gnutls-3.8.11-6.fc44

List of Findings

Error: COMPILER_WARNING (CWE-704): [#def1]
gnutls-3.8.11/bundled_leancrypto/asn1/src/asn1_compiler.c: scope_hint: In function ‘tokenise’
gnutls-3.8.11/bundled_leancrypto/asn1/src/asn1_compiler.c:459:37: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  459 |                                 dir = bsearch(&tokens[tix], directives,
#      |                                     ^
#  457|   				 * table
#  458|   				 */
#  459|-> 				dir = bsearch(&tokens[tix], directives,
#  460|   					      sizeof(directives) /
#  461|   						      sizeof(directives[1]),

Error: COMPILER_WARNING (CWE-704): [#def2]
gnutls-3.8.11/bundled_leancrypto/asn1/src/asn1_compiler.c:459:37: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  457|   				 * table
#  458|   				 */
#  459|-> 				dir = bsearch(&tokens[tix], directives,
#  460|   					      sizeof(directives) /
#  461|   						      sizeof(directives[1]),

Error: COMPILER_WARNING (CWE-704): [#def3]
gnutls-3.8.11/bundled_leancrypto/asn1/src/asn1_compiler.c: scope_hint: In function ‘main’
gnutls-3.8.11/bundled_leancrypto/asn1/src/asn1_compiler.c:664:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  664 |         p = strchr(grammar_name, '.');
#      |           ^
#  662|   		exit(1);
#  663|   	}
#  664|-> 	p = strchr(grammar_name, '.');
#  665|   	if (p)
#  666|   		*p = '\0';

Error: COMPILER_WARNING (CWE-704): [#def4]
gnutls-3.8.11/bundled_leancrypto/asn1/src/asn1_compiler.c:664:11: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  662|   		exit(1);
#  663|   	}
#  664|-> 	p = strchr(grammar_name, '.');
#  665|   	if (p)
#  666|   		*p = '\0';

Error: GCC_ANALYZER_WARNING (CWE-121): [#def5]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:96:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   94|   	switch (m_f) {
#   95|   	case 4:
#   96|-> 		f0[4] = f[8] ^ f[12];
#   97|   		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def6]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:96:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   94|   	switch (m_f) {
#   95|   	case 4:
#   96|-> 		f0[4] = f[8] ^ f[12];
#   97|   		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];

Error: GCC_ANALYZER_WARNING (CWE-121): [#def7]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:97:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   95|   	case 4:
#   96|   		f0[4] = f[8] ^ f[12];
#   97|-> 		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def8]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:97:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   95|   	case 4:
#   96|   		f0[4] = f[8] ^ f[12];
#   97|-> 		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def9]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:97:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   95|   	case 4:
#   96|   		f0[4] = f[8] ^ f[12];
#   97|-> 		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];

Error: GCC_ANALYZER_WARNING (CWE-121): [#def10]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:98:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   96|   		f0[4] = f[8] ^ f[12];
#   97|   		f0[6] = f[12] ^ f[14];
#   98|-> 		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def11]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:98:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   96|   		f0[4] = f[8] ^ f[12];
#   97|   		f0[6] = f[12] ^ f[14];
#   98|-> 		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def12]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:98:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   96|   		f0[4] = f[8] ^ f[12];
#   97|   		f0[6] = f[12] ^ f[14];
#   98|-> 		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];

Error: GCC_ANALYZER_WARNING (CWE-121): [#def13]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:99:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   97|   		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];
#   99|-> 		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def14]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:99:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   97|   		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];
#   99|-> 		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def15]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:99:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   97|   		f0[6] = f[12] ^ f[14];
#   98|   		f0[7] = f[14] ^ f[15];
#   99|-> 		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];

Error: GCC_ANALYZER_WARNING (CWE-121): [#def16]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:100:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   98|   		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];
#  100|-> 		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def17]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:100:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   98|   		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];
#  100|-> 		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def18]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:100:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   98|   		f0[7] = f[14] ^ f[15];
#   99|   		f1[5] = f[11] ^ f[13];
#  100|-> 		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];

Error: GCC_ANALYZER_WARNING (CWE-121): [#def19]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:101:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   99|   		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];
#  101|-> 		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|   		f1[4] = f[9] ^ f[13] ^ f0[5];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def20]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:101:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#   99|   		f1[5] = f[11] ^ f[13];
#  100|   		f1[6] = f[13] ^ f[14];
#  101|-> 		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|   		f1[4] = f[9] ^ f[13] ^ f0[5];

Error: GCC_ANALYZER_WARNING (CWE-121): [#def21]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:102:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  100|   		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];
#  102|-> 		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|   		f1[4] = f[9] ^ f[13] ^ f0[5];
#  104|   

Error: GCC_ANALYZER_WARNING (CWE-126): [#def22]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:102:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  100|   		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];
#  102|-> 		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|   		f1[4] = f[9] ^ f[13] ^ f0[5];
#  104|   

Error: GCC_ANALYZER_WARNING (CWE-126): [#def23]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:102:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  100|   		f1[6] = f[13] ^ f[14];
#  101|   		f1[7] = f[15];
#  102|-> 		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|   		f1[4] = f[9] ^ f[13] ^ f0[5];
#  104|   

Error: GCC_ANALYZER_WARNING (CWE-121): [#def24]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:103:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  101|   		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|-> 		f1[4] = f[9] ^ f[13] ^ f0[5];
#  104|   
#  105|   		f0[0] = f[0];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def25]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:103:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  101|   		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|-> 		f1[4] = f[9] ^ f[13] ^ f0[5];
#  104|   
#  105|   		f0[0] = f[0];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def26]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:103:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  101|   		f1[7] = f[15];
#  102|   		f0[5] = f[10] ^ f[12] ^ f1[5];
#  103|-> 		f1[4] = f[9] ^ f[13] ^ f0[5];
#  104|   
#  105|   		f0[0] = f[0];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def27]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:106:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  104|   
#  105|   		f0[0] = f[0];
#  106|-> 		f1[3] = f[7] ^ f[11] ^ f[15];
#  107|   		f0[3] = f[6] ^ f[10] ^ f[14] ^ f1[3];
#  108|   		f0[2] = f[4] ^ f0[4] ^ f0[3] ^ f1[3];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def28]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:106:40: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  104|   
#  105|   		f0[0] = f[0];
#  106|-> 		f1[3] = f[7] ^ f[11] ^ f[15];
#  107|   		f0[3] = f[6] ^ f[10] ^ f[14] ^ f1[3];
#  108|   		f0[2] = f[4] ^ f0[4] ^ f0[3] ^ f1[3];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def29]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:107:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  105|   		f0[0] = f[0];
#  106|   		f1[3] = f[7] ^ f[11] ^ f[15];
#  107|-> 		f0[3] = f[6] ^ f[10] ^ f[14] ^ f1[3];
#  108|   		f0[2] = f[4] ^ f0[4] ^ f0[3] ^ f1[3];
#  109|   		f1[1] = f[3] ^ f[5] ^ f[9] ^ f[13] ^ f1[3];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def30]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:107:40: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  105|   		f0[0] = f[0];
#  106|   		f1[3] = f[7] ^ f[11] ^ f[15];
#  107|-> 		f0[3] = f[6] ^ f[10] ^ f[14] ^ f1[3];
#  108|   		f0[2] = f[4] ^ f0[4] ^ f0[3] ^ f1[3];
#  109|   		f1[1] = f[3] ^ f[5] ^ f[9] ^ f[13] ^ f1[3];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def31]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:108:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  106|   		f1[3] = f[7] ^ f[11] ^ f[15];
#  107|   		f0[3] = f[6] ^ f[10] ^ f[14] ^ f1[3];
#  108|-> 		f0[2] = f[4] ^ f0[4] ^ f0[3] ^ f1[3];
#  109|   		f1[1] = f[3] ^ f[5] ^ f[9] ^ f[13] ^ f1[3];
#  110|   		f1[2] = f[3] ^ f1[1] ^ f0[3];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def32]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:109:39: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  107|   		f0[3] = f[6] ^ f[10] ^ f[14] ^ f1[3];
#  108|   		f0[2] = f[4] ^ f0[4] ^ f0[3] ^ f1[3];
#  109|-> 		f1[1] = f[3] ^ f[5] ^ f[9] ^ f[13] ^ f1[3];
#  110|   		f1[2] = f[3] ^ f1[1] ^ f0[3];
#  111|   		f0[1] = f[2] ^ f0[2] ^ f1[1];

Error: GCC_ANALYZER_WARNING (CWE-126): [#def33]
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:109:46: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:189:13: enter_function: entry to ‘fft_rec’
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:206:12: branch_false: following ‘false’ branch (when ‘m_f != 1’)...
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:223:19: branch_false: ...to here
gnutls-3.8.11/bundled_leancrypto/hqc/src/fft.c:234:9: call_function: calling ‘radix’ from ‘fft_rec’
#  107|   		f0[3] = f[6] ^ f[10] ^ f[14] ^ f1[3];
#  108|   		f0[2] = f[4] ^ f0[4] ^ f0[3] ^ f1[3];
#  109|-> 		f1[1] = f[3] ^ f[5] ^ f[9] ^ f[13] ^ f1[3];
#  110|   		f1[2] = f[3] ^ f1[1] ^ f0[3];
#  111|   		f0[1] = f[2] ^ f0[2] ^ f1[1];

Error: COMPILER_WARNING: [#def34]
gnutls-3.8.11/bundled_leancrypto/install/include/leancrypto.h:152: included_from: Included from here.
gnutls-3.8.11/lib/nettle/pk.c:75: included_from: Included from here.
gnutls-3.8.11/bundled_leancrypto/install/include/leancrypto/lc_bike.h:373:28: warning: 'struct lc_rng_ctx' declared inside parameter list will not be visible outside of this definition or declaration
#  373 |                     struct lc_rng_ctx *rng_ctx, enum lc_bike_type bike_type);
#      |                            ^~~~~~~~~~
#  371|    */
#  372|   int lc_bike_keypair(struct lc_bike_pk *pk, struct lc_bike_sk *sk,
#  373|-> 		    struct lc_rng_ctx *rng_ctx, enum lc_bike_type bike_type);
#  374|   
#  375|   /**

Error: COMPILER_WARNING: [#def35]
gnutls-3.8.11/bundled_leancrypto/install/include/leancrypto/lc_bike.h:373:28: warning[warning]: 'struct lc_rng_ctx' declared inside parameter list will not be visible outside of this definition or declaration
#  371|    */
#  372|   int lc_bike_keypair(struct lc_bike_pk *pk, struct lc_bike_sk *sk,
#  373|-> 		    struct lc_rng_ctx *rng_ctx, enum lc_bike_type bike_type);
#  374|   
#  375|   /**

Error: GCC_ANALYZER_WARNING (CWE-457): [#def36]
gnutls-3.8.11/doc/examples/ex-client-resume.c:73:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'sdata.size'
gnutls-3.8.11/doc/examples/ex-client-resume.c:47:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:49:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:49:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:50:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:50:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:50:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:52:21: branch_true: following 'true' branch (when 't != 2')...
gnutls-3.8.11/doc/examples/ex-client-resume.c:54:22: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:56:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:58:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:58:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:61:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:63:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:65:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:71:20: branch_false: following 'false' branch (when 't != 1')...
gnutls-3.8.11/doc/examples/ex-client-resume.c:71:20: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:84:20: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:85:25: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:52:21: branch_true: following 'true' branch (when 't != 2')...
gnutls-3.8.11/doc/examples/ex-client-resume.c:54:22: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:56:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:58:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:58:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:61:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:63:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-client-resume.c:65:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-client-resume.c:73:25: danger: use of uninitialized value 'sdata.size' here
#   71|   		if (t > 0) {
#   72|   			/* if this is not the first time we connect */
#   73|-> 			CHECK(gnutls_session_set_data(session, sdata.data,
#   74|   						      sdata.size));
#   75|   			gnutls_free(sdata.data);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def37]
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-anon.c:42:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:49:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:58:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:59:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:61:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:70:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:71:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: branch_true: following 'true' branch (when 'err == -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: throw: if 'perror' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: danger: 'listen_sd' leaks here
#   70|   	SOCKET_ERR(err, "bind");
#   71|   	err = listen(listen_sd, 1024);
#   72|-> 	SOCKET_ERR(err, "listen");
#   73|   
#   74|   	printf("Server ready. Listening to port '%d'.\n\n", PORT);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def38]
gnutls-3.8.11/doc/examples/ex-serv-anon.c:78:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-anon.c:42:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:49:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:58:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:59:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:61:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:70:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:71:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:74:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:78:17: throw: if 'gnutls_init' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:78:17: danger: 'listen_sd' leaks here
#   76|   	client_len = sizeof(sa_cli);
#   77|   	for (;;) {
#   78|-> 		gnutls_init(&session, GNUTLS_SERVER);
#   79|   		gnutls_priority_set_direct(session,
#   80|   					   "NORMAL:+ANON-ECDH:+ANON-DH", NULL);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def39]
gnutls-3.8.11/doc/examples/ex-serv-anon.c:79:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-anon.c:42:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:49:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:58:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:59:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:61:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:70:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:71:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:74:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:79:17: throw: if 'gnutls_priority_set_direct' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:79:17: danger: 'listen_sd' leaks here
#   77|   	for (;;) {
#   78|   		gnutls_init(&session, GNUTLS_SERVER);
#   79|-> 		gnutls_priority_set_direct(session,
#   80|   					   "NORMAL:+ANON-ECDH:+ANON-DH", NULL);
#   81|   		gnutls_credentials_set(session, GNUTLS_CRD_ANON, anoncred);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def40]
gnutls-3.8.11/doc/examples/ex-serv-anon.c:81:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-anon.c:42:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:49:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:58:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:59:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:61:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:70:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:71:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:74:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:81:17: throw: if 'gnutls_credentials_set' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:81:17: danger: 'listen_sd' leaks here
#   79|   		gnutls_priority_set_direct(session,
#   80|   					   "NORMAL:+ANON-ECDH:+ANON-DH", NULL);
#   81|-> 		gnutls_credentials_set(session, GNUTLS_CRD_ANON, anoncred);
#   82|   
#   83|   		sd = accept(listen_sd, (struct sockaddr *)&sa_cli, &client_len);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def41]
gnutls-3.8.11/doc/examples/ex-serv-anon.c:83:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-anon.c:42:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:49:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:58:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:59:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:61:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:70:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:71:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:72:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:74:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-anon.c:83:22: throw: if 'accept' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-anon.c:83:22: danger: 'listen_sd' leaks here
#   81|   		gnutls_credentials_set(session, GNUTLS_CRD_ANON, anoncred);
#   82|   
#   83|-> 		sd = accept(listen_sd, (struct sockaddr *)&sa_cli, &client_len);
#   84|   
#   85|   		printf("- connection from %s, port %d\n",

Error: GCC_ANALYZER_WARNING (CWE-775): [#def42]
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-psk.c:69:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:76:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:104:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:105:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:107:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:116:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:117:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_true: following 'true' branch (when 'err == -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: throw: if 'perror' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: danger: 'listen_sd' leaks here
#  116|   	SOCKET_ERR(err, "bind");
#  117|   	err = listen(listen_sd, 1024);
#  118|-> 	SOCKET_ERR(err, "listen");
#  119|   
#  120|   	printf("Server ready. Listening to port '%d'.\n\n", PORT);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def43]
gnutls-3.8.11/doc/examples/ex-serv-psk.c:124:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-psk.c:69:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:76:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:104:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:105:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:107:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:116:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:117:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:120:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:124:17: throw: if 'gnutls_init' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:124:17: danger: 'listen_sd' leaks here
#  122|   	client_len = sizeof(sa_cli);
#  123|   	for (;;) {
#  124|-> 		gnutls_init(&session, GNUTLS_SERVER);
#  125|   		gnutls_priority_set(session, priority_cache);
#  126|   		gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def44]
gnutls-3.8.11/doc/examples/ex-serv-psk.c:125:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-psk.c:69:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:76:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:104:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:105:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:107:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:116:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:117:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:120:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:125:17: throw: if 'gnutls_priority_set' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:125:17: danger: 'listen_sd' leaks here
#  123|   	for (;;) {
#  124|   		gnutls_init(&session, GNUTLS_SERVER);
#  125|-> 		gnutls_priority_set(session, priority_cache);
#  126|   		gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
#  127|   				       x509_cred);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def45]
gnutls-3.8.11/doc/examples/ex-serv-psk.c:126:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-psk.c:69:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:76:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:104:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:105:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:107:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:116:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:117:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:120:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:126:17: throw: if 'gnutls_credentials_set' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:126:17: danger: 'listen_sd' leaks here
#  124|   		gnutls_init(&session, GNUTLS_SERVER);
#  125|   		gnutls_priority_set(session, priority_cache);
#  126|-> 		gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
#  127|   				       x509_cred);
#  128|   		gnutls_credentials_set(session, GNUTLS_CRD_PSK, psk_cred);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def46]
gnutls-3.8.11/doc/examples/ex-serv-psk.c:128:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-psk.c:69:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:76:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:104:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:105:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:107:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:116:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:117:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:120:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:128:17: throw: if 'gnutls_credentials_set' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:128:17: danger: 'listen_sd' leaks here
#  126|   		gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
#  127|   				       x509_cred);
#  128|-> 		gnutls_credentials_set(session, GNUTLS_CRD_PSK, psk_cred);
#  129|   
#  130|   		/* request client certificate if any.

Error: GCC_ANALYZER_WARNING (CWE-775): [#def47]
gnutls-3.8.11/doc/examples/ex-serv-psk.c:132:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-psk.c:69:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:76:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:104:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:105:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:107:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:116:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:117:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:120:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:132:17: throw: if 'gnutls_certificate_server_set_request' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:132:17: danger: 'listen_sd' leaks here
#  130|   		/* request client certificate if any.
#  131|   		 */
#  132|-> 		gnutls_certificate_server_set_request(session,
#  133|   						      GNUTLS_CERT_REQUEST);
#  134|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def48]
gnutls-3.8.11/doc/examples/ex-serv-psk.c:135:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-psk.c:69:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:76:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:104:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:105:9: branch_false: following 'false' branch (when 'listen_sd != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:107:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:116:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:117:15: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:118:9: branch_false: following 'false' branch (when 'err != -1')...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:120:9: branch_false: ...to here
gnutls-3.8.11/doc/examples/ex-serv-psk.c:135:22: throw: if 'accept' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-psk.c:135:22: danger: 'listen_sd' leaks here
#  133|   						      GNUTLS_CERT_REQUEST);
#  134|   
#  135|-> 		sd = accept(listen_sd, (struct sockaddr *)&sa_cli, &client_len);
#  136|   
#  137|   		printf("- connection from %s, port %d\n",

Error: GCC_ANALYZER_WARNING: [#def49]
gnutls-3.8.11/doc/examples/ex-serv-x509.c:113:9: warning[-Wanalyzer-fd-use-without-check]: 'listen' on possibly invalid file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-x509.c:60:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:95:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:113:9: danger: 'listen_sd' could be invalid
#  111|   	bind(listen_sd, (struct sockaddr *)&sa_serv, sizeof(sa_serv));
#  112|   
#  113|-> 	listen(listen_sd, 1024);
#  114|   
#  115|   	printf("Server ready. Listening to port '%d'.\n\n", PORT);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def50]
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-x509.c:60:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:95:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:101:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: throw: if 'gnutls_init' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: danger: 'listen_sd' leaks here
#  117|   	client_len = sizeof(sa_cli);
#  118|   	for (;;) {
#  119|-> 		CHECK(gnutls_init(&session, GNUTLS_SERVER));
#  120|   		CHECK(gnutls_priority_set(session, priority_cache));
#  121|   		CHECK(gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def51]
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-x509.c:60:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:95:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:101:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: throw: if 'gnutls_priority_set' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: danger: 'listen_sd' leaks here
#  118|   	for (;;) {
#  119|   		CHECK(gnutls_init(&session, GNUTLS_SERVER));
#  120|-> 		CHECK(gnutls_priority_set(session, priority_cache));
#  121|   		CHECK(gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
#  122|   					     x509_cred));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def52]
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-x509.c:60:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:95:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:101:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: throw: if 'gnutls_credentials_set' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: danger: 'listen_sd' leaks here
#  119|   		CHECK(gnutls_init(&session, GNUTLS_SERVER));
#  120|   		CHECK(gnutls_priority_set(session, priority_cache));
#  121|-> 		CHECK(gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
#  122|   					     x509_cred));
#  123|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def53]
gnutls-3.8.11/doc/examples/ex-serv-x509.c:129:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-x509.c:60:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:95:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:101:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:129:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:129:17: throw: if 'gnutls_certificate_server_set_request' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:129:17: danger: 'listen_sd' leaks here
#  127|   		 * example.
#  128|   		 */
#  129|-> 		gnutls_certificate_server_set_request(session,
#  130|   						      GNUTLS_CERT_IGNORE);
#  131|   		gnutls_handshake_set_timeout(session,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def54]
gnutls-3.8.11/doc/examples/ex-serv-x509.c:131:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-x509.c:60:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:95:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:101:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:129:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:131:17: throw: if 'gnutls_handshake_set_timeout' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:131:17: danger: 'listen_sd' leaks here
#  129|   		gnutls_certificate_server_set_request(session,
#  130|   						      GNUTLS_CERT_IGNORE);
#  131|-> 		gnutls_handshake_set_timeout(session,
#  132|   					     GNUTLS_DEFAULT_HANDSHAKE_TIMEOUT);
#  133|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def55]
gnutls-3.8.11/doc/examples/ex-serv-x509.c:134:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'listen_sd'
gnutls-3.8.11/doc/examples/ex-serv-x509.c:60:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:62:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:64:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:67:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:76:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:79:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:82:9: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:95:9: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:101:21: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:119:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:120:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:121:17: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:129:17: branch_true: ...to here
gnutls-3.8.11/doc/examples/ex-serv-x509.c:134:22: throw: if 'accept' throws an exception...
gnutls-3.8.11/doc/examples/ex-serv-x509.c:134:22: danger: 'listen_sd' leaks here
#  132|   					     GNUTLS_DEFAULT_HANDSHAKE_TIMEOUT);
#  133|   
#  134|-> 		sd = accept(listen_sd, (struct sockaddr *)&sa_cli, &client_len);
#  135|   
#  136|   		printf("- connection from %s, port %d\n",

Error: GCC_ANALYZER_WARNING (CWE-775): [#def56]
gnutls-3.8.11/doc/examples/tcp.c:39:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'sd'
gnutls-3.8.11/doc/examples/tcp.c:32:14: acquire_resource: stream socket created here
gnutls-3.8.11/doc/examples/tcp.c:39:15: throw: if 'connect' throws an exception...
gnutls-3.8.11/doc/examples/tcp.c:39:15: danger: 'sd' leaks here
#   37|   	inet_pton(AF_INET, SERVER, &sa.sin_addr);
#   38|   
#   39|-> 	err = connect(sd, (struct sockaddr *)&sa, sizeof(sa));
#   40|   	if (err < 0) {
#   41|   		fprintf(stderr, "Connect error\n");

Error: GCC_ANALYZER_WARNING (CWE-404): [#def57]
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:89:15: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:88:9: acquire_resource: 'va_start' called here
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:89:15: throw: if the called function throws an exception...
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:89:15: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   87|   	int ret;
#   88|   	va_start(ap, format);
#   89|-> 	ret = s->erroutfn(s->opaque, format, ap);
#   90|   	va_end(ap);
#   91|   	return ret;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def58]
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:100:23: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:98:9: acquire_resource: 'va_start' called here
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:99:12: branch_true: following 'true' branch...
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:100:23: branch_true: ...to here
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:100:23: throw: if the called function throws an exception...
gnutls-3.8.11/doc/examples/tlsproxy/crypto-gnutls.c:100:23: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   98|   	va_start(ap, format);
#   99|   	if (s->debug)
#  100|-> 		ret = s->erroutfn(s->opaque, format, ap);
#  101|   	va_end(ap);
#  102|   	return ret;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def59]
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:113:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd'
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:214:12: enter_function: entry to 'runlistener'
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:217:25: call_function: calling 'bindtoaddress' from 'runlistener'
#  111|   
#  112|   	if (listen(fd, 5) < 0) {
#  113|-> 		close(fd);
#  114|   		return -1;
#  115|   	}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def60]
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:156:29: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd'
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:137:12: branch_false: following 'false' branch (when 'colon' is NULL)...
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:142:13: branch_false: ...to here
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:146:12: branch_false: following 'false' branch...
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:153:14: branch_false: ...to here
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:153:27: branch_true: following 'true' branch (when 'rp' is non-NULL)...
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:154:22: branch_true: ...to here
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:154:22: acquire_resource: socket created here
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:155:20: branch_true: following 'true' branch (when 'fd >= 0')...
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:156:29: branch_true: ...to here
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:156:29: throw: if 'connect' throws an exception...
gnutls-3.8.11/doc/examples/tlsproxy/tlsproxy.c:156:29: danger: 'fd' leaks here
#  154|   		fd = socket(rp->ai_family, rp->ai_socktype, rp->ai_protocol);
#  155|   		if (fd >= 0) {
#  156|-> 			if (connect(fd, rp->ai_addr, rp->ai_addrlen) == 0)
#  157|   				break;
#  158|   			close(fd);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def61]
gnutls-3.8.11/gl/asnprintf.c:31:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/asnprintf.c:30:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/asnprintf.c:31:12: throw: if 'vasnprintf' throws an exception...
gnutls-3.8.11/gl/asnprintf.c:31:12: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   29|   
#   30|     va_start (args, format);
#   31|->   result = vasnprintf (resultbuf, lengthp, format, args);
#   32|     va_end (args);
#   33|     return result;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def62]
gnutls-3.8.11/gl/fcntl.c:328:22: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:328:22: throw: if 'fcntl' throws an exception...
gnutls-3.8.11/gl/fcntl.c:328:22: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  326|             #endif
#  327|               /* These actions take no argument.  */
#  328|->             result = fcntl (fd, action);
#  329|               break;
#  330|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def63]
gnutls-3.8.11/gl/fcntl.c:424:24: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:424:24: throw: if 'fcntl' throws an exception...
gnutls-3.8.11/gl/fcntl.c:424:24: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  422|               {
#  423|                 int x = va_arg (arg, int);
#  424|->               result = fcntl (fd, action, x);
#  425|               }
#  426|               break;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def64]
gnutls-3.8.11/gl/fcntl.c:432:24: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:432:24: throw: if 'fcntl' throws an exception...
gnutls-3.8.11/gl/fcntl.c:432:24: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  430|               {
#  431|                 void *p = va_arg (arg, void *);
#  432|->               result = fcntl (fd, action, p);
#  433|               }
#  434|               break;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def65]
gnutls-3.8.11/gl/fcntl.c:482:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:216:18: call_function: inlined call to 'rpl_fcntl_DUPFD' from 'rpl_fcntl'
#  480|       }
#  481|   #else
#  482|->   result = fcntl (fd, F_DUPFD, target);
#  483|   #endif
#  484|     return result;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def66]
gnutls-3.8.11/gl/fcntl.c:512:16: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  510|     if (0 <= have_dupfd_cloexec)
#  511|       {
#  512|->       result = fcntl (fd, F_DUPFD_CLOEXEC, target);
#  513|         if (0 <= result || errno != EINVAL)
#  514|           {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def67]
gnutls-3.8.11/gl/fcntl.c:533:19: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  531|     if (0 <= result && have_dupfd_cloexec == -1)
#  532|       {
#  533|->       int flags = fcntl (result, F_GETFD);
#  534|         if (flags < 0 || fcntl (result, F_SETFD, flags | FD_CLOEXEC) == -1)
#  535|           {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def68]
gnutls-3.8.11/gl/fcntl.c:534:24: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  532|       {
#  533|         int flags = fcntl (result, F_GETFD);
#  534|->       if (flags < 0 || fcntl (result, F_SETFD, flags | FD_CLOEXEC) == -1)
#  535|           {
#  536|             int saved_errno = errno;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def69]
gnutls-3.8.11/gl/fcntl.c:537:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  535|           {
#  536|             int saved_errno = errno;
#  537|->           close (result);
#  538|             errno = saved_errno;
#  539|             result = -1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def70]
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
gnutls-3.8.11/gl/gl_anylinked_list2.h:78:1: enter_function: entry to 'gl_linked_nx_create'
gnutls-3.8.11/gl/gl_anylinked_list2.h:89:6: branch_false: following 'false' branch (when 'list' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:92:3: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:102:24: call_function: inlined call to 'next_prime' from 'gl_linked_nx_create'
gnutls-3.8.11/gl/gl_anylinked_list2.h:103:8: branch_false: following 'false' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:106:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:106:27: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:107:8: branch_false: following 'false' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:111:3: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:113:10: branch_true: following 'true' branch (when 'count != 0')...
gnutls-3.8.11/gl/gl_anylinked_list2.h:116:38: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:118:10: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:121:21: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:124:9: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: danger: '<unknown>' leaks here; was allocated at [(9)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/8)
#  123|         node->h.hashcode =
#  124|           (list->base.hashcode_fn != NULL
#  125|->          ? list->base.hashcode_fn (node->value)
#  126|            : (size_t)(uintptr_t) node->value);
#  127|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def71]
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: warning[-Wanalyzer-malloc-leak]: leak of 'list'
gnutls-3.8.11/gl/gl_anylinked_list2.h:78:1: enter_function: entry to 'gl_linked_nx_create'
gnutls-3.8.11/gl/gl_anylinked_list2.h:86:29: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:89:6: branch_false: following 'false' branch (when 'list' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:92:3: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:102:24: call_function: inlined call to 'next_prime' from 'gl_linked_nx_create'
gnutls-3.8.11/gl/gl_anylinked_list2.h:103:8: branch_false: following 'false' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:106:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:107:8: branch_false: following 'false' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:111:3: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:113:10: branch_true: following 'true' branch (when 'count != 0')...
gnutls-3.8.11/gl/gl_anylinked_list2.h:116:38: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:118:10: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:121:21: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:124:9: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: danger: 'list' leaks here; was allocated at [(2)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/1)
#  123|         node->h.hashcode =
#  124|           (list->base.hashcode_fn != NULL
#  125|->          ? list->base.hashcode_fn (node->value)
#  126|            : (size_t)(uintptr_t) node->value);
#  127|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def72]
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: warning[-Wanalyzer-malloc-leak]: leak of 'node'
gnutls-3.8.11/gl/gl_anylinked_list2.h:78:1: enter_function: entry to 'gl_linked_nx_create'
gnutls-3.8.11/gl/gl_anylinked_list2.h:89:6: branch_false: following 'false' branch (when 'list' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:92:3: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:102:24: call_function: inlined call to 'next_prime' from 'gl_linked_nx_create'
gnutls-3.8.11/gl/gl_anylinked_list2.h:103:8: branch_false: following 'false' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:106:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:107:8: branch_false: following 'false' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:111:3: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:113:10: branch_true: following 'true' branch (when 'count != 0')...
gnutls-3.8.11/gl/gl_anylinked_list2.h:116:38: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:116:38: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:118:10: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:121:21: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:124:9: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:125:12: danger: 'node' leaks here; was allocated at [(13)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/12)
#  123|         node->h.hashcode =
#  124|           (list->base.hashcode_fn != NULL
#  125|->          ? list->base.hashcode_fn (node->value)
#  126|            : (size_t)(uintptr_t) node->value);
#  127|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def73]
gnutls-3.8.11/gl/gl_anylinked_list2.h:628:8: warning[-Wanalyzer-malloc-leak]: leak of 'node'
gnutls-3.8.11/gl/gl_anylinked_list2.h:619:34: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:621:6: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:624:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:627:5: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:628:8: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:628:8: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:628:8: danger: 'node' leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  626|     node->h.hashcode =
#  627|       (list->base.hashcode_fn != NULL
#  628|->      ? list->base.hashcode_fn (node->value)
#  629|        : (size_t)(uintptr_t) node->value);
#  630|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def74]
gnutls-3.8.11/gl/gl_anylinked_list2.h:666:8: warning[-Wanalyzer-malloc-leak]: leak of 'node'
gnutls-3.8.11/gl/gl_anylinked_list2.h:657:34: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:659:6: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:662:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:665:5: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:666:8: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:666:8: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:666:8: danger: 'node' leaks here; was allocated at [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  664|     node->h.hashcode =
#  665|       (list->base.hashcode_fn != NULL
#  666|->      ? list->base.hashcode_fn (node->value)
#  667|        : (size_t)(uintptr_t) node->value);
#  668|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def75]
gnutls-3.8.11/gl/gl_anylinked_list2.h:704:8: warning[-Wanalyzer-malloc-leak]: leak of 'new_node'
gnutls-3.8.11/gl/gl_anylinked_list2.h:695:34: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:697:6: branch_false: following 'false' branch (when 'new_node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:700:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:703:5: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:704:8: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:704:8: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:704:8: danger: 'new_node' leaks here; was allocated at [(1)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/0)
#  702|     new_node->h.hashcode =
#  703|       (list->base.hashcode_fn != NULL
#  704|->      ? list->base.hashcode_fn (new_node->value)
#  705|        : (size_t)(uintptr_t) new_node->value);
#  706|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def76]
gnutls-3.8.11/gl/gl_anylinked_list2.h:742:8: warning[-Wanalyzer-malloc-leak]: leak of 'new_node'
gnutls-3.8.11/gl/gl_anylinked_list2.h:733:34: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:735:6: branch_false: following 'false' branch (when 'new_node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:738:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:741:5: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:742:8: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:742:8: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:742:8: danger: 'new_node' leaks here; was allocated at [(1)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/0)
#  740|     new_node->h.hashcode =
#  741|       (list->base.hashcode_fn != NULL
#  742|->      ? list->base.hashcode_fn (new_node->value)
#  743|        : (size_t)(uintptr_t) new_node->value);
#  744|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def77]
gnutls-3.8.11/gl/gl_anylinked_list2.h:785:8: warning[-Wanalyzer-malloc-leak]: leak of 'new_node'
gnutls-3.8.11/gl/gl_anylinked_list2.h:773:6: branch_false: following 'false' branch (when 'count >= position')...
gnutls-3.8.11/gl/gl_anylinked_list2.h:777:43: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:777:43: acquire_memory: allocated here
gnutls-3.8.11/gl/gl_anylinked_list2.h:778:6: branch_false: following 'false' branch (when 'new_node' is non-NULL)...
gnutls-3.8.11/gl/gl_anylinked_list2.h:781:27: branch_false: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:784:5: branch_true: following 'true' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:785:8: branch_true: ...to here
gnutls-3.8.11/gl/gl_anylinked_list2.h:785:8: throw: if the called function throws an exception...
gnutls-3.8.11/gl/gl_anylinked_list2.h:785:8: danger: 'new_node' leaks here; was allocated at [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
#  783|     new_node->h.hashcode =
#  784|       (list->base.hashcode_fn != NULL
#  785|->      ? list->base.hashcode_fn (new_node->value)
#  786|        : (size_t)(uintptr_t) new_node->value);
#  787|   

Error: CPPCHECK_WARNING (CWE-457): [#def78]
gnutls-3.8.11/gl/gl_anylinked_list2.h:952: error[uninitvar]: Uninitialized variables: result.count, result.i, result.j
#  950|   #endif
#  951|   
#  952|->   return result;
#  953|   }
#  954|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def79]
gnutls-3.8.11/gl/gl_anylinked_list2.h:952:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'result.count'
#  950|   #endif
#  951|   
#  952|->   return result;
#  953|   }
#  954|   

Error: CPPCHECK_WARNING (CWE-457): [#def80]
gnutls-3.8.11/gl/gl_anylinked_list2.h:1023: warning[uninitvar]: Uninitialized variables: result.count, result.i, result.j
# 1021|   #endif
# 1022|   
# 1023|->   return result;
# 1024|   }
# 1025|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def81]
gnutls-3.8.11/gl/gl_anylinked_list2.h:1023:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'result.count'
gnutls-3.8.11/gl/gl_anylinked_list2.h:962:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/gl_anylinked_list2.h:1023:10: danger: use of uninitialized value 'result.count' here
# 1021|   #endif
# 1022|   
# 1023|->   return result;
# 1024|   }
# 1025|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def82]
gnutls-3.8.11/gl/read-file.c:199:7: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(filename,  mode)'
gnutls-3.8.11/gl/read-file.c:190:1: enter_function: entry to '_gnutls_read_file'
gnutls-3.8.11/gl/read-file.c:193:18: acquire_resource: opened here
gnutls-3.8.11/gl/read-file.c:196:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/read-file.c:199:7: branch_false: ...to here
gnutls-3.8.11/gl/read-file.c:202:9: call_function: calling '_gnutls_fread_file' from '_gnutls_read_file'
#  197|       return NULL;
#  198|   
#  199|->   if (flags & RF_SENSITIVE)
#  200|       setvbuf (stream, NULL, _IONBF, 0);
#  201|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def83]
gnutls-3.8.11/gl/read-file.c:199:7: warning[-Wanalyzer-malloc-leak]: leak of 'fopen(filename,  mode)'
gnutls-3.8.11/gl/read-file.c:190:1: enter_function: entry to '_gnutls_read_file'
gnutls-3.8.11/gl/read-file.c:193:18: acquire_memory: allocated here
gnutls-3.8.11/gl/read-file.c:196:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/read-file.c:199:7: branch_false: ...to here
gnutls-3.8.11/gl/read-file.c:202:9: call_function: calling '_gnutls_fread_file' from '_gnutls_read_file'
#  197|       return NULL;
#  198|   
#  199|->   if (flags & RF_SENSITIVE)
#  200|       setvbuf (stream, NULL, _IONBF, 0);
#  201|   

Error: GCC_ANALYZER_WARNING (CWE-124): [#def84]
gnutls-3.8.11/gl/vasnprintf.c:2370:13: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
gnutls-3.8.11/gl/vasnprintf.c:2246:1: enter_function: entry to 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2252:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2263:7: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2263:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2281:7: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2281:7: call_function: inlined call to 'xsum4' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2283:8: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2283:8: branch_true: following 'true' branch (when 'sum <= 3999')...
gnutls-3.8.11/gl/vasnprintf.c:2285:27: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2337:12: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2339:24: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2340:39: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2358:12: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2362:13: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2362:12: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2366:19: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2366:16: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2368:32: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_false: following 'false' branch (when 'memory' is non-NULL)...
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2369:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2370:13: danger: out-of-bounds write at byte -1 but region starts at byte 0
# 2368|               augmented_length = xsum (length, 1);
# 2369|               ENSURE_ALLOCATION (augmented_length);
# 2370|->             result[length] = '%';
# 2371|               length = augmented_length;
# 2372|             }

Error: GCC_ANALYZER_WARNING (CWE-124): [#def85]
gnutls-3.8.11/gl/vasnprintf.c:6451:17: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
gnutls-3.8.11/gl/vasnprintf.c:2246:1: enter_function: entry to 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2252:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2263:7: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2263:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2281:7: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2281:7: call_function: inlined call to 'xsum4' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2283:8: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2283:8: branch_true: following 'true' branch (when 'sum <= 3999')...
gnutls-3.8.11/gl/vasnprintf.c:2285:27: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2337:12: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2339:24: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2340:39: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2358:12: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2362:13: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2362:12: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2375:19: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2375:16: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2378:16: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2378:16: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2820:21: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6120:20: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6122:21: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6122:20: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6124:21: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6124:20: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6126:21: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6126:20: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6129:21: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6129:20: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6134:25: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6134:24: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6136:25: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6136:24: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6194:25: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6194:24: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6214:17: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6446:17: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:6446:17: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:6451:18: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:6451:17: danger: out-of-bounds write at byte -1 but region starts at byte 0
# 6449|                   /* Prepare checking whether snprintf returns the count
# 6450|                      via %n.  */
# 6451|->                 *(TCHAR_T *) (result + length) = '\0';
# 6452|   #endif
# 6453|   

Error: GCC_ANALYZER_WARNING (CWE-124): [#def86]
gnutls-3.8.11/gl/vasnprintf.c:7247:5: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
gnutls-3.8.11/gl/vasnprintf.c:2246:1: enter_function: entry to 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2252:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2263:7: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2263:6: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2281:7: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2281:7: call_function: inlined call to 'xsum4' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2283:8: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2283:8: branch_true: following 'true' branch (when 'sum <= 3999')...
gnutls-3.8.11/gl/vasnprintf.c:2285:27: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2337:12: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2339:24: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2340:39: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:2358:12: branch_true: following 'true' branch...
gnutls-3.8.11/gl/vasnprintf.c:7246:5: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/gl/vasnprintf.c:7246:5: branch_false: following 'false' branch...
gnutls-3.8.11/gl/vasnprintf.c:7247:11: branch_false: ...to here
gnutls-3.8.11/gl/vasnprintf.c:7247:5: danger: out-of-bounds write at byte -1 but region starts at byte 0
# 7245|       /* Add the final NUL.  */
# 7246|       ENSURE_ALLOCATION (xsum (length, 1));
# 7247|->     result[length] = '\0';
# 7248|   
# 7249|       if (result != resultbuf && length + 1 < allocated)

Error: COMPILER_WARNING: [#def87]
gnutls-3.8.11/lib/auth/cert.c: scope_hint: In function 'get_issuers'
gnutls-3.8.11/lib/auth/cert.c:390:69: warning[-Wunused-but-set-parameter=]: parameter 'data_size' set but not used
#  390 |                        int issuers_len, const uint8_t *data, size_t data_size)
#      |                                                              ~~~~~~~^~~~~~~~~
#  388|    */
#  389|   static int get_issuers(gnutls_session_t session, gnutls_datum_t *issuers_dn,
#  390|-> 		       int issuers_len, const uint8_t *data, size_t data_size)
#  391|   {
#  392|   	int i;

Error: CPPCHECK_WARNING (CWE-190): [#def88]
gnutls-3.8.11/lib/datum.c:65: error[integerOverflow]: Signed integer underflow for expression '(-2147483647-1)-1'.
#   63|   
#   64|   	size_t capacity;
#   65|-> 	if (!INT_ADD_OK(data_size, 1, &capacity))
#   66|   		return gnutls_assert_val(GNUTLS_E_MEMORY_ERROR);
#   67|   

Error: CPPCHECK_WARNING (CWE-457): [#def89]
gnutls-3.8.11/lib/ext/compress_certificate.c:258: error[uninitvar]: Uninitialized variable: bytes
#  256|   	}
#  257|   
#  258|-> 	ret = _gnutls_buffer_append_data_prefix(data, 8, bytes, bytes_len);
#  259|   	if (ret < 0)
#  260|   		return gnutls_assert_val(ret);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def90]
gnutls-3.8.11/lib/fips.c:114:23: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen("/proc/sys/crypto/fips_enabled", "re")'
gnutls-3.8.11/lib/fips.c:97:12: branch_false: following 'false' branch (when 'p' is NULL)...
gnutls-3.8.11/lib/fips.c:112:14: branch_false: ...to here
gnutls-3.8.11/lib/fips.c:112:14: acquire_resource: opened here
gnutls-3.8.11/lib/fips.c:113:12: branch_true: following 'true' branch...
gnutls-3.8.11/lib/fips.c:114:23: branch_true: ...to here
gnutls-3.8.11/lib/fips.c:114:23: throw: if 'fgetc' throws an exception...
gnutls-3.8.11/lib/fips.c:114:23: danger: 'fopen("/proc/sys/crypto/fips_enabled", "re")' leaks here; was opened at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  112|   	fd = fopen(FIPS_KERNEL_FILE, "re");
#  113|   	if (fd != NULL) {
#  114|-> 		f1p = fgetc(fd);
#  115|   		fclose(fd);
#  116|   

Error: COMPILER_WARNING (CWE-704): [#def91]
gnutls-3.8.11/lib/fips.c: scope_hint: In function 'get_hmac_path'
gnutls-3.8.11/lib/fips.c:287:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  287 |         p = strrchr(gnutls_path, '/');
#      |           ^
#  285|   	char *p;
#  286|   
#  287|-> 	p = strrchr(gnutls_path, '/');
#  288|   
#  289|   	if (p == NULL)

Error: COMPILER_WARNING (CWE-704): [#def92]
gnutls-3.8.11/lib/fips.c:287:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  285|   	char *p;
#  286|   
#  287|-> 	p = strrchr(gnutls_path, '/');
#  288|   
#  289|   	if (p == NULL)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def93]
gnutls-3.8.11/lib/fips.c:339:9: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(hmac_path, "r")'
gnutls-3.8.11/lib/fips.c:335:18: acquire_resource: opened here
gnutls-3.8.11/lib/fips.c:336:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/fips.c:339:9: branch_false: ...to here
gnutls-3.8.11/lib/fips.c:339:9: throw: if 'gnutls_memset' throws an exception...
gnutls-3.8.11/lib/fips.c:339:9: danger: 'fopen(hmac_path, "r")' leaks here; was opened at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  337|   		return gnutls_assert_val(GNUTLS_E_FILE_ERROR);
#  338|   
#  339|-> 	gnutls_memset(hmac_file, 0, sizeof(*hmac_file));
#  340|   	ret = ini_parse_file(stream, handler, hmac_file);
#  341|   	fclose(stream);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def94]
gnutls-3.8.11/lib/fips.c:340:15: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(hmac_path, "r")'
gnutls-3.8.11/lib/fips.c:335:18: acquire_resource: opened here
gnutls-3.8.11/lib/fips.c:336:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/fips.c:339:9: branch_false: ...to here
gnutls-3.8.11/lib/fips.c:340:15: throw: if 'ini_parse_file' throws an exception...
gnutls-3.8.11/lib/fips.c:340:15: danger: 'fopen(hmac_path, "r")' leaks here; was opened at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  338|   
#  339|   	gnutls_memset(hmac_file, 0, sizeof(*hmac_file));
#  340|-> 	ret = ini_parse_file(stream, handler, hmac_file);
#  341|   	fclose(stream);
#  342|   	if (ret < 0)

Error: GCC_ANALYZER_WARNING (CWE-404): [#def95]
gnutls-3.8.11/lib/nettle/mpi.c:78:13: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/lib/nettle/mpi.c:90:12: enter_function: entry to 'wrap_nettle_mpi_init_multi'
gnutls-3.8.11/lib/nettle/mpi.c:98:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/mpi.c:103:9: branch_false: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:103:9: acquire_resource: 'va_start' called here
gnutls-3.8.11/lib/nettle/mpi.c:107:20: branch_true: following 'true' branch (when 'next' is non-NULL)...
gnutls-3.8.11/lib/nettle/mpi.c:108:31: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:108:31: call_function: calling 'wrap_nettle_mpi_init' from 'wrap_nettle_mpi_init_multi'
#   76|   	bigint_t r;
#   77|   
#   78|-> 	r = gnutls_malloc(SIZEOF_MPZT);
#   79|   	if (r == NULL) {
#   80|   		gnutls_assert();

Error: GCC_ANALYZER_WARNING (CWE-404): [#def96]
gnutls-3.8.11/lib/nettle/mpi.c:80:17: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/lib/nettle/mpi.c:90:12: enter_function: entry to 'wrap_nettle_mpi_init_multi'
gnutls-3.8.11/lib/nettle/mpi.c:98:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/mpi.c:103:9: branch_false: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:103:9: acquire_resource: 'va_start' called here
gnutls-3.8.11/lib/nettle/mpi.c:107:20: branch_true: following 'true' branch (when 'next' is non-NULL)...
gnutls-3.8.11/lib/nettle/mpi.c:108:31: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:108:31: call_function: calling 'wrap_nettle_mpi_init' from 'wrap_nettle_mpi_init_multi'
#   78|   	r = gnutls_malloc(SIZEOF_MPZT);
#   79|   	if (r == NULL) {
#   80|-> 		gnutls_assert();
#   81|   		return GNUTLS_E_MEMORY_ERROR;
#   82|   	}

Error: GCC_ANALYZER_WARNING (CWE-404): [#def97]
gnutls-3.8.11/lib/nettle/mpi.c:110:33: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/lib/nettle/mpi.c:90:12: enter_function: entry to 'wrap_nettle_mpi_init_multi'
gnutls-3.8.11/lib/nettle/mpi.c:98:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/mpi.c:103:9: branch_false: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:103:9: acquire_resource: 'va_start' called here
gnutls-3.8.11/lib/nettle/mpi.c:107:20: branch_true: following 'true' branch (when 'next' is non-NULL)...
gnutls-3.8.11/lib/nettle/mpi.c:108:31: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:108:31: call_function: calling 'wrap_nettle_mpi_init' from 'wrap_nettle_mpi_init_multi'
gnutls-3.8.11/lib/nettle/mpi.c:108:31: return_function: returning to 'wrap_nettle_mpi_init_multi' from 'wrap_nettle_mpi_init'
gnutls-3.8.11/lib/nettle/mpi.c:109:28: branch_true: following 'true' branch...
gnutls-3.8.11/lib/nettle/mpi.c:110:33: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:110:33: branch_true: following 'true' branch...
gnutls-3.8.11/lib/nettle/mpi.c:110:33: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:110:33: throw: if '_gnutls_log' throws an exception...
gnutls-3.8.11/lib/nettle/mpi.c:110:33: danger: missing call to 'va_end' to match 'va_start' at [(4)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/3)
#  108|   			ret = wrap_nettle_mpi_init(next);
#  109|   			if (ret < 0) {
#  110|-> 				gnutls_assert();
#  111|   				va_end(args);
#  112|   				last_failed = next;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def98]
gnutls-3.8.11/lib/nettle/mpi.c:131:25: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/lib/nettle/mpi.c:90:12: enter_function: entry to 'wrap_nettle_mpi_init_multi'
gnutls-3.8.11/lib/nettle/mpi.c:98:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/mpi.c:103:9: branch_false: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:107:20: branch_true: following 'true' branch (when 'next' is non-NULL)...
gnutls-3.8.11/lib/nettle/mpi.c:108:31: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:108:31: call_function: calling 'wrap_nettle_mpi_init' from 'wrap_nettle_mpi_init_multi'
gnutls-3.8.11/lib/nettle/mpi.c:108:31: return_function: returning to 'wrap_nettle_mpi_init_multi' from 'wrap_nettle_mpi_init'
gnutls-3.8.11/lib/nettle/mpi.c:109:28: branch_true: following 'true' branch...
gnutls-3.8.11/lib/nettle/mpi.c:110:33: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:125:9: acquire_resource: 'va_start' called here
gnutls-3.8.11/lib/nettle/mpi.c:129:20: branch_true: following 'true' branch (when 'next != next')...
gnutls-3.8.11/lib/nettle/mpi.c:130:25: branch_true: ...to here
gnutls-3.8.11/lib/nettle/mpi.c:131:25: throw: if the called function throws an exception...
gnutls-3.8.11/lib/nettle/mpi.c:131:25: danger: missing call to 'va_end' to match 'va_start' at [(13)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/12)
#  129|   		if (next != last_failed) {
#  130|   			mpz_clear(TOMPZ(*next));
#  131|-> 			gnutls_free(*next);
#  132|   		}
#  133|   	} while (next != last_failed);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def99]
gnutls-3.8.11/lib/nettle/sysrng-linux.c:133:24: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open("/dev/urandom", 0)'
gnutls-3.8.11/lib/nettle/sysrng-linux.c:127:22: acquire_resource: opened here
gnutls-3.8.11/lib/nettle/sysrng-linux.c:128:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/sysrng-linux.c:128:12: branch_false: ...to here
gnutls-3.8.11/lib/nettle/sysrng-linux.c:133:24: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/sysrng-linux.c:157:9: branch_false: ...to here
gnutls-3.8.11/lib/nettle/sysrng-linux.c:133:24: danger: 'open("/dev/urandom", 0)' leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  131|   	}
#  132|   
#  133|-> 	for (done = 0; done < size;) {
#  134|   		int res;
#  135|   		do {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def100]
gnutls-3.8.11/lib/nettle/sysrng-linux.c:185:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open("/dev/urandom", 0)'
gnutls-3.8.11/lib/nettle/sysrng-linux.c:167:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/sysrng-linux.c:172:17: branch_false: ...to here
gnutls-3.8.11/lib/nettle/sysrng-linux.c:179:22: acquire_resource: opened here
gnutls-3.8.11/lib/nettle/sysrng-linux.c:180:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/nettle/sysrng-linux.c:185:9: branch_false: ...to here
gnutls-3.8.11/lib/nettle/sysrng-linux.c:185:9: danger: 'open("/dev/urandom", 0)' leaks here; was opened at [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
#  183|   		return gnutls_assert_val(GNUTLS_E_RANDOM_DEVICE_ERROR);
#  184|   	}
#  185|-> 	close(urandom_fd);
#  186|   
#  187|   	_rnd_get_system_entropy = _rnd_get_system_entropy_urandom;

Error: COMPILER_WARNING (CWE-704): [#def101]
gnutls-3.8.11/lib/pkcs11.c: scope_hint: In function 'pkcs11_provider_init'
gnutls-3.8.11/lib/pkcs11.c:283:26: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  283 |         if (params && (p = strstr(params, "p11-kit:")) != 0) {
#      |                          ^
#  281|   	_gnutls_debug_log("p11: Initializing module: %s\n", name);
#  282|   
#  283|-> 	if (params && (p = strstr(params, "p11-kit:")) != 0) {
#  284|   		reserved = (char *)(p + sizeof("p11-kit:") - 1);
#  285|   	}

Error: COMPILER_WARNING (CWE-704): [#def102]
gnutls-3.8.11/lib/pkcs11.c:283:26: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  281|   	_gnutls_debug_log("p11: Initializing module: %s\n", name);
#  282|   
#  283|-> 	if (params && (p = strstr(params, "p11-kit:")) != 0) {
#  284|   		reserved = (char *)(p + sizeof("p11-kit:") - 1);
#  285|   	}

Error: CPPCHECK_WARNING (CWE-457): [#def103]
gnutls-3.8.11/lib/pkcs11.c:4350: warning[uninitvar]: Uninitialized variable: finalized
# 4348|   cleanup:
# 4349|   	gnutls_free(data.data);
# 4350|-> 	if (finalized == 0)
# 4351|   		pkcs11_find_objects_final(sinfo);
# 4352|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def104]
gnutls-3.8.11/lib/priority.c:2350:15: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(system_priority_file, "re")'
gnutls-3.8.11/lib/priority.c:2329:20: enter_function: entry to 'load_system_priority_file'
gnutls-3.8.11/lib/priority.c:2337:14: acquire_resource: opened here
gnutls-3.8.11/lib/priority.c:2338:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/priority.c:2349:9: call_function: inlined call to 'ini_ctx_init' from 'load_system_priority_file'
gnutls-3.8.11/lib/priority.c:2350:15: throw: if 'ini_parse_file' throws an exception...
gnutls-3.8.11/lib/priority.c:2350:15: danger: 'fopen(system_priority_file, "re")' leaks here; was opened at [(2)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/1)
# 2348|   	 */
# 2349|   	ini_ctx_init(&ctx);
# 2350|-> 	err = ini_parse_file(fp, global_ini_handler, &ctx);
# 2351|   	if (!err) {
# 2352|   		if (fseek(fp, 0L, SEEK_SET) < 0) {

Error: COMPILER_WARNING (CWE-704): [#def105]
gnutls-3.8.11/lib/priority.c: scope_hint: In function '_gnutls_resolve_priorities'
gnutls-3.8.11/lib/priority.c:2534:20: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 2534 |         additional = strchr(ss, ':');
#      |                    ^
# 2532|   
# 2533|   	ss = p + 1;
# 2534|-> 	additional = strchr(ss, ':');
# 2535|   	if (additional) {
# 2536|   		additional++;

Error: COMPILER_WARNING (CWE-704): [#def106]
gnutls-3.8.11/lib/priority.c:2534:20: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 2532|   
# 2533|   	ss = p + 1;
# 2534|-> 	additional = strchr(ss, ':');
# 2535|   	if (additional) {
# 2536|   		additional++;

Error: GCC_ANALYZER_WARNING (CWE-415): [#def107]
gnutls-3.8.11/lib/str-unicode.c:290:9: warning[-Wanalyzer-double-free]: double-'free' of 'nrm'
gnutls-3.8.11/lib/str-unicode.c:205:12: branch_false: following 'false' branch (when 'plen != 0')...
gnutls-3.8.11/lib/str-unicode.c:214:13: branch_false: ...to here
gnutls-3.8.11/lib/str-unicode.c:214:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/str-unicode.c:231:16: branch_false: ...to here
gnutls-3.8.11/lib/str-unicode.c:232:12: branch_true: following 'true' branch...
gnutls-3.8.11/lib/str-unicode.c:233:17: branch_true: ...to here
gnutls-3.8.11/lib/str-unicode.c:290:9: danger: second 'free' here
#  288|   	gnutls_free(final);
#  289|   	free(ucs4);
#  290|-> 	free(nrm);
#  291|   	free(nrmu8);
#  292|   	return ret;

Error: COMPILER_WARNING (CWE-704): [#def108]
gnutls-3.8.11/lib/str.c: scope_hint: In function '_gnutls_hostname_compare'
gnutls-3.8.11/lib/str.c:722:19: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  722 |                 p = strrchr(certname, '.');
#      |                   ^
#  720|   		/* ensure that we have at least two domain components after
#  721|   		 * the wildcard. */
#  722|-> 		p = strrchr(certname, '.');
#  723|   		if (p == NULL || strchr(certname, '.') == p || p[1] == 0) {
#  724|   			return 0;

Error: COMPILER_WARNING (CWE-704): [#def109]
gnutls-3.8.11/lib/str.c:722:19: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  720|   		/* ensure that we have at least two domain components after
#  721|   		 * the wildcard. */
#  722|-> 		p = strrchr(certname, '.');
#  723|   		if (p == NULL || strchr(certname, '.') == p || p[1] == 0) {
#  724|   			return 0;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def110]
gnutls-3.8.11/lib/verify-tofu.c:436:45: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(db_name, "abe+")'
gnutls-3.8.11/lib/verify-tofu.c:425:14: acquire_resource: opened here
gnutls-3.8.11/lib/verify-tofu.c:426:12: branch_false: following 'false' branch...
gnutls-3.8.11/lib/verify-tofu.c:429:12: branch_false: ...to here
gnutls-3.8.11/lib/verify-tofu.c:434:9: throw: if '_gnutls_bin2hex' throws an exception...
gnutls-3.8.11/lib/verify-tofu.c:436:45: danger: 'fopen(db_name, "abe+")' leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  434|   	fprintf(fp, "|c0|%s|%s|%lu|%u|%s\n", host, service,
#  435|   		(unsigned long)expiration, (unsigned)hash_algo,
#  436|-> 		_gnutls_bin2hex(hash->data, hash->size, buffer, sizeof(buffer),
#  437|   				NULL));
#  438|   

Error: COMPILER_WARNING (CWE-704): [#def111]
gnutls-3.8.11/lib/x509/hostname-verify.c: scope_hint: In function 'gnutls_x509_crt_check_hostname2'
gnutls-3.8.11/lib/x509/hostname-verify.c:165:17: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  165 |             ((p = strchr(hostname, ':')) != NULL ||
#      |                 ^
#  163|   	/* check whether @hostname is an ip address */
#  164|   	if (!(flags & GNUTLS_VERIFY_DO_NOT_ALLOW_IP_MATCHES) &&
#  165|-> 	    ((p = strchr(hostname, ':')) != NULL ||
#  166|   	     inet_pton(AF_INET, hostname, &ipv4) != 0)) {
#  167|   		if (p != NULL) {

Error: COMPILER_WARNING (CWE-704): [#def112]
gnutls-3.8.11/lib/x509/hostname-verify.c:165:17: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  163|   	/* check whether @hostname is an ip address */
#  164|   	if (!(flags & GNUTLS_VERIFY_DO_NOT_ALLOW_IP_MATCHES) &&
#  165|-> 	    ((p = strchr(hostname, ':')) != NULL ||
#  166|   	     inet_pton(AF_INET, hostname, &ipv4) != 0)) {
#  167|   		if (p != NULL) {

Error: COMPILER_WARNING (CWE-704): [#def113]
gnutls-3.8.11/lib/x509/ip.c: scope_hint: In function 'gnutls_x509_cidr_to_rfc5280'
gnutls-3.8.11/lib/x509/ip.c:233:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  233 |         p = strchr(cidr, '/');
#      |           ^
#  231|   	char *cidr_tmp;
#  232|   
#  233|-> 	p = strchr(cidr, '/');
#  234|   	if (p != NULL) {
#  235|   		prefix = strtol(p + 1, &p_end, 10);

Error: COMPILER_WARNING (CWE-704): [#def114]
gnutls-3.8.11/lib/x509/ip.c:233:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  231|   	char *cidr_tmp;
#  232|   
#  233|-> 	p = strchr(cidr, '/');
#  234|   	if (p != NULL) {
#  235|   		prefix = strtol(p + 1, &p_end, 10);

Error: CPPCHECK_WARNING (CWE-190): [#def115]
gnutls-3.8.11/lib/x509/name_constraints.c:75: error[integerOverflow]: Signed integer underflow for expression '(-2147483647-1)-1'.
#   73|   
#   74|   		if (!INT_MULTIPLY_OK(new_capacity, 2, &new_capacity) ||
#   75|-> 		    !INT_ADD_OK(new_capacity, 1, &new_capacity))
#   76|   			return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
#   77|   		new_data = _gnutls_reallocarray(

Error: CPPCHECK_WARNING (CWE-190): [#def116]
gnutls-3.8.11/lib/x509/name_constraints.c:1285: error[integerOverflow]: Signed integer overflow for expression '-((((1?0:(cert->san->size))-1)<0)?(((((1?0:(cert->san->size))+1)<<((sizeof(cert->san->size)*8)-2))-1)*2+1):((1?0:(cert->san->size))-1))'.
# 1283|   
# 1284|   	if (!INT_ADD_OK(nc->permitted.size, nc->excluded.size, &checks) ||
# 1285|-> 	    !INT_MULTIPLY_OK(checks, cert->san->size, &checks) ||
# 1286|   	    checks > MAX_NC_CHECKS) {
# 1287|   		return gnutls_assert_val(0);

Error: CPPCHECK_WARNING (CWE-190): [#def117]
gnutls-3.8.11/lib/x509/name_constraints.c:1285: error[integerOverflow]: Signed integer overflow for expression '-1-0'.
# 1283|   
# 1284|   	if (!INT_ADD_OK(nc->permitted.size, nc->excluded.size, &checks) ||
# 1285|-> 	    !INT_MULTIPLY_OK(checks, cert->san->size, &checks) ||
# 1286|   	    checks > MAX_NC_CHECKS) {
# 1287|   		return gnutls_assert_val(0);

Error: CPPCHECK_WARNING (CWE-190): [#def118]
gnutls-3.8.11/lib/x509/name_constraints.c:1285: error[integerOverflow]: Signed integer overflow for expression '-2147483647-1'.
# 1283|   
# 1284|   	if (!INT_ADD_OK(nc->permitted.size, nc->excluded.size, &checks) ||
# 1285|-> 	    !INT_MULTIPLY_OK(checks, cert->san->size, &checks) ||
# 1286|   	    checks > MAX_NC_CHECKS) {
# 1287|   		return gnutls_assert_val(0);

Error: CPPCHECK_WARNING (CWE-758): [#def119]
gnutls-3.8.11/lib/x509/name_constraints.c:1285: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1283|   
# 1284|   	if (!INT_ADD_OK(nc->permitted.size, nc->excluded.size, &checks) ||
# 1285|-> 	    !INT_MULTIPLY_OK(checks, cert->san->size, &checks) ||
# 1286|   	    checks > MAX_NC_CHECKS) {
# 1287|   		return gnutls_assert_val(0);

Error: CPPCHECK_WARNING (CWE-562): [#def120]
gnutls-3.8.11/lib/x509/output.c:210: error[returnDanglingLifetime]: Returning pointer to local variable 'oid' that will be invalid when returning.
#  208|   		return NULL;
#  209|   
#  210|-> 	return gnutls_strdup(oid);
#  211|   }
#  212|   

Error: CPPCHECK_WARNING (CWE-562): [#def121]
gnutls-3.8.11/lib/x509/output.c:232: error[returnDanglingLifetime]: Returning pointer to local variable 'oid' that will be invalid when returning.
#  230|   		return NULL;
#  231|   
#  232|-> 	return gnutls_strdup(oid);
#  233|   }
#  234|   

Error: CPPCHECK_WARNING (CWE-562): [#def122]
gnutls-3.8.11/lib/x509/output.c:258: error[returnDanglingLifetime]: Returning pointer to local variable 'oid' that will be invalid when returning.
#  256|   		return NULL;
#  257|   
#  258|-> 	return gnutls_strdup(oid);
#  259|   }
#  260|   

Error: CPPCHECK_WARNING (CWE-562): [#def123]
gnutls-3.8.11/lib/x509/output.c:280: error[returnDanglingLifetime]: Returning pointer to local variable 'oid' that will be invalid when returning.
#  278|   		return NULL;
#  279|   
#  280|-> 	return gnutls_strdup(oid);
#  281|   }
#  282|   

Error: CPPCHECK_WARNING (CWE-562): [#def124]
gnutls-3.8.11/lib/x509/output.c:306: error[returnDanglingLifetime]: Returning pointer to local variable 'oid' that will be invalid when returning.
#  304|   		return NULL;
#  305|   
#  306|-> 	return gnutls_strdup(oid);
#  307|   }
#  308|   

Error: CPPCHECK_WARNING (CWE-190): [#def125]
gnutls-3.8.11/lib/x509/verify-high.c:1426: error[integerOverflow]: Signed integer overflow for expression '-1-16'.
# 1424|   
# 1425|   	/* Allocate extra for retrieved certificates. */
# 1426|-> 	if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
# 1427|   			&cert_list_max_size))
# 1428|   		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);

Error: CPPCHECK_WARNING (CWE-190): [#def126]
gnutls-3.8.11/lib/x509/verify-high.c:1426: error[integerOverflow]: Signed integer overflow for expression '-128-16'.
# 1424|   
# 1425|   	/* Allocate extra for retrieved certificates. */
# 1426|-> 	if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
# 1427|   			&cert_list_max_size))
# 1428|   		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);

Error: CPPCHECK_WARNING (CWE-190): [#def127]
gnutls-3.8.11/lib/x509/verify-high.c:1426: error[integerOverflow]: Signed integer overflow for expression '-2147483647-1'.
# 1424|   
# 1425|   	/* Allocate extra for retrieved certificates. */
# 1426|-> 	if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
# 1427|   			&cert_list_max_size))
# 1428|   		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);

Error: CPPCHECK_WARNING (CWE-190): [#def128]
gnutls-3.8.11/lib/x509/verify-high.c:1426: error[integerOverflow]: Signed integer overflow for expression '-32768-16'.
# 1424|   
# 1425|   	/* Allocate extra for retrieved certificates. */
# 1426|-> 	if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
# 1427|   			&cert_list_max_size))
# 1428|   		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);

Error: CPPCHECK_WARNING (CWE-190): [#def129]
gnutls-3.8.11/lib/x509/verify-high.c:1426: error[integerOverflow]: Signed integer overflow for expression '0-16'.
# 1424|   
# 1425|   	/* Allocate extra for retrieved certificates. */
# 1426|-> 	if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
# 1427|   			&cert_list_max_size))
# 1428|   		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);

Error: CPPCHECK_WARNING (CWE-190): [#def130]
gnutls-3.8.11/lib/x509/verify-high.c:1426: error[integerOverflow]: Signed integer underflow for expression '(-2147483647-1)-16'.
# 1424|   
# 1425|   	/* Allocate extra for retrieved certificates. */
# 1426|-> 	if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
# 1427|   			&cert_list_max_size))
# 1428|   		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);

Error: CPPCHECK_WARNING (CWE-190): [#def131]
gnutls-3.8.11/lib/x509/verify-high.c:1426: error[integerOverflow]: Signed integer underflow for expression '(1?0:(cert_list_size))+((-2147483647-1)-16)'.
# 1424|   
# 1425|   	/* Allocate extra for retrieved certificates. */
# 1426|-> 	if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
# 1427|   			&cert_list_max_size))
# 1428|   		return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def132]
gnutls-3.8.11/native_build/src/gl/parse-datetime.c:1831:3: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*<unknown>'
gnutls-3.8.11/native_build/src/gl/parse-datetime.y:2404:1: enter_function: entry to 'parse_datetime'
gnutls-3.8.11/native_build/src/gl/parse-datetime.y:2409:6: branch_false: following 'false' branch...
gnutls-3.8.11/native_build/src/gl/parse-datetime.y:2411:13: branch_false: ...to here
gnutls-3.8.11/native_build/src/gl/parse-datetime.y:2411:13: call_function: calling 'parse_datetime_body' from 'parse_datetime'

Error: GCC_ANALYZER_WARNING (CWE-775): [#def133]
gnutls-3.8.11/src/certtool-options.c:656:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/certtool-options.c:656:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:656:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/certtool-options.c:656:11: danger: 'pfds[0]' leaks here
#  654|         if (pid < 0)
#  655|           {
#  656|->           perror ("fork");
#  657|             exit (EXIT_FAILURE);
#  658|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def134]
gnutls-3.8.11/src/certtool-options.c:656:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/certtool-options.c:656:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:656:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/certtool-options.c:656:11: danger: 'pfds[1]' leaks here
#  654|         if (pid < 0)
#  655|           {
#  656|->           perror ("fork");
#  657|             exit (EXIT_FAILURE);
#  658|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def135]
gnutls-3.8.11/src/certtool-options.c:662:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:660:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/certtool-options.c:662:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:662:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/certtool-options.c:662:11: danger: 'pfds[0]' leaks here
#  660|         if (pid == 0)
#  661|           {
#  662|->           close (pfds[0]);
#  663|             dup2 (pfds[1], STDOUT_FILENO);
#  664|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def136]
gnutls-3.8.11/src/certtool-options.c:662:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:660:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/certtool-options.c:662:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:662:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/certtool-options.c:662:11: danger: 'pfds[1]' leaks here
#  660|         if (pid == 0)
#  661|           {
#  662|->           close (pfds[0]);
#  663|             dup2 (pfds[1], STDOUT_FILENO);
#  664|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def137]
gnutls-3.8.11/src/certtool-options.c:664:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:660:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/certtool-options.c:662:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:664:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/certtool-options.c:664:11: danger: 'pfds[1]' leaks here
#  662|             close (pfds[0]);
#  663|             dup2 (pfds[1], STDOUT_FILENO);
#  664|->           close (pfds[1]);
#  665|   
#  666|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def138]
gnutls-3.8.11/src/certtool-options.c:673:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/certtool-options.c:673:11: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:673:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/certtool-options.c:673:11: danger: 'pfds[0]' leaks here
#  671|             const char *envvar;
#  672|   
#  673|->           close (pfds[1]);
#  674|             dup2 (pfds[0], STDIN_FILENO);
#  675|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def139]
gnutls-3.8.11/src/certtool-options.c:673:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/certtool-options.c:673:11: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:673:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/certtool-options.c:673:11: danger: 'pfds[1]' leaks here
#  671|             const char *envvar;
#  672|   
#  673|->           close (pfds[1]);
#  674|             dup2 (pfds[0], STDIN_FILENO);
#  675|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def140]
gnutls-3.8.11/src/certtool-options.c:675:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/certtool-options.c:625:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:632:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:632:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:637:7: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:637:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/certtool-options.c:647:11: branch_true: ...to here
gnutls-3.8.11/src/certtool-options.c:647:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool-options.c:653:13: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:654:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:660:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/certtool-options.c:673:11: branch_false: ...to here
gnutls-3.8.11/src/certtool-options.c:675:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/certtool-options.c:675:11: danger: 'pfds[0]' leaks here
#  673|             close (pfds[1]);
#  674|             dup2 (pfds[0], STDIN_FILENO);
#  675|->           close (pfds[0]);
#  676|   
#  677|             envvar = secure_getenv ("PAGER");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def141]
gnutls-3.8.11/src/certtool.c:2290:30: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(*cinfo.data_file, "r")'
gnutls-3.8.11/src/certtool.c:2284:14: acquire_resource: opened here
gnutls-3.8.11/src/certtool.c:2285:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/certtool.c:2290:30: branch_false: ...to here
gnutls-3.8.11/src/certtool.c:2290:30: throw: if '_gnutls_fread_file' throws an exception...
gnutls-3.8.11/src/certtool.c:2290:30: danger: 'fopen(*cinfo.data_file, "r")' leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
# 2288|   	}
# 2289|   
# 2290|-> 	data->data = (void *)fread_file(fp, 0, &size);
# 2291|   	if (data->data == NULL) {
# 2292|   		fprintf(stderr, "Error reading data file");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def142]
gnutls-3.8.11/src/cli.c:347:21: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(gnutls_cli_options.arg.save_cert, "w")'
gnutls-3.8.11/src/cli.c:336:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:341:14: branch_false: ...to here
gnutls-3.8.11/src/cli.c:341:14: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:342:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:342:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:347:21: branch_true: following 'true' branch...
gnutls-3.8.11/src/cli.c:349:64: branch_true: ...to here
gnutls-3.8.11/src/cli.c:348:23: throw: if 'gnutls_pem_base64_encode2' throws an exception...
gnutls-3.8.11/src/cli.c:347:21: danger: 'fopen(gnutls_cli_options.arg.save_cert, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  345|   	}
#  346|   
#  347|-> 	for (i = 0; i < cert_list_size; i++) {
#  348|   		ret = gnutls_pem_base64_encode_alloc("CERTIFICATE",
#  349|   						     &cert_list[i], &t);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def143]
gnutls-3.8.11/src/cli.c:398:27: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(path, "w")'
gnutls-3.8.11/src/cli.c:368:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:380:13: branch_false: ...to here
gnutls-3.8.11/src/cli.c:390:20: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:391:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:391:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:398:27: throw: if 'gnutls_ocsp_status_request_get2' throws an exception...
gnutls-3.8.11/src/cli.c:398:27: danger: 'fopen(path, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#  396|   	for (unsigned int i = 0; i < max_out; i++) {
#  397|   		gnutls_datum_t oresp;
#  398|-> 		int ret = gnutls_ocsp_status_request_get2(session, i, &oresp);
#  399|   		if (ret == GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE) {
#  400|   			fprintf(stderr, "no OCSP response for certificate %u\n",

Error: GCC_ANALYZER_WARNING (CWE-775): [#def144]
gnutls-3.8.11/src/cli.c:400:25: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(path, "w")'
gnutls-3.8.11/src/cli.c:368:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:380:13: branch_false: ...to here
gnutls-3.8.11/src/cli.c:390:20: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:391:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:391:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:399:20: branch_true: following 'true' branch...
gnutls-3.8.11/src/cli.c:400:25: branch_true: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:398:27: throw: if 'gnutls_ocsp_status_request_get2' throws an exception...
gnutls-3.8.11/src/cli.c:400:25: danger: 'fopen(path, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
#  398|   		int ret = gnutls_ocsp_status_request_get2(session, i, &oresp);
#  399|   		if (ret == GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE) {
#  400|-> 			fprintf(stderr, "no OCSP response for certificate %u\n",
#  401|   				i);
#  402|   			continue;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def145]
gnutls-3.8.11/src/cli.c:403:27: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(path, "w")'
gnutls-3.8.11/src/cli.c:368:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:380:13: branch_false: ...to here
gnutls-3.8.11/src/cli.c:390:20: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:391:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:391:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:403:27: danger: 'fopen(path, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/2)
#  401|   				i);
#  402|   			continue;
#  403|-> 		} else if (ret < 0) {
#  404|   			fprintf(stderr, "error getting OCSP response %u: %s\n",
#  405|   				i, gnutls_strerror(ret));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def146]
gnutls-3.8.11/src/cli.c:412:48: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(path, "w")'
gnutls-3.8.11/src/cli.c:368:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:380:13: branch_false: ...to here
gnutls-3.8.11/src/cli.c:390:20: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:391:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:391:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:403:27: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:409:20: branch_false: ...to here
gnutls-3.8.11/src/cli.c:409:20: branch_true: following 'true' branch (when 'type == 0')...
gnutls-3.8.11/src/cli.c:412:48: branch_true: ...to here
gnutls-3.8.11/src/cli.c:412:48: danger: 'fopen(path, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/2)
#  410|   			/* on success the return value is equal to the
#  411|   			 * number of items (third parameter) */
#  412|-> 			if (fwrite(oresp.data, oresp.size, 1, fp) != 1) {
#  413|   				fprintf(stderr, "writing to %s failed\n", path);
#  414|   				exit(1);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def147]
gnutls-3.8.11/src/cli.c:420:23: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(path, "w")'
gnutls-3.8.11/src/cli.c:368:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:380:13: branch_false: ...to here
gnutls-3.8.11/src/cli.c:390:20: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:391:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:391:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:403:27: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:409:20: branch_false: ...to here
gnutls-3.8.11/src/cli.c:409:20: branch_false: following 'false' branch (when 'type != 0')...
gnutls-3.8.11/src/cli.c:420:23: branch_false: ...to here
gnutls-3.8.11/src/cli.c:420:23: throw: if 'gnutls_pem_base64_encode2' throws an exception...
gnutls-3.8.11/src/cli.c:420:23: danger: 'fopen(path, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
#  418|   
#  419|   		gnutls_datum_t t;
#  420|-> 		ret = gnutls_pem_base64_encode_alloc("OCSP RESPONSE", &oresp,
#  421|   						     &t);
#  422|   		if (ret < 0) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def148]
gnutls-3.8.11/src/cli.c:422:20: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(path, "w")'
gnutls-3.8.11/src/cli.c:368:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:380:13: branch_false: ...to here
gnutls-3.8.11/src/cli.c:390:20: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:391:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:391:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:403:27: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:409:20: branch_false: ...to here
gnutls-3.8.11/src/cli.c:422:20: danger: 'fopen(path, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/2)
#  420|   		ret = gnutls_pem_base64_encode_alloc("OCSP RESPONSE", &oresp,
#  421|   						     &t);
#  422|-> 		if (ret < 0) {
#  423|   			fprintf(stderr,
#  424|   				"error allocating PEM OCSP response: %s\n",

Error: GCC_ANALYZER_WARNING (CWE-775): [#def149]
gnutls-3.8.11/src/cli.c:431:36: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(path, "w")'
gnutls-3.8.11/src/cli.c:368:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:380:13: branch_false: ...to here
gnutls-3.8.11/src/cli.c:390:20: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:391:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:391:12: branch_false: ...to here
gnutls-3.8.11/src/cli.c:396:34: branch_true: following 'true' branch (when 'max_out > i')...
gnutls-3.8.11/src/cli.c:398:27: branch_true: ...to here
gnutls-3.8.11/src/cli.c:403:27: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:409:20: branch_false: ...to here
gnutls-3.8.11/src/cli.c:422:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:431:36: branch_false: ...to here
gnutls-3.8.11/src/cli.c:431:36: danger: 'fopen(path, "w")' leaks here; was opened at [(3)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/2)
#  429|   		/* on success the return value is equal to the number
#  430|   		 * of items (third parameter) */
#  431|-> 		if (fwrite(t.data, t.size, 1, fp) != 1) {
#  432|   			fprintf(stderr, "writing to %s failed\n", path);
#  433|   			exit(1);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def150]
gnutls-3.8.11/src/cli.c:1048:38: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(gnutls_cli_options.arg.earlydata, "r")'
gnutls-3.8.11/src/cli.c:1038:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/cli.c:1042:22: branch_true: ...to here
gnutls-3.8.11/src/cli.c:1042:22: acquire_resource: opened here
gnutls-3.8.11/src/cli.c:1043:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/cli.c:1048:38: branch_false: ...to here
gnutls-3.8.11/src/cli.c:1048:38: throw: if '_gnutls_fread_file' throws an exception...
gnutls-3.8.11/src/cli.c:1048:38: danger: 'fopen(gnutls_cli_options.arg.earlydata, "r")' leaks here; was opened at [(3)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/2)
# 1046|   			exit(1);
# 1047|   		}
# 1048|-> 		edata.data = (void *)fread_file(fp, 0, &size);
# 1049|   		edata.size = size;
# 1050|   		fclose(fp);

Error: CPPCHECK_WARNING (CWE-457): [#def151]
gnutls-3.8.11/src/cli.c:2132: warning[uninitvar]: Uninitialized variable: cert
# 2130|   	for (it = 0; it < cert_list_size; it++) {
# 2131|   		if (deinit_cert)
# 2132|-> 			gnutls_x509_crt_deinit(cert);
# 2133|   
# 2134|   		ret = gnutls_x509_crt_init(&cert);

Error: COMPILER_WARNING (CWE-704): [#def152]
gnutls-3.8.11/src/cli.c: scope_hint: In function 'host_from_url'
gnutls-3.8.11/src/cli.c:2226:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 2226 |         if ((p = strstr(url, "http://")) != NULL) {
#      |                ^
# 2224|   	*path = "";
# 2225|   
# 2226|-> 	if ((p = strstr(url, "http://")) != NULL) {
# 2227|   		snprintf(buffer, sizeof(buffer), "%s", p + 7);
# 2228|   		p = strchr(buffer, '/');

Error: COMPILER_WARNING (CWE-704): [#def153]
gnutls-3.8.11/src/cli.c:2226:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 2224|   	*path = "";
# 2225|   
# 2226|-> 	if ((p = strstr(url, "http://")) != NULL) {
# 2227|   		snprintf(buffer, sizeof(buffer), "%s", p + 7);
# 2228|   		p = strchr(buffer, '/');

Error: GCC_ANALYZER_WARNING (CWE-775): [#def154]
gnutls-3.8.11/src/danetool-options.c:291:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/danetool-options.c:291:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:291:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/danetool-options.c:291:11: danger: 'pfds[0]' leaks here
#  289|         if (pid < 0)
#  290|           {
#  291|->           perror ("fork");
#  292|             exit (EXIT_FAILURE);
#  293|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def155]
gnutls-3.8.11/src/danetool-options.c:291:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/danetool-options.c:291:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:291:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/danetool-options.c:291:11: danger: 'pfds[1]' leaks here
#  289|         if (pid < 0)
#  290|           {
#  291|->           perror ("fork");
#  292|             exit (EXIT_FAILURE);
#  293|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def156]
gnutls-3.8.11/src/danetool-options.c:297:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:295:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/danetool-options.c:297:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:297:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/danetool-options.c:297:11: danger: 'pfds[0]' leaks here
#  295|         if (pid == 0)
#  296|           {
#  297|->           close (pfds[0]);
#  298|             dup2 (pfds[1], STDOUT_FILENO);
#  299|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def157]
gnutls-3.8.11/src/danetool-options.c:297:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:295:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/danetool-options.c:297:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:297:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/danetool-options.c:297:11: danger: 'pfds[1]' leaks here
#  295|         if (pid == 0)
#  296|           {
#  297|->           close (pfds[0]);
#  298|             dup2 (pfds[1], STDOUT_FILENO);
#  299|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def158]
gnutls-3.8.11/src/danetool-options.c:299:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:295:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/danetool-options.c:297:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:299:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/danetool-options.c:299:11: danger: 'pfds[1]' leaks here
#  297|             close (pfds[0]);
#  298|             dup2 (pfds[1], STDOUT_FILENO);
#  299|->           close (pfds[1]);
#  300|   
#  301|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def159]
gnutls-3.8.11/src/danetool-options.c:308:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/danetool-options.c:308:11: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:308:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/danetool-options.c:308:11: danger: 'pfds[0]' leaks here
#  306|             const char *envvar;
#  307|   
#  308|->           close (pfds[1]);
#  309|             dup2 (pfds[0], STDIN_FILENO);
#  310|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def160]
gnutls-3.8.11/src/danetool-options.c:308:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/danetool-options.c:308:11: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:308:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/danetool-options.c:308:11: danger: 'pfds[1]' leaks here
#  306|             const char *envvar;
#  307|   
#  308|->           close (pfds[1]);
#  309|             dup2 (pfds[0], STDIN_FILENO);
#  310|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def161]
gnutls-3.8.11/src/danetool-options.c:310:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/danetool-options.c:260:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:267:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:267:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:272:7: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:272:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/danetool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/danetool-options.c:282:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/danetool-options.c:288:13: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:289:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:295:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/danetool-options.c:308:11: branch_false: ...to here
gnutls-3.8.11/src/danetool-options.c:310:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/danetool-options.c:310:11: danger: 'pfds[0]' leaks here
#  308|             close (pfds[1]);
#  309|             dup2 (pfds[0], STDIN_FILENO);
#  310|->           close (pfds[0]);
#  311|   
#  312|             envvar = secure_getenv ("PAGER");

Error: COMPILER_WARNING (CWE-252): [#def162]
gnutls-3.8.11/src/danetool.c: scope_hint: In function 'cert_callback'
gnutls-3.8.11/src/danetool.c:598:17: warning[-Wunused-result]: ignoring return value of 'write' declared with attribute 'warn_unused_result'
#  598 |                 write(priv->fd, t.data, t.size);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  596|   		}
#  597|   
#  598|-> 		write(priv->fd, t.data, t.size);
#  599|   		gnutls_free(t.data);
#  600|   	}

Error: GCC_ANALYZER_WARNING (CWE-404): [#def163]
gnutls-3.8.11/src/gl/asnprintf.c:31:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/asnprintf.c:30:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/asnprintf.c:31:12: throw: if 'vasnprintf' throws an exception...
gnutls-3.8.11/src/gl/asnprintf.c:31:12: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   29|   
#   30|     va_start (args, format);
#   31|->   result = vasnprintf (resultbuf, lengthp, format, args);
#   32|     va_end (args);
#   33|     return result;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def164]
gnutls-3.8.11/src/gl/fcntl.c:328:22: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:328:22: throw: if 'fcntl' throws an exception...
gnutls-3.8.11/src/gl/fcntl.c:328:22: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  326|             #endif
#  327|               /* These actions take no argument.  */
#  328|->             result = fcntl (fd, action);
#  329|               break;
#  330|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def165]
gnutls-3.8.11/src/gl/fcntl.c:424:24: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:424:24: throw: if 'fcntl' throws an exception...
gnutls-3.8.11/src/gl/fcntl.c:424:24: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  422|               {
#  423|                 int x = va_arg (arg, int);
#  424|->               result = fcntl (fd, action, x);
#  425|               }
#  426|               break;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def166]
gnutls-3.8.11/src/gl/fcntl.c:432:24: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:432:24: throw: if 'fcntl' throws an exception...
gnutls-3.8.11/src/gl/fcntl.c:432:24: danger: missing call to 'va_end' to match 'va_start' at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  430|               {
#  431|                 void *p = va_arg (arg, void *);
#  432|->               result = fcntl (fd, action, p);
#  433|               }
#  434|               break;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def167]
gnutls-3.8.11/src/gl/fcntl.c:482:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:216:18: call_function: inlined call to 'rpl_fcntl_DUPFD' from 'rpl_fcntl'
#  480|       }
#  481|   #else
#  482|->   result = fcntl (fd, F_DUPFD, target);
#  483|   #endif
#  484|     return result;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def168]
gnutls-3.8.11/src/gl/fcntl.c:512:16: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  510|     if (0 <= have_dupfd_cloexec)
#  511|       {
#  512|->       result = fcntl (fd, F_DUPFD_CLOEXEC, target);
#  513|         if (0 <= result || errno != EINVAL)
#  514|           {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def169]
gnutls-3.8.11/src/gl/fcntl.c:533:19: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  531|     if (0 <= result && have_dupfd_cloexec == -1)
#  532|       {
#  533|->       int flags = fcntl (result, F_GETFD);
#  534|         if (flags < 0 || fcntl (result, F_SETFD, flags | FD_CLOEXEC) == -1)
#  535|           {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def170]
gnutls-3.8.11/src/gl/fcntl.c:534:24: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  532|       {
#  533|         int flags = fcntl (result, F_GETFD);
#  534|->       if (flags < 0 || fcntl (result, F_SETFD, flags | FD_CLOEXEC) == -1)
#  535|           {
#  536|             int saved_errno = errno;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def171]
gnutls-3.8.11/src/gl/fcntl.c:537:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gnutls-3.8.11/src/gl/fcntl.c:202:1: enter_function: entry to 'rpl_fcntl'
gnutls-3.8.11/src/gl/fcntl.c:210:3: acquire_resource: 'va_start' called here
gnutls-3.8.11/src/gl/fcntl.c:223:18: call_function: calling 'rpl_fcntl_DUPFD_CLOEXEC' from 'rpl_fcntl'
#  535|           {
#  536|             int saved_errno = errno;
#  537|->           close (result);
#  538|             errno = saved_errno;
#  539|             result = -1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def172]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:78:1: enter_function: entry to 'gl_linked_nx_create'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:89:6: branch_false: following 'false' branch (when 'list' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:92:3: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:102:24: call_function: inlined call to 'next_prime' from 'gl_linked_nx_create'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:103:8: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:106:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:106:27: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:107:8: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:111:3: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:113:10: branch_true: following 'true' branch (when 'count != 0')...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:116:38: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:118:10: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:121:21: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:124:9: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: danger: '<unknown>' leaks here; was allocated at [(9)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/8)
#  123|         node->h.hashcode =
#  124|           (list->base.hashcode_fn != NULL
#  125|->          ? list->base.hashcode_fn (node->value)
#  126|            : (size_t)(uintptr_t) node->value);
#  127|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def173]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: warning[-Wanalyzer-malloc-leak]: leak of 'list'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:78:1: enter_function: entry to 'gl_linked_nx_create'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:86:29: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:89:6: branch_false: following 'false' branch (when 'list' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:92:3: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:102:24: call_function: inlined call to 'next_prime' from 'gl_linked_nx_create'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:103:8: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:106:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:107:8: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:111:3: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:113:10: branch_true: following 'true' branch (when 'count != 0')...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:116:38: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:118:10: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:121:21: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:124:9: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: danger: 'list' leaks here; was allocated at [(2)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/1)
#  123|         node->h.hashcode =
#  124|           (list->base.hashcode_fn != NULL
#  125|->          ? list->base.hashcode_fn (node->value)
#  126|            : (size_t)(uintptr_t) node->value);
#  127|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def174]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: warning[-Wanalyzer-malloc-leak]: leak of 'node'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:78:1: enter_function: entry to 'gl_linked_nx_create'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:89:6: branch_false: following 'false' branch (when 'list' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:92:3: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:102:24: call_function: inlined call to 'next_prime' from 'gl_linked_nx_create'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:103:8: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:106:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:107:8: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:111:3: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:113:10: branch_true: following 'true' branch (when 'count != 0')...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:116:38: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:116:38: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:118:10: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:121:21: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:124:9: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:125:12: danger: 'node' leaks here; was allocated at [(13)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/12)
#  123|         node->h.hashcode =
#  124|           (list->base.hashcode_fn != NULL
#  125|->          ? list->base.hashcode_fn (node->value)
#  126|            : (size_t)(uintptr_t) node->value);
#  127|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def175]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:628:8: warning[-Wanalyzer-malloc-leak]: leak of 'node'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:619:34: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:621:6: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:624:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:627:5: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:628:8: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:628:8: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:628:8: danger: 'node' leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  626|     node->h.hashcode =
#  627|       (list->base.hashcode_fn != NULL
#  628|->      ? list->base.hashcode_fn (node->value)
#  629|        : (size_t)(uintptr_t) node->value);
#  630|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def176]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:666:8: warning[-Wanalyzer-malloc-leak]: leak of 'node'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:657:34: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:659:6: branch_false: following 'false' branch (when 'node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:662:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:665:5: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:666:8: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:666:8: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:666:8: danger: 'node' leaks here; was allocated at [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  664|     node->h.hashcode =
#  665|       (list->base.hashcode_fn != NULL
#  666|->      ? list->base.hashcode_fn (node->value)
#  667|        : (size_t)(uintptr_t) node->value);
#  668|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def177]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:704:8: warning[-Wanalyzer-malloc-leak]: leak of 'new_node'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:695:34: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:697:6: branch_false: following 'false' branch (when 'new_node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:700:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:703:5: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:704:8: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:704:8: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:704:8: danger: 'new_node' leaks here; was allocated at [(1)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/0)
#  702|     new_node->h.hashcode =
#  703|       (list->base.hashcode_fn != NULL
#  704|->      ? list->base.hashcode_fn (new_node->value)
#  705|        : (size_t)(uintptr_t) new_node->value);
#  706|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def178]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:742:8: warning[-Wanalyzer-malloc-leak]: leak of 'new_node'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:733:34: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:735:6: branch_false: following 'false' branch (when 'new_node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:738:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:741:5: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:742:8: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:742:8: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:742:8: danger: 'new_node' leaks here; was allocated at [(1)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/0)
#  740|     new_node->h.hashcode =
#  741|       (list->base.hashcode_fn != NULL
#  742|->      ? list->base.hashcode_fn (new_node->value)
#  743|        : (size_t)(uintptr_t) new_node->value);
#  744|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def179]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:785:8: warning[-Wanalyzer-malloc-leak]: leak of 'new_node'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:773:6: branch_false: following 'false' branch (when 'count >= position')...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:777:43: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:777:43: acquire_memory: allocated here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:778:6: branch_false: following 'false' branch (when 'new_node' is non-NULL)...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:781:27: branch_false: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:784:5: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:785:8: branch_true: ...to here
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:785:8: throw: if the called function throws an exception...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:785:8: danger: 'new_node' leaks here; was allocated at [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
#  783|     new_node->h.hashcode =
#  784|       (list->base.hashcode_fn != NULL
#  785|->      ? list->base.hashcode_fn (new_node->value)
#  786|        : (size_t)(uintptr_t) new_node->value);
#  787|   

Error: CPPCHECK_WARNING (CWE-457): [#def180]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:952: error[uninitvar]: Uninitialized variables: result.count, result.i, result.j
#  950|   #endif
#  951|   
#  952|->   return result;
#  953|   }
#  954|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def181]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:952:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'result.count'
#  950|   #endif
#  951|   
#  952|->   return result;
#  953|   }
#  954|   

Error: CPPCHECK_WARNING (CWE-457): [#def182]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:1023: warning[uninitvar]: Uninitialized variables: result.count, result.i, result.j
# 1021|   #endif
# 1022|   
# 1023|->   return result;
# 1024|   }
# 1025|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def183]
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:1023:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'result.count'
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:962:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/gl_anylinked_list2.h:1023:10: danger: use of uninitialized value 'result.count' here
# 1021|   #endif
# 1022|   
# 1023|->   return result;
# 1024|   }
# 1025|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def184]
gnutls-3.8.11/src/gl/gl_list.h:777:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'news'
gnutls-3.8.11/src/serv.c:936:5: enter_function: entry to 'listen_socket'
gnutls-3.8.11/src/serv.c:949:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:954:14: branch_false: ...to here
gnutls-3.8.11/src/serv.c:954:25: branch_true: following 'true' branch (when 'ptr' is non-NULL)...
gnutls-3.8.11/src/serv.c:965:25: branch_true: ...to here
gnutls-3.8.11/src/serv.c:970:29: acquire_resource: socket created here
gnutls-3.8.11/src/serv.c:970:20: branch_false: following 'false' branch (when 'news >= 0')...
gnutls-3.8.11/src/serv.c:977:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:988:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1008:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1008:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1014:20: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1014:20: branch_true: following 'true' branch (when 'socktype == 1')...
gnutls-3.8.11/src/serv.c:1015:29: branch_true: ...to here
gnutls-3.8.11/src/serv.c:1015:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1022:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1023:17: call_function: calling 'gl_list_add_last' from 'listen_socket'
#  775|   gl_list_nx_add_last (gl_list_t list, const void *elt)
#  776|   {
#  777|->   return ((const struct gl_list_impl_base *) list)->vtable
#  778|            ->nx_add_last (list, elt);
#  779|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def185]
gnutls-3.8.11/src/gl/gl_xlist.h:163:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'news'
gnutls-3.8.11/src/serv.c:936:5: enter_function: entry to 'listen_socket'
gnutls-3.8.11/src/serv.c:949:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:954:14: branch_false: ...to here
gnutls-3.8.11/src/serv.c:954:25: branch_true: following 'true' branch (when 'ptr' is non-NULL)...
gnutls-3.8.11/src/serv.c:965:25: branch_true: ...to here
gnutls-3.8.11/src/serv.c:970:29: acquire_resource: socket created here
gnutls-3.8.11/src/serv.c:970:20: branch_false: following 'false' branch (when 'news >= 0')...
gnutls-3.8.11/src/serv.c:977:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:988:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1008:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1008:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1014:20: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1014:20: branch_true: following 'true' branch (when 'socktype == 1')...
gnutls-3.8.11/src/serv.c:1015:29: branch_true: ...to here
gnutls-3.8.11/src/serv.c:1015:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1022:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1023:17: call_function: calling 'gl_list_add_last' from 'listen_socket'
#  161|     gl_list_node_t result = gl_list_nx_add_last (list, elt);
#  162|     if (result == NULL)
#  163|->     xalloc_die ();
#  164|     return result;
#  165|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def186]
gnutls-3.8.11/src/gl/read-file.c:199:7: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(filename,  mode)'
gnutls-3.8.11/src/gl/read-file.c:190:1: enter_function: entry to '_gnutls_read_file'
gnutls-3.8.11/src/gl/read-file.c:193:18: acquire_resource: opened here
gnutls-3.8.11/src/gl/read-file.c:196:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/read-file.c:199:7: branch_false: ...to here
gnutls-3.8.11/src/gl/read-file.c:202:9: call_function: calling '_gnutls_fread_file' from '_gnutls_read_file'
#  197|       return NULL;
#  198|   
#  199|->   if (flags & RF_SENSITIVE)
#  200|       setvbuf (stream, NULL, _IONBF, 0);
#  201|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def187]
gnutls-3.8.11/src/gl/read-file.c:199:7: warning[-Wanalyzer-malloc-leak]: leak of 'fopen(filename,  mode)'
gnutls-3.8.11/src/gl/read-file.c:190:1: enter_function: entry to '_gnutls_read_file'
gnutls-3.8.11/src/gl/read-file.c:193:18: acquire_memory: allocated here
gnutls-3.8.11/src/gl/read-file.c:196:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/read-file.c:199:7: branch_false: ...to here
gnutls-3.8.11/src/gl/read-file.c:202:9: call_function: calling '_gnutls_fread_file' from '_gnutls_read_file'
#  197|       return NULL;
#  198|   
#  199|->   if (flags & RF_SENSITIVE)
#  200|       setvbuf (stream, NULL, _IONBF, 0);
#  201|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def188]
gnutls-3.8.11/src/gl/time_rz.c:88:22: warning[-Wanalyzer-malloc-leak]: leak of 'tzalloc(getenv("TZ"))'
gnutls-3.8.11/native_build/src/gl/time.h:1114:1: enter_function: entry to 'mktime_z'
gnutls-3.8.11/src/gl/time_rz.c:282:6: branch_false: following 'false' branch (when 'tz' is non-NULL)...
gnutls-3.8.11/src/gl/time_rz.c:286:27: branch_false: ...to here
gnutls-3.8.11/src/gl/time_rz.c:286:27: call_function: calling 'set_tz' from 'mktime_z'
#   86|   {
#   87|     size_t name_size = name ? strlen (name) + 1 : 0;
#   88|->   size_t abbr_size = name_size < ABBR_SIZE_MIN ? ABBR_SIZE_MIN : name_size + 1;
#   89|     timezone_t tz = malloc (FLEXSIZEOF (struct tm_zone, abbrs, abbr_size));
#   90|     if (tz)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def189]
gnutls-3.8.11/src/gl/time_rz.c:206:10: warning[-Wanalyzer-malloc-leak]: leak of 'set_tz(tz)'
gnutls-3.8.11/native_build/src/gl/time.h:1114:1: enter_function: entry to 'mktime_z'
gnutls-3.8.11/src/gl/time_rz.c:282:6: branch_false: following 'false' branch (when 'tz' is non-NULL)...
gnutls-3.8.11/src/gl/time_rz.c:286:27: branch_false: ...to here
gnutls-3.8.11/src/gl/time_rz.c:286:27: call_function: calling 'set_tz' from 'mktime_z'
gnutls-3.8.11/src/gl/time_rz.c:286:27: return_function: returning to 'mktime_z' from 'set_tz'
gnutls-3.8.11/src/gl/time_rz.c:287:10: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/time_rz.c:290:25: branch_true: ...to here
gnutls-3.8.11/src/gl/time_rz.c:301:15: call_function: calling 'revert_tz' from 'mktime_z'
#  204|     if (env_tz
#  205|         ? tz->tz_is_set && strcmp (tz->abbrs, env_tz) == 0
#  206|->       : !tz->tz_is_set)
#  207|       return local_tz;
#  208|     else

Error: GCC_ANALYZER_WARNING (CWE-124): [#def190]
gnutls-3.8.11/src/gl/vasnprintf.c:2370:13: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
gnutls-3.8.11/src/gl/vasnprintf.c:2246:1: enter_function: entry to 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2252:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2263:7: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2263:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2281:7: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2281:7: call_function: inlined call to 'xsum4' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2283:8: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2283:8: branch_true: following 'true' branch (when 'sum <= 3999')...
gnutls-3.8.11/src/gl/vasnprintf.c:2285:27: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2337:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2339:24: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2340:39: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2358:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2362:13: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2362:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2366:19: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2366:16: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2368:32: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_false: following 'false' branch (when 'memory' is non-NULL)...
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2369:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2370:13: danger: out-of-bounds write at byte -1 but region starts at byte 0
# 2368|               augmented_length = xsum (length, 1);
# 2369|               ENSURE_ALLOCATION (augmented_length);
# 2370|->             result[length] = '%';
# 2371|               length = augmented_length;
# 2372|             }

Error: GCC_ANALYZER_WARNING (CWE-124): [#def191]
gnutls-3.8.11/src/gl/vasnprintf.c:6451:17: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
gnutls-3.8.11/src/gl/vasnprintf.c:2246:1: enter_function: entry to 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2252:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2263:7: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2263:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2281:7: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2281:7: call_function: inlined call to 'xsum4' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2283:8: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2283:8: branch_true: following 'true' branch (when 'sum <= 3999')...
gnutls-3.8.11/src/gl/vasnprintf.c:2285:27: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2337:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2339:24: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2340:39: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2358:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2362:13: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2362:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2375:19: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2375:16: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2378:16: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2378:16: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2820:21: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6120:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6122:21: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6122:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6124:21: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6124:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6126:21: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6126:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6129:21: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6129:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6134:25: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6134:24: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6136:25: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6136:24: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6194:25: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6194:24: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6214:17: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6446:17: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:6446:17: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:6451:18: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:6451:17: danger: out-of-bounds write at byte -1 but region starts at byte 0
# 6449|                   /* Prepare checking whether snprintf returns the count
# 6450|                      via %n.  */
# 6451|->                 *(TCHAR_T *) (result + length) = '\0';
# 6452|   #endif
# 6453|   

Error: GCC_ANALYZER_WARNING (CWE-124): [#def192]
gnutls-3.8.11/src/gl/vasnprintf.c:7247:5: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
gnutls-3.8.11/src/gl/vasnprintf.c:2246:1: enter_function: entry to 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2252:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2263:7: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2263:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2281:7: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2281:7: call_function: inlined call to 'xsum4' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2283:8: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2283:8: branch_true: following 'true' branch (when 'sum <= 3999')...
gnutls-3.8.11/src/gl/vasnprintf.c:2285:27: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2337:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2339:24: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2340:39: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch (when 'allocated != 18446744073709551615')...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: following 'true' branch (when 'result == resultbuf')...
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_true: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:2342:13: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:2358:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:7246:5: call_function: inlined call to 'xsum' from 'vasnprintf'
gnutls-3.8.11/src/gl/vasnprintf.c:7246:5: branch_false: following 'false' branch...
gnutls-3.8.11/src/gl/vasnprintf.c:7247:11: branch_false: ...to here
gnutls-3.8.11/src/gl/vasnprintf.c:7247:5: danger: out-of-bounds write at byte -1 but region starts at byte 0
# 7245|       /* Add the final NUL.  */
# 7246|       ENSURE_ALLOCATION (xsum (length, 1));
# 7247|->     result[length] = '\0';
# 7248|   
# 7249|       if (result != resultbuf && length + 1 < allocated)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def193]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: danger: 'pfds[0]' leaks here
#  170|         if (pid < 0)
#  171|           {
#  172|->           perror ("fork");
#  173|             exit (EXIT_FAILURE);
#  174|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def194]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:172:11: danger: 'pfds[1]' leaks here
#  170|         if (pid < 0)
#  171|           {
#  172|->           perror ("fork");
#  173|             exit (EXIT_FAILURE);
#  174|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def195]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: danger: 'pfds[0]' leaks here
#  176|         if (pid == 0)
#  177|           {
#  178|->           close (pfds[0]);
#  179|             dup2 (pfds[1], STDOUT_FILENO);
#  180|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def196]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: danger: 'pfds[1]' leaks here
#  176|         if (pid == 0)
#  177|           {
#  178|->           close (pfds[0]);
#  179|             dup2 (pfds[1], STDOUT_FILENO);
#  180|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def197]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:180:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:178:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:180:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:180:11: danger: 'pfds[1]' leaks here
#  178|             close (pfds[0]);
#  179|             dup2 (pfds[1], STDOUT_FILENO);
#  180|->           close (pfds[1]);
#  181|   
#  182|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def198]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: danger: 'pfds[0]' leaks here
#  187|             const char *envvar;
#  188|   
#  189|->           close (pfds[1]);
#  190|             dup2 (pfds[0], STDIN_FILENO);
#  191|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def199]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: danger: 'pfds[1]' leaks here
#  187|             const char *envvar;
#  188|   
#  189|->           close (pfds[1]);
#  190|             dup2 (pfds[0], STDIN_FILENO);
#  191|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def200]
gnutls-3.8.11/src/gnutls-cli-debug-options.c:191:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-debug-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:176:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:189:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-debug-options.c:191:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-debug-options.c:191:11: danger: 'pfds[0]' leaks here
#  189|             close (pfds[1]);
#  190|             dup2 (pfds[0], STDIN_FILENO);
#  191|->           close (pfds[0]);
#  192|   
#  193|             envvar = secure_getenv ("PAGER");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def201]
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: danger: 'pfds[0]' leaks here
#  659|         if (pid < 0)
#  660|           {
#  661|->           perror ("fork");
#  662|             exit (EXIT_FAILURE);
#  663|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def202]
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:661:11: danger: 'pfds[1]' leaks here
#  659|         if (pid < 0)
#  660|           {
#  661|->           perror ("fork");
#  662|             exit (EXIT_FAILURE);
#  663|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def203]
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: danger: 'pfds[0]' leaks here
#  665|         if (pid == 0)
#  666|           {
#  667|->           close (pfds[0]);
#  668|             dup2 (pfds[1], STDOUT_FILENO);
#  669|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def204]
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: danger: 'pfds[1]' leaks here
#  665|         if (pid == 0)
#  666|           {
#  667|->           close (pfds[0]);
#  668|             dup2 (pfds[1], STDOUT_FILENO);
#  669|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def205]
gnutls-3.8.11/src/gnutls-cli-options.c:669:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:667:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:669:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:669:11: danger: 'pfds[1]' leaks here
#  667|             close (pfds[0]);
#  668|             dup2 (pfds[1], STDOUT_FILENO);
#  669|->           close (pfds[1]);
#  670|   
#  671|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def206]
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: danger: 'pfds[0]' leaks here
#  676|             const char *envvar;
#  677|   
#  678|->           close (pfds[1]);
#  679|             dup2 (pfds[0], STDIN_FILENO);
#  680|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def207]
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: danger: 'pfds[1]' leaks here
#  676|             const char *envvar;
#  677|   
#  678|->           close (pfds[1]);
#  679|             dup2 (pfds[0], STDIN_FILENO);
#  680|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def208]
gnutls-3.8.11/src/gnutls-cli-options.c:680:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-cli-options.c:637:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:642:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:642:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:652:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:652:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-cli-options.c:658:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:659:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:665:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-cli-options.c:678:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-cli-options.c:680:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-cli-options.c:680:11: danger: 'pfds[0]' leaks here
#  678|             close (pfds[1]);
#  679|             dup2 (pfds[0], STDIN_FILENO);
#  680|->           close (pfds[0]);
#  681|   
#  682|             envvar = secure_getenv ("PAGER");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def209]
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: danger: 'pfds[0]' leaks here
#  502|         if (pid < 0)
#  503|           {
#  504|->           perror ("fork");
#  505|             exit (EXIT_FAILURE);
#  506|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def210]
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:504:11: danger: 'pfds[1]' leaks here
#  502|         if (pid < 0)
#  503|           {
#  504|->           perror ("fork");
#  505|             exit (EXIT_FAILURE);
#  506|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def211]
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: danger: 'pfds[0]' leaks here
#  508|         if (pid == 0)
#  509|           {
#  510|->           close (pfds[0]);
#  511|             dup2 (pfds[1], STDOUT_FILENO);
#  512|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def212]
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: danger: 'pfds[1]' leaks here
#  508|         if (pid == 0)
#  509|           {
#  510|->           close (pfds[0]);
#  511|             dup2 (pfds[1], STDOUT_FILENO);
#  512|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def213]
gnutls-3.8.11/src/gnutls-serv-options.c:512:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:510:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:512:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:512:11: danger: 'pfds[1]' leaks here
#  510|             close (pfds[0]);
#  511|             dup2 (pfds[1], STDOUT_FILENO);
#  512|->           close (pfds[1]);
#  513|   
#  514|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def214]
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: danger: 'pfds[0]' leaks here
#  519|             const char *envvar;
#  520|   
#  521|->           close (pfds[1]);
#  522|             dup2 (pfds[0], STDIN_FILENO);
#  523|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def215]
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: danger: 'pfds[1]' leaks here
#  519|             const char *envvar;
#  520|   
#  521|->           close (pfds[1]);
#  522|             dup2 (pfds[0], STDIN_FILENO);
#  523|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def216]
gnutls-3.8.11/src/gnutls-serv-options.c:523:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/gnutls-serv-options.c:473:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:480:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:480:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:485:7: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:485:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:495:11: branch_true: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:495:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/gnutls-serv-options.c:501:13: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:502:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:508:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/gnutls-serv-options.c:521:11: branch_false: ...to here
gnutls-3.8.11/src/gnutls-serv-options.c:523:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/gnutls-serv-options.c:523:11: danger: 'pfds[0]' leaks here
#  521|             close (pfds[1]);
#  522|             dup2 (pfds[0], STDIN_FILENO);
#  523|->           close (pfds[0]);
#  524|   
#  525|             envvar = secure_getenv ("PAGER");

Error: COMPILER_WARNING (CWE-704): [#def217]
gnutls-3.8.11/src/ocsptool-common.c: scope_hint: In function 'host_from_url'
gnutls-3.8.11/src/ocsptool-common.c:60:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#   60 |         if ((p = strstr(url, "http://")) != NULL) {
#      |                ^
#   58|   	*path = "";
#   59|   
#   60|-> 	if ((p = strstr(url, "http://")) != NULL) {
#   61|   		snprintf(hostname, sizeof(hostname), "%s", p + 7);
#   62|   		p = strchr(hostname, '/');

Error: COMPILER_WARNING (CWE-704): [#def218]
gnutls-3.8.11/src/ocsptool-common.c:60:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#   58|   	*path = "";
#   59|   
#   60|-> 	if ((p = strstr(url, "http://")) != NULL) {
#   61|   		snprintf(hostname, sizeof(hostname), "%s", p + 7);
#   62|   		p = strchr(hostname, '/');

Error: GCC_ANALYZER_WARNING (CWE-775): [#def219]
gnutls-3.8.11/src/ocsptool-options.c:282:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/ocsptool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:282:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:282:11: danger: 'pfds[0]' leaks here
#  280|         if (pid < 0)
#  281|           {
#  282|->           perror ("fork");
#  283|             exit (EXIT_FAILURE);
#  284|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def220]
gnutls-3.8.11/src/ocsptool-options.c:282:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/ocsptool-options.c:282:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:282:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:282:11: danger: 'pfds[1]' leaks here
#  280|         if (pid < 0)
#  281|           {
#  282|->           perror ("fork");
#  283|             exit (EXIT_FAILURE);
#  284|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def221]
gnutls-3.8.11/src/ocsptool-options.c:288:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/ocsptool-options.c:288:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:288:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:288:11: danger: 'pfds[0]' leaks here
#  286|         if (pid == 0)
#  287|           {
#  288|->           close (pfds[0]);
#  289|             dup2 (pfds[1], STDOUT_FILENO);
#  290|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def222]
gnutls-3.8.11/src/ocsptool-options.c:288:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/ocsptool-options.c:288:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:288:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:288:11: danger: 'pfds[1]' leaks here
#  286|         if (pid == 0)
#  287|           {
#  288|->           close (pfds[0]);
#  289|             dup2 (pfds[1], STDOUT_FILENO);
#  290|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def223]
gnutls-3.8.11/src/ocsptool-options.c:290:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/ocsptool-options.c:288:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:290:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:290:11: danger: 'pfds[1]' leaks here
#  288|             close (pfds[0]);
#  289|             dup2 (pfds[1], STDOUT_FILENO);
#  290|->           close (pfds[1]);
#  291|   
#  292|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def224]
gnutls-3.8.11/src/ocsptool-options.c:299:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/ocsptool-options.c:299:11: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:299:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:299:11: danger: 'pfds[0]' leaks here
#  297|             const char *envvar;
#  298|   
#  299|->           close (pfds[1]);
#  300|             dup2 (pfds[0], STDIN_FILENO);
#  301|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def225]
gnutls-3.8.11/src/ocsptool-options.c:299:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/ocsptool-options.c:299:11: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:299:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:299:11: danger: 'pfds[1]' leaks here
#  297|             const char *envvar;
#  298|   
#  299|->           close (pfds[1]);
#  300|             dup2 (pfds[0], STDIN_FILENO);
#  301|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def226]
gnutls-3.8.11/src/ocsptool-options.c:301:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/ocsptool-options.c:251:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:258:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:258:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:263:7: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:263:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/ocsptool-options.c:273:11: branch_true: ...to here
gnutls-3.8.11/src/ocsptool-options.c:273:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/ocsptool-options.c:279:13: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:280:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:286:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/ocsptool-options.c:299:11: branch_false: ...to here
gnutls-3.8.11/src/ocsptool-options.c:301:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/ocsptool-options.c:301:11: danger: 'pfds[0]' leaks here
#  299|             close (pfds[1]);
#  300|             dup2 (pfds[0], STDIN_FILENO);
#  301|->           close (pfds[0]);
#  302|   
#  303|             envvar = secure_getenv ("PAGER");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def227]
gnutls-3.8.11/src/p11tool-options.c:626:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/p11tool-options.c:626:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:626:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:626:11: danger: 'pfds[0]' leaks here
#  624|         if (pid < 0)
#  625|           {
#  626|->           perror ("fork");
#  627|             exit (EXIT_FAILURE);
#  628|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def228]
gnutls-3.8.11/src/p11tool-options.c:626:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/p11tool-options.c:626:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:626:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:626:11: danger: 'pfds[1]' leaks here
#  624|         if (pid < 0)
#  625|           {
#  626|->           perror ("fork");
#  627|             exit (EXIT_FAILURE);
#  628|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def229]
gnutls-3.8.11/src/p11tool-options.c:632:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/p11tool-options.c:632:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:632:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:632:11: danger: 'pfds[0]' leaks here
#  630|         if (pid == 0)
#  631|           {
#  632|->           close (pfds[0]);
#  633|             dup2 (pfds[1], STDOUT_FILENO);
#  634|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def230]
gnutls-3.8.11/src/p11tool-options.c:632:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/p11tool-options.c:632:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:632:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:632:11: danger: 'pfds[1]' leaks here
#  630|         if (pid == 0)
#  631|           {
#  632|->           close (pfds[0]);
#  633|             dup2 (pfds[1], STDOUT_FILENO);
#  634|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def231]
gnutls-3.8.11/src/p11tool-options.c:634:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/p11tool-options.c:632:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:634:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:634:11: danger: 'pfds[1]' leaks here
#  632|             close (pfds[0]);
#  633|             dup2 (pfds[1], STDOUT_FILENO);
#  634|->           close (pfds[1]);
#  635|   
#  636|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def232]
gnutls-3.8.11/src/p11tool-options.c:643:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/p11tool-options.c:643:11: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:643:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:643:11: danger: 'pfds[0]' leaks here
#  641|             const char *envvar;
#  642|   
#  643|->           close (pfds[1]);
#  644|             dup2 (pfds[0], STDIN_FILENO);
#  645|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def233]
gnutls-3.8.11/src/p11tool-options.c:643:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/p11tool-options.c:643:11: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:643:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:643:11: danger: 'pfds[1]' leaks here
#  641|             const char *envvar;
#  642|   
#  643|->           close (pfds[1]);
#  644|             dup2 (pfds[0], STDIN_FILENO);
#  645|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def234]
gnutls-3.8.11/src/p11tool-options.c:645:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/p11tool-options.c:602:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:607:7: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:607:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/p11tool-options.c:617:11: branch_true: ...to here
gnutls-3.8.11/src/p11tool-options.c:617:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/p11tool-options.c:623:13: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:624:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:630:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/p11tool-options.c:643:11: branch_false: ...to here
gnutls-3.8.11/src/p11tool-options.c:645:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/p11tool-options.c:645:11: danger: 'pfds[0]' leaks here
#  643|             close (pfds[1]);
#  644|             dup2 (pfds[0], STDIN_FILENO);
#  645|->           close (pfds[0]);
#  646|   
#  647|             envvar = secure_getenv ("PAGER");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def235]
gnutls-3.8.11/src/psk.c:220:17: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(&tmpname, "r")'
gnutls-3.8.11/src/psk.c:181:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:186:9: branch_false: ...to here
gnutls-3.8.11/src/psk.c:188:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:193:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:193:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:199:14: branch_false: ...to here
gnutls-3.8.11/src/psk.c:200:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:206:15: branch_false: ...to here
gnutls-3.8.11/src/psk.c:206:15: acquire_resource: opened here
gnutls-3.8.11/src/psk.c:207:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:215:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:215:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/psk.c:219:17: branch_true: ...to here
gnutls-3.8.11/src/psk.c:222:23: throw: if 'gnutls_hex_encode2' throws an exception...
gnutls-3.8.11/src/psk.c:220:17: danger: 'fopen(&tmpname, "r")' leaks here; was opened at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8)
#  218|   
#  219|   		tmp.data = (void *)username;
#  220|-> 		tmp.size = strlen(username);
#  221|   
#  222|   		ret = gnutls_hex_encode2(&tmp, &_username);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def236]
gnutls-3.8.11/src/psk.c:220:17: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(passwd_file, "w")'
gnutls-3.8.11/src/psk.c:181:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:186:9: branch_false: ...to here
gnutls-3.8.11/src/psk.c:188:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:193:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:193:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:199:14: branch_false: ...to here
gnutls-3.8.11/src/psk.c:199:14: acquire_resource: opened here
gnutls-3.8.11/src/psk.c:200:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:206:15: branch_false: ...to here
gnutls-3.8.11/src/psk.c:207:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:215:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:215:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/psk.c:219:17: branch_true: ...to here
gnutls-3.8.11/src/psk.c:222:23: throw: if 'gnutls_hex_encode2' throws an exception...
gnutls-3.8.11/src/psk.c:220:17: danger: 'fopen(passwd_file, "w")' leaks here; was opened at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  218|   
#  219|   		tmp.data = (void *)username;
#  220|-> 		tmp.size = strlen(username);
#  221|   
#  222|   		ret = gnutls_hex_encode2(&tmp, &_username);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def237]
gnutls-3.8.11/src/psk.c:246:42: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(&tmpname, "r")'
gnutls-3.8.11/src/psk.c:181:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:186:9: branch_false: ...to here
gnutls-3.8.11/src/psk.c:188:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:193:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:193:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:199:14: branch_false: ...to here
gnutls-3.8.11/src/psk.c:200:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:206:15: branch_false: ...to here
gnutls-3.8.11/src/psk.c:206:15: acquire_resource: opened here
gnutls-3.8.11/src/psk.c:207:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:215:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:215:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:246:42: branch_false: ...to here
gnutls-3.8.11/src/psk.c:246:42: throw: if the called function throws an exception...
gnutls-3.8.11/src/psk.c:246:42: danger: 'fopen(&tmpname, "r")' leaks here; was opened at [(9)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/8)
#  244|   		_username.size = new_size - 1;
#  245|   	} else {
#  246|-> 		_username.data = (void *)gnutls_strdup(username);
#  247|   		if (!_username.data) {
#  248|   			ret = -1;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def238]
gnutls-3.8.11/src/psk.c:246:42: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen(passwd_file, "w")'
gnutls-3.8.11/src/psk.c:181:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:186:9: branch_false: ...to here
gnutls-3.8.11/src/psk.c:188:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:193:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:193:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:199:14: branch_false: ...to here
gnutls-3.8.11/src/psk.c:199:14: acquire_resource: opened here
gnutls-3.8.11/src/psk.c:200:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:206:15: branch_false: ...to here
gnutls-3.8.11/src/psk.c:207:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:215:13: branch_false: ...to here
gnutls-3.8.11/src/psk.c:215:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/psk.c:246:42: branch_false: ...to here
gnutls-3.8.11/src/psk.c:246:42: throw: if the called function throws an exception...
gnutls-3.8.11/src/psk.c:246:42: danger: 'fopen(passwd_file, "w")' leaks here; was opened at [(7)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/6)
#  244|   		_username.size = new_size - 1;
#  245|   	} else {
#  246|-> 		_username.data = (void *)gnutls_strdup(username);
#  247|   		if (!_username.data) {
#  248|   			ret = -1;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def239]
gnutls-3.8.11/src/psktool-options.c:172:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/psktool-options.c:172:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:172:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/psktool-options.c:172:11: danger: 'pfds[0]' leaks here
#  170|         if (pid < 0)
#  171|           {
#  172|->           perror ("fork");
#  173|             exit (EXIT_FAILURE);
#  174|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def240]
gnutls-3.8.11/src/psktool-options.c:172:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/psktool-options.c:172:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:172:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/psktool-options.c:172:11: danger: 'pfds[1]' leaks here
#  170|         if (pid < 0)
#  171|           {
#  172|->           perror ("fork");
#  173|             exit (EXIT_FAILURE);
#  174|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def241]
gnutls-3.8.11/src/psktool-options.c:178:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:176:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/psktool-options.c:178:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:178:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/psktool-options.c:178:11: danger: 'pfds[0]' leaks here
#  176|         if (pid == 0)
#  177|           {
#  178|->           close (pfds[0]);
#  179|             dup2 (pfds[1], STDOUT_FILENO);
#  180|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def242]
gnutls-3.8.11/src/psktool-options.c:178:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:176:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/psktool-options.c:178:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:178:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/psktool-options.c:178:11: danger: 'pfds[1]' leaks here
#  176|         if (pid == 0)
#  177|           {
#  178|->           close (pfds[0]);
#  179|             dup2 (pfds[1], STDOUT_FILENO);
#  180|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def243]
gnutls-3.8.11/src/psktool-options.c:180:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:176:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/psktool-options.c:178:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:180:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/psktool-options.c:180:11: danger: 'pfds[1]' leaks here
#  178|             close (pfds[0]);
#  179|             dup2 (pfds[1], STDOUT_FILENO);
#  180|->           close (pfds[1]);
#  181|   
#  182|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def244]
gnutls-3.8.11/src/psktool-options.c:189:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/psktool-options.c:189:11: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:189:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/psktool-options.c:189:11: danger: 'pfds[0]' leaks here
#  187|             const char *envvar;
#  188|   
#  189|->           close (pfds[1]);
#  190|             dup2 (pfds[0], STDIN_FILENO);
#  191|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def245]
gnutls-3.8.11/src/psktool-options.c:189:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/psktool-options.c:189:11: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:189:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/psktool-options.c:189:11: danger: 'pfds[1]' leaks here
#  187|             const char *envvar;
#  188|   
#  189|->           close (pfds[1]);
#  190|             dup2 (pfds[0], STDIN_FILENO);
#  191|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def246]
gnutls-3.8.11/src/psktool-options.c:191:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/psktool-options.c:141:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:148:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:148:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:153:7: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:153:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/psktool-options.c:163:11: branch_true: ...to here
gnutls-3.8.11/src/psktool-options.c:163:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/psktool-options.c:169:13: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:170:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:176:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/psktool-options.c:189:11: branch_false: ...to here
gnutls-3.8.11/src/psktool-options.c:191:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/psktool-options.c:191:11: danger: 'pfds[0]' leaks here
#  189|             close (pfds[1]);
#  190|             dup2 (pfds[0], STDIN_FILENO);
#  191|->           close (pfds[0]);
#  192|   
#  193|             envvar = secure_getenv ("PAGER");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def247]
gnutls-3.8.11/src/serv.c:1016:33: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'news'
gnutls-3.8.11/src/serv.c:949:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:954:14: branch_false: ...to here
gnutls-3.8.11/src/serv.c:954:25: branch_true: following 'true' branch (when 'ptr' is non-NULL)...
gnutls-3.8.11/src/serv.c:965:25: branch_true: ...to here
gnutls-3.8.11/src/serv.c:970:29: acquire_resource: socket created here
gnutls-3.8.11/src/serv.c:970:20: branch_false: following 'false' branch (when 'news >= 0')...
gnutls-3.8.11/src/serv.c:977:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:988:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1008:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1008:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1014:20: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1014:20: branch_true: following 'true' branch (when 'socktype == 1')...
gnutls-3.8.11/src/serv.c:1015:29: branch_true: ...to here
gnutls-3.8.11/src/serv.c:1015:28: branch_true: following 'true' branch...
gnutls-3.8.11/src/serv.c:1016:33: branch_true: ...to here
gnutls-3.8.11/src/serv.c:1016:33: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/serv.c:1016:33: danger: 'news' leaks here
# 1014|   		if (socktype == SOCK_STREAM) {
# 1015|   			if (listen(s, 10) < 0) {
# 1016|-> 				perror("listen() failed");
# 1017|   				exit(1);
# 1018|   			}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def248]
gnutls-3.8.11/src/serv.c:1022:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'news'
gnutls-3.8.11/src/serv.c:949:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:954:14: branch_false: ...to here
gnutls-3.8.11/src/serv.c:954:25: branch_true: following 'true' branch (when 'ptr' is non-NULL)...
gnutls-3.8.11/src/serv.c:965:25: branch_true: ...to here
gnutls-3.8.11/src/serv.c:970:29: acquire_resource: socket created here
gnutls-3.8.11/src/serv.c:970:20: branch_false: following 'false' branch (when 'news >= 0')...
gnutls-3.8.11/src/serv.c:977:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:988:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1008:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1008:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1014:20: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1014:20: branch_true: following 'true' branch (when 'socktype == 1')...
gnutls-3.8.11/src/serv.c:1015:29: branch_true: ...to here
gnutls-3.8.11/src/serv.c:1015:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1022:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1022:21: throw: if 'xzalloc' throws an exception...
gnutls-3.8.11/src/serv.c:1022:21: danger: 'news' leaks here
# 1020|   
# 1021|   		/* new list entry for the connection */
# 1022|-> 		j = xzalloc(sizeof(*j));
# 1023|   		gl_list_add_last(listener_list, j);
# 1024|   		j->listen_socket = 1;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def249]
gnutls-3.8.11/src/serv.c:1031:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor 's'
gnutls-3.8.11/src/serv.c:936:5: enter_function: entry to 'listen_socket'
gnutls-3.8.11/src/serv.c:949:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:954:14: branch_false: ...to here
gnutls-3.8.11/src/serv.c:954:25: branch_true: following 'true' branch (when 'ptr' is non-NULL)...
gnutls-3.8.11/src/serv.c:965:25: branch_true: ...to here
gnutls-3.8.11/src/serv.c:970:29: acquire_resource: socket created here
gnutls-3.8.11/src/serv.c:970:20: branch_false: following 'false' branch (when 'news >= 0')...
gnutls-3.8.11/src/serv.c:977:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:988:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1008:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1008:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1014:20: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1014:20: branch_true: following 'true' branch (when 'socktype == 1')...
gnutls-3.8.11/src/serv.c:1015:29: branch_true: ...to here
gnutls-3.8.11/src/serv.c:1015:28: branch_false: following 'false' branch...
gnutls-3.8.11/src/serv.c:1022:21: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1023:17: call_function: calling 'gl_list_add_last' from 'listen_socket'
gnutls-3.8.11/src/serv.c:1023:17: return_function: returning to 'listen_socket' from 'gl_list_add_last'
gnutls-3.8.11/src/serv.c:954:25: branch_false: following 'false' branch (when 'ptr' is NULL)...
gnutls-3.8.11/src/serv.c:1031:9: branch_false: ...to here
gnutls-3.8.11/src/serv.c:1031:9: throw: if 'fflush' throws an exception...
gnutls-3.8.11/src/serv.c:1031:9: danger: 's' leaks here
# 1029|   	}
# 1030|   
# 1031|-> 	fflush(stderr);
# 1032|   
# 1033|   	freeaddrinfo(res);

Error: COMPILER_WARNING (CWE-252): [#def250]
gnutls-3.8.11/src/serv.c: scope_hint: In function 'terminate'
gnutls-3.8.11/src/serv.c:1140:9: warning[-Wunused-result]: ignoring return value of 'write' declared with attribute 'warn_unused_result'
# 1140 |         write(STDERR_FILENO, buf, p - buf);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1138|   	*p++ = '\n';
# 1139|   
# 1140|-> 	write(STDERR_FILENO, buf, p - buf);
# 1141|   	_exit(1);
# 1142|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def251]
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: danger: 'pfds[0]' leaks here
#  164|         if (pid < 0)
#  165|           {
#  166|->           perror ("fork");
#  167|             exit (EXIT_FAILURE);
#  168|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def252]
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_true: following 'true' branch (when 'pid < 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: throw: if 'perror' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:166:11: danger: 'pfds[1]' leaks here
#  164|         if (pid < 0)
#  165|           {
#  166|->           perror ("fork");
#  167|             exit (EXIT_FAILURE);
#  168|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def253]
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: danger: 'pfds[0]' leaks here
#  170|         if (pid == 0)
#  171|           {
#  172|->           close (pfds[0]);
#  173|             dup2 (pfds[1], STDOUT_FILENO);
#  174|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def254]
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: danger: 'pfds[1]' leaks here
#  170|         if (pid == 0)
#  171|           {
#  172|->           close (pfds[0]);
#  173|             dup2 (pfds[1], STDOUT_FILENO);
#  174|             close (pfds[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def255]
gnutls-3.8.11/src/systemkey-tool-options.c:174:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_true: following 'true' branch (when 'pid == 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:172:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:174:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:174:11: danger: 'pfds[1]' leaks here
#  172|             close (pfds[0]);
#  173|             dup2 (pfds[1], STDOUT_FILENO);
#  174|->           close (pfds[1]);
#  175|   
#  176|             usage (stdout, 0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def256]
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: danger: 'pfds[0]' leaks here
#  181|             const char *envvar;
#  182|   
#  183|->           close (pfds[1]);
#  184|             dup2 (pfds[0], STDIN_FILENO);
#  185|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def257]
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[1]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: danger: 'pfds[1]' leaks here
#  181|             const char *envvar;
#  182|   
#  183|->           close (pfds[1]);
#  184|             dup2 (pfds[0], STDIN_FILENO);
#  185|             close (pfds[0]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def258]
gnutls-3.8.11/src/systemkey-tool-options.c:185:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pfds[0]'
gnutls-3.8.11/src/systemkey-tool-options.c:135:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:142:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:142:6: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:147:7: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:147:6: branch_true: following 'true' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:157:11: branch_true: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:157:10: branch_false: following 'false' branch...
gnutls-3.8.11/src/systemkey-tool-options.c:163:13: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:164:10: branch_false: following 'false' branch (when 'pid >= 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:170:10: branch_false: following 'false' branch (when 'pid != 0')...
gnutls-3.8.11/src/systemkey-tool-options.c:183:11: branch_false: ...to here
gnutls-3.8.11/src/systemkey-tool-options.c:185:11: throw: if 'close' throws an exception...
gnutls-3.8.11/src/systemkey-tool-options.c:185:11: danger: 'pfds[0]' leaks here
#  183|             close (pfds[1]);
#  184|             dup2 (pfds[0], STDIN_FILENO);
#  185|->           close (pfds[0]);
#  186|   
#  187|             envvar = secure_getenv ("PAGER");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def259]
gnutls-3.8.11/src/tests.c:575:49: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen("debug-dh.out", "w")'
gnutls-3.8.11/src/tests.c:554:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/tests.c:561:9: branch_false: following 'false' branch...
gnutls-3.8.11/src/tests.c:563:9: branch_false: ...to here
gnutls-3.8.11/src/tests.c:568:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/tests.c:569:22: branch_true: ...to here
gnutls-3.8.11/src/tests.c:569:22: acquire_resource: opened here
gnutls-3.8.11/src/tests.c:570:20: branch_false: following 'false' branch...
gnutls-3.8.11/src/tests.c:573:17: branch_false: ...to here
gnutls-3.8.11/src/tests.c:575:25: throw: if 'raw_to_string' throws an exception...
gnutls-3.8.11/src/tests.c:575:49: danger: 'fopen("debug-dh.out", "w")' leaks here; was opened at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  573|   		ext_text = "saved in debug-dh.out";
#  574|   
#  575|-> 		print = raw_to_string(gen.data, gen.size);
#  576|   		if (print) {
#  577|   			fprintf(fp, " Generator [%d bits]: %s\n", gen.size * 8,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def260]
gnutls-3.8.11/src/tests.c:1592:17: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen("debug-certs.out", "w")'
gnutls-3.8.11/src/tests.c:1567:13: enter_function: entry to 'test_certificate'
gnutls-3.8.11/src/tests.c:1574:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/tests.c:1577:9: branch_false: ...to here
gnutls-3.8.11/src/tests.c:1581:9: branch_false: following 'false' branch...
gnutls-3.8.11/src/tests.c:1583:9: branch_false: ...to here
gnutls-3.8.11/src/tests.c:1585:15: call_function: calling 'test_do_handshake' from 'test_certificate'
gnutls-3.8.11/src/tests.c:1585:15: return_function: returning to 'test_certificate' from 'test_do_handshake'
gnutls-3.8.11/src/tests.c:1586:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/tests.c:1589:14: branch_false: ...to here
gnutls-3.8.11/src/tests.c:1589:14: acquire_resource: opened here
gnutls-3.8.11/src/tests.c:1590:12: branch_true: following 'true' branch...
gnutls-3.8.11/src/tests.c:1591:17: branch_true: ...to here
gnutls-3.8.11/src/tests.c:1592:17: throw: if 'print_cert_info2' throws an exception...
gnutls-3.8.11/src/tests.c:1592:17: danger: 'fopen("debug-certs.out", "w")' leaks here; was opened at [(13)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/12)
# 1590|   	if (fp != NULL) {
# 1591|   		fprintf(fp, "\n");
# 1592|-> 		print_cert_info2(session, GNUTLS_CRT_PRINT_FULL, fp, verbose);
# 1593|   		fclose(fp);
# 1594|   		ext_text = "saved in debug-certs.out";

Error: GCC_ANALYZER_WARNING (CWE-775): [#def261]
gnutls-3.8.11/src/tests.c:1717:54: warning[-Wanalyzer-file-leak]: leak of FILE 'fopen("debug-cas.out", "w")'
gnutls-3.8.11/src/tests.c:1701:14: acquire_resource: opened here
gnutls-3.8.11/src/tests.c:1702:12: branch_false: following 'false' branch...
gnutls-3.8.11/src/tests.c:1707:9: branch_false: ...to here
gnutls-3.8.11/src/tests.c:1715:21: branch_true: following 'true' branch (when 'nreqs > i')...
gnutls-3.8.11/src/tests.c:1716:17: branch_true: ...to here
gnutls-3.8.11/src/tests.c:1717:23: throw: if 'gnutls_x509_rdn_get' throws an exception...
gnutls-3.8.11/src/tests.c:1717:54: danger: 'fopen("debug-cas.out", "w")' leaks here; was opened at [(1)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/0)
# 1715|   	for (i = 0; i < nreqs; i++) {
# 1716|   		len = sizeof(issuer_dn);
# 1717|-> 		ret = gnutls_x509_rdn_get(&req_ca_rdn[i], issuer_dn, &len);
# 1718|   		if (ret >= 0) {
# 1719|   			fprintf(fp, "   [%d]: ", i);

Error: COMPILER_WARNING (CWE-252): [#def262]
gnutls-3.8.11/tests/utils.c: scope_hint: In function '_fail'
gnutls-3.8.11/tests/utils.c:96:9: warning[-Wunused-result]: ignoring return value of 'vasprintf' declared with attribute 'warn_unused_result'
#   96 |         vasprintf(&str, format, arg_ptr);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   94|   #ifdef HAVE_VASPRINTF
#   95|   	char *str = NULL;
#   96|-> 	vasprintf(&str, format, arg_ptr);
#   97|   
#   98|   	if (str)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def263]
gnutls-3.8.11/tests/utils.c:341:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'sock'
gnutls-3.8.11/tests/utils.c:334:16: acquire_resource: stream socket created here
gnutls-3.8.11/tests/utils.c:335:12: branch_false: following 'false' branch (when 'sock != -1')...
gnutls-3.8.11/tests/utils.c:338:9: branch_false: ...to here
gnutls-3.8.11/tests/utils.c:340:12: branch_true: following 'true' branch...
gnutls-3.8.11/tests/utils.c:341:17: branch_true: ...to here
gnutls-3.8.11/tests/utils.c:341:17: throw: if 'close' throws an exception...
gnutls-3.8.11/tests/utils.c:341:17: danger: 'sock' leaks here
#  339|   	sa.sin_port = htons(port);
#  340|   	if (inet_pton(AF_INET, addr, &sa.sin_addr) != 1) {
#  341|-> 		close(sock);
#  342|   		return -1;
#  343|   	}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def264]
gnutls-3.8.11/tests/utils.c:344:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'sock'
gnutls-3.8.11/tests/utils.c:334:16: acquire_resource: stream socket created here
gnutls-3.8.11/tests/utils.c:335:12: branch_false: following 'false' branch (when 'sock != -1')...
gnutls-3.8.11/tests/utils.c:338:9: branch_false: ...to here
gnutls-3.8.11/tests/utils.c:340:12: branch_false: following 'false' branch...
gnutls-3.8.11/tests/utils.c:344:13: branch_false: ...to here
gnutls-3.8.11/tests/utils.c:344:13: throw: if 'connect' throws an exception...
gnutls-3.8.11/tests/utils.c:344:13: danger: 'sock' leaks here
#  342|   		return -1;
#  343|   	}
#  344|-> 	if (connect(sock, (struct sockaddr *)&sa, sizeof(sa)) != 0) {
#  345|   		close(sock);
#  346|   		return -1;