jss-5.6.0-0.1.alpha1.fc42.1

List of Findings

Error: CPPCHECK_WARNING (CWE-401): [#def1]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1969: error[memleak]: Memory leak: derCert
# 1967|   
# 1968|       if (cert == NULL) {
# 1969|->         return NULL;
# 1970|       }
# 1971|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1976:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘derCert’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1963:24: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1968:8: branch_false: following ‘false’ branch (when ‘cert’ is non-NULL)...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1972:8: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1972:8: branch_false: following ‘false’ branch (when ‘nickname’ is NULL)...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1976:12: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1976:5: danger: ‘derCert’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
# 1974|       }
# 1975|   
# 1976|->     derCert->type = siDERCertBuffer;
# 1977|       if (!JSS_RefByteArray(env, cert, (signed char **)&derCert->data, &derCertLen)) {
# 1978|           return NULL;

Error: CPPCHECK_WARNING (CWE-401): [#def3]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/PK11Finder.c:1978: error[memleak]: Memory leak: derCert
# 1976|       derCert->type = siDERCertBuffer;
# 1977|       if (!JSS_RefByteArray(env, cert, (signed char **)&derCert->data, &derCertLen)) {
# 1978|->         return NULL;
# 1979|       }
# 1980|   

Error: CPPCHECK_WARNING (CWE-476): [#def4]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:105: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: oaep_params
#  103|   
#  104|       oaep_params = calloc(1, sizeof(CK_RSA_PKCS_OAEP_PARAMS));
#  105|->     oaep_params->hashAlg = hashAlg;
#  106|       oaep_params->mgf = mgf;
#  107|       oaep_params->source = source;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:105:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘oaep_params’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:71:1: enter_function: entry to ‘Java_org_mozilla_jss_crypto_JSSOAEPParameterSpec_acquireNativeResources’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:85:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:89:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:89:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:93:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:93:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:100:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:100:9: call_function: calling ‘oaep_GetSpecifiedSourceData’ from ‘Java_org_mozilla_jss_crypto_JSSOAEPParameterSpec_acquireNativeResources’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:100:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_JSSOAEPParameterSpec_acquireNativeResources’ from ‘oaep_GetSpecifiedSourceData’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:100:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:104:19: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:104:19: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:105:5: danger: ‘calloc(1, 40)’ could be NULL: unchecked value from [(15)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/14)
#  103|   
#  104|       oaep_params = calloc(1, sizeof(CK_RSA_PKCS_OAEP_PARAMS));
#  105|->     oaep_params->hashAlg = hashAlg;
#  106|       oaep_params->mgf = mgf;
#  107|       oaep_params->source = source;

Error: CPPCHECK_WARNING (CWE-476): [#def6]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:106: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: oaep_params
#  104|       oaep_params = calloc(1, sizeof(CK_RSA_PKCS_OAEP_PARAMS));
#  105|       oaep_params->hashAlg = hashAlg;
#  106|->     oaep_params->mgf = mgf;
#  107|       oaep_params->source = source;
#  108|       oaep_params->pSourceData = pSourceData;

Error: CPPCHECK_WARNING (CWE-476): [#def7]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:107: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: oaep_params
#  105|       oaep_params->hashAlg = hashAlg;
#  106|       oaep_params->mgf = mgf;
#  107|->     oaep_params->source = source;
#  108|       oaep_params->pSourceData = pSourceData;
#  109|       oaep_params->ulSourceDataLen = ulSourceDataLen;

Error: CPPCHECK_WARNING (CWE-476): [#def8]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:108: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: oaep_params
#  106|       oaep_params->mgf = mgf;
#  107|       oaep_params->source = source;
#  108|->     oaep_params->pSourceData = pSourceData;
#  109|       oaep_params->ulSourceDataLen = ulSourceDataLen;
#  110|   

Error: CPPCHECK_WARNING (CWE-476): [#def9]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/JSSOAEPParameterSpec.c:109: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: oaep_params
#  107|       oaep_params->source = source;
#  108|       oaep_params->pSourceData = pSourceData;
#  109|->     oaep_params->ulSourceDataLen = ulSourceDataLen;
#  110|   
#  111|       params_obj = JSS_PR_wrapStaticVoidPointer(env, (void **)&oaep_params);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def10]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:85:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘param’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:68:35: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:81:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:85:38: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:85:5: danger: ‘param’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   83|       }
#   84|   
#   85|->     param->type = (CK_PRF_DATA_TYPE)((*env)->GetLongField(env, this, field_id));
#   86|       param->pValue = ptr;
#   87|       param->ulValueLen = ptr_length;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def11]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:101:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘param’ where non-null expected
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:68:35: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:101:5: danger: argument 1 (‘param’) from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#argument 1 of ‘__builtin_memset’ must be non-null
#   99|   
#  100|   failure:
#  101|->     memset(param, 0, param_length);
#  102|       free(param);
#  103|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def12]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:515:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘attrs’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:485:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:489:16: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:490:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:494:19: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:495:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:499:17: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:500:13: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:502:29: branch_true: following ‘true’ branch (when ‘offset < num_attrs’)...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:506:25: branch_true: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:507:12: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:511:13: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:511:12: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:515:25: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:515:9: danger: ‘attrs + offset * 24’ could be NULL: unchecked value from [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
#  513|           }
#  514|   
#  515|->         attrs[offset] = *attr;
#  516|       }
#  517|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def13]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:701:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘data_params’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:891:1: enter_function: entry to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:907:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: call_function: calling ‘kbkdf_GetPRFType’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetPRFType’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: call_function: calling ‘kbkdf_GetDataParameters’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
#  699|           PR_ASSERT(this_param_size == sizeof(CK_PRF_DATA_PARAM));
#  700|   
#  701|->         (*data_params)[offset] = *this_param;
#  702|       }
#  703|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def14]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:749:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘additional_keys’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:891:1: enter_function: entry to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:907:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: call_function: calling ‘kbkdf_GetPRFType’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetPRFType’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: call_function: calling ‘kbkdf_GetDataParameters’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetDataParameters’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:922:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:922:9: call_function: calling ‘kbkdf_GetAdditionalDerivedKeys’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
#  747|           PR_ASSERT(this_key_size == sizeof(CK_DERIVED_KEY));
#  748|   
#  749|->         (*additional_keys)[offset] = *this_key;
#  750|       }
#  751|   

Error: CPPCHECK_WARNING (CWE-476): [#def15]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:819: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  817|       kdf_params = calloc(1, sizeof(CK_SP800_108_KDF_PARAMS));
#  818|   
#  819|->     kdf_params->prfType = prf_type;
#  820|       kdf_params->ulNumberOfDataParams = num_data_params;
#  821|       kdf_params->pDataParams = data_params;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def16]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:819:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘kdf_params’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:783:1: enter_function: entry to ‘Java_org_mozilla_jss_crypto_KBKDFCounterParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:797:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:802:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:802:9: call_function: calling ‘kbkdf_GetPRFType’ from ‘Java_org_mozilla_jss_crypto_KBKDFCounterParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:802:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFCounterParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetPRFType’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:802:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:807:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:807:9: call_function: calling ‘kbkdf_GetDataParameters’ from ‘Java_org_mozilla_jss_crypto_KBKDFCounterParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:807:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFCounterParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetDataParameters’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:807:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:812:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:812:9: call_function: calling ‘kbkdf_GetAdditionalDerivedKeys’ from ‘Java_org_mozilla_jss_crypto_KBKDFCounterParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:812:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFCounterParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetAdditionalDerivedKeys’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:812:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:817:18: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:817:18: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:819:5: danger: ‘calloc(1, 40)’ could be NULL: unchecked value from [(27)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/26)
#  817|       kdf_params = calloc(1, sizeof(CK_SP800_108_KDF_PARAMS));
#  818|   
#  819|->     kdf_params->prfType = prf_type;
#  820|       kdf_params->ulNumberOfDataParams = num_data_params;
#  821|       kdf_params->pDataParams = data_params;

Error: CPPCHECK_WARNING (CWE-476): [#def17]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:820: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  818|   
#  819|       kdf_params->prfType = prf_type;
#  820|->     kdf_params->ulNumberOfDataParams = num_data_params;
#  821|       kdf_params->pDataParams = data_params;
#  822|       kdf_params->ulAdditionalDerivedKeys = num_additional_keys;

Error: CPPCHECK_WARNING (CWE-476): [#def18]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:821: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  819|       kdf_params->prfType = prf_type;
#  820|       kdf_params->ulNumberOfDataParams = num_data_params;
#  821|->     kdf_params->pDataParams = data_params;
#  822|       kdf_params->ulAdditionalDerivedKeys = num_additional_keys;
#  823|       kdf_params->pAdditionalDerivedKeys = additional_keys;

Error: CPPCHECK_WARNING (CWE-476): [#def19]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:822: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  820|       kdf_params->ulNumberOfDataParams = num_data_params;
#  821|       kdf_params->pDataParams = data_params;
#  822|->     kdf_params->ulAdditionalDerivedKeys = num_additional_keys;
#  823|       kdf_params->pAdditionalDerivedKeys = additional_keys;
#  824|   

Error: CPPCHECK_WARNING (CWE-476): [#def20]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:823: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  821|       kdf_params->pDataParams = data_params;
#  822|       kdf_params->ulAdditionalDerivedKeys = num_additional_keys;
#  823|->     kdf_params->pAdditionalDerivedKeys = additional_keys;
#  824|   
#  825|       /* Place it back into this NativeEnclosure. */

Error: CPPCHECK_WARNING (CWE-476): [#def21]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:934: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  932|       kdf_params = calloc(1, sizeof(CK_SP800_108_FEEDBACK_KDF_PARAMS));
#  933|   
#  934|->     kdf_params->prfType = prf_type;
#  935|       kdf_params->ulNumberOfDataParams = num_data_params;
#  936|       kdf_params->pDataParams = data_params;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def22]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:934:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘kdf_params’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:891:1: enter_function: entry to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:907:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: call_function: calling ‘kbkdf_GetPRFType’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetPRFType’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:912:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: call_function: calling ‘kbkdf_GetDataParameters’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetDataParameters’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:917:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:922:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:922:9: call_function: calling ‘kbkdf_GetAdditionalDerivedKeys’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:922:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetAdditionalDerivedKeys’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:922:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:927:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:927:9: call_function: calling ‘kbkdf_GetInitialValue’ from ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:927:9: return_function: returning to ‘Java_org_mozilla_jss_crypto_KBKDFFeedbackParams_acquireNativeResourcesInternal’ from ‘kbkdf_GetInitialValue’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:927:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:932:18: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:932:18: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:934:5: danger: ‘calloc(1, 56)’ could be NULL: unchecked value from [(34)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/33)
#  932|       kdf_params = calloc(1, sizeof(CK_SP800_108_FEEDBACK_KDF_PARAMS));
#  933|   
#  934|->     kdf_params->prfType = prf_type;
#  935|       kdf_params->ulNumberOfDataParams = num_data_params;
#  936|       kdf_params->pDataParams = data_params;

Error: CPPCHECK_WARNING (CWE-476): [#def23]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:935: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  933|   
#  934|       kdf_params->prfType = prf_type;
#  935|->     kdf_params->ulNumberOfDataParams = num_data_params;
#  936|       kdf_params->pDataParams = data_params;
#  937|       kdf_params->ulAdditionalDerivedKeys = num_additional_keys;

Error: CPPCHECK_WARNING (CWE-476): [#def24]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:936: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  934|       kdf_params->prfType = prf_type;
#  935|       kdf_params->ulNumberOfDataParams = num_data_params;
#  936|->     kdf_params->pDataParams = data_params;
#  937|       kdf_params->ulAdditionalDerivedKeys = num_additional_keys;
#  938|       kdf_params->pAdditionalDerivedKeys = additional_keys;

Error: CPPCHECK_WARNING (CWE-476): [#def25]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:937: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  935|       kdf_params->ulNumberOfDataParams = num_data_params;
#  936|       kdf_params->pDataParams = data_params;
#  937|->     kdf_params->ulAdditionalDerivedKeys = num_additional_keys;
#  938|       kdf_params->pAdditionalDerivedKeys = additional_keys;
#  939|       kdf_params->ulIVLen = initial_value_length;

Error: CPPCHECK_WARNING (CWE-476): [#def26]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:938: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  936|       kdf_params->pDataParams = data_params;
#  937|       kdf_params->ulAdditionalDerivedKeys = num_additional_keys;
#  938|->     kdf_params->pAdditionalDerivedKeys = additional_keys;
#  939|       kdf_params->ulIVLen = initial_value_length;
#  940|       kdf_params->pIV = initial_value;

Error: CPPCHECK_WARNING (CWE-476): [#def27]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:939: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  937|       kdf_params->ulAdditionalDerivedKeys = num_additional_keys;
#  938|       kdf_params->pAdditionalDerivedKeys = additional_keys;
#  939|->     kdf_params->ulIVLen = initial_value_length;
#  940|       kdf_params->pIV = initial_value;
#  941|   

Error: CPPCHECK_WARNING (CWE-476): [#def28]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/crypto/KBKDF.c:940: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: kdf_params
#  938|       kdf_params->pAdditionalDerivedKeys = additional_keys;
#  939|       kdf_params->ulIVLen = initial_value_length;
#  940|->     kdf_params->pIV = initial_value;
#  941|   
#  942|       /* Place it back into this NativeEnclosure. */

Error: CPPCHECK_WARNING (CWE-682): [#def29]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/nss/PR.c:177: error[nullPointerArithmeticOutOfMemory]: If memory allocation fail: pointer addition with NULL pointer.
#  175|        * read than expected, when it could read much more. */
#  176|       while (read_amount < amount) {
#  177|->         this_read = PR_Read(real_fd, buffer + read_amount, amount - read_amount);
#  178|           if (this_read <= 0) {
#  179|               if (PR_GetError() == 0) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def30]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:307:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘colon’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:301:7: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:304:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:304:7: branch_true: following ‘true’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:305:27: branch_true: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:307:9: danger: dereference of NULL ‘colon’
#  305|           char* tokenname = PORT_Strdup(nickname);
#  306|           char* colon = PORT_Strchr(tokenname, ':');
#  307|->         *colon = '\0';
#  308|           *ppSlot = findSlotByTokenNameAndCert(tokenname, cert);
#  309|           PORT_Free(tokenname);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def31]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:347:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘colon’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:340:7: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:343:9: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:343:7: branch_true: following ‘true’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:344:27: branch_true: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11Cert.c:347:9: danger: dereference of NULL ‘colon’
#  345|           char* colon = PORT_Strchr(tokenname, ':');
#  346|           CERTCertListNode *head = CERT_LIST_HEAD(certList);
#  347|->         *colon = '\0';
#  348|           *ppSlot = findSlotByTokenNameAndCert(tokenname, head->cert);
#  349|           PORT_Free(tokenname);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def32]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:36:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘attr’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:22:29: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:27:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:31:16: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:32:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:36:29: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:36:5: danger: ‘attr’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   34|       }
#   35|   
#   36|->     attr->type = (CK_ULONG)((*env)->GetLongField(env, this, field_id));
#   37|       attr->pValue = ptr;
#   38|       attr->ulValueLen = ptr_length;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def33]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:49:12: warning[-Wanalyzer-malloc-leak]: leak of ‘ptr’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:148:21: acquire_memory: allocated here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:153:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:157:16: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:158:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:162:23: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:49:12: danger: ‘ptr’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   47|       }
#   48|   
#   49|->     return PR_SUCCESS;
#   50|   
#   51|   failure:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def34]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:52:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘attr’ where non-null expected
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:22:29: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:52:5: danger: argument 1 (‘attr’) from [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#argument 1 of ‘__builtin_memset’ must be non-null
#   50|   
#   51|   failure:
#   52|->     memset(attr, 0, sizeof(CK_ATTRIBUTE));
#   53|       free(attr);
#   54|       return PR_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def35]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:104:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ptr’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:90:21: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:95:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:99:16: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:100:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:104:23: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:104:5: danger: ‘ptr’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  102|       }
#  103|   
#  104|->     *ptr = (CK_ULONG)((*env)->GetLongField(env, this, field_id));
#  105|   
#  106|       if (JSS_PK11_WrapAttribute(env, this, (void *)ptr, sizeof(*ptr)) == PR_FAILURE) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def36]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:162:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ptr’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:148:21: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:153:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:157:16: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:158:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:162:23: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:162:5: danger: ‘ptr’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  160|       }
#  161|   
#  162|->     *ptr = (CK_ULONG)((*env)->GetLongField(env, this, field_id));
#  163|   
#  164|       JSS_PK11_WrapAttribute(env, this, (void *)ptr, sizeof(*ptr));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def37]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:241:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ptr’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:227:21: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:232:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:236:16: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:237:8: branch_false: following ‘false’ branch...
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:241:23: branch_false: ...to here
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/pkcs11/attrs/CKAttribute.c:241:5: danger: ‘ptr’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/0)
#  239|       }
#  240|   
#  241|->     *ptr = (CK_ULONG)((*env)->GetLongField(env, this, field_id));
#  242|   
#  243|       if (JSS_PK11_WrapAttribute(env, this, (void *)ptr, sizeof(*ptr)) == PR_FAILURE) {

Error: CPPCHECK_WARNING (CWE-476): [#def38]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/ssl/javax/j_buffer.c:9: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#    7|   j_buffer *jb_alloc(size_t length) {
#    8|       j_buffer *buf = calloc(1, sizeof(j_buffer));
#    9|->     buf->contents = calloc(length, sizeof(uint8_t));
#   10|   
#   11|       buf->capacity = length;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def39]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/ssl/javax/j_buffer.c:9:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘buf’
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/ssl/javax/j_buffer.c:8:21: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/ssl/javax/j_buffer.c:9:5: danger: ‘buf’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#    7|   j_buffer *jb_alloc(size_t length) {
#    8|       j_buffer *buf = calloc(1, sizeof(j_buffer));
#    9|->     buf->contents = calloc(length, sizeof(uint8_t));
#   10|   
#   11|       buf->capacity = length;

Error: CPPCHECK_WARNING (CWE-476): [#def40]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/ssl/javax/j_buffer.c:11: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#    9|       buf->contents = calloc(length, sizeof(uint8_t));
#   10|   
#   11|->     buf->capacity = length;
#   12|   
#   13|       // In the beginning, we can only write, not read. Hence, set our read_pos

Error: CPPCHECK_WARNING (CWE-476): [#def41]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/ssl/javax/j_buffer.c:15: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#   13|       // In the beginning, we can only write, not read. Hence, set our read_pos
#   14|       // to the sentinel value, buf->capacity.
#   15|->     buf->write_pos = 0;
#   16|       buf->read_pos = length;
#   17|   

Error: CPPCHECK_WARNING (CWE-476): [#def42]
jss-5.6.0-alpha1/native/src/main/native/org/mozilla/jss/ssl/javax/j_buffer.c:16: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#   14|       // to the sentinel value, buf->capacity.
#   15|       buf->write_pos = 0;
#   16|->     buf->read_pos = length;
#   17|   
#   18|       return buf;

Error: CPPCHECK_WARNING (CWE-476): [#def43]
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:361: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#  359|       char *server_message = "like a pound of bacon";
#  360|   
#  361|->     memcpy(buf, client_message, strlen(client_message));
#  362|       PRInt32 ret = PR_Write(c_nspr, buf, strlen(buf));
#  363|       if (ret < 0) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def44]
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:361:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buf’ where non-null expected
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:281:5: enter_function: entry to ‘main’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:283:8: branch_false: following ‘false’ branch (when ‘argc == 4’)...
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:288:5: branch_false: ...to here
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:288:5: call_function: calling ‘setup_nss_context’ from ‘main’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:288:5: return_function: returning to ‘main’ from ‘setup_nss_context’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:311:14: call_function: calling ‘setup_nss_client’ from ‘main’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:311:14: return_function: returning to ‘main’ from ‘setup_nss_client’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:312:14: call_function: calling ‘setup_nss_server’ from ‘main’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:312:14: return_function: returning to ‘main’ from ‘setup_nss_server’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:322:13: call_function: calling ‘is_finished’ from ‘main’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:322:13: return_function: returning to ‘main’ from ‘is_finished’
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:356:17: acquire_memory: this call could return NULL
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:361:5: danger: argument 1 (‘buf’) from [(58)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/57) could be NULL where non-null expected
#argument 1 of ‘__builtin_memcpy’ must be non-null
#  359|       char *server_message = "like a pound of bacon";
#  360|   
#  361|->     memcpy(buf, client_message, strlen(client_message));
#  362|       PRInt32 ret = PR_Write(c_nspr, buf, strlen(buf));
#  363|       if (ret < 0) {

Error: CPPCHECK_WARNING (CWE-476): [#def45]
jss-5.6.0-alpha1/native/src/test/native/org/mozilla/jss/tests/TestBufferPRFDSSL.c:362: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#  360|   
#  361|       memcpy(buf, client_message, strlen(client_message));
#  362|->     PRInt32 ret = PR_Write(c_nspr, buf, strlen(buf));
#  363|       if (ret < 0) {
#  364|           const PRErrorCode err = PR_GetError();

Error: COMPILER_WARNING (CWE-674): [#def46]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp: scope_hint: In function ‘JSS_PK11_wrapSymKey(JNIEnv_*, PK11SymKeyStr**)’
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp:120:1: warning[-Winfinite-recursion]: infinite recursion detected
#  120 | JSS_PK11_wrapSymKey(JNIEnv *env, PK11SymKey **symKey)
#      | ^~~~~~~~~~~~~~~~~~~
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp:124:31: note: recursive call
#  124 |     return JSS_PK11_wrapSymKey(env, symKey);
#      |            ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~
#  118|    */
#  119|   jobject
#  120|-> JSS_PK11_wrapSymKey(JNIEnv *env, PK11SymKey **symKey)
#  121|   {
#  122|   //    return JSS_PK11_wrapSymKey(env, symKey, NULL);

Error: COMPILER_WARNING: [#def47]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp: scope_hint: In function ‘Java_org_mozilla_jss_symkey_SessionKey_ComputeSessionKeySCP02’
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp:857:16: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 135 equals destination size
#  857 |         strncpy(keyname,keyNameChars,KEYNAMELENGTH);
#      |                ^
#  855|       {
#  856|           keyNameChars = (char *)(env)->GetStringUTFChars(keyName, NULL);
#  857|->         strncpy(keyname,keyNameChars,KEYNAMELENGTH);
#  858|           (env)->ReleaseStringUTFChars(keyName, (const char *)keyNameChars);
#  859|       }else

Error: COMPILER_WARNING: [#def48]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp: scope_hint: In function ‘Java_org_mozilla_jss_symkey_SessionKey_ComputeSessionKey’
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp:1317:16: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 135 equals destination size
# 1317 |         strncpy(keyname,keyNameChars,KEYNAMELENGTH);
#      |                ^
# 1315|       {
# 1316|           keyNameChars = (char *)(env)->GetStringUTFChars(keyName, NULL);
# 1317|->         strncpy(keyname,keyNameChars,KEYNAMELENGTH);
# 1318|           (env)->ReleaseStringUTFChars(keyName, (const char *)keyNameChars);
# 1319|       }else

Error: COMPILER_WARNING: [#def49]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp: scope_hint: In function ‘Java_org_mozilla_jss_symkey_SessionKey_ComputeEncSessionKey’
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SessionKey.cpp:1718:16: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 135 equals destination size
# 1718 |         strncpy(keyname,keyNameChars,KEYNAMELENGTH);
#      |                ^
# 1716|       {
# 1717|           keyNameChars = (char *)(env)->GetStringUTFChars(keyName, NULL);
# 1718|->         strncpy(keyname,keyNameChars,KEYNAMELENGTH);
# 1719|           (env)->ReleaseStringUTFChars(keyName, (const char *)keyNameChars);
# 1720|       }

Error: CPPCHECK_WARNING (CWE-476): [#def50]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:313: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: result
#  311|       char *result= (char *)malloc(1);
#  312|   
#  313|->     result[0] = '\0';
#  314|       if( tokenNameChars == NULL || keyNameChars==NULL)
#  315|       {

Error: CPPCHECK_WARNING (CWE-476): [#def51]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:401: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: result
#  399|   
#  400|       result = (char *) malloc(1);
#  401|->     result[0] = '\0';
#  402|   
#  403|       if (tokenName) {

Error: CPPCHECK_WARNING (CWE-476): [#def52]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:433: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: result
#  431|           temp = result;
#  432|           result = (char*)malloc( strlen(name) + strlen(temp) + 2 );
#  433|->         result[0]='\0';
#  434|           strcat(result, temp);
#  435|           strcat(result, ",");

Error: CPPCHECK_WARNING (CWE-476): [#def53]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:434: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: result
#  432|           result = (char*)malloc( strlen(name) + strlen(temp) + 2 );
#  433|           result[0]='\0';
#  434|->         strcat(result, temp);
#  435|           strcat(result, ",");
#  436|           strcat(result, name);

Error: CPPCHECK_WARNING (CWE-476): [#def54]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:435: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: result
#  433|           result[0]='\0';
#  434|           strcat(result, temp);
#  435|->         strcat(result, ",");
#  436|           strcat(result, name);
#  437|           free(temp);

Error: CPPCHECK_WARNING (CWE-476): [#def55]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:436: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: result
#  434|           strcat(result, temp);
#  435|           strcat(result, ",");
#  436|->         strcat(result, name);
#  437|           free(temp);
#  438|   

Error: CPPCHECK_WARNING (CWE-476): [#def56]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:553: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: keyData
#  551|       for (i = 0;i < keysize; i++)
#  552|       {
#  553|->         keyData[i] = 0x0;
#  554|       }
#  555|   

Error: COMPILER_WARNING: [#def57]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp: scope_hint: In function ‘GetSharedSecretKeyName(char*)’
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:1087:19: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 135 equals destination size
# 1087 |            strncpy( sharedSecretSymKeyName, newKeyName, KEYNAMELENGTH);
#      |                   ^
# 1085|       if ( newKeyName && strlen( newKeyName ) > 0 ) {
# 1086|          if( strlen( sharedSecretSymKeyName) == 0) {
# 1087|->            strncpy( sharedSecretSymKeyName, newKeyName, KEYNAMELENGTH);
# 1088|          }
# 1089|       }

Error: COMPILER_WARNING (CWE-697): [#def58]
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp: scope_hint: In function ‘_jbyteArray* Java_org_mozilla_jss_symkey_SessionKey_DiversifyKey(JNIEnv*, jclass, jstring, jstring, jstring, jstring, jbyteArray, jbyteArray, jbyte, jboolean, jbyteArray, jbyteArray, jbyteArray, jstring, jstring, jbyte)’
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:1457:30: warning[-Waddress]: the address of ‘fullNewMasterKeyName’ will never be NULL
# 1457 |     if (fullNewMasterKeyName != NULL && strcmp(fullNewMasterKeyName, "#01#01") == 0)
#      |                              ^
jss-5.6.0-alpha1/symkey/src/main/native/org/mozilla/jss/symkey/SymKey.cpp:1133:10: note: ‘fullNewMasterKeyName’ declared here
# 1133 |     char fullNewMasterKeyName[KEYNAMELENGTH];
#      |          ^~~~~~~~~~~~~~~~~~~~
# 1455|   
# 1456|       /* special case #01#01 */
# 1457|->     if (fullNewMasterKeyName != NULL && strcmp(fullNewMasterKeyName, "#01#01") == 0)
# 1458|       {
# 1459|           Buffer empty = Buffer();

Error: COMPILER_WARNING (CWE-563): [#def59]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/p7tool.c: scope_hint: In function ‘DecodeAndPrintFile’
jss-5.6.0-alpha1/tools/src/main/native/p7tool/p7tool.c:261:17: warning[-Wunused-but-set-variable]: variable ‘nb’ set but not used
#  261 |             int nb = 0;
#      |                 ^~
#  259|               FILE *outFile;
#  260|               char filename[256];
#  261|->             int nb = 0;
#  262|   
#  263|               sprintf(filename, "%s%d.der", prefix, i);

Error: COMPILER_WARNING (CWE-704): [#def60]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/p7tool.c: scope_hint: In function ‘main’
jss-5.6.0-alpha1/tools/src/main/native/p7tool/p7tool.c:341:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  341 |         prefix = optstate->value;
#      |                ^
#  339|   
#  340|         case 'p':
#  341|->         prefix = optstate->value;
#  342|           break;
#  343|   

Error: COMPILER_WARNING (CWE-704): [#def61]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/p7tool.c:341:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  339|   
#  340|         case 'p':
#  341|->         prefix = optstate->value;
#  342|           break;
#  343|   

Error: COMPILER_WARNING (CWE-252): [#def62]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secpwd.c: scope_hint: In function ‘SEC_GetPassword’
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secpwd.c:69:21: warning[-Wunused-result]: ignoring return value of ‘fgets’ declared with attribute ‘warn_unused_result’
#   69 | #define QUIET_FGETS fgets
#      |                     ^
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secpwd.c:117:9: note: in expansion of macro ‘QUIET_FGETS’
#  117 |         QUIET_FGETS ( phrase, sizeof(phrase), input);
#      |         ^~~~~~~~~~~
#   67|   static char * quiet_fgets (char *buf, int length, FILE *input);
#   68|   #else
#   69|-> #define QUIET_FGETS fgets
#   70|   #endif
#   71|   

Error: COMPILER_WARNING (CWE-563): [#def63]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_ChangePW’
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:378:15: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  378 |     SECStatus rv;
#      |               ^~
#  376|   SECU_ChangePW(PK11SlotInfo *slot, char *passwd, char *pwFile)
#  377|   {
#  378|->     SECStatus rv;
#  379|       secuPWData pwdata, newpwdata;
#  380|       char *oldpw = NULL, *newpw = NULL;

Error: COMPILER_WARNING (CWE-477): [#def64]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘printflags’
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:2153:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2153 |     if (flags & CERTDB_VALID_PEER)
#      |     ^~
# 2151|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2152|   	    PORT_Strcat(trusts, "c");
# 2153|->     if (flags & CERTDB_VALID_PEER)
# 2154|   	if (!(flags & CERTDB_TRUSTED))
# 2155|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-477): [#def65]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:2153:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2151|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2152|   	    PORT_Strcat(trusts, "c");
# 2153|->     if (flags & CERTDB_VALID_PEER)
# 2154|   	if (!(flags & CERTDB_TRUSTED))
# 2155|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-477): [#def66]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘printFlags’
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:2953:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2953 |     if ( flags & CERTDB_VALID_PEER ) {
#      |     ^~
# 2951|   printFlags(FILE *out, unsigned int flags, int level)
# 2952|   {
# 2953|->     if ( flags & CERTDB_VALID_PEER ) {
# 2954|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2955|       }

Error: COMPILER_WARNING (CWE-477): [#def67]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:2953:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2951|   printFlags(FILE *out, unsigned int flags, int level)
# 2952|   {
# 2953|->     if ( flags & CERTDB_VALID_PEER ) {
# 2954|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2955|       }

Error: CPPCHECK_WARNING (CWE-476): [#def68]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:3041: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3039|   
# 3040|       for (i=0; i<cmd->numCommands; i++) {
# 3041|-> 	optstring[j++] = cmd->commands[i].flag;
# 3042|       }
# 3043|       for (i=0; i<cmd->numOptions; i++) {

Error: CPPCHECK_WARNING (CWE-476): [#def69]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:3044: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3042|       }
# 3043|       for (i=0; i<cmd->numOptions; i++) {
# 3044|-> 	optstring[j++] = cmd->options[i].flag;
# 3045|   	if (cmd->options[i].needsArg)
# 3046|   	    optstring[j++] = ':';

Error: CPPCHECK_WARNING (CWE-476): [#def70]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:3048: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3046|   	    optstring[j++] = ':';
# 3047|       }
# 3048|->     optstring[j] = '\0';
# 3049|       optstate = PL_CreateOptState(argc, argv, optstring);
# 3050|   

Error: COMPILER_WARNING (CWE-704): [#def71]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:3291:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3291 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3289|   	    switch (node->error) {
# 3290|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3291|-> 		flags = (unsigned int)node->arg;
# 3292|   		switch (flags) {
# 3293|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING (CWE-704): [#def72]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:3291:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3289|   	    switch (node->error) {
# 3290|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3291|-> 		flags = (unsigned int)node->arg;
# 3292|   		switch (flags) {
# 3293|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING (CWE-704): [#def73]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:3307:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3307 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3305|   		}
# 3306|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3307|-> 		flags = (unsigned int)node->arg;
# 3308|   		switch (flags) {
# 3309|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING (CWE-704): [#def74]
jss-5.6.0-alpha1/tools/src/main/native/p7tool/secutil.c:3307:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3305|   		}
# 3306|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3307|-> 		flags = (unsigned int)node->arg;
# 3308|   		switch (flags) {
# 3309|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING (CWE-704): [#def75]
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘my_GetClientAuthData’
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c:218:59: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  218 |     FPRINTF(stderr,"   mygetclientauthdata - cert = %x\n",(unsigned int)cert);
#      |                                                           ^
#  216|     if (chosenNickName) {
#  217|       cert = PK11_FindCertFromNickname(chosenNickName, proto_win);
#  218|->     FPRINTF(stderr,"   mygetclientauthdata - cert = %x\n",(unsigned int)cert);
#  219|       if ( cert ) {
#  220|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);

Error: COMPILER_WARNING (CWE-704): [#def76]
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c:218:59: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  216|     if (chosenNickName) {
#  217|       cert = PK11_FindCertFromNickname(chosenNickName, proto_win);
#  218|->     FPRINTF(stderr,"   mygetclientauthdata - cert = %x\n",(unsigned int)cert);
#  219|       if ( cert ) {
#  220|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);

Error: COMPILER_WARNING (CWE-704): [#def77]
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c:221:64: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  221 |       FPRINTF(stderr,"   mygetclientauthdata - privkey = %x\n",(unsigned int)privkey);
#      |                                                                ^
#  219|       if ( cert ) {
#  220|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);
#  221|->       FPRINTF(stderr,"   mygetclientauthdata - privkey = %x\n",(unsigned int)privkey);
#  222|         if ( privkey ) {
#  223|       rv = SECSuccess;

Error: COMPILER_WARNING (CWE-704): [#def78]
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c:221:64: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  219|       if ( cert ) {
#  220|         privkey = PK11_FindKeyByAnyCert(cert, proto_win);
#  221|->       FPRINTF(stderr,"   mygetclientauthdata - privkey = %x\n",(unsigned int)privkey);
#  222|         if ( privkey ) {
#  223|       rv = SECSuccess;

Error: COMPILER_WARNING (CWE-563): [#def79]
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c: scope_hint: In function ‘do_connect’
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c:485:25: warning[-Wunused-but-set-variable]: variable ‘result’ set but not used
#  485 |     SECStatus           result;
#      |                         ^~~~~~
#  483|       PRFileDesc *        tcp_sock;
#  484|       PRStatus            prStatus;
#  485|->     SECStatus           result;
#  486|       int                 rv = SECSuccess;
#  487|       PRSocketOptionData  opt;

Error: COMPILER_WARNING (CWE-1164): [#def80]
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c: scope_hint: At top level
jss-5.6.0-alpha1/tools/src/main/native/sslget/sslget.c:548:1: warning[-Wunused-function]: ‘getIPAddress’ defined but not used
#  548 | getIPAddress(const char * hostName)
#      | ^~~~~~~~~~~~
#  546|   */
#  547|   static PRUint32
#  548|-> getIPAddress(const char * hostName) 
#  549|   {
#  550|       const unsigned char *p;

Scan Properties