syslinux-6.04-0.31.fc43

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-465): [#def1]
syslinux-6.04-pre1/bios/com32/cmenu/test.c:79:11: warning[-Wanalyzer-deref-before-check]: check of ‘s’ for NULL after already dereferencing it
syslinux-6.04-pre1/bios/com32/cmenu/test.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/bios/com32/cmenu/test.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/bios/com32/cmenu/test.c:79:11: branch_true: following ‘true’ branch (when ‘s’ is NULL)...
 branch_true: ...to here
syslinux-6.04-pre1/bios/com32/cmenu/test.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/bios/com32/cmenu/test.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/bios/com32/cmenu/test.c:79:11: danger: pointer ‘s’ is checked for NULL here but it was already dereferenced at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   77|       if (*p != ' ') {
#   78|          // mark start of string or record the last visited non-space char
#   79|->        if (!s) s=p; else e=p;
#   80|       }
#   81|       p++;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
syslinux-6.04-pre1/bios/com32/cmenu/test.c:83:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘e’
#   81|       p++;
#   82|     }
#   83|->   *(++e)='\0'; // kill string earlier
#   84|     return s;
#   85|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
syslinux-6.04-pre1/bios/com32/cmenu/test.c:276:4: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cmdline’
syslinux-6.04-pre1/bios/com32/cmenu/test.c:284:6: enter_function: entry to ‘runcommand’
syslinux-6.04-pre1/bios/com32/cmenu/test.c:290:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/bios/com32/cmenu/test.c:291:4: call_function: calling ‘gencommand’ from ‘runcommand’
#  274|   {
#  275|      pt_xtra x;
#  276|->    cmdline[0] = '\0';
#  277|      strcat(cmdline,mi->data);
#  278|      x = (pt_xtra) mi->extra_data;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
syslinux-6.04-pre1/bios/com32/cmenu/test.c:319:21: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xtra’
syslinux-6.04-pre1/bios/com32/cmenu/test.c:317:21: acquire_memory: this call could return NULL
syslinux-6.04-pre1/bios/com32/cmenu/test.c:319:21: danger: ‘xtra’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  317|      xtra = (pt_xtra) malloc(sizeof(t_xtra));
#  318|      mi->extra_data = (void *) xtra;
#  319|->    xtra->argsmenu = xtra->perms = NULL;
#  320|      xtra->ipappend = ipappend;
#  321|      if (!bad_argsmenu) {

Error: GCC_ANALYZER_WARNING (CWE-465): [#def5]
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:79:11: warning[-Wanalyzer-deref-before-check]: check of ‘s’ for NULL after already dereferencing it
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:79:11: branch_true: following ‘true’ branch (when ‘s’ is NULL)...
 branch_true: ...to here
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:79:11: danger: pointer ‘s’ is checked for NULL here but it was already dereferenced at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   77|       if (*p != ' ') {
#   78|          // mark start of string or record the last visited non-space char
#   79|->        if (!s) s=p; else e=p;
#   80|       }
#   81|       p++;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:83:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘e’
#   81|       p++;
#   82|     }
#   83|->   *(++e)='\0'; // kill string earlier
#   84|     return s;
#   85|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def7]
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:100:4: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*cmd’
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:332:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:493:6: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:494:13: branch_true: ...to here
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:494:13: call_function: calling ‘execdotcmd’ from ‘main’
#   98|      char ctr;
#   99|   
#  100|->    strcpy(dotcmd,cmd);
#  101|      next = dotcmd;
#  102|      cmdline[0] = '\0';

Error: GCC_ANALYZER_WARNING (CWE-476): [#def8]
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:276:4: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cmdline’
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:284:6: enter_function: entry to ‘runcommand’
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:290:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:291:4: call_function: calling ‘gencommand’ from ‘runcommand’
#  274|   {
#  275|      pt_xtra x;
#  276|->    cmdline[0] = '\0';
#  277|      strcat(cmdline,mi->data);
#  278|      x = (pt_xtra) mi->extra_data;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:319:21: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xtra’
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:317:21: acquire_memory: this call could return NULL
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:319:21: danger: ‘xtra’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  317|      xtra = (pt_xtra) malloc(sizeof(t_xtra));
#  318|      mi->extra_data = (void *) xtra;
#  319|->    xtra->argsmenu = xtra->perms = NULL;
#  320|      xtra->ipappend = ipappend;
#  321|      if (!bad_argsmenu) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def10]
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:323:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(strlen(argsmenu) + 1)’ where non-null expected
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:332:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/bios/com32/cmenu/test2.c:456:3: call_function: calling ‘set_xtra’ from ‘main’
#argument 1 of ‘__builtin_strcpy’ must be non-null
#  321|      if (!bad_argsmenu) {
#  322|         xtra->argsmenu = (char *) malloc(sizeof(char)*(strlen(argsmenu)+1));
#  323|->       strcpy(xtra->argsmenu,argsmenu);
#  324|      }
#  325|      if (!bad_perms) {

Error: COMPILER_WARNING (CWE-704): [#def11]
syslinux-6.04-pre1/com32/chain/chain.c: scope_hint: In function ‘do_boot’
syslinux-6.04-pre1/com32/chain/chain.c:172:35: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  172 |                                   (addr_t) data[i].data, data[i].size))
#      |                                   ^
#  170|       for (i = 0; i < ndata; i++) {
#  171|   	if (syslinux_add_movelist(&mlist, data[i].base,
#  172|-> 				  (addr_t) data[i].data, data[i].size))
#  173|   	    goto enomem;
#  174|       }

Error: COMPILER_WARNING (CWE-704): [#def12]
syslinux-6.04-pre1/com32/chain/chain.c:172:35: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  170|       for (i = 0; i < ndata; i++) {
#  171|   	if (syslinux_add_movelist(&mlist, data[i].base,
#  172|-> 				  (addr_t) data[i].data, data[i].size))
#  173|   	    goto enomem;
#  174|       }

Error: COMPILER_WARNING (CWE-704): [#def13]
syslinux-6.04-pre1/com32/chain/chain.c:246:53: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  246 |         if (syslinux_add_movelist(&mlist, endimage, (addr_t) swapstub,
#      |                                                     ^
#  244|   	opt.regs.ebx.b[0] = opt.regs.edx.b[0] = swapdrive;
#  245|   
#  246|-> 	if (syslinux_add_movelist(&mlist, endimage, (addr_t) swapstub,
#  247|   				  sizeof swapstub))
#  248|   	    goto enomem;

Error: COMPILER_WARNING (CWE-704): [#def14]
syslinux-6.04-pre1/com32/chain/chain.c:246:53: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  244|   	opt.regs.ebx.b[0] = opt.regs.edx.b[0] = swapdrive;
#  245|   
#  246|-> 	if (syslinux_add_movelist(&mlist, endimage, (addr_t) swapstub,
#  247|   				  sizeof swapstub))
#  248|   	    goto enomem;

Error: COMPILER_WARNING: [#def15]
syslinux-6.04-pre1/com32/chain/options.c: scope_hint: In function ‘opt_parse_args’
syslinux-6.04-pre1/com32/chain/options.c:364:39: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  364 |                 case '2': opt.piflags |= PIF_STRICTER;
#      |                           ~~~~~~~~~~~~^~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/chain/options.c:365:17: note: here
#  365 |                 case '1': opt.piflags |= PIF_STRICT; break;
#      |                 ^~~~
#  362|   	    opt.piflags &= ~(PIF_STRICT | PIF_STRICTER);
#  363|   	    switch (argv[i][7]) {
#  364|-> 		case '2': opt.piflags |= PIF_STRICTER;
#  365|   		case '1': opt.piflags |= PIF_STRICT; break;
#  366|   		default:;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def16]
syslinux-6.04-pre1/com32/chain/partiter.c:511:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘gpt_part’
syslinux-6.04-pre1/com32/chain/partiter.c:492:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/chain/partiter.c:505:9: branch_false: ...to here
syslinux-6.04-pre1/com32/chain/partiter.c:505:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/chain/partiter.c:510:19: branch_false: ...to here
syslinux-6.04-pre1/com32/chain/partiter.c:513:5: release_memory: ‘gpt_part’ is NULL
syslinux-6.04-pre1/com32/chain/partiter.c:511:21: danger: dereference of NULL ‘gpt_part’
#  509|       /* gpt_part is guaranteed to be valid here */
#  510|       iter->index = iter->index0 + 1;
#  511|->     iter->abs_lba = gpt_part->lba_first;
#  512|       iter->length = gpt_part->lba_last - gpt_part->lba_first + 1;
#  513|       iter->record = (char *)gpt_part;

Error: COMPILER_WARNING: [#def17]
syslinux-6.04-pre1/com32/chain/chain.c:38: included_from: Included from here.
syslinux-6.04-pre1/com32/chain/chain.c: scope_hint: In function ‘main’
syslinux-6.04-pre1/com32/chain/utility.h:47:26: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   47 | #define dosmax ((addr_t)(*(uint16_t *) 0x413 << 10))
#      |                          ^~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/chain/chain.c:521:37: note: in expansion of macro ‘dosmax’
#  521 |         if (fdat.base + fdat.size > dosmax) {
#      |                                     ^~~~~~
cc1: note: source object is likely at address zero
#   45|   /* first usable and first unusable offsets */
#   46|   #define dosmin ((addr_t)0x500u)
#   47|-> #define dosmax ((addr_t)(*(uint16_t *) 0x413 << 10))
#   48|   
#   49|   void wait_key(void);

Error: COMPILER_WARNING: [#def18]
syslinux-6.04-pre1/com32/cmenu/libmenu/com32io.h:49:12: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘void[0]’
#   49 |     return *((unsigned char *)MK_PTR(0, ofs));
#      |            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   47|   static inline unsigned char readbiosb(unsigned int ofs)
#   48|   {
#   49|->     return *((unsigned char *)MK_PTR(0, ofs));
#   50|   }
#   51|   

Error: CPPCHECK_WARNING (CWE-457): [#def19]
syslinux-6.04-pre1/com32/cmenu/libmenu/des.c:600: warning[uninitvar]: Uninitialized variable: key
#  598|        */
#  599|   
#  600|->     rawkey0 = char_to_int(key);
#  601|       rawkey1 = char_to_int(key + 4);
#  602|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
syslinux-6.04-pre1/com32/cmenu/libmenu/help.c:127:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘text’
syslinux-6.04-pre1/com32/cmenu/libmenu/help.c:198:6: enter_function: entry to ‘runhelp’
syslinux-6.04-pre1/com32/cmenu/libmenu/help.c:208:9: call_function: calling ‘showhelp’ from ‘runhelp’
#  125|       title = buf.buffer;
#  126|       text = findline(title, 1);	// end of first line
#  127|->     *text++ = '\0';		// end the title string and increment text
#  128|   
#  129|       // Now we have a file just print it.

Error: COMPILER_WARNING (CWE-483): [#def21]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c: scope_hint: In function ‘getmenuoption’
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:485:9: warning[-Wmisleading-indentation]: this ‘if’ clause does not guard...
#  485 |         if (ms->keys_handler)   // Call extra keys handler
#      |         ^~
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:489:13: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘if’
#  489 |             reset_ui();
#      |             ^~~~~~~~
#  483|           curr = tmp;
#  484|           } else {
#  485|->         if (ms->keys_handler)   // Call extra keys handler
#  486|               ms->keys_handler(ms, menu->items[curr], asc);
#  487|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def22]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘malloc((long unsigned int)*m.maxmenusize * 8)’
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1021:8: branch_false: following ‘false’ branch (when ‘num <= 249’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1024:19: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1025:8: branch_false: following ‘false’ branch (when ‘m’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1027:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1036:32: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:5: danger: ‘malloc((long unsigned int)*m.maxmenusize * 8) + (long unsigned int)i * 8’ could be NULL: unchecked value from [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 1036|       m->items = (pt_menuitem *) malloc(sizeof(pt_menuitem) * (m->maxmenusize));
# 1037|       for (i = 0; i < m->maxmenusize; i++)
# 1038|->     m->items[i] = NULL;
# 1039|   
# 1040|       m->title = (char *)malloc(MENULEN + 1);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def23]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘malloc((unsigned int)*m.maxmenusize * 4)’
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1021:8: branch_false: following ‘false’ branch (when ‘num <= 249’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1024:19: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1025:8: branch_false: following ‘false’ branch (when ‘m’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1027:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1036:32: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:5: danger: ‘malloc((unsigned int)*m.maxmenusize * 4) + (unsigned int)i * 4’ could be NULL: unchecked value from [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 1036|       m->items = (pt_menuitem *) malloc(sizeof(pt_menuitem) * (m->maxmenusize));
# 1037|       for (i = 0; i < m->maxmenusize; i++)
# 1038|->     m->items[i] = NULL;
# 1039|   
# 1040|       m->title = (char *)malloc(MENULEN + 1);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def24]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1043:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1021:8: branch_false: following ‘false’ branch (when ‘num <= 249’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1024:19: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1025:8: branch_false: following ‘false’ branch (when ‘m’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1027:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1040:24: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1040:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1041:8: branch_true: following ‘true’ branch (when ‘title’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1042:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1042:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1043:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1043:9: danger: argument 1 (‘malloc(79)’) from [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1041|       if (title) {
# 1042|       if (strlen(title) > MENULEN - 2)
# 1043|->         strcpy(m->title, TITLELONG);
# 1044|       else
# 1045|           strcpy(m->title, title);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def25]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1045:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1021:8: branch_false: following ‘false’ branch (when ‘num <= 249’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1024:19: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1025:8: branch_false: following ‘false’ branch (when ‘m’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1027:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1040:24: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1040:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1041:8: branch_true: following ‘true’ branch (when ‘title’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1042:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1042:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1045:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1045:9: danger: argument 1 (‘malloc(79)’) from [(9)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/8) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1043|           strcpy(m->title, TITLELONG);
# 1044|       else
# 1045|->         strcpy(m->title, title);
# 1046|       } else
# 1047|       strcpy(m->title, EMPTYSTR);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def26]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1047:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1021:8: branch_false: following ‘false’ branch (when ‘num <= 249’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1024:19: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1025:8: branch_false: following ‘false’ branch (when ‘m’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1027:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1040:24: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1040:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1041:8: branch_false: following ‘false’ branch (when ‘title’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1047:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1047:5: danger: argument 1 (‘malloc(79)’) from [(9)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/8) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1045|           strcpy(m->title, title);
# 1046|       } else
# 1047|->     strcpy(m->title, EMPTYSTR);
# 1048|       m->menuwidth = strlen(m->title);
# 1049|       ms->nummenus++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def27]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1050:12: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1021:8: branch_false: following ‘false’ branch (when ‘num <= 249’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1024:19: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1025:8: branch_false: following ‘false’ branch (when ‘m’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1027:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1036:32: acquire_memory: allocated here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1038:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1037:17: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1040:24: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1041:8: branch_true: following ‘true’ branch (when ‘title’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1042:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1042:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1043:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1050:12: danger: ‘<unknown>’ leaks here; was allocated at [(5)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/4)
# 1048|       m->menuwidth = strlen(m->title);
# 1049|       ms->nummenus++;
# 1050|->     return ms->nummenus - 1;
# 1051|   }
# 1052|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def28]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1066:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(strlen(name) + 1)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1064:8: branch_true: following ‘true’ branch (when ‘name’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1065:30: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1065:23: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1066:5: danger: argument 1 (‘malloc(strlen(name) + 1)’) from [(3)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1064|       if (name) {
# 1065|       m->name = (char *)malloc(strlen(name) + 1);
# 1066|->     strcpy(m->name, name);
# 1067|       }
# 1068|   }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def29]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1132:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1126:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_true: following ‘true’ branch (when ‘item’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1131:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1131:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1132:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1132:9: danger: argument 1 (‘malloc(79)’) from [(3)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1130|       if (item) {
# 1131|       if (strlen(item) > MENULEN) {
# 1132|->         strcpy(mi->item, ITEMLONG);
# 1133|       } else {
# 1134|           strcpy(mi->item, item);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def30]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1134:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1126:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_true: following ‘true’ branch (when ‘item’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1131:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1131:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1134:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1134:9: danger: argument 1 (‘malloc(79)’) from [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1132|           strcpy(mi->item, ITEMLONG);
# 1133|       } else {
# 1134|->         strcpy(mi->item, item);
# 1135|       }
# 1136|       if (strlen(mi->item) > m->menuwidth)

Error: GCC_ANALYZER_WARNING (CWE-688): [#def31]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1126:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: danger: argument 1 (‘malloc(79)’) from [(3)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1137|           m->menuwidth = strlen(mi->item);
# 1138|       } else
# 1139|->     strcpy(mi->item, EMPTYSTR);
# 1140|   
# 1141|       if (status) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def32]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1143:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1127:26: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1141:8: branch_true: following ‘true’ branch (when ‘status’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1143:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1143:9: danger: argument 1 (‘malloc(79)’) from [(3)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1141|       if (status) {
# 1142|       if (strlen(status) > STATLEN) {
# 1143|->         strcpy(mi->status, STATUSLONG);
# 1144|       } else {
# 1145|           strcpy(mi->status, status);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def33]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1145:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1127:26: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1141:8: branch_true: following ‘true’ branch (when ‘status’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1145:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1145:9: danger: argument 1 (‘malloc(79)’) from [(3)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1143|           strcpy(mi->status, STATUSLONG);
# 1144|       } else {
# 1145|->         strcpy(mi->status, status);
# 1146|       }
# 1147|       } else

Error: GCC_ANALYZER_WARNING (CWE-688): [#def34]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1148:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(79)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1127:26: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1141:8: branch_false: following ‘false’ branch (when ‘status’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1148:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1148:5: danger: argument 1 (‘malloc(79)’) from [(3)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1146|       }
# 1147|       } else
# 1148|->     strcpy(mi->status, EMPTYSTR);
# 1149|   
# 1150|       mi->action = action;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def35]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1177:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(256)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1128:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1141:8: branch_true: following ‘true’ branch (when ‘status’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1143:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1175:8: branch_true: following ‘true’ branch (when ‘data’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1176:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1176:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1177:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1177:9: danger: argument 1 (‘malloc(256)’) from [(3)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1175|       if (data) {
# 1176|       if (strlen(data) > ACTIONLEN) {
# 1177|->         strcpy(mi->data, ACTIONLONG);
# 1178|       } else {
# 1179|           strcpy(mi->data, data);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def36]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1179:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(256)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1128:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1141:8: branch_true: following ‘true’ branch (when ‘status’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1143:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1175:8: branch_true: following ‘true’ branch (when ‘data’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1176:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1176:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1179:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1179:9: danger: argument 1 (‘malloc(256)’) from [(3)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1177|           strcpy(mi->data, ACTIONLONG);
# 1178|       } else {
# 1179|->         strcpy(mi->data, data);
# 1180|       }
# 1181|       } else

Error: GCC_ANALYZER_WARNING (CWE-688): [#def37]
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1182:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(256)’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1120:8: branch_false: following ‘false’ branch (when ‘mi’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1122:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1128:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1130:8: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1139:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1141:8: branch_true: following ‘true’ branch (when ‘status’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1142:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1143:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1175:8: branch_false: following ‘false’ branch (when ‘data’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1182:5: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/menu.c:1182:5: danger: argument 1 (‘malloc(256)’) from [(3)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
# 1180|       }
# 1181|       } else
# 1182|->     strcpy(mi->data, EMPTYSTR);
# 1183|   
# 1184|       switch (action) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def38]
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:58:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘dperm’
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:52:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:54:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:54:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:56:28: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:56:21: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:58:5: danger: ‘dperm’ could be NULL: unchecked value from [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   56|       dperm = (char *)malloc(strlen(perm) + 3);
#   57|       strcpy(dperm + 1, perm);
#   58|->     dperm[0] = ':';
#   59|       dperm[strlen(perm) + 1] = ':';
#   60|       dperm[strlen(perm) + 2] = 0;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def39]
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:65:16: warning[-Wanalyzer-malloc-leak]: leak of ‘dperm’
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:52:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:54:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:54:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:56:28: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:56:21: acquire_memory: allocated here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:62:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:63:20: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:65:16: branch_true: following ‘true’ branch...
 branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:65:16: danger: ‘dperm’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#   63|   	if (strcmp(userdb[i]->username, username) == 0)	// Found the user
#   64|   	{
#   65|-> 	    if (userdb[i]->perms == NULL)
#   66|   		return 0;	// No permission
#   67|   	    tmp = strstr(userdb[i]->perms, dperm);	// Search for permission

Error: GCC_ANALYZER_WARNING (CWE-476): [#def40]
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:137:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘userdb[<unknown>]’
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:87:17: branch_true: following ‘true’ branch (when ‘i != 128’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:88:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:91:8: branch_false: following ‘false’ branch (when ‘filename’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:94:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:95:8: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:99:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:101:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:102:12: branch_false: following ‘false’ branch (when ‘p’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:104:13: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:105:12: branch_false: following ‘false’ branch (when ‘p’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:110:15: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:124:12: branch_true: following ‘true’ branch (when ‘p’ is NULL)...
 branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:133:41: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:136:12: branch_true: following ‘true’ branch (when ‘perms’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:137:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:137:13: danger: ‘userdb[<unknown>]’ could be NULL: unchecked value from [(19)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/18)
#  135|   	strcpy(userdb[numusers]->pwdhash, pwdhash);
#  136|   	if (perms == NULL)
#  137|-> 	    userdb[numusers]->perms = NULL;
#  138|   	else {
#  139|   	    userdb[numusers]->perms = (char *)malloc(strlen(perms) + 3);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def41]
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:139:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘userdb[<unknown>]’
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:87:17: branch_true: following ‘true’ branch (when ‘i != 128’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:88:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:91:8: branch_false: following ‘false’ branch (when ‘filename’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:94:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:95:8: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:99:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:101:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:102:12: branch_false: following ‘false’ branch (when ‘p’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:104:13: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:105:12: branch_false: following ‘false’ branch (when ‘p’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:110:15: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:124:12: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:127:13: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:129:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:133:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:133:41: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:136:12: branch_false: following ‘false’ branch (when ‘perms’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:139:54: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:139:13: danger: ‘userdb[<unknown>]’ could be NULL: unchecked value from [(21)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/20)
#  137|   	    userdb[numusers]->perms = NULL;
#  138|   	else {
#  139|-> 	    userdb[numusers]->perms = (char *)malloc(strlen(perms) + 3);
#  140|   	    (userdb[numusers]->perms)[0] = ':';
#  141|   	    strcpy(userdb[numusers]->perms + 1, perms);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def42]
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:140:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘malloc(strlen(perms) + 3)’
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:87:17: branch_true: following ‘true’ branch (when ‘i != 128’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:88:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:91:8: branch_false: following ‘false’ branch (when ‘filename’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:94:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:95:8: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:99:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:101:13: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:102:12: branch_false: following ‘false’ branch (when ‘p’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:104:13: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:105:12: branch_false: following ‘false’ branch (when ‘p’ is NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:110:15: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:124:12: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:127:13: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:129:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:133:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:136:12: branch_false: following ‘false’ branch (when ‘perms’ is non-NULL)...
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:139:54: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:139:47: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/passwords.c:140:13: danger: ‘malloc(strlen(perms) + 3)’ could be NULL: unchecked value from [(23)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/22)
#  138|   	else {
#  139|   	    userdb[numusers]->perms = (char *)malloc(strlen(perms) + 3);
#  140|-> 	    (userdb[numusers]->perms)[0] = ':';
#  141|   	    strcpy(userdb[numusers]->perms + 1, perms);
#  142|   	    (userdb[numusers]->perms)[strlen(perms) + 1] = ':';

Error: GCC_ANALYZER_WARNING (CWE-688): [#def43]
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:51:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘str’ where non-null expected
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:45:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:47:8: branch_false: following ‘false’ branch (when ‘password == 0’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:50:8: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:50:8: branch_true: following ‘true’ branch (when ‘showoldvalue != 0’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:51:9: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:51:9: danger: argument 1 (‘str’) from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
#   49|   
#   50|       if (showoldvalue != 0)
#   51|-> 	strcpy(str, stra);	// If show old value copy current value
#   52|   
#   53|       last = str;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def44]
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:54:12: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘last’
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:45:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:54:12: danger: ‘last’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   52|   
#   53|       last = str;
#   54|->     while (*last) {
#   55|   	last++;
#   56|       }				// Find the terminating null byte

Error: GCC_ANALYZER_WARNING (CWE-124): [#def45]
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:147:21: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:54:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:57:15: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:73:12: branch_false: following ‘false’ branch (when ‘c != 13’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:75:12: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:75:12: branch_false: following ‘false’ branch (when ‘c != 27’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:84:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:191:12: branch_false: following ‘false’ branch (when ‘password != 0’)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:73:12: branch_false: following ‘false’ branch (when ‘c != 13’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:75:12: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:75:12: branch_false: following ‘false’ branch (when ‘c != 27’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:84:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:146:24: branch_true: following ‘true’ branch (when ‘q <= last’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:147:32: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:147:21: danger: out-of-bounds write at byte -1 but region starts at byte 0
#  145|   		q = p;
#  146|   		while (q <= last) {
#  147|-> 		    *(q - 1) = *q;
#  148|   		    q++;
#  149|   		}

Error: GCC_ANALYZER_WARNING (CWE-127): [#def46]
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:180:33: warning[-Wanalyzer-out-of-bounds]: heap-based buffer under-read
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:54:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:57:15: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:73:12: branch_false: following ‘false’ branch (when ‘c != 13’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:75:12: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:75:12: branch_false: following ‘false’ branch (when ‘c != 27’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:84:9: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:165:20: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:166:36: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:165:21: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:167:24: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:167:24: branch_false: following ‘false’ branch (when ‘insmode != 0’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:173:28: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:173:28: branch_false: following ‘false’ branch (when ‘p != last’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:178:33: branch_false: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:179:36: branch_true: following ‘true’ branch (when ‘p <= q’)...
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:180:33: branch_true: ...to here
syslinux-6.04-pre1/com32/cmenu/libmenu/tui.c:180:33: danger: out-of-bounds read at byte -1 but region starts at byte 0
#  178|   			    q = last++;
#  179|   			    while (q >= p) {
#  180|-> 				*q = *(q - 1);
#  181|   				q--;
#  182|   			    }

Error: COMPILER_WARNING: [#def47]
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:39:6: warning[-Wenum-int-mismatch]: conflicting types for ‘chainboot_file’ due to enum/integer mismatch; have ‘void(const char *, uint32_t)’ {aka ‘void(const char *, unsigned int)’}
#   39 | void chainboot_file(const char *file, uint32_t type)
#      |      ^~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:28: included_from: Included from here.
syslinux-6.04-pre1/com32/include/menu.h:232:6: note: previous declaration of ‘chainboot_file’ with type ‘void(const char *, enum kernel_type)’
#  232 | void chainboot_file(const char *file, enum kernel_type type);
#      |      ^~~~~~~~~~~~~~
#   37|   #include <syslinux/config.h>
#   38|   
#   39|-> void chainboot_file(const char *file, uint32_t type)
#   40|   {
#   41|       uint8_t keeppxe = 0;

Error: COMPILER_WARNING (CWE-704): [#def48]
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c: scope_hint: In function ‘chainboot_file’
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:64:17: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   64 |     reg.edi.l = (uint32_t)buf;
#      |                 ^
#   62|       reg.ebx.l = 0;
#   63|       reg.edx.w[0] = 0;
#   64|->     reg.edi.l = (uint32_t)buf;
#   65|       reg.ebp.l = -1;	/* XXX: limit? */
#   66|       reg.esi.w[0] = rv;

Error: COMPILER_WARNING (CWE-704): [#def49]
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:64:17: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   62|       reg.ebx.l = 0;
#   63|       reg.edx.w[0] = 0;
#   64|->     reg.edi.l = (uint32_t)buf;
#   65|       reg.ebp.l = -1;	/* XXX: limit? */
#   66|       reg.esi.w[0] = rv;

Error: COMPILER_WARNING (CWE-704): [#def50]
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:88:35: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   88 |                                   (addr_t)sdi->r.esbx, 16))
#      |                                   ^
#   86|   	sdi->c.filesystem == SYSLINUX_FS_EXTLINUX) {
#   87|   	if (syslinux_add_movelist(&fraglist, 0x800 - 18,
#   88|-> 				  (addr_t)sdi->r.esbx, 16))
#   89|   	    goto bail;
#   90|   

Error: COMPILER_WARNING (CWE-704): [#def51]
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:88:35: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   86|   	sdi->c.filesystem == SYSLINUX_FS_EXTLINUX) {
#   87|   	if (syslinux_add_movelist(&fraglist, 0x800 - 18,
#   88|-> 				  (addr_t)sdi->r.esbx, 16))
#   89|   	    goto bail;
#   90|   

Error: COMPILER_WARNING (CWE-704): [#def52]
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:143:50: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  143 |     if (syslinux_add_movelist(&fraglist, 0x7c00, (addr_t)buf, size))
#      |                                                  ^
#  141|       }
#  142|   
#  143|->     if (syslinux_add_movelist(&fraglist, 0x7c00, (addr_t)buf, size))
#  144|   	goto bail;
#  145|   

Error: COMPILER_WARNING (CWE-704): [#def53]
syslinux-6.04-pre1/com32/elflink/ldlinux/chainboot.c:143:50: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  141|       }
#  142|   
#  143|->     if (syslinux_add_movelist(&fraglist, 0x7c00, (addr_t)buf, size))
#  144|   	goto bail;
#  145|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def54]
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:471:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘comm_counter’
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:159:12: branch_false: following ‘false’ branch (when ‘redraw != 2’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:170:12: branch_false: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:170:12: branch_false: following ‘false’ branch (when ‘redraw == 0’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:211:15: branch_false: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:469:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:470:24: branch_true: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:470:24: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:471:9: danger: ‘comm_counter’ could be NULL: unchecked value from [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  469|       if (len > 0) {
#  470|   	comm_counter = malloc(sizeof(struct cli_command));
#  471|-> 	comm_counter->command = malloc(sizeof(char) * (len + 1));
#  472|   	strcpy(comm_counter->command, ret);
#  473|   	list_add(&(comm_counter->list), &cli_history_head);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def55]
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:472:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)(len + 1))’ where non-null expected
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:159:12: branch_false: following ‘false’ branch (when ‘redraw != 2’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:170:12: branch_false: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:170:12: branch_false: following ‘false’ branch (when ‘redraw == 0’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:211:15: branch_false: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:469:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:470:24: branch_true: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:471:33: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:472:9: danger: argument 1 (‘malloc((long unsigned int)(len + 1))’) from [(7)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/6) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
#  470|   	comm_counter = malloc(sizeof(struct cli_command));
#  471|   	comm_counter->command = malloc(sizeof(char) * (len + 1));
#  472|-> 	strcpy(comm_counter->command, ret);
#  473|   	list_add(&(comm_counter->list), &cli_history_head);
#  474|       }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def56]
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:472:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((unsigned int)(len + 1))’ where non-null expected
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:159:12: branch_false: following ‘false’ branch (when ‘redraw != 2’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:170:12: branch_false: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:170:12: branch_false: following ‘false’ branch (when ‘redraw == 0’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:211:15: branch_false: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:469:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:470:24: branch_true: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:471:33: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/elflink/ldlinux/cli.c:472:9: danger: argument 1 (‘malloc((unsigned int)(len + 1))’) from [(7)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/6) could be NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
#  470|   	comm_counter = malloc(sizeof(struct cli_command));
#  471|   	comm_counter->command = malloc(sizeof(char) * (len + 1));
#  472|-> 	strcpy(comm_counter->command, ret);
#  473|   	list_add(&(comm_counter->list), &cli_history_head);
#  474|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def57]
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:139:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cp’
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:133:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:138:17: branch_true: following ‘true’ branch (when ‘i != 18’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:139:9: branch_true: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:139:9: danger: ‘cp’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  137|   
#  138|       for (i = 0; i < NCOLORS; i++) {
#  139|-> 	*cp = *dp;
#  140|   	cp->ansi = refstrdup(dp->ansi);
#  141|   	cp++;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def58]
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:177:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cp’
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:171:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:176:17: branch_true: following ‘true’ branch (when ‘i != 274’)...
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:177:9: branch_true: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/colors.c:177:9: danger: ‘cp’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  175|   
#  176|       for (i = 0; i < NCOLORS + 256; i++) {
#  177|-> 	*cp = *dp;
#  178|   	cp->ansi = refstr_get(dp->ansi);
#  179|   	cp++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def59]
syslinux-6.04-pre1/com32/elflink/ldlinux/ldlinux.c:237:1: warning[-Wanalyzer-malloc-leak]: leak of ‘args’
syslinux-6.04-pre1/com32/elflink/ldlinux/ldlinux.c:243:6: enter_function: entry to ‘ldlinux_auto_boot’
syslinux-6.04-pre1/com32/elflink/ldlinux/ldlinux.c:251:17: call_function: calling ‘load_kernel’ from ‘ldlinux_auto_boot’
#  235|   		execute(cmdline, type, true);
#  236|   	}
#  237|-> }
#  238|   
#  239|   /*

Error: COMPILER_WARNING (CWE-704): [#def60]
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c: scope_hint: In function ‘pm_load_high’
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:57:17: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   57 |     buf       = (char *)regs->edi.l;
#      |                 ^
#   55|       bytes     = regs->eax.l;
#   56|       zero_mask = regs->edx.w[0];
#   57|->     buf       = (char *)regs->edi.l;
#   58|       limit     = (char *)(regs->ebp.l & ~zero_mask);
#   59|       file      = handle_to_file(regs->esi.w[0]);

Error: COMPILER_WARNING (CWE-704): [#def61]
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:57:17: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   55|       bytes     = regs->eax.l;
#   56|       zero_mask = regs->edx.w[0];
#   57|->     buf       = (char *)regs->edi.l;
#   58|       limit     = (char *)(regs->ebp.l & ~zero_mask);
#   59|       file      = handle_to_file(regs->esi.w[0]);

Error: COMPILER_WARNING (CWE-704): [#def62]
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:58:17: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   58 |     limit     = (char *)(regs->ebp.l & ~zero_mask);
#      |                 ^
#   56|       zero_mask = regs->edx.w[0];
#   57|       buf       = (char *)regs->edi.l;
#   58|->     limit     = (char *)(regs->ebp.l & ~zero_mask);
#   59|       file      = handle_to_file(regs->esi.w[0]);
#   60|       fs        = file->fs;

Error: COMPILER_WARNING (CWE-704): [#def63]
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:58:17: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   56|       zero_mask = regs->edx.w[0];
#   57|       buf       = (char *)regs->edi.l;
#   58|->     limit     = (char *)(regs->ebp.l & ~zero_mask);
#   59|       file      = handle_to_file(regs->esi.w[0]);
#   60|       fs        = file->fs;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def64]
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:60:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:42:6: enter_function: entry to ‘pm_load_high’
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:59:17: call_function: inlined call to ‘handle_to_file’ from ‘pm_load_high’
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:60:5: branch_false: ...to here
syslinux-6.04-pre1/com32/elflink/ldlinux/loadhigh.c:60:5: danger: dereference of NULL ‘<unknown>’
#   58|       limit     = (char *)(regs->ebp.l & ~zero_mask);
#   59|       file      = handle_to_file(regs->esi.w[0]);
#   60|->     fs        = file->fs;
#   61|   
#   62|       sector_mask = SECTOR_SIZE(fs) - 1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def65]
syslinux-6.04-pre1/com32/elflink/ldlinux/readconfig.c:198:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘m’
syslinux-6.04-pre1/com32/elflink/ldlinux/readconfig.c:1491:6: enter_function: entry to ‘parse_configs’
syslinux-6.04-pre1/com32/elflink/ldlinux/readconfig.c:1505:17: call_function: calling ‘new_menu’ from ‘parse_configs’
#  196|   	//dprintf("enter: menu_label = %s", label);
#  197|   
#  198|->     m->label = label;
#  199|       m->title = refstr_get(empty_string);
#  200|   

Error: COMPILER_WARNING (CWE-483): [#def66]
syslinux-6.04-pre1/com32/elflink/ldlinux/readconfig.c: scope_hint: In function ‘record’
syslinux-6.04-pre1/com32/elflink/ldlinux/readconfig.c:427:13: warning[-Wmisleading-indentation]: this ‘else’ clause does not guard...
#  427 |             else
#      |             ^~~~
syslinux-6.04-pre1/com32/elflink/ldlinux/readconfig.c:27: included_from: Included from here.
syslinux-6.04-pre1/com32/include/dprintf.h:31:5: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘else’
#   31 |     if (syslinux_debug_enabled) \
#      |     ^~
syslinux-6.04-pre1/com32/elflink/ldlinux/readconfig.c:430:17: note: in expansion of macro ‘dprintf’
#  430 |                 dprintf("type = %s, cmd = %s", kernel_types[ld->type], me->cmdline);
#      |                 ^~~~~~~
#  425|   	    if (ld->type == KT_KERNEL)
#  426|   		rsprintf(&me->cmdline, "%s%s%s%s", ld->kernel, s, a, ipoptions);
#  427|-> 	    else
#  428|   		rsprintf(&me->cmdline, ".%s %s%s%s%s",
#  429|   			 kernel_types[ld->type], ld->kernel, s, a, ipoptions);

Error: COMPILER_WARNING (CWE-704): [#def67]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c: scope_hint: In function ‘main’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:231:30: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  231 |     gfx_config.gfxboot_cwd = (uint32_t) working_dir;
#      |                              ^
#  229|   
#  230|     if(getcwd(working_dir, sizeof working_dir)) {
#  231|->     gfx_config.gfxboot_cwd = (uint32_t) working_dir;
#  232|     }
#  233|   

Error: COMPILER_WARNING (CWE-704): [#def68]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:231:30: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  229|   
#  230|     if(getcwd(working_dir, sizeof working_dir)) {
#  231|->     gfx_config.gfxboot_cwd = (uint32_t) working_dir;
#  232|     }
#  233|   

Error: COMPILER_WARNING (CWE-704): [#def69]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c: scope_hint: In function ‘gfx_init’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:551:30: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  551 |   gfx_config.archive_start = (uint32_t) archive;
#      |                              ^
#  549|     // printf("%s: %d\n", file, archive_size);
#  550|   
#  551|->   gfx_config.archive_start = (uint32_t) archive;
#  552|     gfx_config.archive_end = gfx_config.archive_start + archive_size;
#  553|   

Error: COMPILER_WARNING (CWE-704): [#def70]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:551:30: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  549|     // printf("%s: %d\n", file, archive_size);
#  550|   
#  551|->   gfx_config.archive_start = (uint32_t) archive;
#  552|     gfx_config.archive_end = gfx_config.archive_start + archive_size;
#  553|   

Error: COMPILER_WARNING (CWE-704): [#def71]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:586:52: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  586 |   *(uint16_t *) (lowmem + REALMODE_BUF_SIZE + 2) = (uint32_t) lowmem >> 4;
#      |                                                    ^
#  584|     // fill in buffer size and location
#  585|     *(uint16_t *) (lowmem + REALMODE_BUF_SIZE) = REALMODE_BUF_SIZE;
#  586|->   *(uint16_t *) (lowmem + REALMODE_BUF_SIZE + 2) = (uint32_t) lowmem >> 4;
#  587|   
#  588|     gfx_config.bootloader_seg = ((uint32_t) lowmem + REALMODE_BUF_SIZE) >> 4;

Error: COMPILER_WARNING (CWE-704): [#def72]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:586:52: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  584|     // fill in buffer size and location
#  585|     *(uint16_t *) (lowmem + REALMODE_BUF_SIZE) = REALMODE_BUF_SIZE;
#  586|->   *(uint16_t *) (lowmem + REALMODE_BUF_SIZE + 2) = (uint32_t) lowmem >> 4;
#  587|   
#  588|     gfx_config.bootloader_seg = ((uint32_t) lowmem + REALMODE_BUF_SIZE) >> 4;

Error: COMPILER_WARNING (CWE-704): [#def73]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:588:32: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  588 |   gfx_config.bootloader_seg = ((uint32_t) lowmem + REALMODE_BUF_SIZE) >> 4;
#      |                                ^
#  586|     *(uint16_t *) (lowmem + REALMODE_BUF_SIZE + 2) = (uint32_t) lowmem >> 4;
#  587|   
#  588|->   gfx_config.bootloader_seg = ((uint32_t) lowmem + REALMODE_BUF_SIZE) >> 4;
#  589|     gfx_config.callback = 4;	// start address
#  590|   

Error: COMPILER_WARNING (CWE-704): [#def74]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:588:32: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  586|     *(uint16_t *) (lowmem + REALMODE_BUF_SIZE + 2) = (uint32_t) lowmem >> 4;
#  587|   
#  588|->   gfx_config.bootloader_seg = ((uint32_t) lowmem + REALMODE_BUF_SIZE) >> 4;
#  589|     gfx_config.callback = 4;	// start address
#  590|   

Error: COMPILER_WARNING (CWE-704): [#def75]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:596:27: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  596 |   gfx_config.mem0_start = (uint32_t) lowmem + code_size;
#      |                           ^
#  594|     memcpy(lowmem, archive + file_start + code_start, code_size);
#  595|   
#  596|->   gfx_config.mem0_start = (uint32_t) lowmem + code_size;
#  597|     gfx_config.mem0_end = (uint32_t) lowmem + lowmem_size;
#  598|     // align a bit

Error: COMPILER_WARNING (CWE-704): [#def76]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:596:27: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  594|     memcpy(lowmem, archive + file_start + code_start, code_size);
#  595|   
#  596|->   gfx_config.mem0_start = (uint32_t) lowmem + code_size;
#  597|     gfx_config.mem0_end = (uint32_t) lowmem + lowmem_size;
#  598|     // align a bit

Error: COMPILER_WARNING (CWE-704): [#def77]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:597:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  597 |   gfx_config.mem0_end = (uint32_t) lowmem + lowmem_size;
#      |                         ^
#  595|   
#  596|     gfx_config.mem0_start = (uint32_t) lowmem + code_size;
#  597|->   gfx_config.mem0_end = (uint32_t) lowmem + lowmem_size;
#  598|     // align a bit
#  599|     gfx_config.mem0_start = (gfx_config.mem0_start + 0xf) & ~0xf;

Error: COMPILER_WARNING (CWE-704): [#def78]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:597:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  595|   
#  596|     gfx_config.mem0_start = (uint32_t) lowmem + code_size;
#  597|->   gfx_config.mem0_end = (uint32_t) lowmem + lowmem_size;
#  598|     // align a bit
#  599|     gfx_config.mem0_start = (gfx_config.mem0_start + 0xf) & ~0xf;

Error: COMPILER_WARNING (CWE-704): [#def79]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:601:27: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  601 |   gfx_config.xmem_start = (uint32_t) malloc(GFX_MEMORY_SIZE << 20);
#      |                           ^
#  599|     gfx_config.mem0_start = (gfx_config.mem0_start + 0xf) & ~0xf;
#  600|   
#  601|->   gfx_config.xmem_start = (uint32_t) malloc(GFX_MEMORY_SIZE << 20);
#  602|     if(gfx_config.xmem_start) {
#  603|       gfx_config.xmem_end = gfx_config.xmem_start + (GFX_MEMORY_SIZE << 20);

Error: COMPILER_WARNING (CWE-704): [#def80]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:601:27: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  599|     gfx_config.mem0_start = (gfx_config.mem0_start + 0xf) & ~0xf;
#  600|   
#  601|->   gfx_config.xmem_start = (uint32_t) malloc(GFX_MEMORY_SIZE << 20);
#  602|     if(gfx_config.xmem_start) {
#  603|       gfx_config.xmem_end = gfx_config.xmem_start + (GFX_MEMORY_SIZE << 20);

Error: COMPILER_WARNING (CWE-704): [#def81]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:609:18: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  609 |   gfx.code_seg = (uint32_t) lowmem >> 4;
#      |                  ^
#  607|     gfx_config.bios_mem_size = 256 << 20;
#  608|   
#  609|->   gfx.code_seg = (uint32_t) lowmem >> 4;
#  610|   
#  611|     for(u = 0; u < sizeof gfx.jmp_table / sizeof *gfx.jmp_table; u++) {

Error: COMPILER_WARNING (CWE-704): [#def82]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:609:18: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  607|     gfx_config.bios_mem_size = 256 << 20;
#  608|   
#  609|->   gfx.code_seg = (uint32_t) lowmem >> 4;
#  610|   
#  611|     for(u = 0; u < sizeof gfx.jmp_table / sizeof *gfx.jmp_table; u++) {

Error: COMPILER_WARNING (CWE-704): [#def83]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:623:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  623 |   r.esi.l = (uint32_t) &gfx_config;
#      |             ^
#  621|     // we are ready to start
#  622|   
#  623|->   r.esi.l = (uint32_t) &gfx_config;
#  624|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_INIT], &r, &r);
#  625|   

Error: COMPILER_WARNING (CWE-704): [#def84]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:623:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  621|     // we are ready to start
#  622|   
#  623|->   r.esi.l = (uint32_t) &gfx_config;
#  624|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_INIT], &r, &r);
#  625|   

Error: COMPILER_WARNING (CWE-704): [#def85]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c: scope_hint: In function ‘gfx_menu_init’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:651:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  651 |   r.esi.l = (uint32_t) &gfx_menu;
#      |             ^
#  649|   
#  650|     memset(&r,0,sizeof(r));
#  651|->   r.esi.l = (uint32_t) &gfx_menu;
#  652|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_MENU_INIT], &r, &r);
#  653|   

Error: COMPILER_WARNING (CWE-704): [#def86]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:651:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  649|   
#  650|     memset(&r,0,sizeof(r));
#  651|->   r.esi.l = (uint32_t) &gfx_menu;
#  652|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_MENU_INIT], &r, &r);
#  653|   

Error: COMPILER_WARNING (CWE-704): [#def87]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c: scope_hint: In function ‘gfx_input’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:681:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  681 |   r.edi.l = (uint32_t) cmdline;
#      |             ^
#  679|   
#  680|     memset(&r,0,sizeof(r));
#  681|->   r.edi.l = (uint32_t) cmdline;
#  682|     r.ecx.l = sizeof cmdline;
#  683|     r.eax.l = timeout * 182 / 100;

Error: COMPILER_WARNING (CWE-704): [#def88]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:681:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  679|   
#  680|     memset(&r,0,sizeof(r));
#  681|->   r.edi.l = (uint32_t) cmdline;
#  682|     r.ecx.l = sizeof cmdline;
#  683|     r.eax.l = timeout * 182 / 100;

Error: COMPILER_WARNING (CWE-704): [#def89]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c: scope_hint: In function ‘gfx_infobox’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:701:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  701 |   r.esi.l = (uint32_t) str1;
#      |             ^
#  699|     memset(&r,0,sizeof(r));
#  700|     r.eax.l = type;
#  701|->   r.esi.l = (uint32_t) str1;
#  702|     r.edi.l = (uint32_t) str2;
#  703|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_INFOBOX_INIT], &r, &r);

Error: COMPILER_WARNING (CWE-704): [#def90]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:701:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  699|     memset(&r,0,sizeof(r));
#  700|     r.eax.l = type;
#  701|->   r.esi.l = (uint32_t) str1;
#  702|     r.edi.l = (uint32_t) str2;
#  703|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_INFOBOX_INIT], &r, &r);

Error: COMPILER_WARNING (CWE-704): [#def91]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:702:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  702 |   r.edi.l = (uint32_t) str2;
#      |             ^
#  700|     r.eax.l = type;
#  701|     r.esi.l = (uint32_t) str1;
#  702|->   r.edi.l = (uint32_t) str2;
#  703|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_INFOBOX_INIT], &r, &r);
#  704|     r.edi.l = r.eax.l = 0;

Error: COMPILER_WARNING (CWE-704): [#def92]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:702:13: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  700|     r.eax.l = type;
#  701|     r.esi.l = (uint32_t) str1;
#  702|->   r.edi.l = (uint32_t) str2;
#  703|     __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_INFOBOX_INIT], &r, &r);
#  704|     r.edi.l = r.eax.l = 0;

Error: COMPILER_WARNING (CWE-704): [#def93]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c: scope_hint: In function ‘gfx_progress_init’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:718:15: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  718 |     r.esi.l = (uint32_t) label;
#      |               ^
#  716|     if(!progress_active) {
#  717|       r.eax.l = kernel_size >> gfx_config.sector_shift;		// in sectors
#  718|->     r.esi.l = (uint32_t) label;
#  719|       __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_PROGRESS_INIT], &r, &r);
#  720|     }

Error: COMPILER_WARNING (CWE-704): [#def94]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:718:15: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  716|     if(!progress_active) {
#  717|       r.eax.l = kernel_size >> gfx_config.sector_shift;		// in sectors
#  718|->     r.esi.l = (uint32_t) label;
#  719|       __farcall(gfx.code_seg, gfx.jmp_table[GFX_CB_PROGRESS_INIT], &r, &r);
#  720|     }

Error: GCC_ANALYZER_WARNING (CWE-415): [#def95]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:787:13: warning[-Wanalyzer-double-free]: double-‘free’ of ‘buf’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:875:6: enter_function: entry to ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:5: branch_false: following ‘false’ branch (when ‘menu_ptr’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:894:3: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: call_function: calling ‘load_one’ from ‘boot_entry’
#  785|     else {
#  786|       do {
#  787|->       buf = realloc(buf, size + CHUNK_SIZE);
#  788|         i = read(fd, buf + size, CHUNK_SIZE);
#  789|         if(i == -1) break;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def96]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:792:13: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:875:6: enter_function: entry to ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:5: branch_false: following ‘false’ branch (when ‘menu_ptr’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:894:3: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: call_function: calling ‘load_one’ from ‘boot_entry’
#  790|         size += i;
#  791|         gfx_progress_update(i);
#  792|->     } while(i > 0);
#  793|     }
#  794|   

Error: GCC_ANALYZER_WARNING (CWE-415): [#def97]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:801:5: warning[-Wanalyzer-double-free]: double-‘free’ of ‘buf’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:875:6: enter_function: entry to ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:5: branch_false: following ‘false’ branch (when ‘menu_ptr’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:894:3: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: call_function: calling ‘load_one’ from ‘boot_entry’
#  799|       gfx_infobox(0, str, NULL);
#  800|       free(str);
#  801|->     free(buf);
#  802|       buf = NULL;
#  803|       size = 0;

Error: COMPILER_WARNING (CWE-704): [#def98]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c: scope_hint: In function ‘boot’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:824:23: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  824 |   char *gfxboot_cwd = (char *) gfx_config.gfxboot_cwd;
#      |                       ^
#  822|     unsigned ipapp;
#  823|     const struct syslinux_ipappend_strings *ipappend;
#  824|->   char *gfxboot_cwd = (char *) gfx_config.gfxboot_cwd;
#  825|   
#  826|     if(gfxboot_cwd) {

Error: COMPILER_WARNING (CWE-704): [#def99]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:824:23: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  822|     unsigned ipapp;
#  823|     const struct syslinux_ipappend_strings *ipappend;
#  824|->   char *gfxboot_cwd = (char *) gfx_config.gfxboot_cwd;
#  825|   
#  826|     if(gfxboot_cwd) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def100]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:17: warning[-Wanalyzer-malloc-leak]: leak of ‘kernel’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:875:6: enter_function: entry to ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:5: branch_false: following ‘false’ branch (when ‘menu_ptr’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:894:3: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: call_function: calling ‘load_one’ from ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: return_function: returning to ‘boot_entry’ from ‘load_one’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:917:5: branch_false: following ‘false’ branch (when ‘kernel’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:921:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:17: danger: ‘kernel’ leaks here; was allocated at [(14)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/13)
#  883|     char *s, *s0, *t, *initrd_arg;
#  884|   
#  885|->   if(!menu_ptr) return;
#  886|   
#  887|     if(menu_ptr->localboot) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def101]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:937:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘s’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:875:6: enter_function: entry to ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:5: branch_false: following ‘false’ branch (when ‘menu_ptr’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:894:3: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: call_function: calling ‘load_one’ from ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: return_function: returning to ‘boot_entry’ from ‘load_one’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:917:5: branch_false: following ‘false’ branch (when ‘kernel’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:921:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:921:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:935:12: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:937:9: danger: ‘s’ could be NULL: unchecked value from [(21)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/20)
#  935|     s = s0 = strdup(arg);
#  936|   
#  937|->   while(*s && strncmp(s, "initrd=", sizeof "initrd=" - 1)) {
#  938|       s = skipspace(skip_nonspaces(s));
#  939|     }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def102]
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:955:20: warning[-Wanalyzer-malloc-leak]: leak of ‘initrd_buf’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:875:6: enter_function: entry to ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:885:5: branch_false: following ‘false’ branch (when ‘menu_ptr’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:887:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:894:3: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:897:5: branch_false: following ‘false’ branch (when ‘file’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:908:12: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: call_function: calling ‘load_one’ from ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:915:12: return_function: returning to ‘boot_entry’ from ‘load_one’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:917:5: branch_false: following ‘false’ branch (when ‘kernel’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:921:6: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:921:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:937:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:941:5: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:941:5: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:942:5: branch_true: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:951:5: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:952:14: branch_true: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:954:11: branch_true: following ‘true’ branch (when ‘t’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:955:20: branch_true: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:955:20: call_function: calling ‘load_one’ from ‘boot_entry’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:955:20: return_function: returning to ‘boot_entry’ from ‘load_one’
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:957:9: branch_false: following ‘false’ branch (when ‘initrd_buf’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:963:7: branch_false: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:954:11: branch_true: following ‘true’ branch (when ‘t’ is non-NULL)...
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:955:20: branch_true: ...to here
syslinux-6.04-pre1/com32/gfxboot/gfxboot.c:955:20: danger: ‘initrd_buf’ leaks here; was allocated at [(39)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/38)
#  953|   
#  954|       while((t = strsep(&initrd_arg, ","))) {
#  955|->       initrd_buf = load_one(t, &initrd_size);
#  956|   
#  957|         if(!initrd_buf) {

Error: COMPILER_WARNING: [#def103]
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c: scope_hint: In function ‘flags_to_string’
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:44:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 5 equals source length
#   44 |         strncat(buffer, " edge", 5);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~
#   42|   	strcpy(buffer, "low");
#   43|       if ((flags & TRIGGER_EDGE) == TRIGGER_EDGE)
#   44|-> 	strncat(buffer, " edge", 5);
#   45|       else if ((flags & TRIGGER_LEVEL) == TRIGGER_LEVEL)
#   46|   	strncat(buffer, " level", 6);

Error: COMPILER_WARNING: [#def104]
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:44:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 5 equals source length
#   42|   	strcpy(buffer, "low");
#   43|       if ((flags & TRIGGER_EDGE) == TRIGGER_EDGE)
#   44|-> 	strncat(buffer, " edge", 5);
#   45|       else if ((flags & TRIGGER_LEVEL) == TRIGGER_LEVEL)
#   46|   	strncat(buffer, " level", 6);

Error: COMPILER_WARNING: [#def105]
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:46:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 6 equals source length
#   46 |         strncat(buffer, " level", 6);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   44|   	strncat(buffer, " edge", 5);
#   45|       else if ((flags & TRIGGER_LEVEL) == TRIGGER_LEVEL)
#   46|-> 	strncat(buffer, " level", 6);
#   47|       else
#   48|   	strncat(buffer, " default", 8);

Error: COMPILER_WARNING: [#def106]
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:46:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 6 equals source length
#   44|   	strncat(buffer, " edge", 5);
#   45|       else if ((flags & TRIGGER_LEVEL) == TRIGGER_LEVEL)
#   46|-> 	strncat(buffer, " level", 6);
#   47|       else
#   48|   	strncat(buffer, " default", 8);

Error: COMPILER_WARNING: [#def107]
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:48:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 8 equals source length
#   48 |         strncat(buffer, " default", 8);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   46|   	strncat(buffer, " level", 6);
#   47|       else
#   48|-> 	strncat(buffer, " default", 8);
#   49|   
#   50|       return buffer;

Error: COMPILER_WARNING: [#def108]
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:48:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 8 equals source length
#   46|   	strncat(buffer, " level", 6);
#   47|       else
#   48|-> 	strncat(buffer, " default", 8);
#   49|   
#   50|       return buffer;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def109]
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:204:17: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:109:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:159:22: branch_false: ...to here
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:159:21: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:167:24: branch_false: ...to here
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:167:23: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:176:25: branch_false: ...to here
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:181:20: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:185:33: branch_false: ...to here
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:185:20: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:191:17: branch_false: ...to here
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:198:22: acquire_memory: allocated here
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:197:20: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:200:28: branch_true: ...to here
syslinux-6.04-pre1/com32/gpllib/acpi/acpi.c:204:17: danger: ‘<unknown>’ leaks here; was allocated at [(11)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/10)
#  202|   		}
#  203|   		/* Increment the number of ssdt we have */
#  204|-> 		acpi->ssdt_count++;
#  205|   	    } else if (memcmp(adh.signature, SBST, sizeof(SBST) - 1) == 0) {
#  206|   		DEBUG_PRINT(("SBST table found\n"));

Error: COMPILER_WARNING (CWE-465): [#def110]
syslinux-6.04-pre1/com32/gpllib/cpuid.c: scope_hint: In function ‘generic_identify’
syslinux-6.04-pre1/com32/gpllib/cpuid.c:344:24: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct cpuinfo_x86’ may result in an unaligned pointer value
#  344 |           (uint32_t *) & c->cpuid_level,
#      |                        ^~~~~~~~~~~~~~~~
#  342|       /* Get vendor name */
#  343|       cpuid(0x00000000,
#  344|-> 	  (uint32_t *) & c->cpuid_level,
#  345|   	  (uint32_t *) & c->x86_vendor_id[0],
#  346|   	  (uint32_t *) & c->x86_vendor_id[8],

Error: COMPILER_WARNING (CWE-465): [#def111]
syslinux-6.04-pre1/com32/gpllib/cpuid.c:344:24: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct cpuinfo_x86’ may result in an unaligned pointer value
#  342|       /* Get vendor name */
#  343|       cpuid(0x00000000,
#  344|-> 	  (uint32_t *) & c->cpuid_level,
#  345|   	  (uint32_t *) & c->x86_vendor_id[0],
#  346|   	  (uint32_t *) & c->x86_vendor_id[8],

Error: GCC_ANALYZER_WARNING (CWE-476): [#def112]
syslinux-6.04-pre1/com32/gpllib/cpuid.c:439:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bp’
syslinux-6.04-pre1/com32/gpllib/cpuid.c:452:5: enter_function: entry to ‘find_smp_config’
syslinux-6.04-pre1/com32/gpllib/cpuid.c:464:9: call_function: calling ‘smp_scan_config’ from ‘find_smp_config’
#  437|       while (length > 0) {
#  438|   	mpf = (struct intel_mp_floating *)bp;
#  439|-> 	if ((*bp == SMP_MAGIC_IDENT) &&
#  440|   	    (mpf->mpf_length == 1) &&
#  441|   	    !mpf_checksum((unsigned char *)bp, 16) &&

Error: GCC_ANALYZER_WARNING (CWE-401): [#def113]
syslinux-6.04-pre1/com32/gpllib/disk/write.c:129:8: warning[-Wanalyzer-malloc-leak]: leak of ‘rb’
syslinux-6.04-pre1/com32/gpllib/disk/write.c:126:16: acquire_memory: allocated here
syslinux-6.04-pre1/com32/gpllib/disk/write.c:129:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
syslinux-6.04-pre1/com32/gpllib/disk/write.c:129:8: danger: ‘rb’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  127|       int status;
#  128|   
#  129|->     if (write_sectors(drive_info, lba, data, size) == -1)
#  130|   	return -1;		/* Write failure */
#  131|   

Error: COMPILER_WARNING: [#def114]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:116:33: warning[-Wformat-truncation=]: ‘ min’ directive output may be truncated writing 4 bytes into a region of size between 3 and 7
#  116 |         snprintf(array, len, "%u min", code);
#      |                                 ^~~~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:116:9: note: ‘snprintf’ output between 6 and 10 bytes into a destination of size 8
#  116 |         snprintf(array, len, "%u min", code);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  114|   	strlcpy(array, "Unknown", len);
#  115|       else
#  116|-> 	snprintf(array, len, "%u min", code);
#  117|   }
#  118|   

Error: COMPILER_WARNING (CWE-758): [#def115]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:147:9: warning[-Wrestrict]: ‘snprintf’ argument 4 overlaps destination object ‘dmi’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c: scope_hint: In function ‘dmi_decode’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:601:61: note: destination object referenced by ‘restrict’-qualified argument 1 was declared here
#  601 | void dmi_decode(struct dmi_header *h, uint16_t ver, s_dmi * dmi)
#      |                                                     ~~~~~~~~^~~
#  145|   
#  146|       for (i = 1; i <= count; i++)
#  147|-> 	snprintf(dmi->oem_strings, OEM_STRINGS_SIZE, "%s %s %s\n",
#  148|   		 dmi->oem_strings, prefix, dmi_string(h, i));
#  149|   }

Error: COMPILER_WARNING: [#def116]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:147:58: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing 1 byte into a region of size between 0 and 511
#  147 |         snprintf(dmi->oem_strings, OEM_STRINGS_SIZE, "%s %s %s\n",
#      |                                                          ^~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:147:9: note: ‘snprintf’ output 5 or more bytes (assuming 516) into a destination of size 512
#  147 |         snprintf(dmi->oem_strings, OEM_STRINGS_SIZE, "%s %s %s\n",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  148 |                  dmi->oem_strings, prefix, dmi_string(h, i));
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  145|   
#  146|       for (i = 1; i <= count; i++)
#  147|-> 	snprintf(dmi->oem_strings, OEM_STRINGS_SIZE, "%s %s %s\n",
#  148|   		 dmi->oem_strings, prefix, dmi_string(h, i));
#  149|   }

Error: COMPILER_WARNING (CWE-758): [#def117]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:162:9: warning[-Wrestrict]: ‘snprintf’ argument 4 overlaps destination object ‘dmi’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c: scope_hint: In function ‘dmi_decode’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:601:61: note: destination object referenced by ‘restrict’-qualified argument 1 was declared here
#  601 | void dmi_decode(struct dmi_header *h, uint16_t ver, s_dmi * dmi)
#      |                                                     ~~~~~~~~^~~
#  160|   
#  161|       for (i = 1; i <= count; i++)
#  162|-> 	snprintf(dmi->system.configuration_options,
#  163|   		 SYSTEM_CONFIGURATION_OPTIONS_SIZE, "%s %s %s\n",
#  164|   		 dmi->system.configuration_options, prefix, dmi_string(h, i));

Error: COMPILER_WARNING: [#def118]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c: scope_hint: In function ‘dmi_decode’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:163:57: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing 1 byte into a region of size between 0 and 49
#  163 |                  SYSTEM_CONFIGURATION_OPTIONS_SIZE, "%s %s %s\n",
#      |                                                         ^~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:162:9: note: ‘snprintf’ output 5 or more bytes (assuming 54) into a destination of size 50
#  162 |         snprintf(dmi->system.configuration_options,
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  163 |                  SYSTEM_CONFIGURATION_OPTIONS_SIZE, "%s %s %s\n",
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  164 |                  dmi->system.configuration_options, prefix, dmi_string(h, i));
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  161|       for (i = 1; i <= count; i++)
#  162|   	snprintf(dmi->system.configuration_options,
#  163|-> 		 SYSTEM_CONFIGURATION_OPTIONS_SIZE, "%s %s %s\n",
#  164|   		 dmi->system.configuration_options, prefix, dmi_string(h, i));
#  165|   }

Error: COMPILER_WARNING: [#def119]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c: scope_hint: In function ‘dmi_decode’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:982:9: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  982 |         dmi_system_boot_status(data[0x0A], dmi->system.system_boot_status);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:983:5: note: here
#  983 |     case 38:                    /* 3.3.39 IPMI Device Information */
#      |     ^~~~
#  980|   	if (h->length < 0x0B)
#  981|   	    break;
#  982|-> 	dmi_system_boot_status(data[0x0A], dmi->system.system_boot_status);
#  983|       case 38:			/* 3.3.39 IPMI Device Information */
#  984|   	if (h->length < 0x10)

Error: COMPILER_WARNING (CWE-704): [#def120]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c: scope_hint: In function ‘parse_dmitable’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:1012:17: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
# 1012 |     memcpy(buf, (int *)dmi->dmitable.base, sizeof(uint8_t) * dmi->dmitable.len);
#      |                 ^
# 1010|       uint8_t *data = NULL;
# 1011|       uint8_t buf[dmi->dmitable.len];
# 1012|->     memcpy(buf, (int *)dmi->dmitable.base, sizeof(uint8_t) * dmi->dmitable.len);
# 1013|       data = buf;
# 1014|       dmi->memory_count = 0;

Error: COMPILER_WARNING (CWE-704): [#def121]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi.c:1012:17: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
# 1010|       uint8_t *data = NULL;
# 1011|       uint8_t buf[dmi->dmitable.len];
# 1012|->     memcpy(buf, (int *)dmi->dmitable.base, sizeof(uint8_t) * dmi->dmitable.len);
# 1013|       data = buf;
# 1014|       dmi->memory_count = 0;

Error: COMPILER_WARNING (CWE-758): [#def122]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c: scope_hint: In function ‘dmi_memory_module_types’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:213:17: warning[-Wrestrict]: ‘snprintf’ argument 4 overlaps destination object ‘type’
#  213 |                 snprintf(type, sizeof_type, "%s%s%s", type, sep, types[i]);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:189:68: note: destination object referenced by ‘restrict’-qualified argument 1 was declared here
#  189 | void dmi_memory_module_types(uint16_t code, const char *sep, char *type, int sizeof_type)
#      |                                                              ~~~~~~^~~~
#  211|   	for (i = 0; i <= 10; i++)
#  212|   	    if (code & (1 << i))
#  213|-> 		snprintf(type, sizeof_type, "%s%s%s", type, sep, types[i]);
#  214|       }
#  215|   }

Error: COMPILER_WARNING (CWE-758): [#def123]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c: scope_hint: In function ‘dmi_memory_module_connections’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:225:13: warning[-Wrestrict]: ‘snprintf’ argument 4 overlaps destination object ‘connection’
#  225 |             snprintf(connection, sizeof_connection, "%s%u", connection, code & 0x0F);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:217:56: note: destination object referenced by ‘restrict’-qualified argument 1 was declared here
#  217 | void dmi_memory_module_connections(uint8_t code, char *connection, int sizeof_connection)
#      |                                                  ~~~~~~^~~~~~~~~~
#  223|   	    sprintf(connection, "%u ", code >> 4);
#  224|   	if ((code & 0x0F) != 0x0F)
#  225|-> 	    snprintf(connection, sizeof_connection, "%s%u", connection, code & 0x0F);
#  226|       }
#  227|   }

Error: COMPILER_WARNING (CWE-758): [#def124]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:255:9: warning[-Wrestrict]: ‘snprintf’ argument 4 overlaps destination object ‘size’
#  255 |         snprintf(size, sizeof_size, "%s %s", size, "(Double-bank Connection)");
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:237:49: note: destination object referenced by ‘restrict’-qualified argument 1 was declared here
#  237 | void dmi_memory_module_size(uint8_t code, char *size, int sizeof_size)
#      |                                           ~~~~~~^~~~
#  253|   
#  254|       if (code & 0x80)
#  255|-> 	snprintf(size, sizeof_size, "%s %s", size, "(Double-bank Connection)");
#  256|       else
#  257|   	snprintf(size, sizeof_size, "%s %s", size, "(Single-bank Connection)");

Error: COMPILER_WARNING (CWE-758): [#def125]
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c: scope_hint: In function ‘dmi_memory_module_size’
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:257:9: warning[-Wrestrict]: ‘snprintf’ argument 4 overlaps destination object ‘size’
#  257 |         snprintf(size, sizeof_size, "%s %s", size, "(Single-bank Connection)");
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/gpllib/dmi/dmi_memory.c:237:49: note: destination object referenced by ‘restrict’-qualified argument 1 was declared here
#  237 | void dmi_memory_module_size(uint8_t code, char *size, int sizeof_size)
#      |                                           ~~~~~~^~~~
#  255|   	snprintf(size, sizeof_size, "%s %s", size, "(Double-bank Connection)");
#  256|       else
#  257|-> 	snprintf(size, sizeof_size, "%s %s", size, "(Single-bank Connection)");
#  258|   }
#  259|   

Error: COMPILER_WARNING: [#def126]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c: scope_hint: In function ‘main_show_kernel’
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:64:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   64 |                 strncat(kernel_modules, " | ", 3);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   62|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#   63|   	    if (kmod > 0) {
#   64|-> 		strncat(kernel_modules, " | ", 3);
#   65|   	    }
#   66|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def127]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:64:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   62|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#   63|   	    if (kmod > 0) {
#   64|-> 		strncat(kernel_modules, " | ", 3);
#   65|   	    }
#   66|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def128]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:75:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#   75 |                 strncat(buffer, "(", 1);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~
#   73|   	    found = true;
#   74|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   75|-> 		strncat(buffer, "(", 1);
#   76|   	    strncat(buffer, kernel_modules, sizeof(kernel_modules));
#   77|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)

Error: COMPILER_WARNING: [#def129]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:75:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#   73|   	    found = true;
#   74|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   75|-> 		strncat(buffer, "(", 1);
#   76|   	    strncat(buffer, kernel_modules, sizeof(kernel_modules));
#   77|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)

Error: COMPILER_WARNING (CWE-805): [#def130]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c: scope_hint: In function ‘main_show_kernel’
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:76:51: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
#   76 |             strncat(buffer, kernel_modules, sizeof(kernel_modules));
#      |                                                   ^
#   74|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   75|   		strncat(buffer, "(", 1);
#   76|-> 	    strncat(buffer, kernel_modules, sizeof(kernel_modules));
#   77|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   78|   		strncat(buffer, ")", 1);

Error: COMPILER_WARNING: [#def131]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:78:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#   78 |                 strncat(buffer, ")", 1);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~
#   76|   	    strncat(buffer, kernel_modules, sizeof(kernel_modules));
#   77|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   78|-> 		strncat(buffer, ")", 1);
#   79|   	    strncat(buffer, " # ", 3);
#   80|   	}

Error: COMPILER_WARNING: [#def132]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:78:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#   76|   	    strncat(buffer, kernel_modules, sizeof(kernel_modules));
#   77|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   78|-> 		strncat(buffer, ")", 1);
#   79|   	    strncat(buffer, " # ", 3);
#   80|   	}

Error: COMPILER_WARNING: [#def133]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:79:13: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   79 |             strncat(buffer, " # ", 3);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~
#   77|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   78|   		strncat(buffer, ")", 1);
#   79|-> 	    strncat(buffer, " # ", 3);
#   80|   	}
#   81|   

Error: COMPILER_WARNING: [#def134]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:79:13: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   77|   	    if (pci_device->dev_info->linux_kernel_module_count > 1)
#   78|   		strncat(buffer, ")", 1);
#   79|-> 	    strncat(buffer, " # ", 3);
#   80|   	}
#   81|   

Error: COMPILER_WARNING: [#def135]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:84:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#   84 |         strncat(buffer, "\n", 1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~
#   82|       }
#   83|       if (found == true) {
#   84|-> 	strncat(buffer, "\n", 1);
#   85|   	more_printf("%s", buffer);
#   86|       }

Error: COMPILER_WARNING: [#def136]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:84:9: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#   82|       }
#   83|       if (found == true) {
#   84|-> 	strncat(buffer, "\n", 1);
#   85|   	more_printf("%s", buffer);
#   86|       }

Error: COMPILER_WARNING: [#def137]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c: scope_hint: In function ‘show_kernel_modules’
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:117:13: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#  117 |             strncat(kernel_modules, " ", 1);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  115|   		    pci_device->dev_info->linux_kernel_module[kmod],
#  116|   		    LINUX_KERNEL_MODULE_SIZE - 1);
#  117|-> 	    strncat(kernel_modules, " ", 1);
#  118|   	}
#  119|   

Error: COMPILER_WARNING: [#def138]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:117:13: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#  115|   		    pci_device->dev_info->linux_kernel_module[kmod],
#  116|   		    LINUX_KERNEL_MODULE_SIZE - 1);
#  117|-> 	    strncat(kernel_modules, " ", 1);
#  118|   	}
#  119|   

Error: COMPILER_WARNING (CWE-805): [#def139]
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c: scope_hint: In function ‘show_kernel_modules’
syslinux-6.04-pre1/com32/hdt/hdt-cli-kernel.c:123:27: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
#  123 |                     sizeof(kernel_modules));
#      |                           ^
#  121|   	    && (!strstr(modules[pci_device->class[2]], kernel_modules))) {
#  122|   	    strncat(modules[pci_device->class[2]], kernel_modules,
#  123|-> 		    sizeof(kernel_modules));
#  124|   	    snprintf(category_name[pci_device->class[2]],
#  125|   		     sizeof(category_name[pci_device->class[2]]),

Error: COMPILER_WARNING: [#def140]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c: scope_hint: In function ‘show_pci_device’
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:102:13: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  102 |             strncat(kernel_modules, " | ", 3);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  100|   	 kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#  101|   	if (kmod > 0) {
#  102|-> 	    strncat(kernel_modules, " | ", 3);
#  103|   	}
#  104|   	strncat(kernel_modules,

Error: COMPILER_WARNING: [#def141]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:102:13: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  100|   	 kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#  101|   	if (kmod > 0) {
#  102|-> 	    strncat(kernel_modules, " | ", 3);
#  103|   	}
#  104|   	strncat(kernel_modules,

Error: COMPILER_WARNING: [#def142]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c: scope_hint: In function ‘show_pci_devices’
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:182:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  182 |                 strncat(kernel_modules, " | ", 3);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  180|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#  181|   	    if (kmod > 0) {
#  182|-> 		strncat(kernel_modules, " | ", 3);
#  183|   	    }
#  184|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def143]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:182:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  180|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#  181|   	    if (kmod > 0) {
#  182|-> 		strncat(kernel_modules, " | ", 3);
#  183|   	    }
#  184|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def144]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:193:29: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size between 68 and 77
#  193 |                      "%02d: %s %s \n", i,
#      |                             ^~
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:192:13: note: ‘snprintf’ output between 8 and 527 bytes into a destination of size 81
#  192 |             snprintf(first_line, sizeof(first_line),
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  193 |                      "%02d: %s %s \n", i,
#      |                      ~~~~~~~~~~~~~~~~~~~~
#  194 |                      pci_device->dev_info->vendor_name,
#      |                      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  195 |                      pci_device->dev_info->product_name);
#      |                      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  191|   	if (nopciids == false) {
#  192|   	    snprintf(first_line, sizeof(first_line),
#  193|-> 		     "%02d: %s %s \n", i,
#  194|   		     pci_device->dev_info->vendor_name,
#  195|   		     pci_device->dev_info->product_name);

Error: COMPILER_WARNING: [#def145]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:198:33: warning[-Wformat-truncation=]: ‘%-25s’ directive output may be truncated writing between 25 and 255 bytes into a region of size 75
#  198 |                          "    # %-25s # Kmod: %s\n",
#      |                                 ^~~~~
syslinux-6.04-pre1/com32/hdt/hdt-cli-pci.c:197:17: note: ‘snprintf’ output between 42 and 911 bytes into a destination of size 81
#  197 |                 snprintf(second_line, sizeof(second_line),
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  198 |                          "    # %-25s # Kmod: %s\n",
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  199 |                          pci_device->dev_info->class_name, kernel_modules);
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  196|   	    if (nomodulesfile == false)
#  197|   		snprintf(second_line, sizeof(second_line),
#  198|-> 			 "    # %-25s # Kmod: %s\n",
#  199|   			 pci_device->dev_info->class_name, kernel_modules);
#  200|   	    else

Error: COMPILER_WARNING: [#def146]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pxe.c: scope_hint: In function ‘main_show_pxe’
syslinux-6.04-pre1/com32/hdt/hdt-cli-pxe.c:70:59: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 65
#   70 |         snprintf(buffer, sizeof(buffer), " Manufacturer : %s \n",
#      |                                                           ^~
syslinux-6.04-pre1/com32/hdt/hdt-cli-pxe.c:70:9: note: ‘snprintf’ output between 19 and 274 bytes into a destination of size 81
#   70 |         snprintf(buffer, sizeof(buffer), " Manufacturer : %s \n",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   71 |                  p->pci_device->dev_info->vendor_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   68|   	more_printf("%s", buffer);
#   69|       } else {
#   70|-> 	snprintf(buffer, sizeof(buffer), " Manufacturer : %s \n",
#   71|   		 p->pci_device->dev_info->vendor_name);
#   72|   	more_printf("%s", buffer);

Error: COMPILER_WARNING: [#def147]
syslinux-6.04-pre1/com32/hdt/hdt-cli-pxe.c:73:59: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 65
#   73 |         snprintf(buffer, sizeof(buffer), " Product      : %s \n",
#      |                                                           ^~
syslinux-6.04-pre1/com32/hdt/hdt-cli-pxe.c:73:9: note: ‘snprintf’ output between 19 and 274 bytes into a destination of size 81
#   73 |         snprintf(buffer, sizeof(buffer), " Product      : %s \n",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   74 |                  p->pci_device->dev_info->product_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   71|   		 p->pci_device->dev_info->vendor_name);
#   72|   	more_printf("%s", buffer);
#   73|-> 	snprintf(buffer, sizeof(buffer), " Product      : %s \n",
#   74|   		 p->pci_device->dev_info->product_name);
#   75|   	more_printf("%s", buffer);

Error: COMPILER_WARNING: [#def148]
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c: scope_hint: In function ‘dump_ipmi’
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:261:45: warning[-Wformat-truncation=]: ‘snprintf’ output truncated before the last format character
#  261 |         snprintf(base,sizeof(base),"%08X%08X",
#      |                                             ^
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:261:9: note: ‘snprintf’ output 17 bytes into a destination of size 16
#  261 |         snprintf(base,sizeof(base),"%08X%08X",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  262 |                         (uint32_t)(hardware->dmi.ipmi.base_address >> 32),
#      |                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  263 |                         (uint32_t)((hardware->dmi.ipmi.base_address & 0xFFFF) & ~1));
#      |                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  259|   
#  260|   	snprintf(i2c,sizeof(i2c),"0x%02x", hardware->dmi.ipmi.I2C_slave_address);
#  261|-> 	snprintf(base,sizeof(base),"%08X%08X",
#  262|   			(uint32_t)(hardware->dmi.ipmi.base_address >> 32),
#  263|   			(uint32_t)((hardware->dmi.ipmi.base_address & 0xFFFF) & ~1));

Error: COMPILER_WARNING: [#def149]
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c: scope_hint: In function ‘dump_bios’
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:313:46: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 15 bytes into a region of size between 10 and 14
#  313 |         snprintf(runtime,sizeof(runtime),"%u %s",hardware->dmi.bios.runtime_size, hardware->dmi.bios.runtime_size_unit);
#      |                                              ^~
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:313:9: note: ‘snprintf’ output between 3 and 22 bytes into a destination of size 16
#  313 |         snprintf(runtime,sizeof(runtime),"%u %s",hardware->dmi.bios.runtime_size, hardware->dmi.bios.runtime_size_unit);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  311|   	char rom[16]={0};
#  312|   	snprintf(address,sizeof(address),"0x%04X0",hardware->dmi.bios.address);
#  313|-> 	snprintf(runtime,sizeof(runtime),"%u %s",hardware->dmi.bios.runtime_size, hardware->dmi.bios.runtime_size_unit);
#  314|   	snprintf(rom,sizeof(rom),"%u %s",hardware->dmi.bios.rom_size, hardware->dmi.bios.rom_size_unit);
#  315|   

Error: COMPILER_WARNING: [#def150]
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:314:38: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 15 bytes into a region of size between 10 and 14
#  314 |         snprintf(rom,sizeof(rom),"%u %s",hardware->dmi.bios.rom_size, hardware->dmi.bios.rom_size_unit);
#      |                                      ^~
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:314:9: note: ‘snprintf’ output between 3 and 22 bytes into a destination of size 16
#  314 |         snprintf(rom,sizeof(rom),"%u %s",hardware->dmi.bios.rom_size, hardware->dmi.bios.rom_size_unit);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  312|   	snprintf(address,sizeof(address),"0x%04X0",hardware->dmi.bios.address);
#  313|   	snprintf(runtime,sizeof(runtime),"%u %s",hardware->dmi.bios.runtime_size, hardware->dmi.bios.runtime_size_unit);
#  314|-> 	snprintf(rom,sizeof(rom),"%u %s",hardware->dmi.bios.rom_size, hardware->dmi.bios.rom_size_unit);
#  315|   
#  316|   	CREATE_NEW_OBJECT;

Error: COMPILER_WARNING: [#def151]
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c: scope_hint: In function ‘dump_dmi’
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:427:52: warning[-Wformat-truncation=]: ‘%d’ directive output may be truncated writing between 1 and 5 bytes into a region of size between 2 and 6
#  427 |                 snprintf(buffer,sizeof(buffer),"%d.%d",hardware->dmi.dmitable.major_version, hardware->dmi.dmitable.minor_version);
#      |                                                    ^~
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:427:48: note: directive argument in the range [0, 65535]
#  427 |                 snprintf(buffer,sizeof(buffer),"%d.%d",hardware->dmi.dmitable.major_version, hardware->dmi.dmitable.minor_version);
#      |                                                ^~~~~~~
syslinux-6.04-pre1/com32/hdt/hdt-dump-dmi.c:427:17: note: ‘snprintf’ output between 4 and 12 bytes into a destination of size 8
#  427 |                 snprintf(buffer,sizeof(buffer),"%d.%d",hardware->dmi.dmitable.major_version, hardware->dmi.dmitable.minor_version);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  425|   	} else {
#  426|   		char buffer[8]={0};
#  427|-> 		snprintf(buffer,sizeof(buffer),"%d.%d",hardware->dmi.dmitable.major_version, hardware->dmi.dmitable.minor_version);
#  428|   		add_s("dmi.version",buffer);
#  429|   		FLUSH_OBJECT;

Error: COMPILER_WARNING: [#def152]
syslinux-6.04-pre1/com32/hdt/hdt-dump-pci.c: scope_hint: In function ‘dump_pci’
syslinux-6.04-pre1/com32/hdt/hdt-dump-pci.c:82:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   82 |                 strncat(kernel_modules, " | ", 3);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   80|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#   81|   	    if (kmod > 0) {
#   82|-> 		strncat(kernel_modules, " | ", 3);
#   83|   	    }
#   84|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def153]
syslinux-6.04-pre1/com32/hdt/hdt-dump-pci.c:82:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   80|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#   81|   	    if (kmod > 0) {
#   82|-> 		strncat(kernel_modules, " | ", 3);
#   83|   	    }
#   84|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def154]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c: scope_hint: In function ‘compute_system’
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:41:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#   41 |     snprintf(buffer, sizeof buffer, "Vendor    : %s", dmi->system.manufacturer);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:41:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#   41 |     snprintf(buffer, sizeof buffer, "Vendor    : %s", dmi->system.manufacturer);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   39|       set_menu_pos(SUBMENU_Y, SUBMENU_X);
#   40|   
#   41|->     snprintf(buffer, sizeof buffer, "Vendor    : %s", dmi->system.manufacturer);
#   42|       snprintf(statbuffer, sizeof statbuffer, "Vendor: %s",
#   43|   	     dmi->system.manufacturer);

Error: COMPILER_WARNING: [#def155]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:47:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#   47 |     snprintf(buffer, sizeof buffer, "Product   : %s", dmi->system.product_name);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:47:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#   47 |     snprintf(buffer, sizeof buffer, "Product   : %s", dmi->system.product_name);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   45|       menu->items_count++;
#   46|   
#   47|->     snprintf(buffer, sizeof buffer, "Product   : %s", dmi->system.product_name);
#   48|       snprintf(statbuffer, sizeof statbuffer, "Product Name: %s",
#   49|   	     dmi->system.product_name);

Error: COMPILER_WARNING: [#def156]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:53:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#   53 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->system.version);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:53:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#   53 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->system.version);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   51|       menu->items_count++;
#   52|   
#   53|->     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->system.version);
#   54|       snprintf(statbuffer, sizeof statbuffer, "Version: %s", dmi->system.version);
#   55|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def157]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:58:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#   58 |     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->system.serial);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:58:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#   58 |     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->system.serial);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   56|       menu->items_count++;
#   57|   
#   58|->     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->system.serial);
#   59|       snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#   60|   	     dmi->system.serial);

Error: COMPILER_WARNING: [#def158]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:59:63: warning[-Wformat-truncation=]: ‘snprintf’ output may be truncated before the last format character
#   59 |     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#      |                                                               ^
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:59:5: note: ‘snprintf’ output between 16 and 80 bytes into a destination of size 79
#   59 |     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   60 |              dmi->system.serial);
#      |              ~~~~~~~~~~~~~~~~~~~
#   57|   
#   58|       snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->system.serial);
#   59|->     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#   60|   	     dmi->system.serial);
#   61|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def159]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:64:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 39 bytes into a region of size 35
#   64 |     snprintf(buffer, sizeof buffer, "UUID      : %s", dmi->system.uuid);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:64:5: note: ‘snprintf’ output between 13 and 52 bytes into a destination of size 47
#   64 |     snprintf(buffer, sizeof buffer, "UUID      : %s", dmi->system.uuid);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   62|       menu->items_count++;
#   63|   
#   64|->     snprintf(buffer, sizeof buffer, "UUID      : %s", dmi->system.uuid);
#   65|       snprintf(statbuffer, sizeof statbuffer, "UUID: %s", dmi->system.uuid);
#   66|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def160]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:75:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#   75 |     snprintf(buffer, sizeof buffer, "SKU Number: %s", dmi->system.sku_number);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:75:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#   75 |     snprintf(buffer, sizeof buffer, "SKU Number: %s", dmi->system.sku_number);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   73|       menu->items_count++;
#   74|   
#   75|->     snprintf(buffer, sizeof buffer, "SKU Number: %s", dmi->system.sku_number);
#   76|       snprintf(statbuffer, sizeof statbuffer, "SKU Number: %s",
#   77|   	     dmi->system.sku_number);

Error: COMPILER_WARNING: [#def161]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:81:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#   81 |     snprintf(buffer, sizeof buffer, "Family    : %s", dmi->system.family);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:81:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#   81 |     snprintf(buffer, sizeof buffer, "Family    : %s", dmi->system.family);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   79|       menu->items_count++;
#   80|   
#   81|->     snprintf(buffer, sizeof buffer, "Family    : %s", dmi->system.family);
#   82|       snprintf(statbuffer, sizeof statbuffer, "Family: %s", dmi->system.family);
#   83|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def162]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c: scope_hint: In function ‘compute_chassis’
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:98:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#   98 |     snprintf(buffer, sizeof buffer, "Vendor    : %s",
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:98:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#   98 |     snprintf(buffer, sizeof buffer, "Vendor    : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   99 |              dmi->chassis.manufacturer);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~
#   96|       set_menu_pos(SUBMENU_Y, SUBMENU_X);
#   97|   
#   98|->     snprintf(buffer, sizeof buffer, "Vendor    : %s",
#   99|   	     dmi->chassis.manufacturer);
#  100|       snprintf(statbuffer, sizeof statbuffer, "Vendor: %s",

Error: COMPILER_WARNING: [#def163]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:110:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  110 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->chassis.version);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:110:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  110 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->chassis.version);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  108|       menu->items_count++;
#  109|   
#  110|->     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->chassis.version);
#  111|       snprintf(statbuffer, sizeof statbuffer, "Version: %s",
#  112|   	     dmi->chassis.version);

Error: COMPILER_WARNING: [#def164]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:116:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  116 |     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->chassis.serial);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:116:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  116 |     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->chassis.serial);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  114|       menu->items_count++;
#  115|   
#  116|->     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->chassis.serial);
#  117|       snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#  118|   	     dmi->chassis.serial);

Error: COMPILER_WARNING: [#def165]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:117:63: warning[-Wformat-truncation=]: ‘snprintf’ output may be truncated before the last format character
#  117 |     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#      |                                                               ^
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:117:5: note: ‘snprintf’ output between 16 and 80 bytes into a destination of size 79
#  117 |     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  118 |              dmi->chassis.serial);
#      |              ~~~~~~~~~~~~~~~~~~~~
#  115|   
#  116|       snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->chassis.serial);
#  117|->     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#  118|   	     dmi->chassis.serial);
#  119|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def166]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c: scope_hint: In function ‘compute_bios’
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:147:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  147 |     snprintf(buffer, sizeof buffer, "Vendor    : %s", dmi->bios.vendor);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:147:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  147 |     snprintf(buffer, sizeof buffer, "Vendor    : %s", dmi->bios.vendor);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  145|       set_menu_pos(SUBMENU_Y, SUBMENU_X);
#  146|   
#  147|->     snprintf(buffer, sizeof buffer, "Vendor    : %s", dmi->bios.vendor);
#  148|       snprintf(statbuffer, sizeof statbuffer, "Vendor: %s", dmi->bios.vendor);
#  149|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def167]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:152:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  152 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->bios.version);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:152:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  152 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->bios.version);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  150|       menu->items_count++;
#  151|   
#  152|->     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->bios.version);
#  153|       snprintf(statbuffer, sizeof statbuffer, "Version: %s", dmi->bios.version);
#  154|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def168]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:157:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  157 |     snprintf(buffer, sizeof buffer, "Release   : %s", dmi->bios.release_date);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:157:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  157 |     snprintf(buffer, sizeof buffer, "Release   : %s", dmi->bios.release_date);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  155|       menu->items_count++;
#  156|   
#  157|->     snprintf(buffer, sizeof buffer, "Release   : %s", dmi->bios.release_date);
#  158|       snprintf(statbuffer, sizeof statbuffer, "Release Date: %s",
#  159|   	     dmi->bios.release_date);

Error: COMPILER_WARNING: [#def169]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c: scope_hint: In function ‘compute_motherboard’
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:188:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  188 |     snprintf(buffer, sizeof buffer, "Vendor    : %s",
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:188:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  188 |     snprintf(buffer, sizeof buffer, "Vendor    : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  189 |              dmi->base_board.manufacturer);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  186|       set_menu_pos(SUBMENU_Y, SUBMENU_X);
#  187|   
#  188|->     snprintf(buffer, sizeof buffer, "Vendor    : %s",
#  189|   	     dmi->base_board.manufacturer);
#  190|       snprintf(statbuffer, sizeof statbuffer, "Vendor: %s",

Error: COMPILER_WARNING: [#def170]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:195:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  195 |     snprintf(buffer, sizeof buffer, "Product   : %s",
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:195:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  195 |     snprintf(buffer, sizeof buffer, "Product   : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  196 |              dmi->base_board.product_name);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  193|       menu->items_count++;
#  194|   
#  195|->     snprintf(buffer, sizeof buffer, "Product   : %s",
#  196|   	     dmi->base_board.product_name);
#  197|       snprintf(statbuffer, sizeof statbuffer, "Product Name: %s",

Error: COMPILER_WARNING: [#def171]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:202:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  202 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->base_board.version);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:202:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  202 |     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->base_board.version);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  200|       menu->items_count++;
#  201|   
#  202|->     snprintf(buffer, sizeof buffer, "Version   : %s", dmi->base_board.version);
#  203|       snprintf(statbuffer, sizeof statbuffer, "Version: %s",
#  204|   	     dmi->base_board.version);

Error: COMPILER_WARNING: [#def172]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:208:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  208 |     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->base_board.serial);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:208:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  208 |     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->base_board.serial);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  206|       menu->items_count++;
#  207|   
#  208|->     snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->base_board.serial);
#  209|       snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#  210|   	     dmi->base_board.serial);

Error: COMPILER_WARNING: [#def173]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:209:63: warning[-Wformat-truncation=]: ‘snprintf’ output may be truncated before the last format character
#  209 |     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#      |                                                               ^
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:209:5: note: ‘snprintf’ output between 16 and 80 bytes into a destination of size 79
#  209 |     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  210 |              dmi->base_board.serial);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~
#  207|   
#  208|       snprintf(buffer, sizeof buffer, "Serial    : %s", dmi->base_board.serial);
#  209|->     snprintf(statbuffer, sizeof statbuffer, "Serial Number: %s",
#  210|   	     dmi->base_board.serial);
#  211|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def174]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:214:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  214 |     snprintf(buffer, sizeof buffer, "Asset Tag : %s",
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:214:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  214 |     snprintf(buffer, sizeof buffer, "Asset Tag : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  215 |              dmi->base_board.asset_tag);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~
#  212|       menu->items_count++;
#  213|   
#  214|->     snprintf(buffer, sizeof buffer, "Asset Tag : %s",
#  215|   	     dmi->base_board.asset_tag);
#  216|       snprintf(statbuffer, sizeof statbuffer, "Asset Tag: %s",

Error: COMPILER_WARNING: [#def175]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:221:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 35
#  221 |     snprintf(buffer, sizeof buffer, "Location  : %s", dmi->base_board.location);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:221:5: note: ‘snprintf’ output between 13 and 77 bytes into a destination of size 47
#  221 |     snprintf(buffer, sizeof buffer, "Location  : %s", dmi->base_board.location);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  219|       menu->items_count++;
#  220|   
#  221|->     snprintf(buffer, sizeof buffer, "Location  : %s", dmi->base_board.location);
#  222|       snprintf(statbuffer, sizeof statbuffer, "Location: %s",
#  223|   	     dmi->base_board.location);

Error: COMPILER_WARNING: [#def176]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c: scope_hint: In function ‘compute_ipmi’
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:244:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 31 bytes into a region of size 29
#  244 |     snprintf(buffer, sizeof buffer, "Interface Type  : %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:244:5: note: ‘snprintf’ output between 19 and 50 bytes into a destination of size 47
#  244 |     snprintf(buffer, sizeof buffer, "Interface Type  : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  245 |              dmi->ipmi.interface_type);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~
#  242|       set_menu_pos(SUBMENU_Y, SUBMENU_X);
#  243|   
#  244|->     snprintf(buffer, sizeof buffer, "Interface Type  : %s",
#  245|   	     dmi->ipmi.interface_type);
#  246|       snprintf(statbuffer, sizeof statbuffer, "Interface Type: %s",

Error: COMPILER_WARNING: [#def177]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c: scope_hint: In function ‘compute_battery’
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:301:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 29
#  301 |     snprintf(buffer, sizeof buffer, "Vendor          : %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:301:5: note: ‘snprintf’ output between 19 and 83 bytes into a destination of size 47
#  301 |     snprintf(buffer, sizeof buffer, "Vendor          : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  302 |              dmi->battery.manufacturer);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~
#  299|       set_menu_pos(SUBMENU_Y, SUBMENU_X);
#  300|   
#  301|->     snprintf(buffer, sizeof buffer, "Vendor          : %s",
#  302|   	     dmi->battery.manufacturer);
#  303|       snprintf(statbuffer, sizeof statbuffer, "Vendor: %s",

Error: COMPILER_WARNING: [#def178]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:308:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 29
#  308 |     snprintf(buffer, sizeof buffer, "Manufacture Date: %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:308:5: note: ‘snprintf’ output between 19 and 83 bytes into a destination of size 47
#  308 |     snprintf(buffer, sizeof buffer, "Manufacture Date: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  309 |              dmi->battery.manufacture_date);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  306|       menu->items_count++;
#  307|   
#  308|->     snprintf(buffer, sizeof buffer, "Manufacture Date: %s",
#  309|   	     dmi->battery.manufacture_date);
#  310|       snprintf(statbuffer, sizeof statbuffer, "Manufacture Date: %s",

Error: COMPILER_WARNING: [#def179]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:310:64: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 61
#  310 |     snprintf(statbuffer, sizeof statbuffer, "Manufacture Date: %s",
#      |                                                                ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:310:5: note: ‘snprintf’ output between 19 and 83 bytes into a destination of size 79
#  310 |     snprintf(statbuffer, sizeof statbuffer, "Manufacture Date: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  311 |              dmi->battery.manufacture_date);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  308|       snprintf(buffer, sizeof buffer, "Manufacture Date: %s",
#  309|   	     dmi->battery.manufacture_date);
#  310|->     snprintf(statbuffer, sizeof statbuffer, "Manufacture Date: %s",
#  311|   	     dmi->battery.manufacture_date);
#  312|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def180]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:315:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 29
#  315 |     snprintf(buffer, sizeof buffer, "Serial          : %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:315:5: note: ‘snprintf’ output between 19 and 83 bytes into a destination of size 47
#  315 |     snprintf(buffer, sizeof buffer, "Serial          : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  316 |              dmi->battery.serial);
#      |              ~~~~~~~~~~~~~~~~~~~~
#  313|       menu->items_count++;
#  314|   
#  315|->     snprintf(buffer, sizeof buffer, "Serial          : %s",
#  316|   	     dmi->battery.serial);
#  317|       snprintf(statbuffer, sizeof statbuffer, "Serial: %s", dmi->battery.serial);

Error: COMPILER_WARNING: [#def181]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:321:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 29
#  321 |     snprintf(buffer, sizeof buffer, "Name            : %s", dmi->battery.name);
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:321:5: note: ‘snprintf’ output between 19 and 83 bytes into a destination of size 47
#  321 |     snprintf(buffer, sizeof buffer, "Name            : %s", dmi->battery.name);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  319|       menu->items_count++;
#  320|   
#  321|->     snprintf(buffer, sizeof buffer, "Name            : %s", dmi->battery.name);
#  322|       snprintf(statbuffer, sizeof statbuffer, "Name: %s", dmi->battery.name);
#  323|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def182]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:326:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 31 bytes into a region of size 29
#  326 |     snprintf(buffer, sizeof buffer, "Chemistry       : %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:326:5: note: ‘snprintf’ output between 19 and 50 bytes into a destination of size 47
#  326 |     snprintf(buffer, sizeof buffer, "Chemistry       : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  327 |              dmi->battery.chemistry);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~
#  324|       menu->items_count++;
#  325|   
#  326|->     snprintf(buffer, sizeof buffer, "Chemistry       : %s",
#  327|   	     dmi->battery.chemistry);
#  328|       snprintf(statbuffer, sizeof statbuffer, "Chemistry: %s",

Error: COMPILER_WARNING: [#def183]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:347:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 29
#  347 |     snprintf(buffer, sizeof buffer, "SBDS            : %s", dmi->battery.sbds);
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:347:5: note: ‘snprintf’ output between 19 and 273 bytes into a destination of size 47
#  347 |     snprintf(buffer, sizeof buffer, "SBDS            : %s", dmi->battery.sbds);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  345|       menu->items_count++;
#  346|   
#  347|->     snprintf(buffer, sizeof buffer, "SBDS            : %s", dmi->battery.sbds);
#  348|       snprintf(statbuffer, sizeof statbuffer, "SBDS: %s", dmi->battery.sbds);
#  349|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def184]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:348:52: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 73
#  348 |     snprintf(statbuffer, sizeof statbuffer, "SBDS: %s", dmi->battery.sbds);
#      |                                                    ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:348:5: note: ‘snprintf’ output between 7 and 261 bytes into a destination of size 79
#  348 |     snprintf(statbuffer, sizeof statbuffer, "SBDS: %s", dmi->battery.sbds);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  346|   
#  347|       snprintf(buffer, sizeof buffer, "SBDS            : %s", dmi->battery.sbds);
#  348|->     snprintf(statbuffer, sizeof statbuffer, "SBDS: %s", dmi->battery.sbds);
#  349|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);
#  350|       menu->items_count++;

Error: COMPILER_WARNING: [#def185]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:352:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 29
#  352 |     snprintf(buffer, sizeof buffer, "SBDS Manuf. Date: %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:352:5: note: ‘snprintf’ output between 19 and 273 bytes into a destination of size 47
#  352 |     snprintf(buffer, sizeof buffer, "SBDS Manuf. Date: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  353 |              dmi->battery.sbds_manufacture_date);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  350|       menu->items_count++;
#  351|   
#  352|->     snprintf(buffer, sizeof buffer, "SBDS Manuf. Date: %s",
#  353|   	     dmi->battery.sbds_manufacture_date);
#  354|       snprintf(statbuffer, sizeof statbuffer, "SBDS Manufacture Date: %s",

Error: COMPILER_WARNING: [#def186]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:354:69: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 56
#  354 |     snprintf(statbuffer, sizeof statbuffer, "SBDS Manufacture Date: %s",
#      |                                                                     ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:354:5: note: ‘snprintf’ output between 24 and 278 bytes into a destination of size 79
#  354 |     snprintf(statbuffer, sizeof statbuffer, "SBDS Manufacture Date: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  355 |              dmi->battery.sbds_manufacture_date);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  352|       snprintf(buffer, sizeof buffer, "SBDS Manuf. Date: %s",
#  353|   	     dmi->battery.sbds_manufacture_date);
#  354|->     snprintf(statbuffer, sizeof statbuffer, "SBDS Manufacture Date: %s",
#  355|   	     dmi->battery.sbds_manufacture_date);
#  356|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def187]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:359:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 29
#  359 |     snprintf(buffer, sizeof buffer, "SBDS Chemistry  : %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:359:5: note: ‘snprintf’ output between 19 and 83 bytes into a destination of size 47
#  359 |     snprintf(buffer, sizeof buffer, "SBDS Chemistry  : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  360 |              dmi->battery.sbds_chemistry);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  357|       menu->items_count++;
#  358|   
#  359|->     snprintf(buffer, sizeof buffer, "SBDS Chemistry  : %s",
#  360|   	     dmi->battery.sbds_chemistry);
#  361|       snprintf(statbuffer, sizeof statbuffer, "SBDS Chemistry : %s",

Error: COMPILER_WARNING: [#def188]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:361:63: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 62
#  361 |     snprintf(statbuffer, sizeof statbuffer, "SBDS Chemistry : %s",
#      |                                                               ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:361:5: note: ‘snprintf’ output between 18 and 82 bytes into a destination of size 79
#  361 |     snprintf(statbuffer, sizeof statbuffer, "SBDS Chemistry : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  362 |              dmi->battery.sbds_chemistry);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  359|       snprintf(buffer, sizeof buffer, "SBDS Chemistry  : %s",
#  360|   	     dmi->battery.sbds_chemistry);
#  361|->     snprintf(statbuffer, sizeof statbuffer, "SBDS Chemistry : %s",
#  362|   	     dmi->battery.sbds_chemistry);
#  363|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def189]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:366:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 31 bytes into a region of size 29
#  366 |     snprintf(buffer, sizeof buffer, "Maximum Error   : %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:366:5: note: ‘snprintf’ output between 19 and 50 bytes into a destination of size 47
#  366 |     snprintf(buffer, sizeof buffer, "Maximum Error   : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  367 |              dmi->battery.maximum_error);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  364|       menu->items_count++;
#  365|   
#  366|->     snprintf(buffer, sizeof buffer, "Maximum Error   : %s",
#  367|   	     dmi->battery.maximum_error);
#  368|       snprintf(statbuffer, sizeof statbuffer, "Maximum Error (percent) : %s",

Error: COMPILER_WARNING: [#def190]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:373:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 29
#  373 |     snprintf(buffer, sizeof buffer, "OEM Info        : %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:373:5: note: ‘snprintf’ output between 19 and 273 bytes into a destination of size 47
#  373 |     snprintf(buffer, sizeof buffer, "OEM Info        : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  374 |              dmi->battery.oem_info);
#      |              ~~~~~~~~~~~~~~~~~~~~~~
#  371|       menu->items_count++;
#  372|   
#  373|->     snprintf(buffer, sizeof buffer, "OEM Info        : %s",
#  374|   	     dmi->battery.oem_info);
#  375|       snprintf(statbuffer, sizeof statbuffer, "OEM Info: %s",

Error: COMPILER_WARNING: [#def191]
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:375:56: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 69
#  375 |     snprintf(statbuffer, sizeof statbuffer, "OEM Info: %s",
#      |                                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-dmi.c:375:5: note: ‘snprintf’ output between 11 and 265 bytes into a destination of size 79
#  375 |     snprintf(statbuffer, sizeof statbuffer, "OEM Info: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  376 |              dmi->battery.oem_info);
#      |              ~~~~~~~~~~~~~~~~~~~~~~
#  373|       snprintf(buffer, sizeof buffer, "OEM Info        : %s",
#  374|   	     dmi->battery.oem_info);
#  375|->     snprintf(statbuffer, sizeof statbuffer, "OEM Info: %s",
#  376|   	     dmi->battery.oem_info);
#  377|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def192]
syslinux-6.04-pre1/com32/hdt/hdt-menu-kernel.c: scope_hint: In function ‘compute_kernel’
syslinux-6.04-pre1/com32/hdt/hdt-menu-kernel.c:63:21: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   63 |                     strncat(kernel_modules, " | ", 3);
#      |                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   61|   		 i < pci_device->dev_info->linux_kernel_module_count; i++) {
#   62|   		if (i > 0) {
#   63|-> 		    strncat(kernel_modules, " | ", 3);
#   64|   		}
#   65|   		strncat(kernel_modules,

Error: COMPILER_WARNING: [#def193]
syslinux-6.04-pre1/com32/hdt/hdt-menu-kernel.c:63:21: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   61|   		 i < pci_device->dev_info->linux_kernel_module_count; i++) {
#   62|   		if (i > 0) {
#   63|-> 		    strncat(kernel_modules, " | ", 3);
#   64|   		}
#   65|   		strncat(kernel_modules,

Error: COMPILER_WARNING: [#def194]
syslinux-6.04-pre1/com32/hdt/hdt-menu-kernel.c:71:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 639 bytes into a region of size 47
#   71 |                 snprintf(buffer, sizeof buffer, "%s (%s)",
#      |                                                  ^~
#   72 |                          kernel_modules, pci_device->dev_info->class_name);
#      |                          ~~~~~~~~~~~~~~           
syslinux-6.04-pre1/com32/hdt/hdt-menu-kernel.c:71:17: note: ‘snprintf’ output between 4 and 898 bytes into a destination of size 47
#   71 |                 snprintf(buffer, sizeof buffer, "%s (%s)",
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   72 |                          kernel_modules, pci_device->dev_info->class_name);
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   69|   	    /* No need to add unknown kernel modules */
#   70|   	    if (strlen(kernel_modules) > 0) {
#   71|-> 		snprintf(buffer, sizeof buffer, "%s (%s)",
#   72|   			 kernel_modules, pci_device->dev_info->class_name);
#   73|   		snprintf(infobar, sizeof infobar,

Error: COMPILER_WARNING: [#def195]
syslinux-6.04-pre1/com32/hdt/hdt-menu-kernel.c:74:37: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 69
#   74 |                          "%04x:%04x %s : %s",
#      |                                     ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-kernel.c:73:17: note: ‘snprintf’ output between 14 and 524 bytes into a destination of size 79
#   73 |                 snprintf(infobar, sizeof infobar,
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   74 |                          "%04x:%04x %s : %s",
#      |                          ~~~~~~~~~~~~~~~~~~~~
#   75 |                          pci_device->vendor,
#      |                          ~~~~~~~~~~~~~~~~~~~
#   76 |                          pci_device->product,
#      |                          ~~~~~~~~~~~~~~~~~~~~
#   77 |                          pci_device->dev_info->vendor_name,
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   78 |                          pci_device->dev_info->product_name);
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   72|   			 kernel_modules, pci_device->dev_info->class_name);
#   73|   		snprintf(infobar, sizeof infobar,
#   74|-> 			 "%04x:%04x %s : %s",
#   75|   			 pci_device->vendor,
#   76|   			 pci_device->product,

Error: COMPILER_WARNING: [#def196]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:46:48: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 46
#   46 |     snprintf(buffer, sizeof buffer, "Vendor  : %s",
#      |                                                ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:46:5: note: ‘snprintf’ output between 11 and 266 bytes into a destination of size 56
#   46 |     snprintf(buffer, sizeof buffer, "Vendor  : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   47 |              pci_device->dev_info->vendor_name);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   44|       set_menu_pos(5, 17);
#   45|   
#   46|->     snprintf(buffer, sizeof buffer, "Vendor  : %s",
#   47|   	     pci_device->dev_info->vendor_name);
#   48|       snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",

Error: COMPILER_WARNING: [#def197]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:48:59: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 65
#   48 |     snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",
#      |                                                           ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:48:5: note: ‘snprintf’ output between 14 and 269 bytes into a destination of size 78
#   48 |     snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   49 |              pci_device->dev_info->vendor_name);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   46|       snprintf(buffer, sizeof buffer, "Vendor  : %s",
#   47|   	     pci_device->dev_info->vendor_name);
#   48|->     snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",
#   49|   	     pci_device->dev_info->vendor_name);
#   50|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def198]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:53:48: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 46
#   53 |     snprintf(buffer, sizeof buffer, "Product : %s",
#      |                                                ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:53:5: note: ‘snprintf’ output between 11 and 266 bytes into a destination of size 56
#   53 |     snprintf(buffer, sizeof buffer, "Product : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   54 |              pci_device->dev_info->product_name);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   51|       menu->items_count++;
#   52|   
#   53|->     snprintf(buffer, sizeof buffer, "Product : %s",
#   54|   	     pci_device->dev_info->product_name);
#   55|       snprintf(statbuffer, sizeof statbuffer, "Product Name  %s",

Error: COMPILER_WARNING: [#def199]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:55:60: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 64
#   55 |     snprintf(statbuffer, sizeof statbuffer, "Product Name  %s",
#      |                                                            ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:55:5: note: ‘snprintf’ output between 15 and 270 bytes into a destination of size 78
#   55 |     snprintf(statbuffer, sizeof statbuffer, "Product Name  %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   56 |              pci_device->dev_info->product_name);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   53|       snprintf(buffer, sizeof buffer, "Product : %s",
#   54|   	     pci_device->dev_info->product_name);
#   55|->     snprintf(statbuffer, sizeof statbuffer, "Product Name  %s",
#   56|   	     pci_device->dev_info->product_name);
#   57|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def200]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:60:48: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 46
#   60 |     snprintf(buffer, sizeof buffer, "Class   : %s",
#      |                                                ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:60:5: note: ‘snprintf’ output between 11 and 266 bytes into a destination of size 56
#   60 |     snprintf(buffer, sizeof buffer, "Class   : %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   61 |              pci_device->dev_info->class_name);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   58|       menu->items_count++;
#   59|   
#   60|->     snprintf(buffer, sizeof buffer, "Class   : %s",
#   61|   	     pci_device->dev_info->class_name);
#   62|       snprintf(statbuffer, sizeof statbuffer, "Class Name: %s",

Error: COMPILER_WARNING: [#def201]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:62:58: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 66
#   62 |     snprintf(statbuffer, sizeof statbuffer, "Class Name: %s",
#      |                                                          ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:62:5: note: ‘snprintf’ output between 13 and 268 bytes into a destination of size 78
#   62 |     snprintf(statbuffer, sizeof statbuffer, "Class Name: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   63 |              pci_device->dev_info->class_name);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   60|       snprintf(buffer, sizeof buffer, "Class   : %s",
#   61|   	     pci_device->dev_info->class_name);
#   62|->     snprintf(statbuffer, sizeof statbuffer, "Class Name: %s",
#   63|   	     pci_device->dev_info->class_name);
#   64|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def202]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_pci_device’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:107:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  107 |                 strncat(kernel_modules, " | ", 3);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  105|   	     i < pci_device->dev_info->linux_kernel_module_count; i++) {
#  106|   	    if (i > 0) {
#  107|-> 		strncat(kernel_modules, " | ", 3);
#  108|   	    }
#  109|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def203]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:107:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  105|   	     i < pci_device->dev_info->linux_kernel_module_count; i++) {
#  106|   	    if (i > 0) {
#  107|-> 		strncat(kernel_modules, " | ", 3);
#  108|   	    }
#  109|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def204]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:113:52: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 639 bytes into a region of size 46
#  113 |         snprintf(buffer, sizeof buffer, "Modules : %s", kernel_modules);
#      |                                                    ^~   ~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:113:9: note: ‘snprintf’ output between 11 and 650 bytes into a destination of size 56
#  113 |         snprintf(buffer, sizeof buffer, "Modules : %s", kernel_modules);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  111|   		    LINUX_KERNEL_MODULE_SIZE - 1);
#  112|   	}
#  113|-> 	snprintf(buffer, sizeof buffer, "Modules : %s", kernel_modules);
#  114|   	snprintf(statbuffer, sizeof statbuffer, "Kernel Modules: %s",
#  115|   		 kernel_modules);

Error: COMPILER_WARNING: [#def205]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:114:66: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 639 bytes into a region of size 62
#  114 |         snprintf(statbuffer, sizeof statbuffer, "Kernel Modules: %s",
#      |                                                                  ^~
#  115 |                  kernel_modules);
#      |                  ~~~~~~~~~~~~~~                                   
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:114:9: note: ‘snprintf’ output between 17 and 656 bytes into a destination of size 78
#  114 |         snprintf(statbuffer, sizeof statbuffer, "Kernel Modules: %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  115 |                  kernel_modules);
#      |                  ~~~~~~~~~~~~~~~
#  112|   	}
#  113|   	snprintf(buffer, sizeof buffer, "Modules : %s", kernel_modules);
#  114|-> 	snprintf(statbuffer, sizeof statbuffer, "Kernel Modules: %s",
#  115|   		 kernel_modules);
#  116|       } else {

Error: COMPILER_WARNING: [#def206]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:162:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  162 |                 strncat(kernel_modules, " | ", 3);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  160|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#  161|   	    if (kmod > 0) {
#  162|-> 		strncat(kernel_modules, " | ", 3);
#  163|   	    }
#  164|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def207]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:162:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  160|   	     kmod < pci_device->dev_info->linux_kernel_module_count; kmod++) {
#  161|   	    if (kmod > 0) {
#  162|-> 		strncat(kernel_modules, " | ", 3);
#  163|   	    }
#  164|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def208]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c: scope_hint: In function ‘compute_PCI’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:173:36: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 59
#  173 |         snprintf(menuname[i], 59, "%s|%s",
#      |                                    ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:173:9: note: ‘snprintf’ output between 2 and 512 bytes into a destination of size 59
#  173 |         snprintf(menuname[i], 59, "%s|%s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  174 |                  pci_device->dev_info->vendor_name,
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  175 |                  pci_device->dev_info->product_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  171|   	compute_pci_device(&(hdt_menu->pci_sub_menu[i]), pci_device,
#  172|   			   __pci_bus, __pci_slot, __pci_func, hardware);
#  173|-> 	snprintf(menuname[i], 59, "%s|%s",
#  174|   		 pci_device->dev_info->vendor_name,
#  175|   		 pci_device->dev_info->product_name);

Error: COMPILER_WARNING: [#def209]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:177:36: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 68
#  177 |                  "%02x:%02x.%01x # %s # ID:%04x:%04x[%04x:%04x] # Kmod:%s",
#      |                                    ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:177:18: note: directive argument in the range [0, 65535]
#  177 |                  "%02x:%02x.%01x # %s # ID:%04x:%04x[%04x:%04x] # Kmod:%s",
#      |                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:177:18: note: directive argument in the range [0, 65535]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:177:18: note: directive argument in the range [0, 65535]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:177:18: note: directive argument in the range [0, 65535]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pci.c:176:9: note: ‘snprintf’ output between 45 and 939 bytes into a destination of size 78
#  176 |         snprintf(infobar[i], STATLEN,
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  177 |                  "%02x:%02x.%01x # %s # ID:%04x:%04x[%04x:%04x] # Kmod:%s",
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  178 |                  __pci_bus, __pci_slot, __pci_func,
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  179 |                  pci_device->dev_info->class_name, pci_device->vendor,
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  180 |                  pci_device->product, pci_device->sub_vendor,
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  181 |                  pci_device->sub_product, kernel_modules);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  175|   		 pci_device->dev_info->product_name);
#  176|   	snprintf(infobar[i], STATLEN,
#  177|-> 		 "%02x:%02x.%01x # %s # ID:%04x:%04x[%04x:%04x] # Kmod:%s",
#  178|   		 __pci_bus, __pci_slot, __pci_func,
#  179|   		 pci_device->dev_info->class_name, pci_device->vendor,

Error: COMPILER_WARNING: [#def210]
syslinux-6.04-pre1/com32/hdt/hdt-menu-processor.c: scope_hint: In function ‘compute_processor’
syslinux-6.04-pre1/com32/hdt/hdt-menu-processor.c:71:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 47 bytes into a region of size 35
#   71 |     snprintf(buffer, sizeof buffer, "Vendor    : %s", hardware->cpu.vendor);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-processor.c:71:5: note: ‘snprintf’ output between 13 and 60 bytes into a destination of size 47
#   71 |     snprintf(buffer, sizeof buffer, "Vendor    : %s", hardware->cpu.vendor);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   69|       }
#   70|   
#   71|->     snprintf(buffer, sizeof buffer, "Vendor    : %s", hardware->cpu.vendor);
#   72|       snprintf(statbuffer, sizeof statbuffer, "Vendor: %s", hardware->cpu.vendor);
#   73|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def211]
syslinux-6.04-pre1/com32/hdt/hdt-menu-processor.c:76:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 47 bytes into a region of size 35
#   76 |     snprintf(buffer, sizeof buffer, "Model     : %s", hardware->cpu.model);
#      |                                                  ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-processor.c:76:5: note: ‘snprintf’ output between 13 and 60 bytes into a destination of size 47
#   76 |     snprintf(buffer, sizeof buffer, "Model     : %s", hardware->cpu.model);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   74|       menu->items_count++;
#   75|   
#   76|->     snprintf(buffer, sizeof buffer, "Model     : %s", hardware->cpu.model);
#   77|       snprintf(statbuffer, sizeof statbuffer, "Model: %s", hardware->cpu.model);
#   78|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def212]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c: scope_hint: In function ‘compute_PXE’
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:89:57: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 32
#   89 |         snprintf(buffer, sizeof buffer, "Manufacturer : %s",
#      |                                                         ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:89:9: note: ‘snprintf’ output between 16 and 271 bytes into a destination of size 47
#   89 |         snprintf(buffer, sizeof buffer, "Manufacturer : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   90 |                  p->pci_device->dev_info->vendor_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   87|       } else {
#   88|   
#   89|-> 	snprintf(buffer, sizeof buffer, "Manufacturer : %s",
#   90|   		 p->pci_device->dev_info->vendor_name);
#   91|   	snprintf(infobar, sizeof infobar, "Manufacturer : %s",

Error: COMPILER_WARNING: [#def213]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:91:59: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 64
#   91 |         snprintf(infobar, sizeof infobar, "Manufacturer : %s",
#      |                                                           ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:91:9: note: ‘snprintf’ output between 16 and 271 bytes into a destination of size 79
#   91 |         snprintf(infobar, sizeof infobar, "Manufacturer : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   92 |                  p->pci_device->dev_info->vendor_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   89|   	snprintf(buffer, sizeof buffer, "Manufacturer : %s",
#   90|   		 p->pci_device->dev_info->vendor_name);
#   91|-> 	snprintf(infobar, sizeof infobar, "Manufacturer : %s",
#   92|   		 p->pci_device->dev_info->vendor_name);
#   93|   	add_item(buffer, infobar, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def214]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:96:57: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 32
#   96 |         snprintf(buffer, sizeof buffer, "Product      : %s",
#      |                                                         ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:96:9: note: ‘snprintf’ output between 16 and 271 bytes into a destination of size 47
#   96 |         snprintf(buffer, sizeof buffer, "Product      : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   97 |                  p->pci_device->dev_info->product_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   94|   	menu->items_count++;
#   95|   
#   96|-> 	snprintf(buffer, sizeof buffer, "Product      : %s",
#   97|   		 p->pci_device->dev_info->product_name);
#   98|   	snprintf(infobar, sizeof infobar, "Product      : %s",

Error: COMPILER_WARNING: [#def215]
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:98:59: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 64
#   98 |         snprintf(infobar, sizeof infobar, "Product      : %s",
#      |                                                           ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-pxe.c:98:9: note: ‘snprintf’ output between 16 and 271 bytes into a destination of size 79
#   98 |         snprintf(infobar, sizeof infobar, "Product      : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   99 |                  p->pci_device->dev_info->product_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   96|   	snprintf(buffer, sizeof buffer, "Product      : %s",
#   97|   		 p->pci_device->dev_info->product_name);
#   98|-> 	snprintf(infobar, sizeof infobar, "Product      : %s",
#   99|   		 p->pci_device->dev_info->product_name);
#  100|   	add_item(buffer, infobar, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def216]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:43:54: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 47 bytes into a region of size 31
#   43 |     snprintf(buffer, sizeof buffer, "CPU Vendor    : %s", hardware->cpu.vendor);
#      |                                                      ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:43:5: note: ‘snprintf’ output between 17 and 64 bytes into a destination of size 47
#   43 |     snprintf(buffer, sizeof buffer, "CPU Vendor    : %s", hardware->cpu.vendor);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   41|       set_menu_pos(SUBMENU_Y, SUBMENU_X);
#   42|   
#   43|->     snprintf(buffer, sizeof buffer, "CPU Vendor    : %s", hardware->cpu.vendor);
#   44|       snprintf(statbuffer, sizeof statbuffer, "CPU Vendor: %s",
#   45|   	     hardware->cpu.vendor);

Error: COMPILER_WARNING: [#def217]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:49:54: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 47 bytes into a region of size 31
#   49 |     snprintf(buffer, sizeof buffer, "CPU Model     : %s", hardware->cpu.model);
#      |                                                      ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:49:5: note: ‘snprintf’ output between 17 and 64 bytes into a destination of size 47
#   49 |     snprintf(buffer, sizeof buffer, "CPU Model     : %s", hardware->cpu.model);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   47|       menu->items_count++;
#   48|   
#   49|->     snprintf(buffer, sizeof buffer, "CPU Model     : %s", hardware->cpu.model);
#   50|       snprintf(statbuffer, sizeof statbuffer, "CPU Model: %s",
#   51|   	     hardware->cpu.model);

Error: COMPILER_WARNING: [#def218]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:70:38: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 47
#   70 |     snprintf(buffer, sizeof buffer, "%s", features);
#      |                                      ^~   ~~~~~~~~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:70:5: note: ‘snprintf’ output between 1 and 255 bytes into a destination of size 47
#   70 |     snprintf(buffer, sizeof buffer, "%s", features);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   68|       if (hardware->cpu.flags.vmx || hardware->cpu.flags.svm)
#   69|   	strcat(features, ", HwVIRT");
#   70|->     snprintf(buffer, sizeof buffer, "%s", features);
#   71|       snprintf(statbuffer, sizeof statbuffer, "Features : %s", features);
#   72|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def219]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:71:57: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 68
#   71 |     snprintf(statbuffer, sizeof statbuffer, "Features : %s", features);
#      |                                                         ^~   ~~~~~~~~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:71:5: note: ‘snprintf’ output between 12 and 266 bytes into a destination of size 79
#   71 |     snprintf(statbuffer, sizeof statbuffer, "Features : %s", features);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   69|   	strcat(features, ", HwVIRT");
#   70|       snprintf(buffer, sizeof buffer, "%s", features);
#   71|->     snprintf(statbuffer, sizeof statbuffer, "Features : %s", features);
#   72|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);
#   73|       menu->items_count++;

Error: COMPILER_WARNING: [#def220]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:78:58: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 31
#   78 |         snprintf(buffer, sizeof buffer, "System Vendor : %s",
#      |                                                          ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:78:9: note: ‘snprintf’ output between 17 and 81 bytes into a destination of size 47
#   78 |         snprintf(buffer, sizeof buffer, "System Vendor : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   79 |                  hardware->dmi.system.manufacturer);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   76|       if (hardware->is_dmi_valid == true) {
#   77|   
#   78|-> 	snprintf(buffer, sizeof buffer, "System Vendor : %s",
#   79|   		 hardware->dmi.system.manufacturer);
#   80|   	snprintf(statbuffer, sizeof statbuffer, "System Vendor: %s",

Error: COMPILER_WARNING: [#def221]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:80:67: warning[-Wformat-truncation=]: ‘snprintf’ output may be truncated before the last format character
#   80 |         snprintf(statbuffer, sizeof statbuffer, "System Vendor: %s",
#      |                                                                   ^
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:80:9: note: ‘snprintf’ output between 16 and 80 bytes into a destination of size 79
#   80 |         snprintf(statbuffer, sizeof statbuffer, "System Vendor: %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   81 |                  hardware->dmi.system.manufacturer);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   78|   	snprintf(buffer, sizeof buffer, "System Vendor : %s",
#   79|   		 hardware->dmi.system.manufacturer);
#   80|-> 	snprintf(statbuffer, sizeof statbuffer, "System Vendor: %s",
#   81|   		 hardware->dmi.system.manufacturer);
#   82|   	add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def222]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:85:58: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 31
#   85 |         snprintf(buffer, sizeof buffer, "System Product: %s",
#      |                                                          ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:85:9: note: ‘snprintf’ output between 17 and 81 bytes into a destination of size 47
#   85 |         snprintf(buffer, sizeof buffer, "System Product: %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   86 |                  hardware->dmi.system.product_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   83|   	menu->items_count++;
#   84|   
#   85|-> 	snprintf(buffer, sizeof buffer, "System Product: %s",
#   86|   		 hardware->dmi.system.product_name);
#   87|   	snprintf(statbuffer, sizeof statbuffer,

Error: COMPILER_WARNING: [#def223]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:88:40: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 58
#   88 |                  "System Product Name: %s", hardware->dmi.system.product_name);
#      |                                        ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:87:9: note: ‘snprintf’ output between 22 and 86 bytes into a destination of size 79
#   87 |         snprintf(statbuffer, sizeof statbuffer,
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   88 |                  "System Product Name: %s", hardware->dmi.system.product_name);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   86|   		 hardware->dmi.system.product_name);
#   87|   	snprintf(statbuffer, sizeof statbuffer,
#   88|-> 		 "System Product Name: %s", hardware->dmi.system.product_name);
#   89|   	add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);
#   90|   	menu->items_count++;

Error: COMPILER_WARNING: [#def224]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:92:58: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 31
#   92 |         snprintf(buffer, sizeof buffer, "System Serial : %s",
#      |                                                          ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:92:9: note: ‘snprintf’ output between 17 and 81 bytes into a destination of size 47
#   92 |         snprintf(buffer, sizeof buffer, "System Serial : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   93 |                  hardware->dmi.system.serial);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   90|   	menu->items_count++;
#   91|   
#   92|-> 	snprintf(buffer, sizeof buffer, "System Serial : %s",
#   93|   		 hardware->dmi.system.serial);
#   94|   	snprintf(statbuffer, sizeof statbuffer,

Error: COMPILER_WARNING: [#def225]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:95:41: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 57
#   95 |                  "System Serial Number: %s", hardware->dmi.system.serial);
#      |                                         ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:94:9: note: ‘snprintf’ output between 23 and 87 bytes into a destination of size 79
#   94 |         snprintf(statbuffer, sizeof statbuffer,
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   95 |                  "System Serial Number: %s", hardware->dmi.system.serial);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   93|   		 hardware->dmi.system.serial);
#   94|   	snprintf(statbuffer, sizeof statbuffer,
#   95|-> 		 "System Serial Number: %s", hardware->dmi.system.serial);
#   96|   	add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);
#   97|   	menu->items_count++;

Error: COMPILER_WARNING: [#def226]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:101:58: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 31
#  101 |         snprintf(buffer, sizeof buffer, "Bios Version  : %s",
#      |                                                          ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:101:9: note: ‘snprintf’ output between 17 and 81 bytes into a destination of size 47
#  101 |         snprintf(buffer, sizeof buffer, "Bios Version  : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  102 |                  hardware->dmi.bios.version);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   99|   	add_item("", "", OPT_SEP, "", 0);
#  100|   
#  101|-> 	snprintf(buffer, sizeof buffer, "Bios Version  : %s",
#  102|   		 hardware->dmi.bios.version);
#  103|   	snprintf(statbuffer, sizeof statbuffer, "Bios Version: %s",

Error: COMPILER_WARNING: [#def227]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:108:58: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 31
#  108 |         snprintf(buffer, sizeof buffer, "Bios Release  : %s",
#      |                                                          ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:108:9: note: ‘snprintf’ output between 17 and 81 bytes into a destination of size 47
#  108 |         snprintf(buffer, sizeof buffer, "Bios Release  : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  109 |                  hardware->dmi.bios.release_date);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  106|   	menu->items_count++;
#  107|   
#  108|-> 	snprintf(buffer, sizeof buffer, "Bios Release  : %s",
#  109|   		 hardware->dmi.bios.release_date);
#  110|   	snprintf(statbuffer, sizeof statbuffer, "Bios Release Date: %s",

Error: COMPILER_WARNING: [#def228]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:110:69: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 64 bytes into a region of size 60
#  110 |         snprintf(statbuffer, sizeof statbuffer, "Bios Release Date: %s",
#      |                                                                     ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:110:9: note: ‘snprintf’ output between 20 and 84 bytes into a destination of size 79
#  110 |         snprintf(statbuffer, sizeof statbuffer, "Bios Release Date: %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  111 |                  hardware->dmi.bios.release_date);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  108|   	snprintf(buffer, sizeof buffer, "Bios Release  : %s",
#  109|   		 hardware->dmi.bios.release_date);
#  110|-> 	snprintf(statbuffer, sizeof statbuffer, "Bios Release Date: %s",
#  111|   		 hardware->dmi.bios.release_date);
#  112|   	add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def229]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c: scope_hint: In function ‘compute_summarymenu’
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:173:21: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  173 |                     strncat(kernel_modules, " | ", 3);
#      |                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  171|   		 i < pci_device->dev_info->linux_kernel_module_count; i++) {
#  172|   		if (i > 0) {
#  173|-> 		    strncat(kernel_modules, " | ", 3);
#  174|   		}
#  175|   		strncat(kernel_modules,

Error: COMPILER_WARNING: [#def230]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:173:21: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#  171|   		 i < pci_device->dev_info->linux_kernel_module_count; i++) {
#  172|   		if (i > 0) {
#  173|-> 		    strncat(kernel_modules, " | ", 3);
#  174|   		}
#  175|   		strncat(kernel_modules,

Error: COMPILER_WARNING: [#def231]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:181:50: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 639 bytes into a region of size 47
#  181 |                 snprintf(buffer, sizeof buffer, "%s (%s)",
#      |                                                  ^~
#  182 |                          kernel_modules, pci_device->dev_info->class_name);
#      |                          ~~~~~~~~~~~~~~           
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:181:17: note: ‘snprintf’ output between 4 and 898 bytes into a destination of size 47
#  181 |                 snprintf(buffer, sizeof buffer, "%s (%s)",
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  182 |                          kernel_modules, pci_device->dev_info->class_name);
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  179|   	    /* No need to add unknown kernel modules */
#  180|   	    if (strlen(kernel_modules) > 0) {
#  181|-> 		snprintf(buffer, sizeof buffer, "%s (%s)",
#  182|   			 kernel_modules, pci_device->dev_info->class_name);
#  183|   		snprintf(statbuffer, sizeof statbuffer,

Error: COMPILER_WARNING: [#def232]
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:184:37: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 69
#  184 |                          "%04x:%04x %s : %s",
#      |                                     ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-summary.c:183:17: note: ‘snprintf’ output between 14 and 524 bytes into a destination of size 79
#  183 |                 snprintf(statbuffer, sizeof statbuffer,
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  184 |                          "%04x:%04x %s : %s",
#      |                          ~~~~~~~~~~~~~~~~~~~~
#  185 |                          pci_device->vendor,
#      |                          ~~~~~~~~~~~~~~~~~~~
#  186 |                          pci_device->product,
#      |                          ~~~~~~~~~~~~~~~~~~~~
#  187 |                          pci_device->dev_info->vendor_name,
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  188 |                          pci_device->dev_info->product_name);
#      |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  182|   			 kernel_modules, pci_device->dev_info->class_name);
#  183|   		snprintf(statbuffer, sizeof statbuffer,
#  184|-> 			 "%04x:%04x %s : %s",
#  185|   			 pci_device->vendor,
#  186|   			 pci_device->product,

Error: COMPILER_WARNING: [#def233]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c: scope_hint: In function ‘compute_VESA’
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:49:52: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 33
#   49 |     snprintf(buffer, sizeof buffer, "Vendor      : %s", hardware->vesa.vendor);
#      |                                                    ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:49:5: note: ‘snprintf’ output between 15 and 270 bytes into a destination of size 47
#   49 |     snprintf(buffer, sizeof buffer, "Vendor      : %s", hardware->vesa.vendor);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   47|       menu->items_count++;
#   48|   
#   49|->     snprintf(buffer, sizeof buffer, "Vendor      : %s", hardware->vesa.vendor);
#   50|       snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",
#   51|   	     hardware->vesa.vendor);

Error: COMPILER_WARNING: [#def234]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c: scope_hint: In function ‘compute_VESA’
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:50:59: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 66
#   50 |     snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",
#      |                                                           ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:50:5: note: ‘snprintf’ output between 14 and 269 bytes into a destination of size 79
#   50 |     snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   51 |              hardware->vesa.vendor);
#      |              ~~~~~~~~~~~~~~~~~~~~~~
#   48|   
#   49|       snprintf(buffer, sizeof buffer, "Vendor      : %s", hardware->vesa.vendor);
#   50|->     snprintf(statbuffer, sizeof statbuffer, "Vendor Name: %s",
#   51|   	     hardware->vesa.vendor);
#   52|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def235]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c: scope_hint: In function ‘compute_VESA’
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:55:52: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 33
#   55 |     snprintf(buffer, sizeof buffer, "Product     : %s", hardware->vesa.product);
#      |                                                    ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:55:5: note: ‘snprintf’ output between 15 and 270 bytes into a destination of size 47
#   55 |     snprintf(buffer, sizeof buffer, "Product     : %s", hardware->vesa.product);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   53|       menu->items_count++;
#   54|   
#   55|->     snprintf(buffer, sizeof buffer, "Product     : %s", hardware->vesa.product);
#   56|       snprintf(statbuffer, sizeof statbuffer, "Product Name: %s",
#   57|   	     hardware->vesa.product);

Error: COMPILER_WARNING: [#def236]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c: scope_hint: In function ‘compute_VESA’
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:56:60: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 65
#   56 |     snprintf(statbuffer, sizeof statbuffer, "Product Name: %s",
#      |                                                            ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:56:5: note: ‘snprintf’ output between 15 and 270 bytes into a destination of size 79
#   56 |     snprintf(statbuffer, sizeof statbuffer, "Product Name: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   57 |              hardware->vesa.product);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~
#   54|   
#   55|       snprintf(buffer, sizeof buffer, "Product     : %s", hardware->vesa.product);
#   56|->     snprintf(statbuffer, sizeof statbuffer, "Product Name: %s",
#   57|   	     hardware->vesa.product);
#   58|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def237]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c: scope_hint: In function ‘compute_VESA’
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:61:52: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 33
#   61 |     snprintf(buffer, sizeof buffer, "Product Rev.: %s",
#      |                                                    ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:61:5: note: ‘snprintf’ output between 15 and 270 bytes into a destination of size 47
#   61 |     snprintf(buffer, sizeof buffer, "Product Rev.: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   62 |              hardware->vesa.product_revision);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   59|       menu->items_count++;
#   60|   
#   61|->     snprintf(buffer, sizeof buffer, "Product Rev.: %s",
#   62|   	     hardware->vesa.product_revision);
#   63|       snprintf(statbuffer, sizeof statbuffer, "Produt Revision: %s",

Error: COMPILER_WARNING: [#def238]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c: scope_hint: In function ‘compute_VESA’
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:63:63: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 255 bytes into a region of size 62
#   63 |     snprintf(statbuffer, sizeof statbuffer, "Produt Revision: %s",
#      |                                                               ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vesa.c:63:5: note: ‘snprintf’ output between 18 and 273 bytes into a destination of size 79
#   63 |     snprintf(statbuffer, sizeof statbuffer, "Produt Revision: %s",
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   64 |              hardware->vesa.product_revision);
#      |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   61|       snprintf(buffer, sizeof buffer, "Product Rev.: %s",
#   62|   	     hardware->vesa.product_revision);
#   63|->     snprintf(statbuffer, sizeof statbuffer, "Produt Revision: %s",
#   64|   	     hardware->vesa.product_revision);
#   65|       add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def239]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vpd.c: scope_hint: In function ‘compute_vpd’
syslinux-6.04-pre1/com32/hdt/hdt-menu-vpd.c:69:69: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 20
#   69 |         snprintf(buffer, sizeof buffer, "Bios Version             : %s",
#      |                                                                     ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vpd.c:69:9: note: ‘snprintf’ output between 28 and 282 bytes into a destination of size 47
#   69 |         snprintf(buffer, sizeof buffer, "Bios Version             : %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   70 |                  hardware->vpd.bios_version);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   67|   
#   68|       if (strlen(hardware->vpd.bios_version) > 0) {
#   69|-> 	snprintf(buffer, sizeof buffer, "Bios Version             : %s",
#   70|   		 hardware->vpd.bios_version);
#   71|   	snprintf(statbuffer, sizeof statbuffer, "Bios Version: %s",

Error: COMPILER_WARNING: [#def240]
syslinux-6.04-pre1/com32/hdt/hdt-menu-vpd.c:71:64: warning[-Wformat-truncation=]: ‘%s’ directive output may be truncated writing up to 254 bytes into a region of size 65
#   71 |         snprintf(statbuffer, sizeof statbuffer, "Bios Version: %s",
#      |                                                                ^~
syslinux-6.04-pre1/com32/hdt/hdt-menu-vpd.c:71:9: note: ‘snprintf’ output between 15 and 269 bytes into a destination of size 79
#   71 |         snprintf(statbuffer, sizeof statbuffer, "Bios Version: %s",
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   72 |                  hardware->vpd.bios_version);
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   69|   	snprintf(buffer, sizeof buffer, "Bios Version             : %s",
#   70|   		 hardware->vpd.bios_version);
#   71|-> 	snprintf(statbuffer, sizeof statbuffer, "Bios Version: %s",
#   72|   		 hardware->vpd.bios_version);
#   73|   	add_item(buffer, statbuffer, OPT_INACTIVE, NULL, 0);

Error: COMPILER_WARNING: [#def241]
syslinux-6.04-pre1/com32/include/dprintf.h:30:9: note[note]: this is the location of the previous definition
#   28|   #else
#   29|   
#   30|-> #define dprintf(...) \
#   31|       if (syslinux_debug_enabled) \
#   32|           printf(__VA_ARGS__)

Error: COMPILER_WARNING: [#def242]
syslinux-6.04-pre1/core/include/core.h:10: included_from: Included from here.
syslinux-6.04-pre1/core/fs/pxe/bios.c:3: included_from: Included from here.
syslinux-6.04-pre1/com32/include/dprintf.h:36:25: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#   36 | #define ddprintf        printf
syslinux-6.04-pre1/core/fs/pxe/bios.c:384:5: note: in expansion of macro ‘ddprintf’
#  384 |     ddprintf("Failed to free base memory error %04x-%08x (%d/%dK)\n",
#      |     ^~~~~~~~
cc1: note: source object is likely at address zero
#   34|       if (syslinux_debug_enabled) \
#   35|           vprintf(fmt, ap)
#   36|-> #define ddprintf	printf
#   37|   
#   38|   #endif /* CORE_DEBUG */

Error: COMPILER_WARNING: [#def243]
syslinux-6.04-pre1/com32/include/sys/x86_64/bitops.h: scope_hint: Assembler messages
syslinux-6.04-pre1/com32/include/sys/x86_64/bitops.h:51: Warning: no instruction mnemonic suffix given and no register operands; using default for `bt'
#   49|   {
#   50|       unsigned char __r;
#   51|->     asm("bt %2,%1; setc %0"
#   52|   	: "=qm" (__r)
#   53|   	: "m" (*(const unsigned char *)__bitmap), "Ir" (__bit));

Error: COMPILER_WARNING: [#def244]
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c: scope_hint: In function ‘png_set_crc_action’
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:51:10: warning[-Wimplicit-fallthrough=]: this statement may fall through
#   51 |          png_warning(png_ptr,
#      |          ^~~~~~~~~~~~~~~~~~~~
#   52 |             "Can't discard critical data on CRC error.");
#      |             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:53:7: note: here
#   53 |       case PNG_CRC_ERROR_QUIT:                                /* Error/quit */
#      |       ^~~~
#   49|   
#   50|         case PNG_CRC_WARN_DISCARD:    /* Not a valid action for critical data */
#   51|->          png_warning(png_ptr,
#   52|               "Can't discard critical data on CRC error.");
#   53|         case PNG_CRC_ERROR_QUIT:                                /* Error/quit */

Error: GCC_ANALYZER_WARNING: [#def245]
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3437:25: warning[-Wanalyzer-overlapping-buffers]: overlapping buffers passed as arguments to ‘memcpy’
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:2815:7: branch_true: following ‘true’ branch (when ‘background’ is non-NULL)...
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:2819:10: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:2820:7: branch_true: following ‘true’ branch (when ‘trans_values’ is non-NULL)...
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:2822:7: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3295:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3371:20: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3431:31: branch_true: following ‘true’ branch (when ‘i < row_width’)...
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3433:66: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3435:25: branch_true: following ‘true’ branch (when ‘a == 65535’)...
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3437:25: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/libpng/pngrtran.c:3437:25: danger: overlapping buffers passed as arguments to ‘memcpy’
# 3435|                        if (a == (png_uint_16)0xffff)
# 3436|                        {
# 3437|->                         png_memcpy(dp, sp, 6);
# 3438|                        }
# 3439|                        else if (a == 0)

Error: COMPILER_WARNING: [#def246]
syslinux-6.04-pre1/com32/lib/libpng/pngrutil.c: scope_hint: In function ‘png_inflate’
syslinux-6.04-pre1/com32/lib/libpng/pngrutil.c:302:10: warning[-Wdangling-pointer=]: dangling pointer ‘msg’ to ‘umsg’ may be used
#  302 |          png_warning(png_ptr, msg);
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/lib/libpng/pngrutil.c:280:18: note: ‘umsg’ declared here
#  280 |             char umsg[52];
#      |                  ^~~~
#  300|            }
#  301|   
#  302|->          png_warning(png_ptr, msg);
#  303|         }
#  304|   

Error: COMPILER_WARNING: [#def247]
syslinux-6.04-pre1/com32/lib/lrand48.c:10:29: warning[-Warray-parameter=]: argument 1 of type ‘short unsigned int[3]’ with mismatched bound
#   10 | long jrand48(unsigned short xsubi[3])
#      |              ~~~~~~~~~~~~~~~^~~~~~~~
syslinux-6.04-pre1/com32/lib/lrand48.c:5: included_from: Included from here.
syslinux-6.04-pre1/com32/include/stdlib.h:61:23: note: previously declared as ‘short unsigned int *’
#   61 | __extern long jrand48(unsigned short *);
#      |                       ^~~~~~~~~~~~~~~~
#    8|   unsigned short __rand48_seed[3];
#    9|   
#   10|-> long jrand48(unsigned short xsubi[3])
#   11|   {
#   12|       uint64_t x;

Error: COMPILER_WARNING: [#def248]
syslinux-6.04-pre1/com32/lib/lrand48.c:32:29: warning[-Warray-parameter=]: argument 1 of type ‘short unsigned int[3]’ with mismatched bound
#   32 | long nrand48(unsigned short xsubi[3])
#      |              ~~~~~~~~~~~~~~~^~~~~~~~
syslinux-6.04-pre1/com32/include/stdlib.h:63:23: note: previously declared as ‘short unsigned int *’
#   63 | __extern long nrand48(unsigned short *);
#      |                       ^~~~~~~~~~~~~~~~
#   30|   }
#   31|   
#   32|-> long nrand48(unsigned short xsubi[3])
#   33|   {
#   34|       return (long)((uint32_t) jrand48(xsubi) >> 1);

Error: COMPILER_WARNING: [#def249]
syslinux-6.04-pre1/com32/lib/math/strtod.c: scope_hint: In function ‘strtod’
syslinux-6.04-pre1/com32/lib/math/strtod.c:67:18: warning[-Wimplicit-fallthrough=]: this statement may fall through
#   67 |         negative = 1;           // Fall through to increment position
#      |         ~~~~~~~~~^~~
syslinux-6.04-pre1/com32/lib/math/strtod.c:68:5: note: here
#   68 |     case '+':
#      |     ^~~~
#   65|       switch (*p) {
#   66|       case '-':
#   67|-> 	negative = 1;		// Fall through to increment position
#   68|       case '+':
#   69|   	p++;

Error: COMPILER_WARNING: [#def250]
syslinux-6.04-pre1/com32/lib/math/strtod.c:112:22: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  112 |             negative = 1;       // Fall through to increment pos
#      |             ~~~~~~~~~^~~
syslinux-6.04-pre1/com32/lib/math/strtod.c:113:9: note: here
#  113 |         case '+':
#      |         ^~~~
#  110|   	switch (*++p) {
#  111|   	case '-':
#  112|-> 	    negative = 1;	// Fall through to increment pos
#  113|   	case '+':
#  114|   	    p++;

Error: COMPILER_WARNING (CWE-1164): [#def251]
syslinux-6.04-pre1/com32/lib/onexit.c:11:19: warning[-Wunused-function]: ‘on_exit_exit’ defined but not used
#   11 | static __noreturn on_exit_exit(int rv)
#      |                   ^~~~~~~~~~~~
#    9|   static struct atexit *__atexit_list;
#   10|   
#   11|-> static __noreturn on_exit_exit(int rv)
#   12|   {
#   13|       struct atexit *ap;

Error: COMPILER_WARNING: [#def252]
syslinux-6.04-pre1/com32/lib/pci/cfgtype.c:53:5: warning[-Wenum-int-mismatch]: conflicting types for ‘pci_set_config_type’ due to enum/integer mismatch; have ‘int(enum pci_config_type)’
#   53 | int pci_set_config_type(enum pci_config_type type)
#      |     ^~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/lib/pci/pci.h:9: included_from: Included from here.
syslinux-6.04-pre1/com32/lib/pci/cfgtype.c:1: included_from: Included from here.
syslinux-6.04-pre1/com32/include/sys/pci.h:135:22: note: previous declaration of ‘pci_set_config_type’ with type ‘enum pci_config_type(enum pci_config_type)’
#  135 | enum pci_config_type pci_set_config_type(enum pci_config_type);
#      |                      ^~~~~~~~~~~~~~~~~~~
#   51|   }
#   52|   
#   53|-> int pci_set_config_type(enum pci_config_type type)
#   54|   {
#   55|       static const com32sys_t ireg = {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def253]
syslinux-6.04-pre1/com32/lib/pci/scan.c:154:20: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘module_name[0]’
syslinux-6.04-pre1/com32/lib/pci/scan.c:81:3: branch_true: following ‘true’ branch (when ‘__pci_bus != 256’)...
syslinux-6.04-pre1/com32/lib/pci/scan.c:81:3: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:96:6: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
syslinux-6.04-pre1/com32/lib/pci/scan.c:99:3: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:105:11: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:107:10: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:115:12: branch_false: following ‘false’ branch (when ‘result’ is NULL)...
syslinux-6.04-pre1/com32/lib/pci/scan.c:135:23: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:141:5: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:143:29: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:11: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:144:33: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:11: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:146:32: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:11: branch_true: following ‘true’ branch...
 branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:151:29: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:154:27: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:154:20: danger: use of uninitialized value ‘module_name[0]’ here
#  152|   
#  153|          	      /* Try to detect if we already knew the same kernel module*/
#  154|-> 	       if (strstr(dev->dev_info->linux_kernel_module[i], module_name)) {
#  155|   		      found=true;
#  156|   		      break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def254]
syslinux-6.04-pre1/com32/lib/pci/scan.c:161:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘module_name[0]’
syslinux-6.04-pre1/com32/lib/pci/scan.c:81:3: branch_true: following ‘true’ branch (when ‘__pci_bus != 256’)...
syslinux-6.04-pre1/com32/lib/pci/scan.c:81:3: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:96:6: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
syslinux-6.04-pre1/com32/lib/pci/scan.c:99:3: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:105:11: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:107:10: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:115:12: branch_false: following ‘false’ branch (when ‘result’ is NULL)...
syslinux-6.04-pre1/com32/lib/pci/scan.c:135:23: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:141:5: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:143:29: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:11: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:144:33: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:11: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:146:32: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:142:11: branch_true: following ‘true’ branch...
 branch_true: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:151:29: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/lib/pci/scan.c:160:18: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:160:18: branch_false: following ‘false’ branch (when ‘found == 0’)...
syslinux-6.04-pre1/com32/lib/pci/scan.c:161:24: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/pci/scan.c:161:17: danger: use of uninitialized value ‘module_name[0]’ here
#  159|   	      /* If we don't have this kernel module, let's add it */
#  160|   	      if (!found) {
#  161|-> 		strcpy(dev->dev_info->linux_kernel_module[dev->dev_info->linux_kernel_module_count], module_name);
#  162|   		dev->dev_info->linux_kernel_module_count++;
#  163|   	      }

Error: COMPILER_WARNING (CWE-483): [#def255]
syslinux-6.04-pre1/com32/lib/pci/scan.c: scope_hint: In function ‘get_module_name_from_alias’
syslinux-6.04-pre1/com32/lib/pci/scan.c:684:16: warning[-Wmisleading-indentation]: this ‘if’ clause does not guard...
#  684 |         } else if ((strlen(result)>2) &&
#      |                ^~
syslinux-6.04-pre1/com32/lib/pci/scan.c:688:17: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘if’
#  688 |                 module_name[strlen(module_name)-1]='\0';
#      |                 ^~~~~~~~~~~
#  682|   		}
#  683|   	/* That's the module name */
#  684|-> 	} else if ((strlen(result)>2) &&
#  685|   			(result[0]==0x20))
#  686|   		strcpy(module_name,result+1);

Error: COMPILER_WARNING: [#def256]
syslinux-6.04-pre1/com32/lib/seed48.c:11:45: warning[-Warray-parameter=]: argument 1 of type ‘const short unsigned int[3]’ with mismatched bound
#   11 | unsigned short *seed48(const unsigned short xsubi[3])
#      |                        ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~
syslinux-6.04-pre1/com32/lib/seed48.c:5: included_from: Included from here.
syslinux-6.04-pre1/com32/include/stdlib.h:65:33: note: previously declared as ‘const short unsigned int *’
#   65 | __extern unsigned short *seed48(const unsigned short *);
#      |                                 ^~~~~~~~~~~~~~~~~~~~~~
#    9|   extern unsigned short __rand48_seed[3];
#   10|   
#   11|-> unsigned short *seed48(const unsigned short xsubi[3])
#   12|   {
#   13|       static unsigned short oldseed[3];

Error: COMPILER_WARNING: [#def257]
syslinux-6.04-pre1/com32/lib/sprintf.c: scope_hint: In function ‘sprintf’
syslinux-6.04-pre1/com32/lib/sprintf.c:14:10: warning[-Wformat-truncation=]: specified bound 18446744073709551615 exceeds maximum object size 9223372036854775807
#   14 |     rv = vsnprintf(buffer, ~(size_t) 0, format, ap);
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   12|   
#   13|       va_start(ap, format);
#   14|->     rv = vsnprintf(buffer, ~(size_t) 0, format, ap);
#   15|       va_end(ap);
#   16|   

Error: COMPILER_WARNING: [#def258]
syslinux-6.04-pre1/com32/lib/sprintf.c: scope_hint: In function ‘sprintf’
syslinux-6.04-pre1/com32/lib/sprintf.c:14:10: warning[-Wformat-truncation=]: specified bound 4294967295 exceeds maximum object size 2147483647
#   14 |     rv = vsnprintf(buffer, ~(size_t) 0, format, ap);
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   12|   
#   13|       va_start(ap, format);
#   14|->     rv = vsnprintf(buffer, ~(size_t) 0, format, ap);
#   15|       va_end(ap);
#   16|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def259]
syslinux-6.04-pre1/com32/lib/sys/ansi.c:154:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
#  152|   	    op->erase(st, 0, 0, cols - 1, rows - 1);
#  153|   	    xy.x = xy.y = 0;
#  154|-> 	    st->state = st_init;
#  155|   	    break;
#  156|   	default:

Error: COMPILER_WARNING: [#def260]
syslinux-6.04-pre1/com32/lib/sys/libansi.c: scope_hint: In function ‘cprint_vga2ansi’
syslinux-6.04-pre1/com32/lib/sys/libansi.c:131:42: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (9 chars into 8 available)
#  131 |         static const char ansi_char[8] = "04261537";
#      |                                          ^~~~~~~~~~
#  129|   static void cprint_vga2ansi(const char chr, const char attr)
#  130|   {
#  131|-> 	static const char ansi_char[8] = "04261537";
#  132|   	static uint16_t last_attr = 0x300;
#  133|   	char buf[16], *p;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def261]
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:192:48: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rel’
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:267:5: enter_function: entry to ‘resolve_symbols’
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:282:16: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:283:17: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:282:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:321:12: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:321:12: branch_true: following ‘true’ branch (when ‘rel_size != 0’)...
 branch_true: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:323:29: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:324:54: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:324:25: release_memory: ‘crt_rel’ is NULL
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:326:31: call_function: calling ‘perform_relocation’ from ‘resolve_symbols’
#  190|   
#  191|   int perform_relocation(struct elf_module *module, Elf_Rel *rel) {
#  192|-> 	Elf32_Word *dest = module_get_absolute(rel->r_offset, module);
#  193|   
#  194|   	// The symbol reference index

Error: COMPILER_WARNING: [#def262]
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c: scope_hint: In function ‘resolve_symbols’
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:290:28: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  290 |                         if (dyn_entry->d_un.d_val != DT_REL) {
#      |                            ^
syslinux-6.04-pre1/com32/lib/sys/module/i386/elf_module.c:294:17: note: here
#  294 |                 case DT_JMPREL:
#      |                 ^~~~
#  288|   			break;
#  289|   		case DT_PLTREL:
#  290|-> 			if (dyn_entry->d_un.d_val != DT_REL) {
#  291|   				DBG_PRINT("Unsupported PLT relocation\n");
#  292|   				return -1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def263]
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:192:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rel’
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:267:5: enter_function: entry to ‘resolve_symbols’
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:285:16: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:286:17: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:285:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:338:12: branch_false: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:338:12: branch_true: following ‘true’ branch (when ‘rel_size != 0’)...
 branch_true: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:340:29: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:341:54: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:341:25: release_memory: ‘crt_rel’ is NULL
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:343:31: call_function: calling ‘perform_relocation’ from ‘resolve_symbols’
#  190|   
#  191|   int perform_relocation(struct elf_module *module, Elf_Rel *rel) {
#  192|-> 	Elf64_Xword *dest = module_get_absolute(rel->r_offset, module);
#  193|   
#  194|   	// The symbol reference index

Error: COMPILER_WARNING (CWE-704): [#def264]
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c: scope_hint: In function ‘perform_relocation’
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:244:37: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  244 |                 *dest += sym_addr - (Elf32_Addr)dest;
#      |                                     ^
#  242|   		break;
#  243|   	case R_X86_64_PC32:
#  244|-> 		*dest += sym_addr - (Elf32_Addr)dest;
#  245|   		break;
#  246|   	case R_X86_64_COPY:

Error: COMPILER_WARNING (CWE-704): [#def265]
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:244:37: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  242|   		break;
#  243|   	case R_X86_64_PC32:
#  244|-> 		*dest += sym_addr - (Elf32_Addr)dest;
#  245|   		break;
#  246|   	case R_X86_64_COPY:

Error: COMPILER_WARNING: [#def266]
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:293:28: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  293 |                         if (dyn_entry->d_un.d_val != DT_REL && dyn_entry->d_un.d_val != DT_RELA) {
#      |                            ^
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:298:17: note: here
#  298 |                 case DT_JMPREL:
#      |                 ^~~~
#  291|   			break;
#  292|   		case DT_PLTREL:
#  293|-> 			if (dyn_entry->d_un.d_val != DT_REL && dyn_entry->d_un.d_val != DT_RELA) {
#  294|   				DBG_PRINT("Unsupported PLT relocation\n");
#  295|   				return -1;

Error: COMPILER_WARNING (CWE-468): [#def267]
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c: scope_hint: In function ‘resolve_symbols’
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:341:52: warning[-Wpointer-arith]: pointer of type ‘void *’ used in arithmetic
#  341 |                         crt_rel = (Elf64_Rel*)(rel + i*rel_entry);
#      |                                                    ^
#  339|   		// Process standard relocations
#  340|   		for (i = 0; i < rel_size/rel_entry; i++) {
#  341|-> 			crt_rel = (Elf64_Rel*)(rel + i*rel_entry);
#  342|   
#  343|   			res = perform_relocation(module, crt_rel);

Error: COMPILER_WARNING (CWE-468): [#def268]
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:354:52: warning[-Wpointer-arith]: pointer of type ‘void *’ used in arithmetic
#  354 |                         crt_rel = (Elf64_Rel*)(rel + i*rela_entry);
#      |                                                    ^
#  352|   		// Process standard relocations
#  353|   		for (i = 0; i < rela_size/rela_entry; i++) {
#  354|-> 			crt_rel = (Elf64_Rel*)(rel + i*rela_entry);
#  355|   
#  356|   			res = perform_relocation(module, crt_rel);

Error: COMPILER_WARNING (CWE-468): [#def269]
syslinux-6.04-pre1/com32/lib/sys/module/x86_64/elf_module.c:370:56: warning[-Wpointer-arith]: pointer of type ‘void *’ used in arithmetic
#  370 |                         crt_rel = (Elf64_Rel*)(plt_rel + i*rela_entry);
#      |                                                        ^
#  368|   		for (i = 0; i < plt_rel_size/rela_entry; i++) {
#  369|   			//crt_rel = (Elf64_Rel*)(plt_rel + i*sizeof(Elf64_Rel));
#  370|-> 			crt_rel = (Elf64_Rel*)(plt_rel + i*rela_entry);
#  371|   
#  372|   			res = perform_relocation(module, crt_rel);

Error: COMPILER_WARNING: [#def270]
syslinux-6.04-pre1/com32/lib/sys/stdcon_write.c: scope_hint: In function ‘__stdcon_open’
syslinux-6.04-pre1/com32/lib/sys/stdcon_write.c:41:20: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   41 | #define BIOS_ROWS (*(uint8_t *)0x484)   /* Minus one; if zero use 24 (= 25 lines) */
#      |                   ~^~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/lib/sys/stdcon_write.c:46:18: note: in expansion of macro ‘BIOS_ROWS’
#   46 |     fp->o.rows = BIOS_ROWS + 1;
#      |                  ^~~~~~~~~
cc1: note: source object is likely at address zero
#   39|   #include "file.h"
#   40|   
#   41|-> #define BIOS_ROWS (*(uint8_t *)0x484)	/* Minus one; if zero use 24 (= 25 lines) */
#   42|   #define BIOS_COLS (*(uint16_t *)0x44A)
#   43|   

Error: COMPILER_WARNING: [#def271]
syslinux-6.04-pre1/com32/lib/sys/stdcon_write.c:42:20: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   42 | #define BIOS_COLS (*(uint16_t *)0x44A)
#      |                   ~^~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/lib/sys/stdcon_write.c:47:18: note: in expansion of macro ‘BIOS_COLS’
#   47 |     fp->o.cols = BIOS_COLS;
#      |                  ^~~~~~~~~
cc1: note: source object is likely at address zero
#   40|   
#   41|   #define BIOS_ROWS (*(uint8_t *)0x484)	/* Minus one; if zero use 24 (= 25 lines) */
#   42|-> #define BIOS_COLS (*(uint16_t *)0x44A)
#   43|   
#   44|   static int __stdcon_open(struct file_info *fp)

Error: COMPILER_WARNING (CWE-758): [#def272]
syslinux-6.04-pre1/com32/lib/sys/vesa/background.c: scope_hint: In function ‘read_png_file’
syslinux-6.04-pre1/com32/lib/sys/vesa/background.c:121:9: warning[-Wclobbered]: variable ‘rv’ might be clobbered by ‘longjmp’ or ‘vfork’
#  121 |     int rv = -1;
#      |         ^~
#  119|       png_bytep row_pointers[__vesa_info.mi.v_res], rp;
#  120|       int i;
#  121|->     int rv = -1;
#  122|   
#  123|       png_ptr = png_create_read_struct(PNG_LIBPNG_VER_STRING, NULL, NULL, NULL);

Error: COMPILER_WARNING (CWE-465): [#def273]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c: scope_hint: In function ‘set_mode’
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:673:57: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  673 |                             gtf_timings(x, y, freqs[j], &modeline->clock,
#      |                                                         ^~~~~~~~~~~~~~~~
#  671|                               modeline->y1 = modeline->y2 = y-1;
#  672|   
#  673|->                             gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,

Error: COMPILER_WARNING (CWE-465): [#def274]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:673:57: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  671|                               modeline->y1 = modeline->y2 = y-1;
#  672|   
#  673|->                             gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,

Error: COMPILER_WARNING (CWE-465): [#def275]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:674:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  674 |                                     &modeline->hsyncstart, &modeline->hsyncend,
#      |                                     ^~~~~~~~~~~~~~~~~~~~~
#  672|   
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def276]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:674:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  672|   
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def277]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:674:60: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  674 |                                     &modeline->hsyncstart, &modeline->hsyncend,
#      |                                                            ^~~~~~~~~~~~~~~~~~~
#  672|   
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def278]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:674:60: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  672|   
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def279]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:675:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  675 |                                     &modeline->hblank, &modeline->vsyncstart,
#      |                                     ^~~~~~~~~~~~~~~~~
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|->                                     &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);
#  677|   

Error: COMPILER_WARNING (CWE-465): [#def280]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:675:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|->                                     &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);
#  677|   

Error: COMPILER_WARNING (CWE-465): [#def281]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:675:56: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  675 |                                     &modeline->hblank, &modeline->vsyncstart,
#      |                                                        ^~~~~~~~~~~~~~~~~~~~~
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|->                                     &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);
#  677|   

Error: COMPILER_WARNING (CWE-465): [#def282]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:675:56: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  673|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|->                                     &modeline->hblank, &modeline->vsyncstart,
#  676|                                       &modeline->vsyncend, &modeline->vblank);
#  677|   

Error: COMPILER_WARNING (CWE-465): [#def283]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:676:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  676 |                                     &modeline->vsyncend, &modeline->vblank);
#      |                                     ^~~~~~~~~~~~~~~~~~~
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|->                                     &modeline->vsyncend, &modeline->vblank);
#  677|   
#  678|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def284]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:676:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|->                                     &modeline->vsyncend, &modeline->vblank);
#  677|   
#  678|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def285]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:676:58: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  676 |                                     &modeline->vsyncend, &modeline->vblank);
#      |                                                          ^~~~~~~~~~~~~~~~~
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|->                                     &modeline->vsyncend, &modeline->vblank);
#  677|   
#  678|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def286]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:676:58: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  674|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  675|                                       &modeline->hblank, &modeline->vsyncstart,
#  676|->                                     &modeline->vsyncend, &modeline->vblank);
#  677|   
#  678|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def287]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:707:57: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  707 |                             gtf_timings(x, y, freqs[j], &modeline->clock,
#      |                                                         ^~~~~~~~~~~~~~~~
#  705|                               modeline->y1 = modeline->y2 = y-1;
#  706|                               
#  707|->                             gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,

Error: COMPILER_WARNING (CWE-465): [#def288]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:707:57: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  705|                               modeline->y1 = modeline->y2 = y-1;
#  706|                               
#  707|->                             gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,

Error: COMPILER_WARNING (CWE-465): [#def289]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:708:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  708 |                                     &modeline->hsyncstart, &modeline->hsyncend,
#      |                                     ^~~~~~~~~~~~~~~~~~~~~
#  706|                               
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def290]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:708:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  706|                               
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def291]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:708:60: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  708 |                                     &modeline->hsyncstart, &modeline->hsyncend,
#      |                                                            ^~~~~~~~~~~~~~~~~~~
#  706|                               
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def292]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:708:60: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  706|                               
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|->                                     &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);

Error: COMPILER_WARNING (CWE-465): [#def293]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:709:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  709 |                                     &modeline->hblank, &modeline->vsyncstart,
#      |                                     ^~~~~~~~~~~~~~~~~
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|->                                     &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def294]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:709:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|->                                     &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def295]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:709:56: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  709 |                                     &modeline->hblank, &modeline->vsyncstart,
#      |                                                        ^~~~~~~~~~~~~~~~~~~~~
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|->                                     &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def296]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:709:56: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  707|                               gtf_timings(x, y, freqs[j], &modeline->clock,
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|->                                     &modeline->hblank, &modeline->vsyncstart,
#  710|                                       &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)

Error: COMPILER_WARNING (CWE-465): [#def297]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:710:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  710 |                                     &modeline->vsyncend, &modeline->vblank);
#      |                                     ^~~~~~~~~~~~~~~~~~~
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|->                                     &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)
#  712|                                   modeline->htotal = htotal;

Error: COMPILER_WARNING (CWE-465): [#def298]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:710:37: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|->                                     &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)
#  712|                                   modeline->htotal = htotal;

Error: COMPILER_WARNING (CWE-465): [#def299]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:710:58: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  710 |                                     &modeline->vsyncend, &modeline->vblank);
#      |                                                          ^~~~~~~~~~~~~~~~~
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|->                                     &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)
#  712|                                   modeline->htotal = htotal;

Error: COMPILER_WARNING (CWE-465): [#def300]
syslinux-6.04-pre1/com32/lib/sys/vesa/i915resolution.c:710:58: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#  708|                                       &modeline->hsyncstart, &modeline->hsyncend,
#  709|                                       &modeline->hblank, &modeline->vsyncstart,
#  710|->                                     &modeline->vsyncend, &modeline->vblank);
#  711|                               if (htotal)
#  712|                                   modeline->htotal = htotal;

Error: COMPILER_WARNING (CWE-704): [#def301]
syslinux-6.04-pre1/com32/lib/sys/vesa/screencpy.c: scope_hint: In function ‘__vesacon_init_copy_to_screen’
syslinux-6.04-pre1/com32/lib/sys/vesa/screencpy.c:62:23: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   62 |         wi.win_base = (char *)(mi->win_seg[winn] << 4);
#      |                       ^
#   60|   
#   61|   	wi.win_num = winn;
#   62|-> 	wi.win_base = (char *)(mi->win_seg[winn] << 4);
#   63|   	wi.win_size = mi->win_size << 10;
#   64|   	wi.win_gshift = ilog2(mi->win_grain) + 10;

Error: COMPILER_WARNING (CWE-704): [#def302]
syslinux-6.04-pre1/com32/lib/sys/vesa/screencpy.c:62:23: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   60|   
#   61|   	wi.win_num = winn;
#   62|-> 	wi.win_base = (char *)(mi->win_seg[winn] << 4);
#   63|   	wi.win_size = mi->win_size << 10;
#   64|   	wi.win_gshift = ilog2(mi->win_grain) + 10;

Error: COMPILER_WARNING: [#def303]
syslinux-6.04-pre1/com32/lib/syslinux/initramfs.c: scope_hint: In function ‘initramfs_init’
syslinux-6.04-pre1/com32/lib/syslinux/initramfs.c:41:23: warning[-Wcalloc-transposed-args]: ‘calloc’ sizes specified with ‘sizeof’ in the earlier argument and not in the later argument
#   41 |     ir = calloc(sizeof(*ir), 1);
#      |                       ^
syslinux-6.04-pre1/com32/lib/syslinux/initramfs.c:41:23: note: earlier argument should specify number of elements, later size of each element
#   39|       struct initramfs *ir;
#   40|   
#   41|->     ir = calloc(sizeof(*ir), 1);
#   42|       if (!ir)
#   43|   	return NULL;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def304]
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:85:23: warning[-Wanalyzer-null-argument]: use of NULL ‘bp’ where non-null expected
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:150:5: enter_function: entry to ‘initramfs_add_file’
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:154:9: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:155:50: branch_true: ...to here
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:154:9: call_function: calling ‘initramfs_mknod’ from ‘initramfs_add_file’
#argument 1 of ‘__builtin_sprintf’ must be non-null
#   83|   		len = p - filename;
#   84|   		hdr_sz = ((sizeof(struct cpio_header) + len + 1) + 3) & ~3;
#   85|-> 		bp += sprintf(bp, "070701%08x%08x%08x%08x%08x%08x%08x%08x%08x"
#   86|   			      "%08x%08x%08x%08x", next_ino++, S_IFDIR | 0755,
#   87|   			      0, 0, 1, 0, 0, 0, 1, 0, 1, len + 1, 0);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def305]
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:137:8: warning[-Wanalyzer-malloc-leak]: leak of ‘bp’
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:161:5: enter_function: entry to ‘initramfs_add_trailer’
syslinux-6.04-pre1/com32/lib/syslinux/initramfs_file.c:163:12: call_function: calling ‘initramfs_mknod’ from ‘initramfs_add_trailer’
#  135|       memset(bp, 0, pad);
#  136|   
#  137|->     if (initramfs_add_data(ihead, buffer, bytes, bytes, 4)) {
#  138|   	free(buffer);
#  139|   	return -1;

Error: COMPILER_WARNING (CWE-704): [#def306]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c: scope_hint: In function ‘map_initramfs’
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:113:55: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  113 |             if (syslinux_add_movelist(fraglist, addr, (addr_t) ip->data, len))
#      |                                                       ^
#  111|   
#  112|   	if (ip->data_len) {
#  113|-> 	    if (syslinux_add_movelist(fraglist, addr, (addr_t) ip->data, len))
#  114|   		return -1;
#  115|   	}

Error: COMPILER_WARNING (CWE-704): [#def307]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:113:55: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  111|   
#  112|   	if (ip->data_len) {
#  113|-> 	    if (syslinux_add_movelist(fraglist, addr, (addr_t) ip->data, len))
#  114|   		return -1;
#  115|   	}

Error: COMPILER_WARNING (CWE-704): [#def308]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c: scope_hint: In function ‘bios_boot_linux’
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:336:58: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  336 |     if (syslinux_add_movelist(&fraglist, real_mode_base, (addr_t) kernel_buf,
#      |                                                          ^
#  334|       }
#  335|   
#  336|->     if (syslinux_add_movelist(&fraglist, real_mode_base, (addr_t) kernel_buf,
#  337|   			      real_mode_size))
#  338|   	goto bail;

Error: COMPILER_WARNING (CWE-704): [#def309]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:336:58: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  334|       }
#  335|   
#  336|->     if (syslinux_add_movelist(&fraglist, real_mode_base, (addr_t) kernel_buf,
#  337|   			      real_mode_size))
#  338|   	goto bail;

Error: COMPILER_WARNING (CWE-704): [#def310]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:354:31: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  354 |                               (addr_t) cmdline, cmdline_size)) {
#      |                               ^
#  352|       /* Command line */
#  353|       if (syslinux_add_movelist(&fraglist, real_mode_base + cmdline_offset,
#  354|-> 			      (addr_t) cmdline, cmdline_size)) {
#  355|   	errno = ENOMEM;
#  356|   	goto bail;

Error: COMPILER_WARNING (CWE-704): [#def311]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:354:31: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  352|       /* Command line */
#  353|       if (syslinux_add_movelist(&fraglist, real_mode_base + cmdline_offset,
#  354|-> 			      (addr_t) cmdline, cmdline_size)) {
#  355|   	errno = ENOMEM;
#  356|   	goto bail;

Error: COMPILER_WARNING (CWE-704): [#def312]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:372:35: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  372 |                                   (addr_t) kernel_buf + real_mode_size,
#      |                                   ^
#  370|       if (prot_mode_size) {
#  371|   	if (syslinux_add_movelist(&fraglist, prot_mode_base,
#  372|-> 				  (addr_t) kernel_buf + real_mode_size,
#  373|   				  prot_mode_size)) {
#  374|   	    errno = ENOMEM;

Error: COMPILER_WARNING (CWE-704): [#def313]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:372:35: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  370|       if (prot_mode_size) {
#  371|   	if (syslinux_add_movelist(&fraglist, prot_mode_base,
#  372|-> 				  (addr_t) kernel_buf + real_mode_size,
#  373|   				  prot_mode_size)) {
#  374|   	    errno = ENOMEM;

Error: COMPILER_WARNING (CWE-465): [#def314]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c: scope_hint: In function ‘bios_boot_linux’
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:422:30: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct linux_header’ may result in an unaligned pointer value
#  422 |         uint64_t *prev_ptr = &whdr->setup_data;
#      |                              ^~~~~~~~~~~~~~~~~
#  420|   
#  421|       if (setup_data) {
#  422|-> 	uint64_t *prev_ptr = &whdr->setup_data;
#  423|   
#  424|   	for (sdp = setup_data->next; sdp != setup_data; sdp = sdp->next) {

Error: COMPILER_WARNING (CWE-465): [#def315]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:422:30: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct linux_header’ may result in an unaligned pointer value
#  420|   
#  421|       if (setup_data) {
#  422|-> 	uint64_t *prev_ptr = &whdr->setup_data;
#  423|   
#  424|   	for (sdp = setup_data->next; sdp != setup_data; sdp = sdp->next) {

Error: COMPILER_WARNING (CWE-465): [#def316]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:451:24: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct setup_data_header’ may result in an unaligned pointer value
#  451 |             prev_ptr = &sdp->hdr.next;
#      |                        ^~~~~~~~~~~~~~
#  449|   
#  450|   	    *prev_ptr = best_addr;
#  451|-> 	    prev_ptr = &sdp->hdr.next;
#  452|   
#  453|   	    if (syslinux_add_memmap(&amap, best_addr, size, SMT_ALLOC)) {

Error: COMPILER_WARNING (CWE-465): [#def317]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:451:24: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct setup_data_header’ may result in an unaligned pointer value
#  449|   
#  450|   	    *prev_ptr = best_addr;
#  451|-> 	    prev_ptr = &sdp->hdr.next;
#  452|   
#  453|   	    if (syslinux_add_memmap(&amap, best_addr, size, SMT_ALLOC)) {

Error: COMPILER_WARNING (CWE-704): [#def318]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:458:39: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  458 |                                       (addr_t)&sdp->hdr, sizeof sdp->hdr)) {
#      |                                       ^
#  456|   	    }
#  457|   	    if (syslinux_add_movelist(&fraglist, best_addr,
#  458|-> 				      (addr_t)&sdp->hdr, sizeof sdp->hdr)) {
#  459|   		errno = ENOMEM;
#  460|   		goto bail;

Error: COMPILER_WARNING (CWE-704): [#def319]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:458:39: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  456|   	    }
#  457|   	    if (syslinux_add_movelist(&fraglist, best_addr,
#  458|-> 				      (addr_t)&sdp->hdr, sizeof sdp->hdr)) {
#  459|   		errno = ENOMEM;
#  460|   		goto bail;

Error: COMPILER_WARNING (CWE-704): [#def320]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:463:39: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  463 |                                       (addr_t)sdp->data, sdp->hdr.len)) {
#      |                                       ^
#  461|   	    }
#  462|   	    if (syslinux_add_movelist(&fraglist, best_addr + sizeof sdp->hdr,
#  463|-> 				      (addr_t)sdp->data, sdp->hdr.len)) {
#  464|   		errno = ENOMEM;
#  465|   		goto bail;

Error: COMPILER_WARNING (CWE-704): [#def321]
syslinux-6.04-pre1/com32/lib/syslinux/load_linux.c:463:39: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  461|   	    }
#  462|   	    if (syslinux_add_movelist(&fraglist, best_addr + sizeof sdp->hdr,
#  463|-> 				      (addr_t)sdp->data, sdp->hdr.len)) {
#  464|   		errno = ENOMEM;
#  465|   		goto bail;

Error: COMPILER_WARNING (CWE-758): [#def322]
syslinux-6.04-pre1/com32/lib/syslinux/movebits.c:383:54: warning[-Wclobbered]: argument ‘moves’ might be clobbered by ‘longjmp’ or ‘vfork’
#  383 | syslinux_compute_movelist(struct syslinux_movelist **moves,
#      |                           ~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
#  381|    */
#  382|   int
#  383|-> syslinux_compute_movelist(struct syslinux_movelist **moves,
#  384|   			  struct syslinux_movelist *ifrags,
#  385|   			  struct syslinux_memmap *memmap)

Error: COMPILER_WARNING (CWE-758): [#def323]
syslinux-6.04-pre1/com32/lib/syslinux/movebits.c: scope_hint: In function ‘syslinux_compute_movelist’
syslinux-6.04-pre1/com32/lib/syslinux/movebits.c:399:9: warning[-Wclobbered]: variable ‘rv’ might be clobbered by ‘longjmp’ or ‘vfork’
#  399 |     int rv = -1;
#      |         ^~
#  397|       addr_t cbyte;
#  398|       addr_t ep_len;
#  399|->     int rv = -1;
#  400|       int reverse;
#  401|   

Error: COMPILER_WARNING: [#def324]
syslinux-6.04-pre1/com32/lib/syslinux/reboot.c: scope_hint: In function ‘syslinux_reboot’
syslinux-6.04-pre1/com32/lib/syslinux/reboot.c:42:5: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   42 |     *reboot_flag = warm ? 0x1234 : 0;
#      |     ^~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   40|       uint16_t *const reboot_flag = (uint16_t *) 0x472;
#   41|   
#   42|->     *reboot_flag = warm ? 0x1234 : 0;
#   43|       __farcall(0xf000, 0xfff0, &__com32_zero_regs, NULL);
#   44|   

Error: COMPILER_WARNING (CWE-704): [#def325]
syslinux-6.04-pre1/com32/lib/syslinux/shuffle_pm.c: scope_hint: In function ‘syslinux_shuffle_boot_pm’
syslinux-6.04-pre1/com32/lib/syslinux/shuffle_pm.c:72:51: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   72 |     if (syslinux_add_movelist(&fraglist, regstub, (addr_t) handoff_code,
#      |                                                   ^
#   70|   
#   71|       /* Add register-setting stub to shuffle list */
#   72|->     if (syslinux_add_movelist(&fraglist, regstub, (addr_t) handoff_code,
#   73|   			      sizeof handoff_code))
#   74|   	return -1;

Error: COMPILER_WARNING (CWE-704): [#def326]
syslinux-6.04-pre1/com32/lib/syslinux/shuffle_pm.c:72:51: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   70|   
#   71|       /* Add register-setting stub to shuffle list */
#   72|->     if (syslinux_add_movelist(&fraglist, regstub, (addr_t) handoff_code,
#   73|   			      sizeof handoff_code))
#   74|   	return -1;

Error: COMPILER_WARNING (CWE-704): [#def327]
syslinux-6.04-pre1/com32/lib/syslinux/shuffle_rm.c: scope_hint: In function ‘syslinux_shuffle_boot_rm’
syslinux-6.04-pre1/com32/lib/syslinux/shuffle_rm.c:166:51: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  166 |     if (syslinux_add_movelist(&fraglist, regstub, (addr_t) handoff_code,
#      |                                                   ^
#  164|   
#  165|       /* Add register-setting stub to shuffle list */
#  166|->     if (syslinux_add_movelist(&fraglist, regstub, (addr_t) handoff_code,
#  167|   			      sizeof handoff_code))
#  168|   	return -1;

Error: COMPILER_WARNING (CWE-704): [#def328]
syslinux-6.04-pre1/com32/lib/syslinux/shuffle_rm.c:166:51: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  164|   
#  165|       /* Add register-setting stub to shuffle list */
#  166|->     if (syslinux_add_movelist(&fraglist, regstub, (addr_t) handoff_code,
#  167|   			      sizeof handoff_code))
#  168|   	return -1;

Error: COMPILER_WARNING: [#def329]
syslinux-6.04-pre1/com32/lib/vsprintf.c: scope_hint: In function ‘vsprintf’
syslinux-6.04-pre1/com32/lib/vsprintf.c:10:12: warning[-Wformat-truncation=]: specified bound 18446744073709551615 exceeds maximum object size 9223372036854775807
#   10 |     return vsnprintf(buffer, ~(size_t) 0, format, ap);
#      |            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#    8|   int vsprintf(char *buffer, const char *format, va_list ap)
#    9|   {
#   10|->     return vsnprintf(buffer, ~(size_t) 0, format, ap);
#   11|   }

Error: COMPILER_WARNING: [#def330]
syslinux-6.04-pre1/com32/lib/vsprintf.c: scope_hint: In function ‘vsprintf’
syslinux-6.04-pre1/com32/lib/vsprintf.c:10:12: warning[-Wformat-truncation=]: specified bound 4294967295 exceeds maximum object size 2147483647
#   10 |     return vsnprintf(buffer, ~(size_t) 0, format, ap);
#      |            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#    8|   int vsprintf(char *buffer, const char *format, va_list ap)
#    9|   {
#   10|->     return vsnprintf(buffer, ~(size_t) 0, format, ap);
#   11|   }

Error: COMPILER_WARNING: [#def331]
syslinux-6.04-pre1/com32/lib/zlib/infback.c: scope_hint: In function ‘inflateBack’
syslinux-6.04-pre1/com32/lib/zlib/infback.c:471:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  471 |             state->mode = LEN;
#      |             ~~~~~~~~~~~~^~~~~
syslinux-6.04-pre1/com32/lib/zlib/infback.c:473:9: note: here
#  473 |         case LEN:
#      |         ^~~~
#  469|               }
#  470|               Tracev((stderr, "inflate:       codes ok\n"));
#  471|->             state->mode = LEN;
#  472|   
#  473|           case LEN:

Error: COMPILER_WARNING: [#def332]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c: scope_hint: In function ‘inflate’
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:704:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  704 |             state->mode = EXLEN;
#      |             ~~~~~~~~~~~~^~~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:705:9: note: here
#  705 |         case EXLEN:
#      |         ^~~~
#  702|               if (state->flags & 0x0200) CRC2(state->check, hold);
#  703|               INITBITS();
#  704|->             state->mode = EXLEN;
#  705|           case EXLEN:
#  706|               if (state->flags & 0x0400) {

Error: COMPILER_WARNING: [#def333]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:716:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  716 |             state->mode = EXTRA;
#      |             ~~~~~~~~~~~~^~~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:717:9: note: here
#  717 |         case EXTRA:
#      |         ^~~~
#  714|               else if (state->head != Z_NULL)
#  715|                   state->head->extra = Z_NULL;
#  716|->             state->mode = EXTRA;
#  717|           case EXTRA:
#  718|               if (state->flags & 0x0400) {

Error: COMPILER_WARNING: [#def334]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:738:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  738 |             state->mode = NAME;
#      |             ~~~~~~~~~~~~^~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:739:9: note: here
#  739 |         case NAME:
#      |         ^~~~
#  736|               }
#  737|               state->length = 0;
#  738|->             state->mode = NAME;
#  739|           case NAME:
#  740|               if (state->flags & 0x0800) {

Error: COMPILER_WARNING: [#def335]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:759:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  759 |             state->mode = COMMENT;
#      |             ~~~~~~~~~~~~^~~~~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:760:9: note: here
#  760 |         case COMMENT:
#      |         ^~~~
#  757|                   state->head->name = Z_NULL;
#  758|               state->length = 0;
#  759|->             state->mode = COMMENT;
#  760|           case COMMENT:
#  761|               if (state->flags & 0x1000) {

Error: COMPILER_WARNING: [#def336]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:779:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  779 |             state->mode = HCRC;
#      |             ~~~~~~~~~~~~^~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:780:9: note: here
#  780 |         case HCRC:
#      |         ^~~~
#  777|               else if (state->head != Z_NULL)
#  778|                   state->head->comment = Z_NULL;
#  779|->             state->mode = HCRC;
#  780|           case HCRC:
#  781|               if (state->flags & 0x0200) {

Error: COMPILER_WARNING: [#def337]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:802:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  802 |             state->mode = DICT;
#      |             ~~~~~~~~~~~~^~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:803:9: note: here
#  803 |         case DICT:
#      |         ^~~~
#  800|               strm->adler = state->check = REVERSE(hold);
#  801|               INITBITS();
#  802|->             state->mode = DICT;
#  803|           case DICT:
#  804|               if (state->havedict == 0) {

Error: COMPILER_WARNING: [#def338]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:809:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  809 |             state->mode = TYPE;
#      |             ~~~~~~~~~~~~^~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:810:9: note: here
#  810 |         case TYPE:
#      |         ^~~~
#  807|               }
#  808|               strm->adler = state->check = adler32(0L, Z_NULL, 0);
#  809|->             state->mode = TYPE;
#  810|           case TYPE:
#  811|               if (flush == Z_BLOCK || flush == Z_TREES) goto inf_leave;

Error: COMPILER_WARNING: [#def339]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:811:16: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  811 |             if (flush == Z_BLOCK || flush == Z_TREES) goto inf_leave;
#      |                ^
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:812:9: note: here
#  812 |         case TYPEDO:
#      |         ^~~~
#  809|               state->mode = TYPE;
#  810|           case TYPE:
#  811|->             if (flush == Z_BLOCK || flush == Z_TREES) goto inf_leave;
#  812|           case TYPEDO:
#  813|               if (state->last) {

Error: COMPILER_WARNING: [#def340]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:861:16: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  861 |             if (flush == Z_TREES) goto inf_leave;
#      |                ^
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:862:9: note: here
#  862 |         case COPY_:
#      |         ^~~~
#  859|               INITBITS();
#  860|               state->mode = COPY_;
#  861|->             if (flush == Z_TREES) goto inf_leave;
#  862|           case COPY_:
#  863|               state->mode = COPY;

Error: COMPILER_WARNING: [#def341]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:863:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  863 |             state->mode = COPY;
#      |             ~~~~~~~~~~~~^~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:864:9: note: here
#  864 |         case COPY:
#      |         ^~~~
#  861|               if (flush == Z_TREES) goto inf_leave;
#  862|           case COPY_:
#  863|->             state->mode = COPY;
#  864|           case COPY:
#  865|               copy = state->length;

Error: COMPILER_WARNING: [#def342]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1003:16: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1003 |             if (flush == Z_TREES) goto inf_leave;
#      |                ^
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1004:9: note: here
# 1004 |         case LEN_:
#      |         ^~~~
# 1001|               Tracev((stderr, "inflate:       codes ok\n"));
# 1002|               state->mode = LEN_;
# 1003|->             if (flush == Z_TREES) goto inf_leave;
# 1004|           case LEN_:
# 1005|               state->mode = LEN;

Error: COMPILER_WARNING: [#def343]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1005:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1005 |             state->mode = LEN;
#      |             ~~~~~~~~~~~~^~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1006:9: note: here
# 1006 |         case LEN:
#      |         ^~~~
# 1003|               if (flush == Z_TREES) goto inf_leave;
# 1004|           case LEN_:
# 1005|->             state->mode = LEN;
# 1006|           case LEN:
# 1007|               if (have >= 6 && left >= 258) {

Error: COMPILER_WARNING: [#def344]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1054:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1054 |             state->mode = LENEXT;
#      |             ~~~~~~~~~~~~^~~~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1055:9: note: here
# 1055 |         case LENEXT:
#      |         ^~~~
# 1052|               }
# 1053|               state->extra = (unsigned)(here.op) & 15;
# 1054|->             state->mode = LENEXT;
# 1055|           case LENEXT:
# 1056|               if (state->extra) {

Error: COMPILER_WARNING: [#def345]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1064:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1064 |             state->mode = DIST;
#      |             ~~~~~~~~~~~~^~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1065:9: note: here
# 1065 |         case DIST:
#      |         ^~~~
# 1062|               Tracevv((stderr, "inflate:         length %u\n", state->length));
# 1063|               state->was = state->length;
# 1064|->             state->mode = DIST;
# 1065|           case DIST:
# 1066|               for (;;) {

Error: COMPILER_WARNING: [#def346]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1091:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1091 |             state->mode = DISTEXT;
#      |             ~~~~~~~~~~~~^~~~~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1092:9: note: here
# 1092 |         case DISTEXT:
#      |         ^~~~
# 1089|               state->offset = (unsigned)here.val;
# 1090|               state->extra = (unsigned)(here.op) & 15;
# 1091|->             state->mode = DISTEXT;
# 1092|           case DISTEXT:
# 1093|               if (state->extra) {

Error: COMPILER_WARNING: [#def347]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1107:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1107 |             state->mode = MATCH;
#      |             ~~~~~~~~~~~~^~~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1108:9: note: here
# 1108 |         case MATCH:
#      |         ^~~~
# 1105|   #endif
# 1106|               Tracevv((stderr, "inflate:         distance %u\n", state->offset));
# 1107|->             state->mode = MATCH;
# 1108|           case MATCH:
# 1109|               if (left == 0) goto inf_leave;

Error: COMPILER_WARNING: [#def348]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1182:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1182 |             state->mode = LENGTH;
#      |             ~~~~~~~~~~~~^~~~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1183:9: note: here
# 1183 |         case LENGTH:
#      |         ^~~~
# 1180|               }
# 1181|   #ifdef GUNZIP
# 1182|->             state->mode = LENGTH;
# 1183|           case LENGTH:
# 1184|               if (state->wrap && state->flags) {

Error: COMPILER_WARNING: [#def349]
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1195:25: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1195 |             state->mode = DONE;
#      |             ~~~~~~~~~~~~^~~~~~
syslinux-6.04-pre1/com32/lib/zlib/inflate.c:1196:9: note: here
# 1196 |         case DONE:
#      |         ^~~~
# 1193|               }
# 1194|   #endif
# 1195|->             state->mode = DONE;
# 1196|           case DONE:
# 1197|               ret = Z_STREAM_END;

Error: COMPILER_WARNING: [#def350]
syslinux-6.04-pre1/com32/libupload/serial.c: scope_hint: In function ‘serial_init’
syslinux-6.04-pre1/com32/libupload/serial.c:45:48: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   45 |             uint16_t addr = ((uint16_t *)0x400)[port];
#      |                             ~~~~~~~~~~~~~~~~~~~^~~~~~
cc1: note: source object is likely at address zero
#   43|   	port = strtoul(argv[0], NULL, 0);
#   44|   	if (port <= 3) {
#   45|-> 	    uint16_t addr = ((uint16_t *)0x400)[port];
#   46|   	    if (!addr) {
#   47|   		printf("No serial port address found!\n");

Error: COMPILER_WARNING: [#def351]
syslinux-6.04-pre1/com32/libupload/tftp.h:23:28: warning: ‘struct url_info’ declared inside parameter list will not be visible outside of this definition or declaration
#   23 | extern int tftp_put(struct url_info *url, int flags, struct inode *inode,
#      |                            ^~~~~~~~
#   21|   extern const char *tftp_string_error_message[];
#   22|   
#   23|-> extern int tftp_put(struct url_info *url, int flags, struct inode *inode,
#   24|                                  const char **redir, char *data, int data_length);
#   25|   #endif

Error: COMPILER_WARNING: [#def352]
syslinux-6.04-pre1/com32/libupload/tftp.h:23:28: warning[warning]: ‘struct url_info’ declared inside parameter list will not be visible outside of this definition or declaration
#   21|   extern const char *tftp_string_error_message[];
#   22|   
#   23|-> extern int tftp_put(struct url_info *url, int flags, struct inode *inode,
#   24|                                  const char **redir, char *data, int data_length);
#   25|   #endif

Error: COMPILER_WARNING: [#def353]
syslinux-6.04-pre1/com32/libupload/upload_backend.h:9: included_from: Included from here.
syslinux-6.04-pre1/com32/libupload/cpio.c:12: included_from: Included from here.
syslinux-6.04-pre1/com32/libupload/tftp.h:23:61: warning: ‘struct inode’ declared inside parameter list will not be visible outside of this definition or declaration
#   23 | extern int tftp_put(struct url_info *url, int flags, struct inode *inode,
#      |                                                             ^~~~~
#   21|   extern const char *tftp_string_error_message[];
#   22|   
#   23|-> extern int tftp_put(struct url_info *url, int flags, struct inode *inode,
#   24|                                  const char **redir, char *data, int data_length);
#   25|   #endif

Error: COMPILER_WARNING: [#def354]
syslinux-6.04-pre1/com32/libupload/tftp.h:23:61: warning[warning]: ‘struct inode’ declared inside parameter list will not be visible outside of this definition or declaration
#   21|   extern const char *tftp_string_error_message[];
#   22|   
#   23|-> extern int tftp_put(struct url_info *url, int flags, struct inode *inode,
#   24|                                  const char **redir, char *data, int data_length);
#   25|   #endif

Error: COMPILER_WARNING: [#def355]
syslinux-6.04-pre1/com32/libutil/crypt-md5.c: scope_hint: In function ‘_crypt_to64’
syslinux-6.04-pre1/com32/libutil/crypt-md5.c:37:36: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (65 chars into 64 available)
#   37 |     static const char itoa64[64] = "./0123456789"
#      |                                    ^~~~~~~~~~~~~~
#   35|   static char *_crypt_to64(char *s, uint32_t v, int n)
#   36|   {
#   37|->     static const char itoa64[64] = "./0123456789"
#   38|   	"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
#   39|   

Error: COMPILER_WARNING: [#def356]
syslinux-6.04-pre1/com32/libutil/md5.c: scope_hint: In function ‘MD5Transform’
syslinux-6.04-pre1/com32/libutil/md5.c:170:13: warning[-Wold-style-definition]: old-style function definition
#  170 | static void MD5Transform(state, block)
#      |             ^~~~~~~~~~~~
#  168|   /* MD5 basic transformation. Transforms state based on block. */
#  169|   
#  170|-> static void MD5Transform(state, block)
#  171|   uint32_t state[4];
#  172|   const unsigned char block[64];

Error: COMPILER_WARNING: [#def357]
syslinux-6.04-pre1/com32/libutil/md5.c:170:13: warning[-Wold-style-definition]: old-style function definition
#  168|   /* MD5 basic transformation. Transforms state based on block. */
#  169|   
#  170|-> static void MD5Transform(state, block)
#  171|   uint32_t state[4];
#  172|   const unsigned char block[64];

Error: GCC_ANALYZER_WARNING (CWE-471): [#def358]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:201:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  199|       R4(d, e, a, b, c, 62);
#  200|       R4(c, d, e, a, b, 63);
#  201|->     R4(b, c, d, e, a, 64);
#  202|       R4(a, b, c, d, e, 65);
#  203|       R4(e, a, b, c, d, 66);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def359]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:202:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  200|       R4(c, d, e, a, b, 63);
#  201|       R4(b, c, d, e, a, 64);
#  202|->     R4(a, b, c, d, e, 65);
#  203|       R4(e, a, b, c, d, 66);
#  204|       R4(d, e, a, b, c, 67);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def360]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:203:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  201|       R4(b, c, d, e, a, 64);
#  202|       R4(a, b, c, d, e, 65);
#  203|->     R4(e, a, b, c, d, 66);
#  204|       R4(d, e, a, b, c, 67);
#  205|       R4(c, d, e, a, b, 68);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def361]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:204:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  202|       R4(a, b, c, d, e, 65);
#  203|       R4(e, a, b, c, d, 66);
#  204|->     R4(d, e, a, b, c, 67);
#  205|       R4(c, d, e, a, b, 68);
#  206|       R4(b, c, d, e, a, 69);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def362]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:205:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  203|       R4(e, a, b, c, d, 66);
#  204|       R4(d, e, a, b, c, 67);
#  205|->     R4(c, d, e, a, b, 68);
#  206|       R4(b, c, d, e, a, 69);
#  207|       R4(a, b, c, d, e, 70);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def363]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:206:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  204|       R4(d, e, a, b, c, 67);
#  205|       R4(c, d, e, a, b, 68);
#  206|->     R4(b, c, d, e, a, 69);
#  207|       R4(a, b, c, d, e, 70);
#  208|       R4(e, a, b, c, d, 71);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def364]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:207:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  205|       R4(c, d, e, a, b, 68);
#  206|       R4(b, c, d, e, a, 69);
#  207|->     R4(a, b, c, d, e, 70);
#  208|       R4(e, a, b, c, d, 71);
#  209|       R4(d, e, a, b, c, 72);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def365]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:208:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  206|       R4(b, c, d, e, a, 69);
#  207|       R4(a, b, c, d, e, 70);
#  208|->     R4(e, a, b, c, d, 71);
#  209|       R4(d, e, a, b, c, 72);
#  210|       R4(c, d, e, a, b, 73);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def366]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:209:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  207|       R4(a, b, c, d, e, 70);
#  208|       R4(e, a, b, c, d, 71);
#  209|->     R4(d, e, a, b, c, 72);
#  210|       R4(c, d, e, a, b, 73);
#  211|       R4(b, c, d, e, a, 74);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def367]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:210:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  208|       R4(e, a, b, c, d, 71);
#  209|       R4(d, e, a, b, c, 72);
#  210|->     R4(c, d, e, a, b, 73);
#  211|       R4(b, c, d, e, a, 74);
#  212|       R4(a, b, c, d, e, 75);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def368]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:211:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  209|       R4(d, e, a, b, c, 72);
#  210|       R4(c, d, e, a, b, 73);
#  211|->     R4(b, c, d, e, a, 74);
#  212|       R4(a, b, c, d, e, 75);
#  213|       R4(e, a, b, c, d, 76);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def369]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:212:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  210|       R4(c, d, e, a, b, 73);
#  211|       R4(b, c, d, e, a, 74);
#  212|->     R4(a, b, c, d, e, 75);
#  213|       R4(e, a, b, c, d, 76);
#  214|       R4(d, e, a, b, c, 77);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def370]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:213:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  211|       R4(b, c, d, e, a, 74);
#  212|       R4(a, b, c, d, e, 75);
#  213|->     R4(e, a, b, c, d, 76);
#  214|       R4(d, e, a, b, c, 77);
#  215|       R4(c, d, e, a, b, 78);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def371]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:214:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  212|       R4(a, b, c, d, e, 75);
#  213|       R4(e, a, b, c, d, 76);
#  214|->     R4(d, e, a, b, c, 77);
#  215|       R4(c, d, e, a, b, 78);
#  216|       R4(b, c, d, e, a, 79);

Error: GCC_ANALYZER_WARNING (CWE-471): [#def372]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:215:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  213|       R4(e, a, b, c, d, 76);
#  214|       R4(d, e, a, b, c, 77);
#  215|->     R4(c, d, e, a, b, 78);
#  216|       R4(b, c, d, e, a, 79);
#  217|       /* Add the working vars back into context.state[] */

Error: GCC_ANALYZER_WARNING (CWE-471): [#def373]
syslinux-6.04-pre1/com32/libutil/sha1hash.c:216:5: warning[-Wanalyzer-write-to-string-literal]: write to string literal
syslinux-6.04-pre1/com32/libutil/sha1hash.c:271:6: enter_function: entry to ‘SHA1Final’
syslinux-6.04-pre1/com32/libutil/sha1hash.c:276:17: branch_true: following ‘true’ branch (when ‘i <= 7’)...
syslinux-6.04-pre1/com32/libutil/sha1hash.c:277:57: branch_true: ...to here
syslinux-6.04-pre1/com32/libutil/sha1hash.c:280:5: call_function: calling ‘SHA1Update’ from ‘SHA1Final’
#  214|       R4(d, e, a, b, c, 77);
#  215|       R4(c, d, e, a, b, 78);
#  216|->     R4(b, c, d, e, a, 79);
#  217|       /* Add the working vars back into context.state[] */
#  218|       state[0] += a;

Error: CPPCHECK_WARNING (CWE-457): [#def374]
syslinux-6.04-pre1/com32/libutil/sha256crypt.c:207: warning[uninitvar]: Uninitialized variable: resbuf
#  205|   	((uint32_t *) resbuf)[i] = SWAP(ctx->H[i]);
#  206|   
#  207|->     return resbuf;
#  208|   }
#  209|   

Error: COMPILER_WARNING: [#def375]
syslinux-6.04-pre1/com32/libutil/sha256crypt.c:289:5: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (65 chars into 64 available)
#  289 |     "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  287|   /* Table with characters for base64 transformation.  */
#  288|   static const char b64t[64] =
#  289|->     "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
#  290|   
#  291|   static char *sha256_crypt_r(const char *key, const char *salt, char *buffer,

Error: CPPCHECK_WARNING (CWE-457): [#def376]
syslinux-6.04-pre1/com32/libutil/sha512crypt.c:238: warning[uninitvar]: Uninitialized variable: resbuf
#  236|   	((uint64_t *) resbuf)[i] = SWAP(ctx->H[i]);
#  237|   
#  238|->     return resbuf;
#  239|   }
#  240|   

Error: COMPILER_WARNING: [#def377]
syslinux-6.04-pre1/com32/libutil/sha512crypt.c:324:5: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (65 chars into 64 available)
#  324 |     "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  322|   /* Table with characters for base64 transformation.  */
#  323|   static const char b64t[64] =
#  324|->     "./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
#  325|   
#  326|   static char *sha512_crypt_r(const char *key, const char *salt, char *buffer,

Error: COMPILER_WARNING (CWE-563): [#def378]
syslinux-6.04-pre1/com32/lua/src/cmenu.c: scope_hint: In function ‘l_add_sep’
syslinux-6.04-pre1/com32/lua/src/cmenu.c:42:34: warning[-Wunused-parameter]: unused parameter ‘L’
#   42 | static int l_add_sep (lua_State *L)
#      |                       ~~~~~~~~~~~^
#   40|   }
#   41|   
#   42|-> static int l_add_sep (lua_State *L)
#   43|   {
#   44|     add_sep ();

Error: COMPILER_WARNING: [#def379]
syslinux-6.04-pre1/com32/lua/src/lgc.c: scope_hint: In function ‘freeobj’
syslinux-6.04-pre1/com32/lua/src/lgc.c:679:22: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  679 |       G(L)->strt.nuse--;
syslinux-6.04-pre1/com32/lua/src/lgc.c:681:5: note: here
#  681 |     case LUA_TLNGSTR: {
#      |     ^~~~
#  677|       case LUA_TUSERDATA: luaM_freemem(L, o, sizeudata(gco2u(o))); break;
#  678|       case LUA_TSHRSTR:
#  679|->       G(L)->strt.nuse--;
#  680|         /* go through */
#  681|       case LUA_TLNGSTR: {

Error: COMPILER_WARNING: [#def380]
syslinux-6.04-pre1/com32/lua/src/llex.c: scope_hint: In function ‘llex’
syslinux-6.04-pre1/com32/lua/src/llex.c:481:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  481 |         else if (!lisdigit(ls->current)) return '.';
#      |                 ^
syslinux-6.04-pre1/com32/lua/src/llex.c:484:7: note: here
#  484 |       case '0': case '1': case '2': case '3': case '4':
#      |       ^~~~
#  479|             else return TK_CONCAT;   /* '..' */
#  480|           }
#  481|->         else if (!lisdigit(ls->current)) return '.';
#  482|           /* else go through */
#  483|         }

Error: COMPILER_WARNING: [#def381]
syslinux-6.04-pre1/com32/lua/src/lstrlib.c: scope_hint: In function ‘match’
syslinux-6.04-pre1/com32/lua/src/lstrlib.c:492:16: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  492 |               s++;  /* 1 match already done */
#      |               ~^~
syslinux-6.04-pre1/com32/lua/src/lstrlib.c:494:13: note: here
#  494 |             case '*':  /* 0 or more repetitions */
#      |             ^~~~
#  490|               }
#  491|               case '+':  /* 1 or more repetitions */
#  492|->               s++;  /* 1 match already done */
#  493|                 /* go through */
#  494|               case '*':  /* 0 or more repetitions */

Error: COMPILER_WARNING: [#def382]
syslinux-6.04-pre1/com32/lua/src/ltable.c: scope_hint: In function ‘luaH_get’
syslinux-6.04-pre1/com32/lua/src/ltable.c:486:23: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  486 |     case LUA_TNUMBER: {
#      |                       ^
syslinux-6.04-pre1/com32/lua/src/ltable.c:494:5: note: here
#  494 |     default: {
#      |     ^~~~~~~
#  484|       case LUA_TSHRSTR: return luaH_getstr(t, rawtsvalue(key));
#  485|       case LUA_TNIL: return luaO_nilobject;
#  486|->     case LUA_TNUMBER: {
#  487|         int k;
#  488|         lua_Number n = nvalue(key);

Error: COMPILER_WARNING: [#def383]
syslinux-6.04-pre1/com32/lua/src/lua.c: scope_hint: In function ‘collectargs’
syslinux-6.04-pre1/com32/lua/src/lua.c:380:21: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  380 |         args[has_i] = 1;  /* go through */
#      |         ~~~~~~~~~~~~^~~
syslinux-6.04-pre1/com32/lua/src/lua.c:381:7: note: here
#  381 |       case 'v':
#      |       ^~~~
#  378|         case 'i':
#  379|           noextrachars(argv[i]);
#  380|->         args[has_i] = 1;  /* go through */
#  381|         case 'v':
#  382|           noextrachars(argv[i]);

Error: COMPILER_WARNING: [#def384]
syslinux-6.04-pre1/com32/lua/src/lua.c:386:21: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  386 |         args[has_e] = 1;  /* go through */
#      |         ~~~~~~~~~~~~^~~
syslinux-6.04-pre1/com32/lua/src/lua.c:387:7: note: here
#  387 |       case 'l':  /* both options need an argument */
#      |       ^~~~
#  384|           break;
#  385|         case 'e':
#  386|->         args[has_e] = 1;  /* go through */
#  387|         case 'l':  /* both options need an argument */
#  388|           if (argv[i][2] == '\0') {  /* no concatenated argument? */

Error: GCC_ANALYZER_WARNING (CWE-688): [#def385]
syslinux-6.04-pre1/com32/lua/src/syslinux.c:156:5: warning[-Wanalyzer-null-argument]: use of NULL ‘newcmdline’ where non-null expected
syslinux-6.04-pre1/com32/lua/src/syslinux.c:152:18: acquire_memory: allocated here
syslinux-6.04-pre1/com32/lua/src/syslinux.c:153:8: release_memory: assuming ‘newcmdline’ is NULL
syslinux-6.04-pre1/com32/lua/src/syslinux.c:153:8: branch_true: following ‘true’ branch (when ‘newcmdline’ is NULL)...
syslinux-6.04-pre1/com32/lua/src/syslinux.c:154:9: branch_true: ...to here
syslinux-6.04-pre1/com32/lua/src/syslinux.c:156:5: danger: argument 1 (‘newcmdline’) NULL where non-null expected
#argument 1 of ‘__builtin_strcpy’ must be non-null
#  154|   	printf("Mem alloc failed: cmdline\n");
#  155|   
#  156|->     strcpy(newcmdline, "BOOT_IMAGE=");
#  157|       strcpy(newcmdline + strlen(newcmdline), kernel);
#  158|       argv[0] = newcmdline;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def386]
syslinux-6.04-pre1/com32/lua/src/syslinux.c:318:16: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
syslinux-6.04-pre1/com32/lua/src/syslinux.c:310:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/lua/src/syslinux.c:311:16: branch_true: ...to here
syslinux-6.04-pre1/com32/lua/src/syslinux.c:311:16: acquire_memory: allocated here
syslinux-6.04-pre1/com32/lua/src/syslinux.c:312:12: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
syslinux-6.04-pre1/com32/lua/src/syslinux.c:313:9: branch_false: ...to here
syslinux-6.04-pre1/com32/lua/src/syslinux.c:318:16: danger: ‘data’ leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  316|                              data, file_len, file_len, filename,
#  317|                              luaL_optint (L, 4, 0), luaL_optint (L, 5, 0755)))
#  318|->         return luaL_error (L, "Adding file %s to initramfs failed", filename);
#  319|       lua_settop (L, 1);
#  320|       return 1;

Error: COMPILER_WARNING (CWE-704): [#def387]
syslinux-6.04-pre1/com32/mboot/map.c: scope_hint: In function ‘map_data’
syslinux-6.04-pre1/com32/mboot/map.c:58:43: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   58 |         syslinux_add_movelist(&ml, start, (addr_t) data, len) ||
#      |                                           ^
#   56|       if (syslinux_memmap_find_type(amap, SMT_FREE, &start, &xlen, align) ||
#   57|   	syslinux_add_memmap(&amap, start, len + pad, SMT_ALLOC) ||
#   58|-> 	syslinux_add_movelist(&ml, start, (addr_t) data, len) ||
#   59|   	(pad && syslinux_add_memmap(&mmap, start + len, pad, SMT_ZERO))) {
#   60|   	printf("Cannot map %zu bytes\n", len + pad);

Error: COMPILER_WARNING (CWE-704): [#def388]
syslinux-6.04-pre1/com32/mboot/map.c:58:43: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   56|       if (syslinux_memmap_find_type(amap, SMT_FREE, &start, &xlen, align) ||
#   57|   	syslinux_add_memmap(&amap, start, len + pad, SMT_ALLOC) ||
#   58|-> 	syslinux_add_movelist(&ml, start, (addr_t) data, len) ||
#   59|   	(pad && syslinux_add_memmap(&mmap, start + len, pad, SMT_ZERO))) {
#   60|   	printf("Cannot map %zu bytes\n", len + pad);

Error: COMPILER_WARNING (CWE-704): [#def389]
syslinux-6.04-pre1/com32/mboot/map.c: scope_hint: In function ‘map_image’
syslinux-6.04-pre1/com32/mboot/map.c:222:37: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  222 |                         (&ml, addr, (addr_t) cptr + ph->p_offset, dsize)) {
#      |                                     ^
#  220|   		    /* Data present region.  Create a move entry for it. */
#  221|   		    if (syslinux_add_movelist
#  222|-> 			(&ml, addr, (addr_t) cptr + ph->p_offset, dsize)) {
#  223|   			error("Failed to map PHDR data\n");
#  224|   			return NULL;

Error: COMPILER_WARNING (CWE-704): [#def390]
syslinux-6.04-pre1/com32/mboot/map.c:222:37: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  220|   		    /* Data present region.  Create a move entry for it. */
#  221|   		    if (syslinux_add_movelist
#  222|-> 			(&ml, addr, (addr_t) cptr + ph->p_offset, dsize)) {
#  223|   			error("Failed to map PHDR data\n");
#  224|   			return NULL;

Error: COMPILER_WARNING (CWE-704): [#def391]
syslinux-6.04-pre1/com32/mboot/map.c:328:37: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  328 |                         (&ml, addr, (addr_t) cptr + ph64->p_offset, dsize)) {
#      |                                     ^
#  326|   		    /* Data present region.  Create a move entry for it. */
#  327|   		    if (syslinux_add_movelist
#  328|-> 			(&ml, addr, (addr_t) cptr + ph64->p_offset, dsize)) {
#  329|   			error("Failed to map PHDR data\n");
#  330|   			return NULL;

Error: COMPILER_WARNING (CWE-704): [#def392]
syslinux-6.04-pre1/com32/mboot/map.c:328:37: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  326|   		    /* Data present region.  Create a move entry for it. */
#  327|   		    if (syslinux_add_movelist
#  328|-> 			(&ml, addr, (addr_t) cptr + ph64->p_offset, dsize)) {
#  329|   			error("Failed to map PHDR data\n");
#  330|   			return NULL;

Error: COMPILER_WARNING (CWE-704): [#def393]
syslinux-6.04-pre1/com32/mboot/map.c:427:60: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  427 |             if (syslinux_add_movelist(&ml, mbh->load_addr, (addr_t) data_ptr,
#      |                                                            ^
#  425|   	}
#  426|   	if (data_len)
#  427|-> 	    if (syslinux_add_movelist(&ml, mbh->load_addr, (addr_t) data_ptr,
#  428|   				      data_len)) {
#  429|   		error("Failed to map a.out data\n");

Error: COMPILER_WARNING (CWE-704): [#def394]
syslinux-6.04-pre1/com32/mboot/map.c:427:60: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  425|   	}
#  426|   	if (data_len)
#  427|-> 	    if (syslinux_add_movelist(&ml, mbh->load_addr, (addr_t) data_ptr,
#  428|   				      data_len)) {
#  429|   		error("Failed to map a.out data\n");

Error: GCC_ANALYZER_WARNING (CWE-688): [#def395]
syslinux-6.04-pre1/com32/mboot/mboot.c:138:21: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘p’ where non-null expected
syslinux-6.04-pre1/com32/mboot/mboot.c:151:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/mboot/mboot.c:163:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/mboot/mboot.c:167:14: branch_true: ...to here
syslinux-6.04-pre1/com32/mboot/mboot.c:183:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/mboot/mboot.c:194:16: branch_false: ...to here
syslinux-6.04-pre1/com32/mboot/mboot.c:194:16: call_function: calling ‘get_modules’ from ‘main’
#  136|   	    mp->cmdline = p = malloc(arglen);
#  137|   	    for (; *argp && strcmp(*argp, module_separator); argp++) {
#  138|-> 		p = stpcpy(p, *argp);
#  139|   		*p++ = ' ';
#  140|   	    }

Error: GCC_ANALYZER_WARNING (CWE-124): [#def396]
syslinux-6.04-pre1/com32/mboot/mboot.c:141:13: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
syslinux-6.04-pre1/com32/mboot/mboot.c:151:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/mboot/mboot.c:163:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/mboot/mboot.c:167:14: branch_true: ...to here
syslinux-6.04-pre1/com32/mboot/mboot.c:183:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/mboot/mboot.c:194:16: branch_false: ...to here
syslinux-6.04-pre1/com32/mboot/mboot.c:194:16: call_function: calling ‘get_modules’ from ‘main’
#  139|   		*p++ = ' ';
#  140|   	    }
#  141|-> 	    *--p = '\0';
#  142|   	}
#  143|   	mp++;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def397]
syslinux-6.04-pre1/com32/mboot/mboot.c:141:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘p’
syslinux-6.04-pre1/com32/mboot/mboot.c:151:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/mboot/mboot.c:163:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/mboot/mboot.c:167:14: branch_true: ...to here
syslinux-6.04-pre1/com32/mboot/mboot.c:183:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/mboot/mboot.c:194:16: branch_false: ...to here
syslinux-6.04-pre1/com32/mboot/mboot.c:194:16: call_function: calling ‘get_modules’ from ‘main’
#  139|   		*p++ = ' ';
#  140|   	    }
#  141|-> 	    *--p = '\0';
#  142|   	}
#  143|   	mp++;

Error: COMPILER_WARNING: [#def398]
syslinux-6.04-pre1/com32/mboot/mem.c:62:18: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   62 |         uint16_t ebda_seg = *(uint16_t *) 0x40e;
#      |                  ^~~~~~~~
cc1: note: source object is likely at address zero
#   60|       if (*dosmem < 32 * 1024 || *dosmem > 640 * 1024) {
#   61|   	/* INT 12h reports nonsense... now what? */
#   62|-> 	uint16_t ebda_seg = *(uint16_t *) 0x40e;
#   63|   	if (ebda_seg >= 0x8000 && ebda_seg < 0xa000)
#   64|   	    *dosmem = ebda_seg << 4;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def399]
syslinux-6.04-pre1/com32/mboot/mem.c:188:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ard’
syslinux-6.04-pre1/com32/mboot/mem.c:169:6: enter_function: entry to ‘mboot_make_memmap’
syslinux-6.04-pre1/com32/mboot/mem.c:179:12: call_function: calling ‘mboot_scan_memory’ from ‘mboot_make_memmap’
syslinux-6.04-pre1/com32/mboot/mem.c:179:12: return_function: returning to ‘mboot_make_memmap’ from ‘mboot_scan_memory’
syslinux-6.04-pre1/com32/mboot/mem.c:185:17: branch_true: following ‘true’ branch (when ‘i < nmap’)...
syslinux-6.04-pre1/com32/mboot/mem.c:188:20: branch_true: ...to here
syslinux-6.04-pre1/com32/mboot/mem.c:188:20: release_memory: ‘ard’ is NULL
syslinux-6.04-pre1/com32/mboot/mem.c:188:20: release_memory: ‘ard’ is NULL
syslinux-6.04-pre1/com32/mboot/mem.c:188:9: danger: dereference of NULL ‘ard + (unsigned int)i * 24’
#  186|   	uint64_t start, end;
#  187|   
#  188|-> 	start = ard[i].BaseAddr;
#  189|   	end = start + ard[i].Length;
#  190|   

Error: COMPILER_WARNING (CWE-457): [#def400]
syslinux-6.04-pre1/com32/mboot/mem.c:218:24: warning[-Wmaybe-uninitialized]: ‘ard’ may be used uninitialized
#  218 |     mbinfo.mmap_addr = map_data(ard, nmap * sizeof *ard, 4, false);
#      |                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/mboot/mem.c:172:27: note: ‘ard’ was declared here
#  172 |     struct AddrRangeDesc *ard;
#      |                           ^~~
#  216|   
#  217|       /* The spec says this address should be +4, but Grub disagrees */
#  218|->     mbinfo.mmap_addr = map_data(ard, nmap * sizeof *ard, 4, false);
#  219|       if (mbinfo.mmap_addr) {
#  220|   	mbinfo.mmap_length = nmap * sizeof *ard;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def401]
syslinux-6.04-pre1/com32/menu/colors.c:139:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cp’
syslinux-6.04-pre1/com32/menu/colors.c:133:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/menu/colors.c:138:17: branch_true: following ‘true’ branch (when ‘i != 18’)...
syslinux-6.04-pre1/com32/menu/colors.c:139:9: branch_true: ...to here
syslinux-6.04-pre1/com32/menu/colors.c:139:9: danger: ‘cp’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  137|   
#  138|       for (i = 0; i < NCOLORS; i++) {
#  139|-> 	*cp = *dp;
#  140|   	cp->ansi = refstrdup(dp->ansi);
#  141|   	cp++;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def402]
syslinux-6.04-pre1/com32/menu/colors.c:177:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cp’
syslinux-6.04-pre1/com32/menu/colors.c:171:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/com32/menu/colors.c:176:17: branch_true: following ‘true’ branch (when ‘i != 274’)...
syslinux-6.04-pre1/com32/menu/colors.c:177:9: branch_true: ...to here
syslinux-6.04-pre1/com32/menu/colors.c:177:9: danger: ‘cp’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  175|   
#  176|       for (i = 0; i < NCOLORS + 256; i++) {
#  177|-> 	*cp = *dp;
#  178|   	cp->ansi = refstr_get(dp->ansi);
#  179|   	cp++;

Error: COMPILER_WARNING: [#def403]
syslinux-6.04-pre1/com32/menu/drain.c: scope_hint: In function ‘drain_keyboard’
syslinux-6.04-pre1/com32/menu/drain.c:20:5: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘volatile uint8_t[0]’ {aka ‘volatile unsigned char[]’}
#   20 |     *(volatile uint8_t *)0x419 = 0;     /* Alt-XXX keyboard area */
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   18|   
#   19|       cli();
#   20|->     *(volatile uint8_t *)0x419 = 0;	/* Alt-XXX keyboard area */
#   21|       *(volatile uint16_t *)0x41a = 0x1e;	/* Keyboard buffer empty */
#   22|       *(volatile uint16_t *)0x41c = 0x1e;

Error: COMPILER_WARNING: [#def404]
syslinux-6.04-pre1/com32/menu/drain.c:21:5: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘volatile uint16_t[0]’ {aka ‘volatile short unsigned int[]’}
#   21 |     *(volatile uint16_t *)0x41a = 0x1e; /* Keyboard buffer empty */
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   19|       cli();
#   20|       *(volatile uint8_t *)0x419 = 0;	/* Alt-XXX keyboard area */
#   21|->     *(volatile uint16_t *)0x41a = 0x1e;	/* Keyboard buffer empty */
#   22|       *(volatile uint16_t *)0x41c = 0x1e;
#   23|       memset((void *)0x41e, 0, 32);	/* Clear the actual keyboard buffer */

Error: COMPILER_WARNING: [#def405]
syslinux-6.04-pre1/com32/menu/drain.c:22:5: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘volatile uint16_t[0]’ {aka ‘volatile short unsigned int[]’}
#   22 |     *(volatile uint16_t *)0x41c = 0x1e;
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   20|       *(volatile uint8_t *)0x419 = 0;	/* Alt-XXX keyboard area */
#   21|       *(volatile uint16_t *)0x41a = 0x1e;	/* Keyboard buffer empty */
#   22|->     *(volatile uint16_t *)0x41c = 0x1e;
#   23|       memset((void *)0x41e, 0, 32);	/* Clear the actual keyboard buffer */
#   24|       sti();

Error: COMPILER_WARNING: [#def406]
syslinux-6.04-pre1/com32/menu/drain.c:23:5: warning[-Warray-bounds=]: ‘memset’ offset [0, 31] is out of the bounds [0, 0]
#   23 |     memset((void *)0x41e, 0, 32);       /* Clear the actual keyboard buffer */
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   21|       *(volatile uint16_t *)0x41a = 0x1e;	/* Keyboard buffer empty */
#   22|       *(volatile uint16_t *)0x41c = 0x1e;
#   23|->     memset((void *)0x41e, 0, 32);	/* Clear the actual keyboard buffer */
#   24|       sti();
#   25|   }

Error: COMPILER_WARNING: [#def407]
syslinux-6.04-pre1/com32/menu/drain.c:23:5: warning[-Wstringop-overflow=]: ‘memset’ writing 32 bytes into a region of size 0 overflows the destination
#destination object is likely at address zero
#   21|       *(volatile uint16_t *)0x41a = 0x1e;	/* Keyboard buffer empty */
#   22|       *(volatile uint16_t *)0x41c = 0x1e;
#   23|->     memset((void *)0x41e, 0, 32);	/* Clear the actual keyboard buffer */
#   24|       sti();
#   25|   }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def408]
syslinux-6.04-pre1/com32/menu/menumain.c:157:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
syslinux-6.04-pre1/com32/menu/menumain.c:1102:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/menu/menumain.c:1139:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
syslinux-6.04-pre1/com32/menu/menumain.c:1146:19: call_function: calling ‘run_menu’ from ‘main’
#  155|   
#  156|       if (i >= cm->nentries) {
#  157|-> 	fputs(pad_line("", 0, WIDTH - 2 * MARGIN - 4), stdout);
#  158|       } else {
#  159|   	display_entry(cm->menu_entries[i],

Error: COMPILER_WARNING (CWE-758): [#def409]
syslinux-6.04-pre1/com32/menu/menumain.c: scope_hint: In function ‘run_menu’
syslinux-6.04-pre1/com32/menu/menumain.c:746:9: warning[-Wclobbered]: variable ‘done’ might be clobbered by ‘longjmp’ or ‘vfork’
#  746 |     int done = 0;
#      |         ^~~~
#  744|   {
#  745|       int key;
#  746|->     int done = 0;
#  747|       volatile int entry = cm->curentry;
#  748|       int prev_entry = -1;

Error: COMPILER_WARNING (CWE-758): [#def410]
syslinux-6.04-pre1/com32/menu/menumain.c:748:9: warning[-Wclobbered]: variable ‘prev_entry’ might be clobbered by ‘longjmp’ or ‘vfork’
#  748 |     int prev_entry = -1;
#      |         ^~~~~~~~~~
#  746|       int done = 0;
#  747|       volatile int entry = cm->curentry;
#  748|->     int prev_entry = -1;
#  749|       volatile int top = cm->curtop;
#  750|       int prev_top = -1;

Error: COMPILER_WARNING (CWE-758): [#def411]
syslinux-6.04-pre1/com32/menu/menumain.c:750:9: warning[-Wclobbered]: variable ‘prev_top’ might be clobbered by ‘longjmp’ or ‘vfork’
#  750 |     int prev_top = -1;
#      |         ^~~~~~~~
#  748|       int prev_entry = -1;
#  749|       volatile int top = cm->curtop;
#  750|->     int prev_top = -1;
#  751|       int clear = 1, to_clear;
#  752|       const char *cmdline = NULL;

Error: COMPILER_WARNING (CWE-758): [#def412]
syslinux-6.04-pre1/com32/menu/menumain.c:751:9: warning[-Wclobbered]: variable ‘clear’ might be clobbered by ‘longjmp’ or ‘vfork’
#  751 |     int clear = 1, to_clear;
#      |         ^~~~~
#  749|       volatile int top = cm->curtop;
#  750|       int prev_top = -1;
#  751|->     int clear = 1, to_clear;
#  752|       const char *cmdline = NULL;
#  753|       volatile clock_t key_timeout, timeout_left, this_timeout;

Error: COMPILER_WARNING (CWE-758): [#def413]
syslinux-6.04-pre1/com32/menu/menumain.c:755:10: warning[-Wclobbered]: variable ‘hotkey’ might be clobbered by ‘longjmp’ or ‘vfork’
#  755 |     bool hotkey = false;
#      |          ^~~~~~
#  753|       volatile clock_t key_timeout, timeout_left, this_timeout;
#  754|       const struct menu_entry *me;
#  755|->     bool hotkey = false;
#  756|   
#  757|       /* Note: for both key_timeout and timeout == 0 means no limit */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def414]
syslinux-6.04-pre1/com32/menu/readconfig.c:167:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘m’
syslinux-6.04-pre1/com32/menu/readconfig.c:1104:6: enter_function: entry to ‘parse_configs’
syslinux-6.04-pre1/com32/menu/readconfig.c:1114:17: call_function: calling ‘new_menu’ from ‘parse_configs’
#  165|       int i;
#  166|   
#  167|->     m->label = label;
#  168|       m->title = refstr_get(empty_string);
#  169|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def415]
syslinux-6.04-pre1/com32/modules/dir.c:100:15: warning[-Wanalyzer-malloc-leak]: leak of ‘nde’
syslinux-6.04-pre1/com32/modules/dir.c:154:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/modules/dir.c:164:8: branch_true: following ‘true’ branch (when ‘argc <= 1’)...
syslinux-6.04-pre1/com32/modules/dir.c:165:14: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/dir.c:165:14: call_function: calling ‘display_directory’ from ‘main’
#   98|   	}
#   99|   
#  100|-> 	nde = malloc(de->d_reclen);
#  101|   	if (!nde)
#  102|   	    goto nomem;

Error: COMPILER_WARNING: [#def416]
syslinux-6.04-pre1/com32/modules/hexdump.c: scope_hint: In function ‘do_page’
syslinux-6.04-pre1/com32/modules/hexdump.c:196:13: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  196 |             fprintf(stderr, "No response.  Continuing...\n");
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/com32/modules/hexdump.c:199:13: note: here
#  199 |             case 'y':
#      |             ^~~~
#  194|   
#  195|   	    case EOF:
#  196|-> 	    fprintf(stderr, "No response.  Continuing...\n");
#  197|   	    /* Fall through to "yes" */
#  198|   

Error: COMPILER_WARNING: [#def417]
syslinux-6.04-pre1/com32/modules/hexdump.c:201:13: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  201 |             eat_stdin();
#      |             ^~~~~~~~~~~
syslinux-6.04-pre1/com32/modules/hexdump.c:202:13: note: here
#  202 |             case '\n':
#      |             ^~~~
#  199|   	    case 'y':
#  200|   	    case 'Y':
#  201|-> 	    eat_stdin();
#  202|   	    case '\n':
#  203|   	    return 0;

Error: GCC_ANALYZER_WARNING (CWE-121): [#def418]
syslinux-6.04-pre1/com32/modules/ifcpu.c:82:5: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
syslinux-6.04-pre1/com32/modules/ifcpu.c:92:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/modules/ifcpu.c:107:8: branch_false: following ‘false’ branch (when ‘argc != 1’)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:112:17: branch_true: following ‘true’ branch (when ‘i < argc’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:25: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:12: branch_true: following ‘true’ branch (when the strings are equal)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:114:13: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:151:12: branch_false: following ‘false’ branch (when ‘n != 2’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:112:27: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:112:17: branch_true: following ‘true’ branch (when ‘i < argc’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:25: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:12: branch_true: following ‘true’ branch (when the strings are equal)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:114:13: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:151:12: branch_true: following ‘true’ branch (when ‘n == 2’)...
 branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:154:12: branch_false: following ‘false’ branch (when ‘n == 2’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:158:8: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:158:8: branch_false: following ‘false’ branch (when ‘debug == 0’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:168:8: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:168:8: branch_false: following ‘false’ branch (when ‘dryrun == 0’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: branch_true: following ‘true’ branch (when ‘hardware_matches != 0’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: call_function: calling ‘boot_args’ from ‘main’
#   80|       }
#   81|       q -= a;
#   82|->     *q = '\0';
#   83|   
#   84|       if (!str[0])

Error: GCC_ANALYZER_WARNING (CWE-126): [#def419]
syslinux-6.04-pre1/com32/modules/ifcpu.c:84:10: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
syslinux-6.04-pre1/com32/modules/ifcpu.c:92:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/modules/ifcpu.c:107:8: branch_false: following ‘false’ branch (when ‘argc != 1’)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:112:17: branch_true: following ‘true’ branch (when ‘i < argc’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:25: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:12: branch_true: following ‘true’ branch (when the strings are equal)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:114:13: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:151:12: branch_false: following ‘false’ branch (when ‘n != 2’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:112:27: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:112:17: branch_true: following ‘true’ branch (when ‘i < argc’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:25: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:113:12: branch_true: following ‘true’ branch (when the strings are equal)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:114:13: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:151:12: branch_true: following ‘true’ branch (when ‘n == 2’)...
 branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:154:12: branch_false: following ‘false’ branch (when ‘n == 2’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:158:8: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:158:8: branch_false: following ‘false’ branch (when ‘debug == 0’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:168:8: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:168:8: branch_false: following ‘false’ branch (when ‘dryrun == 0’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: branch_true: following ‘true’ branch (when ‘hardware_matches != 0’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:169:9: call_function: calling ‘boot_args’ from ‘main’
#   82|       *q = '\0';
#   83|   
#   84|->     if (!str[0])
#   85|   	syslinux_run_default();
#   86|       else

Error: GCC_ANALYZER_WARNING (CWE-127): [#def420]
syslinux-6.04-pre1/com32/modules/ifcpu.c:155:19: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
syslinux-6.04-pre1/com32/modules/ifcpu.c:107:8: branch_false: following ‘false’ branch (when ‘argc != 1’)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:154:12: branch_true: following ‘true’ branch (when ‘n != 2’)...
syslinux-6.04-pre1/com32/modules/ifcpu.c:155:24: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ifcpu.c:155:19: danger: out-of-bounds read from byte -4 till byte -1 but ‘args’ starts at byte 0
#  153|       }
#  154|       while (n < 2) {
#  155|-> 	args[n] = args[n - 1];
#  156|   	n++;
#  157|       }

Error: COMPILER_WARNING: [#def421]
syslinux-6.04-pre1/com32/modules/ifmemdsk.c:219:24: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘const u_segoff[0]’ {aka ‘const real_addr_t[]’}
#  219 |     addr = MK_PTR(int13->seg_off.segment, int13->seg_off.offset);
#      |                        ^~
cc1: note: source object is likely at address zero
#  217|   
#  218|       /* INT 0x13 vector */
#  219|->     addr = MK_PTR(int13->seg_off.segment, int13->seg_off.offset);
#  220|       found = 0;
#  221|       while (addr) {

Error: COMPILER_WARNING: [#def422]
syslinux-6.04-pre1/com32/modules/ifmemdsk.c: scope_hint: In function ‘walk_safe_hooks’
syslinux-6.04-pre1/com32/modules/ifmemdsk.c:219:48: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘const u_segoff[0]’ {aka ‘const real_addr_t[]’}
#  219 |     addr = MK_PTR(int13->seg_off.segment, int13->seg_off.offset);
#      |                                                ^~
cc1: note: source object is likely at address zero
#  217|   
#  218|       /* INT 0x13 vector */
#  219|->     addr = MK_PTR(int13->seg_off.segment, int13->seg_off.offset);
#  220|       found = 0;
#  221|       while (addr) {

Error: COMPILER_WARNING: [#def423]
syslinux-6.04-pre1/com32/modules/ifmemdsk.c: scope_hint: In function ‘scan_mbfts’
syslinux-6.04-pre1/com32/modules/ifmemdsk.c:271:24: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘const uint16_t[0]’ {aka ‘const short unsigned int[]’}
#  271 |     for (addr = MK_PTR(*free_base_mem << 4, 0); addr < top; addr += 1 << 4) {
#      |                        ^~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  269|   
#  270|       found = 0;
#  271|->     for (addr = MK_PTR(*free_base_mem << 4, 0); addr < top; addr += 1 << 4) {
#  272|           if (!(mbft = is_mbft(addr)))
#  273|             continue;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def424]
syslinux-6.04-pre1/com32/modules/ls.c:100:15: warning[-Wanalyzer-malloc-leak]: leak of ‘nde’
syslinux-6.04-pre1/com32/modules/ls.c:154:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/com32/modules/ls.c:164:8: branch_true: following ‘true’ branch (when ‘argc <= 1’)...
syslinux-6.04-pre1/com32/modules/ls.c:165:14: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/ls.c:165:14: call_function: calling ‘display_directory’ from ‘main’
#   98|   	}
#   99|   
#  100|-> 	nde = malloc(de->d_reclen);
#  101|   	if (!nde)
#  102|   	    goto nomem;

Error: COMPILER_WARNING: [#def425]
syslinux-6.04-pre1/com32/modules/meminfo.c:99:14: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   99 |     uint16_t dosram = *(uint16_t *) 0x413;
#      |              ^~~~~~
cc1: note: source object is likely at address zero
#   97|   {
#   98|       com32sys_t ireg, oreg;
#   99|->     uint16_t dosram = *(uint16_t *) 0x413;
#  100|       struct {
#  101|   	uint16_t offs, seg;

Error: COMPILER_WARNING: [#def426]
syslinux-6.04-pre1/com32/modules/meminfo.c:110:19: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘struct <anonymous>[0]’
#  110 |          ivt[0x15].seg, ivt[0x15].offs, dosram, dosram << 10, oreg.eax.w[0],
#      |          ~~~~~~~~~^~~~
cc1: note: source object is likely at address zero
#  108|       printf
#  109|   	("INT 15h = %04x:%04x  DOS RAM: %dK (0x%05x)  INT 12h: %dK (0x%05x)\n",
#  110|-> 	 ivt[0x15].seg, ivt[0x15].offs, dosram, dosram << 10, oreg.eax.w[0],
#  111|   	 oreg.eax.w[0] << 10);
#  112|   

Error: COMPILER_WARNING: [#def427]
syslinux-6.04-pre1/com32/modules/meminfo.c:110:34: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘struct <anonymous>[0]’
#  110 |          ivt[0x15].seg, ivt[0x15].offs, dosram, dosram << 10, oreg.eax.w[0],
#      |                         ~~~~~~~~~^~~~~
cc1: note: source object is likely at address zero
#  108|       printf
#  109|   	("INT 15h = %04x:%04x  DOS RAM: %dK (0x%05x)  INT 12h: %dK (0x%05x)\n",
#  110|-> 	 ivt[0x15].seg, ivt[0x15].offs, dosram, dosram << 10, oreg.eax.w[0],
#  111|   	 oreg.eax.w[0] << 10);
#  112|   

Error: COMPILER_WARNING: [#def428]
syslinux-6.04-pre1/com32/modules/pcitest.c: scope_hint: In function ‘display_pci_devices’
syslinux-6.04-pre1/com32/modules/pcitest.c:75:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   75 |                 strncat(kernel_modules, " | ", 3);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   73|   	     i++) {
#   74|   	    if (i > 0) {
#   75|-> 		strncat(kernel_modules, " | ", 3);
#   76|   	    }
#   77|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def429]
syslinux-6.04-pre1/com32/modules/pcitest.c:75:17: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 3 equals source length
#   73|   	     i++) {
#   74|   	    if (i > 0) {
#   75|-> 		strncat(kernel_modules, " | ", 3);
#   76|   	    }
#   77|   	    strncat(kernel_modules,

Error: COMPILER_WARNING: [#def430]
syslinux-6.04-pre1/com32/modules/pxechn.c:147:21: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#  147 |     addr_t dosmem = *bios_fbm << 10;    /* Technically a low bound */
#      |                     ^~~~~~~~~
cc1: note: source object is likely at address zero
#  145|   {
#  146|       uint16_t *const bios_fbm = (uint16_t *) 0x413;
#  147|->     addr_t dosmem = *bios_fbm << 10;	/* Technically a low bound */
#  148|       struct syslinux_memmap *mmap;
#  149|       struct syslinux_movelist *mlist = NULL;

Error: COMPILER_WARNING (CWE-483): [#def431]
syslinux-6.04-pre1/com32/modules/pxechn.c: scope_hint: In function ‘pxechn_uuid_set’
syslinux-6.04-pre1/com32/modules/pxechn.c:738:5: warning[-Wmisleading-indentation]: this ‘if’ clause does not guard...
#  738 |     if (pxe->opts[0][97].len >= 0 )
#      |     ^~
syslinux-6.04-pre1/com32/modules/pxechn.c:740:9: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘if’
#  740 |         return 1;
#      |         ^~~~~~
#  736|       }
#  737|   
#  738|->     if (pxe->opts[0][97].len >= 0 )
#  739|   	pxechn_setopt(&(pxe->opts[2][97]), pxe->opts[0][97].data, pxe->opts[0][97].len);
#  740|   	return 1;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def432]
syslinux-6.04-pre1/com32/modules/pxechn.c:834:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*pxe.p[2].data’
syslinux-6.04-pre1/com32/modules/pxechn.c:1100:5: enter_function: entry to ‘pxechn_gpxe’
syslinux-6.04-pre1/com32/modules/pxechn.c:1105:8: branch_true: following ‘true’ branch (when ‘argc != 0’)...
syslinux-6.04-pre1/com32/modules/pxechn.c:1106:9: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:1107:9: call_function: calling ‘pxechn_args’ from ‘pxechn_gpxe’
#  832|       opts = pxe->opts[2];
#  833|       /* Start filling packet #1 */
#  834|->     bootp0 = (pxe_bootp_t *)(pxe->p[2].data);
#  835|       bootp1 = (pxe_bootp_t *)(pxe->p[5].data);
#  836|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def433]
syslinux-6.04-pre1/com32/modules/pxechn.c:875:8: warning[-Wanalyzer-malloc-leak]: leak of ‘str’
syslinux-6.04-pre1/com32/modules/pxechn.c:825:5: enter_function: entry to ‘pxechn_args’
syslinux-6.04-pre1/com32/modules/pxechn.c:838:8: branch_false: following ‘false’ branch (when ‘ret == 0’)...
syslinux-6.04-pre1/com32/modules/pxechn.c:842:5: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:845:11: call_function: calling ‘pxechn_parse_args’ from ‘pxechn_args’
syslinux-6.04-pre1/com32/modules/pxechn.c:845:11: return_function: returning to ‘pxechn_args’ from ‘pxechn_parse_args’
syslinux-6.04-pre1/com32/modules/pxechn.c:846:8: branch_false: following ‘false’ branch (when ‘ret == 0’)...
syslinux-6.04-pre1/com32/modules/pxechn.c:848:9: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:848:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/modules/pxechn.c:850:15: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:850:15: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/modules/pxechn.c:851:21: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:850:16: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/modules/pxechn.c:853:13: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:853:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/com32/modules/pxechn.c:854:26: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:854:19: acquire_memory: allocated here
syslinux-6.04-pre1/com32/modules/pxechn.c:855:16: branch_true: following ‘true’ branch (when ‘str’ is non-NULL)...
syslinux-6.04-pre1/com32/modules/pxechn.c:856:17: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:862:12: branch_true: following ‘true’ branch (when ‘str’ is non-NULL)...
syslinux-6.04-pre1/com32/modules/pxechn.c:863:27: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:864:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/com32/modules/pxechn.c:872:19: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/pxechn.c:875:8: danger: ‘str’ leaks here; was allocated at [(33)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/32)
#  873|   
#  874|       ret = dhcp_pack_packet(bootp1, (size_t *)&(pxe->p[5].len), opts);
#  875|->     if (ret) {
#  876|   	error("Could not pack packet\n");
#  877|   	return -ret;	/* dhcp_pack_packet always returns positive errors */

Error: GCC_ANALYZER_WARNING (CWE-688): [#def434]
syslinux-6.04-pre1/com32/modules/whichsys.c:95:14: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
syslinux-6.04-pre1/com32/modules/whichsys.c:82:8: branch_false: following ‘false’ branch (when ‘argc != 1’)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/modules/whichsys.c:89:12: branch_true: following ‘true’ branch (when ‘arg < argc’)...
syslinux-6.04-pre1/com32/modules/whichsys.c:90:25: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/whichsys.c:90:12: branch_true: following ‘true’ branch (when the strings are equal)...
syslinux-6.04-pre1/com32/modules/whichsys.c:91:13: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/whichsys.c:95:14: release_memory: ‘0’ is NULL
syslinux-6.04-pre1/com32/modules/whichsys.c:95:14: danger: argument 1 (‘*<unknown>’) NULL where non-null expected
#   93|   	    isolinux.option = true;
#   94|   	}
#   95|-> 	if (!strcmp(argv[arg], "-pxe-")) {
#   96|   	    argv[arg] = NULL;
#   97|   	    pxelinux.arg[0] = &argv[arg + 1];

Error: GCC_ANALYZER_WARNING (CWE-688): [#def435]
syslinux-6.04-pre1/com32/modules/whichsys.c:100:14: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
syslinux-6.04-pre1/com32/modules/whichsys.c:82:8: branch_false: following ‘false’ branch (when ‘argc != 1’)...
 branch_false: ...to here
syslinux-6.04-pre1/com32/modules/whichsys.c:89:12: branch_true: following ‘true’ branch (when ‘arg < argc’)...
syslinux-6.04-pre1/com32/modules/whichsys.c:90:25: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/whichsys.c:90:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
syslinux-6.04-pre1/com32/modules/whichsys.c:95:14: branch_false: ...to here
syslinux-6.04-pre1/com32/modules/whichsys.c:95:12: branch_true: following ‘true’ branch (when the strings are equal)...
syslinux-6.04-pre1/com32/modules/whichsys.c:96:13: branch_true: ...to here
syslinux-6.04-pre1/com32/modules/whichsys.c:100:14: release_memory: ‘0’ is NULL
syslinux-6.04-pre1/com32/modules/whichsys.c:100:14: danger: argument 1 (‘*<unknown>’) NULL where non-null expected
#   98|   	    pxelinux.option = true;
#   99|   	}
#  100|-> 	if (!strcmp(argv[arg], "-sys-")) {
#  101|   	    argv[arg] = NULL;
#  102|   	    syslinux.arg[0] = &argv[arg + 1];

Error: COMPILER_WARNING (CWE-704): [#def436]
syslinux-6.04-pre1/com32/samples/hello.c: scope_hint: In function ‘main’
syslinux-6.04-pre1/com32/samples/hello.c:21:61: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   21 |     printf("Hello, world, from 0x%08X! malloc return %p\n", (unsigned int)&main, nums);
#      |                                                             ^
#   19|   
#   20|       nums = malloc(NUM_COUNT * sizeof(int));
#   21|->     printf("Hello, world, from 0x%08X! malloc return %p\n", (unsigned int)&main, nums);
#   22|   
#   23|       free(nums);

Error: COMPILER_WARNING (CWE-704): [#def437]
syslinux-6.04-pre1/com32/samples/hello.c:21:61: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   19|   
#   20|       nums = malloc(NUM_COUNT * sizeof(int));
#   21|->     printf("Hello, world, from 0x%08X! malloc return %p\n", (unsigned int)&main, nums);
#   22|   
#   23|       free(nums);

Error: COMPILER_WARNING (CWE-704): [#def438]
syslinux-6.04-pre1/com32/sysdump/acpi.c: scope_hint: In function ‘scan_for_rsdp’
syslinux-6.04-pre1/com32/sysdump/acpi.c:117:40: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  117 |         const struct acpi_rsdp *rsdp = (const struct acpi_rsdp *)base;
#      |                                        ^
#  115|   {
#  116|       for (base &= ~15; base < end-20; base += 16) {
#  117|-> 	const struct acpi_rsdp *rsdp = (const struct acpi_rsdp *)base;
#  118|   
#  119|   	if (memcmp(rsdp->magic, "RSD PTR ", 8))

Error: COMPILER_WARNING (CWE-704): [#def439]
syslinux-6.04-pre1/com32/sysdump/acpi.c:117:40: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  115|   {
#  116|       for (base &= ~15; base < end-20; base += 16) {
#  117|-> 	const struct acpi_rsdp *rsdp = (const struct acpi_rsdp *)base;
#  118|   
#  119|   	if (memcmp(rsdp->magic, "RSD PTR ", 8))

Error: COMPILER_WARNING: [#def440]
syslinux-6.04-pre1/com32/sysdump/acpi.c:142:13: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#  142 |     ebda = (*(uint16_t *)0x40e) << 4;
#      |            ~^~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  140|       const struct acpi_rsdp *rsdp;
#  141|   
#  142|->     ebda = (*(uint16_t *)0x40e) << 4;
#  143|       if (ebda >= 0x70000 && ebda < 0xa0000) {
#  144|   	rsdp = scan_for_rsdp(ebda, ebda+1024);

Error: COMPILER_WARNING (CWE-704): [#def441]
syslinux-6.04-pre1/com32/sysdump/acpi.c: scope_hint: In function ‘dump_table’
syslinux-6.04-pre1/com32/sysdump/acpi.c:167:64: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  167 |     snprintf(namebuf, sizeof namebuf, "acpi/%4.4s/%08x", name, (uint32_t)ptr);
#      |                                                                ^
#  165|       }
#  166|   
#  167|->     snprintf(namebuf, sizeof namebuf, "acpi/%4.4s/%08x", name, (uint32_t)ptr);
#  168|       cpio_hdr(be, MODE_FILE, len, namebuf);
#  169|   

Error: COMPILER_WARNING (CWE-704): [#def442]
syslinux-6.04-pre1/com32/sysdump/acpi.c:167:64: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  165|       }
#  166|   
#  167|->     snprintf(namebuf, sizeof namebuf, "acpi/%4.4s/%08x", name, (uint32_t)ptr);
#  168|       cpio_hdr(be, MODE_FILE, len, namebuf);
#  169|   

Error: COMPILER_WARNING (CWE-704): [#def443]
syslinux-6.04-pre1/com32/sysdump/acpi.c: scope_hint: In function ‘dump_rsdt’
syslinux-6.04-pre1/com32/sysdump/acpi.c:178:12: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  178 |     rsdt = (const struct acpi_rsdt *)rsdp->rsdt_addr;
#      |            ^
#  176|       uint32_t i, n;
#  177|   
#  178|->     rsdt = (const struct acpi_rsdt *)rsdp->rsdt_addr;
#  179|   
#  180|       if (memcmp(rsdt->hdr.sig, "RSDT", 4) || is_valid_table(rsdt) > ERR_CSUM)

Error: COMPILER_WARNING (CWE-704): [#def444]
syslinux-6.04-pre1/com32/sysdump/acpi.c:178:12: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  176|       uint32_t i, n;
#  177|   
#  178|->     rsdt = (const struct acpi_rsdt *)rsdp->rsdt_addr;
#  179|   
#  180|       if (memcmp(rsdt->hdr.sig, "RSDT", 4) || is_valid_table(rsdt) > ERR_CSUM)

Error: COMPILER_WARNING (CWE-704): [#def445]
syslinux-6.04-pre1/com32/sysdump/acpi.c:191:38: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  191 |         const struct acpi_hdr *hdr = (const struct acpi_hdr *)(rsdt->entry[i]);
#      |                                      ^
#  189|   
#  190|       for (i = 0; i < n; i++) {
#  191|-> 	const struct acpi_hdr *hdr = (const struct acpi_hdr *)(rsdt->entry[i]);
#  192|   
#  193|   	if (is_valid_table(hdr) <= ERR_CSUM)

Error: COMPILER_WARNING (CWE-704): [#def446]
syslinux-6.04-pre1/com32/sysdump/acpi.c:191:38: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  189|   
#  190|       for (i = 0; i < n; i++) {
#  191|-> 	const struct acpi_hdr *hdr = (const struct acpi_hdr *)(rsdt->entry[i]);
#  192|   
#  193|   	if (is_valid_table(hdr) <= ERR_CSUM)

Error: COMPILER_WARNING (CWE-704): [#def447]
syslinux-6.04-pre1/com32/sysdump/dmi.c: scope_hint: In function ‘dump_smbios’
syslinux-6.04-pre1/com32/sysdump/dmi.c:81:20: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   81 |     write_data(be, (const void *)smb->dmi.tbladdr, smb->dmi.tbllen);
#      |                    ^
#   79|   
#   80|       write_data(be, &smx, sizeof smx);
#   81|->     write_data(be, (const void *)smb->dmi.tbladdr, smb->dmi.tbllen);
#   82|   }
#   83|   

Error: COMPILER_WARNING (CWE-704): [#def448]
syslinux-6.04-pre1/com32/sysdump/dmi.c:81:20: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   79|   
#   80|       write_data(be, &smx, sizeof smx);
#   81|->     write_data(be, (const void *)smb->dmi.tbladdr, smb->dmi.tbllen);
#   82|   }
#   83|   

Error: COMPILER_WARNING (CWE-704): [#def449]
syslinux-6.04-pre1/com32/sysdump/dmi.c: scope_hint: In function ‘dump_old_dmi’
syslinux-6.04-pre1/com32/sysdump/dmi.c:107:20: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  107 |     write_data(be, (const void *)dmi->tbladdr, dmi->tbllen);
#      |                    ^
#  105|   
#  106|       write_data(be, &fake, sizeof fake);
#  107|->     write_data(be, (const void *)dmi->tbladdr, dmi->tbllen);
#  108|   }
#  109|   

Error: COMPILER_WARNING (CWE-704): [#def450]
syslinux-6.04-pre1/com32/sysdump/dmi.c:107:20: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#  105|   
#  106|       write_data(be, &fake, sizeof fake);
#  107|->     write_data(be, (const void *)dmi->tbladdr, dmi->tbllen);
#  108|   }
#  109|   

Error: COMPILER_WARNING: [#def451]
syslinux-6.04-pre1/com32/sysdump/memmap.c:50:9: warning[-Warray-bounds=]: ‘memcpy’ offset [0, 23] is out of the bounds [0, 0]
#   50 |         memcpy(buf[nentry].data, curr->data, sizeof curr->data);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   48|   		return;		/* FAILED */
#   49|   	}
#   50|-> 	memcpy(buf[nentry].data, curr->data, sizeof curr->data);
#   51|   	buf[nentry].ebx = ireg.ebx.l;
#   52|   	buf[nentry].len = oreg.ecx.l;

Error: COMPILER_WARNING (CWE-126): [#def452]
syslinux-6.04-pre1/com32/sysdump/memmap.c:50:9: warning[-Wstringop-overread]: ‘memcpy’ reading 24 bytes from a region of size 0
#source object is likely at address zero
#   48|   		return;		/* FAILED */
#   49|   	}
#   50|-> 	memcpy(buf[nentry].data, curr->data, sizeof curr->data);
#   51|   	buf[nentry].ebx = ireg.ebx.l;
#   52|   	buf[nentry].len = oreg.ecx.l;

Error: COMPILER_WARNING: [#def453]
syslinux-6.04-pre1/core/bios.c: scope_hint: In function ‘bios_get_mode’
syslinux-6.04-pre1/core/bios.c:22:20: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   22 | #define BIOS_ROWS (*(uint8_t *)0x484)   /* Minus one; if zero use 24 (= 25 lines) */
#      |                   ~^~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/core/bios.c:33:13: note: in expansion of macro ‘BIOS_ROWS’
#   33 |     *rows = BIOS_ROWS ? BIOS_ROWS + 1 : 25;
#      |             ^~~~~~~~~
cc1: note: source object is likely at address zero
#   20|   
#   21|   #define BIOS_CURXY ((struct curxy *)0x450)	/* Array for each page */
#   22|-> #define BIOS_ROWS (*(uint8_t *)0x484)	/* Minus one; if zero use 24 (= 25 lines) */
#   23|   #define BIOS_COLS (*(uint16_t *)0x44A)
#   24|   #define BIOS_PAGE (*(uint8_t *)0x462)

Error: COMPILER_WARNING: [#def454]
syslinux-6.04-pre1/core/bios.c:23:20: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   23 | #define BIOS_COLS (*(uint16_t *)0x44A)
#      |                   ~^~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/core/bios.c:34:13: note: in expansion of macro ‘BIOS_COLS’
#   34 |     *cols = BIOS_COLS;
#      |             ^~~~~~~~~
cc1: note: source object is likely at address zero
#   21|   #define BIOS_CURXY ((struct curxy *)0x450)	/* Array for each page */
#   22|   #define BIOS_ROWS (*(uint8_t *)0x484)	/* Minus one; if zero use 24 (= 25 lines) */
#   23|-> #define BIOS_COLS (*(uint16_t *)0x44A)
#   24|   #define BIOS_PAGE (*(uint8_t *)0x462)
#   25|   

Error: COMPILER_WARNING: [#def455]
syslinux-6.04-pre1/core/bios.c: scope_hint: In function ‘bios_get_cursor’
syslinux-6.04-pre1/core/bios.c:24:20: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   24 | #define BIOS_PAGE (*(uint8_t *)0x462)
#      |                   ~^~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/core/bios.c:46:21: note: in expansion of macro ‘BIOS_PAGE’
#   46 |     ireg.ebx.b[1] = BIOS_PAGE;
#      |                     ^~~~~~~~~
cc1: note: source object is likely at address zero
#   22|   #define BIOS_ROWS (*(uint8_t *)0x484)	/* Minus one; if zero use 24 (= 25 lines) */
#   23|   #define BIOS_COLS (*(uint16_t *)0x44A)
#   24|-> #define BIOS_PAGE (*(uint8_t *)0x462)
#   25|   
#   26|   static void bios_text_mode(void)

Error: COMPILER_WARNING: [#def456]
syslinux-6.04-pre1/core/bios.c:82:33: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘struct curxy[0]’
#   82 |     struct curxy xy = BIOS_CURXY[page];
#      |                                 ^
cc1: note: source object is likely at address zero
#   80|   {
#   81|       const int page = BIOS_PAGE;
#   82|->     struct curxy xy = BIOS_CURXY[page];
#   83|       static com32sys_t ireg;
#   84|   

Error: COMPILER_WARNING: [#def457]
syslinux-6.04-pre1/core/bios.c:508:14: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  508 |         next = *hook;
#      |         ~~~~~^~~~~~~
cc1: note: source object is likely at address zero
#  506|   	uint32_t *hook = (uint32_t *)BIOS_timer_hook;
#  507|   
#  508|-> 	next = *hook;
#  509|   	BIOS_timer_next = next;
#  510|   	*hook = (uint32_t)&timer_irq;

Error: COMPILER_WARNING: [#def458]
syslinux-6.04-pre1/core/bios.c:510:15: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  510 |         *hook = (uint32_t)&timer_irq;
#      |         ~~~~~~^~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  508|   	next = *hook;
#  509|   	BIOS_timer_next = next;
#  510|-> 	*hook = (uint32_t)&timer_irq;
#  511|   }
#  512|   

Error: COMPILER_WARNING: [#def459]
syslinux-6.04-pre1/core/bios.c: scope_hint: In function ‘bios_scan_memory’
syslinux-6.04-pre1/core/bios.c:537:29: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#  537 |         uint16_t ebda_seg = *(uint16_t *) 0x40e;
#      |                             ^~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  535|       if (dosmem < 32 * 1024 || dosmem > 640 * 1024) {
#  536|   	/* INT 12h reports nonsense... now what? */
#  537|-> 	uint16_t ebda_seg = *(uint16_t *) 0x40e;
#  538|   	if (ebda_seg >= 0x8000 && ebda_seg < 0xa000)
#  539|   	    dosmem = ebda_seg << 4;

Error: COMPILER_WARNING: [#def460]
syslinux-6.04-pre1/core/bios.c: scope_hint: In function ‘bios_cleanup_hardware’
syslinux-6.04-pre1/core/bios.c:678:17: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  678 |                 *((uint32_t *)(4 * 0x1e)) = OrigFDCTabPtr;
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  676|   	/* Restore the original pointer to the floppy descriptor table */
#  677|   	if (OrigFDCTabPtr)
#  678|-> 		*((uint32_t *)(4 * 0x1e)) = OrigFDCTabPtr;
#  679|   
#  680|   	/*

Error: GCC_ANALYZER_WARNING (CWE-787): [#def461]
syslinux-6.04-pre1/core/dmi.c:309:5: warning[-Wanalyzer-out-of-bounds]: buffer overflow
syslinux-6.04-pre1/core/dmi.c:306:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/dmi.c:309:5: danger: out-of-bounds write from byte 10 till byte 15 but ‘sysff_str’ ends at byte 10
#  307|   	return;
#  308|       
#  309|->     sprintf(sysff_str+6, "%u", *type & 0x7f);
#  310|       sysappend_strings[SYSAPPEND_SYSFF] = sysff_str;
#  311|   }

Error: COMPILER_WARNING (CWE-704): [#def462]
syslinux-6.04-pre1/core/elflink/elfutils.h:24:12: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   24 |     return (Elf32_Phdr *) ((Elf32_Off) elf_hdr + elf_hdr->e_phoff);
#      |            ^
#   22|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   23|   
#   24|->     return (Elf32_Phdr *) ((Elf32_Off) elf_hdr + elf_hdr->e_phoff);
#   25|   }
#   26|   

Error: COMPILER_WARNING (CWE-704): [#def463]
syslinux-6.04-pre1/core/elflink/elfutils.h:24:12: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   22|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   23|   
#   24|->     return (Elf32_Phdr *) ((Elf32_Off) elf_hdr + elf_hdr->e_phoff);
#   25|   }
#   26|   

Error: COMPILER_WARNING (CWE-704): [#def464]
syslinux-6.04-pre1/core/elflink/common.h:16: included_from: Included from here.
syslinux-6.04-pre1/core/elflink/load_env32.c:23: included_from: Included from here.
syslinux-6.04-pre1/core/elflink/elfutils.h: scope_hint: In function ‘elf_get_pht’
syslinux-6.04-pre1/core/elflink/elfutils.h:24:28: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   24 |     return (Elf32_Phdr *) ((Elf32_Off) elf_hdr + elf_hdr->e_phoff);
#      |                            ^
#   22|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   23|   
#   24|->     return (Elf32_Phdr *) ((Elf32_Off) elf_hdr + elf_hdr->e_phoff);
#   25|   }
#   26|   

Error: COMPILER_WARNING (CWE-704): [#def465]
syslinux-6.04-pre1/core/elflink/elfutils.h:24:28: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   22|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   23|   
#   24|->     return (Elf32_Phdr *) ((Elf32_Off) elf_hdr + elf_hdr->e_phoff);
#   25|   }
#   26|   

Error: COMPILER_WARNING (CWE-704): [#def466]
syslinux-6.04-pre1/core/elflink/elfutils.h:38:12: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   38 |     return (Elf32_Phdr *) ((Elf32_Off) elf_pht + index * elf_hdr->e_phentsize);
#      |            ^
#   36|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   37|   
#   38|->     return (Elf32_Phdr *) ((Elf32_Off) elf_pht + index * elf_hdr->e_phentsize);
#   39|   }
#   40|   

Error: COMPILER_WARNING (CWE-704): [#def467]
syslinux-6.04-pre1/core/elflink/elfutils.h:38:12: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   36|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   37|   
#   38|->     return (Elf32_Phdr *) ((Elf32_Off) elf_pht + index * elf_hdr->e_phentsize);
#   39|   }
#   40|   

Error: COMPILER_WARNING (CWE-704): [#def468]
syslinux-6.04-pre1/core/elflink/elfutils.h: scope_hint: In function ‘elf_get_ph’
syslinux-6.04-pre1/core/elflink/elfutils.h:38:28: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   38 |     return (Elf32_Phdr *) ((Elf32_Off) elf_pht + index * elf_hdr->e_phentsize);
#      |                            ^
#   36|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   37|   
#   38|->     return (Elf32_Phdr *) ((Elf32_Off) elf_pht + index * elf_hdr->e_phentsize);
#   39|   }
#   40|   

Error: COMPILER_WARNING (CWE-704): [#def469]
syslinux-6.04-pre1/core/elflink/elfutils.h:38:28: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#   36|       Elf32_Ehdr *elf_hdr = elf_get_header(elf_image);
#   37|   
#   38|->     return (Elf32_Phdr *) ((Elf32_Off) elf_pht + index * elf_hdr->e_phentsize);
#   39|   }
#   40|   

Error: COMPILER_WARNING: [#def470]
syslinux-6.04-pre1/core/font.c: scope_hint: In function ‘bios_adjust_screen’
syslinux-6.04-pre1/core/font.c:160:16: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘volatile uint8_t[0]’ {aka ‘volatile unsigned char[]’}
#  160 |         rows = *vidrows;
#      |                ^~~~~~~~
cc1: note: source object is likely at address zero
#  158|   	memset(&ireg, 0, sizeof(ireg));
#  159|   
#  160|-> 	rows = *vidrows;
#  161|   	if (!rows) {
#  162|   		/*

Error: GCC_ANALYZER_WARNING (CWE-476): [#def471]
syslinux-6.04-pre1/core/fs/chdir.c:76:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
syslinux-6.04-pre1/core/fs/chdir.c:58:17: enter_function: entry to ‘realpath’
syslinux-6.04-pre1/core/fs/chdir.c:70:12: branch_false: following ‘false’ branch (when ‘rv >= 0’)...
syslinux-6.04-pre1/core/fs/chdir.c:75:16: branch_false: ...to here
syslinux-6.04-pre1/core/fs/chdir.c:75:16: call_function: inlined call to ‘handle_to_file’ from ‘realpath’
syslinux-6.04-pre1/core/fs/chdir.c:76:13: branch_false: ...to here
syslinux-6.04-pre1/core/fs/chdir.c:76:13: danger: dereference of NULL ‘<unknown>’
#   74|   
#   75|   	file = handle_to_file(rv);
#   76|-> 	s = generic_inode_to_path(file->inode, dst, bufsize);
#   77|   	if (s == 0)
#   78|   	    s = copy_string(dst, 0, bufsize, "/");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def472]
syslinux-6.04-pre1/core/fs/chdir.c:106:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
syslinux-6.04-pre1/core/fs/chdir.c:87:14: enter_function: entry to ‘chdir’
syslinux-6.04-pre1/core/fs/chdir.c:97:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/chdir.c:101:10: branch_false: ...to here
syslinux-6.04-pre1/core/fs/chdir.c:102:8: branch_false: following ‘false’ branch (when ‘rv >= 0’)...
syslinux-6.04-pre1/core/fs/chdir.c:105:12: branch_false: ...to here
syslinux-6.04-pre1/core/fs/chdir.c:105:12: call_function: inlined call to ‘handle_to_file’ from ‘chdir’
syslinux-6.04-pre1/core/fs/chdir.c:106:9: branch_false: ...to here
syslinux-6.04-pre1/core/fs/chdir.c:106:9: danger: dereference of NULL ‘<unknown>’
#  104|   
#  105|       file = handle_to_file(rv);
#  106|->     if (file->inode->mode != DT_DIR) {
#  107|   	_close_file(file);
#  108|   	return -1;

Error: COMPILER_WARNING (CWE-704): [#def473]
syslinux-6.04-pre1/core/fs/ext2/ext2.c: scope_hint: In function ‘__ext2_get_group_desc’
syslinux-6.04-pre1/core/fs/ext2/ext2.c:47:7: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   47 |     p = get_cache(fs->fs_dev, desc_block);
#      |       ^
#   45|       desc_block += sbi->s_first_data_block + 1;
#   46|   
#   47|->     p = get_cache(fs->fs_dev, desc_block);
#   48|       return p + sbi->s_desc_size * desc_index;
#   49|   }

Error: COMPILER_WARNING (CWE-704): [#def474]
syslinux-6.04-pre1/core/fs/ext2/ext2.c:47:7: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   45|       desc_block += sbi->s_first_data_block + 1;
#   46|   
#   47|->     p = get_cache(fs->fs_dev, desc_block);
#   48|       return p + sbi->s_desc_size * desc_index;
#   49|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def475]
syslinux-6.04-pre1/core/fs/fat/fat.c:715:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&filename’
syslinux-6.04-pre1/core/fs/fat/fat.c:615:16: branch_true: following ‘true’ branch (when ‘entries_left != 0’)...
syslinux-6.04-pre1/core/fs/fat/fat.c:616:17: branch_true: ...to here
syslinux-6.04-pre1/core/fs/fat/fat.c:616:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/fat/fat.c:618:16: branch_false: ...to here
syslinux-6.04-pre1/core/fs/fat/fat.c:615:16: branch_true: following ‘true’ branch (when ‘entries_left != 0’)...
syslinux-6.04-pre1/core/fs/fat/fat.c:616:17: branch_true: ...to here
syslinux-6.04-pre1/core/fs/fat/fat.c:616:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/fat/fat.c:618:16: branch_false: ...to here
syslinux-6.04-pre1/core/fs/fat/fat.c:669:33: branch_true: following ‘true’ branch (when ‘i != 8’)...
syslinux-6.04-pre1/core/fs/fat/fat.c:670:29: branch_true: ...to here
syslinux-6.04-pre1/core/fs/fat/fat.c:671:28: branch_true: following ‘true’ branch (when ‘c == 32’)...
syslinux-6.04-pre1/core/fs/fat/fat.c:677:25: branch_true: ...to here
syslinux-6.04-pre1/core/fs/fat/fat.c:677:24: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/fat/fat.c:688:21: branch_false: ...to here
syslinux-6.04-pre1/core/fs/fat/fat.c:715:5: danger: use of uninitialized value ‘&filename’ here
#  713|       dirent->d_reclen = offsetof(struct dirent, d_name) + name_len;
#  714|       dirent->d_type = get_inode_mode(de->attr);
#  715|->     memcpy(dirent->d_name, filename, name_len);
#  716|   
#  717|       file->offset += sizeof(*de);  /* Update for next reading */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def476]
syslinux-6.04-pre1/core/fs/fs.c:356:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
syslinux-6.04-pre1/core/fs/fs.c:340:14: enter_function: entry to ‘open_file’
syslinux-6.04-pre1/core/fs/fs.c:349:10: call_function: calling ‘searchdir’ from ‘open_file’
syslinux-6.04-pre1/core/fs/fs.c:349:10: return_function: returning to ‘open_file’ from ‘searchdir’
syslinux-6.04-pre1/core/fs/fs.c:351:8: branch_false: following ‘false’ branch (when ‘rv != -1’)...
syslinux-6.04-pre1/core/fs/fs.c:354:12: branch_false: ...to here
syslinux-6.04-pre1/core/fs/fs.c:354:12: call_function: inlined call to ‘handle_to_file’ from ‘open_file’
syslinux-6.04-pre1/core/fs/fs.c:356:9: branch_false: ...to here
syslinux-6.04-pre1/core/fs/fs.c:356:9: danger: dereference of NULL ‘<unknown>’
#  354|       file = handle_to_file(rv);
#  355|   
#  356|->     if (file->inode->mode != DT_REG) {
#  357|   	_close_file(file);
#  358|   	return -1;

Error: COMPILER_WARNING (CWE-465): [#def477]
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c: scope_hint: In function ‘ntfs_filename_cmp’
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c:303:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct ntfs_filename_attr’ may result in an unaligned pointer value
#  303 |     entry_fn = ie->key.file_name.file_name;
#      |                ^~
#  301|       dprintf("in %s()\n", __func__);
#  302|   
#  303|->     entry_fn = ie->key.file_name.file_name;
#  304|       entry_fn_len = ie->key.file_name.file_name_len;
#  305|   

Error: COMPILER_WARNING (CWE-465): [#def478]
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c:303:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct ntfs_filename_attr’ may result in an unaligned pointer value
#  301|       dprintf("in %s()\n", __func__);
#  302|   
#  303|->     entry_fn = ie->key.file_name.file_name;
#  304|       entry_fn_len = ie->key.file_name.file_name_len;
#  305|   

Error: COMPILER_WARNING (CWE-704): [#def479]
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c: scope_hint: In function ‘index_inode_setup’
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c:675:17: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  675 |                 (uint32_t)((uint8_t *)attr + attr->data.resident.value_offset);
#      |                 ^
#  673|           if (!attr->non_resident) {
#  674|               NTFS_PVT(inode)->data.resident.offset =
#  675|->                 (uint32_t)((uint8_t *)attr + attr->data.resident.value_offset);
#  676|               inode->size = attr->data.resident.value_len;
#  677|           } else {

Error: COMPILER_WARNING (CWE-704): [#def480]
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c:675:17: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  673|           if (!attr->non_resident) {
#  674|               NTFS_PVT(inode)->data.resident.offset =
#  675|->                 (uint32_t)((uint8_t *)attr + attr->data.resident.value_offset);
#  676|               inode->size = attr->data.resident.value_len;
#  677|           } else {

Error: COMPILER_WARNING (CWE-465): [#def481]
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c: scope_hint: In function ‘ntfs_cvt_filename’
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c:902:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct ntfs_filename_attr’ may result in an unaligned pointer value
#  902 |     entry_fn = ie->key.file_name.file_name;
#      |                ^~
#  900|       unsigned i;
#  901|   
#  902|->     entry_fn = ie->key.file_name.file_name;
#  903|       entry_fn_len = ie->key.file_name.file_name_len;
#  904|   

Error: COMPILER_WARNING (CWE-465): [#def482]
syslinux-6.04-pre1/core/fs/ntfs/ntfs.c:902:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct ntfs_filename_attr’ may result in an unaligned pointer value
#  900|       unsigned i;
#  901|   
#  902|->     entry_fn = ie->key.file_name.file_name;
#  903|       entry_fn_len = ie->key.file_name.file_name_len;
#  904|   

Error: COMPILER_WARNING (CWE-563): [#def483]
syslinux-6.04-pre1/core/fs/pxe/dhcp_option.c: scope_hint: In function ‘parse_dhcp’
syslinux-6.04-pre1/core/fs/pxe/dhcp_option.c:234:9: warning[-Wunused-but-set-variable]: variable ‘min_opt’ set but not used
#  234 |     int min_opt = 0;
#      |         ^~~~~~~
#  232|       const struct bootp_t *dhcp = (const struct bootp_t *)pkt;
#  233|       int opt_len;
#  234|->     int min_opt = 0;
#  235|   
#  236|       IPInfo.ipver = 4;		/* This is IPv4 only for now... */

Error: COMPILER_WARNING: [#def484]
syslinux-6.04-pre1/core/fs/pxe/http.c: scope_hint: In function ‘http_do_bake_cookies’
syslinux-6.04-pre1/core/fs/pxe/http.c:57:39: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (17 chars into 16 available)
#   57 |     static const char uchexchar[16] = "0123456789ABCDEF";
#      |                                       ^~~~~~~~~~~~~~~~~~
#   55|   static size_t http_do_bake_cookies(char *q)
#   56|   {
#   57|->     static const char uchexchar[16] = "0123456789ABCDEF";
#   58|       int i;
#   59|       size_t n = 0;

Error: COMPILER_WARNING (CWE-569): [#def485]
syslinux-6.04-pre1/core/fs/pxe/isr.c: scope_hint: In function ‘pxe_start_isr’
syslinux-6.04-pre1/core/fs/pxe/isr.c:269:34: warning[-Wparentheses]: suggest parentheses around ‘&&’ within ‘||’
#  269 |         if ((hwad == 0x000023ae) && (pxe_undi_iface.ServiceFlags == 0xdc1b) ||
#      |             ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  267|   	int hwad = ((int)MAC[0] << 16) + ((int)MAC[1] << 8) + MAC[2];
#  268|   	dprintf("pxe_start_isr: got %06x %04x\n", hwad, pxe_undi_iface.ServiceFlags);
#  269|-> 	if ((hwad == 0x000023ae) && (pxe_undi_iface.ServiceFlags == 0xdc1b) ||
#  270|   	    (hwad == 0x005c260a) && (pxe_undi_iface.ServiceFlags == 0xdc1b) ||
#  271|   	    (hwad == 0x00180373) && (pxe_undi_iface.ServiceFlags == 0xdc1b)) {

Error: COMPILER_WARNING (CWE-569): [#def486]
syslinux-6.04-pre1/core/fs/pxe/isr.c:271:34: warning[-Wparentheses]: suggest parentheses around ‘&&’ within ‘||’
#  271 |             (hwad == 0x00180373) && (pxe_undi_iface.ServiceFlags == 0xdc1b)) {
#      |             ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  269|   	if ((hwad == 0x000023ae) && (pxe_undi_iface.ServiceFlags == 0xdc1b) ||
#  270|   	    (hwad == 0x005c260a) && (pxe_undi_iface.ServiceFlags == 0xdc1b) ||
#  271|-> 	    (hwad == 0x00180373) && (pxe_undi_iface.ServiceFlags == 0xdc1b)) {
#  272|   		asm volatile("orb $1,%0" : "+m" (pxe_need_poll));
#  273|   		dprintf("pxe_start_isr: forcing pxe_need_poll by model\n");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def487]
syslinux-6.04-pre1/core/fs/pxe/pxe.c:330:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘inode’
syslinux-6.04-pre1/core/fs/pxe/pxe.c:284:13: release_memory: ‘*file.inode’ is NULL
syslinux-6.04-pre1/core/fs/pxe/pxe.c:284:13: release_memory: ‘*file.inode’ is NULL
syslinux-6.04-pre1/core/fs/pxe/pxe.c:286:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/pxe/pxe.c:323:8: branch_false: ...to here
syslinux-6.04-pre1/core/fs/pxe/pxe.c:323:8: branch_false: following ‘false’ branch (when ‘found_scheme == 0’)...
syslinux-6.04-pre1/core/fs/pxe/pxe.c:326:9: branch_false: ...to here
syslinux-6.04-pre1/core/fs/pxe/pxe.c:330:9: danger: dereference of NULL ‘inode’
#  328|       }
#  329|   
#  330|->     if (inode->size) {
#  331|   	file->inode = inode;
#  332|   	file->inode->mode = (flags & O_DIRECTORY) ? DT_DIR : DT_REG;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def488]
syslinux-6.04-pre1/core/fs/readdir.c:22:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
syslinux-6.04-pre1/core/fs/readdir.c:11:15: enter_function: entry to ‘opendir’
syslinux-6.04-pre1/core/fs/readdir.c:17:8: branch_false: following ‘false’ branch (when ‘rv >= 0’)...
syslinux-6.04-pre1/core/fs/readdir.c:20:12: branch_false: ...to here
syslinux-6.04-pre1/core/fs/readdir.c:20:12: call_function: inlined call to ‘handle_to_file’ from ‘opendir’
syslinux-6.04-pre1/core/fs/readdir.c:22:9: branch_false: ...to here
syslinux-6.04-pre1/core/fs/readdir.c:22:9: danger: dereference of NULL ‘<unknown>’
#   20|       file = handle_to_file(rv);
#   21|   
#   22|->     if (file->inode->mode != DT_DIR) {
#   23|   	_close_file(file);
#   24|   	return NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def489]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:130:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dir’
syslinux-6.04-pre1/core/fs/ufs/ufs.c:114:1: enter_function: entry to ‘ufs_find_entry’
syslinux-6.04-pre1/core/fs/ufs/ufs.c:122:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/fs/ufs/ufs.c:123:16: branch_true: ...to here
syslinux-6.04-pre1/core/fs/ufs/ufs.c:123:16: call_function: calling ‘ufs_get_cache’ from ‘ufs_find_entry’
syslinux-6.04-pre1/core/fs/ufs/ufs.c:123:16: return_function: returning to ‘ufs_find_entry’ from ‘ufs_get_cache’
syslinux-6.04-pre1/core/fs/ufs/ufs.c:128:16: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/fs/ufs/ufs.c:129:49: branch_true: ...to here
syslinux-6.04-pre1/core/fs/ufs/ufs.c:129:13: release_memory: ‘dir’ is NULL
syslinux-6.04-pre1/core/fs/ufs/ufs.c:130:17: danger: dereference of NULL ‘dir’
#  128|   	while (offset < maxoffset-8) {
#  129|   	    dir = (const struct ufs_dir_entry *)(data + offset);
#  130|-> 	    if (dir->dir_entry_len > maxoffset - offset)
#  131|   		break;
#  132|   

Error: COMPILER_WARNING (CWE-465): [#def490]
syslinux-6.04-pre1/core/fs/ufs/ufs.c: scope_hint: In function ‘ufs1_iget_by_inr’
syslinux-6.04-pre1/core/fs/ufs/ufs.c:224:27: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct ufs1_inode’ may result in an unaligned pointer value
#  224 |     source = (uint32_t *) ufs_inode->direct_blk_ptr;
#      |                           ^~~~~~~~~
#  222|        */
#  223|       dest = (uint64_t *) inode->pvt;
#  224|->     source = (uint32_t *) ufs_inode->direct_blk_ptr;
#  225|       for (i = 0; i < UFS_NBLOCKS; i++)
#  226|   	dest[i] = ((uint64_t) source[i]) & 0xFFFFFFFF;

Error: COMPILER_WARNING (CWE-465): [#def491]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:224:27: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct ufs1_inode’ may result in an unaligned pointer value
#  222|        */
#  223|       dest = (uint64_t *) inode->pvt;
#  224|->     source = (uint32_t *) ufs_inode->direct_blk_ptr;
#  225|       for (i = 0; i < UFS_NBLOCKS; i++)
#  226|   	dest[i] = ((uint64_t) source[i]) & 0xFFFFFFFF;

Error: COMPILER_WARNING (CWE-192): [#def492]
syslinux-6.04-pre1/core/fs/ufs/ufs.c: scope_hint: In function ‘get_inode_mode’
syslinux-6.04-pre1/core/fs/ufs/ufs.c:359:37: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  359 |         case UFS_DTYPE_FIFO: return DT_FIFO;
#      |                                     ^~~~~~~
#  357|   {
#  358|       switch(type) {
#  359|->         case UFS_DTYPE_FIFO: return DT_FIFO;
#  360|           case UFS_DTYPE_CHARDEV: return DT_CHR;
#  361|           case UFS_DTYPE_DIR: return DT_DIR;

Error: COMPILER_WARNING (CWE-192): [#def493]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:360:40: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  360 |         case UFS_DTYPE_CHARDEV: return DT_CHR;
#      |                                        ^~~~~~
#  358|       switch(type) {
#  359|           case UFS_DTYPE_FIFO: return DT_FIFO;
#  360|->         case UFS_DTYPE_CHARDEV: return DT_CHR;
#  361|           case UFS_DTYPE_DIR: return DT_DIR;
#  362|           case UFS_DTYPE_BLOCK: return DT_BLK;

Error: COMPILER_WARNING (CWE-192): [#def494]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:361:36: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  361 |         case UFS_DTYPE_DIR: return DT_DIR;
#      |                                    ^~~~~~
#  359|           case UFS_DTYPE_FIFO: return DT_FIFO;
#  360|           case UFS_DTYPE_CHARDEV: return DT_CHR;
#  361|->         case UFS_DTYPE_DIR: return DT_DIR;
#  362|           case UFS_DTYPE_BLOCK: return DT_BLK;
#  363|           case UFS_DTYPE_RFILE: return DT_REG;

Error: COMPILER_WARNING (CWE-192): [#def495]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:362:38: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  362 |         case UFS_DTYPE_BLOCK: return DT_BLK;
#      |                                      ^~~~~~
#  360|           case UFS_DTYPE_CHARDEV: return DT_CHR;
#  361|           case UFS_DTYPE_DIR: return DT_DIR;
#  362|->         case UFS_DTYPE_BLOCK: return DT_BLK;
#  363|           case UFS_DTYPE_RFILE: return DT_REG;
#  364|           case UFS_DTYPE_SYMLINK: return DT_LNK;

Error: COMPILER_WARNING (CWE-192): [#def496]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:363:38: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  363 |         case UFS_DTYPE_RFILE: return DT_REG;
#      |                                      ^~~~~~
#  361|           case UFS_DTYPE_DIR: return DT_DIR;
#  362|           case UFS_DTYPE_BLOCK: return DT_BLK;
#  363|->         case UFS_DTYPE_RFILE: return DT_REG;
#  364|           case UFS_DTYPE_SYMLINK: return DT_LNK;
#  365|           case UFS_DTYPE_SOCKET: return DT_SOCK;

Error: COMPILER_WARNING (CWE-192): [#def497]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:364:40: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  364 |         case UFS_DTYPE_SYMLINK: return DT_LNK;
#      |                                        ^~~~~~
#  362|           case UFS_DTYPE_BLOCK: return DT_BLK;
#  363|           case UFS_DTYPE_RFILE: return DT_REG;
#  364|->         case UFS_DTYPE_SYMLINK: return DT_LNK;
#  365|           case UFS_DTYPE_SOCKET: return DT_SOCK;
#  366|           case UFS_DTYPE_WHITEOUT: return DT_WHT;

Error: COMPILER_WARNING (CWE-192): [#def498]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:365:39: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  365 |         case UFS_DTYPE_SOCKET: return DT_SOCK;
#      |                                       ^~~~~~~
#  363|           case UFS_DTYPE_RFILE: return DT_REG;
#  364|           case UFS_DTYPE_SYMLINK: return DT_LNK;
#  365|->         case UFS_DTYPE_SOCKET: return DT_SOCK;
#  366|           case UFS_DTYPE_WHITEOUT: return DT_WHT;
#  367|           default: return DT_UNKNOWN;

Error: COMPILER_WARNING (CWE-192): [#def499]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:366:41: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  366 |         case UFS_DTYPE_WHITEOUT: return DT_WHT;
#      |                                         ^~~~~~
#  364|           case UFS_DTYPE_SYMLINK: return DT_LNK;
#  365|           case UFS_DTYPE_SOCKET: return DT_SOCK;
#  366|->         case UFS_DTYPE_WHITEOUT: return DT_WHT;
#  367|           default: return DT_UNKNOWN;
#  368|       }

Error: COMPILER_WARNING (CWE-192): [#def500]
syslinux-6.04-pre1/core/fs/ufs/ufs.c:367:25: warning[-Wenum-conversion]: implicit conversion from ‘enum dirent_type’ to ‘enum dir_type_flags’
#  367 |         default: return DT_UNKNOWN;
#      |                         ^~~~~~~~~~
#  365|           case UFS_DTYPE_SOCKET: return DT_SOCK;
#  366|           case UFS_DTYPE_WHITEOUT: return DT_WHT;
#  367|->         default: return DT_UNKNOWN;
#  368|       }
#  369|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def501]
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:666:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘nhdr’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:627:15: enter_function: entry to ‘xfs_dir2_node_find_entry’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:659:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:664:12: branch_false: ...to here
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:664:12: call_function: calling ‘xfs_dir2_dirblks_get_cached’ from ‘xfs_dir2_node_find_entry’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:664:12: return_function: return of NULL to ‘xfs_dir2_node_find_entry’ from ‘xfs_dir2_dirblks_get_cached’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:665:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:666:29: branch_true: ...to here
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:666:29: danger: dereference of NULL ‘nhdr’
#  664|       nhdr = xfs_dir2_dirblks_get_cached(parent->fs, fsblkno, 1);
#  665|       if (be16_to_cpu(nhdr->info.magic) == XFS_DA_NODE_MAGIC) {
#  666|-> 	count = be16_to_cpu(nhdr->count);
#  667|   	btree = (xfs_da_node_entry_t *)((uint8_t *)nhdr +
#  668|   					sizeof(struct xfs_da_node_hdr));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def502]
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:670:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘nhdr’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:627:15: enter_function: entry to ‘xfs_dir2_node_find_entry’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:659:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:664:12: branch_false: ...to here
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:664:12: call_function: calling ‘xfs_dir2_dirblks_get_cached’ from ‘xfs_dir2_node_find_entry’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:664:12: return_function: return of NULL to ‘xfs_dir2_node_find_entry’ from ‘xfs_dir2_dirblks_get_cached’
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:665:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:669:15: branch_false: ...to here
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:669:15: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:670:29: branch_true: ...to here
syslinux-6.04-pre1/core/fs/xfs/xfs_dir2.c:670:29: danger: dereference of NULL ‘nhdr’
#  668|   					sizeof(struct xfs_da_node_hdr));
#  669|       } else if (be16_to_cpu(nhdr->info.magic) == XFS_DA3_NODE_MAGIC) {
#  670|-> 	count = be16_to_cpu(((xfs_da3_node_hdr_t *)nhdr)->count);
#  671|   	btree = (xfs_da_node_entry_t *)((uint8_t *)nhdr +
#  672|   					sizeof(struct xfs_da3_node_hdr));

Error: COMPILER_WARNING (CWE-704): [#def503]
syslinux-6.04-pre1/core/graphics.c: scope_hint: In function ‘vgasetmode’
syslinux-6.04-pre1/core/graphics.c:102:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  102 |         ireg.edx.w[0] = (uint32_t)linear_color;
#      |                         ^
#  100|   
#  101|   	memset(&ireg, 0, sizeof(ireg));
#  102|-> 	ireg.edx.w[0] = (uint32_t)linear_color;
#  103|   	ireg.eax.w[0] = 0x1002;	/* Write color registers */
#  104|   	__intcall(0x10, &ireg, &oreg);

Error: COMPILER_WARNING (CWE-704): [#def504]
syslinux-6.04-pre1/core/graphics.c:102:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  100|   
#  101|   	memset(&ireg, 0, sizeof(ireg));
#  102|-> 	ireg.edx.w[0] = (uint32_t)linear_color;
#  103|   	ireg.eax.w[0] = 0x1002;	/* Write color registers */
#  104|   	__intcall(0x10, &ireg, &oreg);

Error: COMPILER_WARNING: [#def505]
syslinux-6.04-pre1/core/include/bios.h:42:16: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘volatile uint16_t[0]’ {aka ‘volatile short unsigned int[]’}
#   42 |         return *(volatile uint16_t *)BIOS_fbm;
#      |                ^
cc1: note: source object is likely at address zero
#   40|   static inline uint16_t bios_fbm(void)
#   41|   {
#   42|-> 	return *(volatile uint16_t *)BIOS_fbm;
#   43|   }
#   44|   

Error: COMPILER_WARNING: [#def506]
syslinux-6.04-pre1/core/include/bios.h:47:40: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘volatile uint16_t[0]’ {aka ‘volatile short unsigned int[]’}
#   47 |         *(volatile uint16_t *)BIOS_fbm = mem;
#      |         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
cc1: note: source object is likely at address zero
#   45|   static inline void set_bios_fbm(uint16_t mem)
#   46|   {
#   47|-> 	*(volatile uint16_t *)BIOS_fbm = mem;
#   48|   }
#   49|   

Error: COMPILER_WARNING: [#def507]
syslinux-6.04-pre1/core/include/bios.h:104:24: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘const uint16_t[0]’ {aka ‘const short unsigned int[]’}
#  104 |     return serial_ports[port];
#      |            ~~~~~~~~~~~~^~~~~~
cc1: note: source object is likely at address zero
#  102|   
#  103|       /* Get the I/O port from the BIOS */
#  104|->     return serial_ports[port];
#  105|   }
#  106|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def508]
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:1000:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘useg’
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:892:1: enter_function: entry to ‘tcp_output’
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:904:6: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:908:9: branch_false: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:926:6: branch_false: following ‘false’ branch (when ‘useg’ is NULL)...
 branch_false: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:952:10: branch_true: following ‘true’ branch (when ‘seg’ is non-NULL)...
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:953:10: branch_true: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:952:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:954:5: branch_true: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:954:5: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:963:9: branch_false: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:963:9: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:976:19: branch_true: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:983:5: call_function: calling ‘tcp_output_segment’ from ‘tcp_output’
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:983:5: return_function: returning to ‘tcp_output’ from ‘tcp_output_segment’
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:989:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:990:7: branch_true: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:990:7: release_memory: ‘useg’ is NULL
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:992:10: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:1000:13: branch_false: ...to here
syslinux-6.04-pre1/core/lwip/src/core/tcp_out.c:1000:13: danger: dereference of NULL ‘useg’
#  998|            * of the unacked queue, but rather somewhere before it. We need to check for
#  999|            * this case. -STJ Jul 27, 2004 */
# 1000|->         if (TCP_SEQ_LT(ntohl(seg->tcphdr->seqno), ntohl(useg->tcphdr->seqno))) {
# 1001|             /* add segment to before tail of unacked list, keeping the list sorted */
# 1002|             struct tcp_seg **cur_seg = &(pcb->unacked);

Error: COMPILER_WARNING (CWE-704): [#def509]
syslinux-6.04-pre1/core/mem/init.c: scope_hint: In function ‘scan_highmem_area’
syslinux-6.04-pre1/core/mem/init.c:37:22: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   37 |                 fp = (struct free_arena_header *)start;
#      |                      ^
#   35|   
#   36|   	if (len >= 2 * sizeof(struct arena_header)) {
#   37|-> 		fp = (struct free_arena_header *)start;
#   38|   		fp->a.attrs = ARENA_TYPE_USED | (HEAP_MAIN << ARENA_HEAP_POS);
#   39|   #ifdef DEBUG_MALLOC

Error: COMPILER_WARNING (CWE-704): [#def510]
syslinux-6.04-pre1/core/mem/init.c:37:22: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   35|   
#   36|   	if (len >= 2 * sizeof(struct arena_header)) {
#   37|-> 		fp = (struct free_arena_header *)start;
#   38|   		fp->a.attrs = ARENA_TYPE_USED | (HEAP_MAIN << ARENA_HEAP_POS);
#   39|   #ifdef DEBUG_MALLOC

Error: GCC_ANALYZER_WARNING (CWE-401): [#def511]
syslinux-6.04-pre1/core/mem/malloc.c:113:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(size)’
syslinux-6.04-pre1/core/mem/malloc.c:131:7: enter_function: entry to ‘bios_realloc’
syslinux-6.04-pre1/core/mem/malloc.c:139:8: branch_true: following ‘true’ branch (when ‘ptr’ is NULL)...
syslinux-6.04-pre1/core/mem/malloc.c:140:16: branch_true: ...to here
syslinux-6.04-pre1/core/mem/malloc.c:140:16: acquire_memory: allocated here
syslinux-6.04-pre1/core/mem/malloc.c:140:16: call_function: calling ‘malloc’ from ‘bios_realloc’
#  111|   __export void *malloc(size_t size)
#  112|   {
#  113|->     return _malloc(size, HEAP_MAIN, MALLOC_CORE);
#  114|   }
#  115|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def512]
syslinux-6.04-pre1/core/mem/malloc.c:113:12: warning[-Wanalyzer-malloc-leak]: leak of ‘newptr’
syslinux-6.04-pre1/core/mem/malloc.c:131:7: enter_function: entry to ‘bios_realloc’
syslinux-6.04-pre1/core/mem/malloc.c:139:8: branch_false: following ‘false’ branch (when ‘ptr’ is non-NULL)...
syslinux-6.04-pre1/core/mem/malloc.c:142:8: branch_false: ...to here
syslinux-6.04-pre1/core/mem/malloc.c:142:8: branch_false: following ‘false’ branch (when ‘size != 0’)...
syslinux-6.04-pre1/core/mem/malloc.c:147:5: branch_false: ...to here
syslinux-6.04-pre1/core/mem/malloc.c:187:12: branch_false: following ‘false’ branch (when ‘xsize < newsize’)...
syslinux-6.04-pre1/core/mem/malloc.c:232:13: branch_false: ...to here
syslinux-6.04-pre1/core/mem/malloc.c:233:22: acquire_memory: allocated here
syslinux-6.04-pre1/core/mem/malloc.c:233:22: call_function: calling ‘malloc’ from ‘bios_realloc’
#  111|   __export void *malloc(size_t size)
#  112|   {
#  113|->     return _malloc(size, HEAP_MAIN, MALLOC_CORE);
#  114|   }
#  115|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def513]
syslinux-6.04-pre1/core/mem/malloc.c:113:12: warning[-Wanalyzer-malloc-leak]: leak of ‘ptr’
syslinux-6.04-pre1/core/mem/malloc.c:248:16: enter_function: entry to ‘zalloc’
syslinux-6.04-pre1/core/mem/malloc.c:252:11: acquire_memory: allocated here
syslinux-6.04-pre1/core/mem/malloc.c:252:11: call_function: calling ‘malloc’ from ‘zalloc’
#  111|   __export void *malloc(size_t size)
#  112|   {
#  113|->     return _malloc(size, HEAP_MAIN, MALLOC_CORE);
#  114|   }
#  115|   

Error: COMPILER_WARNING: [#def514]
syslinux-6.04-pre1/core/plaincon.c: scope_hint: In function ‘writechr’
syslinux-6.04-pre1/core/plaincon.c:30:25: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   30 |         ireg.ebx.b[1] = *(uint8_t *)BIOS_page; /* current page */
cc1: note: source object is likely at address zero
#   28|   	ireg.eax.b[1] = 0xE;
#   29|   	ireg.ebx.b[0] = 0x07;	/* attribute */
#   30|-> 	ireg.ebx.b[1] = *(uint8_t *)BIOS_page; /* current page */
#   31|   	__intcall(0x10, &ireg, &oreg);
#   32|   }

Error: COMPILER_WARNING: [#def515]
syslinux-6.04-pre1/core/rawcon.c:28:33: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   28 |                 ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
cc1: note: source object is likely at address zero
#   26|   
#   27|                   memset(&ireg, 0, sizeof ireg);
#   28|-> 		ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
#   29|   		ireg.eax.b[1] = 0x03; /* Read cursor position */
#   30|   		__intcall(0x10, &ireg, &oreg);

Error: COMPILER_WARNING: [#def516]
syslinux-6.04-pre1/core/rawcon.c:58:41: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   58 |                         ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
cc1: note: source object is likely at address zero
#   56|   			dx = ireg.edx.w[0];
#   57|   
#   58|-> 			ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
#   59|   			ireg.ebx.b[0] = 0x07; /* White on black */
#   60|   			ireg.ecx.w[0] = 1;    /* One only */

Error: COMPILER_WARNING: [#def517]
syslinux-6.04-pre1/core/rawcon.c:75:41: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   75 |                         ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
cc1: note: source object is likely at address zero
#   73|   			/* Scroll */
#   74|   			ireg.edx.b[1]--;
#   75|-> 			ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
#   76|   			ireg.eax.b[1] = 0x02;
#   77|   			__intcall(0x10, &ireg, NULL);

Error: COMPILER_WARNING: [#def518]
syslinux-6.04-pre1/core/rawcon.c:85:41: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   85 |                         ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
cc1: note: source object is likely at address zero
#   83|   			__intcall(0x10, &ireg, NULL);
#   84|   		} else {
#   85|-> 			ireg.ebx.b[1] = *(uint8_t *)BIOS_page;
#   86|   			ireg.eax.b[1] = 0x02; /* Set cursor position */
#   87|   			__intcall(0x10, &ireg, NULL);

Error: COMPILER_WARNING (CWE-704): [#def519]
syslinux-6.04-pre1/core/rllpack.c: scope_hint: In function ‘rllpack’
syslinux-6.04-pre1/core/rllpack.c:36:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   36 |     uint8_t *i = (uint8_t *) (regs->esi.l);
#      |                  ^
#   34|   void rllpack(com32sys_t * regs)
#   35|   {
#   36|->     uint8_t *i = (uint8_t *) (regs->esi.l);
#   37|       uint8_t *o = (uint8_t *) (regs->edi.l);
#   38|       size_t cnt = regs->ecx.l;

Error: COMPILER_WARNING (CWE-704): [#def520]
syslinux-6.04-pre1/core/rllpack.c:36:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   34|   void rllpack(com32sys_t * regs)
#   35|   {
#   36|->     uint8_t *i = (uint8_t *) (regs->esi.l);
#   37|       uint8_t *o = (uint8_t *) (regs->edi.l);
#   38|       size_t cnt = regs->ecx.l;

Error: COMPILER_WARNING (CWE-704): [#def521]
syslinux-6.04-pre1/core/rllpack.c:37:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   37 |     uint8_t *o = (uint8_t *) (regs->edi.l);
#      |                  ^
#   35|   {
#   36|       uint8_t *i = (uint8_t *) (regs->esi.l);
#   37|->     uint8_t *o = (uint8_t *) (regs->edi.l);
#   38|       size_t cnt = regs->ecx.l;
#   39|       size_t run, vrun, tcnt;

Error: COMPILER_WARNING (CWE-704): [#def522]
syslinux-6.04-pre1/core/rllpack.c:37:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   35|   {
#   36|       uint8_t *i = (uint8_t *) (regs->esi.l);
#   37|->     uint8_t *o = (uint8_t *) (regs->edi.l);
#   38|       size_t cnt = regs->ecx.l;
#   39|       size_t run, vrun, tcnt;

Error: COMPILER_WARNING (CWE-704): [#def523]
syslinux-6.04-pre1/core/rllpack.c: scope_hint: In function ‘rllunpack’
syslinux-6.04-pre1/core/rllpack.c:82:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   82 |     uint8_t *i = (uint8_t *) regs->esi.l;
#      |                  ^
#   80|   void rllunpack(com32sys_t * regs)
#   81|   {
#   82|->     uint8_t *i = (uint8_t *) regs->esi.l;
#   83|       uint8_t *o = (uint8_t *) regs->edi.l;
#   84|       uint8_t c;

Error: COMPILER_WARNING (CWE-704): [#def524]
syslinux-6.04-pre1/core/rllpack.c:82:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   80|   void rllunpack(com32sys_t * regs)
#   81|   {
#   82|->     uint8_t *i = (uint8_t *) regs->esi.l;
#   83|       uint8_t *o = (uint8_t *) regs->edi.l;
#   84|       uint8_t c;

Error: COMPILER_WARNING (CWE-704): [#def525]
syslinux-6.04-pre1/core/rllpack.c:83:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   83 |     uint8_t *o = (uint8_t *) regs->edi.l;
#      |                  ^
#   81|   {
#   82|       uint8_t *i = (uint8_t *) regs->esi.l;
#   83|->     uint8_t *o = (uint8_t *) regs->edi.l;
#   84|       uint8_t c;
#   85|       size_t n;

Error: COMPILER_WARNING (CWE-704): [#def526]
syslinux-6.04-pre1/core/rllpack.c:83:18: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   81|   {
#   82|       uint8_t *i = (uint8_t *) regs->esi.l;
#   83|->     uint8_t *o = (uint8_t *) regs->edi.l;
#   84|       uint8_t c;
#   85|       size_t n;

Error: COMPILER_WARNING (CWE-704): [#def527]
syslinux-6.04-pre1/core/serirq.c: scope_hint: In function ‘irq_common’
syslinux-6.04-pre1/core/serirq.c:47:16: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   47 |         next = (irqhandler_t)oldirq[old_irq];
#      |                ^
#   45|   
#   46|   	dst = SerialHead;
#   47|-> 	next = (irqhandler_t)oldirq[old_irq];
#   48|   
#   49|   	/* LSR */

Error: COMPILER_WARNING (CWE-704): [#def528]
syslinux-6.04-pre1/core/serirq.c:47:16: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
#   45|   
#   46|   	dst = SerialHead;
#   47|-> 	next = (irqhandler_t)oldirq[old_irq];
#   48|   
#   49|   	/* LSR */

Error: COMPILER_WARNING: [#def529]
syslinux-6.04-pre1/core/serirq.c:106:24: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  106 |                 *dst++ = (uint32_t)serstub_irq0;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  104|   {
#  105|   	if (first) {
#  106|-> 		*dst++ = (uint32_t)serstub_irq0;
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;

Error: COMPILER_WARNING (CWE-704): [#def530]
syslinux-6.04-pre1/core/serirq.c: scope_hint: In function ‘install_irq_vectors’
syslinux-6.04-pre1/core/serirq.c:106:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  106 |                 *dst++ = (uint32_t)serstub_irq0;
#      |                          ^
#  104|   {
#  105|   	if (first) {
#  106|-> 		*dst++ = (uint32_t)serstub_irq0;
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;

Error: COMPILER_WARNING (CWE-704): [#def531]
syslinux-6.04-pre1/core/serirq.c:106:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  104|   {
#  105|   	if (first) {
#  106|-> 		*dst++ = (uint32_t)serstub_irq0;
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;

Error: COMPILER_WARNING: [#def532]
syslinux-6.04-pre1/core/serirq.c:107:24: warning[-Warray-bounds=]: array subscript 1 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  107 |                 *dst++ = (uint32_t)serstub_irq1;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  105|   	if (first) {
#  106|   		*dst++ = (uint32_t)serstub_irq0;
#  107|-> 		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;

Error: COMPILER_WARNING (CWE-704): [#def533]
syslinux-6.04-pre1/core/serirq.c:107:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  107 |                 *dst++ = (uint32_t)serstub_irq1;
#      |                          ^
#  105|   	if (first) {
#  106|   		*dst++ = (uint32_t)serstub_irq0;
#  107|-> 		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;

Error: COMPILER_WARNING (CWE-704): [#def534]
syslinux-6.04-pre1/core/serirq.c:107:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  105|   	if (first) {
#  106|   		*dst++ = (uint32_t)serstub_irq0;
#  107|-> 		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;

Error: COMPILER_WARNING: [#def535]
syslinux-6.04-pre1/core/serirq.c:108:24: warning[-Warray-bounds=]: array subscript 2 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  108 |                 *dst++ = (uint32_t)serstub_irq2;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  106|   		*dst++ = (uint32_t)serstub_irq0;
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|-> 		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;

Error: COMPILER_WARNING (CWE-704): [#def536]
syslinux-6.04-pre1/core/serirq.c:108:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  108 |                 *dst++ = (uint32_t)serstub_irq2;
#      |                          ^
#  106|   		*dst++ = (uint32_t)serstub_irq0;
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|-> 		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;

Error: COMPILER_WARNING (CWE-704): [#def537]
syslinux-6.04-pre1/core/serirq.c:108:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  106|   		*dst++ = (uint32_t)serstub_irq0;
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|-> 		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;

Error: COMPILER_WARNING: [#def538]
syslinux-6.04-pre1/core/serirq.c:109:24: warning[-Warray-bounds=]: array subscript 3 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  109 |                 *dst++ = (uint32_t)serstub_irq3;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|-> 		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;

Error: COMPILER_WARNING (CWE-704): [#def539]
syslinux-6.04-pre1/core/serirq.c:109:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  109 |                 *dst++ = (uint32_t)serstub_irq3;
#      |                          ^
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|-> 		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;

Error: COMPILER_WARNING (CWE-704): [#def540]
syslinux-6.04-pre1/core/serirq.c:109:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  107|   		*dst++ = (uint32_t)serstub_irq1;
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|-> 		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;

Error: COMPILER_WARNING: [#def541]
syslinux-6.04-pre1/core/serirq.c:110:24: warning[-Warray-bounds=]: array subscript 4 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  110 |                 *dst++ = (uint32_t)serstub_irq4;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|-> 		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;

Error: COMPILER_WARNING (CWE-704): [#def542]
syslinux-6.04-pre1/core/serirq.c:110:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  110 |                 *dst++ = (uint32_t)serstub_irq4;
#      |                          ^
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|-> 		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;

Error: COMPILER_WARNING (CWE-704): [#def543]
syslinux-6.04-pre1/core/serirq.c:110:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  108|   		*dst++ = (uint32_t)serstub_irq2;
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|-> 		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;

Error: COMPILER_WARNING: [#def544]
syslinux-6.04-pre1/core/serirq.c:111:24: warning[-Warray-bounds=]: array subscript 5 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  111 |                 *dst++ = (uint32_t)serstub_irq5;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|-> 		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;
#  113|   		*dst++ = (uint32_t)serstub_irq7;

Error: COMPILER_WARNING (CWE-704): [#def545]
syslinux-6.04-pre1/core/serirq.c:111:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  111 |                 *dst++ = (uint32_t)serstub_irq5;
#      |                          ^
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|-> 		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;
#  113|   		*dst++ = (uint32_t)serstub_irq7;

Error: COMPILER_WARNING (CWE-704): [#def546]
syslinux-6.04-pre1/core/serirq.c:111:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  109|   		*dst++ = (uint32_t)serstub_irq3;
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|-> 		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;
#  113|   		*dst++ = (uint32_t)serstub_irq7;

Error: COMPILER_WARNING: [#def547]
syslinux-6.04-pre1/core/serirq.c:112:24: warning[-Warray-bounds=]: array subscript 6 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  112 |                 *dst++ = (uint32_t)serstub_irq6;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|-> 		*dst++ = (uint32_t)serstub_irq6;
#  113|   		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {

Error: COMPILER_WARNING (CWE-704): [#def548]
syslinux-6.04-pre1/core/serirq.c:112:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  112 |                 *dst++ = (uint32_t)serstub_irq6;
#      |                          ^
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|-> 		*dst++ = (uint32_t)serstub_irq6;
#  113|   		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {

Error: COMPILER_WARNING (CWE-704): [#def549]
syslinux-6.04-pre1/core/serirq.c:112:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  110|   		*dst++ = (uint32_t)serstub_irq4;
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|-> 		*dst++ = (uint32_t)serstub_irq6;
#  113|   		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {

Error: COMPILER_WARNING: [#def550]
syslinux-6.04-pre1/core/serirq.c:113:24: warning[-Warray-bounds=]: array subscript 7 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  113 |                 *dst++ = (uint32_t)serstub_irq7;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;
#  113|-> 		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {
#  115|   		*dst++ = (uint32_t)serstub_irq8;

Error: COMPILER_WARNING (CWE-704): [#def551]
syslinux-6.04-pre1/core/serirq.c:113:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  113 |                 *dst++ = (uint32_t)serstub_irq7;
#      |                          ^
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;
#  113|-> 		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {
#  115|   		*dst++ = (uint32_t)serstub_irq8;

Error: COMPILER_WARNING (CWE-704): [#def552]
syslinux-6.04-pre1/core/serirq.c:113:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  111|   		*dst++ = (uint32_t)serstub_irq5;
#  112|   		*dst++ = (uint32_t)serstub_irq6;
#  113|-> 		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {
#  115|   		*dst++ = (uint32_t)serstub_irq8;

Error: COMPILER_WARNING: [#def553]
syslinux-6.04-pre1/core/serirq.c:115:24: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  115 |                 *dst++ = (uint32_t)serstub_irq8;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  113|   		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {
#  115|-> 		*dst++ = (uint32_t)serstub_irq8;
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;

Error: COMPILER_WARNING (CWE-704): [#def554]
syslinux-6.04-pre1/core/serirq.c:115:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  115 |                 *dst++ = (uint32_t)serstub_irq8;
#      |                          ^
#  113|   		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {
#  115|-> 		*dst++ = (uint32_t)serstub_irq8;
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;

Error: COMPILER_WARNING (CWE-704): [#def555]
syslinux-6.04-pre1/core/serirq.c:115:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  113|   		*dst++ = (uint32_t)serstub_irq7;
#  114|   	} else {
#  115|-> 		*dst++ = (uint32_t)serstub_irq8;
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;

Error: COMPILER_WARNING: [#def556]
syslinux-6.04-pre1/core/serirq.c:116:24: warning[-Warray-bounds=]: array subscript 1 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  116 |                 *dst++ = (uint32_t)serstub_irq9;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  114|   	} else {
#  115|   		*dst++ = (uint32_t)serstub_irq8;
#  116|-> 		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;

Error: COMPILER_WARNING (CWE-704): [#def557]
syslinux-6.04-pre1/core/serirq.c:116:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  116 |                 *dst++ = (uint32_t)serstub_irq9;
#      |                          ^
#  114|   	} else {
#  115|   		*dst++ = (uint32_t)serstub_irq8;
#  116|-> 		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;

Error: COMPILER_WARNING (CWE-704): [#def558]
syslinux-6.04-pre1/core/serirq.c:116:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  114|   	} else {
#  115|   		*dst++ = (uint32_t)serstub_irq8;
#  116|-> 		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;

Error: COMPILER_WARNING: [#def559]
syslinux-6.04-pre1/core/serirq.c:117:24: warning[-Warray-bounds=]: array subscript 2 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  117 |                 *dst++ = (uint32_t)serstub_irq10;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  115|   		*dst++ = (uint32_t)serstub_irq8;
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|-> 		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;

Error: COMPILER_WARNING (CWE-704): [#def560]
syslinux-6.04-pre1/core/serirq.c:117:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  117 |                 *dst++ = (uint32_t)serstub_irq10;
#      |                          ^
#  115|   		*dst++ = (uint32_t)serstub_irq8;
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|-> 		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;

Error: COMPILER_WARNING (CWE-704): [#def561]
syslinux-6.04-pre1/core/serirq.c:117:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  115|   		*dst++ = (uint32_t)serstub_irq8;
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|-> 		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;

Error: COMPILER_WARNING: [#def562]
syslinux-6.04-pre1/core/serirq.c:118:24: warning[-Warray-bounds=]: array subscript 3 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  118 |                 *dst++ = (uint32_t)serstub_irq11;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|-> 		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;

Error: COMPILER_WARNING (CWE-704): [#def563]
syslinux-6.04-pre1/core/serirq.c:118:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  118 |                 *dst++ = (uint32_t)serstub_irq11;
#      |                          ^
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|-> 		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;

Error: COMPILER_WARNING (CWE-704): [#def564]
syslinux-6.04-pre1/core/serirq.c:118:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  116|   		*dst++ = (uint32_t)serstub_irq9;
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|-> 		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;

Error: COMPILER_WARNING: [#def565]
syslinux-6.04-pre1/core/serirq.c:119:24: warning[-Warray-bounds=]: array subscript 4 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  119 |                 *dst++ = (uint32_t)serstub_irq12;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|-> 		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;

Error: COMPILER_WARNING (CWE-704): [#def566]
syslinux-6.04-pre1/core/serirq.c:119:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  119 |                 *dst++ = (uint32_t)serstub_irq12;
#      |                          ^
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|-> 		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;

Error: COMPILER_WARNING (CWE-704): [#def567]
syslinux-6.04-pre1/core/serirq.c:119:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  117|   		*dst++ = (uint32_t)serstub_irq10;
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|-> 		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;

Error: COMPILER_WARNING: [#def568]
syslinux-6.04-pre1/core/serirq.c:120:24: warning[-Warray-bounds=]: array subscript 5 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  120 |                 *dst++ = (uint32_t)serstub_irq13;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|-> 		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;
#  122|   		*dst++ = (uint32_t)serstub_irq15;

Error: COMPILER_WARNING (CWE-704): [#def569]
syslinux-6.04-pre1/core/serirq.c:120:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  120 |                 *dst++ = (uint32_t)serstub_irq13;
#      |                          ^
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|-> 		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;
#  122|   		*dst++ = (uint32_t)serstub_irq15;

Error: COMPILER_WARNING (CWE-704): [#def570]
syslinux-6.04-pre1/core/serirq.c:120:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  118|   		*dst++ = (uint32_t)serstub_irq11;
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|-> 		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;
#  122|   		*dst++ = (uint32_t)serstub_irq15;

Error: COMPILER_WARNING: [#def571]
syslinux-6.04-pre1/core/serirq.c:121:24: warning[-Warray-bounds=]: array subscript 6 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  121 |                 *dst++ = (uint32_t)serstub_irq14;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|-> 		*dst++ = (uint32_t)serstub_irq14;
#  122|   		*dst++ = (uint32_t)serstub_irq15;
#  123|   	}

Error: COMPILER_WARNING (CWE-704): [#def572]
syslinux-6.04-pre1/core/serirq.c:121:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  121 |                 *dst++ = (uint32_t)serstub_irq14;
#      |                          ^
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|-> 		*dst++ = (uint32_t)serstub_irq14;
#  122|   		*dst++ = (uint32_t)serstub_irq15;
#  123|   	}

Error: COMPILER_WARNING (CWE-704): [#def573]
syslinux-6.04-pre1/core/serirq.c:121:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  119|   		*dst++ = (uint32_t)serstub_irq12;
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|-> 		*dst++ = (uint32_t)serstub_irq14;
#  122|   		*dst++ = (uint32_t)serstub_irq15;
#  123|   	}

Error: COMPILER_WARNING: [#def574]
syslinux-6.04-pre1/core/serirq.c:122:24: warning[-Warray-bounds=]: array subscript 7 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#  122 |                 *dst++ = (uint32_t)serstub_irq15;
#      |                 ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;
#  122|-> 		*dst++ = (uint32_t)serstub_irq15;
#  123|   	}
#  124|   }

Error: COMPILER_WARNING (CWE-704): [#def575]
syslinux-6.04-pre1/core/serirq.c:122:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  122 |                 *dst++ = (uint32_t)serstub_irq15;
#      |                          ^
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;
#  122|-> 		*dst++ = (uint32_t)serstub_irq15;
#  123|   	}
#  124|   }

Error: COMPILER_WARNING (CWE-704): [#def576]
syslinux-6.04-pre1/core/serirq.c:122:26: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  120|   		*dst++ = (uint32_t)serstub_irq13;
#  121|   		*dst++ = (uint32_t)serstub_irq14;
#  122|-> 		*dst++ = (uint32_t)serstub_irq15;
#  123|   	}
#  124|   }

Error: GCC_ANALYZER_WARNING (CWE-787): [#def577]
syslinux-6.04-pre1/core/sysappend.c:98:20: warning[-Wanalyzer-out-of-bounds]: buffer overflow
syslinux-6.04-pre1/core/sysappend.c:82:6: enter_function: entry to ‘sysappend_set_uuid’
syslinux-6.04-pre1/core/sysappend.c:89:8: branch_false: following ‘false’ branch (when ‘src’ is non-NULL)...
syslinux-6.04-pre1/core/sysappend.c:89:18: call_function: inlined call to ‘is_valid_uuid’ from ‘sysappend_set_uuid’
syslinux-6.04-pre1/core/sysappend.c:89:9: branch_false: following ‘false’ branch...
 branch_false: ...to here
syslinux-6.04-pre1/core/sysappend.c:94:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/core/sysappend.c:95:13: branch_true: ...to here
syslinux-6.04-pre1/core/sysappend.c:97:16: branch_true: following ‘true’ branch (when ‘len != 0’)...
syslinux-6.04-pre1/core/sysappend.c:98:42: branch_true: ...to here
syslinux-6.04-pre1/core/sysappend.c:98:20: danger: out-of-bounds write from byte 45 till byte 52 but ‘sysuuid_str’ ends at byte 45
#   96|   	
#   97|   	while (len) {
#   98|-> 	    dst += sprintf(dst, "%02x", *src++);
#   99|   	    len--;
#  100|   	}

Error: COMPILER_WARNING: [#def578]
syslinux-6.04-pre1/core/thread/schedule.c:8:9: warning: ‘dprintf’ redefined
#    8 | #define dprintf
#      |         ^~~~~~~
syslinux-6.04-pre1/core/include/core.h:10: included_from: Included from here.
syslinux-6.04-pre1/core/thread/schedule.c:4: included_from: Included from here.
syslinux-6.04-pre1/com32/include/dprintf.h:30:9: note: this is the location of the previous definition
#   30 | #define dprintf(...) \
#      |         ^~~~~~~
#    6|   
#    7|   #ifndef DEBUG_THREAD
#    8|-> #define dprintf
#    9|   #endif
#   10|   

Error: COMPILER_WARNING: [#def579]
syslinux-6.04-pre1/core/thread/schedule.c:8:9: warning[warning]: ‘dprintf’ redefined
#    6|   
#    7|   #ifndef DEBUG_THREAD
#    8|-> #define dprintf
#    9|   #endif
#   10|   

Error: COMPILER_WARNING (CWE-563): [#def580]
syslinux-6.04-pre1/core/thread/schedule.c: scope_hint: In function ‘__schedule’
syslinux-6.04-pre1/core/thread/schedule.c:36:12: warning[-Wunused-value]: statement with no effect
#   36 |     dprintf("Schedule ");
#      |            ^
#   34|   	return;
#   35|   
#   36|->     dprintf("Schedule ");
#   37|   
#   38|       /* Possibly update the information on which we make

Error: COMPILER_WARNING (CWE-563): [#def581]
syslinux-6.04-pre1/core/thread/schedule.c:56:72: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   56 |             dprintf("Invalid thread on thread list %p magic = 0x%08x\n",
#      |                                                                        ^
#   54|       do {
#   55|   	if (__unlikely(nt->thread_magic != THREAD_MAGIC)) {
#   56|-> 	    dprintf("Invalid thread on thread list %p magic = 0x%08x\n",
#   57|   		    nt, nt->thread_magic);
#   58|   	    kaboom();

Error: COMPILER_WARNING (CWE-563): [#def582]
syslinux-6.04-pre1/core/thread/schedule.c:57:23: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   57 |                     nt, nt->thread_magic);
#      |                       ^
#   55|   	if (__unlikely(nt->thread_magic != THREAD_MAGIC)) {
#   56|   	    dprintf("Invalid thread on thread list %p magic = 0x%08x\n",
#   57|-> 		    nt, nt->thread_magic);
#   58|   	    kaboom();
#   59|   	}

Error: COMPILER_WARNING (CWE-563): [#def583]
syslinux-6.04-pre1/core/thread/schedule.c:57:23: warning[-Wunused-value]: statement with no effect
#   56 |             dprintf("Invalid thread on thread list %p magic = 0x%08x\n",
#      |                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   57 |                     nt, nt->thread_magic);
#      |                     ~~^~~~~~~~~~~~~~~~~~~
#   55|   	if (__unlikely(nt->thread_magic != THREAD_MAGIC)) {
#   56|   	    dprintf("Invalid thread on thread list %p magic = 0x%08x\n",
#   57|-> 		    nt, nt->thread_magic);
#   58|   	    kaboom();
#   59|   	}

Error: COMPILER_WARNING (CWE-563): [#def584]
syslinux-6.04-pre1/core/thread/schedule.c:61:34: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   61 |         dprintf("Thread %p (%s) ", nt, nt->name);
#      |                                  ^
#   59|   	}
#   60|   
#   61|-> 	dprintf("Thread %p (%s) ", nt, nt->name);
#   62|   	if (!nt->blocked) {
#   63|   	    dprintf("runnable priority %d\n", nt->prio);

Error: COMPILER_WARNING (CWE-563): [#def585]
syslinux-6.04-pre1/core/thread/schedule.c:61:38: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   61 |         dprintf("Thread %p (%s) ", nt, nt->name);
#      |                                      ^
#   59|   	}
#   60|   
#   61|-> 	dprintf("Thread %p (%s) ", nt, nt->name);
#   62|   	if (!nt->blocked) {
#   63|   	    dprintf("runnable priority %d\n", nt->prio);

Error: COMPILER_WARNING (CWE-563): [#def586]
syslinux-6.04-pre1/core/thread/schedule.c:61:38: warning[-Wunused-value]: statement with no effect
#   61 |         dprintf("Thread %p (%s) ", nt, nt->name);
#      |                ~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~
#   59|   	}
#   60|   
#   61|-> 	dprintf("Thread %p (%s) ", nt, nt->name);
#   62|   	if (!nt->blocked) {
#   63|   	    dprintf("runnable priority %d\n", nt->prio);

Error: COMPILER_WARNING (CWE-563): [#def587]
syslinux-6.04-pre1/core/thread/schedule.c:63:45: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   63 |             dprintf("runnable priority %d\n", nt->prio);
#      |                                             ^
#   61|   	dprintf("Thread %p (%s) ", nt, nt->name);
#   62|   	if (!nt->blocked) {
#   63|-> 	    dprintf("runnable priority %d\n", nt->prio);
#   64|   	    if (!best || nt->prio < best->prio)
#   65|   		best = nt;

Error: COMPILER_WARNING (CWE-563): [#def588]
syslinux-6.04-pre1/core/thread/schedule.c:63:45: warning[-Wunused-value]: statement with no effect
#   63 |             dprintf("runnable priority %d\n", nt->prio);
#      |                    ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~
#   61|   	dprintf("Thread %p (%s) ", nt, nt->name);
#   62|   	if (!nt->blocked) {
#   63|-> 	    dprintf("runnable priority %d\n", nt->prio);
#   64|   	    if (!best || nt->prio < best->prio)
#   65|   		best = nt;

Error: COMPILER_WARNING (CWE-563): [#def589]
syslinux-6.04-pre1/core/thread/schedule.c:67:20: warning[-Wunused-value]: statement with no effect
#   67 |             dprintf("blocked\n");
#      |                    ^
#   65|   		best = nt;
#   66|   	} else {
#   67|-> 	    dprintf("blocked\n");
#   68|   	}
#   69|   	nt = container_of(nt->list.next, struct thread, list);

Error: COMPILER_WARNING (CWE-563): [#def590]
syslinux-6.04-pre1/core/thread/schedule.c:80:38: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   80 |         dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#      |                                      ^
#   78|   	asm volatile("rdtsc" : "=A" (tsc));
#   79|   	
#   80|-> 	dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#   81|   	__switch_to(best);
#   82|       } else {

Error: COMPILER_WARNING (CWE-563): [#def591]
syslinux-6.04-pre1/core/thread/schedule.c:80:43: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   80 |         dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#      |                                           ^
#   78|   	asm volatile("rdtsc" : "=A" (tsc));
#   79|   	
#   80|-> 	dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#   81|   	__switch_to(best);
#   82|       } else {

Error: COMPILER_WARNING (CWE-563): [#def592]
syslinux-6.04-pre1/core/thread/schedule.c:80:49: warning[-Wunused-value]: left-hand operand of comma expression has no effect
#   80 |         dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#      |                                                 ^
#   78|   	asm volatile("rdtsc" : "=A" (tsc));
#   79|   	
#   80|-> 	dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#   81|   	__switch_to(best);
#   82|       } else {

Error: COMPILER_WARNING (CWE-563): [#def593]
syslinux-6.04-pre1/core/thread/schedule.c:80:49: warning[-Wunused-value]: statement with no effect
#   80 |         dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#      |                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~
#   78|   	asm volatile("rdtsc" : "=A" (tsc));
#   79|   	
#   80|-> 	dprintf("@ %llu -> %p (%s)\n", tsc, best, best->name);
#   81|   	__switch_to(best);
#   82|       } else {

Error: COMPILER_WARNING (CWE-563): [#def594]
syslinux-6.04-pre1/core/thread/schedule.c:83:16: warning[-Wunused-value]: statement with no effect
#   83 |         dprintf("no change\n");
#      |                ^
#   81|   	__switch_to(best);
#   82|       } else {
#   83|-> 	dprintf("no change\n");
#   84|       }
#   85|   }

Error: COMPILER_WARNING (CWE-465): [#def595]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:61:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   59|       int rootdirents, clustersize;
#   60|   
#   61|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#   62|   
#   63|       clustersize = get_8(&sectbuf->bsSecPerClust);

Error: COMPILER_WARNING (CWE-465): [#def596]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:67:22: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   65|   	return "impossible cluster size on an FAT volume";
#   66|   
#   67|->     sectors = get_16(&sectbuf->bsSectors);
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   

Error: COMPILER_WARNING (CWE-465): [#def597]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:68:42: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   66|   
#   67|       sectors = get_16(&sectbuf->bsSectors);
#   68|->     sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);

Error: COMPILER_WARNING (CWE-465): [#def598]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:70:33: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|->     dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);

Error: COMPILER_WARNING (CWE-465): [#def599]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:72:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def600]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:73:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);
#   75|       dsectors -= fatsectors;

Error: COMPILER_WARNING (CWE-465): [#def601]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:77:26: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   75|       dsectors -= fatsectors;
#   76|   
#   77|->     rootdirents = get_16(&sectbuf->bsRootDirEnts);
#   78|       dsectors -= (rootdirents + sectorsize / 32 - 1) / sectorsize;
#   79|   

Error: COMPILER_WARNING (CWE-465): [#def602]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:85:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   83|       clusters = dsectors / clustersize;
#   84|   
#   85|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def603]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:86:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   84|   
#   85|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);
#   88|   

Error: COMPILER_WARNING (CWE-465): [#def604]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:94:21: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   92|       if (clusters < 0xFFF5) {
#   93|   	/* FAT12 or FAT16 */
#   94|-> 	if (!get_16(&sectbuf->bsFATsecs))
#   95|   	    return "zero FAT sectors (FAT12/16)";
#   96|   

Error: COMPILER_WARNING (CWE-465): [#def605]
syslinux-6.04-pre1/dos/../libinstaller/fs.c:160:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  158|   	return "invalid media signature (not an FAT/NTFS volume?)";
#  159|   
#  160|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#  161|       if (sectorsize == SECTOR_SIZE) ;	/* ok */
#  162|       else if (sectorsize >= 512 && sectorsize <= 4096 &&

Error: COMPILER_WARNING (CWE-465): [#def606]
syslinux-6.04-pre1/dos/../libinstaller/syslxmod.c:61:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   59|   	    }
#   60|   
#   61|-> 	    set_64_sl(&ex->lba, lba);
#   62|   	    set_16_sl(&ex->len, len);
#   63|   	    ex++;

Error: COMPILER_WARNING (CWE-465): [#def607]
syslinux-6.04-pre1/dos/../libinstaller/syslxmod.c:62:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   60|   
#   61|   	    set_64_sl(&ex->lba, lba);
#   62|-> 	    set_16_sl(&ex->len, len);
#   63|   	    ex++;
#   64|   	}

Error: COMPILER_WARNING (CWE-465): [#def608]
syslinux-6.04-pre1/dos/../libinstaller/syslxmod.c:76:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   74|   
#   75|       if (len) {
#   76|-> 	set_64_sl(&ex->lba, lba);
#   77|   	set_16_sl(&ex->len, len);
#   78|   	ex++;

Error: COMPILER_WARNING (CWE-465): [#def609]
syslinux-6.04-pre1/dos/../libinstaller/syslxmod.c:77:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   75|       if (len) {
#   76|   	set_64_sl(&ex->lba, lba);
#   77|-> 	set_16_sl(&ex->len, len);
#   78|   	ex++;
#   79|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def610]
syslinux-6.04-pre1/dos/malloc.c:78:12: warning[-Wanalyzer-malloc-leak]: leak of ‘p’
syslinux-6.04-pre1/dos/malloc.c:103:7: enter_function: entry to ‘calloc’
syslinux-6.04-pre1/dos/malloc.c:107:9: acquire_memory: allocated here
syslinux-6.04-pre1/dos/malloc.c:107:9: call_function: calling ‘malloc’ from ‘calloc’
#   76|       }
#   77|   
#   78|->     return (void *)(&fp->a + 1);
#   79|   }
#   80|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def611]
syslinux-6.04-pre1/dos/malloc.c:85:8: warning[-Wanalyzer-malloc-leak]: leak of ‘p’
syslinux-6.04-pre1/dos/malloc.c:103:7: enter_function: entry to ‘calloc’
syslinux-6.04-pre1/dos/malloc.c:107:9: acquire_memory: allocated here
syslinux-6.04-pre1/dos/malloc.c:107:9: call_function: calling ‘malloc’ from ‘calloc’
#   83|       struct free_arena_header *fp;
#   84|   
#   85|->     if (size == 0)
#   86|   	return NULL;
#   87|   

Error: COMPILER_WARNING: [#def612]
syslinux-6.04-pre1/dos/printf.c: scope_hint: In function ‘vsprintf’
syslinux-6.04-pre1/dos/printf.c:249:19: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  249 |             flags |= LARGE;
#      |                   ^
syslinux-6.04-pre1/dos/printf.c:250:9: note: here
#  250 |         case 'x':
#      |         ^~~~
#  247|   
#  248|   	case 'X':
#  249|-> 	    flags |= LARGE;
#  250|   	case 'x':
#  251|   	    base = 16;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def613]
syslinux-6.04-pre1/dos/syslinux.c:89:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
syslinux-6.04-pre1/dos/syslinux.c:613:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/dos/syslinux.c:639:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:641:9: branch_false: ...to here
syslinux-6.04-pre1/dos/syslinux.c:641:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:641:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:658:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:664:5: call_function: calling ‘read_device’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:664:5: return_function: returning to ‘main’ from ‘read_device’
syslinux-6.04-pre1/dos/syslinux.c:670:8: branch_false: following ‘false’ branch (when ‘errmsg’ is NULL)...
syslinux-6.04-pre1/dos/syslinux.c:677:23: branch_false: ...to here
syslinux-6.04-pre1/dos/syslinux.c:681:10: acquire_resource: opened here
syslinux-6.04-pre1/dos/syslinux.c:681:10: call_function: calling ‘creat’ from ‘main’
#   87|       }
#   88|   
#   89|->     return rv;
#   90|   }
#   91|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def614]
syslinux-6.04-pre1/dos/syslinux.c:709:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘secp’
syslinux-6.04-pre1/dos/syslinux.c:613:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/dos/syslinux.c:639:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:641:9: branch_false: ...to here
syslinux-6.04-pre1/dos/syslinux.c:641:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:641:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:658:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:664:5: call_function: calling ‘read_device’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:664:5: return_function: returning to ‘main’ from ‘read_device’
syslinux-6.04-pre1/dos/syslinux.c:670:8: branch_false: following ‘false’ branch (when ‘errmsg’ is NULL)...
syslinux-6.04-pre1/dos/syslinux.c:677:23: branch_false: ...to here
syslinux-6.04-pre1/dos/syslinux.c:681:10: call_function: calling ‘creat’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:681:10: return_function: returning to ‘main’ from ‘creat’
syslinux-6.04-pre1/dos/syslinux.c:683:5: call_function: calling ‘write_file’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:683:5: return_function: returning to ‘main’ from ‘write_file’
syslinux-6.04-pre1/dos/syslinux.c:688:10: call_function: calling ‘creat’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:688:10: return_function: returning to ‘main’ from ‘creat’
syslinux-6.04-pre1/dos/syslinux.c:701:15: acquire_memory: this call could return NULL
syslinux-6.04-pre1/dos/syslinux.c:708:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/dos/syslinux.c:709:10: branch_true: ...to here
syslinux-6.04-pre1/dos/syslinux.c:709:9: danger: ‘secp’ could be NULL: unchecked value from [(35)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/34)
#  707|       s = libfat_clustertosector(fs, ldlinux_cluster);
#  708|       while (s && nsectors < ldlinux_sectors) {
#  709|-> 	*secp++ = s;
#  710|   	nsectors++;
#  711|   	s = libfat_nextsector(fs, s);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def615]
syslinux-6.04-pre1/dos/syslinux.c:737:42: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘secp’
syslinux-6.04-pre1/dos/syslinux.c:613:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/dos/syslinux.c:639:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:641:9: branch_false: ...to here
syslinux-6.04-pre1/dos/syslinux.c:641:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:641:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:658:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:664:5: call_function: calling ‘read_device’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:664:5: return_function: returning to ‘main’ from ‘read_device’
syslinux-6.04-pre1/dos/syslinux.c:670:8: branch_false: following ‘false’ branch (when ‘errmsg’ is NULL)...
syslinux-6.04-pre1/dos/syslinux.c:677:23: branch_false: ...to here
syslinux-6.04-pre1/dos/syslinux.c:681:10: call_function: calling ‘creat’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:681:10: return_function: returning to ‘main’ from ‘creat’
syslinux-6.04-pre1/dos/syslinux.c:683:5: call_function: calling ‘write_file’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:683:5: return_function: returning to ‘main’ from ‘write_file’
syslinux-6.04-pre1/dos/syslinux.c:688:10: call_function: calling ‘creat’ from ‘main’
syslinux-6.04-pre1/dos/syslinux.c:688:10: return_function: returning to ‘main’ from ‘creat’
syslinux-6.04-pre1/dos/syslinux.c:701:15: acquire_memory: this call could return NULL
syslinux-6.04-pre1/dos/syslinux.c:708:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/dos/syslinux.c:713:5: branch_false: ...to here
syslinux-6.04-pre1/dos/syslinux.c:734:17: branch_true: following ‘true’ branch (when ‘i < patch_sectors’)...
syslinux-6.04-pre1/dos/syslinux.c:735:9: branch_true: ...to here
syslinux-6.04-pre1/dos/syslinux.c:737:42: danger: ‘sectors + (unsigned int)i * 8’ could be NULL: unchecked value from [(35)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/34)
#  735|   	memcpy_from_sl(sectbuf, dp, SECTOR_SIZE);
#  736|   	dp += SECTOR_SIZE;
#  737|-> 	write_device(dev_fd, sectbuf, 1, sectors[i]);
#  738|       }
#  739|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def616]
syslinux-6.04-pre1/efi/main.c:765:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’
#  763|   	free_pool(map_buf);
#  764|   fail:
#  765|-> 	return err;
#  766|   }
#  767|   /**

Error: COMPILER_WARNING (CWE-465): [#def617]
syslinux-6.04-pre1/efi/main.c: scope_hint: In function ‘build_gdt’
syslinux-6.04-pre1/efi/main.c:906:82: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct dt_desc’ may result in an unaligned pointer value
#  906 |         status = emalloc(gdt.limit, __SIZEOF_POINTER__ , (EFI_PHYSICAL_ADDRESS *)&gdt.base);
#      |                                                                                  ^~~~~~~~~
#  904|   
#  905|   	/* Allocate gdt consistent with the alignment for architecture */
#  906|-> 	status = emalloc(gdt.limit, __SIZEOF_POINTER__ , (EFI_PHYSICAL_ADDRESS *)&gdt.base);
#  907|   	if (status != EFI_SUCCESS) {
#  908|   		printf("Failed to allocate memory for GDT, bailing out\n");

Error: COMPILER_WARNING (CWE-465): [#def618]
syslinux-6.04-pre1/efi/main.c:906:82: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct dt_desc’ may result in an unaligned pointer value
#  904|   
#  905|   	/* Allocate gdt consistent with the alignment for architecture */
#  906|-> 	status = emalloc(gdt.limit, __SIZEOF_POINTER__ , (EFI_PHYSICAL_ADDRESS *)&gdt.base);
#  907|   	if (status != EFI_SUCCESS) {
#  908|   		printf("Failed to allocate memory for GDT, bailing out\n");

Error: GCC_ANALYZER_WARNING (CWE-617): [#def619]
syslinux-6.04-pre1/efi/wrapper.c:218:17: warning[-Wanalyzer-tainted-assertion]: use of attacked-controlled value in condition for assertion
syslinux-6.04-pre1/efi/wrapper.c:175:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
syslinux-6.04-pre1/efi/wrapper.c:180:26: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:181:12: branch_false: following ‘false’ branch (when ‘f_in’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:186:27: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:187:12: branch_false: following ‘false’ branch (when ‘f_out’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:195:9: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:196:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:204:18: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:204:17: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:217:17: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:218:17: danger: treating ‘exit’ as an assertion failure handler due to ‘__attribute__((__noreturn__))’
#  216|   	} else {
#  217|   		fprintf(stderr, "Unsupported architecture\n");
#  218|-> 		exit(EXIT_FAILURE);
#  219|   	}
#  220|   

Error: GCC_ANALYZER_WARNING (CWE-617): [#def620]
syslinux-6.04-pre1/efi/wrapper.c:226:17: warning[-Wanalyzer-tainted-assertion]: use of attacked-controlled value in condition for assertion
syslinux-6.04-pre1/efi/wrapper.c:175:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
syslinux-6.04-pre1/efi/wrapper.c:180:26: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:181:12: branch_false: following ‘false’ branch (when ‘f_in’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:186:27: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:187:12: branch_false: following ‘false’ branch (when ‘f_out’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:195:9: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:196:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi/wrapper.c:197:17: branch_true: ...to here
syslinux-6.04-pre1/efi/wrapper.c:226:17: danger: treating ‘exit’ as an assertion failure handler due to ‘__attribute__((__noreturn__))’
#  224|   	    id[EI_MAG3] != ELFMAG3) {
#  225|   		fprintf(stderr, "Input file not ELF shared object\n");
#  226|-> 		exit(EXIT_FAILURE);
#  227|   	}
#  228|   

Error: GCC_ANALYZER_WARNING (CWE-617): [#def621]
syslinux-6.04-pre1/efi/wrapper.c:231:17: warning[-Wanalyzer-tainted-assertion]: use of attacked-controlled value in condition for assertion
syslinux-6.04-pre1/efi/wrapper.c:175:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
syslinux-6.04-pre1/efi/wrapper.c:180:26: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:181:12: branch_false: following ‘false’ branch (when ‘f_in’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:186:27: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:187:12: branch_false: following ‘false’ branch (when ‘f_out’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:195:9: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:196:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi/wrapper.c:197:17: branch_true: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:222:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:223:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:224:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:229:12: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:231:17: danger: treating ‘exit’ as an assertion failure handler due to ‘__attribute__((__noreturn__))’
#  229|   	if (!phoff || !phnum) {
#  230|   		fprintf(stderr, "Cannot find segment table\n");
#  231|-> 		exit(EXIT_FAILURE);
#  232|   	}
#  233|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def622]
syslinux-6.04-pre1/efi/wrapper.c:253:26: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘phdr.p_filesz’
syslinux-6.04-pre1/efi/wrapper.c:175:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
syslinux-6.04-pre1/efi/wrapper.c:180:26: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:181:12: branch_false: following ‘false’ branch (when ‘f_in’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:186:27: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:187:12: branch_false: following ‘false’ branch (when ‘f_out’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:195:9: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:196:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi/wrapper.c:197:17: branch_true: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:222:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:223:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:224:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:229:12: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:229:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:240:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi/wrapper.c:245:22: branch_true: ...to here
syslinux-6.04-pre1/efi/wrapper.c:245:29: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:253:26: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:253:26: danger: use of uninitialized value ‘phdr.p_filesz’ here
#  251|   		}
#  252|   
#  253|-> 		datasz = phdr.p_filesz;
#  254|   		memsz = phdr.p_memsz;
#  255|   	} else if (e32_hdr.e_ident[EI_CLASS] == ELFCLASS64) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def623]
syslinux-6.04-pre1/efi/wrapper.c:268:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘phdr.p_filesz’
syslinux-6.04-pre1/efi/wrapper.c:175:12: branch_false: following ‘false’ branch (when ‘argc > 2’)...
syslinux-6.04-pre1/efi/wrapper.c:180:26: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:181:12: branch_false: following ‘false’ branch (when ‘f_in’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:186:27: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:187:12: branch_false: following ‘false’ branch (when ‘f_out’ is non-NULL)...
syslinux-6.04-pre1/efi/wrapper.c:195:9: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:196:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:204:18: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:204:17: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi/wrapper.c:208:17: branch_true: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:222:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:223:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:224:15: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:221:13: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:229:12: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:229:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:240:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:255:20: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:255:19: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi/wrapper.c:260:22: branch_true: ...to here
syslinux-6.04-pre1/efi/wrapper.c:260:29: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/efi/wrapper.c:268:17: branch_false: ...to here
syslinux-6.04-pre1/efi/wrapper.c:268:17: danger: use of uninitialized value ‘phdr.p_filesz’ here
#  266|   		}
#  267|   
#  268|-> 		datasz = phdr.p_filesz;
#  269|   		memsz = phdr.p_memsz;
#  270|   	}

Error: GCC_ANALYZER_WARNING (CWE-465): [#def624]
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:79:11: warning[-Wanalyzer-deref-before-check]: check of ‘s’ for NULL after already dereferencing it
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:79:11: branch_true: following ‘true’ branch (when ‘s’ is NULL)...
 branch_true: ...to here
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:79:11: danger: pointer ‘s’ is checked for NULL here but it was already dereferenced at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   77|       if (*p != ' ') {
#   78|          // mark start of string or record the last visited non-space char
#   79|->        if (!s) s=p; else e=p;
#   80|       }
#   81|       p++;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def625]
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:83:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘e’
#   81|       p++;
#   82|     }
#   83|->   *(++e)='\0'; // kill string earlier
#   84|     return s;
#   85|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def626]
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:276:4: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cmdline’
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:284:6: enter_function: entry to ‘runcommand’
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:290:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:291:4: call_function: calling ‘gencommand’ from ‘runcommand’
#  274|   {
#  275|      pt_xtra x;
#  276|->    cmdline[0] = '\0';
#  277|      strcat(cmdline,mi->data);
#  278|      x = (pt_xtra) mi->extra_data;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def627]
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:319:21: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xtra’
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:317:21: acquire_memory: this call could return NULL
syslinux-6.04-pre1/efi64/com32/cmenu/test.c:319:21: danger: ‘xtra’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  317|      xtra = (pt_xtra) malloc(sizeof(t_xtra));
#  318|      mi->extra_data = (void *) xtra;
#  319|->    xtra->argsmenu = xtra->perms = NULL;
#  320|      xtra->ipappend = ipappend;
#  321|      if (!bad_argsmenu) {

Error: GCC_ANALYZER_WARNING (CWE-465): [#def628]
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:79:11: warning[-Wanalyzer-deref-before-check]: check of ‘s’ for NULL after already dereferencing it
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:79:11: branch_true: following ‘true’ branch (when ‘s’ is NULL)...
 branch_true: ...to here
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:76:10: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:77:8: branch_true: ...to here
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:79:11: danger: pointer ‘s’ is checked for NULL here but it was already dereferenced at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   77|       if (*p != ' ') {
#   78|          // mark start of string or record the last visited non-space char
#   79|->        if (!s) s=p; else e=p;
#   80|       }
#   81|       p++;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def629]
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:83:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘e’
#   81|       p++;
#   82|     }
#   83|->   *(++e)='\0'; // kill string earlier
#   84|     return s;
#   85|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def630]
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:100:4: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*cmd’
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:332:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:493:6: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:494:13: branch_true: ...to here
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:494:13: call_function: calling ‘execdotcmd’ from ‘main’
#   98|      char ctr;
#   99|   
#  100|->    strcpy(dotcmd,cmd);
#  101|      next = dotcmd;
#  102|      cmdline[0] = '\0';

Error: GCC_ANALYZER_WARNING (CWE-476): [#def631]
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:276:4: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘cmdline’
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:284:6: enter_function: entry to ‘runcommand’
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:290:19: acquire_memory: this call could return NULL
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:291:4: call_function: calling ‘gencommand’ from ‘runcommand’
#  274|   {
#  275|      pt_xtra x;
#  276|->    cmdline[0] = '\0';
#  277|      strcat(cmdline,mi->data);
#  278|      x = (pt_xtra) mi->extra_data;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def632]
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:319:21: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xtra’
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:317:21: acquire_memory: this call could return NULL
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:319:21: danger: ‘xtra’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  317|      xtra = (pt_xtra) malloc(sizeof(t_xtra));
#  318|      mi->extra_data = (void *) xtra;
#  319|->    xtra->argsmenu = xtra->perms = NULL;
#  320|      xtra->ipappend = ipappend;
#  321|      if (!bad_argsmenu) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def633]
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:323:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc(strlen(argsmenu) + 1)’ where non-null expected
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:332:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/efi64/com32/cmenu/test2.c:456:3: call_function: calling ‘set_xtra’ from ‘main’
#argument 1 of ‘__builtin_strcpy’ must be non-null
#  321|      if (!bad_argsmenu) {
#  322|         xtra->argsmenu = (char *) malloc(sizeof(char)*(strlen(argsmenu)+1));
#  323|->       strcpy(xtra->argsmenu,argsmenu);
#  324|      }
#  325|      if (!bad_perms) {

Error: COMPILER_WARNING (CWE-465): [#def634]
syslinux-6.04-pre1/extlinux/../libinstaller/syslxmod.c:61:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   59|   	    }
#   60|   
#   61|-> 	    set_64_sl(&ex->lba, lba);
#   62|   	    set_16_sl(&ex->len, len);
#   63|   	    ex++;

Error: COMPILER_WARNING (CWE-465): [#def635]
syslinux-6.04-pre1/extlinux/../libinstaller/syslxmod.c:62:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   60|   
#   61|   	    set_64_sl(&ex->lba, lba);
#   62|-> 	    set_16_sl(&ex->len, len);
#   63|   	    ex++;
#   64|   	}

Error: COMPILER_WARNING (CWE-465): [#def636]
syslinux-6.04-pre1/extlinux/../libinstaller/syslxmod.c:76:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   74|   
#   75|       if (len) {
#   76|-> 	set_64_sl(&ex->lba, lba);
#   77|   	set_16_sl(&ex->len, len);
#   78|   	ex++;

Error: COMPILER_WARNING (CWE-465): [#def637]
syslinux-6.04-pre1/extlinux/../libinstaller/syslxmod.c:77:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   75|       if (len) {
#   76|   	set_64_sl(&ex->lba, lba);
#   77|-> 	set_16_sl(&ex->len, len);
#   78|   	ex++;
#   79|       }

Error: COMPILER_WARNING (CWE-465): [#def638]
syslinux-6.04-pre1/extlinux/main.c: scope_hint: In function ‘patch_file_and_bootblock’
syslinux-6.04-pre1/extlinux/main.c:301:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  301 |         set_16(&sbs->bsSectors, 0);
#      |                ^~~~~~~~~~~~~~~
#  299|       totalsectors = totalbytes >> SECTOR_SHIFT;
#  300|       if (totalsectors >= 65536) {
#  301|-> 	set_16(&sbs->bsSectors, 0);
#  302|       } else {
#  303|   	set_16(&sbs->bsSectors, totalsectors);

Error: COMPILER_WARNING (CWE-465): [#def639]
syslinux-6.04-pre1/extlinux/main.c:301:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  299|       totalsectors = totalbytes >> SECTOR_SHIFT;
#  300|       if (totalsectors >= 65536) {
#  301|-> 	set_16(&sbs->bsSectors, 0);
#  302|       } else {
#  303|   	set_16(&sbs->bsSectors, totalsectors);

Error: COMPILER_WARNING (CWE-465): [#def640]
syslinux-6.04-pre1/extlinux/main.c:303:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  303 |         set_16(&sbs->bsSectors, totalsectors);
#      |                ^~~~~~~~~~~~~~~
#  301|   	set_16(&sbs->bsSectors, 0);
#  302|       } else {
#  303|-> 	set_16(&sbs->bsSectors, totalsectors);
#  304|       }
#  305|       set_32(&sbs->bsHugeSectors, totalsectors);

Error: COMPILER_WARNING (CWE-465): [#def641]
syslinux-6.04-pre1/extlinux/main.c:303:16: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  301|   	set_16(&sbs->bsSectors, 0);
#  302|       } else {
#  303|-> 	set_16(&sbs->bsSectors, totalsectors);
#  304|       }
#  305|       set_32(&sbs->bsHugeSectors, totalsectors);

Error: COMPILER_WARNING (CWE-465): [#def642]
syslinux-6.04-pre1/extlinux/main.c:305:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  305 |     set_32(&sbs->bsHugeSectors, totalsectors);
#      |            ^~~~~~~~~~~~~~~~~~~
#  303|   	set_16(&sbs->bsSectors, totalsectors);
#  304|       }
#  305|->     set_32(&sbs->bsHugeSectors, totalsectors);
#  306|   
#  307|       set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);

Error: COMPILER_WARNING (CWE-465): [#def643]
syslinux-6.04-pre1/extlinux/main.c:305:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  303|   	set_16(&sbs->bsSectors, totalsectors);
#  304|       }
#  305|->     set_32(&sbs->bsHugeSectors, totalsectors);
#  306|   
#  307|       set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);

Error: COMPILER_WARNING (CWE-465): [#def644]
syslinux-6.04-pre1/extlinux/main.c:307:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  307 |     set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);
#      |            ^~~~~~~~~~~~~~~~~~~
#  305|       set_32(&sbs->bsHugeSectors, totalsectors);
#  306|   
#  307|->     set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);
#  308|       set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|       set_16(&sbs->bsHeads, geo.heads);

Error: COMPILER_WARNING (CWE-465): [#def645]
syslinux-6.04-pre1/extlinux/main.c:307:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  305|       set_32(&sbs->bsHugeSectors, totalsectors);
#  306|   
#  307|->     set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);
#  308|       set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|       set_16(&sbs->bsHeads, geo.heads);

Error: COMPILER_WARNING (CWE-465): [#def646]
syslinux-6.04-pre1/extlinux/main.c:308:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  308 |     set_16(&sbs->bsSecPerTrack, geo.sectors);
#      |            ^~~~~~~~~~~~~~~~~~~
#  306|   
#  307|       set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);
#  308|->     set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|       set_16(&sbs->bsHeads, geo.heads);
#  310|       set_32(&sbs->bsHiddenSecs, geo.start);

Error: COMPILER_WARNING (CWE-465): [#def647]
syslinux-6.04-pre1/extlinux/main.c:308:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  306|   
#  307|       set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);
#  308|->     set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|       set_16(&sbs->bsHeads, geo.heads);
#  310|       set_32(&sbs->bsHiddenSecs, geo.start);

Error: COMPILER_WARNING (CWE-465): [#def648]
syslinux-6.04-pre1/extlinux/main.c:309:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  309 |     set_16(&sbs->bsHeads, geo.heads);
#      |            ^~~~~~~~~~~~~
#  307|       set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);
#  308|       set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|->     set_16(&sbs->bsHeads, geo.heads);
#  310|       set_32(&sbs->bsHiddenSecs, geo.start);
#  311|   

Error: COMPILER_WARNING (CWE-465): [#def649]
syslinux-6.04-pre1/extlinux/main.c:309:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  307|       set_16(&sbs->bsBytesPerSec, SECTOR_SIZE);
#  308|       set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|->     set_16(&sbs->bsHeads, geo.heads);
#  310|       set_32(&sbs->bsHiddenSecs, geo.start);
#  311|   

Error: COMPILER_WARNING (CWE-465): [#def650]
syslinux-6.04-pre1/extlinux/main.c:310:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  310 |     set_32(&sbs->bsHiddenSecs, geo.start);
#      |            ^~~~~~~~~~~~~~~~~~
#  308|       set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|       set_16(&sbs->bsHeads, geo.heads);
#  310|->     set_32(&sbs->bsHiddenSecs, geo.start);
#  311|   
#  312|       /* Construct the boot file map */

Error: COMPILER_WARNING (CWE-465): [#def651]
syslinux-6.04-pre1/extlinux/main.c:310:12: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  308|       set_16(&sbs->bsSecPerTrack, geo.sectors);
#  309|       set_16(&sbs->bsHeads, geo.heads);
#  310|->     set_32(&sbs->bsHiddenSecs, geo.start);
#  311|   
#  312|       /* Construct the boot file map */

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def652]
syslinux-6.04-pre1/extlinux/main.c:644:9: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘open(path, 65536)’
syslinux-6.04-pre1/extlinux/main.c:1551:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/extlinux/main.c:1555:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/extlinux/main.c:1558:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/extlinux/main.c:1565:12: branch_false: ...to here
syslinux-6.04-pre1/extlinux/main.c:1565:12: call_function: calling ‘install_loader’ from ‘main’
#  642|   bail:
#  643|       if (dirfd >= 0)
#  644|-> 	close(dirfd);
#  645|       if (fd >= 0)
#  646|   	close(fd);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def653]
syslinux-6.04-pre1/extlinux/main.c:853:8: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(rootdir, 0)’
syslinux-6.04-pre1/extlinux/main.c:1551:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/extlinux/main.c:1555:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/extlinux/main.c:1558:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/extlinux/main.c:1559:13: branch_true: ...to here
syslinux-6.04-pre1/extlinux/main.c:1560:20: call_function: calling ‘modify_existing_adv’ from ‘main’
#  851|           ret = fd;
#  852|       }
#  853|->     if (ret <= 0) {
#  854|           subvol[0] = '\0';
#  855|           return NULL;

Error: COMPILER_WARNING: [#def654]
syslinux-6.04-pre1/extlinux/main.c: scope_hint: In function ‘find_device’
syslinux-6.04-pre1/extlinux/main.c:1117:49: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1116 |             if ((!strcmp(mnt->mnt_type, "ext2") ||
#      |                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1117 |                  !strcmp(mnt->mnt_type, "ext3") ||
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~
# 1118 |                  !strcmp(mnt->mnt_type, "ext4")) &&
#      |                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
syslinux-6.04-pre1/extlinux/main.c:1124:9: note: here
# 1124 |         case VFAT:
#      |         ^~~~
# 1115|   	case EXT2:
# 1116|   	    if ((!strcmp(mnt->mnt_type, "ext2") ||
# 1117|-> 		 !strcmp(mnt->mnt_type, "ext3") ||
# 1118|   		 !strcmp(mnt->mnt_type, "ext4")) &&
# 1119|   		!stat(mnt->mnt_fsname, &dst) &&

Error: COMPILER_WARNING: [#def655]
syslinux-6.04-pre1/extlinux/main.c:1125:16: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 1125 |             if ((!strcmp(mnt->mnt_type, "vfat")) &&
#      |                ^
syslinux-6.04-pre1/extlinux/main.c:1131:9: note: here
# 1131 |         case NTFS:
#      |         ^~~~
# 1123|   	    }
# 1124|   	case VFAT:
# 1125|-> 	    if ((!strcmp(mnt->mnt_type, "vfat")) &&
# 1126|   		!stat(mnt->mnt_fsname, &dst) &&
# 1127|   		dst.st_rdev == dev) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def656]
syslinux-6.04-pre1/extlinux/main.c:1451:18: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
syslinux-6.04-pre1/extlinux/main.c:1551:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/extlinux/main.c:1555:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/extlinux/main.c:1558:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/extlinux/main.c:1559:13: branch_true: ...to here
syslinux-6.04-pre1/extlinux/main.c:1560:20: call_function: calling ‘modify_existing_adv’ from ‘main’
# 1449|       devname = get_devname(path);
# 1450|   
# 1451|->     if ((devfd = open(devname, O_RDWR | O_SYNC)) < 0) {
# 1452|   	fprintf(stderr, "%s: cannot open device %s\n", program, devname);
# 1453|   	free(devname);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def657]
syslinux-6.04-pre1/extlinux/main.c:1451:18: warning[-Wanalyzer-null-argument]: use of NULL ‘devname’ where non-null expected
syslinux-6.04-pre1/extlinux/main.c:1551:5: enter_function: entry to ‘main’
syslinux-6.04-pre1/extlinux/main.c:1555:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/extlinux/main.c:1558:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/extlinux/main.c:1565:12: branch_false: ...to here
syslinux-6.04-pre1/extlinux/main.c:1565:12: call_function: calling ‘install_loader’ from ‘main’
# 1449|       devname = get_devname(path);
# 1450|   
# 1451|->     if ((devfd = open(devname, O_RDWR | O_SYNC)) < 0) {
# 1452|   	fprintf(stderr, "%s: cannot open device %s\n", program, devname);
# 1453|   	free(devname);

Error: COMPILER_WARNING: [#def658]
syslinux-6.04-pre1/extlinux/main.c:53: included_from: Included from here.
syslinux-6.04-pre1/extlinux/xfs_sb.h:22: warning[-Wheader-guard]: header guard ‘XFS_SB_H_’ followed by ‘#define’ of a different macro
#   22 | #ifndef XFS_SB_H_
syslinux-6.04-pre1/extlinux/xfs_sb.h:23: note: ‘XFS_SB_H__’ is defined here; did you mean ‘XFS_SB_H_’?
#   23 | #define XFS_SB_H__
#   20|    * Inc.,  51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
#   21|    */
#   22|-> #ifndef XFS_SB_H_
#   23|   #define	XFS_SB_H__
#   24|   

Error: COMPILER_WARNING (CWE-465): [#def659]
syslinux-6.04-pre1/libinstaller/fs.c: scope_hint: In function ‘check_fat_bootsect’
syslinux-6.04-pre1/libinstaller/fs.c:61:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   61 |     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~
#   59|       int rootdirents, clustersize;
#   60|   
#   61|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#   62|   
#   63|       clustersize = get_8(&sectbuf->bsSecPerClust);

Error: COMPILER_WARNING (CWE-465): [#def660]
syslinux-6.04-pre1/libinstaller/fs.c:67:22: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   67 |     sectors = get_16(&sectbuf->bsSectors);
#      |                      ^~~~~~~~~~~~~~~~~~~
#   65|   	return "impossible cluster size on an FAT volume";
#   66|   
#   67|->     sectors = get_16(&sectbuf->bsSectors);
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   

Error: COMPILER_WARNING (CWE-465): [#def661]
syslinux-6.04-pre1/libinstaller/fs.c:68:42: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   68 |     sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#      |                                          ^~~~~~~~~~~~~~~~~~~~~~~
#   66|   
#   67|       sectors = get_16(&sectbuf->bsSectors);
#   68|->     sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);

Error: COMPILER_WARNING (CWE-465): [#def662]
syslinux-6.04-pre1/libinstaller/fs.c:70:33: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   70 |     dsectors = sectors - get_16(&sectbuf->bsResSectors);
#      |                                 ^~~~~~~~~~~~~~~~~~~~~~
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|->     dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);

Error: COMPILER_WARNING (CWE-465): [#def663]
syslinux-6.04-pre1/libinstaller/fs.c:72:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   72 |     fatsectors = get_16(&sectbuf->bsFATsecs);
#      |                         ^~~~~~~~~~~~~~~~~~~
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def664]
syslinux-6.04-pre1/libinstaller/fs.c:73:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   73 |     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#      |                                                   ^~~~~~~~~~~~~~~~~~~~~~
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);
#   75|       dsectors -= fatsectors;

Error: COMPILER_WARNING (CWE-465): [#def665]
syslinux-6.04-pre1/libinstaller/fs.c:77:26: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   77 |     rootdirents = get_16(&sectbuf->bsRootDirEnts);
#      |                          ^~~~~~~~~~~~~~~~~~~~~~~
#   75|       dsectors -= fatsectors;
#   76|   
#   77|->     rootdirents = get_16(&sectbuf->bsRootDirEnts);
#   78|       dsectors -= (rootdirents + sectorsize / 32 - 1) / sectorsize;
#   79|   

Error: COMPILER_WARNING (CWE-465): [#def666]
syslinux-6.04-pre1/libinstaller/fs.c:85:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   85 |     fatsectors = get_16(&sectbuf->bsFATsecs);
#      |                         ^~~~~~~~~~~~~~~~~~~
#   83|       clusters = dsectors / clustersize;
#   84|   
#   85|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def667]
syslinux-6.04-pre1/libinstaller/fs.c:86:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   86 |     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#      |                                                   ^~~~~~~~~~~~~~~~~~~~~~
#   84|   
#   85|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);
#   88|   

Error: COMPILER_WARNING (CWE-465): [#def668]
syslinux-6.04-pre1/libinstaller/fs.c:94:21: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   94 |         if (!get_16(&sectbuf->bsFATsecs))
#      |                     ^~~~~~~~~~~~~~~~~~~
#   92|       if (clusters < 0xFFF5) {
#   93|   	/* FAT12 or FAT16 */
#   94|-> 	if (!get_16(&sectbuf->bsFATsecs))
#   95|   	    return "zero FAT sectors (FAT12/16)";
#   96|   

Error: COMPILER_WARNING (CWE-465): [#def669]
syslinux-6.04-pre1/libinstaller/fs.c: scope_hint: In function ‘syslinux_check_bootsect’
syslinux-6.04-pre1/libinstaller/fs.c:160:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  160 |     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~
#  158|   	return "invalid media signature (not an FAT/NTFS volume?)";
#  159|   
#  160|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#  161|       if (sectorsize == SECTOR_SIZE) ;	/* ok */
#  162|       else if (sectorsize >= 512 && sectorsize <= 4096 &&

Error: COMPILER_WARNING (CWE-465): [#def670]
syslinux-6.04-pre1/libinstaller/syslxmod.c: scope_hint: In function ‘generate_extents’
syslinux-6.04-pre1/libinstaller/syslxmod.c:61:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   61 |             set_64_sl(&ex->lba, lba);
#      |                       ^~~~~~~~
#   59|   	    }
#   60|   
#   61|-> 	    set_64_sl(&ex->lba, lba);
#   62|   	    set_16_sl(&ex->len, len);
#   63|   	    ex++;

Error: COMPILER_WARNING (CWE-465): [#def671]
syslinux-6.04-pre1/libinstaller/syslxmod.c:62:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   62 |             set_16_sl(&ex->len, len);
#      |                       ^~~~~~~~
#   60|   
#   61|   	    set_64_sl(&ex->lba, lba);
#   62|-> 	    set_16_sl(&ex->len, len);
#   63|   	    ex++;
#   64|   	}

Error: COMPILER_WARNING (CWE-465): [#def672]
syslinux-6.04-pre1/libinstaller/syslxmod.c:76:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   76 |         set_64_sl(&ex->lba, lba);
#      |                   ^~~~~~~~
#   74|   
#   75|       if (len) {
#   76|-> 	set_64_sl(&ex->lba, lba);
#   77|   	set_16_sl(&ex->len, len);
#   78|   	ex++;

Error: COMPILER_WARNING (CWE-465): [#def673]
syslinux-6.04-pre1/libinstaller/syslxmod.c:77:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   77 |         set_16_sl(&ex->len, len);
#      |                   ^~~~~~~~
#   75|       if (len) {
#   76|   	set_64_sl(&ex->lba, lba);
#   77|-> 	set_16_sl(&ex->len, len);
#   78|   	ex++;
#   79|       }

Error: COMPILER_WARNING (CWE-465): [#def674]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:61:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   59|       int rootdirents, clustersize;
#   60|   
#   61|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#   62|   
#   63|       clustersize = get_8(&sectbuf->bsSecPerClust);

Error: COMPILER_WARNING (CWE-465): [#def675]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:67:22: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   65|   	return "impossible cluster size on an FAT volume";
#   66|   
#   67|->     sectors = get_16(&sectbuf->bsSectors);
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   

Error: COMPILER_WARNING (CWE-465): [#def676]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:68:42: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   66|   
#   67|       sectors = get_16(&sectbuf->bsSectors);
#   68|->     sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);

Error: COMPILER_WARNING (CWE-465): [#def677]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:70:33: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|->     dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);

Error: COMPILER_WARNING (CWE-465): [#def678]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:72:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def679]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:73:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);
#   75|       dsectors -= fatsectors;

Error: COMPILER_WARNING (CWE-465): [#def680]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:77:26: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   75|       dsectors -= fatsectors;
#   76|   
#   77|->     rootdirents = get_16(&sectbuf->bsRootDirEnts);
#   78|       dsectors -= (rootdirents + sectorsize / 32 - 1) / sectorsize;
#   79|   

Error: COMPILER_WARNING (CWE-465): [#def681]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:85:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   83|       clusters = dsectors / clustersize;
#   84|   
#   85|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def682]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:86:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   84|   
#   85|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);
#   88|   

Error: COMPILER_WARNING (CWE-465): [#def683]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:94:21: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   92|       if (clusters < 0xFFF5) {
#   93|   	/* FAT12 or FAT16 */
#   94|-> 	if (!get_16(&sectbuf->bsFATsecs))
#   95|   	    return "zero FAT sectors (FAT12/16)";
#   96|   

Error: COMPILER_WARNING (CWE-465): [#def684]
syslinux-6.04-pre1/linux/../libinstaller/fs.c:160:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  158|   	return "invalid media signature (not an FAT/NTFS volume?)";
#  159|   
#  160|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#  161|       if (sectorsize == SECTOR_SIZE) ;	/* ok */
#  162|       else if (sectorsize >= 512 && sectorsize <= 4096 &&

Error: COMPILER_WARNING (CWE-465): [#def685]
syslinux-6.04-pre1/linux/../libinstaller/syslxmod.c:61:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   59|   	    }
#   60|   
#   61|-> 	    set_64_sl(&ex->lba, lba);
#   62|   	    set_16_sl(&ex->len, len);
#   63|   	    ex++;

Error: COMPILER_WARNING (CWE-465): [#def686]
syslinux-6.04-pre1/linux/../libinstaller/syslxmod.c:62:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   60|   
#   61|   	    set_64_sl(&ex->lba, lba);
#   62|-> 	    set_16_sl(&ex->len, len);
#   63|   	    ex++;
#   64|   	}

Error: COMPILER_WARNING (CWE-465): [#def687]
syslinux-6.04-pre1/linux/../libinstaller/syslxmod.c:76:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   74|   
#   75|       if (len) {
#   76|-> 	set_64_sl(&ex->lba, lba);
#   77|   	set_16_sl(&ex->len, len);
#   78|   	ex++;

Error: COMPILER_WARNING (CWE-465): [#def688]
syslinux-6.04-pre1/linux/../libinstaller/syslxmod.c:77:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   75|       if (len) {
#   76|   	set_64_sl(&ex->lba, lba);
#   77|-> 	set_16_sl(&ex->len, len);
#   78|   	ex++;
#   79|       }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def689]
syslinux-6.04-pre1/linux/syslinux.c:408:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mnt_cookie’
syslinux-6.04-pre1/linux/syslinux.c:296:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:304:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:324:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:332:9: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:332:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:342:13: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:342:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:349:13: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:349:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:363:16: branch_false: following ‘false’ branch (when ‘rv != -1’)...
syslinux-6.04-pre1/linux/syslinux.c:370:17: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:370:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:405:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/linux/syslinux.c:406:13: branch_true: ...to here
syslinux-6.04-pre1/linux/syslinux.c:408:13: danger: use of uninitialized value ‘mnt_cookie’ here
#  406|   	if (opt.reset_adv || opt.set_once) {
#  407|   	    modify_existing_adv(ldlinux_path);
#  408|-> 	    do_umount(mntpath, mnt_cookie);
#  409|   	    sync();
#  410|   	    rmdir(mntpath);

Error: COMPILER_WARNING (CWE-457): [#def690]
syslinux-6.04-pre1/linux/syslinux.c: scope_hint: In function ‘main’
syslinux-6.04-pre1/linux/syslinux.c:408:13: warning[-Wmaybe-uninitialized]: ‘mnt_cookie’ may be used uninitialized
#  408 |             do_umount(mntpath, mnt_cookie);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/linux/syslinux.c:273:9: note: ‘mnt_cookie’ declared here
#  273 |     int mnt_cookie;
#      |         ^~~~~~~~~~
#  406|   	if (opt.reset_adv || opt.set_once) {
#  407|   	    modify_existing_adv(ldlinux_path);
#  408|-> 	    do_umount(mntpath, mnt_cookie);
#  409|   	    sync();
#  410|   	    rmdir(mntpath);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def691]
syslinux-6.04-pre1/linux/syslinux.c:493:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mnt_cookie’
syslinux-6.04-pre1/linux/syslinux.c:296:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:304:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:324:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:332:9: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:332:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:342:13: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:342:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:349:13: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:349:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:363:16: branch_false: following ‘false’ branch (when ‘rv != -1’)...
syslinux-6.04-pre1/linux/syslinux.c:370:17: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:370:16: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:427:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/linux/syslinux.c:430:10: branch_false: ...to here
syslinux-6.04-pre1/linux/syslinux.c:431:8: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/linux/syslinux.c:433:9: branch_true: ...to here
syslinux-6.04-pre1/linux/syslinux.c:493:5: danger: use of uninitialized value ‘mnt_cookie’ here
#  491|   
#  492|   umount:
#  493|->     do_umount(mntpath, mnt_cookie);
#  494|       sync();
#  495|       rmdir(mntpath);

Error: COMPILER_WARNING (CWE-457): [#def692]
syslinux-6.04-pre1/linux/syslinux.c:493:5: warning[-Wmaybe-uninitialized]: ‘mnt_cookie’ may be used uninitialized
#  493 |     do_umount(mntpath, mnt_cookie);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
syslinux-6.04-pre1/linux/syslinux.c:273:9: note: ‘mnt_cookie’ declared here
#  273 |     int mnt_cookie;
#      |         ^~~~~~~~~~
#  491|   
#  492|   umount:
#  493|->     do_umount(mntpath, mnt_cookie);
#  494|       sync();
#  495|       rmdir(mntpath);

Error: COMPILER_WARNING: [#def693]
syslinux-6.04-pre1/memdisk/bda.h:30:25: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   30 |     *((uint8_t *) addr) = data;
#      |     ~~~~~~~~~~~~~~~~~~~~^~~~~~
cc1: note: source object is likely at address zero
#   28|   static inline void wrz_8(uint32_t addr, uint8_t data)
#   29|   {
#   30|->     *((uint8_t *) addr) = data;
#   31|   }
#   32|   

Error: COMPILER_WARNING: [#def694]
syslinux-6.04-pre1/memdisk/bda.h:35:26: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   35 |     *((uint16_t *) addr) = data;
#      |     ~~~~~~~~~~~~~~~~~~~~~^~~~~~
cc1: note: source object is likely at address zero
#   33|   static inline void wrz_16(uint32_t addr, uint16_t data)
#   34|   {
#   35|->     *((uint16_t *) addr) = data;
#   36|   }
#   37|   

Error: COMPILER_WARNING: [#def695]
syslinux-6.04-pre1/memdisk/bda.h:40:26: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#   40 |     *((uint32_t *) addr) = data;
#      |     ~~~~~~~~~~~~~~~~~~~~~^~~~~~
cc1: note: source object is likely at address zero
#   38|   static inline void wrz_32(uint32_t addr, uint32_t data)
#   39|   {
#   40|->     *((uint32_t *) addr) = data;
#   41|   }
#   42|   

Error: COMPILER_WARNING: [#def696]
syslinux-6.04-pre1/memdisk/bda.h:45:12: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint8_t[0]’ {aka ‘unsigned char[]’}
#   45 |     return *((uint8_t *) addr);
#      |            ^~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   43|   static inline uint8_t rdz_8(uint32_t addr)
#   44|   {
#   45|->     return *((uint8_t *) addr);
#   46|   }
#   47|   

Error: COMPILER_WARNING: [#def697]
syslinux-6.04-pre1/memdisk/bda.h:50:12: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint16_t[0]’ {aka ‘short unsigned int[]’}
#   50 |     return *((uint16_t *) addr);
#      |            ^~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   48|   static inline uint16_t rdz_16(uint32_t addr)
#   49|   {
#   50|->     return *((uint16_t *) addr);
#   51|   }
#   52|   

Error: COMPILER_WARNING: [#def698]
syslinux-6.04-pre1/memdisk/bda.h:55:12: warning[-Warray-bounds=]: array subscript 0 is outside array bounds of ‘uint32_t[0]’ {aka ‘unsigned int[]’}
#   55 |     return *((uint32_t *) addr);
#      |            ^~~~~~~~~~~~~~~~~~~~
cc1: note: source object is likely at address zero
#   53|   static inline uint32_t rdz_32(uint32_t addr)
#   54|   {
#   55|->     return *((uint32_t *) addr);
#   56|   }

Error: COMPILER_WARNING: [#def699]
syslinux-6.04-pre1/memdisk/conio.c: scope_hint: In function ‘number’
syslinux-6.04-pre1/memdisk/conio.c:162:28: warning[-Warray-bounds=]: array subscript 33 is outside array bounds of ‘const char[17]’
#  162 |             *str++ = digits[33];
#      |                      ~~~~~~^~~~
#  160|   	else if (base == 16) {
#  161|   	    *str++ = '0';
#  162|-> 	    *str++ = digits[33];
#  163|   	}
#  164|       }

Error: COMPILER_WARNING: [#def700]
syslinux-6.04-pre1/memdisk/conio.c: scope_hint: In function ‘vsprintf’
syslinux-6.04-pre1/memdisk/conio.c:312:19: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  312 |             flags |= LARGE;
#      |                   ^
syslinux-6.04-pre1/memdisk/conio.c:313:9: note: here
#  313 |         case 'x':
#      |         ^~~~
#  310|   
#  311|   	case 'X':
#  312|-> 	    flags |= LARGE;
#  313|   	case 'x':
#  314|   	    base = 16;

Error: COMPILER_WARNING: [#def701]
syslinux-6.04-pre1/memdisk/unzip.c:105: included_from: Included from here.
syslinux-6.04-pre1/memdisk/inflate.c: scope_hint: In function ‘huft_build’
syslinux-6.04-pre1/memdisk/inflate.c:264:12: warning[-Wold-style-definition]: old-style function definition
#  264 | STATIC int huft_build(b, n, s, d, e, t, m)
#      |            ^~~~~~~~~~
#  262|   STATIC unsigned hufts;		/* track memory usage */
#  263|   
#  264|-> STATIC int huft_build(b, n, s, d, e, t, m)
#  265|   unsigned *b;			/* code lengths in bits (all assumed <= BMAX) */
#  266|   unsigned n;			/* number of codes (assumed <= N_MAX) */

Error: COMPILER_WARNING: [#def702]
syslinux-6.04-pre1/memdisk/inflate.c:264:12: warning[-Wold-style-definition]: old-style function definition
#  262|   STATIC unsigned hufts;		/* track memory usage */
#  263|   
#  264|-> STATIC int huft_build(b, n, s, d, e, t, m)
#  265|   unsigned *b;			/* code lengths in bits (all assumed <= BMAX) */
#  266|   unsigned n;			/* number of codes (assumed <= N_MAX) */

Error: COMPILER_WARNING: [#def703]
syslinux-6.04-pre1/memdisk/inflate.c: scope_hint: In function ‘huft_free’
syslinux-6.04-pre1/memdisk/inflate.c:474:12: warning[-Wold-style-definition]: old-style function definition
#  474 | STATIC int huft_free(t)
#      |            ^~~~~~~~~
#  472|   }
#  473|   
#  474|-> STATIC int huft_free(t)
#  475|   struct huft *t;			/* table to free */
#  476|   /* Free the malloc'ed tables built by huft_build(), which makes a linked

Error: COMPILER_WARNING: [#def704]
syslinux-6.04-pre1/memdisk/inflate.c:474:12: warning[-Wold-style-definition]: old-style function definition
#  472|   }
#  473|   
#  474|-> STATIC int huft_free(t)
#  475|   struct huft *t;			/* table to free */
#  476|   /* Free the malloc'ed tables built by huft_build(), which makes a linked

Error: COMPILER_WARNING: [#def705]
syslinux-6.04-pre1/memdisk/inflate.c: scope_hint: In function ‘inflate_codes’
syslinux-6.04-pre1/memdisk/inflate.c:492:12: warning[-Wold-style-definition]: old-style function definition
#  492 | STATIC int inflate_codes(tl, td, bl, bd)
#      |            ^~~~~~~~~~~~~
#  490|   }
#  491|   
#  492|-> STATIC int inflate_codes(tl, td, bl, bd)
#  493|   struct huft *tl, *td;		/* literal/length and distance decoder tables */
#  494|   int bl, bd;			/* number of bits decoded by tl[] and td[] */

Error: COMPILER_WARNING: [#def706]
syslinux-6.04-pre1/memdisk/inflate.c:492:12: warning[-Wold-style-definition]: old-style function definition
#  490|   }
#  491|   
#  492|-> STATIC int inflate_codes(tl, td, bl, bd)
#  493|   struct huft *tl, *td;		/* literal/length and distance decoder tables */
#  494|   int bl, bd;			/* number of bits decoded by tl[] and td[] */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def707]
syslinux-6.04-pre1/memdisk/inflate.c:516:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘t’
syslinux-6.04-pre1/memdisk/unzip.c:354:7: enter_function: entry to ‘unzip’
syslinux-6.04-pre1/memdisk/unzip.c:374:5: call_function: calling ‘makecrc’ from ‘unzip’
syslinux-6.04-pre1/memdisk/unzip.c:374:5: return_function: returning to ‘unzip’ from ‘makecrc’
syslinux-6.04-pre1/memdisk/unzip.c:375:5: call_function: calling ‘gunzip’ from ‘unzip’
#  514|       for (;;) {			/* do until end of block */
#  515|   	NEEDBITS((unsigned)bl)
#  516|-> 	    if ((e = (t = tl + ((unsigned)b & ml))->e) > 16)
#  517|   	    do {
#  518|   		if (e == 99)

Error: COMPILER_WARNING: [#def708]
syslinux-6.04-pre1/memdisk/inflate.c: scope_hint: In function ‘inflate_block’
syslinux-6.04-pre1/memdisk/inflate.c:854:12: warning[-Wold-style-definition]: old-style function definition
#  854 | STATIC int inflate_block(e)
#      |            ^~~~~~~~~~~~~
#  852|   }
#  853|   
#  854|-> STATIC int inflate_block(e)
#  855|   int *e;				/* last block flag */
#  856|   /* decompress an inflated block */

Error: COMPILER_WARNING: [#def709]
syslinux-6.04-pre1/memdisk/inflate.c:854:12: warning[-Wold-style-definition]: old-style function definition
#  852|   }
#  853|   
#  854|-> STATIC int inflate_block(e)
#  855|   int *e;				/* last block flag */
#  856|   /* decompress an inflated block */

Error: COMPILER_WARNING (CWE-465): [#def710]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:61:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   59|       int rootdirents, clustersize;
#   60|   
#   61|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#   62|   
#   63|       clustersize = get_8(&sectbuf->bsSecPerClust);

Error: COMPILER_WARNING (CWE-465): [#def711]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:67:22: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   65|   	return "impossible cluster size on an FAT volume";
#   66|   
#   67|->     sectors = get_16(&sectbuf->bsSectors);
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   

Error: COMPILER_WARNING (CWE-465): [#def712]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:68:42: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   66|   
#   67|       sectors = get_16(&sectbuf->bsSectors);
#   68|->     sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);

Error: COMPILER_WARNING (CWE-465): [#def713]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:70:33: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   68|       sectors = sectors ? sectors : get_32(&sectbuf->bsHugeSectors);
#   69|   
#   70|->     dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);

Error: COMPILER_WARNING (CWE-465): [#def714]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:72:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   70|       dsectors = sectors - get_16(&sectbuf->bsResSectors);
#   71|   
#   72|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def715]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:73:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   71|   
#   72|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   73|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   74|       fatsectors *= get_8(&sectbuf->bsFATs);
#   75|       dsectors -= fatsectors;

Error: COMPILER_WARNING (CWE-465): [#def716]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:77:26: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   75|       dsectors -= fatsectors;
#   76|   
#   77|->     rootdirents = get_16(&sectbuf->bsRootDirEnts);
#   78|       dsectors -= (rootdirents + sectorsize / 32 - 1) / sectorsize;
#   79|   

Error: COMPILER_WARNING (CWE-465): [#def717]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:85:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   83|       clusters = dsectors / clustersize;
#   84|   
#   85|->     fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|       fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);

Error: COMPILER_WARNING (CWE-465): [#def718]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:86:51: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct <anonymous>’ may result in an unaligned pointer value
#   84|   
#   85|       fatsectors = get_16(&sectbuf->bsFATsecs);
#   86|->     fatsectors = fatsectors ? fatsectors : get_32(&sectbuf->bs32.FATSz32);
#   87|       fatsectors *= get_8(&sectbuf->bsFATs);
#   88|   

Error: COMPILER_WARNING (CWE-465): [#def719]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:94:21: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#   92|       if (clusters < 0xFFF5) {
#   93|   	/* FAT12 or FAT16 */
#   94|-> 	if (!get_16(&sectbuf->bsFATsecs))
#   95|   	    return "zero FAT sectors (FAT12/16)";
#   96|   

Error: COMPILER_WARNING (CWE-465): [#def720]
syslinux-6.04-pre1/mtools/../libinstaller/fs.c:160:25: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct fat_boot_sector’ may result in an unaligned pointer value
#  158|   	return "invalid media signature (not an FAT/NTFS volume?)";
#  159|   
#  160|->     sectorsize = get_16(&sectbuf->bsBytesPerSec);
#  161|       if (sectorsize == SECTOR_SIZE) ;	/* ok */
#  162|       else if (sectorsize >= 512 && sectorsize <= 4096 &&

Error: COMPILER_WARNING (CWE-465): [#def721]
syslinux-6.04-pre1/mtools/../libinstaller/syslxmod.c:61:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   59|   	    }
#   60|   
#   61|-> 	    set_64_sl(&ex->lba, lba);
#   62|   	    set_16_sl(&ex->len, len);
#   63|   	    ex++;

Error: COMPILER_WARNING (CWE-465): [#def722]
syslinux-6.04-pre1/mtools/../libinstaller/syslxmod.c:62:23: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   60|   
#   61|   	    set_64_sl(&ex->lba, lba);
#   62|-> 	    set_16_sl(&ex->len, len);
#   63|   	    ex++;
#   64|   	}

Error: COMPILER_WARNING (CWE-465): [#def723]
syslinux-6.04-pre1/mtools/../libinstaller/syslxmod.c:76:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   74|   
#   75|       if (len) {
#   76|-> 	set_64_sl(&ex->lba, lba);
#   77|   	set_16_sl(&ex->len, len);
#   78|   	ex++;

Error: COMPILER_WARNING (CWE-465): [#def724]
syslinux-6.04-pre1/mtools/../libinstaller/syslxmod.c:77:19: warning[-Waddress-of-packed-member]: taking address of packed member of ‘struct syslinux_extent’ may result in an unaligned pointer value
#   75|       if (len) {
#   76|   	set_64_sl(&ex->lba, lba);
#   77|-> 	set_16_sl(&ex->len, len);
#   78|   	ex++;
#   79|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def725]
syslinux-6.04-pre1/mtools/syslinux.c:250:9: warning[-Wanalyzer-malloc-leak]: leak of ‘popen("mcopy -D o -D O -o - s:/ldlinux.sys", "w")’
syslinux-6.04-pre1/mtools/syslinux.c:156:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:159:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:186:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:203:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:211:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:214:14: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:215:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:228:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:234:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:242:5: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:248:11: acquire_memory: allocated here
syslinux-6.04-pre1/mtools/syslinux.c:249:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:250:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:250:9: danger: ‘popen("mcopy -D o -D O -o - s:/ldlinux.sys", "w")’ leaks here; was allocated at [(21)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/20)
#  248|       mtp = popen("mcopy -D o -D O -o - s:/ldlinux.sys", "w");
#  249|       if (!mtp ||
#  250|-> 	fwrite((const void _force *)syslinux_ldlinux,
#  251|   	       1, syslinux_ldlinux_len, mtp)
#  252|   		!= syslinux_ldlinux_len ||

Error: GCC_ANALYZER_WARNING (CWE-476): [#def726]
syslinux-6.04-pre1/mtools/syslinux.c:272:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘secp’
syslinux-6.04-pre1/mtools/syslinux.c:156:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:159:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:186:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:203:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:211:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:214:14: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:215:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:228:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:234:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:242:5: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:250:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:253:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:256:19: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:256:32: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:265:15: acquire_memory: this call could return NULL
syslinux-6.04-pre1/mtools/syslinux.c:271:12: branch_true: following ‘true’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:272:10: branch_true: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:272:9: danger: ‘secp’ could be NULL: unchecked value from [(29)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/28)
#  270|       s = libfat_clustertosector(fs, ldlinux_cluster);
#  271|       while (s && nsectors < ldlinux_sectors) {
#  272|-> 	*secp++ = s;
#  273|   	nsectors++;
#  274|   	s = libfat_nextsector(fs, s);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def727]
syslinux-6.04-pre1/mtools/syslinux.c:287:39: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘secp’
syslinux-6.04-pre1/mtools/syslinux.c:156:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:159:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:186:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:203:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:211:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:214:14: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:215:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:228:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:234:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:242:5: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:250:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:253:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:256:19: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:256:32: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:265:15: acquire_memory: this call could return NULL
syslinux-6.04-pre1/mtools/syslinux.c:271:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:276:5: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:284:17: branch_true: following ‘true’ branch (when ‘i < patch_sectors’)...
syslinux-6.04-pre1/mtools/syslinux.c:287:17: branch_true: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:287:39: danger: ‘sectors + (long unsigned int)i * 8’ could be NULL: unchecked value from [(29)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/28)
#  285|   	xpwrite(dev_fd, (const char _force *)syslinux_ldlinux
#  286|   		+ i * SECTOR_SIZE, SECTOR_SIZE,
#  287|-> 		opt.offset + ((off_t) sectors[i] << SECTOR_SHIFT));
#  288|       }
#  289|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def728]
syslinux-6.04-pre1/mtools/syslinux.c:308:17: warning[-Wanalyzer-malloc-leak]: leak of ‘popen("mcopy -D o -D O -o - s:/ldlinux.c32", "w")’
syslinux-6.04-pre1/mtools/syslinux.c:156:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:159:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:159:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:186:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:203:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:211:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:210:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:214:14: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:215:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:228:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:234:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:242:5: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:250:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:253:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:249:9: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:256:19: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:256:32: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:271:12: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:276:5: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:284:17: branch_false: following ‘false’ branch (when ‘i >= patch_sectors’)...
syslinux-6.04-pre1/mtools/syslinux.c:291:9: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:291:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:294:18: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:307:11: acquire_memory: allocated here
syslinux-6.04-pre1/mtools/syslinux.c:308:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/mtools/syslinux.c:308:17: branch_false: ...to here
syslinux-6.04-pre1/mtools/syslinux.c:308:17: danger: ‘popen("mcopy -D o -D O -o - s:/ldlinux.c32", "w")’ leaks here; was allocated at [(35)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/34)
#  306|   
#  307|       mtp = popen("mcopy -D o -D O -o - s:/ldlinux.c32", "w");
#  308|->     if (!mtp ||	fwrite((const char _force *)syslinux_ldlinuxc32,
#  309|   		       1, syslinux_ldlinuxc32_len, mtp)
#  310|   	!= syslinux_ldlinuxc32_len ||

Error: GCC_ANALYZER_WARNING (CWE-775): [#def729]
syslinux-6.04-pre1/utils/isohybrid.c:596:8: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(path, "rb")’
syslinux-6.04-pre1/utils/isohybrid.c:591:10: acquire_resource: opened here
syslinux-6.04-pre1/utils/isohybrid.c:592:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/utils/isohybrid.c:594:5: branch_false: ...to here
syslinux-6.04-pre1/utils/isohybrid.c:596:8: danger: ‘fopen(path, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  594|       clearerr(fp);
#  595|       ret = fread(mbr, 1, MBRSIZE, fp);
#  596|->     if (ferror(fp) || ret != MBRSIZE)
#  597|           err(1, "error while reading MBR template file `%s'", path);
#  598|       fclose(fp);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def730]
syslinux-6.04-pre1/utils/isohybrid.c:596:8: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(path, "rb")’
syslinux-6.04-pre1/utils/isohybrid.c:591:10: acquire_memory: allocated here
syslinux-6.04-pre1/utils/isohybrid.c:592:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/utils/isohybrid.c:594:5: branch_false: ...to here
syslinux-6.04-pre1/utils/isohybrid.c:596:8: danger: ‘fopen(path, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  594|       clearerr(fp);
#  595|       ret = fread(mbr, 1, MBRSIZE, fp);
#  596|->     if (ferror(fp) || ret != MBRSIZE)
#  597|           err(1, "error while reading MBR template file `%s'", path);
#  598|       fclose(fp);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def731]
syslinux-6.04-pre1/utils/isohybrid.c:596:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(path, "rb")’
syslinux-6.04-pre1/utils/isohybrid.c:591:10: acquire_resource: opened here
syslinux-6.04-pre1/utils/isohybrid.c:592:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/utils/isohybrid.c:594:5: branch_false: ...to here
syslinux-6.04-pre1/utils/isohybrid.c:596:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/utils/isohybrid.c:596:9: branch_false: ...to here
syslinux-6.04-pre1/utils/isohybrid.c:596:9: danger: ‘fopen(path, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  594|       clearerr(fp);
#  595|       ret = fread(mbr, 1, MBRSIZE, fp);
#  596|->     if (ferror(fp) || ret != MBRSIZE)
#  597|           err(1, "error while reading MBR template file `%s'", path);
#  598|       fclose(fp);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def732]
syslinux-6.04-pre1/utils/isohybrid.c:596:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(path, "rb")’
syslinux-6.04-pre1/utils/isohybrid.c:591:10: acquire_memory: allocated here
syslinux-6.04-pre1/utils/isohybrid.c:592:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/utils/isohybrid.c:594:5: branch_false: ...to here
syslinux-6.04-pre1/utils/isohybrid.c:596:8: branch_false: following ‘false’ branch...
syslinux-6.04-pre1/utils/isohybrid.c:596:9: branch_false: ...to here
syslinux-6.04-pre1/utils/isohybrid.c:596:9: danger: ‘fopen(path, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  594|       clearerr(fp);
#  595|       ret = fread(mbr, 1, MBRSIZE, fp);
#  596|->     if (ferror(fp) || ret != MBRSIZE)
#  597|           err(1, "error while reading MBR template file `%s'", path);
#  598|       fclose(fp);

Error: CPPCHECK_WARNING (CWE-476): [#def733]
syslinux-6.04-pre1/utils/isohybrid.c:822: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  820|       }
#  821|   
#  822|->     header->signature = lendian_64(0x5452415020494645ull);
#  823|       header->revision = lendian_int(0x010000);
#  824|       header->headerSize = lendian_int(0x5c);

Error: CPPCHECK_WARNING (CWE-476): [#def734]
syslinux-6.04-pre1/utils/isohybrid.c:823: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  821|   
#  822|       header->signature = lendian_64(0x5452415020494645ull);
#  823|->     header->revision = lendian_int(0x010000);
#  824|       header->headerSize = lendian_int(0x5c);
#  825|       header->currentLBA = lendian_64(current);

Error: CPPCHECK_WARNING (CWE-476): [#def735]
syslinux-6.04-pre1/utils/isohybrid.c:824: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  822|       header->signature = lendian_64(0x5452415020494645ull);
#  823|       header->revision = lendian_int(0x010000);
#  824|->     header->headerSize = lendian_int(0x5c);
#  825|       header->currentLBA = lendian_64(current);
#  826|       header->backupLBA = lendian_64(alternate);

Error: CPPCHECK_WARNING (CWE-476): [#def736]
syslinux-6.04-pre1/utils/isohybrid.c:825: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  823|       header->revision = lendian_int(0x010000);
#  824|       header->headerSize = lendian_int(0x5c);
#  825|->     header->currentLBA = lendian_64(current);
#  826|       header->backupLBA = lendian_64(alternate);
#  827|       header->firstUsableLBA = lendian_64(gptsize + hole);

Error: CPPCHECK_WARNING (CWE-476): [#def737]
syslinux-6.04-pre1/utils/isohybrid.c:826: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  824|       header->headerSize = lendian_int(0x5c);
#  825|       header->currentLBA = lendian_64(current);
#  826|->     header->backupLBA = lendian_64(alternate);
#  827|       header->firstUsableLBA = lendian_64(gptsize + hole);
#  828|       header->lastUsableLBA = lendian_64((isostat.st_size + padding)/512 -

Error: CPPCHECK_WARNING (CWE-476): [#def738]
syslinux-6.04-pre1/utils/isohybrid.c:827: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  825|       header->currentLBA = lendian_64(current);
#  826|       header->backupLBA = lendian_64(alternate);
#  827|->     header->firstUsableLBA = lendian_64(gptsize + hole);
#  828|       header->lastUsableLBA = lendian_64((isostat.st_size + padding)/512 -
#  829|   				       gptsize);

Error: CPPCHECK_WARNING (CWE-476): [#def739]
syslinux-6.04-pre1/utils/isohybrid.c:828: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  826|       header->backupLBA = lendian_64(alternate);
#  827|       header->firstUsableLBA = lendian_64(gptsize + hole);
#  828|->     header->lastUsableLBA = lendian_64((isostat.st_size + padding)/512 -
#  829|   				       gptsize);
#  830|       if (primary)

Error: CPPCHECK_WARNING (CWE-476): [#def740]
syslinux-6.04-pre1/utils/isohybrid.c:831: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  829|   				       gptsize);
#  830|       if (primary)
#  831|-> 	header->partitionEntriesLBA = lendian_64(0x02 + hole);
#  832|       else
#  833|   	header->partitionEntriesLBA = lendian_64(current - (128 / 4));

Error: CPPCHECK_WARNING (CWE-476): [#def741]
syslinux-6.04-pre1/utils/isohybrid.c:833: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  831|   	header->partitionEntriesLBA = lendian_64(0x02 + hole);
#  832|       else
#  833|-> 	header->partitionEntriesLBA = lendian_64(current - (128 / 4));
#  834|       header->numParts = lendian_int(0x80);
#  835|       header->sizeOfPartitionEntries = lendian_int(0x80);

Error: CPPCHECK_WARNING (CWE-476): [#def742]
syslinux-6.04-pre1/utils/isohybrid.c:834: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  832|       else
#  833|   	header->partitionEntriesLBA = lendian_64(current - (128 / 4));
#  834|->     header->numParts = lendian_int(0x80);
#  835|       header->sizeOfPartitionEntries = lendian_int(0x80);
#  836|       memcpy(header->diskGUID, disk_uuid, sizeof(uuid_t));

Error: CPPCHECK_WARNING (CWE-476): [#def743]
syslinux-6.04-pre1/utils/isohybrid.c:835: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  833|   	header->partitionEntriesLBA = lendian_64(current - (128 / 4));
#  834|       header->numParts = lendian_int(0x80);
#  835|->     header->sizeOfPartitionEntries = lendian_int(0x80);
#  836|       memcpy(header->diskGUID, disk_uuid, sizeof(uuid_t));
#  837|   

Error: CPPCHECK_WARNING (CWE-476): [#def744]
syslinux-6.04-pre1/utils/isohybrid.c:836: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  834|       header->numParts = lendian_int(0x80);
#  835|       header->sizeOfPartitionEntries = lendian_int(0x80);
#  836|->     memcpy(header->diskGUID, disk_uuid, sizeof(uuid_t));
#  837|   
#  838|       if (primary)

Error: CPPCHECK_WARNING (CWE-476): [#def745]
syslinux-6.04-pre1/utils/isohybrid.c:841: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: header
#  839|   	gpt += sizeof(struct gpt_header) + hole * 512;
#  840|       else
#  841|-> 	gpt -= header->sizeOfPartitionEntries * header->numParts;
#  842|   
#  843|       part = (struct gpt_part_header *)gpt;

Error: CPPCHECK_WARNING (CWE-476): [#def746]
syslinux-6.04-pre1/utils/isohybrid.c:996: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#  994|   
#  995|       buf = bufz;
#  996|->     memset(buf, 0, BUFSIZE);
#  997|       if (fread(buf, sizeof(char), BUFSIZE, fp) != BUFSIZE)
#  998|           err(1, "%s", argv[0]);

Error: CPPCHECK_WARNING (CWE-476): [#def747]
syslinux-6.04-pre1/utils/isohybrid.c:997: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
#  995|       buf = bufz;
#  996|       memset(buf, 0, BUFSIZE);
#  997|->     if (fread(buf, sizeof(char), BUFSIZE, fp) != BUFSIZE)
#  998|           err(1, "%s", argv[0]);
#  999|   

Error: CPPCHECK_WARNING (CWE-476): [#def748]
syslinux-6.04-pre1/utils/isohybrid.c:1120: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
# 1118|   
# 1119|   	buf = calloc(gpt_size, sizeof(char));
# 1120|-> 	memset(buf, 0, gpt_size);
# 1121|   
# 1122|   	/*

Error: CPPCHECK_WARNING (CWE-476): [#def749]
syslinux-6.04-pre1/utils/isohybrid.c:1146: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: buf
# 1144|   	    err(1, "%s: seek error - 6", argv[0]);
# 1145|   
# 1146|-> 	if (fwrite(buf, sizeof(char), gpt_size, fp) != (size_t)gpt_size)
# 1147|   	    err(1, "%s: write error - 2", argv[0]);
# 1148|       }