Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-404): [#def1]
openssl-3.5.4/apps/storeutl.c:341:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
openssl-3.5.4/apps/storeutl.c:337:8: branch_false: following 'false' branch...
openssl-3.5.4/apps/storeutl.c:340:5: branch_false: ...to here
openssl-3.5.4/apps/storeutl.c:340:5: acquire_resource: 'va_start' called here
openssl-3.5.4/apps/storeutl.c:341:12: throw: if 'BIO_vprintf' throws an exception...
openssl-3.5.4/apps/storeutl.c:341:12: danger: missing call to 'va_end' to match 'va_start' at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  339|   
#  340|       va_start(args, format);
#  341|->     vret = BIO_vprintf(bio, format, args);
#  342|       va_end(args);
#  343|   

Error: COMPILER_WARNING (CWE-1164): [#def2]
openssl-3.5.4/providers/fips/self_test_kats.c:943:12: warning[-Wunused-function]: 'self_test_asym_ciphers' defined but not used
#  943 | static int self_test_asym_ciphers(OSSL_SELF_TEST *st, OSSL_LIB_CTX *libctx)
#      |            ^~~~~~~~~~~~~~~~~~~~~~
#  941|   }
#  942|   
#  943|-> static int self_test_asym_ciphers(OSSL_SELF_TEST *st, OSSL_LIB_CTX *libctx)
#  944|   {
#  945|       int i, ret = 1;

Scan Properties