_1.4 -o DATABASE_2.0 [-h HOST] [-u USER] [-p PASSWORD]"
#   25|   		exit 1
#   26|   	;;

Error: SHELLCHECK_WARNING (CWE-149): [#def5]
/usr/share/opendnssec/migration/1.4-2.0_db_convert/convert_sqlite:16:17: warning[SC2027]: The surrounding quotes actually unquote this. Remove or escape them.
#   14|   	o) DB_OUT=$OPTARG ;;
#   15|   	*)
#   16|-> 		echo "usage: "$0" -i <DATABASE_1.4> -o <DATABASE_2.0>"
#   17|   		exit 1
#   18|   	;;

Error: SHELLCHECK_WARNING (CWE-149): [#def6]
/usr/share/opendnssec/migration/convert_mysql_to_sqlite:24:17: warning[SC2027]: The surrounding quotes actually unquote this. Remove or escape them.
#   22|   	p) DB_PWD=$OPTARG ;;
#   23|   	*)
#   24|-> 		echo "usage: "$0" -i DATABASE_MYSQL -o DATABASE_SQLITE [-h HOST] [-u USER] [-p PASSWORD]"
#   25|   		exit 1
#   26|   	;;

Error: SHELLCHECK_WARNING (CWE-149): [#def7]
/usr/share/opendnssec/migration/convert_sqlite_to_mysql:24:17: warning[SC2027]: The surrounding quotes actually unquote this. Remove or escape them.
#   22|   	p) DB_PWD=$OPTARG ;;
#   23|   	*)
#   24|-> 		echo "usage: "$0" -i DATABASE_SQLITE -o DATABASE_MYSQL [-h HOST] [-u USER] [-p PASSWORD]"
#   25|   		exit 1
#   26|   	;;

Error: COMPILER_WARNING (CWE-563): [#def8]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c: scope_hint: In function ‘findcommand’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:67:104: warning[-Wunused-parameter]: unused parameter ‘user’
#   67 | findcommand(const char *arg, int argc, char* argv[], int argi, struct cmd_func_block** commands, void* user)
#      |                                                                                                  ~~~~~~^~~~
#   65|   
#   66|   static struct cmd_func_block*
#   67|-> findcommand(const char *arg, int argc, char* argv[], int argi, struct cmd_func_block** commands, void* user)
#   68|   {
#   69|       const char* cmdname;

Error: COMPILER_WARNING (CWE-252): [#def9]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c: scope_hint: In function ‘cmdhandler_perform_command’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:173:13: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  173 |             asprintf(&statusstr, "unknown generic arguments");
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  171|       if(!help && !version) {
#  172|           if (argi >= argc) {
#  173|->             asprintf(&statusstr, "unknown generic arguments");
#  174|           }
#  175|           if(!strcmp(argv[argi], "help")) {

Error: COMPILER_WARNING (CWE-252): [#def10]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:202:17: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  202 |                 asprintf(&statusstr, "memory error");
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  200|               char *buf;
#  201|               if (!(buf = strdup(arg))) {
#  202|->                 asprintf(&statusstr, "memory error");
#  203|                   return 1;
#  204|               }

Error: COMPILER_WARNING (CWE-252): [#def11]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:209:21: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  209 |                     asprintf(&statusstr, "Error parsing arguments %s command line %s", command->name, arg);
#      |                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  207|                   /* Syntax error, print usage for cmd */
#  208|                   if(!statusstr)
#  209|->                     asprintf(&statusstr, "Error parsing arguments %s command line %s", command->name, arg);
#  210|               }
#  211|               free(buf);

Error: COMPILER_WARNING (CWE-252): [#def12]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:232:25: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  232 |                         asprintf(&statusstr, "no help for command  %s.", arg);
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  230|                       } else {
#  231|                           status = 1;
#  232|->                         asprintf(&statusstr, "no help for command  %s.", arg);
#  233|                       }
#  234|                   } else {

Error: COMPILER_WARNING (CWE-252): [#def13]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:246:13: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  246 |             asprintf(&statusstr, "Unknown command %s.", arg);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  244|           } else {
#  245|               status = 1;
#  246|->             asprintf(&statusstr, "Unknown command %s.", arg);
#  247|               for(int i=0; commands[i]; i++) {
#  248|                   if(commands[i]->usage)

Error: COMPILER_WARNING (CWE-563): [#def14]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c: scope_hint: In function ‘cmdhandler_accept_client’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:386:9: warning[-Wunused-variable]: unused variable ‘err’
#  386 |     int err;
#      |         ^~~
#  384|   cmdhandler_accept_client(void* arg)
#  385|   {
#  386|->     int err;
#  387|       cmdhandler_ctx_type* context = (cmdhandler_ctx_type*) arg;
#  388|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def15]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c: scope_hint: In function ‘cmdhandler_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:471:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmdh’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:54: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:470:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:470:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:470:5: note: in expansion of macro ‘CHECKALLOC’
#  469|       }
#  470|       CHECKALLOC(cmdh = (cmdhandler_type*) malloc(sizeof(cmdhandler_type)));
#  471|->     cmdh->listen_fd = listenfd;
#  472|       cmdh->listen_addr = servaddr;
#  473|       cmdh->need_to_exit = 0;

Error: COMPILER_WARNING (CWE-563): [#def16]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c: scope_hint: In function ‘cmdhandler_start’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:509:13: warning[-Wunused-variable]: unused variable ‘i’
#  509 |     ssize_t i;
#      |             ^
#  507|       fd_set rset;
#  508|       int flags, connfd = 0, ret = 0;
#  509|->     ssize_t i;
#  510|   
#  511|       ods_log_assert(cmdhandler);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def17]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c: scope_hint: In function ‘cmdhandler_start’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:558:35: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cmdclient’
/usr/include/sys/select.h:30: included_from: Included from here.
/usr/include/sys/types.h:179: included_from: Included from here.
/usr/include/stdlib.h:514: included_from: Included from here.
/usr/include/ldns/ldns.h:93: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:37: included_from: Included from here.
#  556|               /* client accepted, create new thread */
#  557|               cmdclient = malloc(sizeof(cmdhandler_ctx_type));
#  558|->             cmdclient->cmdhandler = cmdhandler;
#  559|               cmdclient->sockfd = connfd;
#  560|               cmdclient->globalcontext = cmdhandler->globalcontext;

Error: COMPILER_WARNING: [#def18]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c: scope_hint: In function ‘self_pipe_trick’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.c:596:35: warning[-Wformat-zero-length]: zero-length gnu_printf format string
#  596 |             client_printf(sockfd, "");
#      |                                   ^~
#  594|           } else {
#  595|               /* self-pipe trick */
#  596|->             client_printf(sockfd, "");
#  597|               close(sockfd);
#  598|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def19]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c: scope_hint: In function ‘duration_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:55:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘duration’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:32: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:54:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:54:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:54:5: note: in expansion of macro ‘CHECKALLOC’
#   53|   
#   54|       CHECKALLOC(duration = (duration_type*) malloc(sizeof(duration_type)));
#   55|->     duration->years = 0;
#   56|       duration->months = 0;
#   57|       duration->weeks = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c: scope_hint: In function ‘duration2string’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:261:12: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘str’
#  259|   
#  260|       str = (char*) calloc(count, sizeof(char));
#  261|->     str[0] = 'P';
#  262|       str[1] = '\0';
#  263|   

Error: COMPILER_WARNING: [#def21]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c: scope_hint: In function ‘duration2string’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:309:15: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#  307|       }
#  308|       if (T) {
#  309|->         str = strncat(str, "T", 1);
#  310|       }
#  311|       if (duration->hours > 0) {

Error: COMPILER_WARNING (CWE-134): [#def22]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c: scope_hint: In function ‘time_datestamp’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/duration.c:499:5: warning[-Wformat-nonliteral]: format not a string literal, format string not checked
#  499 |     if (strftime(outstr, sizeof(outstr), format, tmp) == 0) {
#      |     ^~
#  497|       }
#  498|   
#  499|->     if (strftime(outstr, sizeof(outstr), format, tmp) == 0) {
#  500|           ods_log_error("[%s] time_datestamp: strftime() failed", duration_str);
#  501|           return 0;

Error: COMPILER_WARNING: [#def23]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c: scope_hint: In function ‘ods_build_path’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:128:13: warning[-Wstringop-truncation]: ‘__strncpy_chk’ output truncated before terminating nul copying as many bytes from a string as its length
#  128 |             strncpy(openf, file, len_file);
#      |             ^
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:112:20: note: length computed here
#  112 |         len_file = strlen(file);
#      |                    ^~~~~~~~~~~~
#  126|               }
#  127|   
#  128|->             strncpy(openf, file, len_file);
#  129|               openf[len_file] = '\0';
#  130|               if (no_slash) {

Error: COMPILER_WARNING: [#def24]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c: scope_hint: In function ‘ods_build_path’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:149:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#  147|               }
#  148|               if (dir) {
#  149|->                 strncat(openf, "/", 1);
#  150|               }
#  151|               openf[len_total] = '\0';

Error: COMPILER_WARNING: [#def25]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c: scope_hint: In function ‘ods_replace’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:394:9: warning[-Wstringop-truncation]: ‘__strncpy_chk’ output truncated before terminating nul copying as many bytes from a string as its length
#  394 |         strncpy(buffer, newstr, part2_len);
#      |         ^
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:378:17: note: length computed here
#  378 |     part2_len = strlen(newstr);
#      |                 ^~~~~~~~~~~~~~
#  392|           }
#  393|       } else {
#  394|->         strncpy(buffer, newstr, part2_len);
#  395|           buffer[part2_len] = '\0';
#  396|       }

Error: COMPILER_WARNING: [#def26]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c: scope_hint: In function ‘ods_str_list_add’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:549:40: warning[-Wcalloc-transposed-args]: ‘calloc’ sizes specified with ‘sizeof’ in the earlier argument and not in the later argument
#  549 |         *list = (char**) calloc(sizeof(char*), count+2);
#      |                                        ^~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:549:40: note: earlier argument should specify number of elements, later size of each element
#  547|           old = *list;
#  548|   
#  549|->         *list = (char**) calloc(sizeof(char*), count+2);
#  550|           if (!*list) {
#  551|               ods_fatal_exit("[%s] fatal ods_str_list_add(): calloc() failed",

Error: COMPILER_WARNING: [#def27]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:562:31: warning[-Wcalloc-transposed-args]: ‘calloc’ sizes specified with ‘sizeof’ in the earlier argument and not in the later argument
#  562 |         *list = calloc(sizeof(char*), 2);
#      |                               ^~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.c:562:31: note: earlier argument should specify number of elements, later size of each element
#  560|       } else {
#  561|           /** List is NULL, allocate new */
#  562|->         *list = calloc(sizeof(char*), 2);
#  563|           if (!*list) {
#  564|               ods_fatal_exit("[%s] fatal ods_str_list_add(): calloc() failed",

Error: GCC_ANALYZER_WARNING (CWE-476): [#def28]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: In function ‘janitor_threadclass_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:84:26: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*threadclass’
#   82|   {
#   83|       *threadclass = malloc(sizeof(struct janitor_threadclass_struct));
#   84|->     (*threadclass)->name = strdup(name);
#   85|       (*threadclass)->detached = 0;
#   86|       (*threadclass)->autorun = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def29]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: In function ‘janitor_thread_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:331:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘info’
#  329|       struct janitor_thread_struct* info;
#  330|       info = malloc(sizeof (struct janitor_thread_struct));
#  331|->     info->runfunc = func;
#  332|       info->rundata = data;
#  333|       info->blocksignals = 0;

Error: COMPILER_WARNING (CWE-563): [#def30]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: In function ‘outputbacktrace’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:490:34: warning[-Wunused-parameter]: unused parameter ‘workaround’
#  490 | outputbacktrace(int skips, void *workaround)
#      |                            ~~~~~~^~~~~~~~~~
#  488|   
#  489|   static void
#  490|-> outputbacktrace(int skips, void *workaround)
#  491|   {
#  492|   #ifdef HAVE_BACKTRACE_FULL

Error: COMPILER_WARNING (CWE-563): [#def31]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:545:22: warning[-Wunused-variable]: unused variable ‘thrinfo’
#  545 |     janitor_thread_t thrinfo;
#      |                      ^~~~~~~
#  543|       const char* signalname;
#  544|       Dl_info btinfo;
#  545|->     janitor_thread_t thrinfo;
#  546|       (void) signal;
#  547|       (void) data;

Error: COMPILER_WARNING (CWE-563): [#def32]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:550:11: warning[-Wunused-variable]: unused variable ‘bt’
#  550 |     void *bt[20];
#      |           ^~
#  548|   #ifndef HAVE_BACKTRACE_FULL
#  549|   #ifdef HAVE_BACKTRACE
#  550|->     void *bt[20];
#  551|       int count, i;
#  552|   #else

Error: COMPILER_WARNING (CWE-563): [#def33]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:551:9: warning[-Wunused-variable]: unused variable ‘count’
#  551 |     int count, i;
#      |         ^~~~~
#  549|   #ifdef HAVE_BACKTRACE
#  550|       void *bt[20];
#  551|->     int count, i;
#  552|   #else
#  553|   #ifdef HAVE_LIBUNWIND

Error: COMPILER_WARNING (CWE-563): [#def34]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: In function ‘handlesignal’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:551:16: warning[-Wunused-variable]: unused variable ‘i’
#  551 |     int count, i;
#      |                ^
#  549|   #ifdef HAVE_BACKTRACE
#  550|       void *bt[20];
#  551|->     int count, i;
#  552|   #else
#  553|   #ifdef HAVE_LIBUNWIND

Error: COMPILER_WARNING (CWE-1164): [#def35]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: At top level
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:640:1: warning[-Wunused-function]: ‘callbackstring’ defined but not used
#  640 | callbackstring(void* data, uintptr_t pc, const char *filename, int lineno, const char *function)
#      | ^~~~~~~~~~~~~~
#  638|   
#  639|   static int
#  640|-> callbackstring(void* data, uintptr_t pc, const char *filename, int lineno, const char *function)
#  641|   {
#  642|       int siz, len;

Error: COMPILER_WARNING (CWE-563): [#def36]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: In function ‘callbackstring’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:640:38: warning[-Wunused-parameter]: unused parameter ‘pc’
#  640 | callbackstring(void* data, uintptr_t pc, const char *filename, int lineno, const char *function)
#      |                            ~~~~~~~~~~^~
#  638|   
#  639|   static int
#  640|-> callbackstring(void* data, uintptr_t pc, const char *filename, int lineno, const char *function)
#  641|   {
#  642|       int siz, len;

Error: CPPCHECK_WARNING (CWE-401): [#def37]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:696: error[memleakOnRealloc]: Common realloc mistake: 'string' nulled but not freed upon failure
#  694|               len = strlen(string);
#  695|               siz += len + 1;
#  696|->             string = realloc(string, siz);
#  697|           } else {
#  698|               len = 0;

Error: COMPILER_WARNING (CWE-563): [#def38]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:719:13: warning[-Wunused-variable]: unused variable ‘ss’
#  719 |     stack_t ss;
#      |             ^~
#  717|   {
#  718|       sigset_t mask;
#  719|->     stack_t ss;
#  720|       struct sigaction newsigaction;
#  721|       static struct backtrace_state *frames;

Error: COMPILER_WARNING (CWE-563): [#def39]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: In function ‘janitor_trapsignals’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:721:36: warning[-Wunused-variable]: unused variable ‘frames’
#  721 |     static struct backtrace_state *frames;
#      |                                    ^~~~~~
#  719|       stack_t ss;
#  720|       struct sigaction newsigaction;
#  721|->     static struct backtrace_state *frames;
#  722|   
#  723|   #ifdef HAVE_BACKTRACE_FULL

Error: GCC_ANALYZER_WARNING (CWE-401): [#def40]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c: scope_hint: In function ‘janitor_pthread_barrier_init’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:778:15: warning[-Wanalyzer-malloc-leak]: leak of ‘b’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:43: included_from: Included from here.
#  776|       b = malloc(sizeof(struct janitor_pthread_barrier_struct));
#  777|       if(count == 0 || attr != NULL) {
#  778|->         errno = EINVAL;
#  779|           return -1;
#  780|       }

Error: CPPCHECK_WARNING (CWE-401): [#def41]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:779: error[memleak]: Memory leak: b
#  777|       if(count == 0 || attr != NULL) {
#  778|           errno = EINVAL;
#  779|->         return -1;
#  780|       }
#  781|       if(pthread_mutex_init(&b->mutex, 0) < 0) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def42]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/janitor.c:790:14: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘b’
#  788|           return -1;
#  789|       }
#  790|->     b->count = count;
#  791|       b->waiting = 0;
#  792|       *(void**)barrier = b;

Error: COMPILER_WARNING (CWE-1164): [#def43]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c: scope_hint: At top level
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c:75:13: warning[-Wunused-function]: ‘alert’ declared ‘static’ but never defined
#   75 | static void alert(struct alertbuffer_struct* buffer, const char *format, ...)
#      |             ^~~~~
#   73|       int index;
#   74|   };
#   75|-> static void alert(struct alertbuffer_struct* buffer, const char *format, ...)
#   76|   #ifdef HAVE___ATTRIBUTE__
#   77|        __attribute__ ((format (printf, 2, 3)))

Error: COMPILER_WARNING (CWE-195): [#def44]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c: scope_hint: In function ‘alertoutput’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c:89:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘long unsigned int’
#   89 |     if (buffer->index < sizeof(buffer->buffer)) {
#      |                       ^
#   87|   alertoutput(struct alertbuffer_struct* buffer, int ch)
#   88|   {
#   89|->     if (buffer->index < sizeof(buffer->buffer)) {
#   90|           buffer->buffer[buffer->index++] = ch;
#   91|           return 0;

Error: COMPILER_WARNING (CWE-195): [#def45]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c: scope_hint: In function ‘alertinteger’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c:100:15: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘long unsigned int’ and ‘int’
#  100 |     if (value > base - 1)
#      |               ^
#   98|   {
#   99|       char ch;
#  100|->     if (value > base - 1)
#  101|           alertinteger(buffer, value / base, base);
#  102|       ch = "0123456789abcdef"[value % base];

Error: COMPILER_WARNING (CWE-195): [#def46]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c: scope_hint: In function ‘alertsyslog’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c:192:22: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘long unsigned int’
#  192 |     if (buffer.index < sizeof(buffer.buffer)) {
#      |                      ^
#  190|       valert(&buffer, format, args);
#  191|       va_end(args);
#  192|->     if (buffer.index < sizeof(buffer.buffer)) {
#  193|           buffer.buffer[buffer.index] = '\0';
#  194|       } else {

Error: COMPILER_WARNING (CWE-252): [#def47]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c: scope_hint: In function ‘alertsyslog’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/locks.c:197:11: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  197 |     (void)write(2, buffer.buffer, strlen(buffer.buffer));
#      |           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  195|           strcpy(&buffer.buffer[buffer.index - strlen("...\n") -1], "...\n");
#  196|       }
#  197|->     (void)write(2, buffer.buffer, strlen(buffer.buffer));
#  198|       syslog(LOG_CRIT, "%s", buffer.buffer);
#  199|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def48]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/longgetopt.c: scope_hint: In function ‘strtoargs’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/longgetopt.c:286:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘argv’
#  284|           }
#  285|       }
#  286|->     argv[argc] = NULL;
#  287|       *argcptr = argc;
#  288|       *argvptr = argv;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def49]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.c:70:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘fifoq’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.c: scope_hint: In function ‘fifoq_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.h:54: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.h:50: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.h:48: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.c:49:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.c:49:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.c:49:5: note: in expansion of macro ‘CHECKALLOC’
#   68|           q->owner[i] = NULL;
#   69|       }
#   70|->     q->count = 0;
#   71|   }
#   72|   

Error: COMPILER_WARNING (CWE-563): [#def50]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c: scope_hint: In function ‘schedule_get_first_task’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:81:20: warning[-Wunused-variable]: unused variable ‘node’
#   81 |     ldns_rbnode_t* node = LDNS_RBTREE_NULL;
#      |                    ^~~~
#   79|   {
#   80|       ldns_rbnode_t* first_node = LDNS_RBTREE_NULL;
#   81|->     ldns_rbnode_t* node = LDNS_RBTREE_NULL;
#   82|       task_type* pop = NULL;
#   83|       if (!schedule || !schedule->tasks) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def51]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c: scope_hint: In function ‘schedule_purge_owner’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:287:17: warning[-Wanalyzer-malloc-leak]: leak of ‘tasks’
#  285|        * realloc if we start with num_slots = 10 */
#  286|       tasks = (task_type **)malloc(num_slots * sizeof(task_type *));
#  287|->     if (!tasks) return;
#  288|   
#  289|       pthread_mutex_lock(&schedule->schedule_lock);

Error: CPPCHECK_WARNING (CWE-401): [#def52]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:301: error[memleakOnRealloc]: Common realloc mistake: 'tasks' nulled but not freed upon failure
#  299|                   if (num_tasks == num_slots) {
#  300|                       num_slots *= 2;
#  301|->                     tasks = realloc(tasks, num_slots * sizeof(task_type *));
#  302|                       if (!tasks) {
#  303|                           pthread_mutex_unlock(&schedule->schedule_lock);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def53]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c: scope_hint: In function ‘schedule_task’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:351:21: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(40)’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.h:54: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.h:49: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.h:49: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:44: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:161:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:162:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:162:5: note: in expansion of macro ‘ods_log_assert’
/usr/include/openssl/crypto.h:519: included_from: Included from here.
/usr/include/openssl/comp.h:22: included_from: Included from here.
/usr/include/openssl/ssl.h:29: included_from: Included from here.
/usr/include/ldns/dane.h:30: included_from: Included from here.
/usr/include/ldns/ldns.h:98: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:40: included_from: Included from here.
/opt/gcc-latest/lib/gcc/x86_64-pc-linux-gnu/15.0.0/include-fixed/pthread.h:790:12: note: argument 1 of ‘pthread_mutex_init’ must be non-null
#  349|                   t = task_duplicate_shallow(task);
#  350|                   t->lock = (pthread_mutex_t *) malloc(sizeof(pthread_mutex_t));
#  351|->                 if (pthread_mutex_init(t->lock, NULL)) {
#  352|                       task_destroy(t);
#  353|                       pthread_mutex_unlock(&schedule->schedule_lock);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def54]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c: scope_hint: In function ‘schedule_scheduletask’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.c:624:20: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(owner)’
#  622|       if (handler) {
#  623|           task = task_create(strdup(owner), handler->class, type, handler->callback, userdata, NULL, when);
#  624|->         task->lock = resource;
#  625|           schedule_task(schedule, task, 0, 0);
#  626|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def55]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.c: scope_hint: In function ‘task_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.c:79:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘task’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.h:54: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.c:37: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.c:78:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.c:78:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.c:78:5: note: in expansion of macro ‘CHECKALLOC’
#   77|   
#   78|       CHECKALLOC(task = (task_type*) malloc(sizeof(task_type)));;
#   79|->     task->owner = owner; /* TODO: each call to task_create needs to strdup this, but the free is inside task_destroy */
#   80|       task->class = class;
#   81|       task->type = type;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def56]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.c: scope_hint: In function ‘worker_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.c:43:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘worker’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/task.h:54: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/fifoq.h:49: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.h:49: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.c:27: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.c:42:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.c:42:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/worker.c:42:5: note: in expansion of macro ‘CHECKALLOC’
#   41|       worker_type* worker;
#   42|       CHECKALLOC(worker = (worker_type*) malloc(sizeof(worker_type)));
#   43|->     worker->name = name;
#   44|       worker->need_to_exit = 0;
#   45|       worker->context = NULL;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def57]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/str.c: scope_hint: In function ‘ods_strcat_delim’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/str.c:70:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘cat’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/str.c:37: included_from: Included from here.
<built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null
#   68|           len += strlen(argv[i]) + 1;
#   69|       cat = (char *) malloc(len * sizeof (char));
#   70|->     memset(cat, delim, len-1);
#   71|       for (i = 0; i < argc; i++) {
#   72|           memcpy(cat+pos, argv[i], strlen(argv[i]));

Error: COMPILER_WARNING: [#def58]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/strlcat.c:64: warning[-Wpedantic]: ISO C forbids an empty translation unit
#   62|   
#   63|   #endif /* !HAVE_STRLCAT */

Error: COMPILER_WARNING: [#def59]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/strlcpy.c:60: warning[-Wpedantic]: ISO C forbids an empty translation unit
#   58|   
#   59|   #endif /* !HAVE_STRLCPY */

Error: COMPILER_WARNING (CWE-563): [#def60]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/ctrl_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/ctrl_cmd.c:78:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   78 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   76|   
#   77|   static int
#   78|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   79|   {
#   80|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-195): [#def61]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c: scope_hint: In function ‘engine_create_workers’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:167:17: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘long unsigned int’
#  167 |     for (i=0; i < (size_t) engine->config->num_worker_threads; i++) {
#      |                 ^
#  165|       engine->workers = (worker_type**) malloc(
#  166|           (size_t)engine->config->num_worker_threads * sizeof(worker_type*));
#  167|->     for (i=0; i < (size_t) engine->config->num_worker_threads; i++) {
#  168|           asprintf(&name, "worker[%d]", i+1);
#  169|           engine->workers[i] = worker_create(name, engine->taskq);

Error: COMPILER_WARNING (CWE-252): [#def62]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c: scope_hint: In function ‘engine_create_workers’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:168:9: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  168 |         asprintf(&name, "worker[%d]", i+1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  166|           (size_t)engine->config->num_worker_threads * sizeof(worker_type*));
#  167|       for (i=0; i < (size_t) engine->config->num_worker_threads; i++) {
#  168|->         asprintf(&name, "worker[%d]", i+1);
#  169|           engine->workers[i] = worker_create(name, engine->taskq);
#  170|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def63]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:445:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[0]’
#  443|       if (!util_pidfile_avail(engine->config->pid_filename)) {
#  444|           ods_log_error("[%s] Pidfile exists and process with PID is running", engine_str);
#  445|->         return ODS_STATUS_WRITE_PIDFILE_ERR;
#  446|       }
#  447|       /* setup database configuration */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def64]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c: scope_hint: In function ‘engine_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:445:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[1]’
#  443|       if (!util_pidfile_avail(engine->config->pid_filename)) {
#  444|           ods_log_error("[%s] Pidfile exists and process with PID is running", engine_str);
#  445|->         return ODS_STATUS_WRITE_PIDFILE_ERR;
#  446|       }
#  447|       /* setup database configuration */

Error: COMPILER_WARNING (CWE-843): [#def65]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:456:104: warning[-Wcast-function-type]: cast between incompatible function types from ‘void (*)(void *)’ to ‘void * (*)(void *)’
#  456 |     engine->cmdhandler = cmdhandler_create(engine->config->clisock_filename, enforcercommands, engine, (void*(*)(void*)) (void(*)(void*))&get_database_connection, (void(*)(void*))&db_connection_free);
#      |                                                                                                        ^
#  454|   
#  455|       /* create command handler (before chowning socket file) */
#  456|->     engine->cmdhandler = cmdhandler_create(engine->config->clisock_filename, enforcercommands, engine, (void*(*)(void*)) (void(*)(void*))&get_database_connection, (void(*)(void*))&db_connection_free);
#  457|       if (!engine->cmdhandler) {
#  458|           ods_log_error("[%s] create command handler to %s failed",

Error: COMPILER_WARNING (CWE-843): [#def66]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c: scope_hint: In function ‘engine_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:456:122: warning[-Wcast-function-type]: cast between incompatible function types from ‘db_connection_t * (*)(engine_type *)’ {aka ‘struct db_connection * (*)(struct engine_struct *)’} to ‘void (*)(void *)’
#  456 |     engine->cmdhandler = cmdhandler_create(engine->config->clisock_filename, enforcercommands, engine, (void*(*)(void*)) (void(*)(void*))&get_database_connection, (void(*)(void*))&db_connection_free);
#      |                                                                                                                          ^
#  454|   
#  455|       /* create command handler (before chowning socket file) */
#  456|->     engine->cmdhandler = cmdhandler_create(engine->config->clisock_filename, enforcercommands, engine, (void*(*)(void*)) (void(*)(void*))&get_database_connection, (void(*)(void*))&db_connection_free);
#  457|       if (!engine->cmdhandler) {
#  458|           ods_log_error("[%s] create command handler to %s failed",

Error: COMPILER_WARNING (CWE-252): [#def67]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c: scope_hint: In function ‘engine_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:528:17: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  528 |                 write(pipefd[1], "\0", 1);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~
#  526|                   ods_writen(pipefd[1], err, strlen(err));
#  527|                   ods_writeln(pipefd[1], strerror(errno));
#  528|->                 write(pipefd[1], "\0", 1);
#  529|                   close(pipefd[1]);
#  530|                   return ODS_STATUS_SETSID_ERR;

Error: COMPILER_WARNING (CWE-252): [#def68]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:549:13: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  549 |             write(pipefd[1], "\0", 1);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  547|           if (engine->daemonize) {
#  548|               ods_writeln(pipefd[1], "unable to write pid file");
#  549|->             write(pipefd[1], "\0", 1);
#  550|               close(pipefd[1]);
#  551|           }

Error: COMPILER_WARNING (CWE-252): [#def69]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:559:19: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  559 |             (void)asprintf(&errorstr, "error opening libhsm (errno %i)", error);
#      |                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  557|           char* errorstr =  hsm_get_error(NULL);
#  558|           if (!errorstr)
#  559|->             (void)asprintf(&errorstr, "error opening libhsm (errno %i)", error);
#  560|           if (errorstr)
#  561|               ods_log_error("[%s] %s", engine_str, errorstr);

Error: COMPILER_WARNING (CWE-252): [#def70]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:564:13: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  564 |             write(pipefd[1], "\0", 1);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  562|           if (engine->daemonize) {
#  563|               if (errorstr) ods_writeln(pipefd[1], errorstr);
#  564|->             write(pipefd[1], "\0", 1);
#  565|               close(pipefd[1]);
#  566|           }

Error: COMPILER_WARNING (CWE-252): [#def71]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:573:5: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  573 |     write(pipefd[1], "\1", 1);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~
#  571|       engine_start_cmdhandler(engine);
#  572|   
#  573|->     write(pipefd[1], "\1", 1);
#  574|       close(pipefd[1]);
#  575|       if (!engine->daemonize) close(pipefd[0]);

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def72]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:575:29: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘pipefd[0]’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/cfg.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:128:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/log.h:207:19: note: in definition of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:163:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/log.h:207:19: note: in definition of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:112:5: note: in expansion of macro ‘ods_log_assert’
#  573|       write(pipefd[1], "\1", 1);
#  574|       close(pipefd[1]);
#  575|->     if (!engine->daemonize) close(pipefd[0]);
#  576|       engine->daemonize = 0; /* don't fork again on reload */
#  577|       return ODS_STATUS_OK;

Error: COMPILER_WARNING (CWE-843): [#def73]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c: scope_hint: In function ‘engine_init’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.c:628:25: warning[-Wcast-function-type]: cast between incompatible function types from ‘void * (*)(sig_atomic_t)’ {aka ‘void * (*)(int)’} to ‘void (*)(int)’
#  628 |     action.sa_handler = (void (*)(int))signal_handler;
#      |                         ^
#  626|       engine->daemonize = daemonize;
#  627|       /* catch signals */
#  628|->     action.sa_handler = (void (*)(int))signal_handler;
#  629|       sigfillset(&action.sa_mask);
#  630|       action.sa_flags = 0;

Error: COMPILER_WARNING (CWE-563): [#def74]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/queue_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/queue_cmd.c:69:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   69 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   67|   
#   68|   static int
#   69|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   70|   {
#   71|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def75]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/queue_cmd.c:69:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   69 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   67|   
#   68|   static int
#   69|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   70|   {
#   71|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def76]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/queue_cmd.c: scope_hint: In function ‘run_flush’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/queue_cmd.c:143:45: warning[-Wunused-parameter]: unused parameter ‘argc’
#  143 | run_flush(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                         ~~~~^~~~
#  141|   
#  142|   static int
#  143|-> run_flush(cmdhandler_ctx_type* context, int argc, char* argv[])
#  144|   {
#  145|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def77]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/queue_cmd.c:143:57: warning[-Wunused-parameter]: unused parameter ‘argv’
#  143 | run_flush(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                                   ~~~~~~^~~~~~
#  141|   
#  142|   static int
#  143|-> run_flush(cmdhandler_ctx_type* context, int argc, char* argv[])
#  144|   {
#  145|       int sockfd = context->sockfd;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def78]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/db/db_object.c: scope_hint: In function ‘db_object_field_list_add’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/db/db_object.c:83:21: warning[-Wanalyzer-malloc-leak]: leak of ‘db_object_field_new_copy(object_field)’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/db/db_object.c: scope_hint: In function ‘db_object_field_list_add’
#   81|           return DB_ERROR_UNKNOWN;
#   82|       }
#   83|->     if (object_field->next) {
#   84|           return DB_ERROR_UNKNOWN;
#   85|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def79]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/db/db_result.c: scope_hint: In function ‘db_result_list_copy’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/db/db_result.c:83:20: warning[-Wanalyzer-malloc-leak]: leak of ‘db_result_new_copy(result)’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/db/db_result.c: scope_hint: In function ‘db_result_list_copy’
#   81|       }
#   82|   
#   83|->     if (from_result->value_set
#   84|           && !(value_set = db_value_set_new_copy(from_result->value_set)))
#   85|       {

Error: COMPILER_WARNING (CWE-563): [#def80]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforce_task.c: scope_hint: In function ‘perform_enforce’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforce_task.c:53:21: warning[-Wunused-parameter]: unused parameter ‘sockfd’
#   53 | perform_enforce(int sockfd, engine_type *engine, char const *zonename,
#      |                 ~~~~^~~~~~
#   51|   
#   52|   static time_t
#   53|-> perform_enforce(int sockfd, engine_type *engine, char const *zonename,
#   54|   	db_connection_t *dbconn)
#   55|   {

Error: COMPILER_WARNING (CWE-563): [#def81]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforce_task.c: scope_hint: In function ‘enforce_task_perform’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforce_task.c:138:33: warning[-Wunused-parameter]: unused parameter ‘task’
#  138 | enforce_task_perform(task_type* task, char const *owner, void *userdata, void *context)
#      |                      ~~~~~~~~~~~^~~~
#  136|   
#  137|   time_t
#  138|-> enforce_task_perform(task_type* task, char const *owner, void *userdata, void *context)
#  139|   {
#  140|       db_connection_t* dbconn = (db_connection_t*) context;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def82]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforce_task.c: scope_hint: In function ‘enforce_task’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforce_task.c:147:16: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(owner)’
#  145|   enforce_task(engine_type *engine, char const *owner)
#  146|   {
#  147|-> 	return task_create(strdup(owner), TASK_CLASS_ENFORCER, TASK_TYPE_ENFORCE,
#  148|   		enforce_task_perform, engine, NULL, time_now());
#  149|   }

Error: COMPILER_WARNING (CWE-563): [#def83]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforcer.c: scope_hint: In function ‘policyApproval’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/enforcer.c:1025:36: warning[-Wunused-variable]: unused variable ‘dnskey_algorithm_rollover’
# 1025 |     static const key_state_state_t dnskey_algorithm_rollover[4] = { OMNIPRESENT, OMNIPRESENT, OMNIPRESENT, NA };
#      |                                    ^~~~~~~~~~~~~~~~~~~~~~~~~
# 1023|       struct future_key* future_key, key_dependency_list_t* deplist)
# 1024|   {
# 1025|->     static const key_state_state_t dnskey_algorithm_rollover[4] = { OMNIPRESENT, OMNIPRESENT, OMNIPRESENT, NA };
# 1026|       static const key_state_state_t mask[14][4] = {
# 1027|           /*ZSK*/

Error: COMPILER_WARNING (CWE-134): [#def84]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/repositorylist_cmd.c: scope_hint: In function ‘perform_repositorylist’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/repositorylist_cmd.c:81:9: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#   81 |         client_printf(sockfd, fmt, "Name:", "Capacity:", "RequireBackup:");
#      |         ^~~~~~~~~~~~~
#   79|   
#   80|   	client_printf(sockfd, "Repositories:\n");
#   81|-> 	client_printf(sockfd, fmt, "Name:", "Capacity:", "RequireBackup:");
#   82|   
#   83|   	if (xpathObj->nodesetval){

Error: COMPILER_WARNING (CWE-134): [#def85]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/repositorylist_cmd.c:96:25: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#   96 |                         client_printf(sockfd, fmt, repository, capacity?capacity:"-", backup?"Yes":"No");
#      |                         ^~~~~~~~~~~~~
#   94|   				curNode = curNode->next;
#   95|   			}
#   96|-> 			client_printf(sockfd, fmt, repository, capacity?capacity:"-", backup?"Yes":"No");
#   97|   			free(repository);
#   98|   			repository = NULL;

Error: COMPILER_WARNING (CWE-563): [#def86]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/repositorylist_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/repositorylist_cmd.c:126:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#  126 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#  124|   
#  125|   static int
#  126|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#  127|   {
#  128|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def87]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/repositorylist_cmd.c:126:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#  126 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#  124|   
#  125|   static int
#  126|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#  127|   {
#  128|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def88]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_all_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_all_cmd.c:102:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#  102 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#  100|   
#  101|   static int
#  102|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#  103|   {
#  104|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def89]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_all_cmd.c:102:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#  102 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#  100|   
#  101|   static int
#  102|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#  103|   {
#  104|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def90]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_conf_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_conf_cmd.c:59:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   59 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   57|   

#   58|   static int

#   59|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])

#   60|   {

#   61|       int sockfd = context->sockfd;


Error: COMPILER_WARNING (CWE-563): [#def91]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_conf_cmd.c:59:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   59 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   57|   

#   58|   static int

#   59|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])

#   60|   {

#   61|       int sockfd = context->sockfd;


Error: COMPILER_WARNING (CWE-563): [#def92]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_repositorylist_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_repositorylist_cmd.c:128:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#  128 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#  126|   
#  127|   static int
#  128|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#  129|   {
#  130|        int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def93]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/enforcer/update_repositorylist_cmd.c:128:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#  128 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#  126|   
#  127|   static int
#  128|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#  129|   {
#  130|        int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-134): [#def94]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/backup_hsmkeys_cmd.c: scope_hint: In function ‘list’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/backup_hsmkeys_cmd.c:138:5: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#  138 |     client_printf_err(sockfd, fmt, "Locator:", "Repository:", "Backup state:");
#      |     ^~~~~~~~~~~~~~~~~
#  136|       }
#  137|   
#  138|->     client_printf_err(sockfd, fmt, "Locator:", "Repository:", "Backup state:");
#  139|       for (hsmkey = hsm_key_list_next(hsmkey_list); hsmkey;
#  140|           hsmkey = hsm_key_list_next(hsmkey_list))

Error: COMPILER_WARNING (CWE-134): [#def95]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/backup_hsmkeys_cmd.c:142:9: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#  142 |         client_printf(sockfd, fmt, hsm_key_locator(hsmkey), hsm_key_repository(hsmkey), hsm_key_to_backup_state(hsmkey));
#      |         ^~~~~~~~~~~~~
#  140|           hsmkey = hsm_key_list_next(hsmkey_list))
#  141|       {
#  142|->         client_printf(sockfd, fmt, hsm_key_locator(hsmkey), hsm_key_repository(hsmkey), hsm_key_to_backup_state(hsmkey));
#  143|       }
#  144|       hsm_key_list_free(hsmkey_list);

Error: COMPILER_WARNING (CWE-563): [#def96]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_generate_cb’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:436:40: warning[-Wunused-parameter]: unused parameter ‘task’
#  436 | hsm_key_factory_generate_cb(task_type* task, char const *owner, void* userdata, void* context)
#      |                             ~~~~~~~~~~~^~~~
#  434|   
#  435|   static time_t
#  436|-> hsm_key_factory_generate_cb(task_type* task, char const *owner, void* userdata, void* context)
#  437|   {
#  438|       struct __hsm_key_factory_task* task2;

Error: COMPILER_WARNING (CWE-563): [#def97]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_generate_policy_cb’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:468:47: warning[-Wunused-parameter]: unused parameter ‘task’
#  468 | hsm_key_factory_generate_policy_cb(task_type* task, char const *owner, void *userdata,
#      |                                    ~~~~~~~~~~~^~~~
#  466|   
#  467|   static time_t
#  468|-> hsm_key_factory_generate_policy_cb(task_type* task, char const *owner, void *userdata,
#  469|       void *context)
#  470|   {

Error: COMPILER_WARNING (CWE-563): [#def98]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_generate_all_cb’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:490:44: warning[-Wunused-parameter]: unused parameter ‘task’
#  490 | hsm_key_factory_generate_all_cb(task_type* task, char const *owner, void *userdata,
#      |                                 ~~~~~~~~~~~^~~~
#  488|   
#  489|   static time_t
#  490|-> hsm_key_factory_generate_all_cb(task_type* task, char const *owner, void *userdata,
#  491|       void* context)
#  492|   {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def99]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_schedule_generate’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:548:9: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup("hsm_key_factory_schedule_generation")’
#  546|           free, time_now());
#  547|   
#  548|->     if (schedule_task(engine->taskq, task, 1, 0) != ODS_STATUS_OK) {
#  549|           if (!task) {
#  550|               free(task2);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def100]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_schedule_generate_policy’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:586:9: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup("hsm_key_factory_schedule_generation_policy")’
#  584|           free, time_now());
#  585|   
#  586|->     if (schedule_task(engine->taskq, task, 1, 0) != ODS_STATUS_OK) {
#  587|           if (!task) {
#  588|               free(task2);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def101]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_schedule_generate_all’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:618:9: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup("hsm_key_factory_schedule_generation")’
#  616|           free, time_now());
#  617|   
#  618|->     if (schedule_task(engine->taskq, task, 1, 0) != ODS_STATUS_OK) {
#  619|           if (!task) {
#  620|               free(task2);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def102]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_delete_key’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:848:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘key_data’
#  846|               numhsmkeys = -1;
#  847|           }
#  848|->         key_data_free(key_data);
#  849|           db_clause_list_free(lookup_clause_list);
#  850|           if(numhsmkeys != 0)

Error: COMPILER_WARNING (CWE-457): [#def103]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function 'hsm_key_factory_delete_key'
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:848:9: warning[-Wmaybe-uninitialized]: 'key_data' may be used uninitialized
#  848 |         key_data_free(key_data);
#      |         ^
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:838:21: note: 'key_data' was declared here
#  838 |         key_data_t* key_data;
#      |                     ^
#  846|               numhsmkeys = -1;
#  847|           }
#  848|->         key_data_free(key_data);
#  849|           db_clause_list_free(lookup_clause_list);
#  850|           if(numhsmkeys != 0)

Error: COMPILER_WARNING (CWE-457): [#def104]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c: scope_hint: In function ‘hsm_key_factory_delete_key’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:848:9: warning[-Wmaybe-uninitialized]: ‘key_data’ may be used uninitialized
#  848 |         key_data_free(key_data);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/hsmkey/hsm_key_factory.c:838:21: note: ‘key_data’ was declared here
#  838 |         key_data_t* key_data;
#      |                     ^~~~~~~~
#  846|               numhsmkeys = -1;
#  847|           }
#  848|->         key_data_free(key_data);
#  849|           db_clause_list_free(lookup_clause_list);
#  850|           if(numhsmkeys != 0)

Error: GCC_ANALYZER_WARNING (CWE-416): [#def105]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/key_purge.c: scope_hint: In function ‘free_all’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/key_purge.c:55:25: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘deplist2’
#   53|   		int deplist2_size = key_dependency_list_size(deplist);
#   54|   		for (i = 0; i < deplist2_size; i++){
#   55|-> 			key_dependency_free(deplist2[i]);
#   56|   		}
#   57|   		free(deplist2);

Error: GCC_ANALYZER_WARNING (CWE-415): [#def106]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/key_purge.c:57:17: warning[-Wanalyzer-double-free]: double-‘free’ of ‘deplist2’
#   55|   			key_dependency_free(deplist2[i]);
#   56|   		}
#   57|-> 		free(deplist2);
#   58|   		deplist2 = NULL;
#   59|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def107]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/key_purge.c: scope_hint: In function ‘removeDeadKeysNow’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/key_purge.c:159:25: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘deplist2’
#  157|           /* deplist might be NULL but is always freeable */
#  158|           if (deplist2_size > 0)
#  159|->             deplist2[0] = key_dependency_list_get_begin(deplist);
#  160|           for (i = 1; i < deplist2_size; i++)
#  161|               deplist2[i] = key_dependency_list_get_next(deplist);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def108]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c: scope_hint: In function ‘exec_dnskey_by_id’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c:193:36: warning[-Wanalyzer-malloc-leak]: leak of ‘popen(ds_command, "w")’
/usr/include/ldns/buffer.h:16: included_from: Included from here.
/usr/include/ldns/ldns.h:96: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/scheduler/schedule.h:38: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/daemon/engine.h:43: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c:34: included_from: Included from here.
#  191|   				else
#  192|   					bytes_written = fprintf(fp, "%s", rrstr);
#  193|-> 				if (bytes_written < 0) {
#  194|   					status = 5;
#  195|   					ods_log_error_and_printf(sockfd,  module_str,

Error: COMPILER_WARNING (CWE-134): [#def109]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c: scope_hint: In function ‘ds_list_keys’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c:268:9: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#  268 |         client_printf(sockfd, fmth, "Zone:", "Key role:", "Keytag:", "Id:");
#      |         ^~~~~~~~~~~~~
#  266|   	db_clause_list_free(clause_list);
#  267|   
#  268|-> 	client_printf(sockfd, fmth, "Zone:", "Key role:", "Keytag:", "Id:");
#  269|   
#  270|   	for (key = key_data_list_next(key_list); key;

Error: COMPILER_WARNING (CWE-134): [#def110]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c:279:17: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#  279 |                 );
#      |                 ^
#  277|   			key_data_role_text(key), key_data_keytag(key),
#  278|   			(hsmkey ? hsm_key_locator(hsmkey) : "NOT_FOUND")
#  279|-> 		);
#  280|   		zone_db_free(zone);
#  281|   		hsm_key_free(hsmkey);

Error: COMPILER_WARNING (CWE-563): [#def111]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c: scope_hint: In function ‘run_ds_cmd’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds.c:444:14: warning[-Wunused-variable]: unused variable ‘buf’
#  444 |         char buf[ODS_SE_MAXLINE];
#      |              ^~~
#  442|   	hsm_key_t* hsmkey = NULL;
#  443|   	int ret;
#  444|-> 	char buf[ODS_SE_MAXLINE];
#  445|   	zone_db_t* zone = NULL;
#  446|   	int all = 0;

Error: COMPILER_WARNING (CWE-563): [#def112]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_retract_task.c: scope_hint: In function ‘keystate_ds_retract_task_perform’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_retract_task.c:40:45: warning[-Wunused-parameter]: unused parameter ‘task’
#   40 | keystate_ds_retract_task_perform(task_type* task, char const *zonename, void *userdata,
#      |                                  ~~~~~~~~~~~^~~~
#   38|   
#   39|   static time_t
#   40|-> keystate_ds_retract_task_perform(task_type* task, char const *zonename, void *userdata,
#   41|   	void* context)
#   42|   {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def113]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_retract_task.c: scope_hint: In function ‘keystate_ds_retract_task’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_retract_task.c:53:16: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(owner)’
#   51|   keystate_ds_retract_task(engine_type *engine, char const *owner)
#   52|   {
#   53|-> 	return task_create(strdup(owner), TASK_CLASS_ENFORCER, TASK_TYPE_DSRETRACT,
#   54|   		keystate_ds_retract_task_perform, engine, NULL, time_now());
#   55|   }

Error: COMPILER_WARNING (CWE-563): [#def114]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_submit_task.c: scope_hint: In function ‘keystate_ds_submit_task_perform’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_submit_task.c:42:44: warning[-Wunused-parameter]: unused parameter ‘task’
#   42 | keystate_ds_submit_task_perform(task_type* task, char const *zonename, void *userdata,
#      |                                 ~~~~~~~~~~~^~~~
#   40|   
#   41|   static time_t
#   42|-> keystate_ds_submit_task_perform(task_type* task, char const *zonename, void *userdata,
#   43|   	void* context)
#   44|   {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def115]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_submit_task.c: scope_hint: In function ‘keystate_ds_submit_task’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_ds_submit_task.c:55:16: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(owner)’
#   53|   keystate_ds_submit_task(engine_type *engine, char const *owner)
#   54|   {
#   55|-> 	return task_create(strdup(owner), TASK_CLASS_ENFORCER, TASK_TYPE_DSSUBMIT,
#   56|   		keystate_ds_submit_task_perform, engine, NULL, time_now());
#   57|   }

Error: COMPILER_WARNING (CWE-195): [#def116]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_import_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_import_cmd.c:547:25: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘unsigned int’
#  547 |     if (atoi(algorithm) != policy_key_algorithm(policy_key)) {
#      |                         ^~
#  545|       }
#  546|   
#  547|->     if (atoi(algorithm) != policy_key_algorithm(policy_key)) {
#  548|           ods_log_error("Error: the given algorithm in import command doesn't match the algorithm in kasp");
#  549|           client_printf_err(sockfd, "The given algorithm doesn't match the algorithm in kasp\n");

Error: COMPILER_WARNING (CWE-563): [#def117]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_list_cmd.c: scope_hint: In function ‘keystate’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/keystate_list_cmd.c:72:13: warning[-Wunused-variable]: unused variable ‘dsretract’
#   72 |         int dsretract = (dsstate == KEY_DATA_DS_AT_PARENT_RETRACT);
#      |             ^~~~~~~~~
#   70|   {
#   71|   	int dsseen    = (dsstate == KEY_DATA_DS_AT_PARENT_SEEN);
#   72|-> 	int dsretract = (dsstate == KEY_DATA_DS_AT_PARENT_RETRACT);
#   73|   
#   74|   	if (p == OMN && c == OMN) return KS_ACT;

Error: COMPILER_WARNING (CWE-134): [#def118]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/rollover_list_cmd.c: scope_hint: In function ‘print_zone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/rollover_list_cmd.c:95:25: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#   95 |                         key_data_role_text(key), tchange);
#      |                         ^~~~~~~~~~~~~~~~~~
#   93|   		char *tchange = map_keytime(zone, key);
#   94|   		client_printf(sockfd, fmt, zone_db_name(zone),
#   95|-> 			key_data_role_text(key), tchange);
#   96|   		free(tchange);
#   97|   	}

Error: COMPILER_WARNING (CWE-134): [#def119]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/rollover_list_cmd.c: scope_hint: In function ‘perform_rollover_list’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/rollover_list_cmd.c:137:9: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#  137 |         client_printf(sockfd, fmt, "Zone:", "Keytype:", "Rollover expected:");
#      |         ^~~~~~~~~~~~~
#  135|   
#  136|   	client_printf(sockfd, "Keys:\n");
#  137|-> 	client_printf(sockfd, fmt, "Zone:", "Keytype:", "Rollover expected:");
#  138|   
#  139|   	if (zone) {

Error: COMPILER_WARNING: [#def120]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_del_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_del_cmd.c:187:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 13 equals source length
#  185|           }
#  186|           strncpy(signconf_del, zone_db_signconf_path(zone), strlen(zone_db_signconf_path(zone)));
#  187|->         strncat(signconf_del, ".ZONE_DELETED", strlen(".ZONE_DELETED"));
#  188|           rename(zone_db_signconf_path(zone), signconf_del);
#  189|           free(signconf_del);

Error: COMPILER_WARNING: [#def121]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_del_cmd.c:220:13: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 13 equals source length
#  218|               }
#  219|               strncpy(signconf_del, zone_db_signconf_path(zone), strlen(zone_db_signconf_path(zone)));
#  220|->             strncat(signconf_del, ".ZONE_DELETED", strlen(".ZONE_DELETED"));
#  221|               rename(zone_db_signconf_path(zone), signconf_del);
#  222|               free(signconf_del);

Error: COMPILER_WARNING (CWE-563): [#def122]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_list_cmd.c: scope_hint: At top level
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_list_cmd.c:46:20: warning[-Wunused-variable]: ‘module_str’ defined but not used
#   46 | static const char *module_str = "zone_list_cmd";
#      |                    ^~~~~~~~~~
#   44|   #include "keystate/zone_list_cmd.h"
#   45|   
#   46|-> static const char *module_str = "zone_list_cmd";
#   47|   
#   48|   static void

Error: COMPILER_WARNING (CWE-563): [#def123]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_list_cmd.c:64:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   64 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   62|   
#   63|   static int
#   64|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   65|   {
#   66|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def124]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_list_cmd.c:64:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   64 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   62|   
#   63|   static int
#   64|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   65|   {
#   66|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-134): [#def125]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_list_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_list_cmd.c:91:9: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#   91 |         "Signer Configuration:");
#      |         ^~~~~~~~~~~~~~~~~~~~~~~
#   89|       client_printf(sockfd, "Zones:\n");
#   90|       client_printf(sockfd, fmt, "Zone:", "Policy:", "Next change:",
#   91|->         "Signer Configuration:");
#   92|       while (zone) {
#   93|           if (zone_db_next_change(zone) >= time_now()) {

Error: COMPILER_WARNING (CWE-134): [#def126]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_list_cmd.c:127:13: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#  127 |             zone_db_signconf_path(zone));
#      |             ^~~~~~~~~~~~~~~~~~~~~
#  125|               (policy ? policy_name(policy) : "NOT_FOUND"),
#  126|               nctime,
#  127|->             zone_db_signconf_path(zone));
#  128|   
#  129|           zone = zone_list_db_next(zone_list);

Error: COMPILER_WARNING (CWE-563): [#def127]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_set_policy_cmd.c: scope_hint: In function ‘set_zone_policy’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_set_policy_cmd.c:74:57: warning[-Wunused-parameter]: unused parameter ‘dbconn’
#   74 | static int set_zone_policy(int sockfd, db_connection_t* dbconn, zone_db_t* zone, policy_t* policy) {
#      |                                        ~~~~~~~~~~~~~~~~~^~~~~~
#   72|   }
#   73|   
#   74|-> static int set_zone_policy(int sockfd, db_connection_t* dbconn, zone_db_t* zone, policy_t* policy) {
#   75|   	const db_value_t* wanted_policy_id = policy_id(policy);
#   76|   	int cmp;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def128]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_set_policy_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zone_set_policy_cmd.c:137:40: warning[-Wanalyzer-malloc-leak]: leak of ‘policy_name’
#  135|   				client_printf_err(sockfd, "unknown arguments\n");
#  136|   				ods_log_error("[%s] unknown arguments for zone set-policy command", module_str);
#  137|-> 				return -1;
#  138|   		}
#  139|   	}

Error: COMPILER_WARNING (CWE-563): [#def129]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_export_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_export_cmd.c:59:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   59 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   57|   
#   58|   static int
#   59|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   60|   {
#   61|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def130]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_export_cmd.c:59:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   59 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   57|   
#   58|   static int
#   59|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   60|   {
#   61|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-134): [#def131]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_import.c: scope_hint: In function ‘zonelist_import’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_import.c:225:29: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#  225 |                             client_printf_err(sockfd, module_str, "WARNING: Read access to input file %s for zone %s denied! \n", zone_db_input_adapter_uri(zone), zone_db_name(zone));
#      |                             ^~~~~~~~~~~~~~~~~
#  223|                           }
#  224|                           else if (access(zone_db_input_adapter_uri(zone), R_OK)) {
#  225|->                             client_printf_err(sockfd, module_str, "WARNING: Read access to input file %s for zone %s denied! \n", zone_db_input_adapter_uri(zone), zone_db_name(zone));
#  226|   			    ods_log_warning("[%s] WARNING: Read access to input file %s for zone %s denied!", module_str, zone_db_input_adapter_uri(zone), zone_db_name(zone));
#  227|                           }

Error: COMPILER_WARNING (CWE-477): [#def132]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_update.c: scope_hint: In function ‘zonelist_update’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_update.c:77:9: warning[-Wdeprecated-declarations]: ‘xmlKeepBlanksDefault’ is deprecated
/usr/include/libxml2/libxml/tree.h:17: included_from: Included from here.
/usr/include/libxml2/libxml/xpath.h:27: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.h:38: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/keystate/zonelist_update.c:31: included_from: Included from here.
/usr/include/libxml2/libxml/parser.h:957:17: note: declared here
#   75|           }
#   76|   
#   77|-> 	xmlKeepBlanksDefault(0);
#   78|           if (!(doc = xmlParseFile(filename))) {
#   79|               client_printf_err(sockfd, "Unable to read XML, parse error!\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def133]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcer.c: scope_hint: In function ‘interface_start’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcer.c:350:12: warning[-Wanalyzer-malloc-leak]: leak of ‘popen("pgrep ods-enforcerd", "r")’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcer.c:49: included_from: Included from here.
#  348|           FILE *cmd2 = popen("pgrep ods-enforcerd","r");
#  349|           error = 0;
#  350|->         if (fgets(line, 80, cmd2)) {
#  351|               pid_t pid = strtoul(line, NULL, 10);
#  352|               fprintf(stdout, "pid %d\n", pid);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def134]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcer.c:350:13: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘popen("pgrep ods-enforcerd", "r")’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcer.c:37: included_from: Included from here.
/usr/include/stdio.h:654:14: note: argument 3 of ‘fgets’ must be non-null
#  348|           FILE *cmd2 = popen("pgrep ods-enforcerd","r");
#  349|           error = 0;
#  350|->         if (fgets(line, 80, cmd2)) {
#  351|               pid_t pid = strtoul(line, NULL, 10);
#  352|               fprintf(stdout, "pid %d\n", pid);

Error: COMPILER_WARNING (CWE-477): [#def135]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c: scope_hint: In function ‘program_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c:101:5: warning[-Wdeprecated-declarations]: ‘xmlInitGlobals’ is deprecated
#  101 |     xmlInitGlobals();
#      |     ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c:35: included_from: Included from here.
/usr/include/libxml2/libxml/parser.h:923:17: note: declared here
#  923 |                 xmlInitGlobals          (void);
#      |                 ^~~~~~~~~~~~~~
#   99|   
#  100|       /* initialize */
#  101|->     xmlInitGlobals();
#  102|       xmlInitParser();
#  103|       xmlInitThreads();

Error: COMPILER_WARNING (CWE-477): [#def136]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c:103:5: warning[-Wdeprecated-declarations]: ‘xmlInitThreads’ is deprecated
#  103 |     xmlInitThreads();
#      |     ^~~~~~~~~~~~~~
/usr/include/libxml2/libxml/parser.h:28: included_from: Included from here.
/usr/include/libxml2/libxml/threads.h:58:25: note: declared here
#   58 |                         xmlInitThreads  (void);
#      |                         ^~~~~~~~~~~~~~
#  101|       xmlInitGlobals();
#  102|       xmlInitParser();
#  103|->     xmlInitThreads();
#  104|       
#  105|       /* setup */

Error: COMPILER_WARNING (CWE-477): [#def137]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c: scope_hint: In function ‘program_teardown’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c:116:5: warning[-Wdeprecated-declarations]: ‘xmlCleanupGlobals’ is deprecated
#  116 |     xmlCleanupGlobals();
#      |     ^~~~~~~~~~~~~~~~~
/usr/include/libxml2/libxml/parser.h:926:17: note: declared here
#  926 |                 xmlCleanupGlobals       (void);
#      |                 ^~~~~~~~~~~~~~~~~
#  114|   
#  115|       xmlCleanupParser();
#  116|->     xmlCleanupGlobals();
#  117|   }
#  118|   

Error: COMPILER_WARNING (CWE-252): [#def138]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c: scope_hint: In function ‘main’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-enforcerd.c:153:9: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  153 |         asprintf(&argv0, "%s/%s", path, argv[0]);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  151|       if(argv[0][0] != '/') {
#  152|           char *path = getcwd(NULL,0);
#  153|->         asprintf(&argv0, "%s/%s", path, argv[0]);
#  154|           free(path);
#  155|       } else {

Error: COMPILER_WARNING (CWE-563): [#def139]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c: scope_hint: In function ‘callback’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c:132:27: warning[-Wunused-parameter]: unused parameter ‘argc’
#  132 | callback(void *cargo, int argc, char **argv, char **names)
#      |                       ~~~~^~~~
#  130|   
#  131|   static int
#  132|-> callback(void *cargo, int argc, char **argv, char **names)
#  133|   {
#  134|       int status;

Error: COMPILER_WARNING (CWE-563): [#def140]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c:132:53: warning[-Wunused-parameter]: unused parameter ‘names’
#  132 | callback(void *cargo, int argc, char **argv, char **names)
#      |                                              ~~~~~~~^~~~~
#  130|   
#  131|   static int
#  132|-> callback(void *cargo, int argc, char **argv, char **names)
#  133|   {
#  134|       int status;

Error: COMPILER_WARNING (CWE-1164): [#def141]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c: scope_hint: At top level
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c:279:1: warning[-Wunused-function]: ‘dblayer_close’ defined but not used
#  279 | dblayer_close(void) {
#      | ^~~~~~~~~~~~~
#  277|   
#  278|   static void
#  279|-> dblayer_close(void) {
#  280|       dblayer.close();
#  281|   }

Error: COMPILER_WARNING (CWE-477): [#def142]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c: scope_hint: In function ‘main’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c:364:5: warning[-Wdeprecated-declarations]: ‘xmlInitGlobals’ is deprecated
#  364 |     xmlInitGlobals();
#      |     ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c:31: included_from: Included from here.
/usr/include/libxml2/libxml/parser.h:923:17: note: declared here
#  923 |                 xmlInitGlobals          (void);
#      |                 ^~~~~~~~~~~~~~
#  362|       ods_log_init("ods-migrate", 0, NULL, verbosity);
#  363|   
#  364|->     xmlInitGlobals();
#  365|       xmlInitParser();
#  366|       xmlInitThreads();

Error: COMPILER_WARNING (CWE-477): [#def143]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c:366:5: warning[-Wdeprecated-declarations]: ‘xmlInitThreads’ is deprecated
#  366 |     xmlInitThreads();
#      |     ^~~~~~~~~~~~~~
/usr/include/libxml2/libxml/parser.h:28: included_from: Included from here.
/usr/include/libxml2/libxml/threads.h:58:25: note: declared here
#   58 |                         xmlInitThreads  (void);
#      |                         ^~~~~~~~~~~~~~
#  364|       xmlInitGlobals();
#  365|       xmlInitParser();
#  366|->     xmlInitThreads();
#  367|   
#  368|       tzset(); /* for portability */

Error: COMPILER_WARNING (CWE-477): [#def144]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/ods-migrate.c:435:5: warning[-Wdeprecated-declarations]: ‘xmlCleanupGlobals’ is deprecated
#  435 |     xmlCleanupGlobals();
#      |     ^~~~~~~~~~~~~~~~~
/usr/include/libxml2/libxml/parser.h:926:17: note: declared here
#  926 |                 xmlCleanupGlobals       (void);
#      |                 ^~~~~~~~~~~~~~~~~
#  433|   
#  434|       xmlCleanupParser();
#  435|->     xmlCleanupGlobals();
#  436|   
#  437|       return 0;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def145]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/parser/confparser.c: scope_hint: In function ‘parse_conf_clisock_filename’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/parser/confparser.c:449:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘dup’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/parser/confparser.h:37: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/parser/confparser.c:32: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/parser/confparser.c:154:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/parser/confparser.c:155:5: note: in expansion of macro ‘ods_log_assert’
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
#  447|           dup = strdup(OPENDNSSEC_ENFORCER_SOCKETFILE);
#  448|       }
#  449|->     if (strlen(dup) >= sizeof(((struct sockaddr_un*)0)->sun_path)) {
#  450|           dup[sizeof(((struct sockaddr_un*)0)->sun_path)-1] = '\0'; /* don't worry about just a few bytes 'lost' */
#  451|           ods_log_warning("[%s] SocketFile path too long, truncated to %s", parser_str, dup);

Error: COMPILER_WARNING (CWE-563): [#def146]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_list_cmd.c:61:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   61 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   59|   
#   60|   static int
#   61|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   62|   {
#   63|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def147]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_list_cmd.c:61:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   61 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   59|   
#   60|   static int
#   61|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   62|   {
#   63|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-134): [#def148]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_list_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_list_cmd.c:75:9: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#   75 |         client_printf(sockfd, fmt, "Policy:", "Description:");
#      |         ^~~~~~~~~~~~~
#   73|   	 * client_printf(sockfd, "Database set to: %s\nPolicies:\n",
#   74|   		engine->config->datastore);*/
#   75|-> 	client_printf(sockfd, fmt, "Policy:", "Description:");
#   76|   
#   77|   	policy = policy_list_next(pol_list);

Error: COMPILER_WARNING (CWE-134): [#def149]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_list_cmd.c:80:25: warning[-Wformat-nonliteral]: format not a string literal, argument types not checked
#   80 |                         policy_description(policy));
#      |                         ^~~~~~~~~~~~~~~~~~
#   78|   	while (policy) {
#   79|   		client_printf(sockfd, fmt, policy_name(policy),
#   80|-> 			policy_description(policy));
#   81|   		policy = policy_list_next(pol_list);
#   82|   	}

Error: COMPILER_WARNING (CWE-563): [#def150]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_purge_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_purge_cmd.c:59:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   59 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   57|   
#   58|   static int
#   59|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   60|   {
#   61|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def151]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_purge_cmd.c:59:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   59 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   57|   
#   58|   static int
#   59|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   60|   {
#   61|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def152]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_cmd.c:62:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   62 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   60|   
#   61|   static int
#   62|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   63|   {
#   64|       db_connection_t* dbconn = getconnectioncontext(context);;

Error: COMPILER_WARNING (CWE-563): [#def153]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_cmd.c:62:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   62 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   60|   
#   61|   static int
#   62|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   63|   {
#   64|       db_connection_t* dbconn = getconnectioncontext(context);;

Error: COMPILER_WARNING (CWE-563): [#def154]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_task.c: scope_hint: In function ‘performresalt’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_task.c:103:26: warning[-Wunused-parameter]: unused parameter ‘task’
#  103 | performresalt(task_type* task, char const *policyname, void *userdata,
#      |               ~~~~~~~~~~~^~~~
#  101|    */
#  102|   static time_t 
#  103|-> performresalt(task_type* task, char const *policyname, void *userdata,
#  104|   	void *context, int do_now)
#  105|   {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def155]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_task.c: scope_hint: In function ‘flush_resalt_task_all’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_task.c:199:23: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(policy_name(policy_list_next(policy_list_new(dbconn))))’
#  197|   	while ((policy = policy_list_next(policylist))) {
#  198|               task = task_create(strdup(policy_name(policy)), TASK_CLASS_ENFORCER, TASK_TYPE_RESALT, perform_policy_resalt, engine, NULL, time_now());
#  199|->             status |= schedule_task(engine->taskq, task, 1, 0);
#  200|   	}
#  201|   	policy_list_free(policylist);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def156]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_task.c: scope_hint: In function ‘flush_resalt_task_now’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/policy/policy_resalt_task.c:224:23: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(policy_name(policy_list_next(policy_list_new(dbconn))))’
#  222|   	while ((policy = policy_list_next(policylist))) {
#  223|               task = task_create(strdup(policy_name(policy)), TASK_CLASS_ENFORCER, TASK_TYPE_RESALT, perform_policy_forceresalt, engine, NULL, time_now());
#  224|->             status |= schedule_task(engine->taskq, task, 1, 0);
#  225|   	}
#  226|   	policy_list_free(policylist);

Error: COMPILER_WARNING (CWE-563): [#def157]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_cmd.c: scope_hint: In function ‘run’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_cmd.c:61:39: warning[-Wunused-parameter]: unused parameter ‘argc’
#   61 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                   ~~~~^~~~
#   59|   
#   60|   static int
#   61|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   62|   {
#   63|       db_connection_t* dbconn = getconnectioncontext(context);

Error: COMPILER_WARNING (CWE-563): [#def158]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_cmd.c:61:51: warning[-Wunused-parameter]: unused parameter ‘argv’
#   61 | run(cmdhandler_ctx_type* context, int argc, char* argv[])
#      |                                             ~~~~~~^~~~~~
#   59|   
#   60|   static int
#   61|-> run(cmdhandler_ctx_type* context, int argc, char* argv[])
#   62|   {
#   63|       db_connection_t* dbconn = getconnectioncontext(context);

Error: COMPILER_WARNING (CWE-563): [#def159]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_task.c: scope_hint: In function ‘perform’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_task.c:40:20: warning[-Wunused-parameter]: unused parameter ‘task’
#   40 | perform(task_type* task, char const *zonename, void *userdata, void *context)
#      |         ~~~~~~~~~~~^~~~
#   38|   
#   39|   static time_t
#   40|-> perform(task_type* task, char const *zonename, void *userdata, void *context)
#   41|   {
#   42|       (void)userdata;

Error: COMPILER_WARNING (CWE-563): [#def160]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_task.c: scope_hint: In function ‘signconf_task_flush_zone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_task.c:76:64: warning[-Wunused-parameter]: unused parameter ‘dbconn’
#   76 | signconf_task_flush_zone(engine_type *engine, db_connection_t *dbconn,
#      |                                               ~~~~~~~~~~~~~~~~~^~~~~~
#   74|   
#   75|   void
#   76|-> signconf_task_flush_zone(engine_type *engine, db_connection_t *dbconn,
#   77|       const char* zonename)
#   78|   {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def161]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_task.c: scope_hint: In function ‘signconf_task_flush_zone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/signconf/signconf_task.c:81:12: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(zonename)’
#   79|       task_type* task = task_create(strdup(zonename), TASK_CLASS_ENFORCER,
#   80|           TASK_TYPE_SIGNCONF, perform, NULL, NULL, time_now());
#   81|->     (void) schedule_task(engine->taskq, task, 1, 0);
#   82|   }
#   83|   

Error: COMPILER_WARNING (CWE-843): [#def162]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c: scope_hint: In function ‘check_rng’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c:136:17: warning[-Wcast-function-type]: cast between incompatible function types from ‘int (*)(FILE *, const char *, ...)’ to ‘void (*)(void *, const char *, ...)’
#  136 |                 (xmlRelaxNGValidityErrorFunc) fprintf,
#      |                 ^
#  134|   
#  135|   	xmlRelaxNGSetParserErrors(rngpctx,
#  136|-> 		(xmlRelaxNGValidityErrorFunc) fprintf,
#  137|   		(xmlRelaxNGValidityWarningFunc) fprintf,
#  138|   		stderr);

Error: COMPILER_WARNING (CWE-843): [#def163]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c:137:17: warning[-Wcast-function-type]: cast between incompatible function types from ‘int (*)(FILE *, const char *, ...)’ to ‘void (*)(void *, const char *, ...)’
#  137 |                 (xmlRelaxNGValidityWarningFunc) fprintf,
#      |                 ^
#  135|   	xmlRelaxNGSetParserErrors(rngpctx,
#  136|   		(xmlRelaxNGValidityErrorFunc) fprintf,
#  137|-> 		(xmlRelaxNGValidityWarningFunc) fprintf,
#  138|   		stderr);
#  139|   

Error: COMPILER_WARNING (CWE-843): [#def164]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c:167:17: warning[-Wcast-function-type]: cast between incompatible function types from ‘int (*)(FILE *, const char *, ...)’ to ‘void (*)(void *, const char *, ...)’
#  167 |                 (xmlRelaxNGValidityErrorFunc) fprintf,
#      |                 ^
#  165|   
#  166|   	xmlRelaxNGSetValidErrors(rngctx,
#  167|-> 		(xmlRelaxNGValidityErrorFunc) fprintf,
#  168|   		(xmlRelaxNGValidityWarningFunc) fprintf,
#  169|   		stderr);

Error: COMPILER_WARNING (CWE-843): [#def165]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c:168:17: warning[-Wcast-function-type]: cast between incompatible function types from ‘int (*)(FILE *, const char *, ...)’ to ‘void (*)(void *, const char *, ...)’
#  168 |                 (xmlRelaxNGValidityWarningFunc) fprintf,
#      |                 ^
#  166|   	xmlRelaxNGSetValidErrors(rngctx,
#  167|   		(xmlRelaxNGValidityErrorFunc) fprintf,
#  168|-> 		(xmlRelaxNGValidityWarningFunc) fprintf,
#  169|   		stderr);
#  170|   

Error: COMPILER_WARNING: [#def166]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c: scope_hint: In function ‘check_zonelist’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c:1753:45: warning[-Wformat-overflow=]: ‘%s’ directive argument is null
# 1753 |                     dual_log("ERROR: Policy %s in zonelist does not exist!", policy_name);
#      |                                             ^~
# 1751|                   }
# 1752|                   if (!found) {
# 1753|->                     dual_log("ERROR: Policy %s in zonelist does not exist!", policy_name);
# 1754|                       status++;
# 1755|                   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def167]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c: scope_hint: In function ‘check_kasp’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/enforcer/src/utils/kc_helper.c:1851:31: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
# 1849|   		}
# 1850|   		for (j = i+1; j < policy_count; j++) {
# 1851|-> 			if ( (strcmp(policy_names[i], policy_names[j]) == 0) ) {
# 1852|   				dual_log("ERROR: Two policies exist with the same name (%s)", policy_names[i]);
# 1853|   				status += 1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def168]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/checks/hsmcheck.c: scope_hint: In function ‘main’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/checks/hsmcheck.c:83:22: warning[-Wanalyzer-malloc-leak]: leak of ‘config’
#   81|           switch (ch) {
#   82|           case 'c':
#   83|->             config = strdup(optarg);
#   84|               break;
#   85|           case 'g':

Error: COMPILER_WARNING (CWE-563): [#def169]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/bin/hsmutil.c: scope_hint: In function ‘cmd_copy’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/bin/hsmutil.c:281:11: warning[-Wunused-variable]: unused variable ‘repository’
#  281 |     char* repository;
#      |           ^~~~~~~~~~
#  279|       char* id;
#  280|       char* newid;
#  281|->     char* repository;
#  282|       int result;
#  283|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def170]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/bin/hsmutil.c: scope_hint: In function ‘main’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/bin/hsmutil.c:659:22: warning[-Wanalyzer-malloc-leak]: leak of ‘config’
#  657|           switch (ch) {
#  658|           case 'c':
#  659|->             config = strdup(optarg);
#  660|               break;
#  661|   	case 'f':

Error: GCC_ANALYZER_WARNING (CWE-476): [#def171]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘libhsm_key_new’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:804:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘key’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:49: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:1350:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘libhsm_key_new’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘libhsm_key_new’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘libhsm_key_new’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘libhsm_key_new’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:803:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:803:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:803:5: note: in expansion of macro ‘CHECKALLOC’
#  802|       libhsm_key_t *key;
#  803|       CHECKALLOC(key = malloc(sizeof(libhsm_key_t)));
#  804|->     key->modulename = NULL;
#  805|       key->private_key = 0;
#  806|       key->public_key = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def172]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘hsm_hex_parse’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:1352:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bytes’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:1350:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:1350:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:1350:5: note: in expansion of macro ‘CHECKALLOC’
# 1350|       CHECKALLOC(bytes = malloc(*len));
# 1351|       for (i = 0; i < *len; i++) {
# 1352|->         bytes[i] = ldns_hexdigit_to_int(hex[2*i]) * 16 +
# 1353|                      ldns_hexdigit_to_int(hex[2*i+1]);
# 1354|       }

Error: CPPCHECK_WARNING (CWE-401): [#def173]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:2505: error[memleakOnRealloc]: Common realloc mistake: 'keys' nulled but not freed upon failure
# 2503|           session_keys = hsm_list_keys_session(ctx, ctx->session[i],
# 2504|                                                &cur_key_count);
# 2505|->         CHECKALLOC(keys = realloc(keys,
# 2506|                          (key_count + cur_key_count) * sizeof(libhsm_key_t *)));
# 2507|           for (j = 0; j < cur_key_count; j++) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def174]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘hsm_get_key_info’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3193:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘key_info’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3191:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3191:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3191:5: note: in expansion of macro ‘CHECKALLOC’
# 3191|       CHECKALLOC(key_info = malloc(sizeof(libhsm_key_info_t)));
# 3192|   
# 3193|->     key_info->id = hsm_get_key_id(ctx, key);
# 3194|       if (key_info->id == NULL) {
# 3195|           key_info->id = strdup("");

Error: COMPILER_WARNING: [#def175]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘hsm_get_error’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3524:18: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 511 bytes into a region of size between 501 and 510
# 3524 |             "%s: %s",
#      |                  ^~
/usr/include/bits/stdio2.h:68:10: note: ‘__snprintf_chk’ output 3 or more bytes (assuming 523) into a destination of size 512
#   68 |   return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   69 |                                    __glibc_objsize (__s), __fmt,
#      |                                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   70 |                                    __va_arg_pack ());
#      |                                    ~~~~~~~~~~~~~~~~~
# 3522|   
# 3523|           snprintf(message, HSM_ERROR_MSGSIZE,
# 3524|->             "%s: %s",
# 3525|               ctx->error_action ? ctx->error_action : "unknown()",
# 3526|               ctx->error_message[0] ? ctx->error_message : "unknown error");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def176]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘keycache_lookup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3687:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘node’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:1350:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘keycache_lookup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘keycache_lookup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘keycache_lookup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘keycache_lookup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:803:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘keycache_lookup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c: scope_hint: In function ‘keycache_lookup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3686:13: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3686:13: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/libhsm/src/lib/libhsm.c:3686:13: note: in expansion of macro ‘CHECKALLOC’
# 3685|           } else {
# 3686|               CHECKALLOC(node = malloc(sizeof(ldns_rbnode_t)));
# 3687|->             node->key = strdup(locator);
# 3688|               node->data = key;
# 3689|               pthread_mutex_lock(ctx->keycache_lock);

Error: COMPILER_WARNING (CWE-195): [#def177]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapi.c: scope_hint: In function ‘adapi_process_rr’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapi.c:329:31: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘size_t’ {aka ‘long unsigned int’}
#  329 |             for (int i = 0; i < strlen(str); i++) {
#      |                               ^
#  327|               str[(strlen(str))-1] = '\0';
#  328|               /* replace tabs with white space */
#  329|->             for (int i = 0; i < strlen(str); i++) {
#  330|                   if (str[i] == '\t') {
#  331|                       str[i] = ' ';

Error: GCC_ANALYZER_WARNING (CWE-476): [#def178]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.c: scope_hint: In function ‘adapter_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.c:52:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘adapter’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.h:48: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.c:32: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.c:51:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.c:51:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.c:51:5: note: in expansion of macro ‘CHECKALLOC’
#   50|       adapter_type* adapter = NULL;
#   51|       CHECKALLOC(adapter = (adapter_type*) malloc(sizeof(adapter_type)));
#   52|->     adapter->type = type;
#   53|       adapter->inbound = in;
#   54|       adapter->error = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def179]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c: scope_hint: In function ‘dnsin_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:506:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘addns’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapi.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:505:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:505:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:505:5: note: in expansion of macro ‘CHECKALLOC’
#  504|       dnsin_type* addns = NULL;
#  505|       CHECKALLOC(addns = (dnsin_type*) malloc(sizeof(dnsin_type)));
#  506|->     addns->request_xfr = NULL;
#  507|       addns->allow_notify = NULL;
#  508|       addns->tsig = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def180]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c: scope_hint: In function ‘dnsout_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:522:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘addns’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:521:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:521:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:521:5: note: in expansion of macro ‘CHECKALLOC’
#  520|       dnsout_type* addns = NULL;
#  521|       CHECKALLOC(addns = (dnsout_type*) malloc(sizeof(dnsout_type)));
#  522|->     addns->provide_xfr = NULL;
#  523|       addns->do_notify = NULL;
#  524|       addns->tsig = NULL;

Error: COMPILER_WARNING (CWE-563): [#def181]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c: scope_hint: In function ‘dnsin_update’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.c:570:17: warning[-Wunused-variable]: unused variable ‘new_addns’
#  570 |     dnsin_type* new_addns = NULL;
#      |                 ^~~~~~~~~
#  568|   dnsin_update(dnsin_type** addns, const char* filename, time_t* last_mod)
#  569|   {
#  570|->     dnsin_type* new_addns = NULL;
#  571|       time_t st_mtime = 0;
#  572|       ods_status status = ODS_STATUS_OK;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def182]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.c: scope_hint: In function ‘engine_config’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.c:73:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ecfg’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.h:35: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.c:71:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.c:71:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.c:71:9: note: in expansion of macro ‘CHECKALLOC’
#   71|           CHECKALLOC(ecfg = (engineconfig_type*) malloc(sizeof(engineconfig_type)));
#   72|           /* get values */
#   73|->         ecfg->cfg_filename = strdup(cfgfile);
#   74|           ecfg->zonelist_filename = parse_conf_zonelist_filename(cfgfile);
#   75|           ecfg->log_filename = parse_conf_log_filename(cfgfile);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def183]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.h:40: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c: scope_hint: In function ‘dnshandler_start’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:174:53: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:170:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:174:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:174:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:174:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
#  172|           struct tcp_accept_data* data = NULL;
#  173|           netio_handler_type* handler = NULL;
#  174|->         CHECKALLOC(data = (struct tcp_accept_data*) malloc(sizeof(struct tcp_accept_data)));
#  175|           if (!data) {
#  176|               ods_log_error("[%s] unable to start: allocator_alloc() "

Error: GCC_ANALYZER_WARNING (CWE-401): [#def184]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:209:5: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:170:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:174:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:174:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:174:9: note: in expansion of macro ‘CHECKALLOC’
#  207|       }
#  208|       /* shutdown */
#  209|->     ods_log_debug("[%s] shutdown", dnsh_str);
#  210|   }
#  211|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def185]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c: scope_hint: In function ‘dnshandler_cleanup.part.0’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:290:41: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*dnshandler_1(D)->socklist.udp[i].s’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:57:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:71:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c:71:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/dnshandler.c: scope_hint: In function ‘dnshandler_cleanup.part.0’
#  288|           if (dnshandler->tcp_accept_handlers)
#  289|               free(dnshandler->tcp_accept_handlers[i].user_data);
#  290|->         if (dnshandler->socklist->udp[i].s != -1) {
#  291|               close(dnshandler->socklist->udp[i].s);
#  292|               freeaddrinfo((void*)dnshandler->socklist->udp[i].addr);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def186]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:77:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘engine’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.h:35: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:76:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:76:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:76:5: note: in expansion of macro ‘CHECKALLOC’
#   75|       engine_type* engine;
#   76|       CHECKALLOC(engine = (engine_type*) malloc(sizeof(engine_type)));
#   77|->     engine->config = NULL;
#   78|       engine->workers = NULL;
#   79|       engine->cmdhandler = NULL;

Error: COMPILER_WARNING (CWE-252): [#def187]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_create_workers’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:230:9: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  230 |         asprintf(&name, "worker[%d]", i+1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  228|       CHECKALLOC(engine->workers = (worker_type**) malloc(numTotalWorkers * sizeof(worker_type*)));
#  229|       for (i=0; i < engine->config->num_worker_threads; i++) {
#  230|->         asprintf(&name, "worker[%d]", i+1);
#  231|           engine->workers[threadCount++] = worker_create(name, engine->taskq);
#  232|       }

Error: COMPILER_WARNING (CWE-252): [#def188]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:234:9: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  234 |         asprintf(&name, "drudger[%d]", i+1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  232|       }
#  233|       for (i=0; i < engine->config->num_signer_threads; i++) {
#  234|->         asprintf(&name, "drudger[%d]", i+1);
#  235|           engine->workers[threadCount++] = worker_create(name, engine->taskq);
#  236|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def189]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_start_workers’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:250:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘context’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:249:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:249:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:249:9: note: in expansion of macro ‘CHECKALLOC’
#  248|       for (i=0; i < engine->config->num_worker_threads; i++,threadCount++) {
#  249|           CHECKALLOC(context = malloc(sizeof(struct worker_context)));
#  250|->         context->engine = engine;
#  251|           context->worker = engine->workers[threadCount];
#  252|           context->signq = engine->taskq->signq;

Error: COMPILER_WARNING (CWE-563): [#def190]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_wakeup_workers’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:293:12: warning[-Wunused-variable]: unused variable ‘i’
#  293 |     size_t i = 0;
#      |            ^
#  291|   engine_wakeup_workers(engine_type* engine)
#  292|   {
#  293|->     size_t i = 0;
#  294|       ods_log_assert(engine);
#  295|       ods_log_assert(engine->config);

Error: COMPILER_WARNING (CWE-563): [#def191]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:340:9: warning[-Wunused-variable]: unused variable ‘fd’
#  340 |     int fd, error;
#      |         ^~
#  338|       int pipefd[2];
#  339|       char buff = '\0';
#  340|->     int fd, error;
#  341|   
#  342|       ods_log_debug("[%s] setup signer engine", engine_str);

Error: COMPILER_WARNING (CWE-563): [#def192]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:340:13: warning[-Wunused-variable]: unused variable ‘error’
#  340 |     int fd, error;
#      |             ^~~~~
#  338|       int pipefd[2];
#  339|       char buff = '\0';
#  340|->     int fd, error;
#  341|   
#  342|       ods_log_debug("[%s] setup signer engine", engine_str);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def193]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:344:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[0]’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:188:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/log.h:207:19: note: in definition of macro ‘ods_log_assert’
#  342|       ods_log_debug("[%s] setup signer engine", engine_str);
#  343|       if (!engine || !engine->config) {
#  344|->         return ODS_STATUS_ASSERT_ERR;
#  345|       }
#  346|       /* set edns */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def194]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:344:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[1]’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:188:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/log.h:207:19: note: in definition of macro ‘ods_log_assert’
#  342|       ods_log_debug("[%s] setup signer engine", engine_str);
#  343|       if (!engine || !engine->config) {
#  344|->         return ODS_STATUS_ASSERT_ERR;
#  345|       }
#  346|       /* set edns */

Error: COMPILER_WARNING (CWE-477): [#def195]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:410:17: warning[-Wdeprecated-declarations]: ‘xmlCleanupGlobals’ is deprecated
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:52: included_from: Included from here.
/usr/include/libxml2/libxml/parser.h:926:17: note: declared here
#  408|                   engine = NULL;
#  409|                   xmlCleanupParser();
#  410|->                 xmlCleanupGlobals();
#  411|                   close(pipefd[1]);
#  412|                   while (read(pipefd[0], &buff, 1) != -1) {

Error: COMPILER_WARNING (CWE-252): [#def196]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:430:13: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  430 |             write(pipefd[1], "\0", 1);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  428|               ods_writen(pipefd[1], err, strlen(err));
#  429|               ods_writeln(pipefd[1], strerror(errno));
#  430|->             write(pipefd[1], "\0", 1);
#  431|               close(pipefd[1]);
#  432|               return ODS_STATUS_SETSID_ERR;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def197]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:439:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pipefd[1]’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:188:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/log.h:207:19: note: in definition of macro ‘ods_log_assert’
#  437|       if (util_write_pidfile(engine->config->pid_filename, engine->pid) == -1) {
#  438|           if (engine->daemonize) {
#  439|->             ods_writeln(pipefd[1], "Unable to write pid file");
#  440|               write(pipefd[1], "\0", 1);
#  441|               close(pipefd[1]);

Error: COMPILER_WARNING (CWE-252): [#def198]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:440:13: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  440 |             write(pipefd[1], "\0", 1);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#  438|           if (engine->daemonize) {
#  439|               ods_writeln(pipefd[1], "Unable to write pid file");
#  440|->             write(pipefd[1], "\0", 1);
#  441|               close(pipefd[1]);
#  442|           }

Error: COMPILER_WARNING (CWE-843): [#def199]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:449:25: warning[-Wcast-function-type]: cast between incompatible function types from ‘void * (*)(sig_atomic_t)’ {aka ‘void * (*)(int)’} to ‘void (*)(int)’
#  449 |     action.sa_handler = (void (*)(int))signal_handler;
#      |                         ^
#  447|           (unsigned long) engine->pid);
#  448|       /* catch signals */
#  449|->     action.sa_handler = (void (*)(int))signal_handler;
#  450|       sigfillset(&action.sa_mask);
#  451|       action.sa_flags = 0;

Error: COMPILER_WARNING (CWE-252): [#def200]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:469:9: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  469 |         write(pipefd[1], "\1", 1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~
#  467|       tsig_handler_init();
#  468|       if (engine->daemonize) {
#  469|->         write(pipefd[1], "\1", 1);
#  470|           close(pipefd[1]);
#  471|       }

Error: COMPILER_WARNING (CWE-195): [#def201]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c: scope_hint: In function ‘engine_cleanup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.c:901:25: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘long unsigned int’
#  901 |             for (i=0; i < (size_t) numTotalWorkers; i++) {
#      |                         ^
#  899|           numTotalWorkers = engine->config->num_worker_threads + engine->config->num_signer_threads;
#  900|           if (engine->workers) {
#  901|->             for (i=0; i < (size_t) numTotalWorkers; i++) {
#  902|                   worker_cleanup(engine->workers[i]);
#  903|               }

Error: COMPILER_WARNING (CWE-563): [#def202]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_help’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:44:64: warning[-Wunused-parameter]: unused parameter ‘cmd’
#   44 | cmdhandler_handle_cmd_help(cmdhandler_ctx_type* context, char *cmd)
#      |                                                          ~~~~~~^~~
#   42|    */
#   43|   static int
#   44|-> cmdhandler_handle_cmd_help(cmdhandler_ctx_type* context, char *cmd)
#   45|   {
#   46|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def203]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_zones’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:94:65: warning[-Wunused-parameter]: unused parameter ‘cmd’
#   94 | cmdhandler_handle_cmd_zones(cmdhandler_ctx_type* context, char *cmd)
#      |                                                           ~~~~~~^~~
#   92|    */
#   93|   static int
#   94|-> cmdhandler_handle_cmd_zones(cmdhandler_ctx_type* context, char *cmd)
#   95|   {
#   96|       int sockfd = context->sockfd;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def204]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘getlong’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:302:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘endptr’
#  300|       *result = strtol(s, &end, 0);
#  301|       if(errno == ERANGE) {
#  302|->         *endptr = NULL;
#  303|           return -1;
#  304|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def205]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:321:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘endptr’
#  319|               return 0;
#  320|       } else {
#  321|->         *endptr = end;
#  322|           return -1;
#  323|       }

Error: COMPILER_WARNING (CWE-563): [#def206]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_sign’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:337:11: warning[-Wunused-but-set-variable]: variable ‘signtime’ set but not used
#  337 |     char* signtime = NULL;
#      |           ^~~~~~~~
#  335|       int force_serial = 0;
#  336|       long serial = 0;
#  337|->     char* signtime = NULL;
#  338|       int opt;
#  339|   

Error: COMPILER_WARNING (CWE-563): [#def207]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_queue’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:492:65: warning[-Wunused-parameter]: unused parameter ‘cmd’
#  492 | cmdhandler_handle_cmd_queue(cmdhandler_ctx_type* context, char *cmd)
#      |                                                           ~~~~~~^~~
#  490|    */
#  491|   static int
#  492|-> cmdhandler_handle_cmd_queue(cmdhandler_ctx_type* context, char *cmd)
#  493|   {
#  494|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def208]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_flush’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:543:65: warning[-Wunused-parameter]: unused parameter ‘cmd’
#  543 | cmdhandler_handle_cmd_flush(cmdhandler_ctx_type* context, char *cmd)
#      |                                                           ~~~~~~^~~
#  541|    */
#  542|   static int
#  543|-> cmdhandler_handle_cmd_flush(cmdhandler_ctx_type* context, char *cmd)
#  544|   {
#  545|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def209]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_reload’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:564:66: warning[-Wunused-parameter]: unused parameter ‘cmd’
#  564 | cmdhandler_handle_cmd_reload(cmdhandler_ctx_type* context, char *cmd)
#      |                                                            ~~~~~~^~~
#  562|    */
#  563|   static int
#  564|-> cmdhandler_handle_cmd_reload(cmdhandler_ctx_type* context, char *cmd)
#  565|   {
#  566|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def210]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_stop’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:586:64: warning[-Wunused-parameter]: unused parameter ‘cmd’
#  586 | cmdhandler_handle_cmd_stop(cmdhandler_ctx_type* context, char *cmd)
#      |                                                          ~~~~~~^~~
#  584|    */
#  585|   static int
#  586|-> cmdhandler_handle_cmd_stop(cmdhandler_ctx_type* context, char *cmd)
#  587|   {
#  588|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def211]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_start’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:607:65: warning[-Wunused-parameter]: unused parameter ‘cmd’
#  607 | cmdhandler_handle_cmd_start(cmdhandler_ctx_type* context, char *cmd)
#      |                                                           ~~~~~~^~~
#  605|    */
#  606|   static int
#  607|-> cmdhandler_handle_cmd_start(cmdhandler_ctx_type* context, char *cmd)
#  608|   {
#  609|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-563): [#def212]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_running’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:622:67: warning[-Wunused-parameter]: unused parameter ‘cmd’
#  622 | cmdhandler_handle_cmd_running(cmdhandler_ctx_type* context, char *cmd)
#      |                                                             ~~~~~~^~~
#  620|    */
#  621|   static int
#  622|-> cmdhandler_handle_cmd_running(cmdhandler_ctx_type* context, char *cmd)
#  623|   {
#  624|       int sockfd = context->sockfd;

Error: COMPILER_WARNING (CWE-1164): [#def213]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:655:1: warning[-Wunused-function]: ‘cmdhandler_handle_cmd_error’ defined but not used
#  655 | cmdhandler_handle_cmd_error(int sockfd, cmdhandler_ctx_type* context, char* str)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
#  653|    */
#  654|   static void
#  655|-> cmdhandler_handle_cmd_error(int sockfd, cmdhandler_ctx_type* context, char* str)
#  656|   {
#  657|       char buf[ODS_SE_MAXLINE];

Error: COMPILER_WARNING (CWE-563): [#def214]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: In function ‘cmdhandler_handle_cmd_error’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:655:62: warning[-Wunused-parameter]: unused parameter ‘context’
#  655 | cmdhandler_handle_cmd_error(int sockfd, cmdhandler_ctx_type* context, char* str)
#      |                                         ~~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  653|    */
#  654|   static void
#  655|-> cmdhandler_handle_cmd_error(int sockfd, cmdhandler_ctx_type* context, char* str)
#  656|   {
#  657|       char buf[ODS_SE_MAXLINE];

Error: COMPILER_WARNING (CWE-909): [#def215]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c: scope_hint: At top level
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:712:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  712 | struct cmd_func_block helpCmdDef       = { "help",       NULL, NULL, NULL, &cmdhandler_handle_cmd_help, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.h:41: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:10: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  710|   }
#  711|   
#  712|-> struct cmd_func_block helpCmdDef       = { "help",       NULL, NULL, NULL, &cmdhandler_handle_cmd_help, NULL };
#  713|   struct cmd_func_block zonesCmdDef      = { "zones",      NULL, NULL, NULL, &cmdhandler_handle_cmd_zones, NULL };
#  714|   struct cmd_func_block signCmdDef       = { "sign",       NULL, NULL, NULL, NULL, &cmdhandler_handle_cmd_sign };

Error: COMPILER_WARNING (CWE-909): [#def216]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:713:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  713 | struct cmd_func_block zonesCmdDef      = { "zones",      NULL, NULL, NULL, &cmdhandler_handle_cmd_zones, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  711|   
#  712|   struct cmd_func_block helpCmdDef       = { "help",       NULL, NULL, NULL, &cmdhandler_handle_cmd_help, NULL };
#  713|-> struct cmd_func_block zonesCmdDef      = { "zones",      NULL, NULL, NULL, &cmdhandler_handle_cmd_zones, NULL };
#  714|   struct cmd_func_block signCmdDef       = { "sign",       NULL, NULL, NULL, NULL, &cmdhandler_handle_cmd_sign };
#  715|   struct cmd_func_block clearCmdDef      = { "clear",      NULL, NULL, NULL, &cmdhandler_handle_cmd_clear, NULL };

Error: COMPILER_WARNING (CWE-909): [#def217]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:714:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  714 | struct cmd_func_block signCmdDef       = { "sign",       NULL, NULL, NULL, NULL, &cmdhandler_handle_cmd_sign };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  712|   struct cmd_func_block helpCmdDef       = { "help",       NULL, NULL, NULL, &cmdhandler_handle_cmd_help, NULL };
#  713|   struct cmd_func_block zonesCmdDef      = { "zones",      NULL, NULL, NULL, &cmdhandler_handle_cmd_zones, NULL };
#  714|-> struct cmd_func_block signCmdDef       = { "sign",       NULL, NULL, NULL, NULL, &cmdhandler_handle_cmd_sign };
#  715|   struct cmd_func_block clearCmdDef      = { "clear",      NULL, NULL, NULL, &cmdhandler_handle_cmd_clear, NULL };
#  716|   struct cmd_func_block queueCmdDef      = { "queue",      NULL, NULL, NULL, &cmdhandler_handle_cmd_queue, NULL };

Error: COMPILER_WARNING (CWE-909): [#def218]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:715:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  715 | struct cmd_func_block clearCmdDef      = { "clear",      NULL, NULL, NULL, &cmdhandler_handle_cmd_clear, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  713|   struct cmd_func_block zonesCmdDef      = { "zones",      NULL, NULL, NULL, &cmdhandler_handle_cmd_zones, NULL };
#  714|   struct cmd_func_block signCmdDef       = { "sign",       NULL, NULL, NULL, NULL, &cmdhandler_handle_cmd_sign };
#  715|-> struct cmd_func_block clearCmdDef      = { "clear",      NULL, NULL, NULL, &cmdhandler_handle_cmd_clear, NULL };
#  716|   struct cmd_func_block queueCmdDef      = { "queue",      NULL, NULL, NULL, &cmdhandler_handle_cmd_queue, NULL };
#  717|   struct cmd_func_block flushCmdDef      = { "flush",      NULL, NULL, NULL, &cmdhandler_handle_cmd_flush, NULL };

Error: COMPILER_WARNING (CWE-909): [#def219]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:716:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  716 | struct cmd_func_block queueCmdDef      = { "queue",      NULL, NULL, NULL, &cmdhandler_handle_cmd_queue, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  714|   struct cmd_func_block signCmdDef       = { "sign",       NULL, NULL, NULL, NULL, &cmdhandler_handle_cmd_sign };
#  715|   struct cmd_func_block clearCmdDef      = { "clear",      NULL, NULL, NULL, &cmdhandler_handle_cmd_clear, NULL };
#  716|-> struct cmd_func_block queueCmdDef      = { "queue",      NULL, NULL, NULL, &cmdhandler_handle_cmd_queue, NULL };
#  717|   struct cmd_func_block flushCmdDef      = { "flush",      NULL, NULL, NULL, &cmdhandler_handle_cmd_flush, NULL };
#  718|   struct cmd_func_block updateCmdDef     = { "update",     NULL, NULL, NULL, &cmdhandler_handle_cmd_update, NULL };

Error: COMPILER_WARNING (CWE-909): [#def220]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:717:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  717 | struct cmd_func_block flushCmdDef      = { "flush",      NULL, NULL, NULL, &cmdhandler_handle_cmd_flush, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  715|   struct cmd_func_block clearCmdDef      = { "clear",      NULL, NULL, NULL, &cmdhandler_handle_cmd_clear, NULL };
#  716|   struct cmd_func_block queueCmdDef      = { "queue",      NULL, NULL, NULL, &cmdhandler_handle_cmd_queue, NULL };
#  717|-> struct cmd_func_block flushCmdDef      = { "flush",      NULL, NULL, NULL, &cmdhandler_handle_cmd_flush, NULL };
#  718|   struct cmd_func_block updateCmdDef     = { "update",     NULL, NULL, NULL, &cmdhandler_handle_cmd_update, NULL };
#  719|   struct cmd_func_block stopCmdDef       = { "stop",       NULL, NULL, NULL, &cmdhandler_handle_cmd_stop, NULL };

Error: COMPILER_WARNING (CWE-909): [#def221]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:718:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  718 | struct cmd_func_block updateCmdDef     = { "update",     NULL, NULL, NULL, &cmdhandler_handle_cmd_update, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  716|   struct cmd_func_block queueCmdDef      = { "queue",      NULL, NULL, NULL, &cmdhandler_handle_cmd_queue, NULL };
#  717|   struct cmd_func_block flushCmdDef      = { "flush",      NULL, NULL, NULL, &cmdhandler_handle_cmd_flush, NULL };
#  718|-> struct cmd_func_block updateCmdDef     = { "update",     NULL, NULL, NULL, &cmdhandler_handle_cmd_update, NULL };
#  719|   struct cmd_func_block stopCmdDef       = { "stop",       NULL, NULL, NULL, &cmdhandler_handle_cmd_stop, NULL };
#  720|   struct cmd_func_block startCmdDef      = { "start",      NULL, NULL, NULL, &cmdhandler_handle_cmd_start, NULL };

Error: COMPILER_WARNING (CWE-909): [#def222]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:719:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  719 | struct cmd_func_block stopCmdDef       = { "stop",       NULL, NULL, NULL, &cmdhandler_handle_cmd_stop, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  717|   struct cmd_func_block flushCmdDef      = { "flush",      NULL, NULL, NULL, &cmdhandler_handle_cmd_flush, NULL };
#  718|   struct cmd_func_block updateCmdDef     = { "update",     NULL, NULL, NULL, &cmdhandler_handle_cmd_update, NULL };
#  719|-> struct cmd_func_block stopCmdDef       = { "stop",       NULL, NULL, NULL, &cmdhandler_handle_cmd_stop, NULL };
#  720|   struct cmd_func_block startCmdDef      = { "start",      NULL, NULL, NULL, &cmdhandler_handle_cmd_start, NULL };
#  721|   struct cmd_func_block reloadCmdDef     = { "reload",     NULL, NULL, NULL, &cmdhandler_handle_cmd_reload, NULL };

Error: COMPILER_WARNING (CWE-909): [#def223]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:720:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  720 | struct cmd_func_block startCmdDef      = { "start",      NULL, NULL, NULL, &cmdhandler_handle_cmd_start, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  718|   struct cmd_func_block updateCmdDef     = { "update",     NULL, NULL, NULL, &cmdhandler_handle_cmd_update, NULL };
#  719|   struct cmd_func_block stopCmdDef       = { "stop",       NULL, NULL, NULL, &cmdhandler_handle_cmd_stop, NULL };
#  720|-> struct cmd_func_block startCmdDef      = { "start",      NULL, NULL, NULL, &cmdhandler_handle_cmd_start, NULL };
#  721|   struct cmd_func_block reloadCmdDef     = { "reload",     NULL, NULL, NULL, &cmdhandler_handle_cmd_reload, NULL };
#  722|   struct cmd_func_block retransferCmdDef = { "retransfer", NULL, NULL, NULL, &cmdhandler_handle_cmd_retransfer, NULL };

Error: COMPILER_WARNING (CWE-909): [#def224]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:721:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  721 | struct cmd_func_block reloadCmdDef     = { "reload",     NULL, NULL, NULL, &cmdhandler_handle_cmd_reload, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  719|   struct cmd_func_block stopCmdDef       = { "stop",       NULL, NULL, NULL, &cmdhandler_handle_cmd_stop, NULL };
#  720|   struct cmd_func_block startCmdDef      = { "start",      NULL, NULL, NULL, &cmdhandler_handle_cmd_start, NULL };
#  721|-> struct cmd_func_block reloadCmdDef     = { "reload",     NULL, NULL, NULL, &cmdhandler_handle_cmd_reload, NULL };
#  722|   struct cmd_func_block retransferCmdDef = { "retransfer", NULL, NULL, NULL, &cmdhandler_handle_cmd_retransfer, NULL };
#  723|   struct cmd_func_block runningCmdDef    = { "running",    NULL, NULL, NULL, &cmdhandler_handle_cmd_running, NULL };

Error: COMPILER_WARNING (CWE-909): [#def225]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:722:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  722 | struct cmd_func_block retransferCmdDef = { "retransfer", NULL, NULL, NULL, &cmdhandler_handle_cmd_retransfer, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  720|   struct cmd_func_block startCmdDef      = { "start",      NULL, NULL, NULL, &cmdhandler_handle_cmd_start, NULL };
#  721|   struct cmd_func_block reloadCmdDef     = { "reload",     NULL, NULL, NULL, &cmdhandler_handle_cmd_reload, NULL };
#  722|-> struct cmd_func_block retransferCmdDef = { "retransfer", NULL, NULL, NULL, &cmdhandler_handle_cmd_retransfer, NULL };
#  723|   struct cmd_func_block runningCmdDef    = { "running",    NULL, NULL, NULL, &cmdhandler_handle_cmd_running, NULL };
#  724|   struct cmd_func_block verbosityCmdDef  = { "verbosity",  NULL, NULL, NULL, &cmdhandler_handle_cmd_verbosity, NULL };

Error: COMPILER_WARNING (CWE-909): [#def226]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:723:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  723 | struct cmd_func_block runningCmdDef    = { "running",    NULL, NULL, NULL, &cmdhandler_handle_cmd_running, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  721|   struct cmd_func_block reloadCmdDef     = { "reload",     NULL, NULL, NULL, &cmdhandler_handle_cmd_reload, NULL };
#  722|   struct cmd_func_block retransferCmdDef = { "retransfer", NULL, NULL, NULL, &cmdhandler_handle_cmd_retransfer, NULL };
#  723|-> struct cmd_func_block runningCmdDef    = { "running",    NULL, NULL, NULL, &cmdhandler_handle_cmd_running, NULL };
#  724|   struct cmd_func_block verbosityCmdDef  = { "verbosity",  NULL, NULL, NULL, &cmdhandler_handle_cmd_verbosity, NULL };
#  725|   struct cmd_func_block timeleapCmdDef   = { "time leap",  NULL, NULL, NULL, &cmdhandler_handle_cmd_timeleap, NULL };

Error: COMPILER_WARNING (CWE-909): [#def227]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:724:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  724 | struct cmd_func_block verbosityCmdDef  = { "verbosity",  NULL, NULL, NULL, &cmdhandler_handle_cmd_verbosity, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  722|   struct cmd_func_block retransferCmdDef = { "retransfer", NULL, NULL, NULL, &cmdhandler_handle_cmd_retransfer, NULL };
#  723|   struct cmd_func_block runningCmdDef    = { "running",    NULL, NULL, NULL, &cmdhandler_handle_cmd_running, NULL };
#  724|-> struct cmd_func_block verbosityCmdDef  = { "verbosity",  NULL, NULL, NULL, &cmdhandler_handle_cmd_verbosity, NULL };
#  725|   struct cmd_func_block timeleapCmdDef   = { "time leap",  NULL, NULL, NULL, &cmdhandler_handle_cmd_timeleap, NULL };
#  726|   

Error: COMPILER_WARNING (CWE-909): [#def228]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signercommands.c:725:8: warning[-Wmissing-field-initializers]: missing initializer for field ‘names’ of ‘struct cmd_func_block’
#  725 | struct cmd_func_block timeleapCmdDef   = { "time leap",  NULL, NULL, NULL, &cmdhandler_handle_cmd_timeleap, NULL };
#      |        ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/cmdhandler.h:73:12: note: ‘names’ declared here
#   73 |     char** names;
#      |            ^~~~~
#  723|   struct cmd_func_block runningCmdDef    = { "running",    NULL, NULL, NULL, &cmdhandler_handle_cmd_running, NULL };
#  724|   struct cmd_func_block verbosityCmdDef  = { "verbosity",  NULL, NULL, NULL, &cmdhandler_handle_cmd_verbosity, NULL };
#  725|-> struct cmd_func_block timeleapCmdDef   = { "time leap",  NULL, NULL, NULL, &cmdhandler_handle_cmd_timeleap, NULL };
#  726|   
#  727|   struct cmd_func_block* signcommands[] = {

Error: COMPILER_WARNING (CWE-563): [#def229]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘worker_check_jobs’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:135:61: warning[-Wunused-parameter]: unused parameter ‘ntasks’
#  135 | worker_check_jobs(worker_type* worker, task_type* task, int ntasks, long ntasksfailed)
#      |                                                         ~~~~^~~~~~
#  133|    */
#  134|   static ods_status
#  135|-> worker_check_jobs(worker_type* worker, task_type* task, int ntasks, long ntasksfailed)
#  136|   {
#  137|       ods_log_assert(worker);

Error: COMPILER_WARNING (CWE-563): [#def230]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘do_readsignconf’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:209:46: warning[-Wunused-parameter]: unused parameter ‘zonename’
#  209 | do_readsignconf(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#      |                                  ~~~~~~~~~~~~^~~~~~~~
#  207|   
#  208|   time_t
#  209|-> do_readsignconf(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#  210|   {
#  211|       struct worker_context* context = contextarg;

Error: COMPILER_WARNING (CWE-563): [#def231]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘do_forcereadsignconf’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:239:33: warning[-Wunused-parameter]: unused parameter ‘task’
#  239 | do_forcereadsignconf(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#      |                      ~~~~~~~~~~~^~~~
#  237|   
#  238|   time_t
#  239|-> do_forcereadsignconf(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#  240|   {
#  241|       struct worker_context* context = contextarg;

Error: COMPILER_WARNING (CWE-563): [#def232]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:239:51: warning[-Wunused-parameter]: unused parameter ‘zonename’
#  239 | do_forcereadsignconf(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#      |                                       ~~~~~~~~~~~~^~~~~~~~
#  237|   
#  238|   time_t
#  239|-> do_forcereadsignconf(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#  240|   {
#  241|       struct worker_context* context = contextarg;

Error: COMPILER_WARNING (CWE-563): [#def233]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘do_signzone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:268:42: warning[-Wunused-parameter]: unused parameter ‘zonename’
#  268 | do_signzone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#      |                              ~~~~~~~~~~~~^~~~~~~~
#  266|   
#  267|   time_t
#  268|-> do_signzone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#  269|   {
#  270|       struct worker_context* context = contextarg;

Error: COMPILER_WARNING (CWE-563): [#def234]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘do_readzone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:352:42: warning[-Wunused-parameter]: unused parameter ‘zonename’
#  352 | do_readzone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#      |                              ~~~~~~~~~~~~^~~~~~~~
#  350|   
#  351|   time_t
#  352|-> do_readzone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#  353|   {
#  354|       ods_status status = ODS_STATUS_OK;

Error: CPPCHECK_WARNING (CWE-758): [#def235]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:388: error[missingReturn]: Found an exit path from function with non-void return type that has missing return statement
#  386|                   return schedule_DEFER;
#  387|               }
#  388|->         }
#  389|       } else {
#  390|           /* unscheduling an existing sign task should no be necessary.  After a read (this action)

Error: COMPILER_WARNING (CWE-393): [#def236]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘do_readzone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:405:1: warning[-Wreturn-type]: control reaches end of non-void function
#  405 | }
#      | ^
#  403|           return schedule_SUCCESS;
#  404|       }
#  405|-> }
#  406|   
#  407|   time_t

Error: COMPILER_WARNING (CWE-563): [#def237]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘do_forcereadzone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:408:47: warning[-Wunused-parameter]: unused parameter ‘zonename’
#  408 | do_forcereadzone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#      |                                   ~~~~~~~~~~~~^~~~~~~~
#  406|   
#  407|   time_t
#  408|-> do_forcereadzone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#  409|   {
#  410|       ods_status status = ODS_STATUS_OK;

Error: COMPILER_WARNING (CWE-563): [#def238]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c: scope_hint: In function ‘do_writezone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/signertasks.c:457:43: warning[-Wunused-parameter]: unused parameter ‘zonename’
#  457 | do_writezone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#      |                               ~~~~~~~~~~~~^~~~~~~~
#  455|   
#  456|   time_t
#  457|-> do_writezone(task_type* task, const char* zonename, void* zonearg, void *contextarg)
#  458|   {
#  459|       struct worker_context* context = contextarg;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def239]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/xfrhandler.c: scope_hint: In function ‘xfrhandler_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/xfrhandler.c:56:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xfrh’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.h:35: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.h:40: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/xfrhandler.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/xfrhandler.c:55:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/xfrhandler.c:55:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/xfrhandler.c:55:5: note: in expansion of macro ‘CHECKALLOC’
#   54|       xfrhandler_type* xfrh = NULL;
#   55|       CHECKALLOC(xfrh = (xfrhandler_type*) malloc(sizeof(xfrhandler_type)));
#   56|->     xfrh->engine = NULL;
#   57|       xfrh->packet = NULL;
#   58|       xfrh->netio = NULL;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def240]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signer.c: scope_hint: In function ‘interface_start’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signer.c:349:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘popen("pgrep ods-signerd", "r")’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signer.c:49: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signer.c:37: included_from: Included from here.
/usr/include/stdio.h:654:14: note: argument 3 of ‘fgets’ must be non-null
#  347|           char line[80];
#  348|           FILE *cmd2 = popen("pgrep ods-signerd","r");
#  349|->         fgets(line, 80, cmd2);
#  350|           (void) pclose(cmd2);
#  351|           pid_t pid = strtoul(line, NULL, 10);

Error: COMPILER_WARNING (CWE-252): [#def241]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signer.c: scope_hint: In function ‘interface_start’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signer.c:349:9: warning[-Wunused-result]: ignoring return value of ‘fgets’ declared with attribute ‘warn_unused_result’
#  349 |         fgets(line, 80, cmd2);
#      |         ^~~~~~~~~~~~~~~~~~~~~
#  347|           char line[80];
#  348|           FILE *cmd2 = popen("pgrep ods-signerd","r");
#  349|->         fgets(line, 80, cmd2);
#  350|           (void) pclose(cmd2);
#  351|           pid_t pid = strtoul(line, NULL, 10);

Error: COMPILER_WARNING (CWE-477): [#def242]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c: scope_hint: In function ‘program_setup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c:97:5: warning[-Wdeprecated-declarations]: ‘xmlInitGlobals’ is deprecated
#   97 |     xmlInitGlobals();
#      |     ^~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c:39: included_from: Included from here.
/usr/include/libxml2/libxml/parser.h:923:17: note: declared here
#  923 |                 xmlInitGlobals          (void);
#      |                 ^~~~~~~~~~~~~~
#   95|   
#   96|       /* initialize */
#   97|->     xmlInitGlobals();
#   98|       xmlInitParser();
#   99|       xmlInitThreads();

Error: COMPILER_WARNING (CWE-477): [#def243]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c:99:5: warning[-Wdeprecated-declarations]: ‘xmlInitThreads’ is deprecated
#   99 |     xmlInitThreads();
#      |     ^~~~~~~~~~~~~~
/usr/include/libxml2/libxml/parser.h:28: included_from: Included from here.
/usr/include/libxml2/libxml/threads.h:58:25: note: declared here
#   58 |                         xmlInitThreads  (void);
#      |                         ^~~~~~~~~~~~~~
#   97|       xmlInitGlobals();
#   98|       xmlInitParser();
#   99|->     xmlInitThreads();
#  100|   
#  101|       tzset(); /* for portability */

Error: COMPILER_WARNING (CWE-477): [#def244]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c: scope_hint: In function ‘program_teardown’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c:109:5: warning[-Wdeprecated-declarations]: ‘xmlCleanupGlobals’ is deprecated
#  109 |     xmlCleanupGlobals();
#      |     ^~~~~~~~~~~~~~~~~
/usr/include/libxml2/libxml/parser.h:926:17: note: declared here
#  926 |                 xmlCleanupGlobals       (void);
#      |                 ^~~~~~~~~~~~~~~~~
#  107|   {
#  108|       xmlCleanupParser();
#  109|->     xmlCleanupGlobals();
#  110|       ods_log_close();
#  111|   }

Error: COMPILER_WARNING (CWE-252): [#def245]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c: scope_hint: In function ‘main’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/ods-signerd.c:141:9: warning[-Wunused-result]: ignoring return value of ‘asprintf’ declared with attribute ‘warn_unused_result’
#  141 |         asprintf(&argv0, "%s/%s", path, argv[0]);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  139|       if(argv[0][0] != '/') {
#  140|           char *path = getcwd(NULL,0);
#  141|->         asprintf(&argv0, "%s/%s", path, argv[0]);
#  142|           free(path);
#  143|       } else {

Error: GCC_ANALYZER_WARNING (CWE-415): [#def246]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/addnsparser.c: scope_hint: In function ‘parse_addns_remote’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/addnsparser.c:126:13: warning[-Wanalyzer-double-free]: double-‘free’ of ‘port’
#  124|               }
#  125|               free((void*)address);
#  126|->             free((void*)port);
#  127|               free((void*)key);
#  128|           }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def247]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c: scope_hint: In function ‘parse_conf_zonelist_filename’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:438:9: warning[-Wanalyzer-null-argument]: use of NULL ‘dup’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:34: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:363:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:364:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:437:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:437:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:437:9: note: in expansion of macro ‘CHECKALLOC’
<built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null
#  436|       if (lwd>0 && strncmp(str + (lwd-1), "/", 1) != 0) {
#  437|           CHECKALLOC(dup = malloc(sizeof(char)*(lwd+lzl+2)));
#  438|->         memcpy(dup, str, sizeof(char)*(lwd+1));
#  439|           strlcat(dup, "/", sizeof(char)*(lwd+2));
#  440|           strlcat(dup, OPENDNSSEC_ENFORCER_ZONELIST, sizeof(char)*(lwd+lzl+2));

Error: GCC_ANALYZER_WARNING (CWE-688): [#def248]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:444:9: warning[-Wanalyzer-null-argument]: use of NULL ‘dup’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:363:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:364:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:443:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:443:9: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:443:9: note: in expansion of macro ‘CHECKALLOC’
<built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null
#  442|       } else {
#  443|           CHECKALLOC(dup = malloc(sizeof(char)*(lwd+lzl+1)));
#  444|->         memcpy(dup, str, sizeof(char)*(lwd+1));
#  445|           strlcat(dup, OPENDNSSEC_ENFORCER_ZONELIST, sizeof(char)*(lwd+lzl+1));
#  446|           lwd += (lzl+1);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def249]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c: scope_hint: In function ‘parse_conf_clisock_filename’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:527:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘dup’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:363:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.c:364:5: note: in expansion of macro ‘ods_log_assert’
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
#  525|           dup = strdup(ODS_SE_SOCKFILE);
#  526|       }
#  527|->     if (strlen(dup) >= sizeof(((struct sockaddr_un*)0)->sun_path)) {
#  528|           dup[sizeof(((struct sockaddr_un*)0)->sun_path)-1] = '\0'; /* don't worry about just a few bytes 'lost' */
#  529|           ods_log_warning("[%s] SocketFile path too long, truncated to %s", parser_str, dup);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def250]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/signconfparser.c: scope_hint: In function ‘parse_sc_dnskey_sigrrs’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/signconfparser.c:347:41: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘signatureresourcerecords’
#  345|           for (i = 0; i < xpathObj->nodesetval->nodeNr; i++) {
#  346|               curNode = xpathObj->nodesetval->nodeTab[i];
#  347|->             signatureresourcerecords[i] = (char *) xmlNodeGetContent(curNode);
#  348|           }
#  349|           signatureresourcerecords[i] = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def251]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/domain.c: scope_hint: In function ‘domain_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/domain.c:95:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘domain’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/backup.h:37: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/domain.c:34: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/domain.c:94:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/domain.c:94:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/domain.c:94:5: note: in expansion of macro ‘CHECKALLOC’
#   93|       }
#   94|       CHECKALLOC(domain = (domain_type*) malloc(sizeof(domain_type)));
#   95|->     domain->dname = ldns_rdf_clone(dname);
#   96|       if (!domain->dname) {
#   97|           ods_log_error("[%s] unable to create domain: ldns_rdf_clone() "

Error: GCC_ANALYZER_WARNING (CWE-476): [#def252]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/ixfr.c: scope_hint: In function ‘part_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/ixfr.c:51:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘part’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/util.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/ixfr.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/ixfr.c:50:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/ixfr.c:50:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/ixfr.c:50:5: note: in expansion of macro ‘CHECKALLOC’
#   49|   
#   50|       CHECKALLOC(part = (part_type*) malloc(sizeof(part_type)));
#   51|->     part->soaplus = NULL;
#   52|       part->soamin = NULL;
#   53|       part->plus = ldns_rr_list_new();

Error: COMPILER_WARNING (CWE-697): [#def253]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/keys.c: scope_hint: In function ‘keylist_lookup_by_locator’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/keys.c:80:13: warning[-Waddress]: the comparison will always evaluate as ‘true’ for the pointer operand in ‘kl->keys + (sizetype)((long unsigned int)i * 56)’ must not be NULL
#   80 |         if (&kl->keys[i] && kl->keys[i].locator) {
#      |             ^
#   78|       }
#   79|       for (i=0; i < kl->count; i++) {
#   80|->         if (&kl->keys[i] && kl->keys[i].locator) {
#   81|               if (ods_strcmp(kl->keys[i].locator, locator) == 0) {
#   82|                   return &kl->keys[i];

Error: COMPILER_WARNING (CWE-195): [#def254]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c: scope_hint: In function ‘rrset_lookup_ttl’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:265:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘size_t’ {aka ‘long unsigned int’}
#  265 |     for (int i = 0; i < rrset->rr_count; i++) {
#      |                       ^
#  263|   rrset_lookup_ttl(rrset_type* rrset, uint32_t default_ttl)
#  264|   {
#  265|->     for (int i = 0; i < rrset->rr_count; i++) {
#  266|           if (!rrset->rrs[i].is_added) continue;
#  267|           return ldns_rr_ttl(rrset->rrs[i].rr);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def255]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c: scope_hint: In function ‘rrsigkeymatching’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:542:37: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘matches’
#  540|       struct rrsigkeymatching* matches = malloc(sizeof(struct rrsigkeymatching) * (signconf->keys->count + nrrsigs));
#  541|       for(int i=0; i<nrrsigs; i++) {
#  542|->         matches[nmatches].signature = rrsigs[i];
#  543|           matches[nmatches].key = NULL;
#  544|           ++nmatches;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def256]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:542:45: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘rrsigs’
#  540|       struct rrsigkeymatching* matches = malloc(sizeof(struct rrsigkeymatching) * (signconf->keys->count + nrrsigs));
#  541|       for(int i=0; i<nrrsigs; i++) {
#  542|->         matches[nmatches].signature = rrsigs[i];
#  543|           matches[nmatches].key = NULL;
#  544|           ++nmatches;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def257]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:542:45: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
#  540|       struct rrsigkeymatching* matches = malloc(sizeof(struct rrsigkeymatching) * (signconf->keys->count + nrrsigs));
#  541|       for(int i=0; i<nrrsigs; i++) {
#  542|->         matches[nmatches].signature = rrsigs[i];
#  543|           matches[nmatches].key = NULL;
#  544|           ++nmatches;

Error: COMPILER_WARNING (CWE-195): [#def258]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c: scope_hint: In function ‘rrsigkeymatching’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:546:29: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘size_t’ {aka ‘long unsigned int’}
#  546 |     for(int keyidx=0; keyidx<signconf->keys->count; keyidx++) {
#      |                             ^
#  544|           ++nmatches;
#  545|       }
#  546|->     for(int keyidx=0; keyidx<signconf->keys->count; keyidx++) {
#  547|           int matchidx;
#  548|           for(matchidx=0; matchidx<nmatches; matchidx++) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def259]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:555:41: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘matches’
#  553|           }
#  554|           if(matchidx==nmatches) {
#  555|->             matches[nmatches].signature = NULL;
#  556|               matches[nmatches].key = &signconf->keys->keys[keyidx];
#  557|               ++nmatches;

Error: COMPILER_WARNING (CWE-563): [#def260]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:583:19: warning[-Wunused-variable]: unused variable ‘j’
#  583 |     size_t i = 0, j;
#      |                   ^
#  581|       time_t inception = 0;
#  582|       time_t expiration = 0;
#  583|->     size_t i = 0, j;
#  584|       domain_type* domain = NULL;
#  585|       ldns_rr_type dstatus = LDNS_RR_TYPE_FIRST;

Error: COMPILER_WARNING (CWE-563): [#def261]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:587:13: warning[-Wunused-variable]: unused variable ‘algorithm’
#  587 |     uint8_t algorithm = 0;
#      |             ^~~~~~~~~
#  585|       ldns_rr_type dstatus = LDNS_RR_TYPE_FIRST;
#  586|       ldns_rr_type delegpt = LDNS_RR_TYPE_FIRST;
#  587|->     uint8_t algorithm = 0;
#  588|   
#  589|       ods_log_assert(ctx);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def262]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c: scope_hint: In function ‘rrset_sign’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:611:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘rrsigs’
#  609|       for(i=0; (signature = collection_iterator(rrset->rrsigs)); i++) {
#  610|           assert(signature);
#  611|->         rrsigs[i] = signature;
#  612|       }
#  613|       struct rrsigkeymatching* matchedsignatures = NULL;

Error: COMPILER_WARNING (CWE-195): [#def263]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c: scope_hint: In function ‘rrset_sign’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:760:19: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘size_t’ {aka ‘long unsigned int’} and ‘int’
#  760 |         for(i=0; i<nrrsigs; i++) {
#      |                   ^
#  758|       if (zone->db->is_initialized) {
#  759|           pthread_mutex_lock(&zone->ixfr->ixfr_lock);
#  760|->         for(i=0; i<nrrsigs; i++) {
#  761|               if(matchedsignatures[i].signature == NULL) {
#  762|                   if (rrsigs[i] != NULL) {

Error: COMPILER_WARNING (CWE-195): [#def264]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/rrset.c:769:15: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘size_t’ {aka ‘long unsigned int’} and ‘int’
#  769 |     for(i=0; i<nrrsigs; i++) {
#      |               ^
#  767|           pthread_mutex_unlock(&zone->ixfr->ixfr_lock);
#  768|       }
#  769|->     for(i=0; i<nrrsigs; i++) {
#  770|           if(matchedsignatures[i].signature == NULL) {
#  771|               if (rrsigs[i] != NULL) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def265]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/signconf.c: scope_hint: In function ‘signconf_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/signconf.c:51:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sc’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/confparser.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/parser/signconfparser.h:35: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/signconf.c:32: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/signconf.c:50:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/signconf.c:50:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/signconf.c:50:5: note: in expansion of macro ‘CHECKALLOC’
#   49|       signconf_type* sc = NULL;
#   50|       CHECKALLOC(sc = (signconf_type*) malloc(sizeof(signconf_type)));
#   51|->     sc->filename = NULL;
#   52|       sc->passthrough = 0;
#   53|       /* Signatures */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def266]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/stats.c: scope_hint: In function ‘stats_clear’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/stats.c:57:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘stats’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/stats.c:32: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/stats.c:56:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/stats.c:56:5: note: in expansion of macro ‘ods_log_assert’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/stats.c:56:5: note: in expansion of macro ‘ods_log_assert’
#   55|   {
#   56|       ods_log_assert(stats);
#   57|->     stats->sort_count = 0;
#   58|       stats->sort_time = 0;
#   59|       stats->sort_done = 0;

Error: COMPILER_WARNING (CWE-563): [#def267]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c: scope_hint: In function ‘zone_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:58:9: warning[-Wunused-variable]: unused variable ‘err’
#   58 |     int err;
#      |         ^~~
#   56|   {
#   57|       zone_type* zone = NULL;
#   58|->     int err;
#   59|   
#   60|       if (!name || !klass) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def268]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c: scope_hint: In function ‘zone_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:80:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘zone’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/addns.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/adapter/adapter.h:48: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:32: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:63:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:63:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:63:5: note: in expansion of macro ‘CHECKALLOC’
#   78|       }
#   79|   
#   80|->     zone->name = strdup(name);
#   81|       if (!zone->name) {
#   82|           ods_log_error("[%s] unable to create zone %s: allocator_strdup() "

Error: COMPILER_WARNING (CWE-563): [#def269]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c: scope_hint: In function ‘zone_rollback_dnskeys’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:283:14: warning[-Wunused-but-set-variable]: variable ‘dnskey’ set but not used
#  283 |     rr_type* dnskey = NULL;
#      |              ^~~~~~
#  281|       uint16_t i = 0;
#  282|       rrset_type* rrset = NULL;
#  283|->     rr_type* dnskey = NULL;
#  284|       if (!zone || !zone->signconf || !zone->signconf->keys) {
#  285|           return;

Error: COMPILER_WARNING (CWE-563): [#def270]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:308:17: warning[-Wunused-variable]: unused variable ‘rrset’
#  308 |     rrset_type* rrset = NULL;
#      |                 ^~~~~
#  306|   zone_publish_nsec3param(zone_type* zone)
#  307|   {
#  308|->     rrset_type* rrset = NULL;
#  309|       rr_type* n3prr = NULL;
#  310|       ldns_rr* rr = NULL;

Error: COMPILER_WARNING (CWE-563): [#def271]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c: scope_hint: In function ‘zone_publish_nsec3param’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:309:14: warning[-Wunused-variable]: unused variable ‘n3prr’
#  309 |     rr_type* n3prr = NULL;
#      |              ^~~~~
#  307|   {
#  308|       rrset_type* rrset = NULL;
#  309|->     rr_type* n3prr = NULL;
#  310|       ldns_rr* rr = NULL;
#  311|       ods_status status = ODS_STATUS_OK;

Error: COMPILER_WARNING (CWE-195): [#def272]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c: scope_hint: In function ‘zone_add_rr’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:588:31: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘size_t’ {aka ‘long unsigned int’}
#  588 |             for (int i = 0; i < strlen(str); i++) {
#      |                               ^
#  586|               char *str = ldns_rr2str(rr);
#  587|               str[(strlen(str)) - 1] = '\0';
#  588|->             for (int i = 0; i < strlen(str); i++) {
#  589|                   if (str[i] == '\t') {
#  590|                       str[i] = ' ';

Error: COMPILER_WARNING (CWE-195): [#def273]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c: scope_hint: In function ‘zone_del_nsec3params’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:683:17: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘size_t’ {aka ‘long unsigned int’}
#  683 |     for (i=0; i < rrset->rr_count; i++) {
#      |                 ^
#  681|        * inserting the new record may flip this flag when the record
#  682|        * hasn't changed. */
#  683|->     for (i=0; i < rrset->rr_count; i++) {
#  684|           rrset->rrs[i].is_removed = 1;
#  685|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def274]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c: scope_hint: In function ‘zone_recover2’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/signer/zone.c:908:13: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(salt)’
#  906|               }
#  907|               zone->signconf->nsec3_salt = strdup(salt);
#  908|->             free((void*) salt);
#  909|               salt = NULL;
#  910|               zone->signconf->nsec3params = nsec3params_create(

Error: GCC_ANALYZER_WARNING (CWE-476): [#def275]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/acl.c: scope_hint: In function ‘acl_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/acl.c:133:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘acl’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/acl.c:34: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/acl.c:132:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/acl.c:132:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/acl.c:132:5: note: in expansion of macro ‘CHECKALLOC’
#  131|       char* p = NULL;
#  132|       CHECKALLOC(acl = (acl_type*) malloc(sizeof(acl_type)));
#  133|->     acl->address = NULL;
#  134|       acl->next = NULL;
#  135|       acl->tsig = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def276]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c: scope_hint: In function ‘listener_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:49:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘listener’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:35: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:48:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:48:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:48:5: note: in expansion of macro ‘CHECKALLOC’
#   47|       listener_type* listener = NULL;
#   48|       CHECKALLOC(listener = (listener_type*) malloc(sizeof(listener_type)));
#   49|->     listener->count = 0;
#   50|       listener->interfaces = NULL;
#   51|       return listener;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def277]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c: scope_hint: In function ‘listener_push’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:74:53: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(address)’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:66:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/listener.c:66:5: note: in expansion of macro ‘CHECKALLOC’
#   72|       listener->count++;
#   73|       listener->interfaces[listener->count -1].address = strdup(address);
#   74|->     listener->interfaces[listener->count -1].family = family;
#   75|   
#   76|       if (port) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def278]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c: scope_hint: In function ‘netio_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:43:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘netio’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.h:55: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:17: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:42:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:42:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:42:5: note: in expansion of macro ‘CHECKALLOC’
#   41|       netio_type* netio = NULL;
#   42|       CHECKALLOC(netio = (netio_type*) malloc(sizeof(netio_type)));
#   43|->     netio->handlers = NULL;
#   44|       netio->dispatch_next = NULL;
#   45|       return netio;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def279]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c: scope_hint: In function ‘netio_add_handler’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:61:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘l’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:60:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:60:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/netio.c:60:5: note: in expansion of macro ‘CHECKALLOC’
#   59|   
#   60|       CHECKALLOC(l = (netio_handler_list_type*) malloc(sizeof(netio_handler_list_type)));
#   61|->     l->next = netio->handlers;
#   62|       l->handler = handler;
#   63|       netio->handlers = l;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def280]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c: scope_hint: In function ‘sock_handle_tcp_accept’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:476:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘tcp_data’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/cfg.h:35: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/daemon/engine.h:40: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:475:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:475:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:475:5: note: in expansion of macro ‘CHECKALLOC’
#  474|       /* create tcp handler data */
#  475|       CHECKALLOC(tcp_data = (struct tcp_data*) malloc(sizeof(struct tcp_data)));
#  476|->     tcp_data->query = query_create();
#  477|       if (!tcp_data->query) {
#  478|           ods_log_error("[%s] unable to handle incoming tcp connection: "

Error: GCC_ANALYZER_WARNING (CWE-476): [#def281]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:493:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘tcp_handler’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:475:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:492:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:492:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/sock.c:492:5: note: in expansion of macro ‘CHECKALLOC’
#  491|       tcp_data->query->addrlen = addrlen;
#  492|       CHECKALLOC(tcp_handler = (netio_handler_type*) malloc(sizeof(netio_handler_type)));
#  493|->     tcp_handler->fd = s;
#  494|       CHECKALLOC(tcp_handler->timeout = (struct timespec*) malloc(sizeof(struct timespec)));
#  495|       if (!tcp_handler->timeout) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def282]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c: scope_hint: In function ‘tcp_conn_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:50:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘tcp_conn’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.h:41: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:33: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:48:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:48:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:48:5: note: in expansion of macro ‘CHECKALLOC’
#   48|       CHECKALLOC(tcp_conn = (tcp_conn_type*) malloc(sizeof(tcp_conn_type)));
#   49|       memset(tcp_conn, 0, sizeof(tcp_conn_type));
#   50|->     tcp_conn->packet = buffer_create(PACKET_BUFFER_SIZE);
#   51|       if (!tcp_conn->packet) {
#   52|           free(tcp_conn);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def283]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c: scope_hint: In function ‘tcp_set_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:72:5: warning[-Wanalyzer-null-argument]: use of NULL ‘tcp_set’ where non-null expected
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:71:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:71:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tcpset.c:71:5: note: in expansion of macro ‘CHECKALLOC’
<built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null
#   70|       tcp_set_type* tcp_set = NULL;
#   71|       CHECKALLOC(tcp_set = (tcp_set_type*) malloc(sizeof(tcp_set_type)));
#   72|->     memset(tcp_set, 0, sizeof(tcp_set_type));
#   73|       tcp_set->tcp_count = 0;
#   74|       for (i=0; i < TCPSET_MAX; i++) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def284]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c: scope_hint: In function ‘tsig_openssl_init_algorithm’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:74:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘algorithm’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.h:38: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:73:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:73:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:73:5: note: in expansion of macro ‘CHECKALLOC’
#   72|       }
#   73|       CHECKALLOC(algorithm = (tsig_algo_type *) malloc(sizeof(tsig_algo_type)));
#   74|->     algorithm->txt_name = name;
#   75|       algorithm->wf_name = ldns_dname_new_frm_str(wireformat);
#   76|       if (!algorithm->wf_name) {

Error: COMPILER_WARNING (CWE-477): [#def285]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c: scope_hint: In function ‘cleanup_context’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:130:5: warning[-Wdeprecated-declarations]: ‘HMAC_CTX_free’ is deprecated: Since OpenSSL 3.0
#  130 |     HMAC_CTX_free(context);
#      |     ^~~~~~~~~~~~~
/usr/include/openssl/ssl.h:38: included_from: Included from here.
/usr/include/ldns/dane.h:30: included_from: Included from here.
/usr/include/ldns/ldns.h:98: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/buffer.h:40: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.h:39: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:36: included_from: Included from here.
/usr/include/openssl/hmac.h:35:28: note: declared here
#   35 | OSSL_DEPRECATEDIN_3_0 void HMAC_CTX_free(HMAC_CTX *ctx);
#      |                            ^~~~~~~~~~~~~
#  128|       HMAC_CTX* context = (HMAC_CTX*) data;
#  129|   #ifdef HAVE_SSL_NEW_HMAC
#  130|->     HMAC_CTX_free(context);
#  131|   #else
#  132|       HMAC_CTX_cleanup(context);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def286]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c: scope_hint: In function ‘context_add_cleanup’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:144:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘entry’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:143:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:143:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:143:5: note: in expansion of macro ‘CHECKALLOC’
#  142|       }
#  143|       CHECKALLOC(entry = (tsig_cleanup_table_type *) malloc(sizeof(tsig_cleanup_table_type)));
#  144|->     entry->cleanup = context;
#  145|       entry->next = tsig_cleanup_table;
#  146|       tsig_cleanup_table = entry;

Error: COMPILER_WARNING (CWE-477): [#def287]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c: scope_hint: In function ‘create_context’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:154:5: warning[-Wdeprecated-declarations]: ‘HMAC_CTX_new’ is deprecated: Since OpenSSL 3.0
#  154 |     CHECKALLOC(context = HMAC_CTX_new());
#      |     ^~~~~~~~~~
/usr/include/openssl/hmac.h:33:33: note: declared here
#   33 | OSSL_DEPRECATEDIN_3_0 HMAC_CTX *HMAC_CTX_new(void);
#      |                                 ^~~~~~~~~~~~
#  152|       HMAC_CTX* context;
#  153|   #ifdef HAVE_SSL_NEW_HMAC
#  154|->     CHECKALLOC(context = HMAC_CTX_new());
#  155|       HMAC_CTX_reset(context);
#  156|   #else

Error: COMPILER_WARNING (CWE-477): [#def288]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:155:5: warning[-Wdeprecated-declarations]: ‘HMAC_CTX_reset’ is deprecated: Since OpenSSL 3.0
#  155 |     HMAC_CTX_reset(context);
#      |     ^~~~~~~~~~~~~~
/usr/include/openssl/hmac.h:34:27: note: declared here
#   34 | OSSL_DEPRECATEDIN_3_0 int HMAC_CTX_reset(HMAC_CTX *ctx);
#      |                           ^~~~~~~~~~~~~~
#  153|   #ifdef HAVE_SSL_NEW_HMAC
#  154|       CHECKALLOC(context = HMAC_CTX_new());
#  155|->     HMAC_CTX_reset(context);
#  156|   #else
#  157|       CHECKALLOC(context = (HMAC_CTX*) malloc(sizeof(HMAC_CTX)));

Error: COMPILER_WARNING (CWE-477): [#def289]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c: scope_hint: In function ‘init_context’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:169:5: warning[-Wdeprecated-declarations]: ‘HMAC_Init_ex’ is deprecated: Since OpenSSL 3.0
#  169 |     HMAC_Init_ex(ctx, key->data, key->size, md, NULL);
#      |     ^~~~~~~~~~~~
/usr/include/openssl/hmac.h:43:27: note: declared here
#   43 | OSSL_DEPRECATEDIN_3_0 int HMAC_Init_ex(HMAC_CTX *ctx, const void *key, int len,
#      |                           ^~~~~~~~~~~~
#  167|       HMAC_CTX* ctx = (HMAC_CTX*) context;
#  168|       const EVP_MD* md = (const EVP_MD*) algorithm->data;
#  169|->     HMAC_Init_ex(ctx, key->data, key->size, md, NULL);
#  170|   }
#  171|   

Error: COMPILER_WARNING (CWE-477): [#def290]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c: scope_hint: In function ‘update’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:176:5: warning[-Wdeprecated-declarations]: ‘HMAC_Update’ is deprecated: Since OpenSSL 3.0
#  176 |     HMAC_Update(ctx, (unsigned char*) data, (int) size);
#      |     ^~~~~~~~~~~
/usr/include/openssl/hmac.h:45:27: note: declared here
#   45 | OSSL_DEPRECATEDIN_3_0 int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data,
#      |                           ^~~~~~~~~~~
#  174|   {
#  175|       HMAC_CTX* ctx = (HMAC_CTX*) context;
#  176|->     HMAC_Update(ctx, (unsigned char*) data, (int) size);
#  177|   }
#  178|   

Error: COMPILER_WARNING (CWE-477): [#def291]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c: scope_hint: In function ‘final’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig-openssl.c:184:5: warning[-Wdeprecated-declarations]: ‘HMAC_Final’ is deprecated: Since OpenSSL 3.0
#  184 |     HMAC_Final(ctx, digest, &len);
#      |     ^~~~~~~~~~
/usr/include/openssl/hmac.h:47:27: note: declared here
#   47 | OSSL_DEPRECATEDIN_3_0 int HMAC_Final(HMAC_CTX *ctx, unsigned char *md,
#      |                           ^~~~~~~~~~
#  182|       HMAC_CTX* ctx = (HMAC_CTX*) context;
#  183|       unsigned len = (unsigned) *size;
#  184|->     HMAC_Final(ctx, digest, &len);
#  185|       *size = (size_t) len;
#  186|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def292]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c: scope_hint: In function ‘tsig_key_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:195:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘key’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/file.h:36: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:37: included_from: Included from here.
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:178:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:178:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:178:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
#  193|           return NULL;
#  194|       }
#  195|->     key->dname = dname;
#  196|       key->size = size;
#  197|       key->data = data;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def293]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c: scope_hint: In function ‘tsig_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:215:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘tsig’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:214:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:214:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:214:5: note: in expansion of macro ‘CHECKALLOC’
#  213|       }
#  214|       CHECKALLOC(tsig = (tsig_type*) malloc(sizeof(tsig_type)));
#  215|->     tsig->next = NULL;
#  216|       tsig->name = strdup(name);
#  217|       tsig->algorithm = strdup(algo);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def294]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c: scope_hint: In function ‘tsig_rr_create’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:278:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘trr’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/common/status.h:121:30: note: in definition of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:277:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:277:5: note: in expansion of macro ‘CHECKALLOC’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/tsig.c:277:5: note: in expansion of macro ‘CHECKALLOC’
#  276|       tsig_rr_type* trr = NULL;
#  277|       CHECKALLOC(trr = (tsig_rr_type*) malloc(sizeof(tsig_rr_type)));
#  278|->     trr->key_name = NULL;
#  279|       trr->algo_name = NULL;
#  280|       trr->mac_data = NULL;

Error: COMPILER_WARNING: [#def295]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c: scope_hint: In function ‘xfrd_handle_packet’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c:1197:42: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1197 |             xfrd->serial_notify_acquired = 0;
#      |             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c:1198:9: note: here
# 1198 |         case XFRD_PKT_TC:
#      |         ^~~~
# 1195|               break;
# 1196|           case XFRD_PKT_NEWLEASE:
# 1197|-> 	    xfrd->serial_notify_acquired = 0;
# 1198|           case XFRD_PKT_TC:
# 1199|               return res;

Error: COMPILER_WARNING: [#def296]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c: scope_hint: In function ‘xfrd_tcp_read’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c:1550:13: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1550 |             ods_log_verbose("[%s] disable ixfr requests for %s from now (%lu)",
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1551 |                 xfrd_str, xfrd->master->address, (unsigned long)xfrd->master->ixfr_disabled);
#      |                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c:1553:9: note: here
# 1553 |         case XFRD_PKT_BAD:
#      |         ^~~~
# 1548|           case XFRD_PKT_NOTIMPL:
# 1549|               xfrd->master->ixfr_disabled = time_now();
# 1550|->             ods_log_verbose("[%s] disable ixfr requests for %s from now (%lu)",
# 1551|                   xfrd_str, xfrd->master->address, (unsigned long)xfrd->master->ixfr_disabled);
# 1552|               /* break; */

Error: COMPILER_WARNING: [#def297]
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c: scope_hint: In function ‘xfrd_udp_read’
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c:1834:13: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1834 |             ods_log_verbose("[%s] disable ixfr requests for %s from now (%lu)",
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1835 |                 xfrd_str, xfrd->master->address, (unsigned long)xfrd->master->ixfr_disabled);
#      |                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
opendnssec-2.1.14-build/opendnssec-2.1.14rc1/signer/src/wire/xfrd.c:1837:9: note: here
# 1837 |         case XFRD_PKT_BAD:
#      |         ^~~~
# 1832|           case XFRD_PKT_NOTIMPL:
# 1833|               xfrd->master->ixfr_disabled = time_now();
# 1834|->             ods_log_verbose("[%s] disable ixfr requests for %s from now (%lu)",
# 1835|                   xfrd_str, xfrd->master->address, (unsigned long)xfrd->master->ixfr_disabled);
# 1836|               /* break; */

Scan Properties