dogtag-pki-11.8.0-0.6.beta6.fc44

List of Findings

Error: SHELLCHECK_WARNING: [#def1]
/usr/bin/pkidaemon:33:4: warning[SC3010]: In POSIX sh, [[ ]] is undefined.
#   31|   pki_instance_id="$2"
#   32|   
#   33|-> if [[ "$pki_instance_id" =~ .*"@".* ]]; then
#   34|       # instance ID contains <type>@<name>
#   35|       parts=(${pki_instance_id//@/ })

Error: SHELLCHECK_WARNING: [#def2]
/usr/bin/pkidaemon:33:26: warning[SC3015]: In POSIX sh, =~ regex matching is undefined.
#   31|   pki_instance_id="$2"
#   32|   
#   33|-> if [[ "$pki_instance_id" =~ .*"@".* ]]; then
#   34|       # instance ID contains <type>@<name>
#   35|       parts=(${pki_instance_id//@/ })

Error: SHELLCHECK_WARNING: [#def3]
/usr/bin/pkidaemon:35:11: warning[SC3030]: In POSIX sh, arrays are undefined.
#   33|   if [[ "$pki_instance_id" =~ .*"@".* ]]; then
#   34|       # instance ID contains <type>@<name>
#   35|->     parts=(${pki_instance_id//@/ })
#   36|       pki_instance_type=${parts[0]}
#   37|       pki_instance_name=${parts[1]}

Error: SHELLCHECK_WARNING (CWE-140): [#def4]
/usr/bin/pkidaemon:35:12: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   33|   if [[ "$pki_instance_id" =~ .*"@".* ]]; then
#   34|       # instance ID contains <type>@<name>
#   35|->     parts=(${pki_instance_id//@/ })
#   36|       pki_instance_type=${parts[0]}
#   37|       pki_instance_name=${parts[1]}

Error: SHELLCHECK_WARNING: [#def5]
/usr/bin/pkidaemon:35:12: warning[SC3060]: In POSIX sh, string replacement is undefined.
#   33|   if [[ "$pki_instance_id" =~ .*"@".* ]]; then
#   34|       # instance ID contains <type>@<name>
#   35|->     parts=(${pki_instance_id//@/ })
#   36|       pki_instance_type=${parts[0]}
#   37|       pki_instance_name=${parts[1]}

Error: SHELLCHECK_WARNING: [#def6]
/usr/bin/pkidaemon:36:23: warning[SC3054]: In POSIX sh, array references are undefined.
#   34|       # instance ID contains <type>@<name>
#   35|       parts=(${pki_instance_id//@/ })
#   36|->     pki_instance_type=${parts[0]}
#   37|       pki_instance_name=${parts[1]}
#   38|   

Error: SHELLCHECK_WARNING: [#def7]
/usr/bin/pkidaemon:37:23: warning[SC3054]: In POSIX sh, array references are undefined.
#   35|       parts=(${pki_instance_id//@/ })
#   36|       pki_instance_type=${parts[0]}
#   37|->     pki_instance_name=${parts[1]}
#   38|   
#   39|   else

Error: SHELLCHECK_WARNING (CWE-457): [#def8]
/usr/bin/pkidaemon:57:10: warning[SC2154]: default_error is referenced but not assigned.
#   55|       echo "where valid instance names include:"
#   56|       list_instances
#   57|->     exit ${default_error}
#   58|   }
#   59|   

Error: SHELLCHECK_WARNING: [#def9]
/usr/bin/pkidaemon:73:4: warning[SC3010]: In POSIX sh, [[ ]] is undefined.
#   71|   # issue.
#   72|   
#   73|-> if [[ "$pki_instance_type" = "tomcat" ]]; then
#   74|       cd /var/lib/tomcats/${pki_instance_name}
#   75|   

Error: SHELLCHECK_WARNING (CWE-252): [#def10]
/usr/bin/pkidaemon:74:5: warning[SC2164]: Use 'cd ... || exit' or 'cd ... || return' in case cd fails.
#   72|   
#   73|   if [[ "$pki_instance_type" = "tomcat" ]]; then
#   74|->     cd /var/lib/tomcats/${pki_instance_name}
#   75|   
#   76|   else  # pki-tomcatd

Error: SHELLCHECK_WARNING (CWE-252): [#def11]
/usr/bin/pkidaemon:77:5: warning[SC2164]: Use 'cd ... || exit' or 'cd ... || return' in case cd fails.
#   75|   
#   76|   else  # pki-tomcatd
#   77|->     cd /var/lib/pki/${pki_instance_name}
#   78|   fi
#   79|   

Error: SHELLCHECK_WARNING: [#def12]
/usr/share/pki/acme/bin/pki-acme-run:24:7: warning[SC3028]: In POSIX sh, UID is undefined.
#   22|   mkdir -p /conf/acme
#   23|   
#   24|-> if [ "$UID" = "0" ]
#   25|   then
#   26|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING (CWE-569): [#def13]
/usr/share/pki/acme/bin/pki-acme-run:43:5: warning[SC2188]: This redirection doesn't have a command. Move to its command (or use 'true' as no-op).
#   41|   
#   42|       # empty current metadata configuration
#   43|->     > /conf/acme/metadata.conf
#   44|   
#   45|       # import metadata configuration parameters

Error: SHELLCHECK_WARNING (CWE-569): [#def14]
/usr/share/pki/acme/bin/pki-acme-run:65:5: warning[SC2188]: This redirection doesn't have a command. Move to its command (or use 'true' as no-op).
#   63|   
#   64|       # empty current database configuration
#   65|->     > /conf/acme/database.conf
#   66|   
#   67|       # import database configuration parameters

Error: SHELLCHECK_WARNING (CWE-569): [#def15]
/usr/share/pki/acme/bin/pki-acme-run:87:5: warning[SC2188]: This redirection doesn't have a command. Move to its command (or use 'true' as no-op).
#   85|   
#   86|       # empty current issuer configuration
#   87|->     > /conf/acme/issuer.conf
#   88|   
#   89|       # import issuer configuration parameters

Error: SHELLCHECK_WARNING (CWE-569): [#def16]
/usr/share/pki/acme/bin/pki-acme-run:109:5: warning[SC2188]: This redirection doesn't have a command. Move to its command (or use 'true' as no-op).
#  107|   
#  108|       # empty current realm configuration
#  109|->     > /conf/acme/realm.conf
#  110|   
#  111|       # import realm configuration parameters

Error: SHELLCHECK_WARNING: [#def17]
/usr/share/pki/ca/bin/pki-ca-run:25:7: warning[SC3028]: In POSIX sh, UID is undefined.
#   23|   fi
#   24|   
#   25|-> if [ "$UID" = "0" ]
#   26|   then
#   27|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING: [#def18]
/usr/share/pki/ca/bin/pki-ca-run:255:23: warning[SC3028]: In POSIX sh, HOSTNAME is undefined.
#  253|           -f /conf/password.conf \
#  254|           nss-cert-request \
#  255|->         --subject "CN=$HOSTNAME" \
#  256|           --ext /usr/share/pki/server/certs/sslserver.conf \
#  257|           --csr /conf/certs/sslserver.csr

Error: SHELLCHECK_WARNING: [#def19]
/usr/share/pki/ca/bin/pki-ca-run:286:9: warning[SC3030]: In POSIX sh, arrays are undefined.
#  284|   echo "INFO: Creating CA server"
#  285|   
#  286|-> OPTIONS=()
#  287|   
#  288|   OPTIONS+=(--conf /conf)

Error: SHELLCHECK_WARNING: [#def20]
/usr/share/pki/ca/bin/pki-ca-run:288:1: warning[SC3024]: In POSIX sh, += is undefined.
#  286|   OPTIONS=()
#  287|   
#  288|-> OPTIONS+=(--conf /conf)
#  289|   OPTIONS+=(--logs /logs)
#  290|   

Error: SHELLCHECK_WARNING: [#def21]
/usr/share/pki/ca/bin/pki-ca-run:288:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  286|   OPTIONS=()
#  287|   
#  288|-> OPTIONS+=(--conf /conf)
#  289|   OPTIONS+=(--logs /logs)
#  290|   

Error: SHELLCHECK_WARNING: [#def22]
/usr/share/pki/ca/bin/pki-ca-run:289:1: warning[SC3024]: In POSIX sh, += is undefined.
#  287|   
#  288|   OPTIONS+=(--conf /conf)
#  289|-> OPTIONS+=(--logs /logs)
#  290|   
#  291|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ca.cfg)

Error: SHELLCHECK_WARNING: [#def23]
/usr/share/pki/ca/bin/pki-ca-run:289:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  287|   
#  288|   OPTIONS+=(--conf /conf)
#  289|-> OPTIONS+=(--logs /logs)
#  290|   
#  291|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ca.cfg)

Error: SHELLCHECK_WARNING: [#def24]
/usr/share/pki/ca/bin/pki-ca-run:291:1: warning[SC3024]: In POSIX sh, += is undefined.
#  289|   OPTIONS+=(--logs /logs)
#  290|   
#  291|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/ca.cfg)
#  292|   OPTIONS+=(-s CA)
#  293|   

Error: SHELLCHECK_WARNING: [#def25]
/usr/share/pki/ca/bin/pki-ca-run:291:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  289|   OPTIONS+=(--logs /logs)
#  290|   
#  291|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/ca.cfg)
#  292|   OPTIONS+=(-s CA)
#  293|   

Error: SHELLCHECK_WARNING: [#def26]
/usr/share/pki/ca/bin/pki-ca-run:292:1: warning[SC3024]: In POSIX sh, += is undefined.
#  290|   
#  291|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ca.cfg)
#  292|-> OPTIONS+=(-s CA)
#  293|   
#  294|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def27]
/usr/share/pki/ca/bin/pki-ca-run:292:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  290|   
#  291|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ca.cfg)
#  292|-> OPTIONS+=(-s CA)
#  293|   
#  294|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def28]
/usr/share/pki/ca/bin/pki-ca-run:294:1: warning[SC3024]: In POSIX sh, += is undefined.
#  292|   OPTIONS+=(-s CA)
#  293|   
#  294|-> OPTIONS+=(-D pki_group=root)
#  295|   
#  296|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def29]
/usr/share/pki/ca/bin/pki-ca-run:294:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  292|   OPTIONS+=(-s CA)
#  293|   
#  294|-> OPTIONS+=(-D pki_group=root)
#  295|   
#  296|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def30]
/usr/share/pki/ca/bin/pki-ca-run:296:1: warning[SC3024]: In POSIX sh, += is undefined.
#  294|   OPTIONS+=(-D pki_group=root)
#  295|   
#  296|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def31]
/usr/share/pki/ca/bin/pki-ca-run:296:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  294|   OPTIONS+=(-D pki_group=root)
#  295|   
#  296|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING (CWE-140): [#def32]
/usr/share/pki/ca/bin/pki-ca-run:296:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  294|   OPTIONS+=(-D pki_group=root)
#  295|   
#  296|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def33]
/usr/share/pki/ca/bin/pki-ca-run:297:1: warning[SC3024]: In POSIX sh, += is undefined.
#  295|   
#  296|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)
#  299|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def34]
/usr/share/pki/ca/bin/pki-ca-run:297:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  295|   
#  296|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)
#  299|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING (CWE-140): [#def35]
/usr/share/pki/ca/bin/pki-ca-run:297:30: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  295|   
#  296|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)
#  299|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def36]
/usr/share/pki/ca/bin/pki-ca-run:298:1: warning[SC3024]: In POSIX sh, += is undefined.
#  296|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|-> OPTIONS+=(-D pki_ds_database=userroot)
#  299|   OPTIONS+=(-D pki_ds_setup=False)
#  300|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def37]
/usr/share/pki/ca/bin/pki-ca-run:298:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  296|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  297|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|-> OPTIONS+=(-D pki_ds_database=userroot)
#  299|   OPTIONS+=(-D pki_ds_setup=False)
#  300|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def38]
/usr/share/pki/ca/bin/pki-ca-run:299:1: warning[SC3024]: In POSIX sh, += is undefined.
#  297|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)
#  299|-> OPTIONS+=(-D pki_ds_setup=False)
#  300|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  301|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def39]
/usr/share/pki/ca/bin/pki-ca-run:299:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  297|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  298|   OPTIONS+=(-D pki_ds_database=userroot)
#  299|-> OPTIONS+=(-D pki_ds_setup=False)
#  300|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  301|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def40]
/usr/share/pki/ca/bin/pki-ca-run:300:1: warning[SC3024]: In POSIX sh, += is undefined.
#  298|   OPTIONS+=(-D pki_ds_database=userroot)
#  299|   OPTIONS+=(-D pki_ds_setup=False)
#  300|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  301|   OPTIONS+=(-D pki_share_db=True)
#  302|   

Error: SHELLCHECK_WARNING: [#def41]
/usr/share/pki/ca/bin/pki-ca-run:300:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  298|   OPTIONS+=(-D pki_ds_database=userroot)
#  299|   OPTIONS+=(-D pki_ds_setup=False)
#  300|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  301|   OPTIONS+=(-D pki_share_db=True)
#  302|   

Error: SHELLCHECK_WARNING: [#def42]
/usr/share/pki/ca/bin/pki-ca-run:301:1: warning[SC3024]: In POSIX sh, += is undefined.
#  299|   OPTIONS+=(-D pki_ds_setup=False)
#  300|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  301|-> OPTIONS+=(-D pki_share_db=True)
#  302|   
#  303|   OPTIONS+=(-D pki_import_system_certs=False)

Error: SHELLCHECK_WARNING: [#def43]
/usr/share/pki/ca/bin/pki-ca-run:301:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  299|   OPTIONS+=(-D pki_ds_setup=False)
#  300|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  301|-> OPTIONS+=(-D pki_share_db=True)
#  302|   
#  303|   OPTIONS+=(-D pki_import_system_certs=False)

Error: SHELLCHECK_WARNING: [#def44]
/usr/share/pki/ca/bin/pki-ca-run:303:1: warning[SC3024]: In POSIX sh, += is undefined.
#  301|   OPTIONS+=(-D pki_share_db=True)
#  302|   
#  303|-> OPTIONS+=(-D pki_import_system_certs=False)
#  304|   
#  305|   OPTIONS+=(-D pki_ca_signing_nickname="$PKI_CA_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def45]
/usr/share/pki/ca/bin/pki-ca-run:303:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  301|   OPTIONS+=(-D pki_share_db=True)
#  302|   
#  303|-> OPTIONS+=(-D pki_import_system_certs=False)
#  304|   
#  305|   OPTIONS+=(-D pki_ca_signing_nickname="$PKI_CA_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def46]
/usr/share/pki/ca/bin/pki-ca-run:305:1: warning[SC3024]: In POSIX sh, += is undefined.
#  303|   OPTIONS+=(-D pki_import_system_certs=False)
#  304|   
#  305|-> OPTIONS+=(-D pki_ca_signing_nickname="$PKI_CA_SIGNING_NICKNAME")
#  306|   OPTIONS+=(-D pki_ca_signing_csr_path=/conf/certs/ca_signing.csr)
#  307|   

Error: SHELLCHECK_WARNING: [#def47]
/usr/share/pki/ca/bin/pki-ca-run:305:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  303|   OPTIONS+=(-D pki_import_system_certs=False)
#  304|   
#  305|-> OPTIONS+=(-D pki_ca_signing_nickname="$PKI_CA_SIGNING_NICKNAME")
#  306|   OPTIONS+=(-D pki_ca_signing_csr_path=/conf/certs/ca_signing.csr)
#  307|   

Error: SHELLCHECK_WARNING: [#def48]
/usr/share/pki/ca/bin/pki-ca-run:306:1: warning[SC3024]: In POSIX sh, += is undefined.
#  304|   
#  305|   OPTIONS+=(-D pki_ca_signing_nickname="$PKI_CA_SIGNING_NICKNAME")
#  306|-> OPTIONS+=(-D pki_ca_signing_csr_path=/conf/certs/ca_signing.csr)
#  307|   
#  308|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def49]
/usr/share/pki/ca/bin/pki-ca-run:306:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  304|   
#  305|   OPTIONS+=(-D pki_ca_signing_nickname="$PKI_CA_SIGNING_NICKNAME")
#  306|-> OPTIONS+=(-D pki_ca_signing_csr_path=/conf/certs/ca_signing.csr)
#  307|   
#  308|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def50]
/usr/share/pki/ca/bin/pki-ca-run:308:1: warning[SC3024]: In POSIX sh, += is undefined.
#  306|   OPTIONS+=(-D pki_ca_signing_csr_path=/conf/certs/ca_signing.csr)
#  307|   
#  308|-> OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  309|   OPTIONS+=(-D pki_ocsp_signing_csr_path=/conf/certs/ca_ocsp_signing.csr)
#  310|   

Error: SHELLCHECK_WARNING: [#def51]
/usr/share/pki/ca/bin/pki-ca-run:308:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  306|   OPTIONS+=(-D pki_ca_signing_csr_path=/conf/certs/ca_signing.csr)
#  307|   
#  308|-> OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  309|   OPTIONS+=(-D pki_ocsp_signing_csr_path=/conf/certs/ca_ocsp_signing.csr)
#  310|   

Error: SHELLCHECK_WARNING: [#def52]
/usr/share/pki/ca/bin/pki-ca-run:309:1: warning[SC3024]: In POSIX sh, += is undefined.
#  307|   
#  308|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  309|-> OPTIONS+=(-D pki_ocsp_signing_csr_path=/conf/certs/ca_ocsp_signing.csr)
#  310|   
#  311|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def53]
/usr/share/pki/ca/bin/pki-ca-run:309:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  307|   
#  308|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  309|-> OPTIONS+=(-D pki_ocsp_signing_csr_path=/conf/certs/ca_ocsp_signing.csr)
#  310|   
#  311|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def54]
/usr/share/pki/ca/bin/pki-ca-run:311:1: warning[SC3024]: In POSIX sh, += is undefined.
#  309|   OPTIONS+=(-D pki_ocsp_signing_csr_path=/conf/certs/ca_ocsp_signing.csr)
#  310|   
#  311|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  312|   if [ -f /conf/certs/ca_audit_signing.csr ]
#  313|   then

Error: SHELLCHECK_WARNING: [#def55]
/usr/share/pki/ca/bin/pki-ca-run:311:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  309|   OPTIONS+=(-D pki_ocsp_signing_csr_path=/conf/certs/ca_ocsp_signing.csr)
#  310|   
#  311|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  312|   if [ -f /conf/certs/ca_audit_signing.csr ]
#  313|   then

Error: SHELLCHECK_WARNING: [#def56]
/usr/share/pki/ca/bin/pki-ca-run:314:5: warning[SC3024]: In POSIX sh, += is undefined.
#  312|   if [ -f /conf/certs/ca_audit_signing.csr ]
#  313|   then
#  314|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/ca_audit_signing.csr)
#  315|   fi
#  316|   

Error: SHELLCHECK_WARNING: [#def57]
/usr/share/pki/ca/bin/pki-ca-run:314:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  312|   if [ -f /conf/certs/ca_audit_signing.csr ]
#  313|   then
#  314|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/ca_audit_signing.csr)
#  315|   fi
#  316|   

Error: SHELLCHECK_WARNING: [#def58]
/usr/share/pki/ca/bin/pki-ca-run:317:1: warning[SC3024]: In POSIX sh, += is undefined.
#  315|   fi
#  316|   
#  317|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  318|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  319|   

Error: SHELLCHECK_WARNING: [#def59]
/usr/share/pki/ca/bin/pki-ca-run:317:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  315|   fi
#  316|   
#  317|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  318|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  319|   

Error: SHELLCHECK_WARNING: [#def60]
/usr/share/pki/ca/bin/pki-ca-run:318:1: warning[SC3024]: In POSIX sh, += is undefined.
#  316|   
#  317|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  318|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  319|   
#  320|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def61]
/usr/share/pki/ca/bin/pki-ca-run:318:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  316|   
#  317|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  318|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  319|   
#  320|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def62]
/usr/share/pki/ca/bin/pki-ca-run:320:1: warning[SC3024]: In POSIX sh, += is undefined.
#  318|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  319|   
#  320|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  321|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  322|   

Error: SHELLCHECK_WARNING: [#def63]
/usr/share/pki/ca/bin/pki-ca-run:320:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  318|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  319|   
#  320|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  321|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  322|   

Error: SHELLCHECK_WARNING: [#def64]
/usr/share/pki/ca/bin/pki-ca-run:321:1: warning[SC3024]: In POSIX sh, += is undefined.
#  319|   
#  320|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  321|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  322|   
#  323|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def65]
/usr/share/pki/ca/bin/pki-ca-run:321:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  319|   
#  320|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  321|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  322|   
#  323|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def66]
/usr/share/pki/ca/bin/pki-ca-run:323:1: warning[SC3024]: In POSIX sh, += is undefined.
#  321|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  322|   
#  323|-> OPTIONS+=(-D pki_admin_setup=False)
#  324|   OPTIONS+=(-D pki_security_domain_setup=False)
#  325|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def67]
/usr/share/pki/ca/bin/pki-ca-run:323:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  321|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  322|   
#  323|-> OPTIONS+=(-D pki_admin_setup=False)
#  324|   OPTIONS+=(-D pki_security_domain_setup=False)
#  325|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def68]
/usr/share/pki/ca/bin/pki-ca-run:324:1: warning[SC3024]: In POSIX sh, += is undefined.
#  322|   
#  323|   OPTIONS+=(-D pki_admin_setup=False)
#  324|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  325|   OPTIONS+=(-D pki_security_manager=False)
#  326|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def69]
/usr/share/pki/ca/bin/pki-ca-run:324:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  322|   
#  323|   OPTIONS+=(-D pki_admin_setup=False)
#  324|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  325|   OPTIONS+=(-D pki_security_manager=False)
#  326|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def70]
/usr/share/pki/ca/bin/pki-ca-run:325:1: warning[SC3024]: In POSIX sh, += is undefined.
#  323|   OPTIONS+=(-D pki_admin_setup=False)
#  324|   OPTIONS+=(-D pki_security_domain_setup=False)
#  325|-> OPTIONS+=(-D pki_security_manager=False)
#  326|   OPTIONS+=(-D pki_systemd_service_create=False)
#  327|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def71]
/usr/share/pki/ca/bin/pki-ca-run:325:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  323|   OPTIONS+=(-D pki_admin_setup=False)
#  324|   OPTIONS+=(-D pki_security_domain_setup=False)
#  325|-> OPTIONS+=(-D pki_security_manager=False)
#  326|   OPTIONS+=(-D pki_systemd_service_create=False)
#  327|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def72]
/usr/share/pki/ca/bin/pki-ca-run:326:1: warning[SC3024]: In POSIX sh, += is undefined.
#  324|   OPTIONS+=(-D pki_security_domain_setup=False)
#  325|   OPTIONS+=(-D pki_security_manager=False)
#  326|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  327|   OPTIONS+=(-D pki_registry_enable=False)
#  328|   

Error: SHELLCHECK_WARNING: [#def73]
/usr/share/pki/ca/bin/pki-ca-run:326:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  324|   OPTIONS+=(-D pki_security_domain_setup=False)
#  325|   OPTIONS+=(-D pki_security_manager=False)
#  326|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  327|   OPTIONS+=(-D pki_registry_enable=False)
#  328|   

Error: SHELLCHECK_WARNING: [#def74]
/usr/share/pki/ca/bin/pki-ca-run:327:1: warning[SC3024]: In POSIX sh, += is undefined.
#  325|   OPTIONS+=(-D pki_security_manager=False)
#  326|   OPTIONS+=(-D pki_systemd_service_create=False)
#  327|-> OPTIONS+=(-D pki_registry_enable=False)
#  328|   
#  329|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def75]
/usr/share/pki/ca/bin/pki-ca-run:327:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  325|   OPTIONS+=(-D pki_security_manager=False)
#  326|   OPTIONS+=(-D pki_systemd_service_create=False)
#  327|-> OPTIONS+=(-D pki_registry_enable=False)
#  328|   
#  329|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def76]
/usr/share/pki/ca/bin/pki-ca-run:329:1: warning[SC3024]: In POSIX sh, += is undefined.
#  327|   OPTIONS+=(-D pki_registry_enable=False)
#  328|   
#  329|-> OPTIONS+=(-v)
#  330|   
#  331|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def77]
/usr/share/pki/ca/bin/pki-ca-run:329:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  327|   OPTIONS+=(-D pki_registry_enable=False)
#  328|   
#  329|-> OPTIONS+=(-v)
#  330|   
#  331|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def78]
/usr/share/pki/ca/bin/pki-ca-run:331:11: warning[SC3054]: In POSIX sh, array references are undefined.
#  329|   OPTIONS+=(-v)
#  330|   
#  331|-> pkispawn "${OPTIONS[@]}"
#  332|   
#  333|   echo "################################################################################"

Error: SHELLCHECK_WARNING: [#def79]
/usr/share/pki/ca/bin/pki-ca-run:342:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  340|   echo "INFO: Updating owners and permissions"
#  341|   
#  342|-> if [ "$UID" = "0" ]
#  343|   then
#  344|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING (CWE-569): [#def80]
/usr/share/pki/ca/bin/pki-ca-run:364:16: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
#  362|   echo "INFO: Starting CA server"
#  363|   
#  364|-> trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  365|   
#  366|   if [ "$UID" = "0" ]; then

Error: SHELLCHECK_WARNING: [#def81]
/usr/share/pki/ca/bin/pki-ca-run:366:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  364|   trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  365|   
#  366|-> if [ "$UID" = "0" ]; then
#  367|       # In Docker the server runs as root user but it will switch
#  368|       # into pkiuser (UID=17) that belongs to the root group (GID=0).

Error: SHELLCHECK_WARNING: [#def82]
/usr/share/pki/kra/bin/pki-kra-run:25:7: warning[SC3028]: In POSIX sh, UID is undefined.
#   23|   fi
#   24|   
#   25|-> if [ "$UID" = "0" ]
#   26|   then
#   27|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING: [#def83]
/usr/share/pki/kra/bin/pki-kra-run:129:9: warning[SC3030]: In POSIX sh, arrays are undefined.
#  127|   echo "INFO: Creating KRA server"
#  128|   
#  129|-> OPTIONS=()
#  130|   
#  131|   OPTIONS+=(--conf /conf)

Error: SHELLCHECK_WARNING: [#def84]
/usr/share/pki/kra/bin/pki-kra-run:131:1: warning[SC3024]: In POSIX sh, += is undefined.
#  129|   OPTIONS=()
#  130|   
#  131|-> OPTIONS+=(--conf /conf)
#  132|   OPTIONS+=(--logs /logs)
#  133|   

Error: SHELLCHECK_WARNING: [#def85]
/usr/share/pki/kra/bin/pki-kra-run:131:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  129|   OPTIONS=()
#  130|   
#  131|-> OPTIONS+=(--conf /conf)
#  132|   OPTIONS+=(--logs /logs)
#  133|   

Error: SHELLCHECK_WARNING: [#def86]
/usr/share/pki/kra/bin/pki-kra-run:132:1: warning[SC3024]: In POSIX sh, += is undefined.
#  130|   
#  131|   OPTIONS+=(--conf /conf)
#  132|-> OPTIONS+=(--logs /logs)
#  133|   
#  134|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/kra.cfg)

Error: SHELLCHECK_WARNING: [#def87]
/usr/share/pki/kra/bin/pki-kra-run:132:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  130|   
#  131|   OPTIONS+=(--conf /conf)
#  132|-> OPTIONS+=(--logs /logs)
#  133|   
#  134|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/kra.cfg)

Error: SHELLCHECK_WARNING: [#def88]
/usr/share/pki/kra/bin/pki-kra-run:134:1: warning[SC3024]: In POSIX sh, += is undefined.
#  132|   OPTIONS+=(--logs /logs)
#  133|   
#  134|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/kra.cfg)
#  135|   OPTIONS+=(-s KRA)
#  136|   

Error: SHELLCHECK_WARNING: [#def89]
/usr/share/pki/kra/bin/pki-kra-run:134:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  132|   OPTIONS+=(--logs /logs)
#  133|   
#  134|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/kra.cfg)
#  135|   OPTIONS+=(-s KRA)
#  136|   

Error: SHELLCHECK_WARNING: [#def90]
/usr/share/pki/kra/bin/pki-kra-run:135:1: warning[SC3024]: In POSIX sh, += is undefined.
#  133|   
#  134|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/kra.cfg)
#  135|-> OPTIONS+=(-s KRA)
#  136|   
#  137|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def91]
/usr/share/pki/kra/bin/pki-kra-run:135:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  133|   
#  134|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/kra.cfg)
#  135|-> OPTIONS+=(-s KRA)
#  136|   
#  137|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def92]
/usr/share/pki/kra/bin/pki-kra-run:137:1: warning[SC3024]: In POSIX sh, += is undefined.
#  135|   OPTIONS+=(-s KRA)
#  136|   
#  137|-> OPTIONS+=(-D pki_group=root)
#  138|   
#  139|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def93]
/usr/share/pki/kra/bin/pki-kra-run:137:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  135|   OPTIONS+=(-s KRA)
#  136|   
#  137|-> OPTIONS+=(-D pki_group=root)
#  138|   
#  139|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def94]
/usr/share/pki/kra/bin/pki-kra-run:139:1: warning[SC3024]: In POSIX sh, += is undefined.
#  137|   OPTIONS+=(-D pki_group=root)
#  138|   
#  139|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  140|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  141|   

Error: SHELLCHECK_WARNING: [#def95]
/usr/share/pki/kra/bin/pki-kra-run:139:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  137|   OPTIONS+=(-D pki_group=root)
#  138|   
#  139|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  140|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  141|   

Error: SHELLCHECK_WARNING: [#def96]
/usr/share/pki/kra/bin/pki-kra-run:140:1: warning[SC3024]: In POSIX sh, += is undefined.
#  138|   
#  139|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  140|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  141|   
#  142|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def97]
/usr/share/pki/kra/bin/pki-kra-run:140:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  138|   
#  139|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  140|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  141|   
#  142|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def98]
/usr/share/pki/kra/bin/pki-kra-run:142:1: warning[SC3024]: In POSIX sh, += is undefined.
#  140|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  141|   
#  142|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def99]
/usr/share/pki/kra/bin/pki-kra-run:142:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  140|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  141|   
#  142|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING (CWE-140): [#def100]
/usr/share/pki/kra/bin/pki-kra-run:142:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  140|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  141|   
#  142|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def101]
/usr/share/pki/kra/bin/pki-kra-run:143:1: warning[SC3024]: In POSIX sh, += is undefined.
#  141|   
#  142|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)
#  145|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def102]
/usr/share/pki/kra/bin/pki-kra-run:143:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  141|   
#  142|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)
#  145|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING (CWE-140): [#def103]
/usr/share/pki/kra/bin/pki-kra-run:143:30: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  141|   
#  142|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)
#  145|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def104]
/usr/share/pki/kra/bin/pki-kra-run:144:1: warning[SC3024]: In POSIX sh, += is undefined.
#  142|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|-> OPTIONS+=(-D pki_ds_database=userroot)
#  145|   OPTIONS+=(-D pki_ds_setup=False)
#  146|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def105]
/usr/share/pki/kra/bin/pki-kra-run:144:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  142|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  143|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|-> OPTIONS+=(-D pki_ds_database=userroot)
#  145|   OPTIONS+=(-D pki_ds_setup=False)
#  146|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def106]
/usr/share/pki/kra/bin/pki-kra-run:145:1: warning[SC3024]: In POSIX sh, += is undefined.
#  143|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)
#  145|-> OPTIONS+=(-D pki_ds_setup=False)
#  146|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  147|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def107]
/usr/share/pki/kra/bin/pki-kra-run:145:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  143|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  144|   OPTIONS+=(-D pki_ds_database=userroot)
#  145|-> OPTIONS+=(-D pki_ds_setup=False)
#  146|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  147|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def108]
/usr/share/pki/kra/bin/pki-kra-run:146:1: warning[SC3024]: In POSIX sh, += is undefined.
#  144|   OPTIONS+=(-D pki_ds_database=userroot)
#  145|   OPTIONS+=(-D pki_ds_setup=False)
#  146|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  147|   OPTIONS+=(-D pki_share_db=True)
#  148|   

Error: SHELLCHECK_WARNING: [#def109]
/usr/share/pki/kra/bin/pki-kra-run:146:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  144|   OPTIONS+=(-D pki_ds_database=userroot)
#  145|   OPTIONS+=(-D pki_ds_setup=False)
#  146|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  147|   OPTIONS+=(-D pki_share_db=True)
#  148|   

Error: SHELLCHECK_WARNING: [#def110]
/usr/share/pki/kra/bin/pki-kra-run:147:1: warning[SC3024]: In POSIX sh, += is undefined.
#  145|   OPTIONS+=(-D pki_ds_setup=False)
#  146|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  147|-> OPTIONS+=(-D pki_share_db=True)
#  148|   
#  149|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def111]
/usr/share/pki/kra/bin/pki-kra-run:147:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  145|   OPTIONS+=(-D pki_ds_setup=False)
#  146|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  147|-> OPTIONS+=(-D pki_share_db=True)
#  148|   
#  149|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def112]
/usr/share/pki/kra/bin/pki-kra-run:149:1: warning[SC3024]: In POSIX sh, += is undefined.
#  147|   OPTIONS+=(-D pki_share_db=True)
#  148|   
#  149|-> OPTIONS+=(-D pki_issuing_ca=)
#  150|   OPTIONS+=(-D pki_import_system_certs=False)
#  151|   

Error: SHELLCHECK_WARNING: [#def113]
/usr/share/pki/kra/bin/pki-kra-run:149:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  147|   OPTIONS+=(-D pki_share_db=True)
#  148|   
#  149|-> OPTIONS+=(-D pki_issuing_ca=)
#  150|   OPTIONS+=(-D pki_import_system_certs=False)
#  151|   

Error: SHELLCHECK_WARNING: [#def114]
/usr/share/pki/kra/bin/pki-kra-run:150:1: warning[SC3024]: In POSIX sh, += is undefined.
#  148|   
#  149|   OPTIONS+=(-D pki_issuing_ca=)
#  150|-> OPTIONS+=(-D pki_import_system_certs=False)
#  151|   
#  152|   OPTIONS+=(-D pki_storage_nickname="$PKI_STORAGE_NICKNAME")

Error: SHELLCHECK_WARNING: [#def115]
/usr/share/pki/kra/bin/pki-kra-run:150:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  148|   
#  149|   OPTIONS+=(-D pki_issuing_ca=)
#  150|-> OPTIONS+=(-D pki_import_system_certs=False)
#  151|   
#  152|   OPTIONS+=(-D pki_storage_nickname="$PKI_STORAGE_NICKNAME")

Error: SHELLCHECK_WARNING: [#def116]
/usr/share/pki/kra/bin/pki-kra-run:152:1: warning[SC3024]: In POSIX sh, += is undefined.
#  150|   OPTIONS+=(-D pki_import_system_certs=False)
#  151|   
#  152|-> OPTIONS+=(-D pki_storage_nickname="$PKI_STORAGE_NICKNAME")
#  153|   OPTIONS+=(-D pki_storage_csr_path=/conf/certs/kra_storage.csr)
#  154|   

Error: SHELLCHECK_WARNING: [#def117]
/usr/share/pki/kra/bin/pki-kra-run:152:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  150|   OPTIONS+=(-D pki_import_system_certs=False)
#  151|   
#  152|-> OPTIONS+=(-D pki_storage_nickname="$PKI_STORAGE_NICKNAME")
#  153|   OPTIONS+=(-D pki_storage_csr_path=/conf/certs/kra_storage.csr)
#  154|   

Error: SHELLCHECK_WARNING: [#def118]
/usr/share/pki/kra/bin/pki-kra-run:153:1: warning[SC3024]: In POSIX sh, += is undefined.
#  151|   
#  152|   OPTIONS+=(-D pki_storage_nickname="$PKI_STORAGE_NICKNAME")
#  153|-> OPTIONS+=(-D pki_storage_csr_path=/conf/certs/kra_storage.csr)
#  154|   
#  155|   OPTIONS+=(-D pki_transport_nickname="$PKI_TRANSPORT_NICKNAME")

Error: SHELLCHECK_WARNING: [#def119]
/usr/share/pki/kra/bin/pki-kra-run:153:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  151|   
#  152|   OPTIONS+=(-D pki_storage_nickname="$PKI_STORAGE_NICKNAME")
#  153|-> OPTIONS+=(-D pki_storage_csr_path=/conf/certs/kra_storage.csr)
#  154|   
#  155|   OPTIONS+=(-D pki_transport_nickname="$PKI_TRANSPORT_NICKNAME")

Error: SHELLCHECK_WARNING: [#def120]
/usr/share/pki/kra/bin/pki-kra-run:155:1: warning[SC3024]: In POSIX sh, += is undefined.
#  153|   OPTIONS+=(-D pki_storage_csr_path=/conf/certs/kra_storage.csr)
#  154|   
#  155|-> OPTIONS+=(-D pki_transport_nickname="$PKI_TRANSPORT_NICKNAME")
#  156|   OPTIONS+=(-D pki_transport_csr_path=/conf/certs/kra_transport.csr)
#  157|   

Error: SHELLCHECK_WARNING: [#def121]
/usr/share/pki/kra/bin/pki-kra-run:155:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  153|   OPTIONS+=(-D pki_storage_csr_path=/conf/certs/kra_storage.csr)
#  154|   
#  155|-> OPTIONS+=(-D pki_transport_nickname="$PKI_TRANSPORT_NICKNAME")
#  156|   OPTIONS+=(-D pki_transport_csr_path=/conf/certs/kra_transport.csr)
#  157|   

Error: SHELLCHECK_WARNING: [#def122]
/usr/share/pki/kra/bin/pki-kra-run:156:1: warning[SC3024]: In POSIX sh, += is undefined.
#  154|   
#  155|   OPTIONS+=(-D pki_transport_nickname="$PKI_TRANSPORT_NICKNAME")
#  156|-> OPTIONS+=(-D pki_transport_csr_path=/conf/certs/kra_transport.csr)
#  157|   
#  158|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def123]
/usr/share/pki/kra/bin/pki-kra-run:156:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  154|   
#  155|   OPTIONS+=(-D pki_transport_nickname="$PKI_TRANSPORT_NICKNAME")
#  156|-> OPTIONS+=(-D pki_transport_csr_path=/conf/certs/kra_transport.csr)
#  157|   
#  158|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def124]
/usr/share/pki/kra/bin/pki-kra-run:158:1: warning[SC3024]: In POSIX sh, += is undefined.
#  156|   OPTIONS+=(-D pki_transport_csr_path=/conf/certs/kra_transport.csr)
#  157|   
#  158|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  159|   if [ -f /conf/certs/kra_audit_signing.csr ]
#  160|   then

Error: SHELLCHECK_WARNING: [#def125]
/usr/share/pki/kra/bin/pki-kra-run:158:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  156|   OPTIONS+=(-D pki_transport_csr_path=/conf/certs/kra_transport.csr)
#  157|   
#  158|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  159|   if [ -f /conf/certs/kra_audit_signing.csr ]
#  160|   then

Error: SHELLCHECK_WARNING: [#def126]
/usr/share/pki/kra/bin/pki-kra-run:161:5: warning[SC3024]: In POSIX sh, += is undefined.
#  159|   if [ -f /conf/certs/kra_audit_signing.csr ]
#  160|   then
#  161|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/kra_audit_signing.csr)
#  162|   fi
#  163|   

Error: SHELLCHECK_WARNING: [#def127]
/usr/share/pki/kra/bin/pki-kra-run:161:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  159|   if [ -f /conf/certs/kra_audit_signing.csr ]
#  160|   then
#  161|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/kra_audit_signing.csr)
#  162|   fi
#  163|   

Error: SHELLCHECK_WARNING: [#def128]
/usr/share/pki/kra/bin/pki-kra-run:164:1: warning[SC3024]: In POSIX sh, += is undefined.
#  162|   fi
#  163|   
#  164|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  165|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  166|   

Error: SHELLCHECK_WARNING: [#def129]
/usr/share/pki/kra/bin/pki-kra-run:164:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  162|   fi
#  163|   
#  164|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  165|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  166|   

Error: SHELLCHECK_WARNING: [#def130]
/usr/share/pki/kra/bin/pki-kra-run:165:1: warning[SC3024]: In POSIX sh, += is undefined.
#  163|   
#  164|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  165|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  166|   
#  167|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def131]
/usr/share/pki/kra/bin/pki-kra-run:165:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  163|   
#  164|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  165|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  166|   
#  167|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def132]
/usr/share/pki/kra/bin/pki-kra-run:167:1: warning[SC3024]: In POSIX sh, += is undefined.
#  165|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  166|   
#  167|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  168|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  169|   

Error: SHELLCHECK_WARNING: [#def133]
/usr/share/pki/kra/bin/pki-kra-run:167:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  165|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  166|   
#  167|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  168|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  169|   

Error: SHELLCHECK_WARNING: [#def134]
/usr/share/pki/kra/bin/pki-kra-run:168:1: warning[SC3024]: In POSIX sh, += is undefined.
#  166|   
#  167|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  168|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  169|   
#  170|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def135]
/usr/share/pki/kra/bin/pki-kra-run:168:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  166|   
#  167|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  168|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  169|   
#  170|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def136]
/usr/share/pki/kra/bin/pki-kra-run:170:1: warning[SC3024]: In POSIX sh, += is undefined.
#  168|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  169|   
#  170|-> OPTIONS+=(-D pki_admin_setup=False)
#  171|   OPTIONS+=(-D pki_security_domain_setup=False)
#  172|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def137]
/usr/share/pki/kra/bin/pki-kra-run:170:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  168|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  169|   
#  170|-> OPTIONS+=(-D pki_admin_setup=False)
#  171|   OPTIONS+=(-D pki_security_domain_setup=False)
#  172|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def138]
/usr/share/pki/kra/bin/pki-kra-run:171:1: warning[SC3024]: In POSIX sh, += is undefined.
#  169|   
#  170|   OPTIONS+=(-D pki_admin_setup=False)
#  171|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  172|   OPTIONS+=(-D pki_security_manager=False)
#  173|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def139]
/usr/share/pki/kra/bin/pki-kra-run:171:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  169|   
#  170|   OPTIONS+=(-D pki_admin_setup=False)
#  171|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  172|   OPTIONS+=(-D pki_security_manager=False)
#  173|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def140]
/usr/share/pki/kra/bin/pki-kra-run:172:1: warning[SC3024]: In POSIX sh, += is undefined.
#  170|   OPTIONS+=(-D pki_admin_setup=False)
#  171|   OPTIONS+=(-D pki_security_domain_setup=False)
#  172|-> OPTIONS+=(-D pki_security_manager=False)
#  173|   OPTIONS+=(-D pki_systemd_service_create=False)
#  174|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def141]
/usr/share/pki/kra/bin/pki-kra-run:172:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  170|   OPTIONS+=(-D pki_admin_setup=False)
#  171|   OPTIONS+=(-D pki_security_domain_setup=False)
#  172|-> OPTIONS+=(-D pki_security_manager=False)
#  173|   OPTIONS+=(-D pki_systemd_service_create=False)
#  174|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def142]
/usr/share/pki/kra/bin/pki-kra-run:173:1: warning[SC3024]: In POSIX sh, += is undefined.
#  171|   OPTIONS+=(-D pki_security_domain_setup=False)
#  172|   OPTIONS+=(-D pki_security_manager=False)
#  173|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  174|   OPTIONS+=(-D pki_registry_enable=False)
#  175|   

Error: SHELLCHECK_WARNING: [#def143]
/usr/share/pki/kra/bin/pki-kra-run:173:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  171|   OPTIONS+=(-D pki_security_domain_setup=False)
#  172|   OPTIONS+=(-D pki_security_manager=False)
#  173|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  174|   OPTIONS+=(-D pki_registry_enable=False)
#  175|   

Error: SHELLCHECK_WARNING: [#def144]
/usr/share/pki/kra/bin/pki-kra-run:174:1: warning[SC3024]: In POSIX sh, += is undefined.
#  172|   OPTIONS+=(-D pki_security_manager=False)
#  173|   OPTIONS+=(-D pki_systemd_service_create=False)
#  174|-> OPTIONS+=(-D pki_registry_enable=False)
#  175|   
#  176|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def145]
/usr/share/pki/kra/bin/pki-kra-run:174:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  172|   OPTIONS+=(-D pki_security_manager=False)
#  173|   OPTIONS+=(-D pki_systemd_service_create=False)
#  174|-> OPTIONS+=(-D pki_registry_enable=False)
#  175|   
#  176|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def146]
/usr/share/pki/kra/bin/pki-kra-run:176:1: warning[SC3024]: In POSIX sh, += is undefined.
#  174|   OPTIONS+=(-D pki_registry_enable=False)
#  175|   
#  176|-> OPTIONS+=(-v)
#  177|   
#  178|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def147]
/usr/share/pki/kra/bin/pki-kra-run:176:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  174|   OPTIONS+=(-D pki_registry_enable=False)
#  175|   
#  176|-> OPTIONS+=(-v)
#  177|   
#  178|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def148]
/usr/share/pki/kra/bin/pki-kra-run:178:11: warning[SC3054]: In POSIX sh, array references are undefined.
#  176|   OPTIONS+=(-v)
#  177|   
#  178|-> pkispawn "${OPTIONS[@]}"
#  179|   
#  180|   echo "################################################################################"

Error: SHELLCHECK_WARNING: [#def149]
/usr/share/pki/kra/bin/pki-kra-run:188:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  186|   echo "INFO: Updating owners and permissions"
#  187|   
#  188|-> if [ "$UID" = "0" ]
#  189|   then
#  190|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING (CWE-569): [#def150]
/usr/share/pki/kra/bin/pki-kra-run:202:16: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
#  200|   echo "INFO: Starting KRA server"
#  201|   
#  202|-> trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  203|   
#  204|   if [ "$UID" = "0" ]; then

Error: SHELLCHECK_WARNING: [#def151]
/usr/share/pki/kra/bin/pki-kra-run:204:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  202|   trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  203|   
#  204|-> if [ "$UID" = "0" ]; then
#  205|       # In Docker the server runs as root user but it will switch
#  206|       # into pkiuser (UID=17) that belongs to the root group (GID=0).

Error: SHELLCHECK_WARNING: [#def152]
/usr/share/pki/ocsp/bin/pki-ocsp-run:24:7: warning[SC3028]: In POSIX sh, UID is undefined.
#   22|   fi
#   23|   
#   24|-> if [ "$UID" = "0" ]
#   25|   then
#   26|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING: [#def153]
/usr/share/pki/ocsp/bin/pki-ocsp-run:113:9: warning[SC3030]: In POSIX sh, arrays are undefined.
#  111|   echo "INFO: Creating OCSP server"
#  112|   
#  113|-> OPTIONS=()
#  114|   
#  115|   OPTIONS+=(--conf /conf)

Error: SHELLCHECK_WARNING: [#def154]
/usr/share/pki/ocsp/bin/pki-ocsp-run:115:1: warning[SC3024]: In POSIX sh, += is undefined.
#  113|   OPTIONS=()
#  114|   
#  115|-> OPTIONS+=(--conf /conf)
#  116|   OPTIONS+=(--logs /logs)
#  117|   

Error: SHELLCHECK_WARNING: [#def155]
/usr/share/pki/ocsp/bin/pki-ocsp-run:115:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  113|   OPTIONS=()
#  114|   
#  115|-> OPTIONS+=(--conf /conf)
#  116|   OPTIONS+=(--logs /logs)
#  117|   

Error: SHELLCHECK_WARNING: [#def156]
/usr/share/pki/ocsp/bin/pki-ocsp-run:116:1: warning[SC3024]: In POSIX sh, += is undefined.
#  114|   
#  115|   OPTIONS+=(--conf /conf)
#  116|-> OPTIONS+=(--logs /logs)
#  117|   
#  118|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ocsp.cfg)

Error: SHELLCHECK_WARNING: [#def157]
/usr/share/pki/ocsp/bin/pki-ocsp-run:116:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  114|   
#  115|   OPTIONS+=(--conf /conf)
#  116|-> OPTIONS+=(--logs /logs)
#  117|   
#  118|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ocsp.cfg)

Error: SHELLCHECK_WARNING: [#def158]
/usr/share/pki/ocsp/bin/pki-ocsp-run:118:1: warning[SC3024]: In POSIX sh, += is undefined.
#  116|   OPTIONS+=(--logs /logs)
#  117|   
#  118|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/ocsp.cfg)
#  119|   OPTIONS+=(-s OCSP)
#  120|   

Error: SHELLCHECK_WARNING: [#def159]
/usr/share/pki/ocsp/bin/pki-ocsp-run:118:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  116|   OPTIONS+=(--logs /logs)
#  117|   
#  118|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/ocsp.cfg)
#  119|   OPTIONS+=(-s OCSP)
#  120|   

Error: SHELLCHECK_WARNING: [#def160]
/usr/share/pki/ocsp/bin/pki-ocsp-run:119:1: warning[SC3024]: In POSIX sh, += is undefined.
#  117|   
#  118|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ocsp.cfg)
#  119|-> OPTIONS+=(-s OCSP)
#  120|   
#  121|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def161]
/usr/share/pki/ocsp/bin/pki-ocsp-run:119:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  117|   
#  118|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/ocsp.cfg)
#  119|-> OPTIONS+=(-s OCSP)
#  120|   
#  121|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def162]
/usr/share/pki/ocsp/bin/pki-ocsp-run:121:1: warning[SC3024]: In POSIX sh, += is undefined.
#  119|   OPTIONS+=(-s OCSP)
#  120|   
#  121|-> OPTIONS+=(-D pki_group=root)
#  122|   
#  123|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def163]
/usr/share/pki/ocsp/bin/pki-ocsp-run:121:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  119|   OPTIONS+=(-s OCSP)
#  120|   
#  121|-> OPTIONS+=(-D pki_group=root)
#  122|   
#  123|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def164]
/usr/share/pki/ocsp/bin/pki-ocsp-run:123:1: warning[SC3024]: In POSIX sh, += is undefined.
#  121|   OPTIONS+=(-D pki_group=root)
#  122|   
#  123|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  124|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  125|   

Error: SHELLCHECK_WARNING: [#def165]
/usr/share/pki/ocsp/bin/pki-ocsp-run:123:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  121|   OPTIONS+=(-D pki_group=root)
#  122|   
#  123|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  124|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  125|   

Error: SHELLCHECK_WARNING: [#def166]
/usr/share/pki/ocsp/bin/pki-ocsp-run:124:1: warning[SC3024]: In POSIX sh, += is undefined.
#  122|   
#  123|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  124|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  125|   
#  126|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def167]
/usr/share/pki/ocsp/bin/pki-ocsp-run:124:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  122|   
#  123|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  124|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  125|   
#  126|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def168]
/usr/share/pki/ocsp/bin/pki-ocsp-run:126:1: warning[SC3024]: In POSIX sh, += is undefined.
#  124|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  125|   
#  126|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def169]
/usr/share/pki/ocsp/bin/pki-ocsp-run:126:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  124|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  125|   
#  126|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING (CWE-140): [#def170]
/usr/share/pki/ocsp/bin/pki-ocsp-run:126:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  124|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  125|   
#  126|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def171]
/usr/share/pki/ocsp/bin/pki-ocsp-run:127:1: warning[SC3024]: In POSIX sh, += is undefined.
#  125|   
#  126|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)
#  129|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def172]
/usr/share/pki/ocsp/bin/pki-ocsp-run:127:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  125|   
#  126|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)
#  129|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING (CWE-140): [#def173]
/usr/share/pki/ocsp/bin/pki-ocsp-run:127:30: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  125|   
#  126|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)
#  129|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def174]
/usr/share/pki/ocsp/bin/pki-ocsp-run:128:1: warning[SC3024]: In POSIX sh, += is undefined.
#  126|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|-> OPTIONS+=(-D pki_ds_database=userroot)
#  129|   OPTIONS+=(-D pki_ds_setup=False)
#  130|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def175]
/usr/share/pki/ocsp/bin/pki-ocsp-run:128:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  126|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  127|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|-> OPTIONS+=(-D pki_ds_database=userroot)
#  129|   OPTIONS+=(-D pki_ds_setup=False)
#  130|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def176]
/usr/share/pki/ocsp/bin/pki-ocsp-run:129:1: warning[SC3024]: In POSIX sh, += is undefined.
#  127|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)
#  129|-> OPTIONS+=(-D pki_ds_setup=False)
#  130|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  131|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def177]
/usr/share/pki/ocsp/bin/pki-ocsp-run:129:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  127|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  128|   OPTIONS+=(-D pki_ds_database=userroot)
#  129|-> OPTIONS+=(-D pki_ds_setup=False)
#  130|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  131|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def178]
/usr/share/pki/ocsp/bin/pki-ocsp-run:130:1: warning[SC3024]: In POSIX sh, += is undefined.
#  128|   OPTIONS+=(-D pki_ds_database=userroot)
#  129|   OPTIONS+=(-D pki_ds_setup=False)
#  130|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  131|   OPTIONS+=(-D pki_share_db=True)
#  132|   

Error: SHELLCHECK_WARNING: [#def179]
/usr/share/pki/ocsp/bin/pki-ocsp-run:130:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  128|   OPTIONS+=(-D pki_ds_database=userroot)
#  129|   OPTIONS+=(-D pki_ds_setup=False)
#  130|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  131|   OPTIONS+=(-D pki_share_db=True)
#  132|   

Error: SHELLCHECK_WARNING: [#def180]
/usr/share/pki/ocsp/bin/pki-ocsp-run:131:1: warning[SC3024]: In POSIX sh, += is undefined.
#  129|   OPTIONS+=(-D pki_ds_setup=False)
#  130|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  131|-> OPTIONS+=(-D pki_share_db=True)
#  132|   
#  133|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def181]
/usr/share/pki/ocsp/bin/pki-ocsp-run:131:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  129|   OPTIONS+=(-D pki_ds_setup=False)
#  130|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  131|-> OPTIONS+=(-D pki_share_db=True)
#  132|   
#  133|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def182]
/usr/share/pki/ocsp/bin/pki-ocsp-run:133:1: warning[SC3024]: In POSIX sh, += is undefined.
#  131|   OPTIONS+=(-D pki_share_db=True)
#  132|   
#  133|-> OPTIONS+=(-D pki_issuing_ca=)
#  134|   OPTIONS+=(-D pki_import_system_certs=False)
#  135|   

Error: SHELLCHECK_WARNING: [#def183]
/usr/share/pki/ocsp/bin/pki-ocsp-run:133:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  131|   OPTIONS+=(-D pki_share_db=True)
#  132|   
#  133|-> OPTIONS+=(-D pki_issuing_ca=)
#  134|   OPTIONS+=(-D pki_import_system_certs=False)
#  135|   

Error: SHELLCHECK_WARNING: [#def184]
/usr/share/pki/ocsp/bin/pki-ocsp-run:134:1: warning[SC3024]: In POSIX sh, += is undefined.
#  132|   
#  133|   OPTIONS+=(-D pki_issuing_ca=)
#  134|-> OPTIONS+=(-D pki_import_system_certs=False)
#  135|   
#  136|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def185]
/usr/share/pki/ocsp/bin/pki-ocsp-run:134:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  132|   
#  133|   OPTIONS+=(-D pki_issuing_ca=)
#  134|-> OPTIONS+=(-D pki_import_system_certs=False)
#  135|   
#  136|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def186]
/usr/share/pki/ocsp/bin/pki-ocsp-run:136:1: warning[SC3024]: In POSIX sh, += is undefined.
#  134|   OPTIONS+=(-D pki_import_system_certs=False)
#  135|   
#  136|-> OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  137|   OPTIONS+=(-D pki_ocsp_signing__path=/conf/certs/ocsp_signing.csr)
#  138|   

Error: SHELLCHECK_WARNING: [#def187]
/usr/share/pki/ocsp/bin/pki-ocsp-run:136:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  134|   OPTIONS+=(-D pki_import_system_certs=False)
#  135|   
#  136|-> OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  137|   OPTIONS+=(-D pki_ocsp_signing__path=/conf/certs/ocsp_signing.csr)
#  138|   

Error: SHELLCHECK_WARNING: [#def188]
/usr/share/pki/ocsp/bin/pki-ocsp-run:137:1: warning[SC3024]: In POSIX sh, += is undefined.
#  135|   
#  136|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  137|-> OPTIONS+=(-D pki_ocsp_signing__path=/conf/certs/ocsp_signing.csr)
#  138|   
#  139|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def189]
/usr/share/pki/ocsp/bin/pki-ocsp-run:137:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  135|   
#  136|   OPTIONS+=(-D pki_ocsp_signing_nickname="$PKI_OCSP_SIGNING_NICKNAME")
#  137|-> OPTIONS+=(-D pki_ocsp_signing__path=/conf/certs/ocsp_signing.csr)
#  138|   
#  139|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def190]
/usr/share/pki/ocsp/bin/pki-ocsp-run:139:1: warning[SC3024]: In POSIX sh, += is undefined.
#  137|   OPTIONS+=(-D pki_ocsp_signing__path=/conf/certs/ocsp_signing.csr)
#  138|   
#  139|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  140|   if [ -f /conf/certs/ocsp_audit_signing.csr ]
#  141|   then

Error: SHELLCHECK_WARNING: [#def191]
/usr/share/pki/ocsp/bin/pki-ocsp-run:139:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  137|   OPTIONS+=(-D pki_ocsp_signing__path=/conf/certs/ocsp_signing.csr)
#  138|   
#  139|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  140|   if [ -f /conf/certs/ocsp_audit_signing.csr ]
#  141|   then

Error: SHELLCHECK_WARNING: [#def192]
/usr/share/pki/ocsp/bin/pki-ocsp-run:142:5: warning[SC3024]: In POSIX sh, += is undefined.
#  140|   if [ -f /conf/certs/ocsp_audit_signing.csr ]
#  141|   then
#  142|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/ocsp_audit_signing.csr)
#  143|   fi
#  144|   

Error: SHELLCHECK_WARNING: [#def193]
/usr/share/pki/ocsp/bin/pki-ocsp-run:142:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  140|   if [ -f /conf/certs/ocsp_audit_signing.csr ]
#  141|   then
#  142|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/ocsp_audit_signing.csr)
#  143|   fi
#  144|   

Error: SHELLCHECK_WARNING: [#def194]
/usr/share/pki/ocsp/bin/pki-ocsp-run:145:1: warning[SC3024]: In POSIX sh, += is undefined.
#  143|   fi
#  144|   
#  145|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  146|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  147|   

Error: SHELLCHECK_WARNING: [#def195]
/usr/share/pki/ocsp/bin/pki-ocsp-run:145:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  143|   fi
#  144|   
#  145|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  146|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  147|   

Error: SHELLCHECK_WARNING: [#def196]
/usr/share/pki/ocsp/bin/pki-ocsp-run:146:1: warning[SC3024]: In POSIX sh, += is undefined.
#  144|   
#  145|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  146|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  147|   
#  148|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def197]
/usr/share/pki/ocsp/bin/pki-ocsp-run:146:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  144|   
#  145|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  146|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  147|   
#  148|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def198]
/usr/share/pki/ocsp/bin/pki-ocsp-run:148:1: warning[SC3024]: In POSIX sh, += is undefined.
#  146|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  147|   
#  148|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  149|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  150|   

Error: SHELLCHECK_WARNING: [#def199]
/usr/share/pki/ocsp/bin/pki-ocsp-run:148:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  146|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  147|   
#  148|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  149|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  150|   

Error: SHELLCHECK_WARNING: [#def200]
/usr/share/pki/ocsp/bin/pki-ocsp-run:149:1: warning[SC3024]: In POSIX sh, += is undefined.
#  147|   
#  148|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  149|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  150|   
#  151|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def201]
/usr/share/pki/ocsp/bin/pki-ocsp-run:149:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  147|   
#  148|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  149|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  150|   
#  151|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def202]
/usr/share/pki/ocsp/bin/pki-ocsp-run:151:1: warning[SC3024]: In POSIX sh, += is undefined.
#  149|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  150|   
#  151|-> OPTIONS+=(-D pki_admin_setup=False)
#  152|   OPTIONS+=(-D pki_security_domain_setup=False)
#  153|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def203]
/usr/share/pki/ocsp/bin/pki-ocsp-run:151:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  149|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  150|   
#  151|-> OPTIONS+=(-D pki_admin_setup=False)
#  152|   OPTIONS+=(-D pki_security_domain_setup=False)
#  153|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def204]
/usr/share/pki/ocsp/bin/pki-ocsp-run:152:1: warning[SC3024]: In POSIX sh, += is undefined.
#  150|   
#  151|   OPTIONS+=(-D pki_admin_setup=False)
#  152|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  153|   OPTIONS+=(-D pki_security_manager=False)
#  154|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def205]
/usr/share/pki/ocsp/bin/pki-ocsp-run:152:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  150|   
#  151|   OPTIONS+=(-D pki_admin_setup=False)
#  152|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  153|   OPTIONS+=(-D pki_security_manager=False)
#  154|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def206]
/usr/share/pki/ocsp/bin/pki-ocsp-run:153:1: warning[SC3024]: In POSIX sh, += is undefined.
#  151|   OPTIONS+=(-D pki_admin_setup=False)
#  152|   OPTIONS+=(-D pki_security_domain_setup=False)
#  153|-> OPTIONS+=(-D pki_security_manager=False)
#  154|   OPTIONS+=(-D pki_systemd_service_create=False)
#  155|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def207]
/usr/share/pki/ocsp/bin/pki-ocsp-run:153:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  151|   OPTIONS+=(-D pki_admin_setup=False)
#  152|   OPTIONS+=(-D pki_security_domain_setup=False)
#  153|-> OPTIONS+=(-D pki_security_manager=False)
#  154|   OPTIONS+=(-D pki_systemd_service_create=False)
#  155|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def208]
/usr/share/pki/ocsp/bin/pki-ocsp-run:154:1: warning[SC3024]: In POSIX sh, += is undefined.
#  152|   OPTIONS+=(-D pki_security_domain_setup=False)
#  153|   OPTIONS+=(-D pki_security_manager=False)
#  154|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  155|   OPTIONS+=(-D pki_registry_enable=False)
#  156|   

Error: SHELLCHECK_WARNING: [#def209]
/usr/share/pki/ocsp/bin/pki-ocsp-run:154:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  152|   OPTIONS+=(-D pki_security_domain_setup=False)
#  153|   OPTIONS+=(-D pki_security_manager=False)
#  154|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  155|   OPTIONS+=(-D pki_registry_enable=False)
#  156|   

Error: SHELLCHECK_WARNING: [#def210]
/usr/share/pki/ocsp/bin/pki-ocsp-run:155:1: warning[SC3024]: In POSIX sh, += is undefined.
#  153|   OPTIONS+=(-D pki_security_manager=False)
#  154|   OPTIONS+=(-D pki_systemd_service_create=False)
#  155|-> OPTIONS+=(-D pki_registry_enable=False)
#  156|   
#  157|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def211]
/usr/share/pki/ocsp/bin/pki-ocsp-run:155:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  153|   OPTIONS+=(-D pki_security_manager=False)
#  154|   OPTIONS+=(-D pki_systemd_service_create=False)
#  155|-> OPTIONS+=(-D pki_registry_enable=False)
#  156|   
#  157|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def212]
/usr/share/pki/ocsp/bin/pki-ocsp-run:157:1: warning[SC3024]: In POSIX sh, += is undefined.
#  155|   OPTIONS+=(-D pki_registry_enable=False)
#  156|   
#  157|-> OPTIONS+=(-v)
#  158|   
#  159|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def213]
/usr/share/pki/ocsp/bin/pki-ocsp-run:157:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  155|   OPTIONS+=(-D pki_registry_enable=False)
#  156|   
#  157|-> OPTIONS+=(-v)
#  158|   
#  159|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def214]
/usr/share/pki/ocsp/bin/pki-ocsp-run:159:11: warning[SC3054]: In POSIX sh, array references are undefined.
#  157|   OPTIONS+=(-v)
#  158|   
#  159|-> pkispawn "${OPTIONS[@]}"
#  160|   
#  161|   echo "################################################################################"

Error: SHELLCHECK_WARNING: [#def215]
/usr/share/pki/ocsp/bin/pki-ocsp-run:169:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  167|   echo "INFO: Updating owners and permissions"
#  168|   
#  169|-> if [ "$UID" = "0" ]
#  170|   then
#  171|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING (CWE-569): [#def216]
/usr/share/pki/ocsp/bin/pki-ocsp-run:183:16: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
#  181|   echo "INFO: Starting OCSP server"
#  182|   
#  183|-> trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  184|   
#  185|   if [ "$UID" = "0" ]; then

Error: SHELLCHECK_WARNING: [#def217]
/usr/share/pki/ocsp/bin/pki-ocsp-run:185:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  183|   trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  184|   
#  185|-> if [ "$UID" = "0" ]; then
#  186|       # In Docker the server runs as root user but it will switch
#  187|       # into pkiuser (UID=17) that belongs to the root group (GID=0).

Error: SHELLCHECK_WARNING (CWE-563): [#def218]
/usr/share/pki/scripts/operations:43:5: warning[SC2034]: debian appears unused. Verify use (or export if used externally).
#   41|       SYSCONFIG_PKI=/etc/dogtag
#   42|   else
#   43|->     debian=false
#   44|       SYSCONFIG_PKI=/etc/sysconfig/pki
#   45|   fi

Error: SHELLCHECK_WARNING (CWE-457): [#def219]
/usr/share/pki/scripts/operations:47:6: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   45|   fi
#   46|   
#   47|-> case $command in
#   48|       start)
#   49|           # 1 generic or unspecified error (current practice)

Error: SHELLCHECK_WARNING (CWE-563): [#def220]
/usr/share/pki/scripts/operations:62:1: warning[SC2034]: OS appears unused. Verify use (or export if used externally).
#   60|   shopt -s nullglob
#   61|   
#   62|-> OS=`uname -s`
#   63|   ARCHITECTURE=`arch`
#   64|   

Error: SHELLCHECK_WARNING (CWE-563): [#def221]
/usr/share/pki/scripts/operations:63:1: warning[SC2034]: ARCHITECTURE appears unused. Verify use (or export if used externally).
#   61|   
#   62|   OS=`uname -s`
#   63|-> ARCHITECTURE=`arch`
#   64|   
#   65|   # Check to insure that this script's original invocation directory

Error: SHELLCHECK_WARNING: [#def222]
/usr/share/pki/scripts/operations:69:5: warning[SC2327]: This command substitution will be empty because the command's output gets redirected away.
#   67|   
#   68|   # shellcheck disable=SC2034
#   69|-> CWD=`/bin/pwd > /dev/null 2>&1`
#   70|   if [ $? -ne 0 ] ; then
#   71|       echo "Cannot invoke '$PROG_NAME' from non-existent directory!"

Error: SHELLCHECK_WARNING: [#def223]
/usr/share/pki/scripts/operations:69:15: error[SC2328]: This redirection takes output away from the command substitution.
#   67|   
#   68|   # shellcheck disable=SC2034
#   69|-> CWD=`/bin/pwd > /dev/null 2>&1`
#   70|   if [ $? -ne 0 ] ; then
#   71|       echo "Cannot invoke '$PROG_NAME' from non-existent directory!"

Error: SHELLCHECK_WARNING (CWE-457): [#def224]
/usr/share/pki/scripts/operations:76:37: warning[SC2154]: pki_instance_id is referenced but not assigned.
#   74|   
#   75|   
#   76|-> PKI_REGISTRY_ENTRY="${PKI_REGISTRY}/${pki_instance_id}/${pki_instance_id}"
#   77|   PKI_SUBSYSTEMS=""
#   78|   

Error: SHELLCHECK_WARNING (CWE-563): [#def225]
/usr/share/pki/scripts/operations:77:1: warning[SC2034]: PKI_SUBSYSTEMS appears unused. Verify use (or export if used externally).
#   75|   
#   76|   PKI_REGISTRY_ENTRY="${PKI_REGISTRY}/${pki_instance_id}/${pki_instance_id}"
#   77|-> PKI_SUBSYSTEMS=""
#   78|   
#   79|   usage()

Error: SHELLCHECK_WARNING (CWE-563): [#def226]
/usr/share/pki/scripts/operations:383:9: warning[SC2034]: error_rv appears unused. Verify use (or export if used externally).
#  381|       elif [ $rv != 0 ] ; then
#  382|           errors=`expr $errors + 1`
#  383|->         error_rv=$rv
#  384|       fi
#  385|   

Error: SHELLCHECK_WARNING: [#def227]
/usr/share/pki/server/bin/pki-server-run:34:7: warning[SC3028]: In POSIX sh, UID is undefined.
#   32|   mkdir -p /conf/certs
#   33|   
#   34|-> if [ "$UID" = "0" ]
#   35|   then
#   36|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING: [#def228]
/usr/share/pki/server/bin/pki-server-run:187:23: warning[SC3028]: In POSIX sh, HOSTNAME is undefined.
#  185|           -f /conf/password.conf \
#  186|           nss-cert-request \
#  187|->         --subject "CN=$HOSTNAME" \
#  188|           --ext /usr/share/pki/server/certs/sslserver.conf \
#  189|           --csr /conf/certs/sslserver.csr

Error: SHELLCHECK_WARNING: [#def229]
/usr/share/pki/server/bin/pki-server-run:220:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  218|   echo "INFO: Updating owners and permissions"
#  219|   
#  220|-> if [ "$UID" = "0" ]
#  221|   then
#  222|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING (CWE-569): [#def230]
/usr/share/pki/server/bin/pki-server-run:240:16: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
#  238|   echo "INFO: Starting PKI server"
#  239|   
#  240|-> trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  241|   
#  242|   if [ "$UID" = "0" ]; then

Error: SHELLCHECK_WARNING: [#def231]
/usr/share/pki/server/bin/pki-server-run:242:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  240|   trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  241|   
#  242|-> if [ "$UID" = "0" ]; then
#  243|       # In Docker the server runs as root user but it will switch
#  244|       # into pkiuser (UID=17) that belongs to the root group (GID=0).

Error: SHELLCHECK_WARNING: [#def232]
/usr/share/pki/tests/bin/ds-artifacts-save.sh:7:5: warning[SC2213]: getopts specified -v, but it's not handled by this 'case'.
#    5|   
#    6|   while getopts v-: arg ; do
#    7|->     case $arg in
#    8|       -)
#    9|           LONG_OPTARG="${OPTARG#*=}"

Error: SHELLCHECK_WARNING (CWE-563): [#def233]
/usr/share/pki/tests/bin/ds-certs-import.sh:7:1: warning[SC2034]: SCRIPT_DIR appears unused. Verify use (or export if used externally).
#    5|   SCRIPT_PATH=$(readlink -f "$0")
#    6|   SCRIPT_NAME=$(basename "$SCRIPT_PATH")
#    7|-> SCRIPT_DIR=$(dirname "$SCRIPT_PATH")
#    8|   
#    9|   VERBOSE=

Error: SHELLCHECK_WARNING (CWE-563): [#def234]
/usr/share/pki/tests/bin/ds-certs-import.sh:46:13: warning[SC2034]: VERBOSE appears unused. Verify use (or export if used externally).
#   44|               ;;
#   45|           debug)
#   46|->             VERBOSE=true
#   47|               DEBUG=true
#   48|               ;;

Error: SHELLCHECK_WARNING (CWE-563): [#def235]
/usr/share/pki/tests/bin/ds-certs-import.sh:47:13: warning[SC2034]: DEBUG appears unused. Verify use (or export if used externally).
#   45|           debug)
#   46|               VERBOSE=true
#   47|->             DEBUG=true
#   48|               ;;
#   49|           help)

Error: SHELLCHECK_WARNING (CWE-563): [#def236]
/usr/share/pki/tests/bin/ds-create.sh:65:13: warning[SC2034]: VERBOSE appears unused. Verify use (or export if used externally).
#   63|               ;;
#   64|           debug)
#   65|->             VERBOSE=true
#   66|               DEBUG=true
#   67|               ;;

Error: SHELLCHECK_WARNING (CWE-569): [#def237]
/usr/share/pki/tests/bin/ds-create.sh:75:30: warning[SC2221]: This pattern always overrides a later one on line 75.
#   73|               break # "--" terminates argument processing
#   74|               ;;
#   75|->         image* | hostname* | network* | network-alias* | password* | \
#   76|           suffix* | base-dn*)
#   77|               echo "ERROR: Missing argument for --$OPTARG option" >&2

Error: SHELLCHECK_WARNING (CWE-569): [#def238]
/usr/share/pki/tests/bin/ds-create.sh:75:41: warning[SC2222]: This pattern never matches because of a previous pattern on line 75.
#   73|               break # "--" terminates argument processing
#   74|               ;;
#   75|->         image* | hostname* | network* | network-alias* | password* | \
#   76|           suffix* | base-dn*)
#   77|               echo "ERROR: Missing argument for --$OPTARG option" >&2

Error: SHELLCHECK_WARNING (CWE-140): [#def239]
/usr/share/pki/tests/bin/ds-create.sh:97:26: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   95|   
#   96|       OPTIONS=()
#   97|->     OPTIONS+=(--hostname=$HOSTNAME)
#   98|   
#   99|       if [ "$NETWORK" != "" ]

Error: SHELLCHECK_WARNING (CWE-140): [#def240]
/usr/share/pki/tests/bin/ds-create.sh:101:29: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   99|       if [ "$NETWORK" != "" ]
#  100|       then
#  101|->         OPTIONS+=(--network=$NETWORK)
#  102|       fi
#  103|   

Error: SHELLCHECK_WARNING (CWE-140): [#def241]
/usr/share/pki/tests/bin/ds-create.sh:106:35: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  104|       if [ "$ALIAS" != "" ]
#  105|       then
#  106|->         OPTIONS+=(--network-alias=$ALIAS)
#  107|       fi
#  108|   

Error: SHELLCHECK_WARNING (CWE-140): [#def242]
/usr/share/pki/tests/bin/ds-create.sh:136:22: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  134|   
#  135|       OPTIONS=()
#  136|->     OPTIONS+=(--name $NAME)
#  137|       OPTIONS+=(--hostname $HOSTNAME)
#  138|       OPTIONS+=(-v $NAME-data:/data)

Error: SHELLCHECK_WARNING (CWE-140): [#def243]
/usr/share/pki/tests/bin/ds-create.sh:137:26: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  135|       OPTIONS=()
#  136|       OPTIONS+=(--name $NAME)
#  137|->     OPTIONS+=(--hostname $HOSTNAME)
#  138|       OPTIONS+=(-v $NAME-data:/data)
#  139|       OPTIONS+=(-v $GITHUB_WORKSPACE:$SHARED)

Error: SHELLCHECK_WARNING (CWE-140): [#def244]
/usr/share/pki/tests/bin/ds-create.sh:138:18: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  136|       OPTIONS+=(--name $NAME)
#  137|       OPTIONS+=(--hostname $HOSTNAME)
#  138|->     OPTIONS+=(-v $NAME-data:/data)
#  139|       OPTIONS+=(-v $GITHUB_WORKSPACE:$SHARED)
#  140|       OPTIONS+=(-e DS_DM_PASSWORD=$PASSWORD)

Error: SHELLCHECK_WARNING (CWE-140): [#def245]
/usr/share/pki/tests/bin/ds-create.sh:139:18: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  137|       OPTIONS+=(--hostname $HOSTNAME)
#  138|       OPTIONS+=(-v $NAME-data:/data)
#  139|->     OPTIONS+=(-v $GITHUB_WORKSPACE:$SHARED)
#  140|       OPTIONS+=(-e DS_DM_PASSWORD=$PASSWORD)
#  141|       OPTIONS+=(-p 3389)

Error: SHELLCHECK_WARNING (CWE-140): [#def246]
/usr/share/pki/tests/bin/ds-create.sh:139:36: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  137|       OPTIONS+=(--hostname $HOSTNAME)
#  138|       OPTIONS+=(-v $NAME-data:/data)
#  139|->     OPTIONS+=(-v $GITHUB_WORKSPACE:$SHARED)
#  140|       OPTIONS+=(-e DS_DM_PASSWORD=$PASSWORD)
#  141|       OPTIONS+=(-p 3389)

Error: SHELLCHECK_WARNING (CWE-140): [#def247]
/usr/share/pki/tests/bin/ds-create.sh:140:33: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  138|       OPTIONS+=(-v $NAME-data:/data)
#  139|       OPTIONS+=(-v $GITHUB_WORKSPACE:$SHARED)
#  140|->     OPTIONS+=(-e DS_DM_PASSWORD=$PASSWORD)
#  141|       OPTIONS+=(-p 3389)
#  142|       OPTIONS+=(-p 3636)

Error: SHELLCHECK_WARNING (CWE-140): [#def248]
/usr/share/pki/tests/bin/ds-create.sh:146:29: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  144|       if [ "$NETWORK" != "" ]
#  145|       then
#  146|->         OPTIONS+=(--network $NETWORK)
#  147|       fi
#  148|   

Error: SHELLCHECK_WARNING (CWE-140): [#def249]
/usr/share/pki/tests/bin/ds-create.sh:151:35: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  149|       if [ "$ALIAS" != "" ]
#  150|       then
#  151|->         OPTIONS+=(--network-alias $ALIAS)
#  152|       fi
#  153|   

Error: SHELLCHECK_WARNING (CWE-140): [#def250]
/usr/share/pki/tests/bin/ds-create.sh:157:23: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  155|   
#  156|       OPTIONS=()
#  157|->     OPTIONS+=(--image=$IMAGE)
#  158|       OPTIONS+=(--password=$PASSWORD)
#  159|   

Error: SHELLCHECK_WARNING (CWE-140): [#def251]
/usr/share/pki/tests/bin/ds-create.sh:158:26: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  156|       OPTIONS=()
#  157|       OPTIONS+=(--image=$IMAGE)
#  158|->     OPTIONS+=(--password=$PASSWORD)
#  159|   
#  160|       $SCRIPT_DIR/ds-start.sh "${OPTIONS[@]}" $NAME

Error: SHELLCHECK_WARNING (CWE-563): [#def252]
/usr/share/pki/tests/bin/ds-remove.sh:7:1: warning[SC2034]: SCRIPT_DIR appears unused. Verify use (or export if used externally).
#    5|   SCRIPT_PATH=$(readlink -f "$0")
#    6|   SCRIPT_NAME=$(basename "$SCRIPT_PATH")
#    7|-> SCRIPT_DIR=$(dirname "$SCRIPT_PATH")
#    8|   
#    9|   VERBOSE=

Error: SHELLCHECK_WARNING (CWE-563): [#def253]
/usr/share/pki/tests/bin/ds-remove.sh:38:13: warning[SC2034]: VERBOSE appears unused. Verify use (or export if used externally).
#   36|               ;;
#   37|           debug)
#   38|->             VERBOSE=true
#   39|               DEBUG=true
#   40|               ;;

Error: SHELLCHECK_WARNING (CWE-563): [#def254]
/usr/share/pki/tests/bin/ds-remove.sh:39:13: warning[SC2034]: DEBUG appears unused. Verify use (or export if used externally).
#   37|           debug)
#   38|               VERBOSE=true
#   39|->             DEBUG=true
#   40|               ;;
#   41|           help)

Error: SHELLCHECK_WARNING (CWE-563): [#def255]
/usr/share/pki/tests/bin/ds-start.sh:7:1: warning[SC2034]: SCRIPT_DIR appears unused. Verify use (or export if used externally).
#    5|   SCRIPT_PATH=$(readlink -f "$0")
#    6|   SCRIPT_NAME=$(basename "$SCRIPT_PATH")
#    7|-> SCRIPT_DIR=$(dirname "$SCRIPT_PATH")
#    8|   
#    9|   VERBOSE=

Error: SHELLCHECK_WARNING (CWE-563): [#def256]
/usr/share/pki/tests/bin/ds-start.sh:42:13: warning[SC2034]: VERBOSE appears unused. Verify use (or export if used externally).
#   40|               ;;
#   41|           debug)
#   42|->             VERBOSE=true
#   43|               DEBUG=true
#   44|               ;;

Error: SHELLCHECK_WARNING (CWE-563): [#def257]
/usr/share/pki/tests/bin/ds-stop.sh:7:1: warning[SC2034]: SCRIPT_DIR appears unused. Verify use (or export if used externally).
#    5|   SCRIPT_PATH=$(readlink -f "$0")
#    6|   SCRIPT_NAME=$(basename "$SCRIPT_PATH")
#    7|-> SCRIPT_DIR=$(dirname "$SCRIPT_PATH")
#    8|   
#    9|   VERBOSE=

Error: SHELLCHECK_WARNING (CWE-563): [#def258]
/usr/share/pki/tests/bin/ds-stop.sh:38:13: warning[SC2034]: VERBOSE appears unused. Verify use (or export if used externally).
#   36|               ;;
#   37|           debug)
#   38|->             VERBOSE=true
#   39|               DEBUG=true
#   40|               ;;

Error: SHELLCHECK_WARNING (CWE-563): [#def259]
/usr/share/pki/tests/bin/ds-stop.sh:39:13: warning[SC2034]: DEBUG appears unused. Verify use (or export if used externally).
#   37|           debug)
#   38|               VERBOSE=true
#   39|->             DEBUG=true
#   40|               ;;
#   41|           help)

Error: SHELLCHECK_WARNING: [#def260]
/usr/share/pki/tests/bin/pki-artifacts-save.sh:7:5: warning[SC2213]: getopts specified -v, but it's not handled by this 'case'.
#    5|   
#    6|   while getopts v-: arg ; do
#    7|->     case $arg in
#    8|       -)
#    9|           LONG_OPTARG="${OPTARG#*=}"

Error: SHELLCHECK_WARNING (CWE-563): [#def261]
/usr/share/pki/tests/bin/runner-init.sh:13:1: warning[SC2034]: SCRIPT_DIR appears unused. Verify use (or export if used externally).
#   11|   SCRIPT_PATH=$(readlink -f "$0")
#   12|   SCRIPT_NAME=$(basename "$SCRIPT_PATH")
#   13|-> SCRIPT_DIR=$(dirname "$SCRIPT_PATH")
#   14|   
#   15|   VERBOSE=

Error: SHELLCHECK_WARNING (CWE-563): [#def262]
/usr/share/pki/tests/bin/runner-init.sh:56:13: warning[SC2034]: VERBOSE appears unused. Verify use (or export if used externally).
#   54|               ;;
#   55|           debug)
#   56|->             VERBOSE=true
#   57|               DEBUG=true
#   58|               ;;

Error: SHELLCHECK_WARNING (CWE-138): [#def263]
/usr/share/pki/tests/bin/runner-init.sh:103:20: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#  101|       echo "HOSTNAME: $HOSTNAME"
#  102|       echo "NETWORK: $NETWORK"
#  103|->     echo "ALIASES: ${$ALIASES[@]}"
#  104|   fi
#  105|   

Error: SHELLCHECK_WARNING (CWE-398): [#def264]
/usr/share/pki/tests/bin/runner-init.sh:103:22: error[SC1087]: Use braces when expanding arrays, e.g. ${array[idx]} (or ${var}[.. to quiet).
#  101|       echo "HOSTNAME: $HOSTNAME"
#  102|       echo "NETWORK: $NETWORK"
#  103|->     echo "ALIASES: ${$ALIASES[@]}"
#  104|   fi
#  105|   

Error: SHELLCHECK_WARNING: [#def265]
/usr/share/pki/tests/bin/runner-init.sh:103:22: error[SC2298]: ${$x} is invalid. For expansion, use ${x}. For indirection, use arrays, ${!x} or (for sh) eval.
#  101|       echo "HOSTNAME: $HOSTNAME"
#  102|       echo "NETWORK: $NETWORK"
#  103|->     echo "ALIASES: ${$ALIASES[@]}"
#  104|   fi
#  105|   

Error: SHELLCHECK_WARNING (CWE-670): [#def266]
/usr/share/pki/tests/bin/runner-init.sh:103:22: warning[SC2128]: Expanding an array without an index only gives the first element.
#  101|       echo "HOSTNAME: $HOSTNAME"
#  102|       echo "NETWORK: $NETWORK"
#  103|->     echo "ALIASES: ${$ALIASES[@]}"
#  104|   fi
#  105|   

Error: SHELLCHECK_WARNING (CWE-140): [#def267]
/usr/share/pki/tests/bin/runner-init.sh:107:18: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  105|   
#  106|   OPTIONS=()
#  107|-> OPTIONS+=(--name $NAME)
#  108|   OPTIONS+=(--hostname $HOSTNAME)
#  109|   OPTIONS+=(--tmpfs /tmp)

Error: SHELLCHECK_WARNING (CWE-140): [#def268]
/usr/share/pki/tests/bin/runner-init.sh:108:22: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  106|   OPTIONS=()
#  107|   OPTIONS+=(--name $NAME)
#  108|-> OPTIONS+=(--hostname $HOSTNAME)
#  109|   OPTIONS+=(--tmpfs /tmp)
#  110|   OPTIONS+=(--tmpfs /run)

Error: SHELLCHECK_WARNING (CWE-140): [#def269]
/usr/share/pki/tests/bin/runner-init.sh:111:14: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  109|   OPTIONS+=(--tmpfs /tmp)
#  110|   OPTIONS+=(--tmpfs /run)
#  111|-> OPTIONS+=(-v $GITHUB_WORKSPACE:$SHARED)
#  112|   
#  113|   # required to run Podman in container

Error: SHELLCHECK_WARNING (CWE-140): [#def270]
/usr/share/pki/tests/bin/runner-init.sh:111:32: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  109|   OPTIONS+=(--tmpfs /tmp)
#  110|   OPTIONS+=(--tmpfs /run)
#  111|-> OPTIONS+=(-v $GITHUB_WORKSPACE:$SHARED)
#  112|   
#  113|   # required to run Podman in container

Error: SHELLCHECK_WARNING (CWE-140): [#def271]
/usr/share/pki/tests/bin/runner-init.sh:116:28: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#  114|   OPTIONS+=(-v /var/lib/containers:/var/lib/containers)
#  115|   
#  116|-> OPTIONS+=(-e BUILDUSER_UID=$(id -u))
#  117|   OPTIONS+=(-e BUILDUSER_GID=$(id -g))
#  118|   OPTIONS+=(-e SHARED=$SHARED)

Error: SHELLCHECK_WARNING (CWE-140): [#def272]
/usr/share/pki/tests/bin/runner-init.sh:117:28: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#  115|   
#  116|   OPTIONS+=(-e BUILDUSER_UID=$(id -u))
#  117|-> OPTIONS+=(-e BUILDUSER_GID=$(id -g))
#  118|   OPTIONS+=(-e SHARED=$SHARED)
#  119|   OPTIONS+=(-e BUILDUSER=builduser)

Error: SHELLCHECK_WARNING (CWE-140): [#def273]
/usr/share/pki/tests/bin/runner-init.sh:118:21: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  116|   OPTIONS+=(-e BUILDUSER_UID=$(id -u))
#  117|   OPTIONS+=(-e BUILDUSER_GID=$(id -g))
#  118|-> OPTIONS+=(-e SHARED=$SHARED)
#  119|   OPTIONS+=(-e BUILDUSER=builduser)
#  120|   OPTIONS+=(-e GITHUB_ACTIONS=$GITHUB_ACTIONS)

Error: SHELLCHECK_WARNING (CWE-140): [#def274]
/usr/share/pki/tests/bin/runner-init.sh:120:29: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  118|   OPTIONS+=(-e SHARED=$SHARED)
#  119|   OPTIONS+=(-e BUILDUSER=builduser)
#  120|-> OPTIONS+=(-e GITHUB_ACTIONS=$GITHUB_ACTIONS)
#  121|   OPTIONS+=(-e GITHUB_RUN_NUMBER=$GITHUB_RUN_NUMBER)
#  122|   OPTIONS+=(-e container=docker)

Error: SHELLCHECK_WARNING (CWE-140): [#def275]
/usr/share/pki/tests/bin/runner-init.sh:121:32: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  119|   OPTIONS+=(-e BUILDUSER=builduser)
#  120|   OPTIONS+=(-e GITHUB_ACTIONS=$GITHUB_ACTIONS)
#  121|-> OPTIONS+=(-e GITHUB_RUN_NUMBER=$GITHUB_RUN_NUMBER)
#  122|   OPTIONS+=(-e container=docker)
#  123|   OPTIONS+=(--expose 389)

Error: SHELLCHECK_WARNING (CWE-140): [#def276]
/usr/share/pki/tests/bin/runner-init.sh:132:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  130|   if [ "$NETWORK" != "" ]
#  131|   then
#  132|->     OPTIONS+=(--network $NETWORK)
#  133|   fi
#  134|   

Error: SHELLCHECK_WARNING (CWE-140): [#def277]
/usr/share/pki/tests/bin/runner-init.sh:137:31: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  135|   for ALIAS in "${ALIASES[@]}"
#  136|   do
#  137|->     OPTIONS+=(--network-alias $ALIAS)
#  138|   done
#  139|   

Error: SHELLCHECK_WARNING: [#def278]
/usr/share/pki/tests/ca/bin/ca-cert-next-range.sh:6:5: warning[SC2220]: Invalid flags are not handled. Add a *) case.
#    4|   
#    5|   while getopts "t:" arg ; do
#    6|->     case $arg in
#    7|       t)
#    8|           GENERATOR_TYPE=$OPTARG

Error: SHELLCHECK_WARNING: [#def279]
/usr/share/pki/tests/ca/bin/ca-cert-range-objects.sh:6:5: warning[SC2220]: Invalid flags are not handled. Add a *) case.
#    4|   
#    5|   while getopts "t:" arg ; do
#    6|->     case $arg in
#    7|       t)
#    8|           GENERATOR_TYPE=$OPTARG

Error: SHELLCHECK_WARNING: [#def280]
/usr/share/pki/tests/ca/bin/ca-request-next-range.sh:6:5: warning[SC2220]: Invalid flags are not handled. Add a *) case.
#    4|   
#    5|   while getopts "t:" arg ; do
#    6|->     case $arg in
#    7|       t)
#    8|           GENERATOR_TYPE=$OPTARG

Error: SHELLCHECK_WARNING: [#def281]
/usr/share/pki/tests/ca/bin/ca-request-range-objects.sh:6:5: warning[SC2220]: Invalid flags are not handled. Add a *) case.
#    4|   
#    5|   while getopts "t:" arg ; do
#    6|->     case $arg in
#    7|       t)
#    8|           GENERATOR_TYPE=$OPTARG

Error: SHELLCHECK_WARNING (CWE-156): [#def282]
/usr/share/pki/tests/ca/bin/test-ca-auditor-cert.sh:7:54: warning[SC2046]: Quote this to prevent word splitting.
#    5|   
#    6|   # approve the cert request and capture the cert ID
#    7|-> pki -u caadmin -w Secret.123 ca-cert-request-approve `cat /tmp/request_id` --force | sed -n "s/^\s*Certificate ID:\s*\(\S*\)$/\1/p" > /tmp/cert_id
#    8|   CERT_ID=$(cat /tmp/cert_id)
#    9|   

Error: SHELLCHECK_WARNING (CWE-457): [#def283]
/usr/share/pki/tests/kra/bin/test-cert-key-archival.sh:15:5: warning[SC2154]: CRMFPopClient_Extra is referenced but not assigned.
#   13|       -u testuser \
#   14|       -b kra_transport.crt \
#   15|->     ${CRMFPopClient_Extra} | tee output
#   16|   
#   17|   REQUEST_ID=$(sed -n "s/^\s*Request ID:\s*\(\S*\)\s*$/\1/p" output)

Error: SHELLCHECK_WARNING: [#def284]
/usr/share/pki/tks/bin/pki-tks-run:23:7: warning[SC3028]: In POSIX sh, UID is undefined.
#   21|   fi
#   22|   
#   23|-> if [ "$UID" = "0" ]
#   24|   then
#   25|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING: [#def285]
/usr/share/pki/tks/bin/pki-tks-run:97:9: warning[SC3030]: In POSIX sh, arrays are undefined.
#   95|   echo "INFO: Creating TKS server"
#   96|   
#   97|-> OPTIONS=()
#   98|   
#   99|   OPTIONS+=(--conf /conf)

Error: SHELLCHECK_WARNING: [#def286]
/usr/share/pki/tks/bin/pki-tks-run:99:1: warning[SC3024]: In POSIX sh, += is undefined.
#   97|   OPTIONS=()
#   98|   
#   99|-> OPTIONS+=(--conf /conf)
#  100|   OPTIONS+=(--logs /logs)
#  101|   

Error: SHELLCHECK_WARNING: [#def287]
/usr/share/pki/tks/bin/pki-tks-run:99:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#   97|   OPTIONS=()
#   98|   
#   99|-> OPTIONS+=(--conf /conf)
#  100|   OPTIONS+=(--logs /logs)
#  101|   

Error: SHELLCHECK_WARNING: [#def288]
/usr/share/pki/tks/bin/pki-tks-run:100:1: warning[SC3024]: In POSIX sh, += is undefined.
#   98|   
#   99|   OPTIONS+=(--conf /conf)
#  100|-> OPTIONS+=(--logs /logs)
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tks.cfg)

Error: SHELLCHECK_WARNING: [#def289]
/usr/share/pki/tks/bin/pki-tks-run:100:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#   98|   
#   99|   OPTIONS+=(--conf /conf)
#  100|-> OPTIONS+=(--logs /logs)
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tks.cfg)

Error: SHELLCHECK_WARNING: [#def290]
/usr/share/pki/tks/bin/pki-tks-run:102:1: warning[SC3024]: In POSIX sh, += is undefined.
#  100|   OPTIONS+=(--logs /logs)
#  101|   
#  102|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/tks.cfg)
#  103|   OPTIONS+=(-s TKS)
#  104|   

Error: SHELLCHECK_WARNING: [#def291]
/usr/share/pki/tks/bin/pki-tks-run:102:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  100|   OPTIONS+=(--logs /logs)
#  101|   
#  102|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/tks.cfg)
#  103|   OPTIONS+=(-s TKS)
#  104|   

Error: SHELLCHECK_WARNING: [#def292]
/usr/share/pki/tks/bin/pki-tks-run:103:1: warning[SC3024]: In POSIX sh, += is undefined.
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tks.cfg)
#  103|-> OPTIONS+=(-s TKS)
#  104|   
#  105|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def293]
/usr/share/pki/tks/bin/pki-tks-run:103:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tks.cfg)
#  103|-> OPTIONS+=(-s TKS)
#  104|   
#  105|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def294]
/usr/share/pki/tks/bin/pki-tks-run:105:1: warning[SC3024]: In POSIX sh, += is undefined.
#  103|   OPTIONS+=(-s TKS)
#  104|   
#  105|-> OPTIONS+=(-D pki_group=root)
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def295]
/usr/share/pki/tks/bin/pki-tks-run:105:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  103|   OPTIONS+=(-s TKS)
#  104|   
#  105|-> OPTIONS+=(-D pki_group=root)
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def296]
/usr/share/pki/tks/bin/pki-tks-run:107:1: warning[SC3024]: In POSIX sh, += is undefined.
#  105|   OPTIONS+=(-D pki_group=root)
#  106|   
#  107|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   

Error: SHELLCHECK_WARNING: [#def297]
/usr/share/pki/tks/bin/pki-tks-run:107:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  105|   OPTIONS+=(-D pki_group=root)
#  106|   
#  107|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   

Error: SHELLCHECK_WARNING: [#def298]
/usr/share/pki/tks/bin/pki-tks-run:108:1: warning[SC3024]: In POSIX sh, += is undefined.
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def299]
/usr/share/pki/tks/bin/pki-tks-run:108:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def300]
/usr/share/pki/tks/bin/pki-tks-run:110:1: warning[SC3024]: In POSIX sh, += is undefined.
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def301]
/usr/share/pki/tks/bin/pki-tks-run:110:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING (CWE-140): [#def302]
/usr/share/pki/tks/bin/pki-tks-run:110:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def303]
/usr/share/pki/tks/bin/pki-tks-run:111:1: warning[SC3024]: In POSIX sh, += is undefined.
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def304]
/usr/share/pki/tks/bin/pki-tks-run:111:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING (CWE-140): [#def305]
/usr/share/pki/tks/bin/pki-tks-run:111:30: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def306]
/usr/share/pki/tks/bin/pki-tks-run:112:1: warning[SC3024]: In POSIX sh, += is undefined.
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|-> OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def307]
/usr/share/pki/tks/bin/pki-tks-run:112:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|-> OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def308]
/usr/share/pki/tks/bin/pki-tks-run:113:1: warning[SC3024]: In POSIX sh, += is undefined.
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|-> OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def309]
/usr/share/pki/tks/bin/pki-tks-run:113:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|-> OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def310]
/usr/share/pki/tks/bin/pki-tks-run:114:1: warning[SC3024]: In POSIX sh, += is undefined.
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   

Error: SHELLCHECK_WARNING: [#def311]
/usr/share/pki/tks/bin/pki-tks-run:114:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   

Error: SHELLCHECK_WARNING: [#def312]
/usr/share/pki/tks/bin/pki-tks-run:115:1: warning[SC3024]: In POSIX sh, += is undefined.
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|-> OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def313]
/usr/share/pki/tks/bin/pki-tks-run:115:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|-> OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def314]
/usr/share/pki/tks/bin/pki-tks-run:117:1: warning[SC3024]: In POSIX sh, += is undefined.
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|-> OPTIONS+=(-D pki_issuing_ca=)
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   

Error: SHELLCHECK_WARNING: [#def315]
/usr/share/pki/tks/bin/pki-tks-run:117:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|-> OPTIONS+=(-D pki_issuing_ca=)
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   

Error: SHELLCHECK_WARNING: [#def316]
/usr/share/pki/tks/bin/pki-tks-run:118:1: warning[SC3024]: In POSIX sh, += is undefined.
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)
#  118|-> OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def317]
/usr/share/pki/tks/bin/pki-tks-run:118:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)
#  118|-> OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def318]
/usr/share/pki/tks/bin/pki-tks-run:120:1: warning[SC3024]: In POSIX sh, += is undefined.
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  121|   if [ -f /conf/certs/tks_audit_signing.csr ]
#  122|   then

Error: SHELLCHECK_WARNING: [#def319]
/usr/share/pki/tks/bin/pki-tks-run:120:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  121|   if [ -f /conf/certs/tks_audit_signing.csr ]
#  122|   then

Error: SHELLCHECK_WARNING: [#def320]
/usr/share/pki/tks/bin/pki-tks-run:123:5: warning[SC3024]: In POSIX sh, += is undefined.
#  121|   if [ -f /conf/certs/tks_audit_signing.csr ]
#  122|   then
#  123|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/tks_audit_signing.csr)
#  124|   fi
#  125|   

Error: SHELLCHECK_WARNING: [#def321]
/usr/share/pki/tks/bin/pki-tks-run:123:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  121|   if [ -f /conf/certs/tks_audit_signing.csr ]
#  122|   then
#  123|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/tks_audit_signing.csr)
#  124|   fi
#  125|   

Error: SHELLCHECK_WARNING: [#def322]
/usr/share/pki/tks/bin/pki-tks-run:126:1: warning[SC3024]: In POSIX sh, += is undefined.
#  124|   fi
#  125|   
#  126|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   

Error: SHELLCHECK_WARNING: [#def323]
/usr/share/pki/tks/bin/pki-tks-run:126:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  124|   fi
#  125|   
#  126|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   

Error: SHELLCHECK_WARNING: [#def324]
/usr/share/pki/tks/bin/pki-tks-run:127:1: warning[SC3024]: In POSIX sh, += is undefined.
#  125|   
#  126|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def325]
/usr/share/pki/tks/bin/pki-tks-run:127:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  125|   
#  126|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def326]
/usr/share/pki/tks/bin/pki-tks-run:129:1: warning[SC3024]: In POSIX sh, += is undefined.
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   

Error: SHELLCHECK_WARNING: [#def327]
/usr/share/pki/tks/bin/pki-tks-run:129:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   

Error: SHELLCHECK_WARNING: [#def328]
/usr/share/pki/tks/bin/pki-tks-run:130:1: warning[SC3024]: In POSIX sh, += is undefined.
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def329]
/usr/share/pki/tks/bin/pki-tks-run:130:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def330]
/usr/share/pki/tks/bin/pki-tks-run:132:1: warning[SC3024]: In POSIX sh, += is undefined.
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|-> OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def331]
/usr/share/pki/tks/bin/pki-tks-run:132:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|-> OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def332]
/usr/share/pki/tks/bin/pki-tks-run:133:1: warning[SC3024]: In POSIX sh, += is undefined.
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def333]
/usr/share/pki/tks/bin/pki-tks-run:133:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def334]
/usr/share/pki/tks/bin/pki-tks-run:134:1: warning[SC3024]: In POSIX sh, += is undefined.
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|-> OPTIONS+=(-D pki_security_manager=False)
#  135|   OPTIONS+=(-D pki_systemd_service_create=False)
#  136|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def335]
/usr/share/pki/tks/bin/pki-tks-run:134:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|-> OPTIONS+=(-D pki_security_manager=False)
#  135|   OPTIONS+=(-D pki_systemd_service_create=False)
#  136|   OPTIONS+=(-D pki_registry_enable=False)

Error: SHELLCHECK_WARNING: [#def336]
/usr/share/pki/tks/bin/pki-tks-run:135:1: warning[SC3024]: In POSIX sh, += is undefined.
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  136|   OPTIONS+=(-D pki_registry_enable=False)
#  137|   

Error: SHELLCHECK_WARNING: [#def337]
/usr/share/pki/tks/bin/pki-tks-run:135:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  136|   OPTIONS+=(-D pki_registry_enable=False)
#  137|   

Error: SHELLCHECK_WARNING: [#def338]
/usr/share/pki/tks/bin/pki-tks-run:136:1: warning[SC3024]: In POSIX sh, += is undefined.
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   OPTIONS+=(-D pki_systemd_service_create=False)
#  136|-> OPTIONS+=(-D pki_registry_enable=False)
#  137|   
#  138|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def339]
/usr/share/pki/tks/bin/pki-tks-run:136:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   OPTIONS+=(-D pki_systemd_service_create=False)
#  136|-> OPTIONS+=(-D pki_registry_enable=False)
#  137|   
#  138|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def340]
/usr/share/pki/tks/bin/pki-tks-run:138:1: warning[SC3024]: In POSIX sh, += is undefined.
#  136|   OPTIONS+=(-D pki_registry_enable=False)
#  137|   
#  138|-> OPTIONS+=(-v)
#  139|   
#  140|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def341]
/usr/share/pki/tks/bin/pki-tks-run:138:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  136|   OPTIONS+=(-D pki_registry_enable=False)
#  137|   
#  138|-> OPTIONS+=(-v)
#  139|   
#  140|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def342]
/usr/share/pki/tks/bin/pki-tks-run:140:11: warning[SC3054]: In POSIX sh, array references are undefined.
#  138|   OPTIONS+=(-v)
#  139|   
#  140|-> pkispawn "${OPTIONS[@]}"
#  141|   
#  142|   echo "################################################################################"

Error: SHELLCHECK_WARNING: [#def343]
/usr/share/pki/tks/bin/pki-tks-run:150:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  148|   echo "INFO: Updating owners and permissions"
#  149|   
#  150|-> if [ "$UID" = "0" ]
#  151|   then
#  152|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING (CWE-569): [#def344]
/usr/share/pki/tks/bin/pki-tks-run:164:16: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
#  162|   echo "INFO: Starting TKS server"
#  163|   
#  164|-> trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  165|   
#  166|   if [ "$UID" = "0" ]; then

Error: SHELLCHECK_WARNING: [#def345]
/usr/share/pki/tks/bin/pki-tks-run:166:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  164|   trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  165|   
#  166|-> if [ "$UID" = "0" ]; then
#  167|       # In Docker the server runs as root user but it will switch
#  168|       # into pkiuser (UID=17) that belongs to the root group (GID=0).

Error: SHELLCHECK_WARNING: [#def346]
/usr/share/pki/tps/bin/pki-tps-run:23:7: warning[SC3028]: In POSIX sh, UID is undefined.
#   21|   fi
#   22|   
#   23|-> if [ "$UID" = "0" ]
#   24|   then
#   25|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING: [#def347]
/usr/share/pki/tps/bin/pki-tps-run:97:9: warning[SC3030]: In POSIX sh, arrays are undefined.
#   95|   echo "INFO: Creating TPS server"
#   96|   
#   97|-> OPTIONS=()
#   98|   
#   99|   OPTIONS+=(--conf /conf)

Error: SHELLCHECK_WARNING: [#def348]
/usr/share/pki/tps/bin/pki-tps-run:99:1: warning[SC3024]: In POSIX sh, += is undefined.
#   97|   OPTIONS=()
#   98|   
#   99|-> OPTIONS+=(--conf /conf)
#  100|   OPTIONS+=(--logs /logs)
#  101|   

Error: SHELLCHECK_WARNING: [#def349]
/usr/share/pki/tps/bin/pki-tps-run:99:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#   97|   OPTIONS=()
#   98|   
#   99|-> OPTIONS+=(--conf /conf)
#  100|   OPTIONS+=(--logs /logs)
#  101|   

Error: SHELLCHECK_WARNING: [#def350]
/usr/share/pki/tps/bin/pki-tps-run:100:1: warning[SC3024]: In POSIX sh, += is undefined.
#   98|   
#   99|   OPTIONS+=(--conf /conf)
#  100|-> OPTIONS+=(--logs /logs)
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tps.cfg)

Error: SHELLCHECK_WARNING: [#def351]
/usr/share/pki/tps/bin/pki-tps-run:100:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#   98|   
#   99|   OPTIONS+=(--conf /conf)
#  100|-> OPTIONS+=(--logs /logs)
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tps.cfg)

Error: SHELLCHECK_WARNING: [#def352]
/usr/share/pki/tps/bin/pki-tps-run:102:1: warning[SC3024]: In POSIX sh, += is undefined.
#  100|   OPTIONS+=(--logs /logs)
#  101|   
#  102|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/tps.cfg)
#  103|   OPTIONS+=(-s TPS)
#  104|   

Error: SHELLCHECK_WARNING: [#def353]
/usr/share/pki/tps/bin/pki-tps-run:102:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  100|   OPTIONS+=(--logs /logs)
#  101|   
#  102|-> OPTIONS+=(-f /usr/share/pki/server/examples/installation/tps.cfg)
#  103|   OPTIONS+=(-s TPS)
#  104|   

Error: SHELLCHECK_WARNING: [#def354]
/usr/share/pki/tps/bin/pki-tps-run:103:1: warning[SC3024]: In POSIX sh, += is undefined.
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tps.cfg)
#  103|-> OPTIONS+=(-s TPS)
#  104|   
#  105|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def355]
/usr/share/pki/tps/bin/pki-tps-run:103:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  101|   
#  102|   OPTIONS+=(-f /usr/share/pki/server/examples/installation/tps.cfg)
#  103|-> OPTIONS+=(-s TPS)
#  104|   
#  105|   OPTIONS+=(-D pki_group=root)

Error: SHELLCHECK_WARNING: [#def356]
/usr/share/pki/tps/bin/pki-tps-run:105:1: warning[SC3024]: In POSIX sh, += is undefined.
#  103|   OPTIONS+=(-s TPS)
#  104|   
#  105|-> OPTIONS+=(-D pki_group=root)
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def357]
/usr/share/pki/tps/bin/pki-tps-run:105:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  103|   OPTIONS+=(-s TPS)
#  104|   
#  105|-> OPTIONS+=(-D pki_group=root)
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)

Error: SHELLCHECK_WARNING: [#def358]
/usr/share/pki/tps/bin/pki-tps-run:107:1: warning[SC3024]: In POSIX sh, += is undefined.
#  105|   OPTIONS+=(-D pki_group=root)
#  106|   
#  107|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   

Error: SHELLCHECK_WARNING: [#def359]
/usr/share/pki/tps/bin/pki-tps-run:107:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  105|   OPTIONS+=(-D pki_group=root)
#  106|   
#  107|-> OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   

Error: SHELLCHECK_WARNING: [#def360]
/usr/share/pki/tps/bin/pki-tps-run:108:1: warning[SC3024]: In POSIX sh, += is undefined.
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def361]
/usr/share/pki/tps/bin/pki-tps-run:108:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  106|   
#  107|   OPTIONS+=(-D pki_cert_chain_path=/certs/ca_signing.crt)
#  108|-> OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)

Error: SHELLCHECK_WARNING: [#def362]
/usr/share/pki/tps/bin/pki-tps-run:110:1: warning[SC3024]: In POSIX sh, += is undefined.
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def363]
/usr/share/pki/tps/bin/pki-tps-run:110:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING (CWE-140): [#def364]
/usr/share/pki/tps/bin/pki-tps-run:110:25: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  108|   OPTIONS+=(-D pki_cert_chain_nickname=ca_signing)
#  109|   
#  110|-> OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)

Error: SHELLCHECK_WARNING: [#def365]
/usr/share/pki/tps/bin/pki-tps-run:111:1: warning[SC3024]: In POSIX sh, += is undefined.
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def366]
/usr/share/pki/tps/bin/pki-tps-run:111:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING (CWE-140): [#def367]
/usr/share/pki/tps/bin/pki-tps-run:111:30: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  109|   
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|-> OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)

Error: SHELLCHECK_WARNING: [#def368]
/usr/share/pki/tps/bin/pki-tps-run:112:1: warning[SC3024]: In POSIX sh, += is undefined.
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|-> OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def369]
/usr/share/pki/tps/bin/pki-tps-run:112:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  110|   OPTIONS+=(-D pki_ds_url=$PKI_DS_URL)
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|-> OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)

Error: SHELLCHECK_WARNING: [#def370]
/usr/share/pki/tps/bin/pki-tps-run:113:1: warning[SC3024]: In POSIX sh, += is undefined.
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|-> OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def371]
/usr/share/pki/tps/bin/pki-tps-run:113:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  111|   OPTIONS+=(-D pki_ds_password=$PKI_DS_PASSWORD)
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|-> OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)

Error: SHELLCHECK_WARNING: [#def372]
/usr/share/pki/tps/bin/pki-tps-run:114:1: warning[SC3024]: In POSIX sh, += is undefined.
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   

Error: SHELLCHECK_WARNING: [#def373]
/usr/share/pki/tps/bin/pki-tps-run:114:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  112|   OPTIONS+=(-D pki_ds_database=userroot)
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|-> OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   

Error: SHELLCHECK_WARNING: [#def374]
/usr/share/pki/tps/bin/pki-tps-run:115:1: warning[SC3024]: In POSIX sh, += is undefined.
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|-> OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def375]
/usr/share/pki/tps/bin/pki-tps-run:115:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  113|   OPTIONS+=(-D pki_ds_setup=False)
#  114|   OPTIONS+=(-D pki_skip_ds_verify=True)
#  115|-> OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)

Error: SHELLCHECK_WARNING: [#def376]
/usr/share/pki/tps/bin/pki-tps-run:117:1: warning[SC3024]: In POSIX sh, += is undefined.
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|-> OPTIONS+=(-D pki_issuing_ca=)
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   

Error: SHELLCHECK_WARNING: [#def377]
/usr/share/pki/tps/bin/pki-tps-run:117:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  115|   OPTIONS+=(-D pki_share_db=True)
#  116|   
#  117|-> OPTIONS+=(-D pki_issuing_ca=)
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   

Error: SHELLCHECK_WARNING: [#def378]
/usr/share/pki/tps/bin/pki-tps-run:118:1: warning[SC3024]: In POSIX sh, += is undefined.
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)
#  118|-> OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def379]
/usr/share/pki/tps/bin/pki-tps-run:118:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  116|   
#  117|   OPTIONS+=(-D pki_issuing_ca=)
#  118|-> OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|   OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")

Error: SHELLCHECK_WARNING: [#def380]
/usr/share/pki/tps/bin/pki-tps-run:120:1: warning[SC3024]: In POSIX sh, += is undefined.
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  121|   if [ -f /conf/certs/tps_audit_signing.csr ]
#  122|   then

Error: SHELLCHECK_WARNING: [#def381]
/usr/share/pki/tps/bin/pki-tps-run:120:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  118|   OPTIONS+=(-D pki_import_system_certs=False)
#  119|   
#  120|-> OPTIONS+=(-D pki_audit_signing_nickname="$PKI_AUDIT_SIGNING_NICKNAME")
#  121|   if [ -f /conf/certs/tps_audit_signing.csr ]
#  122|   then

Error: SHELLCHECK_WARNING: [#def382]
/usr/share/pki/tps/bin/pki-tps-run:123:5: warning[SC3024]: In POSIX sh, += is undefined.
#  121|   if [ -f /conf/certs/tps_audit_signing.csr ]
#  122|   then
#  123|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/tps_audit_signing.csr)
#  124|   fi
#  125|   

Error: SHELLCHECK_WARNING: [#def383]
/usr/share/pki/tps/bin/pki-tps-run:123:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  121|   if [ -f /conf/certs/tps_audit_signing.csr ]
#  122|   then
#  123|->     OPTIONS+=(-D pki_audit_signing_csr_path=/conf/certs/tps_audit_signing.csr)
#  124|   fi
#  125|   

Error: SHELLCHECK_WARNING: [#def384]
/usr/share/pki/tps/bin/pki-tps-run:126:1: warning[SC3024]: In POSIX sh, += is undefined.
#  124|   fi
#  125|   
#  126|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   

Error: SHELLCHECK_WARNING: [#def385]
/usr/share/pki/tps/bin/pki-tps-run:126:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  124|   fi
#  125|   
#  126|-> OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   

Error: SHELLCHECK_WARNING: [#def386]
/usr/share/pki/tps/bin/pki-tps-run:127:1: warning[SC3024]: In POSIX sh, += is undefined.
#  125|   
#  126|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def387]
/usr/share/pki/tps/bin/pki-tps-run:127:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  125|   
#  126|   OPTIONS+=(-D pki_subsystem_nickname="$PKI_SUBSYSTEM_NICKNAME")
#  127|-> OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")

Error: SHELLCHECK_WARNING: [#def388]
/usr/share/pki/tps/bin/pki-tps-run:129:1: warning[SC3024]: In POSIX sh, += is undefined.
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   

Error: SHELLCHECK_WARNING: [#def389]
/usr/share/pki/tps/bin/pki-tps-run:129:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  127|   OPTIONS+=(-D pki_subsystem_csr_path=/conf/certs/subsystem.csr)
#  128|   
#  129|-> OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   

Error: SHELLCHECK_WARNING: [#def390]
/usr/share/pki/tps/bin/pki-tps-run:130:1: warning[SC3024]: In POSIX sh, += is undefined.
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def391]
/usr/share/pki/tps/bin/pki-tps-run:130:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  128|   
#  129|   OPTIONS+=(-D pki_sslserver_nickname="$PKI_SSLSERVER_NICKNAME")
#  130|-> OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)

Error: SHELLCHECK_WARNING: [#def392]
/usr/share/pki/tps/bin/pki-tps-run:132:1: warning[SC3024]: In POSIX sh, += is undefined.
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|-> OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def393]
/usr/share/pki/tps/bin/pki-tps-run:132:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  130|   OPTIONS+=(-D pki_sslserver_csr_path=/conf/certs/sslserver.csr)
#  131|   
#  132|-> OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)

Error: SHELLCHECK_WARNING: [#def394]
/usr/share/pki/tps/bin/pki-tps-run:133:1: warning[SC3024]: In POSIX sh, += is undefined.
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   

Error: SHELLCHECK_WARNING: [#def395]
/usr/share/pki/tps/bin/pki-tps-run:133:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  131|   
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|-> OPTIONS+=(-D pki_security_domain_setup=False)
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   

Error: SHELLCHECK_WARNING: [#def396]
/usr/share/pki/tps/bin/pki-tps-run:134:1: warning[SC3024]: In POSIX sh, += is undefined.
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|-> OPTIONS+=(-D pki_security_manager=False)
#  135|   
#  136|   OPTIONS+=(-D pki_ca_uri=)

Error: SHELLCHECK_WARNING: [#def397]
/usr/share/pki/tps/bin/pki-tps-run:134:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  132|   OPTIONS+=(-D pki_admin_setup=False)
#  133|   OPTIONS+=(-D pki_security_domain_setup=False)
#  134|-> OPTIONS+=(-D pki_security_manager=False)
#  135|   
#  136|   OPTIONS+=(-D pki_ca_uri=)

Error: SHELLCHECK_WARNING: [#def398]
/usr/share/pki/tps/bin/pki-tps-run:136:1: warning[SC3024]: In POSIX sh, += is undefined.
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   
#  136|-> OPTIONS+=(-D pki_ca_uri=)
#  137|   OPTIONS+=(-D pki_kra_uri=)
#  138|   OPTIONS+=(-D pki_tks_uri=)

Error: SHELLCHECK_WARNING: [#def399]
/usr/share/pki/tps/bin/pki-tps-run:136:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  134|   OPTIONS+=(-D pki_security_manager=False)
#  135|   
#  136|-> OPTIONS+=(-D pki_ca_uri=)
#  137|   OPTIONS+=(-D pki_kra_uri=)
#  138|   OPTIONS+=(-D pki_tks_uri=)

Error: SHELLCHECK_WARNING: [#def400]
/usr/share/pki/tps/bin/pki-tps-run:137:1: warning[SC3024]: In POSIX sh, += is undefined.
#  135|   
#  136|   OPTIONS+=(-D pki_ca_uri=)
#  137|-> OPTIONS+=(-D pki_kra_uri=)
#  138|   OPTIONS+=(-D pki_tks_uri=)
#  139|   

Error: SHELLCHECK_WARNING: [#def401]
/usr/share/pki/tps/bin/pki-tps-run:137:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  135|   
#  136|   OPTIONS+=(-D pki_ca_uri=)
#  137|-> OPTIONS+=(-D pki_kra_uri=)
#  138|   OPTIONS+=(-D pki_tks_uri=)
#  139|   

Error: SHELLCHECK_WARNING: [#def402]
/usr/share/pki/tps/bin/pki-tps-run:138:1: warning[SC3024]: In POSIX sh, += is undefined.
#  136|   OPTIONS+=(-D pki_ca_uri=)
#  137|   OPTIONS+=(-D pki_kra_uri=)
#  138|-> OPTIONS+=(-D pki_tks_uri=)
#  139|   
#  140|   if [ "$PKI_AUTHDB_URL" = "" ]

Error: SHELLCHECK_WARNING: [#def403]
/usr/share/pki/tps/bin/pki-tps-run:138:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  136|   OPTIONS+=(-D pki_ca_uri=)
#  137|   OPTIONS+=(-D pki_kra_uri=)
#  138|-> OPTIONS+=(-D pki_tks_uri=)
#  139|   
#  140|   if [ "$PKI_AUTHDB_URL" = "" ]

Error: SHELLCHECK_WARNING: [#def404]
/usr/share/pki/tps/bin/pki-tps-run:142:5: warning[SC3024]: In POSIX sh, += is undefined.
#  140|   if [ "$PKI_AUTHDB_URL" = "" ]
#  141|   then
#  142|->     OPTIONS+=(-D pki_authdb_url=)
#  143|   else
#  144|       OPTIONS+=(-D pki_authdb_url=$PKI_AUTHDB_URL)

Error: SHELLCHECK_WARNING: [#def405]
/usr/share/pki/tps/bin/pki-tps-run:142:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  140|   if [ "$PKI_AUTHDB_URL" = "" ]
#  141|   then
#  142|->     OPTIONS+=(-D pki_authdb_url=)
#  143|   else
#  144|       OPTIONS+=(-D pki_authdb_url=$PKI_AUTHDB_URL)

Error: SHELLCHECK_WARNING: [#def406]
/usr/share/pki/tps/bin/pki-tps-run:144:5: warning[SC3024]: In POSIX sh, += is undefined.
#  142|       OPTIONS+=(-D pki_authdb_url=)
#  143|   else
#  144|->     OPTIONS+=(-D pki_authdb_url=$PKI_AUTHDB_URL)
#  145|   fi
#  146|   

Error: SHELLCHECK_WARNING: [#def407]
/usr/share/pki/tps/bin/pki-tps-run:144:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  142|       OPTIONS+=(-D pki_authdb_url=)
#  143|   else
#  144|->     OPTIONS+=(-D pki_authdb_url=$PKI_AUTHDB_URL)
#  145|   fi
#  146|   

Error: SHELLCHECK_WARNING (CWE-140): [#def408]
/usr/share/pki/tps/bin/pki-tps-run:144:33: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  142|       OPTIONS+=(-D pki_authdb_url=)
#  143|   else
#  144|->     OPTIONS+=(-D pki_authdb_url=$PKI_AUTHDB_URL)
#  145|   fi
#  146|   

Error: SHELLCHECK_WARNING: [#def409]
/usr/share/pki/tps/bin/pki-tps-run:149:5: warning[SC3024]: In POSIX sh, += is undefined.
#  147|   if [ "$PKI_AUTHDB_BASEDN" = "" ]
#  148|   then
#  149|->     OPTIONS+=(-D pki_authdb_basedn=)
#  150|   else
#  151|       OPTIONS+=(-D pki_authdb_basedn=$PKI_AUTHDB_BASEDN)

Error: SHELLCHECK_WARNING: [#def410]
/usr/share/pki/tps/bin/pki-tps-run:149:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  147|   if [ "$PKI_AUTHDB_BASEDN" = "" ]
#  148|   then
#  149|->     OPTIONS+=(-D pki_authdb_basedn=)
#  150|   else
#  151|       OPTIONS+=(-D pki_authdb_basedn=$PKI_AUTHDB_BASEDN)

Error: SHELLCHECK_WARNING: [#def411]
/usr/share/pki/tps/bin/pki-tps-run:151:5: warning[SC3024]: In POSIX sh, += is undefined.
#  149|       OPTIONS+=(-D pki_authdb_basedn=)
#  150|   else
#  151|->     OPTIONS+=(-D pki_authdb_basedn=$PKI_AUTHDB_BASEDN)
#  152|   fi
#  153|   

Error: SHELLCHECK_WARNING: [#def412]
/usr/share/pki/tps/bin/pki-tps-run:151:14: warning[SC3030]: In POSIX sh, arrays are undefined.
#  149|       OPTIONS+=(-D pki_authdb_basedn=)
#  150|   else
#  151|->     OPTIONS+=(-D pki_authdb_basedn=$PKI_AUTHDB_BASEDN)
#  152|   fi
#  153|   

Error: SHELLCHECK_WARNING (CWE-140): [#def413]
/usr/share/pki/tps/bin/pki-tps-run:151:36: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  149|       OPTIONS+=(-D pki_authdb_basedn=)
#  150|   else
#  151|->     OPTIONS+=(-D pki_authdb_basedn=$PKI_AUTHDB_BASEDN)
#  152|   fi
#  153|   

Error: SHELLCHECK_WARNING: [#def414]
/usr/share/pki/tps/bin/pki-tps-run:154:1: warning[SC3024]: In POSIX sh, += is undefined.
#  152|   fi
#  153|   
#  154|-> OPTIONS+=(-D pki_enable_server_side_keygen=True)
#  155|   
#  156|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def415]
/usr/share/pki/tps/bin/pki-tps-run:154:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  152|   fi
#  153|   
#  154|-> OPTIONS+=(-D pki_enable_server_side_keygen=True)
#  155|   
#  156|   OPTIONS+=(-D pki_systemd_service_create=False)

Error: SHELLCHECK_WARNING: [#def416]
/usr/share/pki/tps/bin/pki-tps-run:156:1: warning[SC3024]: In POSIX sh, += is undefined.
#  154|   OPTIONS+=(-D pki_enable_server_side_keygen=True)
#  155|   
#  156|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  157|   OPTIONS+=(-D pki_registry_enable=False)
#  158|   

Error: SHELLCHECK_WARNING: [#def417]
/usr/share/pki/tps/bin/pki-tps-run:156:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  154|   OPTIONS+=(-D pki_enable_server_side_keygen=True)
#  155|   
#  156|-> OPTIONS+=(-D pki_systemd_service_create=False)
#  157|   OPTIONS+=(-D pki_registry_enable=False)
#  158|   

Error: SHELLCHECK_WARNING: [#def418]
/usr/share/pki/tps/bin/pki-tps-run:157:1: warning[SC3024]: In POSIX sh, += is undefined.
#  155|   
#  156|   OPTIONS+=(-D pki_systemd_service_create=False)
#  157|-> OPTIONS+=(-D pki_registry_enable=False)
#  158|   
#  159|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def419]
/usr/share/pki/tps/bin/pki-tps-run:157:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  155|   
#  156|   OPTIONS+=(-D pki_systemd_service_create=False)
#  157|-> OPTIONS+=(-D pki_registry_enable=False)
#  158|   
#  159|   OPTIONS+=(-v)

Error: SHELLCHECK_WARNING: [#def420]
/usr/share/pki/tps/bin/pki-tps-run:159:1: warning[SC3024]: In POSIX sh, += is undefined.
#  157|   OPTIONS+=(-D pki_registry_enable=False)
#  158|   
#  159|-> OPTIONS+=(-v)
#  160|   
#  161|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def421]
/usr/share/pki/tps/bin/pki-tps-run:159:10: warning[SC3030]: In POSIX sh, arrays are undefined.
#  157|   OPTIONS+=(-D pki_registry_enable=False)
#  158|   
#  159|-> OPTIONS+=(-v)
#  160|   
#  161|   pkispawn "${OPTIONS[@]}"

Error: SHELLCHECK_WARNING: [#def422]
/usr/share/pki/tps/bin/pki-tps-run:161:11: warning[SC3054]: In POSIX sh, array references are undefined.
#  159|   OPTIONS+=(-v)
#  160|   
#  161|-> pkispawn "${OPTIONS[@]}"
#  162|   
#  163|   echo "################################################################################"

Error: SHELLCHECK_WARNING: [#def423]
/usr/share/pki/tps/bin/pki-tps-run:172:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  170|   echo "INFO: Updating owners and permissions"
#  171|   
#  172|-> if [ "$UID" = "0" ]
#  173|   then
#  174|       chown -Rf pkiuser:root /conf

Error: SHELLCHECK_WARNING (CWE-569): [#def424]
/usr/share/pki/tps/bin/pki-tps-run:186:16: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
#  184|   echo "INFO: Starting TPS server"
#  185|   
#  186|-> trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  187|   
#  188|   if [ "$UID" = "0" ]; then

Error: SHELLCHECK_WARNING: [#def425]
/usr/share/pki/tps/bin/pki-tps-run:188:7: warning[SC3028]: In POSIX sh, UID is undefined.
#  186|   trap "kill -- -$(ps -o pgid= $PID | grep -o '[0-9]*')" TERM
#  187|   
#  188|-> if [ "$UID" = "0" ]; then
#  189|       # In Docker the server runs as root user but it will switch
#  190|       # into pkiuser (UID=17) that belongs to the root group (GID=0).

Error: COMPILER_WARNING (CWE-704): [#def426]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:91:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_GenerateSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   91 | #define FIRST_SESSION_KEY_SHARE                "first"
#      |                                                ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1187:42: note: in expansion of macro ‘FIRST_SESSION_KEY_SHARE’
# 1187 |                                          FIRST_SESSION_KEY_SHARE,
#      |                                          ^~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:236:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | TKS_GenerateSessionKeyShare( char           *sessionKeyShareName,
#      |                              ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   89|   #define CTRL_C                                 3
#   90|   
#   91|-> #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"

Error: COMPILER_WARNING (CWE-704): [#def427]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:91:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_InputSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   91 | #define FIRST_SESSION_KEY_SHARE                "first"
#      |                                                ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1206:46: note: in expansion of macro ‘FIRST_SESSION_KEY_SHARE’
# 1206 |                                              FIRST_SESSION_KEY_SHARE,
#      |                                              ^~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:241:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  241 | TKS_InputSessionKeyShare( char          *sessionKeyShareName,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   89|   #define CTRL_C                                 3
#   90|   
#   91|-> #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"

Error: COMPILER_WARNING (CWE-704): [#def428]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:93:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_GenerateSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   93 | #define SECOND_SESSION_KEY_SHARE               "second"
#      |                                                ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1271:43: note: in expansion of macro ‘SECOND_SESSION_KEY_SHARE’
# 1271 |                                           SECOND_SESSION_KEY_SHARE,
#      |                                           ^~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:236:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | TKS_GenerateSessionKeyShare( char           *sessionKeyShareName,
#      |                              ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   91|   #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|-> #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|   #define THIRD_SESSION_KEY_SHARE                "third"

Error: COMPILER_WARNING (CWE-704): [#def429]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:93:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_InputSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   93 | #define SECOND_SESSION_KEY_SHARE               "second"
#      |                                                ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1290:47: note: in expansion of macro ‘SECOND_SESSION_KEY_SHARE’
# 1290 |                                               SECOND_SESSION_KEY_SHARE,
#      |                                               ^~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:241:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  241 | TKS_InputSessionKeyShare( char          *sessionKeyShareName,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   91|   #define FIRST_SESSION_KEY_SHARE                "first"
#   92|   #define FIRST_SESSION_KEY_SHARE_LENGTH         16
#   93|-> #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|   #define THIRD_SESSION_KEY_SHARE                "third"

Error: COMPILER_WARNING (CWE-704): [#def430]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:95:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_GenerateSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   95 | #define THIRD_SESSION_KEY_SHARE                "third"
#      |                                                ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1422:42: note: in expansion of macro ‘THIRD_SESSION_KEY_SHARE’
# 1422 |                                          THIRD_SESSION_KEY_SHARE,
#      |                                          ^~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:236:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | TKS_GenerateSessionKeyShare( char           *sessionKeyShareName,
#      |                              ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|-> #define THIRD_SESSION_KEY_SHARE                "third"
#   96|   #define THIRD_SESSION_KEY_SHARE_LENGTH         16
#   97|   #define HEX_SESSION_KEY_BUF_LENGTH             32

Error: COMPILER_WARNING (CWE-704): [#def431]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:95:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_InputSessionKeyShare’ discards ‘const’ qualifier from pointer target type
#   95 | #define THIRD_SESSION_KEY_SHARE                "third"
#      |                                                ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1441:46: note: in expansion of macro ‘THIRD_SESSION_KEY_SHARE’
# 1441 |                                              THIRD_SESSION_KEY_SHARE,
#      |                                              ^~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:241:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  241 | TKS_InputSessionKeyShare( char          *sessionKeyShareName,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
#   93|   #define SECOND_SESSION_KEY_SHARE               "second"
#   94|   #define SECOND_SESSION_KEY_SHARE_LENGTH        16
#   95|-> #define THIRD_SESSION_KEY_SHARE                "third"
#   96|   #define THIRD_SESSION_KEY_SHARE_LENGTH         16
#   97|   #define HEX_SESSION_KEY_BUF_LENGTH             32

Error: COMPILER_WARNING (CWE-704): [#def432]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:132:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_ImportSymmetricKey’ discards ‘const’ qualifier from pointer target type
#  132 | #define FIRST_SYMMETRIC_KEY                    "first"
#      |                                                ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1569:21: note: in expansion of macro ‘FIRST_SYMMETRIC_KEY’
# 1569 |                     FIRST_SYMMETRIC_KEY,
#      |                     ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:246:44: note: expected ‘char *’ but argument is of type ‘const char *’
#  246 | TKS_ImportSymmetricKey( char              *symmetricKeyName,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  130|   #endif
#  131|   
#  132|-> #define FIRST_SYMMETRIC_KEY                    "first"
#  133|   #define SECOND_SYMMETRIC_KEY                   "second"
#  134|   #define THIRD_SYMMETRIC_KEY                    "third"

Error: COMPILER_WARNING (CWE-704): [#def433]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:133:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_DeriveSymmetricKey’ discards ‘const’ qualifier from pointer target type
#  133 | #define SECOND_SYMMETRIC_KEY                   "second"
#      |                                                ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1624:21: note: in expansion of macro ‘SECOND_SYMMETRIC_KEY’
# 1624 |                     SECOND_SYMMETRIC_KEY,
#      |                     ^~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:254:44: note: expected ‘char *’ but argument is of type ‘const char *’
#  254 | TKS_DeriveSymmetricKey( char              *symmetricKeyName,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  131|   
#  132|   #define FIRST_SYMMETRIC_KEY                    "first"
#  133|-> #define SECOND_SYMMETRIC_KEY                   "second"
#  134|   #define THIRD_SYMMETRIC_KEY                    "third"
#  135|   #define MASTER_KEY                             "master"

Error: COMPILER_WARNING (CWE-704): [#def434]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:134:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_DeriveSymmetricKey’ discards ‘const’ qualifier from pointer target type
#  134 | #define THIRD_SYMMETRIC_KEY                    "third"
#      |                                                ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1684:21: note: in expansion of macro ‘THIRD_SYMMETRIC_KEY’
# 1684 |                     THIRD_SYMMETRIC_KEY,
#      |                     ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:254:44: note: expected ‘char *’ but argument is of type ‘const char *’
#  254 | TKS_DeriveSymmetricKey( char              *symmetricKeyName,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  132|   #define FIRST_SYMMETRIC_KEY                    "first"
#  133|   #define SECOND_SYMMETRIC_KEY                   "second"
#  134|-> #define THIRD_SYMMETRIC_KEY                    "third"
#  135|   #define MASTER_KEY                             "master"
#  136|   #define RESIDENT_KEY                           "resident"

Error: COMPILER_WARNING (CWE-704): [#def435]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:136:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  136 | #define RESIDENT_KEY                           "resident"
#      |                                                ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1840:57: note: in expansion of macro ‘RESIDENT_KEY’
# 1840 |                                                         RESIDENT_KEY,
#      |                                                         ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:230:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  230 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  134|   #define THIRD_SYMMETRIC_KEY                    "third"
#  135|   #define MASTER_KEY                             "master"
#  136|-> #define RESIDENT_KEY                           "resident"
#  137|   #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"

Error: COMPILER_WARNING (CWE-704): [#def436]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:137:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  137 | #define SESSION_KEY                            "session"
#      |                                                ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:998:53: note: in expansion of macro ‘SESSION_KEY’
#  998 |                                                     SESSION_KEY,
#      |                                                     ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:487:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  487 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  135|   #define MASTER_KEY                             "master"
#  136|   #define RESIDENT_KEY                           "resident"
#  137|-> #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|   #define TRANSPORT_KEY                          "transport"

Error: COMPILER_WARNING (CWE-704): [#def437]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:139:48: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘TKS_StoreSymmetricKeyAndNameIt’ discards ‘const’ qualifier from pointer target type
#  139 | #define TRANSPORT_KEY                          "transport"
#      |                                                ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1739:62: note: in expansion of macro ‘TRANSPORT_KEY’
# 1739 |         rvSymmetricKeyname = TKS_StoreSymmetricKeyAndNameIt( TRANSPORT_KEY,
#      |                                                              ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:263:52: note: expected ‘char *’ but argument is of type ‘const char *’
#  263 | TKS_StoreSymmetricKeyAndNameIt( char              *symmetricKeyName,
#      |                                 ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
#  137|   #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|-> #define TRANSPORT_KEY                          "transport"
#  140|   #define UNWRAPPED_KEY                          "unwrapped"
#  141|   #define WRAPPED_KEY                            "wrapped"

Error: COMPILER_WARNING (CWE-704): [#def438]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_StoreSymmetricKeyAndNameIt’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:139:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  139 | #define TRANSPORT_KEY                          "transport"
#      |                                                ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:1376:61: note: in expansion of macro ‘TRANSPORT_KEY’
# 1376 |                                                             TRANSPORT_KEY,
#      |                                                             ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:487:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  487 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  137|   #define SESSION_KEY                            "session"
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|-> #define TRANSPORT_KEY                          "transport"
#  140|   #define UNWRAPPED_KEY                          "unwrapped"
#  141|   #define WRAPPED_KEY                            "wrapped"

Error: COMPILER_WARNING (CWE-704): [#def439]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:140:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  140 | #define UNWRAPPED_KEY                          "unwrapped"
#      |                                                ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2498:43: note: in expansion of macro ‘UNWRAPPED_KEY’
# 2498 |                                           UNWRAPPED_KEY,
#      |                                           ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:230:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  230 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  138|   #define SYMMETRIC_KEY                          "symmetric"
#  139|   #define TRANSPORT_KEY                          "transport"
#  140|-> #define UNWRAPPED_KEY                          "unwrapped"
#  141|   #define WRAPPED_KEY                            "wrapped"
#  142|   

Error: COMPILER_WARNING (CWE-704): [#def440]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:141:48: warning[-Wdiscarded-qualifiers]: passing argument 7 of ‘TKS_ComputeAndDisplayKCV’ discards ‘const’ qualifier from pointer target type
#  141 | #define WRAPPED_KEY                            "wrapped"
#      |                                                ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2863:57: note: in expansion of macro ‘WRAPPED_KEY’
# 2863 |                                                         WRAPPED_KEY,
#      |                                                         ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:230:42: note: expected ‘char *’ but argument is of type ‘const char *’
#  230 |                           char          *keyType,
#      |                           ~~~~~~~~~~~~~~~^~~~~~~
#  139|   #define TRANSPORT_KEY                          "transport"
#  140|   #define UNWRAPPED_KEY                          "unwrapped"
#  141|-> #define WRAPPED_KEY                            "wrapped"
#  142|   
#  143|   #define CONTINUATION_MESSAGE                   "Press enter to continue " \

Error: COMPILER_WARNING (CWE-563): [#def441]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/file.c: scope_hint: In function ‘TKS_ReadInputFileIntoSECItem’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/file.c:26:40: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#   26 |                               char    *wrappedKeyName,
#      |                               ~~~~~~~~~^~~~~~~~~~~~~~
#   24|                                 char    *hexInternalKeyKCV,
#   25|                                 int      hexInternalKeyKCVLength,
#   26|->                               char    *wrappedKeyName,
#   27|                                 SECItem *wrappedKey )
#   28|   {

Error: COMPILER_WARNING (CWE-563): [#def442]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/file.c: scope_hint: In function ‘TKS_WriteSECItemIntoOutputFile’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/file.c:318:42: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#  318 |                                 char    *wrappedKeyName,
#      |                                 ~~~~~~~~~^~~~~~~~~~~~~~
#  316|   SECStatus
#  317|   TKS_WriteSECItemIntoOutputFile( SECItem *wrappedKey,
#  318|->                                 char    *wrappedKeyName,
#  319|                                   char    *hexInternalKeyKCV,
#  320|                                   int      hexInternalKeyKCVLength,

Error: COMPILER_WARNING (CWE-563): [#def443]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/help.c: scope_hint: In function ‘TKS_PrintHelp’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/help.c:86:22: warning[-Wunused-parameter]: unused parameter ‘progName’
#   86 | TKS_PrintHelp( char *progName )
#      |                ~~~~~~^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#   84|   
#   85|   void
#   86|-> TKS_PrintHelp( char *progName )
#   87|   {
#   88|       /**********************/

Error: COMPILER_WARNING (CWE-195): [#def444]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘InputHexSessionKey’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:224:19: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘PRUint32’ {aka ‘unsigned int’}
#  224 |     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                   ^
#  222|       /* Print appropriate key share padding length */
#  223|       PR_fprintf( PR_STDOUT, "\n                             " );
#  224|->     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  225|           PR_fprintf( PR_STDOUT, " " );
#  226|       }

Error: COMPILER_WARNING (CWE-195): [#def445]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:229:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘unsigned int’
#  229 |     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#      |                       ^
#  227|   
#  228|       /* Print second DES_LENGTH bytes */
#  229|->     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#  230|           PR_fprintf( PR_STDOUT,
#  231|                       "%c%c%c%c ",

Error: COMPILER_WARNING (CWE-195): [#def446]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_GenerateSessionKeyShare’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:974:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘PRUint32’ {aka ‘unsigned int’}
#  974 |         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                       ^
#  972|           /* Print appropriate key share padding length */
#  973|           PR_fprintf( PR_STDOUT, "\n                             " );
#  974|->         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  975|               PR_fprintf( PR_STDOUT, " " );
#  976|           }

Error: COMPILER_WARNING (CWE-195): [#def447]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:979:27: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘unsigned int’
#  979 |         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#      |                           ^
#  977|   
#  978|           /* Print second DES_LENGTH bytes */
#  979|->         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#  980|               PR_fprintf( PR_STDOUT,
#  981|                           "%c%c%c%c ",

Error: GCC_ANALYZER_WARNING (CWE-457): [#def448]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:1031:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘hexSessionKeyShare.data’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:912:7: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:913:9: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:1031:7: danger: use of uninitialized value ‘hexSessionKeyShare.data’ here
# 1029|   destroyHexSessionKeyShare:
# 1030|       /* Destroy the hex session key share */
# 1031|->     if( hexSessionKeyShare.data != NULL ) {
# 1032|           PORT_ZFree( ( unsigned char * )
# 1033|                       hexSessionKeyShare.data,

Error: COMPILER_WARNING (CWE-457): [#def449]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_GenerateSessionKeyShare’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:1031:7: warning[-Wmaybe-uninitialized]: ‘hexSessionKeyShare.data’ may be used uninitialized
# 1031 |     if( hexSessionKeyShare.data != NULL ) {
#      |       ^
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:896:18: note: ‘hexSessionKeyShare.data’ was declared here
#  896 |     SECItem      hexSessionKeyShare;
#      |                  ^~~~~~~~~~~~~~~~~~
# 1029|   destroyHexSessionKeyShare:
# 1030|       /* Destroy the hex session key share */
# 1031|->     if( hexSessionKeyShare.data != NULL ) {
# 1032|           PORT_ZFree( ( unsigned char * )
# 1033|                       hexSessionKeyShare.data,

Error: COMPILER_WARNING (CWE-457): [#def450]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:1032:9: warning[-Wmaybe-uninitialized]: ‘hexSessionKeyShare.len’ may be used uninitialized
# 1032 |         PORT_ZFree( ( unsigned char * )
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1033 |                     hexSessionKeyShare.data,
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~
# 1034 |                     hexSessionKeyShare.len );
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:896:18: note: ‘hexSessionKeyShare.len’ was declared here
#  896 |     SECItem      hexSessionKeyShare;
#      |                  ^~~~~~~~~~~~~~~~~~
# 1030|       /* Destroy the hex session key share */
# 1031|       if( hexSessionKeyShare.data != NULL ) {
# 1032|->         PORT_ZFree( ( unsigned char * )
# 1033|                       hexSessionKeyShare.data,
# 1034|                       hexSessionKeyShare.len );

Error: COMPILER_WARNING: [#def451]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c: scope_hint: In function ‘TKS_DetectKeyAlgorithm’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/key.c:1482:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 1482 |     CK_MECHANISM_TYPE mechanism = PK11_GetMechanism(key);
#      |     ^~~~~~~~~~~~~~~~~
# 1480|           return KEY_ALG_UNKNOWN;
# 1481|   
# 1482|->     CK_MECHANISM_TYPE mechanism = PK11_GetMechanism(key);
# 1483|       return TKS_DetectKeyAlgorithmFromMechanism(mechanism);
# 1484|   }

Error: COMPILER_WARNING (CWE-563): [#def452]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/list.c: scope_hint: In function ‘TKS_ListKeys’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/list.c:153:19: warning[-Wunused-parameter]: unused parameter ‘index’
#  153 |               int index,
#      |               ~~~~^~~~~
#  151|                 PK11SlotInfo *slot,
#  152|                 char *keyname,
#  153|->               int index, 
#  154|                 PRBool dopriv,
#  155|                 secuPWData *pwdata )

Error: COMPILER_WARNING (CWE-563): [#def453]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/list.c:154:22: warning[-Wunused-parameter]: unused parameter ‘dopriv’
#  154 |               PRBool dopriv,
#      |               ~~~~~~~^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/modules.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#  152|                 char *keyname,
#  153|                 int index, 
#  154|->               PRBool dopriv,
#  155|                 secuPWData *pwdata )
#  156|   {

Error: COMPILER_WARNING (CWE-563): [#def454]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:160:36: warning[-Wunused-but-set-variable]: variable ‘DBDir’ set but not used
#  160 |     char                          *DBDir                       = NULL;
#      |                                    ^~~~~
#  158|       SECStatus                      status                      = PR_FALSE;
#  159|       char                           commandToRun                = '\0';
#  160|->     char                          *DBDir                       = NULL;
#  161|       char                          *DBPrefix                    = "";
#  162|       char                          *input                       = NULL;

Error: COMPILER_WARNING (CWE-704): [#def455]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c: scope_hint: In function ‘main’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:161:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  161 |     char                          *DBPrefix                    = "";
#      |                                                                  ^~
#  159|       char                           commandToRun                = '\0';
#  160|       char                          *DBDir                       = NULL;
#  161|->     char                          *DBPrefix                    = "";
#  162|       char                          *input                       = NULL;
#  163|       char                          *keyname                     = NULL;

Error: COMPILER_WARNING (CWE-704): [#def456]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:167:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  167 |     char                          *slotname                    = "internal";
#      |                                                                  ^~~~~~~~~~
#  165|       char                          *output                      = NULL;
#  166|       char                          *SeedNoise                   = NULL;
#  167|->     char                          *slotname                    = "internal";
#  168|       char                          *transport_keyname           = NULL;
#  169|       int                            keyAlg                      = 0;

Error: COMPILER_WARNING (CWE-195): [#def457]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:996:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  996 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
#  994|           PRInt32 errLen = PR_GetErrorTextLength();
#  995|   
#  996|->         if( errLen > 0 && errLen < sizeof buffer ) {
#  997|               PR_GetErrorText( buffer );
#  998|           }

Error: COMPILER_WARNING (CWE-195): [#def458]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1006:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 1006 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
# 1004|                       "NSS_Initialize() failed" );
# 1005|   
# 1006|->         if( errLen > 0 && errLen < sizeof buffer ) {
# 1007|               PR_fprintf( PR_STDERR, "\t%s\n", buffer );
# 1008|           } else {

Error: COMPILER_WARNING (CWE-195): [#def459]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1037:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 1037 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
# 1035|               PRInt32 errLen = PR_GetErrorTextLength();
# 1036|   
# 1037|->             if( errLen > 0 && errLen < sizeof buffer ) {
# 1038|                   PR_GetErrorText( buffer );
# 1039|               }

Error: COMPILER_WARNING (CWE-195): [#def460]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1049:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 1049 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
# 1047|                           "\" exists!" );
# 1048|   
# 1049|->             if( errLen > 0 && errLen < sizeof buffer ) {
# 1050|                   PR_fprintf( PR_STDERR, "\t%s\n", buffer );
# 1051|               } else {

Error: COMPILER_WARNING: [#def461]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1816:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 1816 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
#      |         ^~~~~~~~~~~~
# 1814|   
# 1815|           /* Detect the key type (AES or DES) */
# 1816|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
# 1817|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 1818|           {

Error: COMPILER_WARNING (CWE-1023): [#def462]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:1827:9: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 1827 |         switch(detectedAlg)
#      |         ^~~~~~
# 1825|   
# 1826|           PR_fprintf(PR_STDOUT, "This key is of type: ");
# 1827|->         switch(detectedAlg)
# 1828|           {
# 1829|           case KEY_ALG_AES: PR_fprintf(PR_STDOUT, ALG_AES" . . .\n\n"); break;

Error: COMPILER_WARNING: [#def463]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2178:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2178 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
#      |         ^~~~~~~~~~~~
# 2176|   
# 2177|           /* Detect the key type (AES or DES) */
# 2178|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(symmetricKey);
# 2179|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 2180|           {

Error: COMPILER_WARNING (CWE-1023): [#def464]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2189:9: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 2189 |         switch(detectedAlg)
#      |         ^~~~~~
# 2187|   
# 2188|           PR_fprintf(PR_STDOUT, "This key is of type: ");
# 2189|->         switch(detectedAlg)
# 2190|           {
# 2191|           case KEY_ALG_AES: PR_fprintf(PR_STDOUT, ALG_AES" . . .\n\n"); break;

Error: COMPILER_WARNING: [#def465]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2378:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2378 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
#      |         ^~~~~~~~~~~~
# 2376|            * algorithm given on the command line
# 2377|            */
# 2378|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
# 2379|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 2380|           {

Error: COMPILER_WARNING (CWE-1023): [#def466]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2389:9: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 2389 |         switch(detectedAlg)
#      |         ^~~~~~
# 2387|   
# 2388|           PR_fprintf(PR_STDOUT, "The transport key is of type: ");
# 2389|->         switch(detectedAlg)
# 2390|           {
# 2391|           case KEY_ALG_AES: PR_fprintf(PR_STDOUT, ALG_AES" . . .\n\n"); break;

Error: COMPILER_WARNING: [#def467]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2564:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2564 |         SECItem seciCKAExtractable;
#      |         ^~~~~~~
# 2562|           //PAS MOD FE4
# 2563|           //This code flips the CKA_Extractible bit from true to false.
# 2564|->         SECItem seciCKAExtractable;
# 2565|           CK_BBOOL f = CK_FALSE;
# 2566|   

Error: COMPILER_WARNING: [#def468]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2698:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2698 |         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
#      |         ^~~~~~~~~~~~
# 2696|            * must match.
# 2697|            */
# 2698|->         KeyAlgorithm detectedAlg = TKS_DetectKeyAlgorithm(transportKey);
# 2699|           if(detectedAlg == KEY_ALG_UNKNOWN)
# 2700|           {

Error: COMPILER_WARNING (CWE-195): [#def469]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2707:29: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘KeyAlgorithm’ and ‘int’
# 2707 |         else if(detectedAlg != keyAlg)
#      |                             ^~
# 2705|               goto shutdown;
# 2706|           }
# 2707|->         else if(detectedAlg != keyAlg)
# 2708|           {
# 2709|               char *detectedAlgString;

Error: COMPILER_WARNING (CWE-1023): [#def470]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2710:13: warning[-Wswitch]: enumeration value ‘KEY_ALG_UNKNOWN’ not handled in switch
# 2710 |             switch(detectedAlg)
#      |             ^~~~~~
# 2708|           {
# 2709|               char *detectedAlgString;
# 2710|->             switch(detectedAlg)
# 2711|               {
# 2712|               case KEY_ALG_AES: detectedAlgString = ALG_AES; break;

Error: COMPILER_WARNING (CWE-704): [#def471]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2712:49: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2712 |             case KEY_ALG_AES: detectedAlgString = ALG_AES; break;
#      |                                                 ^
# 2710|               switch(detectedAlg)
# 2711|               {
# 2712|->             case KEY_ALG_AES: detectedAlgString = ALG_AES; break;
# 2713|               case KEY_ALG_DES: detectedAlgString = ALG_DES; break;
# 2714|               }

Error: COMPILER_WARNING (CWE-704): [#def472]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2713:49: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2713 |             case KEY_ALG_DES: detectedAlgString = ALG_DES; break;
#      |                                                 ^
# 2711|               {
# 2712|               case KEY_ALG_AES: detectedAlgString = ALG_AES; break;
# 2713|->             case KEY_ALG_DES: detectedAlgString = ALG_DES; break;
# 2714|               }
# 2715|   

Error: COMPILER_WARNING (CWE-457): [#def473]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2716:13: warning[-Wmaybe-uninitialized]: ‘detectedAlgString’ may be used uninitialized
# 2716 |             PR_fprintf(PR_STDERR,
#      |             ^~~~~~~~~~~~~~~~~~~~~
# 2717 |                     "The transport key type (%s) does not match the -a algorithm"
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2718 |                     " parameter. Exiting.\n\n", detectedAlgString);
#      |                     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2709:19: note: ‘detectedAlgString’ was declared here
# 2709 |             char *detectedAlgString;
#      |                   ^~~~~~~~~~~~~~~~~
# 2714|               }
# 2715|   
# 2716|->             PR_fprintf(PR_STDERR,
# 2717|                       "The transport key type (%s) does not match the -a algorithm"
# 2718|                       " parameter. Exiting.\n\n", detectedAlgString);

Error: COMPILER_WARNING: [#def474]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pistool.c:2962:9: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
# 2962 |         SECItem seciCKAExtractable;
#      |         ^~~~~~~
# 2960|           //PAS MOD FE4
# 2961|           //This code flips the CKA_Extractible bit from true to false.
# 2962|->         SECItem seciCKAExtractable;
# 2963|           CK_BBOOL f = CK_FALSE;
# 2964|           seciCKAExtractable.data = (unsigned char *)PR_Malloc(sizeof(CK_BBOOL));

Error: COMPILER_WARNING (CWE-909): [#def475]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:76:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   76 |           offsetof(CERTPolicyQualifier, qualifierID) },
#      |           ^~~~~~~~
/usr/include/nss3/secoid.h:18: included_from: Included from here.
/usr/include/nss3/secmodt.h:9: included_from: Included from here.
/usr/include/nss3/keythi.h:12: included_from: Included from here.
/usr/include/nss3/cert.h:21: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:53: included_from: Included from here.
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   74|   	  0, NULL, sizeof(CERTPolicyQualifier) },
#   75|       { SEC_ASN1_OBJECT_ID,
#   76|-> 	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|   	  offsetof(CERTPolicyQualifier, qualifierValue) },

Error: COMPILER_WARNING (CWE-909): [#def476]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:78:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   78 |           offsetof(CERTPolicyQualifier, qualifierValue) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   76|   	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|-> 	  offsetof(CERTPolicyQualifier, qualifierValue) },
#   79|       { 0 }
#   80|   };

Error: COMPILER_WARNING (CWE-909): [#def477]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:86:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   86 |           offsetof(CERTPolicyInfo, policyID) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   84|   	  0, NULL, sizeof(CERTPolicyInfo) },
#   85|       { SEC_ASN1_OBJECT_ID,
#   86|-> 	  offsetof(CERTPolicyInfo, policyID) },
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),

Error: COMPILER_WARNING (CWE-909): [#def478]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:89:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   89 |           secu_PolicyQualifierTemplate },
#      |           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),
#   89|-> 	  secu_PolicyQualifierTemplate },
#   90|       { 0 }
#   91|   };

Error: COMPILER_WARNING (CWE-563): [#def479]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:181:37: warning[-Wunused-parameter]: unused parameter ‘msg’
#  181 |                               char *msg, int level)
#      |                               ~~~~~~^~~
#  179|   static SECStatus
#  180|   secu_PrintUserNoticeQualifier(FILE *out, SECItem * qualifierValue,
#  181|->                               char *msg, int level)
#  182|   {
#  183|       CERTUserNotice *userNotice = NULL;

Error: COMPILER_WARNING (CWE-704): [#def480]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintUserNoticeQualifier’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:200:30: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
#  200 |                              "Display Text", level+1);
#      |                              ^~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:283:60: note: expected ‘char *’ but argument is of type ‘const char *’
#  283 | extern void SECU_PrintString(FILE *out, SECItem *si, char *m, int level);
#      |                                                      ~~~~~~^
#  198|   	if (userNotice->displayText.len != 0) {
#  199|   	    SECU_PrintString(out,&userNotice->displayText,
#  200|-> 			     "Display Text", level+1);
#  201|   	}
#  202|   	CERT_DestroyUserNotice(userNotice);

Error: COMPILER_WARNING (CWE-704): [#def481]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:216:41: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
#  216 |                                         "Policy Qualifier Name", level);
#      |                                         ^~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:200:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  200 | extern SECOidTag SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level);
#      |                                                              ~~~~~~^
#  214|   
#  215|      SECU_PrintObjectID(out, &policyQualifier->qualifierID , 
#  216|-> 					"Policy Qualifier Name", level);
#  217|      if (!qualifierValue->data) {
#  218|   	SECU_Indent(out, level);

Error: COMPILER_WARNING: [#def482]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:224:11: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  224 |        if (SECSuccess == rv)
#      |           ^
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:227:4: note: here
#  227 |    case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#      |    ^~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/random.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/retrieve.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#  222|      case SEC_OID_PKIX_USER_NOTICE_QUALIFIER:
#  223|          rv = secu_PrintUserNoticeQualifier(out, qualifierValue, msg, level);
#  224|->        if (SECSuccess == rv)
#  225|   	   break;
#  226|          /* fall through on error */

Error: COMPILER_WARNING (CWE-704): [#def483]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:229:44: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
#  229 |         SECU_PrintAny(out, qualifierValue, "Policy Qualifier Data", level);
#      |                                            ^~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:284:56: note: expected ‘char *’ but argument is of type ‘const char *’
#  284 | extern void SECU_PrintAny(FILE *out, SECItem *i, char *m, int level);
#      |                                                  ~~~~~~^
#  227|      case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#  228|      default:
#  229|-> 	SECU_PrintAny(out, qualifierValue, "Policy Qualifier Data", level);
#  230|   	break;
#  231|      }

Error: COMPILER_WARNING (CWE-563): [#def484]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:236:65: warning[-Wunused-parameter]: unused parameter ‘msg’
#  236 | secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,char *msg,int level)
#      |                                                           ~~~~~~^~~
#  234|   
#  235|   static SECStatus
#  236|-> secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,char *msg,int level)
#  237|   {
#  238|      CERTPolicyQualifier **policyQualifiers;

Error: COMPILER_WARNING (CWE-704): [#def485]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyInfo’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:241:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
#  241 |    SECU_PrintObjectID(out, &policyInfo->policyID , "Policy Name", level);
#      |                                                    ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:200:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  200 | extern SECOidTag SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level);
#      |                                                              ~~~~~~^
#  239|   
#  240|      policyQualifiers = policyInfo->policyQualifiers;
#  241|->    SECU_PrintObjectID(out, &policyInfo->policyID , "Policy Name", level);
#  242|      
#  243|      while (policyQualifiers && *policyQualifiers != NULL) {

Error: COMPILER_WARNING (CWE-704): [#def486]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:244:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPolicyQualifier’ discards ‘const’ qualifier from pointer target type
#  244 |         secu_PrintPolicyQualifier(out,*policyQualifiers,"",level+1);
#      |                                                         ^~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:210:33: note: expected ‘char *’ but argument is of type ‘const char *’
#  210 |                           char *msg,int level)
#      |                           ~~~~~~^~~
#  242|      
#  243|      while (policyQualifiers && *policyQualifiers != NULL) {
#  244|-> 	secu_PrintPolicyQualifier(out,*policyQualifiers,"",level+1);
#  245|   	policyQualifiers++;
#  246|      }

Error: COMPILER_WARNING (CWE-704): [#def487]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘SECU_PrintPolicy’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:263:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
#  263 |         SECU_PrintAny(out, value, "Invalid Policy Data", level);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:284:56: note: expected ‘char *’ but argument is of type ‘const char *’
#  284 | extern void SECU_PrintAny(FILE *out, SECItem *i, char *m, int level);
#      |                                                  ~~~~~~^
#  261|      policies = secu_DecodeCertificatePoliciesExtension(value);
#  262|      if (policies == NULL) {
#  263|-> 	SECU_PrintAny(out, value, "Invalid Policy Data", level);
#  264|   	return;
#  265|      }

Error: COMPILER_WARNING (CWE-704): [#def488]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:269:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPolicyInfo’ discards ‘const’ qualifier from pointer target type
#  269 |         secu_PrintPolicyInfo(out,*policyInfos,"",level);
#      |                                               ^~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:236:65: note: expected ‘char *’ but argument is of type ‘const char *’
#  236 | secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,char *msg,int level)
#      |                                                           ~~~~~~^~~
#  267|      policyInfos = policies->policyInfos;
#  268|      while (policyInfos && *policyInfos != NULL) {
#  269|-> 	secu_PrintPolicyInfo(out,*policyInfos,"",level);
#  270|   	policyInfos++;
#  271|      }

Error: COMPILER_WARNING (CWE-704): [#def489]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c: scope_hint: In function ‘SECU_PrintPrivKeyUsagePeriodExtension’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:292:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintGeneralizedTime’ discards ‘const’ qualifier from pointer target type
#  292 |         SECU_PrintGeneralizedTime(out, &prd->notBefore, "Not Before", level);
#      |                                                         ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:224:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  224 | extern void SECU_PrintGeneralizedTime(FILE *out, SECItem *t, char *m,
#      |                                                              ~~~~~~^
#  290|       }
#  291|       if (prd->notBefore.data) {
#  292|-> 	SECU_PrintGeneralizedTime(out, &prd->notBefore, "Not Before", level);
#  293|       }
#  294|       if (prd->notAfter.data) {

Error: COMPILER_WARNING (CWE-704): [#def490]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/pppolicy.c:295:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintGeneralizedTime’ discards ‘const’ qualifier from pointer target type
#  295 |         SECU_PrintGeneralizedTime(out, &prd->notAfter,  "Not After ", level);
#      |                                                         ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:224:68: note: expected ‘char *’ but argument is of type ‘const char *’
#  224 | extern void SECU_PrintGeneralizedTime(FILE *out, SECItem *t, char *m,
#      |                                                              ~~~~~~^
#  293|       }
#  294|       if (prd->notAfter.data) {
#  295|-> 	SECU_PrintGeneralizedTime(out, &prd->notAfter,  "Not After ", level);
#  296|       }
#  297|       if (!prd->notBefore.data && !prd->notAfter.data) {

Error: COMPILER_WARNING (CWE-758): [#def491]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secerror.c:74:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_Strerror’
#   74 | SECU_Strerror(PRErrorCode errNum) {
#      | ^~~~~~~~~~~~~
#   72|    */
#   73|   const char *
#   74|-> SECU_Strerror(PRErrorCode errNum) {
#   75|       PRInt32 low  = 0;
#   76|       PRInt32 high = numStrings - 1;

Error: COMPILER_WARNING (CWE-252): [#def492]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secpwd.c: scope_hint: In function ‘SEC_GetPassword’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secpwd.c:69:21: warning[-Wunused-result]: ignoring return value of ‘fgets’ declared with attribute ‘warn_unused_result’
#   69 | #define QUIET_FGETS fgets
#      |                     ^
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secpwd.c:117:9: note: in expansion of macro ‘QUIET_FGETS’
#  117 |         QUIET_FGETS ( phrase, sizeof(phrase), input);
#      |         ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:60: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#   67|   static char * quiet_fgets (char *buf, int length, FILE *input);
#   68|   #else
#   69|-> #define QUIET_FGETS fgets
#   70|   #endif
#   71|   

Error: COMPILER_WARNING (CWE-758): [#def493]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:99:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_GetString’
#   99 | SECU_GetString(int16 error_number)
#      | ^~~~~~~~~~~~~~
#   97|   
#   98|   char *
#   99|-> SECU_GetString(int16 error_number)
#  100|   {
#  101|   

Error: COMPILER_WARNING (CWE-758): [#def494]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintErrMsg’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      | ^~~~~~~~~~~~~~~~
#  106|   
#  107|   void 
#  108|-> SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#  109|   {
#  110|       va_list args;

Error: COMPILER_WARNING: [#def495]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintErrMsg’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:118:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintErrMsg’ might be a candidate for ‘gnu_printf’ format attribute
#  118 |     vfprintf(out, msg, args);
#      |     ^~~~~~~~
#  116|       SECU_Indent(out, level);
#  117|       fprintf(out, "%s: ", progName);
#  118|->     vfprintf(out, msg, args);
#  119|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  120|   	fprintf(out, ": %s\n", errString);

Error: COMPILER_WARNING: [#def496]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintError’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:137:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintError’ might be a candidate for ‘gnu_printf’ format attribute
#  137 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  135|   
#  136|       fprintf(stderr, "%s: ", progName);
#  137|->     vfprintf(stderr, msg, args);
#  138|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  139|   	fprintf(stderr, ": %s\n", errString);

Error: COMPILER_WARNING: [#def497]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSystemError’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:153:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintSystemError’ might be a candidate for ‘gnu_printf’ format attribute
#  153 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  151|       va_start(args, msg);
#  152|       fprintf(stderr, "%s: ", progName);
#  153|->     vfprintf(stderr, msg, args);
#  154|   #if defined(_WIN32_WCE)
#  155|       fprintf(stderr, ": %d\n", PR_GetOSError());

Error: COMPILER_WARNING (CWE-563): [#def498]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_GetPasswordString’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:172:30: warning[-Wunused-parameter]: unused parameter ‘arg’
#  172 | SECU_GetPasswordString(void *arg, char *prompt)
#      |                        ~~~~~~^~~
#  170|   
#  171|   char *
#  172|-> SECU_GetPasswordString(void *arg, char *prompt)
#  173|   {
#  174|   #ifndef _WINDOWS

Error: CPPCHECK_WARNING (CWE-404): [#def499]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:188: error[resourceLeak]: Resource leak: input
#  186|       if (output == NULL) {
#  187|   	fprintf(stderr, "Error opening output terminal for write\n");
#  188|-> 	return NULL;
#  189|       }
#  190|   

Error: COMPILER_WARNING (CWE-563): [#def500]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_FilePasswd’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:221:31: warning[-Wunused-parameter]: unused parameter ‘slot’
#  221 | SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#      |                 ~~~~~~~~~~~~~~^~~~
#  219|    */
#  220|   char *
#  221|-> SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#  222|   {
#  223|       unsigned char phrase[200];

Error: COMPILER_WARNING (CWE-704): [#def501]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_GetModulePassword’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:262:40: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  262 |     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#      |                                        ^~~~~~~~~~
#  260|       secuPWData *pwdata = (secuPWData *)arg;
#  261|       secuPWData pwnull = { PW_NONE, 0 };
#  262|->     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#  263|       char *pw;
#  264|   

Error: COMPILER_WARNING (CWE-758): [#def502]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:307:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_InitSlotPassword’
#  307 | secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#      | ^~~~~~~~~~~~~~~~~~~~~
#  305|   
#  306|   char *
#  307|-> secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#  308|   {
#  309|       char *p0 = NULL;

Error: CPPCHECK_WARNING (CWE-404): [#def503]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:342: error[resourceLeak]: Resource leak: input
#  340|       if (output == NULL) {
#  341|   	PR_fprintf(PR_STDERR, "Error opening output terminal for write\n");
#  342|-> 	return NULL;
#  343|       }
#  344|   

Error: COMPILER_WARNING (CWE-704): [#def504]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_InitSlotPassword’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:349:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SEC_GetPassword’ discards ‘const’ qualifier from pointer target type
#  349 |         p0 = SEC_GetPassword(input, output, "Enter new password: ",
#      |                                             ^~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:123:57: note: expected ‘char *’ but argument is of type ‘const char *’
#  123 | extern char *SEC_GetPassword(FILE *in, FILE *out, char *msg,
#      |                                                   ~~~~~~^~~
#  347|   	if (p0) 
#  348|   	    PORT_Free(p0);
#  349|-> 	p0 = SEC_GetPassword(input, output, "Enter new password: ",
#  350|   			     SEC_BlindCheckPassword);
#  351|   

Error: COMPILER_WARNING (CWE-704): [#def505]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:354:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SEC_GetPassword’ discards ‘const’ qualifier from pointer target type
#  354 |         p1 = SEC_GetPassword(input, output, "Re-enter password: ",
#      |                                             ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:123:57: note: expected ‘char *’ but argument is of type ‘const char *’
#  123 | extern char *SEC_GetPassword(FILE *in, FILE *out, char *msg,
#      |                                                   ~~~~~~^~~
#  352|   	if (p1)
#  353|   	    PORT_Free(p1);
#  354|-> 	p1 = SEC_GetPassword(input, output, "Re-enter password: ",
#  355|   			     SEC_BlindCheckPassword);
#  356|   	if (p0 && p1 && !PORT_Strcmp(p0, p1)) {

Error: COMPILER_WARNING (CWE-563): [#def506]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_ChangePW’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:374:15: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  374 |     SECStatus rv;
#      |               ^~
#  372|   SECU_ChangePW(PK11SlotInfo *slot, char *passwd, char *pwFile)
#  373|   {
#  374|->     SECStatus rv;
#  375|       secuPWData pwdata, newpwdata;
#  376|       char *oldpw = NULL, *newpw = NULL;

Error: COMPILER_WARNING (CWE-704): [#def507]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_ConfigDirectory’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:483:25: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  483 |         if (!home) home = "";
#      |                         ^
#  481|       if (base == NULL || *base == 0) {
#  482|   	home = PR_GetEnv("HOME");
#  483|-> 	if (!home) home = "";
#  484|   
#  485|   	if (*home && home[strlen(home) - 1] == '/')

Error: COMPILER_WARNING (CWE-563): [#def508]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_GetClientAuthData’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:503:47: warning[-Wunused-parameter]: unused parameter ‘fd’
#  503 | SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#      |                                   ~~~~~~~~~~~~^~
#  501|   /* This gets called by SSL when server wants our cert & key */
#  502|   int
#  503|-> SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  504|   		       struct CERTDistNamesStr *caNames,
#  505|                         struct CERTCertificateStr **pRetCert,

Error: COMPILER_WARNING (CWE-563): [#def509]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:504:49: warning[-Wunused-parameter]: unused parameter ‘caNames’
#  504 |                        struct CERTDistNamesStr *caNames,
#      |                        ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  502|   int
#  503|   SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  504|-> 		       struct CERTDistNamesStr *caNames,
#  505|                         struct CERTCertificateStr **pRetCert,
#  506|                         struct SECKEYPrivateKeyStr **pRetKey)

Error: COMPILER_WARNING (CWE-758): [#def510]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:544:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_StdinToItem’
#  544 | secu_StdinToItem(SECItem *dst)
#      | ^~~~~~~~~~~~~~~~
#  542|   
#  543|   SECStatus
#  544|-> secu_StdinToItem(SECItem *dst)
#  545|   {
#  546|       unsigned char buf[1000];

Error: COMPILER_WARNING (CWE-758): [#def511]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:875:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_StripTagAndLength’
#  875 | SECU_StripTagAndLength(SECItem *i)
#      | ^~~~~~~~~~~~~~~~~~~~~~
#  873|   
#  874|   SECStatus
#  875|-> SECU_StripTagAndLength(SECItem *i)
#  876|   {
#  877|       unsigned int start;

Error: COMPILER_WARNING (CWE-758): [#def512]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1075:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSet’
# 1075 | SECU_PrintSet(FILE *out, SECItem *t, char *m, int level)
#      | ^~~~~~~~~~~~~
# 1073|   /* This prints a SET or SEQUENCE */
# 1074|   void
# 1075|-> SECU_PrintSet(FILE *out, SECItem *t, char *m, int level)
# 1076|   {
# 1077|       int            type        = t->data[0] & SEC_ASN1_TAGNUM_MASK;

Error: COMPILER_WARNING (CWE-758): [#def513]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1207:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedBoolean’
# 1207 | SECU_PrintEncodedBoolean(FILE *out, SECItem *i, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1205|   /* Print a DER encoded Boolean */
# 1206|   void
# 1207|-> SECU_PrintEncodedBoolean(FILE *out, SECItem *i, char *m, int level)
# 1208|   {
# 1209|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def514]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1216:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedInteger’
# 1216 | SECU_PrintEncodedInteger(FILE *out, SECItem *i, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1214|   /* Print a DER encoded integer */
# 1215|   void
# 1216|-> SECU_PrintEncodedInteger(FILE *out, SECItem *i, char *m, int level)
# 1217|   {
# 1218|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def515]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1225:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedObjectID’
# 1225 | SECU_PrintEncodedObjectID(FILE *out, SECItem *i, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 1223|   /* Print a DER encoded OID */
# 1224|   void
# 1225|-> SECU_PrintEncodedObjectID(FILE *out, SECItem *i, char *m, int level)
# 1226|   {
# 1227|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-704): [#def516]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintValidity’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1379:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 1379 |     SECU_PrintTimeChoice(out, &v->notBefore, "Not Before", level+1);
#      |                                              ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 1377|   {
# 1378|       SECU_Indent(out, level);  fprintf(out, "%s:\n", m);
# 1379|->     SECU_PrintTimeChoice(out, &v->notBefore, "Not Before", level+1);
# 1380|       SECU_PrintTimeChoice(out, &v->notAfter,  "Not After ", level+1);
# 1381|       return 0;

Error: COMPILER_WARNING (CWE-704): [#def517]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1380:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 1380 |     SECU_PrintTimeChoice(out, &v->notAfter,  "Not After ", level+1);
#      |                                              ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 1378|       SECU_Indent(out, level);  fprintf(out, "%s:\n", m);
# 1379|       SECU_PrintTimeChoice(out, &v->notBefore, "Not Before", level+1);
# 1380|->     SECU_PrintTimeChoice(out, &v->notAfter,  "Not After ", level+1);
# 1381|       return 0;
# 1382|   }

Error: COMPILER_WARNING (CWE-704): [#def518]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAttribute’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1445:44: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1445 |     SECU_PrintObjectID(out, &(attr->type), "Type", level+1);
#      |                                            ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1443|        * and print the value(s) appropriately!
# 1444|        */
# 1445|->     SECU_PrintObjectID(out, &(attr->type), "Type", level+1);
# 1446|       if (attr->values != NULL) {
# 1447|   	i = 0;

Error: COMPILER_WARNING (CWE-704): [#def519]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintRSAPublicKey’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1474:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1474 |     SECU_PrintInteger(out, &pk->u.rsa.modulus, "Modulus", level+1);
#      |                                                ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1472|   
# 1473|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1474|->     SECU_PrintInteger(out, &pk->u.rsa.modulus, "Modulus", level+1);
# 1475|       SECU_PrintInteger(out, &pk->u.rsa.publicExponent, "Exponent", level+1);
# 1476|       if (pk->u.rsa.publicExponent.len == 1 &&

Error: COMPILER_WARNING (CWE-704): [#def520]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1475:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1475 |     SECU_PrintInteger(out, &pk->u.rsa.publicExponent, "Exponent", level+1);
#      |                                                       ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1473|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1474|       SECU_PrintInteger(out, &pk->u.rsa.modulus, "Modulus", level+1);
# 1475|->     SECU_PrintInteger(out, &pk->u.rsa.publicExponent, "Exponent", level+1);
# 1476|       if (pk->u.rsa.publicExponent.len == 1 &&
# 1477|           pk->u.rsa.publicExponent.data[0] == 1) {

Error: COMPILER_WARNING (CWE-704): [#def521]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintDSAPublicKey’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1486:53: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1486 |     SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
#      |                                                     ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1484|   {
# 1485|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1486|->     SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
# 1487|       SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|       SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);

Error: COMPILER_WARNING (CWE-704): [#def522]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1487:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1487 |     SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
#      |                                                        ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1485|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 1486|       SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
# 1487|->     SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|       SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
# 1489|       SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);

Error: COMPILER_WARNING (CWE-704): [#def523]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1488:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1488 |     SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
#      |                                                    ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1486|       SECU_PrintInteger(out, &pk->u.dsa.params.prime, "Prime", level+1);
# 1487|       SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|->     SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
# 1489|       SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);
# 1490|   }

Error: COMPILER_WARNING (CWE-704): [#def524]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1489:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1489 |     SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);
#      |                                                    ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1487|       SECU_PrintInteger(out, &pk->u.dsa.params.subPrime, "Subprime", level+1);
# 1488|       SECU_PrintInteger(out, &pk->u.dsa.params.base, "Base", level+1);
# 1489|->     SECU_PrintInteger(out, &pk->u.dsa.publicValue, "PublicValue", level+1);
# 1490|   }
# 1491|   

Error: COMPILER_WARNING (CWE-563): [#def525]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1513:56: warning[-Wunused-parameter]: unused parameter ‘arena’
# 1513 | secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1511|   
# 1512|   static void
# 1513|-> secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1514|   		       CERTSubjectPublicKeyInfo *i,  char *msg, int level)
# 1515|   {

Error: COMPILER_WARNING (CWE-704): [#def526]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintSubjectPublicKeyInfo’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1519:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 1519 |     SECU_PrintAlgorithmID(out, &i->algorithm, "Public Key Algorithm", level+1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 1517|   
# 1518|       SECU_Indent(out, level); fprintf(out, "%s:\n", msg);
# 1519|->     SECU_PrintAlgorithmID(out, &i->algorithm, "Public Key Algorithm", level+1);
# 1520|   
# 1521|       pk = SECKEY_ExtractPublicKey(i);

Error: COMPILER_WARNING (CWE-704): [#def527]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1525:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRSAPublicKey’ discards ‘const’ qualifier from pointer target type
# 1525 |             secu_PrintRSAPublicKey(out, pk, "RSA Public Key", level +1);
#      |                                             ^~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1470:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 1470 | secu_PrintRSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m, int level)
#      |                                                        ~~~~~~^
# 1523|   	switch (pk->keyType) {
# 1524|   	case rsaKey:
# 1525|-> 	    secu_PrintRSAPublicKey(out, pk, "RSA Public Key", level +1);
# 1526|   	    break;
# 1527|   

Error: COMPILER_WARNING (CWE-704): [#def528]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1529:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDSAPublicKey’ discards ‘const’ qualifier from pointer target type
# 1529 |             secu_PrintDSAPublicKey(out, pk, "DSA Public Key", level +1);
#      |                                             ^~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1483:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 1483 | secu_PrintDSAPublicKey(FILE *out, SECKEYPublicKey *pk, char *m, int level)
#      |                                                        ~~~~~~^
# 1527|   
# 1528|   	case dsaKey:
# 1529|-> 	    secu_PrintDSAPublicKey(out, pk, "DSA Public Key", level +1);
# 1530|   	    break;
# 1531|   

Error: COMPILER_WARNING (CWE-704): [#def529]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1551:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1551 |         SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
#      |                                      ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1549|   	PORT_FreeArena(pk->arena, PR_FALSE);
# 1550|       } else {
# 1551|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
# 1552|   loser:
# 1553|   	if (i->subjectPublicKey.data) {

Error: COMPILER_WARNING (CWE-704): [#def530]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1551:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1551 |         SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
#      |                                               ^~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1549|   	PORT_FreeArena(pk->arena, PR_FALSE);
# 1550|       } else {
# 1551|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing public key");
# 1552|   loser:
# 1553|   	if (i->subjectPublicKey.data) {

Error: COMPILER_WARNING (CWE-704): [#def531]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1554:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1554 |             SECU_PrintAny(out, &i->subjectPublicKey, "Raw", level);
#      |                                                      ^~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1552|   loser:
# 1553|   	if (i->subjectPublicKey.data) {
# 1554|-> 	    SECU_PrintAny(out, &i->subjectPublicKey, "Raw", level);
# 1555|   	}
# 1556|       }

Error: COMPILER_WARNING (CWE-704): [#def532]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintX509InvalidDate’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1575:43: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘CERT_GenTime2FormattedAscii’ discards ‘const’ qualifier from pointer target type
# 1575 |                             (invalidTime, "%a %b %d %H:%M:%S %Y");
#      |                                           ^~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:54: included_from: Included from here.
/usr/include/nss3/secder.h:158:64: note: expected ‘char *’ but argument is of type ‘const char *’
#  158 | extern char *CERT_GenTime2FormattedAscii(PRTime genTime, char *format);
#      |                                                          ~~~~~~^~~~~~
# 1573|   	if (rv == SECSuccess) {
# 1574|   	    formattedTime = CERT_GenTime2FormattedAscii
# 1575|-> 			    (invalidTime, "%a %b %d %H:%M:%S %Y");
# 1576|   	    SECU_Indent(out, level +1);
# 1577|   	    fprintf (out, "%s: %s\n", msg, formattedTime);

Error: COMPILER_WARNING (CWE-704): [#def533]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintNSCertType’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1649:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1649 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1647|       if ((my.data[0] != SEC_ASN1_BIT_STRING) || 
# 1648|           SECSuccess != SECU_StripTagAndLength(&my)) {
# 1649|-> 	SECU_PrintAny(out, value, "Data", level);
# 1650|   	return SECSuccess;
# 1651|       }

Error: COMPILER_WARNING (CWE-563): [#def534]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1688:57: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1688 | secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level)
#      |                                                   ~~~~~~^~~
# 1686|   /* X509KeyUsage is merely a bit string whose bits are displayed symbolically */
# 1687|   static void
# 1688|-> secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level) 
# 1689|   {
# 1690|       int     unused;

Error: COMPILER_WARNING (CWE-704): [#def535]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintX509KeyUsage’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1698:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1698 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1696|       if ((my.data[0] != SEC_ASN1_BIT_STRING) || 
# 1697|           SECSuccess != SECU_StripTagAndLength(&my)) {
# 1698|-> 	SECU_PrintAny(out, value, "Data", level);
# 1699|   	return;
# 1700|       }

Error: COMPILER_WARNING (CWE-704): [#def536]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintGeneralName’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1766:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1766 |         SECU_PrintAny(     out, &gname->name.OthName.name, "Other Name", level);
#      |                                                            ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1764|       switch (gname->type) {
# 1765|       case certOtherName :
# 1766|-> 	SECU_PrintAny(     out, &gname->name.OthName.name, "Other Name", level);
# 1767|   	SECU_PrintObjectID(out, &gname->name.OthName.oid,  "OID",      level+1);
# 1768|   	break;

Error: COMPILER_WARNING (CWE-704): [#def537]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1767:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1767 |         SECU_PrintObjectID(out, &gname->name.OthName.oid,  "OID",      level+1);
#      |                                                            ^~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1765|       case certOtherName :
# 1766|   	SECU_PrintAny(     out, &gname->name.OthName.name, "Other Name", level);
# 1767|-> 	SECU_PrintObjectID(out, &gname->name.OthName.oid,  "OID",      level+1);
# 1768|   	break;
# 1769|       case certDirectoryName :

Error: COMPILER_WARNING (CWE-704): [#def538]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1770:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 1770 |         SECU_PrintName(out, &gname->name.directoryName, "Directory Name", level);
#      |                                                         ^~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:293:61: note: expected ‘char *’ but argument is of type ‘const char *’
#  293 | extern void SECU_PrintName(FILE *out, CERTName *name, char *msg, int level);
#      |                                                       ~~~~~~^~~
# 1768|   	break;
# 1769|       case certDirectoryName :
# 1770|-> 	SECU_PrintName(out, &gname->name.directoryName, "Directory Name", level);
# 1771|   	break;
# 1772|       case certRFC822Name :

Error: COMPILER_WARNING (CWE-704): [#def539]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1773:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRawString’ discards ‘const’ qualifier from pointer target type
# 1773 |         secu_PrintRawString(   out, &gname->name.other, "RFC822 Name", level);
#      |                                                         ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:922:51: note: expected ‘char *’ but argument is of type ‘const char *’
#  922 | secu_PrintRawString(FILE *out, SECItem *si, char *m, int level)
#      |                                             ~~~~~~^
# 1771|   	break;
# 1772|       case certRFC822Name :
# 1773|-> 	secu_PrintRawString(   out, &gname->name.other, "RFC822 Name", level);
# 1774|   	break;
# 1775|       case certDNSName :

Error: COMPILER_WARNING (CWE-704): [#def540]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1776:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRawString’ discards ‘const’ qualifier from pointer target type
# 1776 |         secu_PrintRawString(   out, &gname->name.other, "DNS name", level);
#      |                                                         ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:922:51: note: expected ‘char *’ but argument is of type ‘const char *’
#  922 | secu_PrintRawString(FILE *out, SECItem *si, char *m, int level)
#      |                                             ~~~~~~^
# 1774|   	break;
# 1775|       case certDNSName :
# 1776|-> 	secu_PrintRawString(   out, &gname->name.other, "DNS name", level);
# 1777|   	break;
# 1778|       case certURI :

Error: COMPILER_WARNING (CWE-704): [#def541]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1779:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintRawString’ discards ‘const’ qualifier from pointer target type
# 1779 |         secu_PrintRawString(   out, &gname->name.other, "URI", level);
#      |                                                         ^~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:922:51: note: expected ‘char *’ but argument is of type ‘const char *’
#  922 | secu_PrintRawString(FILE *out, SECItem *si, char *m, int level)
#      |                                             ~~~~~~^
# 1777|   	break;
# 1778|       case certURI :
# 1779|-> 	secu_PrintRawString(   out, &gname->name.other, "URI", level);
# 1780|   	break;
# 1781|       case certIPAddress :

Error: COMPILER_WARNING (CWE-704): [#def542]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1782:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintIPAddress’ discards ‘const’ qualifier from pointer target type
# 1782 |         secu_PrintIPAddress(out, &gname->name.other, "IP Address", level);
#      |                                                      ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1723:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1723 | secu_PrintIPAddress(FILE *out, SECItem *value, char *msg, int level)
#      |                                                ~~~~~~^~~
# 1780|   	break;
# 1781|       case certIPAddress :
# 1782|-> 	secu_PrintIPAddress(out, &gname->name.other, "IP Address", level);
# 1783|   	break;
# 1784|       case certRegisterID :

Error: COMPILER_WARNING (CWE-704): [#def543]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1785:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1785 |         SECU_PrintObjectID( out, &gname->name.other, "Registered ID", level);
#      |                                                      ^~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1783|   	break;
# 1784|       case certRegisterID :
# 1785|-> 	SECU_PrintObjectID( out, &gname->name.other, "Registered ID", level);
# 1786|   	break;
# 1787|       case certX400Address :

Error: COMPILER_WARNING (CWE-704): [#def544]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1788:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1788 |         SECU_PrintAny(      out, &gname->name.other, "X400 Address", level);
#      |                                                      ^~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1786|   	break;
# 1787|       case certX400Address :
# 1788|-> 	SECU_PrintAny(      out, &gname->name.other, "X400 Address", level);
# 1789|   	break;
# 1790|       case certEDIPartyName :

Error: COMPILER_WARNING (CWE-704): [#def545]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1791:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1791 |         SECU_PrintAny(      out, &gname->name.other, "EDI Party", level);
#      |                                                      ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1789|   	break;
# 1790|       case certEDIPartyName :
# 1791|-> 	SECU_PrintAny(      out, &gname->name.other, "EDI Party", level);
# 1792|   	break;
# 1793|       default:

Error: COMPILER_WARNING (CWE-563): [#def546]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1802:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1802 | secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1800|   
# 1801|   static void
# 1802|-> secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level) 
# 1803|   {
# 1804|       CERTAuthKeyID *kid  = NULL;

Error: COMPILER_WARNING (CWE-704): [#def547]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAuthKeyIDExtension’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1808:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1808 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1806|   
# 1807|       if (!pool) {
# 1808|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1809|   	return;
# 1810|       }

Error: COMPILER_WARNING (CWE-704): [#def548]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1808:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1808 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1806|   
# 1807|       if (!pool) {
# 1808|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1809|   	return;
# 1810|       }

Error: COMPILER_WARNING (CWE-704): [#def549]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1813:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1813 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1811|       kid = CERT_DecodeAuthKeyID(pool, value);
# 1812|       if (!kid) {
# 1813|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1814|   	SECU_PrintAny(out, value, "Data", level);
# 1815|       } else {

Error: COMPILER_WARNING (CWE-704): [#def550]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1813:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1813 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1811|       kid = CERT_DecodeAuthKeyID(pool, value);
# 1812|       if (!kid) {
# 1813|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1814|   	SECU_PrintAny(out, value, "Data", level);
# 1815|       } else {

Error: COMPILER_WARNING (CWE-704): [#def551]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1814:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1814 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1812|       if (!kid) {
# 1813|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1814|-> 	SECU_PrintAny(out, value, "Data", level);
# 1815|       } else {
# 1816|   	int keyIDPresent  = (kid->keyID.data && kid->keyID.len);

Error: COMPILER_WARNING (CWE-704): [#def552]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1832:61: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1832 |             secu_PrintGeneralName(out, kid->authCertIssuer, "Issuer", level);
#      |                                                             ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1758:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1758 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1830|   	    SECU_PrintAsHex(out, &kid->keyID, "Key ID", level);
# 1831|   	if (issuerPresent)
# 1832|-> 	    secu_PrintGeneralName(out, kid->authCertIssuer, "Issuer", level);
# 1833|   	if (snPresent)
# 1834|   	    SECU_PrintInteger(out, &kid->authCertSerialNumber, 

Error: COMPILER_WARNING (CWE-704): [#def553]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1835:29: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1835 |                             "Serial Number", level);
#      |                             ^~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1833|   	if (snPresent)
# 1834|   	    SECU_PrintInteger(out, &kid->authCertSerialNumber, 
# 1835|-> 	                    "Serial Number", level);
# 1836|       }
# 1837|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def554]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAltNameExtension’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1849:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1849 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1847|   
# 1848|       if (!pool) {
# 1849|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1850|   	return;
# 1851|       }

Error: COMPILER_WARNING (CWE-704): [#def555]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1849:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1849 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1847|   
# 1848|       if (!pool) {
# 1849|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1850|   	return;
# 1851|       }

Error: COMPILER_WARNING (CWE-704): [#def556]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1858:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1858 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1856|   	    PORT_SetError(SEC_ERROR_EXTENSION_VALUE_INVALID);
# 1857|   	}
# 1858|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1859|   	SECU_PrintAny(out, value, "Data", level);
# 1860|       } else {

Error: COMPILER_WARNING (CWE-704): [#def557]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1858:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1858 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1856|   	    PORT_SetError(SEC_ERROR_EXTENSION_VALUE_INVALID);
# 1857|   	}
# 1858|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1859|   	SECU_PrintAny(out, value, "Data", level);
# 1860|       } else {

Error: COMPILER_WARNING (CWE-704): [#def558]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1859:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1859 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1857|   	}
# 1858|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1859|-> 	SECU_PrintAny(out, value, "Data", level);
# 1860|       } else {
# 1861|   	do {

Error: COMPILER_WARNING (CWE-563): [#def559]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1870:64: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1870 | secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1868|   
# 1869|   static void
# 1870|-> secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1871|   {
# 1872|       CERTCrlDistributionPoints * dPoints;

Error: COMPILER_WARNING (CWE-704): [#def560]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintCRLDistPtsExtension’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1876:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1876 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1874|   
# 1875|       if (!pool) {
# 1876|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1877|   	return;
# 1878|       }

Error: COMPILER_WARNING (CWE-704): [#def561]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1876:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1876 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1874|   
# 1875|       if (!pool) {
# 1876|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1877|   	return;
# 1878|       }

Error: COMPILER_WARNING (CWE-704): [#def562]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1893:59: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1893 |                 SECU_PrintAny(out, &pPoint->derDistPoint, "Point", level);
#      |                                                           ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1891|   #endif
# 1892|   	    } else if (pPoint->derDistPoint.data) {
# 1893|-> 		SECU_PrintAny(out, &pPoint->derDistPoint, "Point", level);
# 1894|   	    }
# 1895|   	    if (pPoint->reasons.data) {

Error: COMPILER_WARNING (CWE-704): [#def563]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1896:67: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDecodedBitString’ discards ‘const’ qualifier from pointer target type
# 1896 |                 secu_PrintDecodedBitString(out, &pPoint->reasons, "Reasons",
#      |                                                                   ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1188:57: note: expected ‘char *’ but argument is of type ‘const char *’
# 1188 | secu_PrintDecodedBitString(FILE *out, SECItem *i, char *m, int level)
#      |                                                   ~~~~~~^
# 1894|   	    }
# 1895|   	    if (pPoint->reasons.data) {
# 1896|-> 		secu_PrintDecodedBitString(out, &pPoint->reasons, "Reasons", 
# 1897|   		                           level);
# 1898|   	    }

Error: COMPILER_WARNING (CWE-704): [#def564]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1900:63: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1900 |                 secu_PrintGeneralName(out, pPoint->crlIssuer, "Issuer", level);
#      |                                                               ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1758:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1758 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1898|   	    }
# 1899|   	    if (pPoint->crlIssuer) {
# 1900|-> 		secu_PrintGeneralName(out, pPoint->crlIssuer, "Issuer", level);
# 1901|   	    }
# 1902|   	}

Error: COMPILER_WARNING (CWE-704): [#def565]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1904:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1904 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1902|   	}
# 1903|       } else {
# 1904|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1905|   	SECU_PrintAny(out, value, "Data", level);
# 1906|       }

Error: COMPILER_WARNING (CWE-704): [#def566]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1904:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1904 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1902|   	}
# 1903|       } else {
# 1904|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1905|   	SECU_PrintAny(out, value, "Data", level);
# 1906|       }

Error: COMPILER_WARNING (CWE-704): [#def567]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1905:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1905 |         SECU_PrintAny(out, value, "Data", level);
#      |                                   ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1903|       } else {
# 1904|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1905|-> 	SECU_PrintAny(out, value, "Data", level);
# 1906|       }
# 1907|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def568]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintSubtree’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1921:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1921 |             SECU_PrintInteger(out, &value->min, "Minimum", level+1);
#      |                                                 ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1919|   	secu_PrintGeneralName(out, &value->name, NULL, level);
# 1920|   	if (value->min.data)
# 1921|-> 	    SECU_PrintInteger(out, &value->min, "Minimum", level+1);
# 1922|   	if (value->max.data)
# 1923|   	    SECU_PrintInteger(out, &value->max, "Maximum", level+1);

Error: COMPILER_WARNING (CWE-704): [#def569]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1923:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 1923 |             SECU_PrintInteger(out, &value->max, "Maximum", level+1);
#      |                                                 ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 1921|   	    SECU_PrintInteger(out, &value->min, "Minimum", level+1);
# 1922|   	if (value->max.data)
# 1923|-> 	    SECU_PrintInteger(out, &value->max, "Maximum", level+1);
# 1924|   	value = CERT_GetNextNameConstraint(value);
# 1925|       } while (value != head);

Error: COMPILER_WARNING (CWE-563): [#def570]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1929:69: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1929 | secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                               ~~~~~~^~~
# 1927|   
# 1928|   static void
# 1929|-> secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1930|   {
# 1931|       CERTNameConstraints * cnstrnts;

Error: COMPILER_WARNING (CWE-704): [#def571]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintsExtension’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1935:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1935 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1933|   
# 1934|       if (!pool) {
# 1935|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1936|   	return;
# 1937|       }

Error: COMPILER_WARNING (CWE-704): [#def572]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1935:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1935 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1933|   
# 1934|       if (!pool) {
# 1935|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1936|   	return;
# 1937|       }

Error: COMPILER_WARNING (CWE-704): [#def573]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1940:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1940 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1938|       cnstrnts = CERT_DecodeNameConstraintsExtension(pool, value);
# 1939|       if (!cnstrnts) {
# 1940|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1941|       	SECU_PrintAny(out, value, "Raw", level);
# 1942|       } else {

Error: COMPILER_WARNING (CWE-704): [#def574]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1940:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1940 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1938|       cnstrnts = CERT_DecodeNameConstraintsExtension(pool, value);
# 1939|       if (!cnstrnts) {
# 1940|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1941|       	SECU_PrintAny(out, value, "Raw", level);
# 1942|       } else {

Error: COMPILER_WARNING (CWE-704): [#def575]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1941:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1941 |         SECU_PrintAny(out, value, "Raw", level);
#      |                                   ^~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1939|       if (!cnstrnts) {
# 1940|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1941|->     	SECU_PrintAny(out, value, "Raw", level);
# 1942|       } else {
# 1943|   	if (cnstrnts->permited)

Error: COMPILER_WARNING (CWE-704): [#def576]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1945:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNameConstraintSubtree’ discards ‘const’ qualifier from pointer target type
# 1945 |                                             "Permitted", level);
#      |                                             ^~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1913:39: note: expected ‘char *’ but argument is of type ‘const char *’
# 1913 |                                 char *msg, int level)
#      |                                 ~~~~~~^~~
# 1943|   	if (cnstrnts->permited)
# 1944|   	    secu_PrintNameConstraintSubtree(out, cnstrnts->permited, 
# 1945|-> 	                                    "Permitted", level);
# 1946|   	if (cnstrnts->excluded)
# 1947|   	    secu_PrintNameConstraintSubtree(out, cnstrnts->excluded, 

Error: COMPILER_WARNING (CWE-704): [#def577]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1948:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNameConstraintSubtree’ discards ‘const’ qualifier from pointer target type
# 1948 |                                             "Excluded", level);
#      |                                             ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1913:39: note: expected ‘char *’ but argument is of type ‘const char *’
# 1913 |                                 char *msg, int level)
#      |                                 ~~~~~~^~~
# 1946|   	if (cnstrnts->excluded)
# 1947|   	    secu_PrintNameConstraintSubtree(out, cnstrnts->excluded, 
# 1948|-> 	                                    "Excluded", level);
# 1949|       }
# 1950|       PORT_FreeArena(pool, PR_FALSE);

Error: COMPILER_WARNING (CWE-563): [#def578]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1955:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1955 | secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1953|   
# 1954|   static void
# 1955|-> secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
# 1956|   {
# 1957|       CERTAuthInfoAccess **infos = NULL;

Error: COMPILER_WARNING (CWE-704): [#def579]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintAuthorityInfoAcess’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1961:25: warning[-Wdiscarded-qualifiers]: passing argument 1 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1961 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:23: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                 ~~~~~~^~~~~~~~
# 1959|   
# 1960|       if (!pool) {
# 1961|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1962|   	return;
# 1963|       }

Error: COMPILER_WARNING (CWE-704): [#def580]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1961:34: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 1961 |         SECU_PrintError("Error", "Allocating new ArenaPool");
#      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 1959|   
# 1960|       if (!pool) {
# 1961|-> 	SECU_PrintError("Error", "Allocating new ArenaPool");
# 1962|   	return;
# 1963|       }

Error: COMPILER_WARNING (CWE-704): [#def581]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1966:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1966 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 1964|       infos = CERT_DecodeAuthInfoAccessExtension(pool, value);
# 1965|       if (!infos) {
# 1966|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1967|       	SECU_PrintAny(out, value, "Raw", level);
# 1968|       } else {

Error: COMPILER_WARNING (CWE-704): [#def582]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1966:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 1966 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 1964|       infos = CERT_DecodeAuthInfoAccessExtension(pool, value);
# 1965|       if (!infos) {
# 1966|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1967|       	SECU_PrintAny(out, value, "Raw", level);
# 1968|       } else {

Error: COMPILER_WARNING (CWE-704): [#def583]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1967:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1967 |         SECU_PrintAny(out, value, "Raw", level);
#      |                                   ^~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1965|       if (!infos) {
# 1966|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 1967|->     	SECU_PrintAny(out, value, "Raw", level);
# 1968|       } else {
# 1969|   	CERTAuthInfoAccess *info;

Error: COMPILER_WARNING (CWE-704): [#def584]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1972:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 1972 |                 SECU_PrintObjectID(out, &info->method, "Method", level);
#      |                                                        ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 1970|   	while (NULL != (info = *infos++)) {
# 1971|   	    if (info->method.data) {
# 1972|-> 		SECU_PrintObjectID(out, &info->method, "Method", level);
# 1973|   	    } else {
# 1974|   	    	SECU_Indent(out,level);

Error: COMPILER_WARNING (CWE-704): [#def585]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1978:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintGeneralName’ discards ‘const’ qualifier from pointer target type
# 1978 |                 secu_PrintGeneralName(out, info->location, "Location", level);
#      |                                                            ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1758:64: note: expected ‘char *’ but argument is of type ‘const char *’
# 1758 | secu_PrintGeneralName(FILE *out, CERTGeneralName *gname, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1976|   	    }
# 1977|   	    if (info->location) {
# 1978|-> 		secu_PrintGeneralName(out, info->location, "Location", level);
# 1979|   	    } else {
# 1980|   		SECU_PrintAny(out, &info->derLocation, "Location", level);

Error: COMPILER_WARNING (CWE-704): [#def586]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1980:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 1980 |                 SECU_PrintAny(out, &info->derLocation, "Location", level);
#      |                                                        ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 1978|   		secu_PrintGeneralName(out, info->location, "Location", level);
# 1979|   	    } else {
# 1980|-> 		SECU_PrintAny(out, &info->derLocation, "Location", level);
# 1981|   	    }
# 1982|   	}

Error: COMPILER_WARNING (CWE-704): [#def587]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintExtensions’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2003:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 2003 |             SECU_PrintObjectID(out, tmpitem, "Name", level);
#      |                                              ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 2001|   
# 2002|   	    tmpitem = &(*extensions)->id;
# 2003|-> 	    SECU_PrintObjectID(out, tmpitem, "Name", level);
# 2004|   
# 2005|   	    tmpitem = &(*extensions)->critical;

Error: COMPILER_WARNING (CWE-704): [#def588]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2016:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintX509InvalidDate’ discards ‘const’ qualifier from pointer target type
# 2016 |                    secu_PrintX509InvalidDate(out, tmpitem, "Date", level );
#      |                                                            ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1560:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 1560 | secu_PrintX509InvalidDate(FILE *out, SECItem *value, char *msg, int level)
#      |                                                      ~~~~~~^~~
# 2014|   	      	case SEC_OID_X509_INVALID_DATE:
# 2015|   		case SEC_OID_NS_CERT_EXT_CERT_RENEWAL_TIME:
# 2016|-> 		   secu_PrintX509InvalidDate(out, tmpitem, "Date", level );
# 2017|   		   break;
# 2018|   		case SEC_OID_X509_CERTIFICATE_POLICIES:

Error: COMPILER_WARNING (CWE-704): [#def589]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2019:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintPolicy’ discards ‘const’ qualifier from pointer target type
# 2019 |                    SECU_PrintPolicy(out, tmpitem, "Data", level );
#      |                                                   ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:286:63: note: expected ‘char *’ but argument is of type ‘const char *’
#  286 | extern void SECU_PrintPolicy(FILE *out, SECItem *value, char *msg, int level);
#      |                                                         ~~~~~~^~~
# 2017|   		   break;
# 2018|   		case SEC_OID_X509_CERTIFICATE_POLICIES:
# 2019|-> 		   SECU_PrintPolicy(out, tmpitem, "Data", level );
# 2020|   		   break;
# 2021|   		case SEC_OID_NS_CERT_EXT_BASE_URL:

Error: COMPILER_WARNING (CWE-704): [#def590]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2031:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
# 2031 |                     SECU_PrintString(out,tmpitem, "URL", level);
#      |                                                   ^~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:954:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  954 | SECU_PrintString(FILE *out, SECItem *si, char *m, int level)
#      |                                          ~~~~~~^
# 2029|   		case SEC_OID_NS_CERT_EXT_LOST_PASSWORD_URL:
# 2030|   		case SEC_OID_OCSP_RESPONDER:
# 2031|-> 		    SECU_PrintString(out,tmpitem, "URL", level);
# 2032|   		    break;
# 2033|   		case SEC_OID_NS_CERT_EXT_COMMENT:

Error: COMPILER_WARNING (CWE-704): [#def591]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2034:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
# 2034 |                     SECU_PrintString(out,tmpitem, "Comment", level);
#      |                                                   ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:954:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  954 | SECU_PrintString(FILE *out, SECItem *si, char *m, int level)
#      |                                          ~~~~~~^
# 2032|   		    break;
# 2033|   		case SEC_OID_NS_CERT_EXT_COMMENT:
# 2034|-> 		    SECU_PrintString(out,tmpitem, "Comment", level);
# 2035|   		    break;
# 2036|   		case SEC_OID_NS_CERT_EXT_SSL_SERVER_NAME:

Error: COMPILER_WARNING (CWE-704): [#def592]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2037:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintString’ discards ‘const’ qualifier from pointer target type
# 2037 |                     SECU_PrintString(out,tmpitem, "ServerName", level);
#      |                                                   ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:954:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  954 | SECU_PrintString(FILE *out, SECItem *si, char *m, int level)
#      |                                          ~~~~~~^
# 2035|   		    break;
# 2036|   		case SEC_OID_NS_CERT_EXT_SSL_SERVER_NAME:
# 2037|-> 		    SECU_PrintString(out,tmpitem, "ServerName", level);
# 2038|   		    break;
# 2039|   		case SEC_OID_NS_CERT_EXT_CERT_TYPE:

Error: COMPILER_WARNING (CWE-704): [#def593]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2040:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintNSCertType’ discards ‘const’ qualifier from pointer target type
# 2040 |                     secu_PrintNSCertType(out,tmpitem,"Data",level);
#      |                                                      ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1639:55: note: expected ‘char *’ but argument is of type ‘const char *’
# 1639 | secu_PrintNSCertType(FILE *out, SECItem *value, char *msg, int level)
#      |                                                 ~~~~~~^~~
# 2038|   		    break;
# 2039|   		case SEC_OID_NS_CERT_EXT_CERT_TYPE:
# 2040|-> 		    secu_PrintNSCertType(out,tmpitem,"Data",level);
# 2041|   		    break;
# 2042|   		case SEC_OID_X509_BASIC_CONSTRAINTS:

Error: COMPILER_WARNING (CWE-704): [#def594]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2043:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintBasicConstraints’ discards ‘const’ qualifier from pointer target type
# 2043 |                     secu_PrintBasicConstraints(out,tmpitem,"Data",level);
#      |                                                            ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1604:61: note: expected ‘char *’ but argument is of type ‘const char *’
# 1604 | secu_PrintBasicConstraints(FILE *out, SECItem *value, char *msg, int level) {
#      |                                                       ~~~~~~^~~
# 2041|   		    break;
# 2042|   		case SEC_OID_X509_BASIC_CONSTRAINTS:
# 2043|-> 		    secu_PrintBasicConstraints(out,tmpitem,"Data",level);
# 2044|   		    break;
# 2045|   		case SEC_OID_X509_EXT_KEY_USAGE:

Error: COMPILER_WARNING (CWE-704): [#def595]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2108:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 2108 |                     SECU_PrintAny(out, tmpitem, "Data", level);
#      |                                                 ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 2106|   
# 2107|   	        default:
# 2108|-> 		    SECU_PrintAny(out, tmpitem, "Data", level);
# 2109|   		break;
# 2110|   	    }

Error: COMPILER_WARNING (CWE-704): [#def596]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintName’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2128:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2128 |         str = "!Invalid AVA!";
#      |             ^
# 2126|       str = nameStr = CERT_NameToAscii(name);
# 2127|       if (!str) {
# 2128|->     	str = "!Invalid AVA!";
# 2129|       }
# 2130|       my.data = (unsigned char *)str;

Error: COMPILER_WARNING (CWE-477): [#def597]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘printflags’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2149:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2149 |     if (flags & CERTDB_VALID_PEER)
#      |     ^~
# 2147|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2148|   	    PORT_Strcat(trusts, "c");
# 2149|->     if (flags & CERTDB_VALID_PEER)
# 2150|   	if (!(flags & CERTDB_TRUSTED))
# 2151|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-477): [#def598]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2149:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2147|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2148|   	    PORT_Strcat(trusts, "c");
# 2149|->     if (flags & CERTDB_VALID_PEER)
# 2150|   	if (!(flags & CERTDB_TRUSTED))
# 2151|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-704): [#def599]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertNickname’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2192:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2192 |         name = "(NULL)";
#      |              ^
# 2190|       }
# 2191|       if (!name || !name[0]) {
# 2192|->         name = "(NULL)";
# 2193|       }
# 2194|   

Error: COMPILER_WARNING (CWE-758): [#def600]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2211:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_DecodeAndPrintExtensions’
# 2211 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2209|   
# 2210|   int
# 2211|-> SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
# 2212|   {
# 2213|       CERTCertExtension **extensions = NULL;

Error: COMPILER_WARNING (CWE-758): [#def601]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2232:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfExtensions’
# 2232 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 2230|   /* print a decoded SET OF or SEQUENCE OF Extensions */
# 2231|   int
# 2232|-> SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
# 2233|   {
# 2234|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def602]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSetOfExtensions’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2239:58: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_DecodeAndPrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2239 |         rv |= SECU_DecodeAndPrintExtensions(out, any[0], "", level);
#      |                                                          ^~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2211:62: note: expected ‘char *’ but argument is of type ‘const char *’
# 2211 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, char *m, int level)
#      |                                                        ~~~~~~^
# 2237|       }
# 2238|       while (any && any[0]) {
# 2239|->     	rv |= SECU_DecodeAndPrintExtensions(out, any[0], "", level);
# 2240|   	any++;
# 2241|       }

Error: COMPILER_WARNING (CWE-758): [#def603]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2247:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfAny’
# 2247 | SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~
# 2245|   /* print a decoded SET OF or SEQUENCE OF "ANY" */
# 2246|   int
# 2247|-> SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
# 2248|   {
# 2249|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def604]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSetOfAny’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2254:36: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 2254 |         SECU_PrintAny(out, any[0], "", level);
#      |                                    ^~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 2252|       }
# 2253|       while (any && any[0]) {
# 2254|->     	SECU_PrintAny(out, any[0], "", level);
# 2255|   	any++;
# 2256|       }

Error: COMPILER_WARNING (CWE-758): [#def605]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2261:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttribute’
# 2261 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~
# 2259|   
# 2260|   int
# 2261|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
# 2262|   {
# 2263|       int rv = 0;

Error: COMPILER_WARNING (CWE-563): [#def606]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2261:63: warning[-Wunused-parameter]: unused parameter ‘m’
# 2261 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
#      |                                                         ~~~~~~^
# 2259|   
# 2260|   int
# 2261|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, char *m, int level)
# 2262|   {
# 2263|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def607]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertAttribute’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2265:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintObjectID’ discards ‘const’ qualifier from pointer target type
# 2265 |     tag = SECU_PrintObjectID(out, &attr->attrType, "Attribute Type", level);
#      |                                                    ^~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1386:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1386 | SECU_PrintObjectID(FILE *out, SECItem *oid, char *m, int level)
#      |                                             ~~~~~~^
# 2263|       int rv = 0;
# 2264|       SECOidTag tag;
# 2265|->     tag = SECU_PrintObjectID(out, &attr->attrType, "Attribute Type", level);
# 2266|       if (tag == SEC_OID_PKCS9_EXTENSION_REQUEST) {
# 2267|   	rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);

Error: COMPILER_WARNING (CWE-704): [#def608]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2267:62: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintSetOfExtensions’ discards ‘const’ qualifier from pointer target type
# 2267 |         rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
#      |                                                              ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2232:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 2232 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, char *m, int level)
#      |                                                     ~~~~~~^
# 2265|       tag = SECU_PrintObjectID(out, &attr->attrType, "Attribute Type", level);
# 2266|       if (tag == SEC_OID_PKCS9_EXTENSION_REQUEST) {
# 2267|-> 	rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
# 2268|       } else {
# 2269|   	rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);

Error: COMPILER_WARNING (CWE-704): [#def609]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2269:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintSetOfAny’ discards ‘const’ qualifier from pointer target type
# 2269 |         rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);
#      |                                                       ^~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2247:52: note: expected ‘char *’ but argument is of type ‘const char *’
# 2247 | SECU_PrintSetOfAny(FILE *out, SECItem **any, char *m, int level)
#      |                                              ~~~~~~^
# 2267|   	rv = SECU_PrintSetOfExtensions(out, attr->attrValue, "Extensions", level);
# 2268|       } else {
# 2269|-> 	rv = SECU_PrintSetOfAny(out, attr->attrValue, "Attribute Values", level);
# 2270|       }
# 2271|       return rv;

Error: COMPILER_WARNING (CWE-758): [#def610]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2275:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttributes’
# 2275 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 2273|   
# 2274|   int
# 2275|-> SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
# 2276|   {
# 2277|       int rv = 0;

Error: COMPILER_WARNING (CWE-704): [#def611]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertificateRequest’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2307:42: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2307 |     SECU_PrintInteger(out, &cr->version, "Version", level+1);
#      |                                          ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2305|       /* Pretty print it out */
# 2306|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2307|->     SECU_PrintInteger(out, &cr->version, "Version", level+1);
# 2308|       SECU_PrintName(out, &cr->subject, "Subject", level+1);
# 2309|       secu_PrintSubjectPublicKeyInfo(out, arena, &cr->subjectPublicKeyInfo,

Error: COMPILER_WARNING (CWE-704): [#def612]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2308:39: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2308 |     SECU_PrintName(out, &cr->subject, "Subject", level+1);
#      |                                       ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2306|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2307|       SECU_PrintInteger(out, &cr->version, "Version", level+1);
# 2308|->     SECU_PrintName(out, &cr->subject, "Subject", level+1);
# 2309|       secu_PrintSubjectPublicKeyInfo(out, arena, &cr->subjectPublicKeyInfo,
# 2310|   			      "Subject Public Key Info", level+1);

Error: COMPILER_WARNING (CWE-704): [#def613]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2310:31: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘secu_PrintSubjectPublicKeyInfo’ discards ‘const’ qualifier from pointer target type
# 2310 |                               "Subject Public Key Info", level+1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1514:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 1514 |                        CERTSubjectPublicKeyInfo *i,  char *msg, int level)
#      |                                                      ~~~~~~^~~
# 2308|       SECU_PrintName(out, &cr->subject, "Subject", level+1);
# 2309|       secu_PrintSubjectPublicKeyInfo(out, arena, &cr->subjectPublicKeyInfo,
# 2310|-> 			      "Subject Public Key Info", level+1);
# 2311|       if (cr->attributes)
# 2312|   	SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level+1);

Error: COMPILER_WARNING (CWE-704): [#def614]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2312:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCertAttributes’ discards ‘const’ qualifier from pointer target type
# 2312 |         SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level+1);
#      |                                                       ^~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2275:66: note: expected ‘char *’ but argument is of type ‘const char *’
# 2275 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, char *m, int level)
#      |                                                            ~~~~~~^
# 2310|   			      "Subject Public Key Info", level+1);
# 2311|       if (cr->attributes)
# 2312|-> 	SECU_PrintCertAttributes(out, cr->attributes, "Attributes", level+1);
# 2313|       rv = 0;
# 2314|   loser:

Error: COMPILER_WARNING (CWE-704): [#def615]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCertificate’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2339:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 2339 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                      ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:46: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                        ~~~~~~^~~~~~~~
# 2337|       if (rv) {
# 2338|           SECU_Indent(out, level); 
# 2339|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 2340|   	SECU_PrintAny(out, der, "Raw", level);
# 2341|   	goto loser;

Error: COMPILER_WARNING (CWE-704): [#def616]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2339:47: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘SECU_PrintErrMsg’ discards ‘const’ qualifier from pointer target type
# 2339 |         SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
#      |                                               ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:108:62: note: expected ‘char *’ but argument is of type ‘const char *’
#  108 | SECU_PrintErrMsg(FILE *out, int level, char *progName, char *msg, ...)
#      |                                                        ~~~~~~^~~
# 2337|       if (rv) {
# 2338|           SECU_Indent(out, level); 
# 2339|-> 	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 2340|   	SECU_PrintAny(out, der, "Raw", level);
# 2341|   	goto loser;

Error: COMPILER_WARNING (CWE-704): [#def617]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2340:33: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAny’ discards ‘const’ qualifier from pointer target type
# 2340 |         SECU_PrintAny(out, der, "Raw", level);
#      |                                 ^~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1358:44: note: expected ‘char *’ but argument is of type ‘const char *’
# 1358 | SECU_PrintAny(FILE *out, SECItem *i, char *m, int level)
#      |                                      ~~~~~~^
# 2338|           SECU_Indent(out, level); 
# 2339|   	SECU_PrintErrMsg(out, level, "Error", "Parsing extension");
# 2340|-> 	SECU_PrintAny(out, der, "Raw", level);
# 2341|   	goto loser;
# 2342|       }

Error: COMPILER_WARNING (CWE-704): [#def618]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2348:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2348 |     SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
#      |                                              ^~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2346|       SECU_Indent(out, level+1); fprintf(out, "%s: %d (0x%x)\n", "Version", iv + 1, iv);
# 2347|   
# 2348|->     SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
# 2349|       SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);

Error: COMPILER_WARNING (CWE-704): [#def619]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2349:47: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2349 |     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
#      |                                               ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2347|   
# 2348|       SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
# 2349|->     SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|       secu_PrintValidity(out, &c->validity, "Validity", level+1);

Error: COMPILER_WARNING (CWE-704): [#def620]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2350:37: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2350 |     SECU_PrintName(out, &c->issuer, "Issuer", level+1);
#      |                                     ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2348|       SECU_PrintInteger(out, &c->serialNumber, "Serial Number", level+1);
# 2349|       SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|->     SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|       secu_PrintValidity(out, &c->validity, "Validity", level+1);
# 2352|       SECU_PrintName(out, &c->subject, "Subject", level+1);

Error: COMPILER_WARNING (CWE-704): [#def621]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2351:43: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintValidity’ discards ‘const’ qualifier from pointer target type
# 2351 |     secu_PrintValidity(out, &c->validity, "Validity", level+1);
#      |                                           ^~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1376:54: note: expected ‘char *’ but argument is of type ‘const char *’
# 1376 | secu_PrintValidity(FILE *out, CERTValidity *v, char *m, int level)
#      |                                                ~~~~~~^
# 2349|       SECU_PrintAlgorithmID(out, &c->signature, "Signature Algorithm", level+1);
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|->     secu_PrintValidity(out, &c->validity, "Validity", level+1);
# 2352|       SECU_PrintName(out, &c->subject, "Subject", level+1);
# 2353|       secu_PrintSubjectPublicKeyInfo(out, arena, &c->subjectPublicKeyInfo,

Error: COMPILER_WARNING (CWE-704): [#def622]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2352:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2352 |     SECU_PrintName(out, &c->subject, "Subject", level+1);
#      |                                      ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2350|       SECU_PrintName(out, &c->issuer, "Issuer", level+1);
# 2351|       secu_PrintValidity(out, &c->validity, "Validity", level+1);
# 2352|->     SECU_PrintName(out, &c->subject, "Subject", level+1);
# 2353|       secu_PrintSubjectPublicKeyInfo(out, arena, &c->subjectPublicKeyInfo,
# 2354|   			      "Subject Public Key Info", level+1);

Error: COMPILER_WARNING (CWE-704): [#def623]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2354:31: warning[-Wdiscarded-qualifiers]: passing argument 4 of ‘secu_PrintSubjectPublicKeyInfo’ discards ‘const’ qualifier from pointer target type
# 2354 |                               "Subject Public Key Info", level+1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1514:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 1514 |                        CERTSubjectPublicKeyInfo *i,  char *msg, int level)
#      |                                                      ~~~~~~^~~
# 2352|       SECU_PrintName(out, &c->subject, "Subject", level+1);
# 2353|       secu_PrintSubjectPublicKeyInfo(out, arena, &c->subjectPublicKeyInfo,
# 2354|-> 			      "Subject Public Key Info", level+1);
# 2355|       if (c->issuerID.data) 
# 2356|   	secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);

Error: COMPILER_WARNING (CWE-704): [#def624]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2356:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDecodedBitString’ discards ‘const’ qualifier from pointer target type
# 2356 |         secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);
#      |                                                       ^~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1188:57: note: expected ‘char *’ but argument is of type ‘const char *’
# 1188 | secu_PrintDecodedBitString(FILE *out, SECItem *i, char *m, int level)
#      |                                                   ~~~~~~^
# 2354|   			      "Subject Public Key Info", level+1);
# 2355|       if (c->issuerID.data) 
# 2356|-> 	secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);
# 2357|       if (c->subjectID.data) 
# 2358|   	secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);

Error: COMPILER_WARNING (CWE-704): [#def625]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2358:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintDecodedBitString’ discards ‘const’ qualifier from pointer target type
# 2358 |         secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);
#      |                                                        ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1188:57: note: expected ‘char *’ but argument is of type ‘const char *’
# 1188 | secu_PrintDecodedBitString(FILE *out, SECItem *i, char *m, int level)
#      |                                                   ~~~~~~^
# 2356|   	secu_PrintDecodedBitString(out, &c->issuerID, "Issuer Unique ID", level+1);
# 2357|       if (c->subjectID.data) 
# 2358|-> 	secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);
# 2359|       SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level+1);
# 2360|   loser:

Error: COMPILER_WARNING (CWE-704): [#def626]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2359:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2359 |     SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level+1);
#      |                                              ^~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1990:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 1990 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2357|       if (c->subjectID.data) 
# 2358|   	secu_PrintDecodedBitString(out, &c->subjectID, "Subject Unique ID", level+1);
# 2359|->     SECU_PrintExtensions(out, c->extensions, "Signed Extensions", level+1);
# 2360|   loser:
# 2361|       PORT_FreeArena(arena, PR_FALSE);

Error: COMPILER_WARNING (CWE-704): [#def627]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7EncContent’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2482:27: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2482 |                           "Content Encryption Algorithm", level+1);
#      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2480|   					  : "Unknown");
# 2481|       SECU_PrintAlgorithmID(out, &(src->contentEncAlg),
# 2482|-> 			  "Content Encryption Algorithm", level+1);
# 2483|       SECU_PrintAsHex(out, &(src->encContent), 
# 2484|   		    "Encrypted Content", level+1);

Error: COMPILER_WARNING (CWE-704): [#def628]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintRecipientInfo’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2496:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2496 |     SECU_PrintInteger(out, &(info->version), "Version", level + 1);
#      |                                              ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2494|   {
# 2495|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2496|->     SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2497|   
# 2498|       SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 

Error: COMPILER_WARNING (CWE-704): [#def629]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2498:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2498 |     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer",
#      |                                                       ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2496|       SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2497|   
# 2498|->     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 
# 2499|   		 level + 1);
# 2500|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 

Error: COMPILER_WARNING (CWE-704): [#def630]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2501:23: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2501 |                       "Serial Number", level + 1);
#      |                       ^~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2499|   		 level + 1);
# 2500|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 
# 2501|-> 		      "Serial Number", level + 1);
# 2502|   
# 2503|       /* Parse and display encrypted key */

Error: COMPILER_WARNING (CWE-704): [#def631]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2505:25: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2505 |                         "Key Encryption Algorithm", level + 1);
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2503|       /* Parse and display encrypted key */
# 2504|       SECU_PrintAlgorithmID(out, &(info->keyEncAlg), 
# 2505|-> 			"Key Encryption Algorithm", level + 1);
# 2506|       SECU_PrintAsHex(out, &(info->encKey), "Encrypted Key", level + 1);
# 2507|   }

Error: COMPILER_WARNING (CWE-704): [#def632]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintSignerInfo’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2521:46: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2521 |     SECU_PrintInteger(out, &(info->version), "Version", level + 1);
#      |                                              ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2519|       
# 2520|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2521|->     SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2522|   
# 2523|       SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 

Error: COMPILER_WARNING (CWE-704): [#def633]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2523:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2523 |     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer",
#      |                                                       ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2521|       SECU_PrintInteger(out, &(info->version), "Version", level + 1);	
# 2522|   
# 2523|->     SECU_PrintName(out, &(info->issuerAndSN->issuer), "Issuer", 
# 2524|   		 level + 1);
# 2525|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 

Error: COMPILER_WARNING (CWE-704): [#def634]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2526:23: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2526 |                       "Serial Number", level + 1);
#      |                       ^~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2524|   		 level + 1);
# 2525|       SECU_PrintInteger(out, &(info->issuerAndSN->serialNumber), 
# 2526|-> 		      "Serial Number", level + 1);
# 2527|     
# 2528|       SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",

Error: COMPILER_WARNING (CWE-704): [#def635]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2528:52: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2528 |     SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",
#      |                                                    ^~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2526|   		      "Serial Number", level + 1);
# 2527|     
# 2528|->     SECU_PrintAlgorithmID(out, &(info->digestAlg), "Digest Algorithm",
# 2529|   			  level + 1);
# 2530|       

Error: COMPILER_WARNING (CWE-704): [#def636]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2543:25: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2543 |                         "Digest Encryption Algorithm", level + 1);
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2541|       /* Parse and display signature */
# 2542|       SECU_PrintAlgorithmID(out, &(info->digestEncAlg), 
# 2543|-> 			"Digest Encryption Algorithm", level + 1);
# 2544|       SECU_PrintAsHex(out, &(info->encDigest), "Encrypted Digest", level + 1);
# 2545|       

Error: COMPILER_WARNING (CWE-704): [#def637]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintCRLInfo’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2574:54: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2574 |     SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
#      |                                                      ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2572|       SECU_Indent(out, level+1); 
# 2573|       	fprintf(out, "%s: %d (0x%x)\n", "Version", iv + 1, iv);
# 2574|->     SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
# 2575|   			  level + 1);
# 2576|       SECU_PrintName(out, &(crl->name), "Issuer", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def638]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2576:39: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintName’ discards ‘const’ qualifier from pointer target type
# 2576 |     SECU_PrintName(out, &(crl->name), "Issuer", level + 1);
#      |                                       ^~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2120:49: note: expected ‘char *’ but argument is of type ‘const char *’
# 2120 | SECU_PrintName(FILE *out, CERTName *name, char *msg, int level)
#      |                                           ~~~~~~^~~
# 2574|       SECU_PrintAlgorithmID(out, &(crl->signatureAlg), "Signature Algorithm",
# 2575|   			  level + 1);
# 2576|->     SECU_PrintName(out, &(crl->name), "Issuer", level + 1);
# 2577|       SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
# 2578|       if (crl->nextUpdate.data && crl->nextUpdate.len) /* is optional */

Error: COMPILER_WARNING (CWE-704): [#def639]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2577:51: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 2577 |     SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
#      |                                                   ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 2575|   			  level + 1);
# 2576|       SECU_PrintName(out, &(crl->name), "Issuer", level + 1);
# 2577|->     SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
# 2578|       if (crl->nextUpdate.data && crl->nextUpdate.len) /* is optional */
# 2579|   	SECU_PrintTimeChoice(out, &(crl->nextUpdate), "Next Update", level + 1);

Error: COMPILER_WARNING (CWE-704): [#def640]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2579:55: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 2579 |         SECU_PrintTimeChoice(out, &(crl->nextUpdate), "Next Update", level + 1);
#      |                                                       ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 2577|       SECU_PrintTimeChoice(out, &(crl->lastUpdate), "This Update", level + 1);
# 2578|       if (crl->nextUpdate.data && crl->nextUpdate.len) /* is optional */
# 2579|-> 	SECU_PrintTimeChoice(out, &(crl->nextUpdate), "Next Update", level + 1);
# 2580|       
# 2581|       if (crl->entries != NULL) {

Error: COMPILER_WARNING (CWE-704): [#def641]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2586:60: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2586 |             SECU_PrintInteger(out, &(entry->serialNumber), "Serial Number",
#      |                                                            ^~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2584|   	    sprintf(om, "Entry (%x):\n", iv); 
# 2585|   	    SECU_Indent(out, level + 1); fprintf(out, "%s", om);
# 2586|-> 	    SECU_PrintInteger(out, &(entry->serialNumber), "Serial Number",
# 2587|   			      level + 2);
# 2588|   	    SECU_PrintTimeChoice(out, &(entry->revocationDate), 

Error: COMPILER_WARNING (CWE-704): [#def642]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2589:34: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintTimeChoice’ discards ‘const’ qualifier from pointer target type
# 2589 |                                  "Revocation Date", level + 2);
#      |                                  ^~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1055:51: note: expected ‘char *’ but argument is of type ‘const char *’
# 1055 | SECU_PrintTimeChoice(FILE *out, SECItem *t, char *m, int level)
#      |                                             ~~~~~~^
# 2587|   			      level + 2);
# 2588|   	    SECU_PrintTimeChoice(out, &(entry->revocationDate), 
# 2589|-> 	                         "Revocation Date", level + 2);
# 2590|   	    SECU_PrintExtensions(out, entry->extensions, 
# 2591|   	                         "Entry Extensions", level + 2);

Error: COMPILER_WARNING (CWE-704): [#def643]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2591:34: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2591 |                                  "Entry Extensions", level + 2);
#      |                                  ^~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1990:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 1990 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2589|   	                         "Revocation Date", level + 2);
# 2590|   	    SECU_PrintExtensions(out, entry->extensions, 
# 2591|-> 	                         "Entry Extensions", level + 2);
# 2592|   	}
# 2593|       }

Error: COMPILER_WARNING (CWE-704): [#def644]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2594:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintExtensions’ discards ‘const’ qualifier from pointer target type
# 2594 |     SECU_PrintExtensions(out, crl->extensions, "CRL Extensions", level + 1);
#      |                                                ^~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1990:28: note: expected ‘char *’ but argument is of type ‘const char *’
# 1990 |                      char *msg, int level)
#      |                      ~~~~~~^~~
# 2592|   	}
# 2593|       }
# 2594|->     SECU_PrintExtensions(out, crl->extensions, "CRL Extensions", level + 1);
# 2595|   }
# 2596|   

Error: COMPILER_WARNING (CWE-704): [#def645]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Signed’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2613:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2613 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2611|   
# 2612|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2613|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2614|   
# 2615|       /* Parse and list digest algorithms (if any) */

Error: COMPILER_WARNING (CWE-704): [#def646]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2627:37: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7ContentInfo’ discards ‘const’ qualifier from pointer target type
# 2627 |                                     "Content Information", level + 1);
#      |                                     ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2462:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 2462 | secu_PrintPKCS7ContentInfo(FILE *, SEC_PKCS7ContentInfo *, char *, int);
#      |                                                            ^~~~~~
# 2625|       /* Now for the content */
# 2626|       rv = secu_PrintPKCS7ContentInfo(out, &(src->contentInfo), 
# 2627|-> 				    "Content Information", level + 1);
# 2628|       if (rv != 0)
# 2629|   	return rv;

Error: COMPILER_WARNING (CWE-704): [#def647]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2653:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2653 |                                   "Signature Algorithm", level+3);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2651|   	    SECU_Indent(out, level + 2);  fprintf(out, "%s:\n", om);
# 2652|   	    SECU_PrintAlgorithmID(out, &aCrl->signatureWrap.signatureAlgorithm, 
# 2653|-> 				  "Signature Algorithm", level+3);
# 2654|   	    DER_ConvertBitString(&aCrl->signatureWrap.signature);
# 2655|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",

Error: COMPILER_WARNING (CWE-704): [#def648]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2657:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCRLInfo’ discards ‘const’ qualifier from pointer target type
# 2657 |             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
#      |                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2563:50: note: expected ‘char *’ but argument is of type ‘const char *’
# 2563 | SECU_PrintCRLInfo(FILE *out, CERTCrl *crl, char *m, int level)
#      |                                            ~~~~~~^
# 2655|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",
# 2656|   			    level+3);
# 2657|-> 	    SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List", 
# 2658|   			  level + 3); 
# 2659|   	}

Error: COMPILER_WARNING (CWE-704): [#def649]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Enveloped’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2689:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2689 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2687|   
# 2688|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2689|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2690|   
# 2691|       /* Parse and list recipients (this is not optional) */

Error: COMPILER_WARNING (CWE-704): [#def650]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2703:31: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7EncContent’ discards ‘const’ qualifier from pointer target type
# 2703 |                               "Encrypted Content Information", level + 1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2470:33: note: expected ‘char *’ but argument is of type ‘const char *’
# 2470 |                           char *m, int level)
#      |                           ~~~~~~^
# 2701|   
# 2702|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 
# 2703|-> 			      "Encrypted Content Information", level + 1);
# 2704|   }
# 2705|   

Error: COMPILER_WARNING (CWE-704): [#def651]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7SignedAndEnveloped’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2724:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2724 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2722|   
# 2723|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2724|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2725|   
# 2726|       /* Parse and list recipients (this is not optional) */

Error: COMPILER_WARNING (CWE-704): [#def652]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2748:31: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7EncContent’ discards ‘const’ qualifier from pointer target type
# 2748 |                               "Encrypted Content Information", level + 1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2470:33: note: expected ‘char *’ but argument is of type ‘const char *’
# 2470 |                           char *m, int level)
#      |                           ~~~~~~^
# 2746|   
# 2747|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 
# 2748|-> 			      "Encrypted Content Information", level + 1);
# 2749|   
# 2750|       /* Parse and list certificates (if any) */

Error: COMPILER_WARNING (CWE-704): [#def653]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2772:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2772 |                                   "Signature Algorithm", level+3);
#      |                                   ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2770|   	    SECU_Indent(out, level + 2);  fprintf(out, "%s:\n", om);
# 2771|   	    SECU_PrintAlgorithmID(out, &aCrl->signatureWrap.signatureAlgorithm, 
# 2772|-> 				  "Signature Algorithm", level+3);
# 2773|   	    DER_ConvertBitString(&aCrl->signatureWrap.signature);
# 2774|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",

Error: COMPILER_WARNING (CWE-704): [#def654]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2776:48: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintCRLInfo’ discards ‘const’ qualifier from pointer target type
# 2776 |             SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List",
#      |                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2563:50: note: expected ‘char *’ but argument is of type ‘const char *’
# 2563 | SECU_PrintCRLInfo(FILE *out, CERTCrl *crl, char *m, int level)
#      |                                            ~~~~~~^
# 2774|   	    SECU_PrintAsHex(out, &aCrl->signatureWrap.signature, "Signature",
# 2775|   			    level+3);
# 2776|-> 	    SECU_PrintCRLInfo(out, &aCrl->crl, "Certificate Revocation List", 
# 2777|   			  level + 3); 
# 2778|   	}

Error: COMPILER_WARNING (CWE-704): [#def655]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Encrypted’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2829:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2829 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2827|   {
# 2828|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2829|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2830|   
# 2831|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 

Error: COMPILER_WARNING (CWE-704): [#def656]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2832:31: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7EncContent’ discards ‘const’ qualifier from pointer target type
# 2832 |                               "Encrypted Content Information", level + 1);
#      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2470:33: note: expected ‘char *’ but argument is of type ‘const char *’
# 2470 |                           char *m, int level)
#      |                           ~~~~~~^
# 2830|   
# 2831|       secu_PrintPKCS7EncContent(out, &src->encContentInfo, 
# 2832|-> 			      "Encrypted Content Information", level + 1);
# 2833|   }
# 2834|   

Error: COMPILER_WARNING (CWE-704): [#def657]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘secu_PrintPKCS7Digested’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2844:45: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintInteger’ discards ‘const’ qualifier from pointer target type
# 2844 |     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
#      |                                             ^~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:897:48: note: expected ‘char *’ but argument is of type ‘const char *’
#  897 | SECU_PrintInteger(FILE *out, SECItem *i, char *m, int level)
#      |                                          ~~~~~~^
# 2842|   {
# 2843|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 2844|->     SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2845|       
# 2846|       SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",

Error: COMPILER_WARNING (CWE-704): [#def658]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2846:49: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 2846 |     SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
#      |                                                 ^~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 2844|       SECU_PrintInteger(out, &(src->version), "Version", level + 1);
# 2845|       
# 2846|->     SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
# 2847|   			  level + 1);
# 2848|       secu_PrintPKCS7ContentInfo(out, &src->contentInfo, "Content Information",

Error: COMPILER_WARNING (CWE-704): [#def659]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2848:56: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘secu_PrintPKCS7ContentInfo’ discards ‘const’ qualifier from pointer target type
# 2848 |     secu_PrintPKCS7ContentInfo(out, &src->contentInfo, "Content Information",
#      |                                                        ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2462:60: note: expected ‘char *’ but argument is of type ‘const char *’
# 2462 | secu_PrintPKCS7ContentInfo(FILE *, SEC_PKCS7ContentInfo *, char *, int);
#      |                                                            ^~~~~~
# 2846|       SECU_PrintAlgorithmID(out, &src->digestAlg, "Digest Algorithm",
# 2847|   			  level + 1);
# 2848|->     secu_PrintPKCS7ContentInfo(out, &src->contentInfo, "Content Information",
# 2849|   			       level + 1);
# 2850|       SECU_PrintAsHex(out, &src->digest, "Digest", level + 1);  

Error: COMPILER_WARNING (CWE-758): [#def660]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2946:1: warning[-Wmissing-prototypes]: no previous prototype for ‘printFlags’
# 2946 | printFlags(FILE *out, unsigned int flags, int level)
#      | ^~~~~~~~~~
# 2944|   
# 2945|   void
# 2946|-> printFlags(FILE *out, unsigned int flags, int level)
# 2947|   {
# 2948|       if ( flags & CERTDB_VALID_PEER ) {

Error: COMPILER_WARNING (CWE-477): [#def661]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘printFlags’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2948:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2948 |     if ( flags & CERTDB_VALID_PEER ) {
#      |     ^~
# 2946|   printFlags(FILE *out, unsigned int flags, int level)
# 2947|   {
# 2948|->     if ( flags & CERTDB_VALID_PEER ) {
# 2949|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2950|       }

Error: COMPILER_WARNING (CWE-477): [#def662]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2948:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2946|   printFlags(FILE *out, unsigned int flags, int level)
# 2947|   {
# 2948|->     if ( flags & CERTDB_VALID_PEER ) {
# 2949|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2950|       }

Error: COMPILER_WARNING (CWE-704): [#def663]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintSignedData’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3010:35: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘inner’ discards ‘const’ qualifier from pointer target type
# 3010 |     rv = (*inner)(out, &sd->data, "Data", level+1);
#      |                                   ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3010:35: note: expected ‘char *’ but argument is of type ‘const char *’
# 3008|   
# 3009|       SECU_Indent(out, level); fprintf(out, "%s:\n", m);
# 3010|->     rv = (*inner)(out, &sd->data, "Data", level+1);
# 3011|   
# 3012|       SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",

Error: COMPILER_WARNING (CWE-704): [#def664]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3012:57: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintAlgorithmID’ discards ‘const’ qualifier from pointer target type
# 3012 |     SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",
#      |                                                         ^~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:1416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 1416 | SECU_PrintAlgorithmID(FILE *out, SECAlgorithmID *a, char *m, int level)
#      |                                                     ~~~~~~^
# 3010|       rv = (*inner)(out, &sd->data, "Data", level+1);
# 3011|   
# 3012|->     SECU_PrintAlgorithmID(out, &sd->signatureAlgorithm, "Signature Algorithm",
# 3013|   			  level+1);
# 3014|       DER_ConvertBitString(&sd->signature);

Error: COMPILER_WARNING (CWE-704): [#def665]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3016:38: warning[-Wdiscarded-qualifiers]: passing argument 3 of ‘SECU_PrintFingerprints’ discards ‘const’ qualifier from pointer target type
# 3016 |     SECU_PrintFingerprints(out, der, "Fingerprint", level+1);
#      |                                      ^~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:2416:59: note: expected ‘char *’ but argument is of type ‘const char *’
# 2416 | SECU_PrintFingerprints(FILE *out, SECItem *derCert, char *m, int level)
#      |                                                     ~~~~~~^
# 3014|       DER_ConvertBitString(&sd->signature);
# 3015|       SECU_PrintAsHex(out, &sd->signature, "Signature", level+1);
# 3016|->     SECU_PrintFingerprints(out, der, "Fingerprint", level+1);
# 3017|   loser:
# 3018|       PORT_FreeArena(arena, PR_FALSE);

Error: COMPILER_WARNING (CWE-563): [#def666]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_ParseCommandLine’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3024:52: warning[-Wunused-parameter]: unused parameter ‘progName’
# 3024 | SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
#      |                                              ~~~~~~^~~~~~~~
# 3022|   
# 3023|   SECStatus
# 3024|-> SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
# 3025|   {
# 3026|       PRBool found;

Error: CPPCHECK_WARNING (CWE-476): [#def667]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3036: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3034|   
# 3035|       for (i=0; i<cmd->numCommands; i++) {
# 3036|-> 	optstring[j++] = cmd->commands[i].flag;
# 3037|       }
# 3038|       for (i=0; i<cmd->numOptions; i++) {

Error: CPPCHECK_WARNING (CWE-476): [#def668]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3039: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3037|       }
# 3038|       for (i=0; i<cmd->numOptions; i++) {
# 3039|-> 	optstring[j++] = cmd->options[i].flag;
# 3040|   	if (cmd->options[i].needsArg)
# 3041|   	    optstring[j++] = ':';

Error: CPPCHECK_WARNING (CWE-476): [#def669]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3043: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3041|   	    optstring[j++] = ':';
# 3042|       }
# 3043|->     optstring[j] = '\0';
# 3044|       optstate = PL_CreateOptState(argc, argv, optstring);
# 3045|   

Error: COMPILER_WARNING (CWE-195): [#def670]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_PrintPRandOSError’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3224:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3224 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3222|       char buffer[513];
# 3223|       PRInt32     errLen = PR_GetErrorTextLength();
# 3224|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3225|           PR_GetErrorText(buffer);
# 3226|       }

Error: COMPILER_WARNING (CWE-704): [#def671]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3227:31: warning[-Wdiscarded-qualifiers]: passing argument 2 of ‘SECU_PrintError’ discards ‘const’ qualifier from pointer target type
# 3227 |     SECU_PrintError(progName, "function failed");
#      |                               ^~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:128:39: note: expected ‘char *’ but argument is of type ‘const char *’
#  128 | SECU_PrintError(char *progName, char *msg, ...)
#      |                                 ~~~~~~^~~
# 3225|           PR_GetErrorText(buffer);
# 3226|       }
# 3227|->     SECU_PrintError(progName, "function failed");
# 3228|       if (errLen > 0 && errLen < sizeof buffer) {
# 3229|           PR_fprintf(PR_STDERR, "\t%s\n", buffer);

Error: COMPILER_WARNING (CWE-195): [#def672]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3228:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3228 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3226|       }
# 3227|       SECU_PrintError(progName, "function failed");
# 3228|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3229|           PR_fprintf(PR_STDERR, "\t%s\n", buffer);
# 3230|       }

Error: COMPILER_WARNING (CWE-704): [#def673]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3288:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3288 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3286|   	    switch (node->error) {
# 3287|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3288|-> 		flags = (unsigned int)node->arg;
# 3289|   		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING (CWE-704): [#def674]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3288:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3286|   	    switch (node->error) {
# 3287|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3288|-> 		flags = (unsigned int)node->arg;
# 3289|   		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING: [#def675]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3289:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3289 |                 switch (flags) {
#      |                 ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3303:13: note: here
# 3303 |             case SEC_ERROR_INADEQUATE_CERT_TYPE:
#      |             ^~~~
# 3287|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3288|   		flags = (unsigned int)node->arg;
# 3289|-> 		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:
# 3291|   		    errstr = "Cert cannot sign.";

Error: COMPILER_WARNING (CWE-704): [#def676]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3291:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3291 |                     errstr = "Cert cannot sign.";
#      |                            ^
# 3289|   		switch (flags) {
# 3290|   		case KU_DIGITAL_SIGNATURE:
# 3291|-> 		    errstr = "Cert cannot sign.";
# 3292|   		    break;
# 3293|   		case KU_KEY_ENCIPHERMENT:

Error: COMPILER_WARNING (CWE-704): [#def677]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3294:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3294 |                     errstr = "Cert cannot encrypt.";
#      |                            ^
# 3292|   		    break;
# 3293|   		case KU_KEY_ENCIPHERMENT:
# 3294|-> 		    errstr = "Cert cannot encrypt.";
# 3295|   		    break;
# 3296|   		case KU_KEY_CERT_SIGN:

Error: COMPILER_WARNING (CWE-704): [#def678]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3297:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3297 |                     errstr = "Cert cannot sign other certs.";
#      |                            ^
# 3295|   		    break;
# 3296|   		case KU_KEY_CERT_SIGN:
# 3297|-> 		    errstr = "Cert cannot sign other certs.";
# 3298|   		    break;
# 3299|   		default:

Error: COMPILER_WARNING (CWE-704): [#def679]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3300:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3300 |                     errstr = "[unknown usage].";
#      |                            ^
# 3298|   		    break;
# 3299|   		default:
# 3300|-> 		    errstr = "[unknown usage].";
# 3301|   		    break;
# 3302|   		}

Error: COMPILER_WARNING (CWE-704): [#def680]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3304:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3304 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3302|   		}
# 3303|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3304|-> 		flags = (unsigned int)node->arg;
# 3305|   		switch (flags) {
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING (CWE-704): [#def681]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3304:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3302|   		}
# 3303|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3304|-> 		flags = (unsigned int)node->arg;
# 3305|   		switch (flags) {
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING: [#def682]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3305:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3305 |                 switch (flags) {
#      |                 ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3329:13: note: here
# 3329 |             case SEC_ERROR_UNKNOWN_ISSUER:
#      |             ^~~~
# 3303|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3304|   		flags = (unsigned int)node->arg;
# 3305|-> 		switch (flags) {
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3307|   		case NS_CERT_TYPE_SSL_SERVER:

Error: COMPILER_WARNING (CWE-704): [#def683]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3308:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3308 |                     errstr = "Cert cannot be used for SSL.";
#      |                            ^
# 3306|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3307|   		case NS_CERT_TYPE_SSL_SERVER:
# 3308|-> 		    errstr = "Cert cannot be used for SSL.";
# 3309|   		    break;
# 3310|   		case NS_CERT_TYPE_SSL_CA:

Error: COMPILER_WARNING (CWE-704): [#def684]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3311:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3311 |                     errstr = "Cert cannot be used as an SSL CA.";
#      |                            ^
# 3309|   		    break;
# 3310|   		case NS_CERT_TYPE_SSL_CA:
# 3311|-> 		    errstr = "Cert cannot be used as an SSL CA.";
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_EMAIL:

Error: COMPILER_WARNING (CWE-704): [#def685]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3314:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3314 |                     errstr = "Cert cannot be used for SMIME.";
#      |                            ^
# 3312|   		    break;
# 3313|   		case NS_CERT_TYPE_EMAIL:
# 3314|-> 		    errstr = "Cert cannot be used for SMIME.";
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL_CA:

Error: COMPILER_WARNING (CWE-704): [#def686]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3317:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3317 |                     errstr = "Cert cannot be used as an SMIME CA.";
#      |                            ^
# 3315|   		    break;
# 3316|   		case NS_CERT_TYPE_EMAIL_CA:
# 3317|-> 		    errstr = "Cert cannot be used as an SMIME CA.";
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_OBJECT_SIGNING:

Error: COMPILER_WARNING (CWE-704): [#def687]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3320:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3320 |                     errstr = "Cert cannot be used for object signing.";
#      |                            ^
# 3318|   		    break;
# 3319|   		case NS_CERT_TYPE_OBJECT_SIGNING:
# 3320|-> 		    errstr = "Cert cannot be used for object signing.";
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: COMPILER_WARNING (CWE-704): [#def688]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3323:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3323 |                     errstr = "Cert cannot be used as an object signing CA.";
#      |                            ^
# 3321|   		    break;
# 3322|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3323|-> 		    errstr = "Cert cannot be used as an object signing CA.";
# 3324|   		    break;
# 3325|   		default:

Error: COMPILER_WARNING (CWE-704): [#def689]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3326:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3326 |                     errstr = "[unknown usage].";
#      |                            ^
# 3324|   		    break;
# 3325|   		default:
# 3326|-> 		    errstr = "[unknown usage].";
# 3327|   		    break;
# 3328|   		}

Error: COMPILER_WARNING (CWE-195): [#def690]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_StoreCRL’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3388:62: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘unsigned int’
# 3388 |             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
#      |                                                              ^~
# 3386|                          NS_CRL_TRAILER);
# 3387|           } else {
# 3388|->             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
# 3389|                   return SECFailure;
# 3390|               }

Error: COMPILER_WARNING (CWE-805): [#def691]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_DerSignDataCRL’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3544:30: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘memset’ call is the same expression as the destination; did you mean to dereference it?
# 3544 |     PORT_Memset(sd, 0, sizeof(sd));
#      |                              ^
# 3542|   
# 3543|       /* Fill out SignedData object */
# 3544|->     PORT_Memset(sd, 0, sizeof(sd));
# 3545|       sd->data.data = buf;
# 3546|       sd->data.len = len;

Error: COMPILER_WARNING (CWE-563): [#def692]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c: scope_hint: In function ‘SECU_FindCrlIssuer’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/secutil.c:3604:35: warning[-Wunused-parameter]: unused parameter ‘authorityKeyID’
# 3604 |                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
#      |                    ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
# 3602|   CERTCertificate *
# 3603|   SECU_FindCrlIssuer(CERTCertDBHandle *dbhandle, SECItem* subject,
# 3604|->                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
# 3605|   {
# 3606|       CERTCertificate *issuerCert = NULL;

Error: COMPILER_WARNING (CWE-252): [#def693]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c: scope_hint: In function ‘TKS_ClearScreen’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c:351:5: warning[-Wunused-result]: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’
#  351 |     system( "tput clear" );
#      |     ^~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/version.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#  349|   {
#  350|   #if defined(XP_UNIX) && !defined(VMS)
#  351|->     system( "tput clear" );
#  352|   #else
#  353|       system( "cls" );

Error: COMPILER_WARNING (CWE-563): [#def694]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c:383:20: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  383 |     int            rv = 0;
#      |                    ^~
#  381|       int            count;
#  382|       int            c;
#  383|->     int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;

Error: COMPILER_WARNING (CWE-563): [#def695]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c:385:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_min’ set but not used
#  385 |     cc_t           orig_cc_min;
#      |                    ^~~~~~~~~~~
#  383|       int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|->     cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;

Error: COMPILER_WARNING (CWE-563): [#def696]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c:386:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_time’ set but not used
#  386 |     cc_t           orig_cc_time;
#      |                    ^~~~~~~~~~~~
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;
#  386|->     cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;
#  388|       struct termios tio;

Error: COMPILER_WARNING (CWE-563): [#def697]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c:387:20: warning[-Wunused-but-set-variable]: variable ‘orig_lflag’ set but not used
#  387 |     tcflag_t       orig_lflag;
#      |                    ^~~~~~~~~~
#  385|       cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|->     tcflag_t       orig_lflag;
#  388|       struct termios tio;
#  389|   #endif

Error: COMPILER_WARNING: [#def698]
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c: scope_hint: In function ‘TKS_TypeProceedToContinue’
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/util.c:390:60: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (10 chars into 9 available)
#  390 |     char           keystrokes[KEYSTROKES_TO_PROCEED + 1] = "\0\0\0\0\0\0\0\0\0";
#      |                                                            ^~~~~~~~~~~~~~~~~~~~
#  388|       struct termios tio;
#  389|   #endif
#  390|->     char           keystrokes[KEYSTROKES_TO_PROCEED + 1] = "\0\0\0\0\0\0\0\0\0";
#  391|   
#  392|       /* display the continuation message */

Error: COMPILER_WARNING (CWE-563): [#def699]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/b64.c: scope_hint: In function ‘ldif_base64_encode_internal’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/b64.c:38:21: warning[-Wunused-but-set-variable]: variable ‘len’ set but not used
#   38 |     int     i, pad, len;
#      |                     ^~~
#   36|       char        *out;
#   37|       unsigned long   bits;
#   38|->     int     i, pad, len;
#   39|   
#   40|       len = 0;

Error: COMPILER_WARNING (CWE-758): [#def700]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/b64.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/setpin/b64.c:98:1: warning[-Wmissing-prototypes]: no previous prototype for ‘ldif_base64_encode’
#   98 | ldif_base64_encode( unsigned char *src, char *dst, int srclen, int lenused )
#      | ^~~~~~~~~~~~~~~~~~
#   96|   
#   97|   int
#   98|-> ldif_base64_encode( unsigned char *src, char *dst, int srclen, int lenused )
#   99|   {
#  100|       return ldif_base64_encode_internal( src, dst, srclen, lenused, 200);

Error: CPPCHECK_WARNING (CWE-476): [#def701]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:103: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: arg
#  101|     OPTION *new_opt;
#  102|   
#  103|->   if (!strncmp(arg,"optfile=",8)) {
#  104|        return OPT_parseOptFile(&arg[8],validlist);
#  105|     }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def702]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:103:8: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘arg’ where non-null expected
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:166:8: enter_function: entry to ‘OPT_parseOptions’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:170:3: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:171:3: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:171:3: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:172:3: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:172:3: branch_true: following ‘true’ branch (when ‘av’ is non-NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:174:6: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:174:6: branch_false: following ‘false’ branch (when ‘ac != 1’)...
 branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:176:13: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:177:30: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:177:9: call_function: calling ‘OPT_parseArgument’ from ‘OPT_parseOptions’
#  101|     OPTION *new_opt;
#  102|   
#  103|->   if (!strncmp(arg,"optfile=",8)) {
#  104|        return OPT_parseOptFile(&arg[8],validlist);
#  105|     }

Error: COMPILER_WARNING (CWE-704): [#def703]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c: scope_hint: In function ‘OPT_parseArgument’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:104:13: warning[-Wdiscarded-qualifiers]: return discards ‘const’ qualifier from pointer target type
#  104 |      return OPT_parseOptFile(&arg[8],validlist);
#      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  102|   
#  103|     if (!strncmp(arg,"optfile=",8)) {
#  104|->      return OPT_parseOptFile(&arg[8],validlist);
#  105|     }
#  106|   

Error: COMPILER_WARNING (CWE-704): [#def704]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:104:13: warning[-Wdiscarded-qualifiers]: return discards ‘const’ qualifier from pointer target type
#  102|   
#  103|     if (!strncmp(arg,"optfile=",8)) {
#  104|->      return OPT_parseOptFile(&arg[8],validlist);
#  105|     }
#  106|   

Error: CPPCHECK_WARNING (CWE-476): [#def705]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:109: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_opt
#  107|     new_opt = (OPTION*)malloc(sizeof(OPTION));
#  108|     
#  109|->   new_opt->next = NULL;
#  110|     new_opt->name = strdup(arg);
#  111|     eq = strchr(new_opt->name,'=');

Error: GCC_ANALYZER_WARNING (CWE-476): [#def706]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:109:3: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘new_opt’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:107:22: acquire_memory: this call could return NULL
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:109:3: danger: ‘new_opt’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  107|     new_opt = (OPTION*)malloc(sizeof(OPTION));
#  108|     
#  109|->   new_opt->next = NULL;
#  110|     new_opt->name = strdup(arg);
#  111|     eq = strchr(new_opt->name,'=');

Error: CPPCHECK_WARNING (CWE-476): [#def707]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:110: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: arg
#  108|     
#  109|     new_opt->next = NULL;
#  110|->   new_opt->name = strdup(arg);
#  111|     eq = strchr(new_opt->name,'=');
#  112|     if (eq) {

Error: CPPCHECK_WARNING (CWE-476): [#def708]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:110: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_opt
#  108|     
#  109|     new_opt->next = NULL;
#  110|->   new_opt->name = strdup(arg);
#  111|     eq = strchr(new_opt->name,'=');
#  112|     if (eq) {

Error: CPPCHECK_WARNING (CWE-476): [#def709]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:111: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_opt
#  109|     new_opt->next = NULL;
#  110|     new_opt->name = strdup(arg);
#  111|->   eq = strchr(new_opt->name,'=');
#  112|     if (eq) {
#  113|       *eq = 0;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def710]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:111:8: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘strdup(arg)’ where non-null expected
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:110:19: acquire_memory: this call could return NULL
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:111:8: danger: argument 1 (‘strdup(arg)’) from [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#argument 1 of ‘__builtin_strchr’ must be non-null
#  109|     new_opt->next = NULL;
#  110|     new_opt->name = strdup(arg);
#  111|->   eq = strchr(new_opt->name,'=');
#  112|     if (eq) {
#  113|       *eq = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def711]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:115: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_opt
#  113|       *eq = 0;
#  114|     }
#  115|->   new_opt->value = strchr(arg,'=');
#  116|    
#  117|   

Error: CPPCHECK_WARNING (CWE-476): [#def712]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:118: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_opt
#  116|    
#  117|   
#  118|->   if (new_opt->value != NULL) {
#  119|       new_opt->value++;
#  120|     }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def713]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:122:7: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(&buffer)’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:166:8: enter_function: entry to ‘OPT_parseOptions’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:170:3: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:171:3: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:171:3: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:172:3: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:172:3: branch_true: following ‘true’ branch (when ‘av’ is non-NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:174:6: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:174:6: branch_false: following ‘false’ branch (when ‘ac != 1’)...
 branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:176:13: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:177:30: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:177:9: call_function: calling ‘OPT_parseArgument’ from ‘OPT_parseOptions’
#  120|     }
#  121|   
#  122|->   if (option_list == NULL) {
#  123|       option_list = new_opt;
#  124|       last_option = new_opt;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def714]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:144:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘error’ where non-null expected
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:112:6: branch_false: following ‘false’ branch (when ‘eq’ is NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:115:20: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:118:6: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:122:7: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:130:6: branch_false: following ‘false’ branch (when ‘validlist’ is non-NULL)...
 branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:143:19: acquire_memory: this call could return NULL
pki-11.8.0-beta6/base/tools/src/main/native/setpin/options.c:144:3: danger: argument 1 (‘error’) from [(9)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/8) could be NULL where non-null expected
#argument 1 of ‘__builtin_sprintf’ must be non-null
#  142|   
#  143|     error = (char *)malloc(strlen(INV_ARG)+strlen(new_opt->name)+5);
#  144|->   sprintf(error,INV_ARG,new_opt->name);
#  145|   
#  146|     return error;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def715]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:117:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘errbuf’ where non-null expected
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1056:6: enter_function: entry to ‘initrandom’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1068:9: call_function: calling ‘exitError’ from ‘initrandom’
#argument 1 of ‘__builtin_sprintf’ must be non-null
#  115|       errbuf = malloc(strlen(errstring)+strlen(programName)+10);
#  116|   
#  117|->     sprintf(errbuf,"%s error : %s\n",programName,errstring);
#  118|       fputs(errbuf,stderr);
#  119|       exit(errcode);

Error: COMPILER_WARNING (CWE-758): [#def716]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:138:8: warning[-Wmissing-prototypes]: no previous prototype for ‘trim_strdup’
#  138 | char * trim_strdup(char *s)
#      |        ^~~~~~~~~~~
#  136|     the duplicate string begins with the first non-whitespace character */
#  137|   
#  138|-> char * trim_strdup(char *s)
#  139|   {
#  140|       while (*s == ' ' || *s == '\t') {

Error: COMPILER_WARNING (CWE-758): [#def717]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:147:6: warning[-Wmissing-prototypes]: no previous prototype for ‘readInputFile’
#  147 | void readInputFile() {
#      |      ^~~~~~~~~~~~~
#  145|   }
#  146|   
#  147|-> void readInputFile() {
#  148|       int more_to_read=1;
#  149|       char *thedn = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def718]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:204:34: warning[-Wanalyzer-malloc-leak]: leak of ‘thepin’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:147:6: enter_function: entry to ‘readInputFile’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:174:20: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:181:22: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:183:20: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:184:29: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:184:29: call_function: calling ‘trim_strdup’ from ‘readInputFile’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:184:29: return_function: returning to ‘readInputFile’ from ‘trim_strdup’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:185:24: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:190:23: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:198:16: branch_true: following ‘true’ branch (when ‘thepin’ is NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:199:26: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:199:26: acquire_memory: allocated here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:202:16: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:204:34: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:204:34: danger: ‘thepin’ leaks here; was allocated at [(15)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/14)
#  202|               if (thedn && thepin) {
#  203|   
#  204|->                checkdn = (char*) PL_HashTableLookup(pinHashTable, thedn);
#  205|                  if (checkdn) {
#  206|                      char msg[256];

Error: GCC_ANALYZER_WARNING (CWE-401): [#def719]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:213:16: warning[-Wanalyzer-malloc-leak]: leak of ‘thepin’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:147:6: enter_function: entry to ‘readInputFile’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:174:20: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:181:22: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:183:20: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:184:29: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:184:29: call_function: calling ‘trim_strdup’ from ‘readInputFile’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:184:29: return_function: returning to ‘readInputFile’ from ‘trim_strdup’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:185:24: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:190:23: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:198:16: branch_true: following ‘true’ branch (when ‘thepin’ is NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:199:26: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:199:26: acquire_memory: allocated here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:202:16: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:204:34: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:205:19: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:213:16: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:213:16: danger: ‘thepin’ leaks here; was allocated at [(15)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/14)
#  211|                  }
#  212|           
#  213|->                PL_HashTableAdd(pinHashTable,
#  214|                              thedn,
#  215|                              thepin);

Error: COMPILER_WARNING (CWE-704): [#def720]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘do_setup’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:384:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  384 |         x.mod_type = "attributetypes";
#      |                    ^
#  382|           x_values[1] = NULL;
#  383|           x.mod_op = LDAP_MOD_ADD;
#  384|->         x.mod_type = "attributetypes";
#  385|           x.mod_values = x_values;
#  386|           mods[0] = &x;

Error: COMPILER_WARNING (CWE-704): [#def721]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:408:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  408 |         x.mod_type = "objectclasses";
#      |                    ^
#  406|           x_values[1] = NULL;
#  407|           x.mod_op = LDAP_MOD_ADD;
#  408|->         x.mod_type = "objectclasses";
#  409|           x.mod_values = x_values;
#  410|           mods[0] = &x;

Error: COMPILER_WARNING (CWE-704): [#def722]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:439:22: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  439 |         a1_values[0] = "pinmanager";
#      |                      ^
#  437|           fprintf(stderr,"Adding user: %s\n",o_pinmanager);
#  438|   
#  439|->         a1_values[0] = "pinmanager";
#  440|           a1_values[1] = NULL;
#  441|           a1.mod_op = 0;

Error: COMPILER_WARNING (CWE-704): [#def723]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:442:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  442 |         a1.mod_type = "sn";
#      |                     ^
#  440|           a1_values[1] = NULL;
#  441|           a1.mod_op = 0;
#  442|->         a1.mod_type = "sn";
#  443|           a1.mod_values = a1_values;
#  444|   

Error: COMPILER_WARNING (CWE-704): [#def724]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:445:22: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  445 |         a2_values[0] = "pinmanager";
#      |                      ^
#  443|           a1.mod_values = a1_values;
#  444|   
#  445|->         a2_values[0] = "pinmanager";
#  446|           a2_values[1] = NULL;
#  447|           a2.mod_op = 0;

Error: COMPILER_WARNING (CWE-704): [#def725]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:448:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  448 |         a2.mod_type = "cn";
#      |                     ^
#  446|           a2_values[1] = NULL;
#  447|           a2.mod_op = 0;
#  448|->         a2.mod_type = "cn";
#  449|           a2.mod_values = a2_values;
#  450|   

Error: COMPILER_WARNING (CWE-704): [#def726]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:454:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  454 |         a3.mod_type = "userPassword";
#      |                     ^
#  452|           a3_values[1] = NULL;
#  453|           a3.mod_op = 0;
#  454|->         a3.mod_type = "userPassword";
#  455|           a3.mod_values = a3_values;
#  456|   

Error: COMPILER_WARNING (CWE-704): [#def727]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:457:22: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  457 |         a4_values[0] = "person";
#      |                      ^
#  455|           a3.mod_values = a3_values;
#  456|   
#  457|->         a4_values[0] = "person";
#  458|           a4_values[1] = NULL;
#  459|           a4.mod_op = 0;

Error: COMPILER_WARNING (CWE-704): [#def728]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:460:21: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  460 |         a4.mod_type = "objectclass";
#      |                     ^
#  458|           a4_values[1] = NULL;
#  459|           a4.mod_op = 0;
#  460|->         a4.mod_type = "objectclass";
#  461|           a4.mod_values = a4_values;
#  462|   

Error: COMPILER_WARNING (CWE-704): [#def729]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:506:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  506 |         x.mod_type = "aci";
#      |                    ^
#  504|           x_values[2] = NULL;
#  505|           x.mod_op = LDAP_MOD_ADD;
#  506|->         x.mod_type = "aci";
#  507|           x.mod_values = x_values;
#  508|   

Error: COMPILER_WARNING (CWE-681): [#def730]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘sha256_pw_enc’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:544:38: warning[-Wpointer-sign]: pointer targets in passing argument 3 of ‘PK11_HashBuf’ differ in signedness
#  544 |     PK11_HashBuf(SEC_OID_SHA256,hash,pwd,strlen(pwd));
#      |                                      ^~~
#      |                                      |
#      |                                      char *
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:70:52: note: expected ‘const unsigned char *’ but argument is of type ‘char *’
#   70 |                               const unsigned char *in,
#      |                               ~~~~~~~~~~~~~~~~~~~~~^~
#  542|   
#  543|       /* SHA246 hash the user's key */
#  544|->     PK11_HashBuf(SEC_OID_SHA256,hash,pwd,strlen(pwd));
#  545|       enc = malloc(256);
#  546|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def731]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:547:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘enc’ where non-null expected
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:545:11: acquire_memory: this call could return NULL
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:547:5: danger: argument 1 (‘enc’) from [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#argument 1 of ‘__builtin_sprintf’ must be non-null
#  545|       enc = malloc(256);
#  546|   
#  547|->     sprintf( enc, "{SHA256}");
#  548|   
#  549|       (void)ldif_base64_encode( hash, enc + 8,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def732]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:549:11: warning[-Wanalyzer-malloc-leak]: leak of ‘enc’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:545:11: acquire_memory: allocated here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:549:11: danger: ‘enc’ leaks here; was allocated at [(1)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/0)
#  547|       sprintf( enc, "{SHA256}");
#  548|   
#  549|->     (void)ldif_base64_encode( hash, enc + 8,
#  550|           SHA256_LENGTH, -1 );
#  551|   

Error: COMPILER_WARNING (CWE-758): [#def733]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:557:5: warning[-Wmissing-prototypes]: no previous prototype for ‘isstring’
#  557 | int isstring(char *s) {
#      |     ^~~~~~~~
#  555|   /* check the first 8 characters to see if this is a string */
#  556|   
#  557|-> int isstring(char *s) {
#  558|       int i=0;
#  559|   

Error: COMPILER_WARNING: [#def734]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘doLDAPBind’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:609:5: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  609 |     struct berval credential;
#      |     ^~~~~~
#  607|       }
#  608|      
#  609|->     struct berval credential; 
#  610|       credential.bv_val = o_bindpw;
#  611|       credential.bv_len= strlen(o_bindpw);

Error: COMPILER_WARNING (CWE-563): [#def735]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:663:9: warning[-Wunused-but-set-variable]: variable ‘change’ set but not used
#  663 |     int change=0;
#      |         ^~~~~~
#  661|       BerElement *ber;
#  662|       char *objectclass_values[]={NULL,NULL};
#  663|->     int change=0;
#  664|       int pin_objectclass_exists=0;
#  665|       LDAPMod objectclass, pinattribute;

Error: COMPILER_WARNING (CWE-704): [#def736]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c: scope_hint: In function ‘processSearchResults’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:732:29: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  732 |                         bin = "<binary>";
#      |                             ^
#  730|                       for ( i = 0; vals[i] != NULL; i++ ) {
#  731|                           char *bin;
#  732|->                         bin = "<binary>";
#  733|                           if (isstring(vals[i]->bv_val)) {
#  734|                               bin = vals[i]->bv_val;

Error: COMPILER_WARNING (CWE-704): [#def737]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:808:34: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  808 |             objectclass.mod_type = "objectclass";
#      |                                  ^
#  806|               objectclass_values[1] = NULL;
#  807|               objectclass.mod_op = LDAP_MOD_ADD;
#  808|->             objectclass.mod_type = "objectclass";
#  809|               objectclass.mod_values = objectclass_values;
#  810|               mods[0] = &objectclass;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def738]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:876:26: warning[-Wanalyzer-malloc-leak]: leak of ‘hashbuf_source’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:689:42: branch_true: following ‘true’ branch (when ‘e’ is non-NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:694:20: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:694:12: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:695:13: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:696:16: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:697:45: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:698:20: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:699:21: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:801:12: branch_true: following ‘true’ branch (when ‘pin_objectclass_exists == 0’)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:802:17: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:813:16: branch_false: following ‘false’ branch...
 branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:825:12: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:828:13: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:834:13: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:834:12: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:838:17: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:841:16: branch_true: following ‘true’ branch (when ‘saltval’ is NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:842:21: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:842:20: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:846:21: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:853:17: acquire_memory: allocated here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:854:16: branch_false: following ‘false’ branch (when ‘hashbuf_source’ is non-NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:858:13: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:876:26: danger: ‘hashbuf_source’ leaks here; was allocated at [(23)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/22)
#  874|   
#  875|               if ((!strcmp(o_hash,"SHA256")) || (!strcmp(o_hash,"sha256")) ) {
#  876|->                 status = PK11_HashBuf(SEC_OID_SHA256,
#  877|                                     (unsigned char *)hashbuf_dest+1,
#  878|                                     (unsigned char *)hashbuf_source,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def739]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:897:17: warning[-Wanalyzer-malloc-leak]: leak of ‘hashbuf_source’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:689:42: branch_true: following ‘true’ branch (when ‘e’ is non-NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:694:20: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:694:12: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:695:13: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:696:16: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:697:45: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:698:20: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:699:21: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:801:12: branch_true: following ‘true’ branch (when ‘pin_objectclass_exists == 0’)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:802:17: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:813:16: branch_false: following ‘false’ branch...
 branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:825:12: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:828:13: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:834:13: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:834:12: branch_true: following ‘true’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:838:17: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:841:16: branch_true: following ‘true’ branch (when ‘saltval’ is NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:842:21: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:842:20: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:846:21: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:853:17: acquire_memory: allocated here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:854:16: branch_false: following ‘false’ branch (when ‘hashbuf_source’ is non-NULL)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:858:13: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:896:16: branch_true: following ‘true’ branch (when ‘status != 0’)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:897:17: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:897:17: danger: ‘hashbuf_source’ leaks here; was allocated at [(23)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/22)
#  895|         
#  896|               if (status != SECSuccess) {
#  897|->                 sprintf(errbuf,"Error hashing pin (%d)",PR_GetError());
#  898|                   errcode = 9;
#  899|                   exitError(errbuf);

Error: COMPILER_WARNING (CWE-704): [#def740]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:959:46: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  959 |             fprintf(stderr,"o_write = %0x\n",(unsigned int)o_write);
#      |                                              ^
#  957|           fprintf(output,"%s:%s\n",o_attribute,generatedPassword);
#  958|           if (o_debug) {
#  959|->             fprintf(stderr,"o_write = %0x\n",(unsigned int)o_write);
#  960|           }
#  961|           if (! o_write) {

Error: COMPILER_WARNING (CWE-704): [#def741]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:959:46: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  957|           fprintf(output,"%s:%s\n",o_attribute,generatedPassword);
#  958|           if (o_debug) {
#  959|->             fprintf(stderr,"o_write = %0x\n",(unsigned int)o_write);
#  960|           }
#  961|           if (! o_write) {

Error: COMPILER_WARNING (CWE-758): [#def742]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1015:6: warning[-Wmissing-prototypes]: no previous prototype for ‘buildCharpool’
# 1015 | void buildCharpool() {
#      |      ^~~~~~~~~~~~~
# 1013|   /* build the pool of characters we can use for the password */
# 1014|   
# 1015|-> void buildCharpool() {
# 1016|       char err_buf[1024];
# 1017|       charpool = (char*) malloc(256);

Error: CPPCHECK_WARNING (CWE-476): [#def743]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1019: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: charpool
# 1017|       charpool = (char*) malloc(256);
# 1018|   
# 1019|->     charpool[0] = '\0';
# 1020|       
# 1021|       if ( o_case == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def744]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1019:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘charpool’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1017:24: acquire_memory: this call could return NULL
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1019:5: danger: ‘malloc(256)’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/0)
# 1017|       charpool = (char*) malloc(256);
# 1018|   
# 1019|->     charpool[0] = '\0';
# 1020|       
# 1021|       if ( o_case == NULL) {

Error: COMPILER_WARNING (CWE-758): [#def745]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1077:16: warning[-Wmissing-prototypes]: no previous prototype for ‘getRandomShort’
# 1077 | unsigned short getRandomShort() {
#      |                ^~~~~~~~~~~~~~
# 1075|   
# 1076|     
# 1077|-> unsigned short getRandomShort() {
# 1078|     unsigned short r;
# 1079|   #ifdef USE_NSS_RANDOM

Error: GCC_ANALYZER_WARNING (CWE-401): [#def746]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1080:5: warning[-Wanalyzer-malloc-leak]: leak of ‘totals’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1171:6: enter_function: entry to ‘testpingen’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1180:8: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1184:9: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1184:8: branch_false: following ‘false’ branch...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1189:33: branch_false: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1189:14: acquire_memory: allocated here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1190:8: branch_true: following ‘true’ branch (when ‘totals’ is non-NULL)...
 branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1195:18: branch_true: following ‘true’ branch (when ‘i != 256’)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1196:13: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1202:18: branch_true: following ‘true’ branch (when ‘count > i’)...
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1203:18: branch_true: ...to here
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1203:18: call_function: calling ‘newPassword’ from ‘testpingen’
# 1078|     unsigned short r;
# 1079|   #ifdef USE_NSS_RANDOM
# 1080|->     PK11_GenerateRandom( ( unsigned char * ) &r, sizeof( r ) );
# 1081|       if (o_debug) {
# 1082|           /* fprintf(stderr,"Random: %d\n",r); */

Error: COMPILER_WARNING (CWE-758): [#def747]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin.c:1119:16: warning[-Wmissing-prototypes]: no previous prototype for ‘getRandomInRange’
# 1119 | unsigned short getRandomInRange(unsigned short max) {
#      |                ^~~~~~~~~~~~~~~~
# 1117|   */
# 1118|   
# 1119|-> unsigned short getRandomInRange(unsigned short max) {
# 1120|       unsigned short rno;
# 1121|       unsigned short result;

Error: COMPILER_WARNING (CWE-758): [#def748]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:82:6: warning[-Wmissing-prototypes]: no previous prototype for ‘setDefaultOptions’
#   82 | void setDefaultOptions() {
#      |      ^~~~~~~~~~~~~~~~~
#   80|     *o_setup,*o_pinmanager,*o_pinmanagerpwd,*o_schemachange;
#   81|   
#   82|-> void setDefaultOptions() {
#   83|    o_certdb=   ".";
#   84|    o_nickname= NULL; 

Error: COMPILER_WARNING (CWE-704): [#def749]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: In function ‘setDefaultOptions’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:83:10: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   83 |  o_certdb=   ".";
#      |          ^
#   81|   
#   82|   void setDefaultOptions() {
#   83|->  o_certdb=   ".";
#   84|    o_nickname= NULL; 
#   85|    o_binddn=   NULL;

Error: COMPILER_WARNING (CWE-704): [#def750]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:96:7: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   96 |  o_gen=      "RNG-alphanum";
#      |       ^
#   94|    o_minlength=NULL;
#   95|    o_maxlength=NULL;
#   96|->  o_gen=      "RNG-alphanum";
#   97|    o_case=     NULL;
#   98|    o_attribute="pin";

Error: COMPILER_WARNING (CWE-704): [#def751]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:98:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   98 |  o_attribute="pin";
#      |             ^
#   96|    o_gen=      "RNG-alphanum";
#   97|    o_case=     NULL;
#   98|->  o_attribute="pin";
#   99|    o_hash=     "sha256";
#  100|    o_objectclass="pinPerson";

Error: COMPILER_WARNING (CWE-704): [#def752]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:99:8: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#   99 |  o_hash=     "sha256";
#      |        ^
#   97|    o_case=     NULL;
#   98|    o_attribute="pin";
#   99|->  o_hash=     "sha256";
#  100|    o_objectclass="pinPerson";
#  101|    o_output=   NULL;

Error: COMPILER_WARNING (CWE-704): [#def753]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:100:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  100 |  o_objectclass="pinPerson";
#      |               ^
#   98|    o_attribute="pin";
#   99|    o_hash=     "sha256";
#  100|->  o_objectclass="pinPerson";
#  101|    o_output=   NULL;
#  102|    o_retry=    "5";

Error: COMPILER_WARNING (CWE-704): [#def754]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:102:9: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  102 |  o_retry=    "5";
#      |         ^
#  100|    o_objectclass="pinPerson";
#  101|    o_output=   NULL;
#  102|->  o_retry=    "5";
#  103|    o_debug=    NULL;
#  104|    o_write=    NULL;

Error: COMPILER_WARNING (CWE-758): [#def755]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:114:6: warning[-Wmissing-prototypes]: no previous prototype for ‘getOptions’
#  114 | void getOptions() {
#      |      ^~~~~~~~~~
#  112|   }
#  113|   
#  114|-> void getOptions() {
#  115|     int i;
#  116|     char *c;

Error: COMPILER_WARNING (CWE-704): [#def756]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: In function ‘getOptions’
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:128:18: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  128 |   if (i)   o_ssl = "yes";
#      |                  ^
#  126|     OPT_getValue("filter",   &o_filter);
#  127|     i = OPT_getValue("ssl",      &o_ssl);
#  128|->   if (i)   o_ssl = "yes";
#  129|     OPT_getValue("basedn",   &o_basedn);
#  130|     OPT_getValue("input",    &o_input);

Error: COMPILER_WARNING (CWE-704): [#def757]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:159:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  159 |       o_debug = "yes";
#      |               ^
#  157|     if (i) {
#  158|       if (! o_debug) { 
#  159|->       o_debug = "yes";
#  160|       } 
#  161|     }

Error: COMPILER_WARNING (CWE-704): [#def758]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:163:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  163 |   if (i)   o_write = "yes";
#      |                    ^
#  161|     }
#  162|     i = OPT_getValue("write",    &o_write);
#  163|->   if (i)   o_write = "yes";
#  164|     i = OPT_getValue("clobber",    &o_clobber);
#  165|     if (i) o_clobber = "yes";

Error: COMPILER_WARNING (CWE-704): [#def759]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:165:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  165 |   if (i) o_clobber = "yes";
#      |                    ^
#  163|     if (i)   o_write = "yes";
#  164|     i = OPT_getValue("clobber",    &o_clobber);
#  165|->   if (i) o_clobber = "yes";
#  166|     OPT_getValue("saltattribute",    &o_saltattribute);
#  167|     i = OPT_getValue("testpingen",    &o_testpingen);

Error: COMPILER_WARNING (CWE-704): [#def760]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:170:30: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  170 |                 o_testpingen = "25";
#      |                              ^
#  168|     if (i) {
#  169|   	if (!o_testpingen) {
#  170|-> 		o_testpingen = "25";
#  171|   	}
#  172|     }

Error: COMPILER_WARNING (CWE-758): [#def761]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:181:5: warning[-Wmissing-prototypes]: no previous prototype for ‘equals’
#  181 | int equals(const char *s, const char *t) {
#      |     ^~~~~~
#  179|   }
#  180|   
#  181|-> int equals(const char *s, const char *t) {
#  182|     return !(strcmp(s,t));
#  183|   }

Error: COMPILER_WARNING (CWE-758): [#def762]
pki-11.8.0-beta6/base/tools/src/main/native/setpin/setpin_options.c:185:6: warning[-Wmissing-prototypes]: no previous prototype for ‘validateOptions’
#  185 | void validateOptions() {
#      |      ^~~~~~~~~~~~~~~
#  183|   }
#  184|   
#  185|-> void validateOptions() {
#  186|     char errbuf[ERR_BUF_LENGTH];
#  187|   

Error: COMPILER_WARNING (CWE-563): [#def763]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/file.c: scope_hint: In function ‘TKS_ReadInputFileIntoSECItem’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/file.c:26:40: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#   26 |                               char    *wrappedKeyName,
#      |                               ~~~~~~~~~^~~~~~~~~~~~~~
#   24|                                 char    *hexInternalKeyKCV,
#   25|                                 int      hexInternalKeyKCVLength,
#   26|->                               char    *wrappedKeyName,
#   27|                                 SECItem *wrappedKey )
#   28|   {

Error: COMPILER_WARNING (CWE-563): [#def764]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/file.c: scope_hint: In function ‘TKS_WriteSECItemIntoOutputFile’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/file.c:318:42: warning[-Wunused-parameter]: unused parameter ‘wrappedKeyName’
#  318 |                                 char    *wrappedKeyName,
#      |                                 ~~~~~~~~~^~~~~~~~~~~~~~
#  316|   SECStatus
#  317|   TKS_WriteSECItemIntoOutputFile( SECItem *wrappedKey,
#  318|->                                 char    *wrappedKeyName,
#  319|                                   char    *hexInternalKeyKCV,
#  320|                                   int      hexInternalKeyKCVLength,

Error: COMPILER_WARNING (CWE-563): [#def765]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/help.c: scope_hint: In function ‘TKS_PrintHelp’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/help.c:86:22: warning[-Wunused-parameter]: unused parameter ‘progName’
#   86 | TKS_PrintHelp( char *progName )
#      |                ~~~~~~^~~~~~~~
#   84|   
#   85|   void
#   86|-> TKS_PrintHelp( char *progName )
#   87|   {
#   88|       /**********************/

Error: COMPILER_WARNING (CWE-195): [#def766]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c: scope_hint: In function ‘InputHexSessionKey’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:229:19: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘PRUint32’ {aka ‘unsigned int’}
#  229 |     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                   ^
#  227|       /* Print appropriate key share padding length */
#  228|       PR_fprintf( PR_STDOUT, "\n                             " );
#  229|->     for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  230|           PR_fprintf( PR_STDOUT, " " );
#  231|       }

Error: COMPILER_WARNING (CWE-195): [#def767]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:234:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘int’ and ‘unsigned int’
#  234 |     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#      |                       ^
#  232|   
#  233|       /* Print second DES_LENGTH bytes */
#  234|->     for( i = count; i < hexSessionKeyShare->len; i += 4 ) {
#  235|           PR_fprintf( PR_STDOUT,
#  236|                       "%c%c%c%c ",

Error: COMPILER_WARNING (CWE-195): [#def768]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c: scope_hint: In function ‘TKS_GenerateSessionKeyShare’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:904:23: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘PRUint32’ {aka ‘unsigned int’}
#  904 |         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#      |                       ^
#  902|           /* Print appropriate key share padding length */
#  903|           PR_fprintf( PR_STDOUT, "\n                             " );
#  904|->         for( i = 0; i < PL_strlen( sessionKeyShareName ); i++ ) {
#  905|               PR_fprintf( PR_STDOUT, " " );
#  906|           }

Error: COMPILER_WARNING (CWE-195): [#def769]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:909:27: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRIntn’ {aka ‘int’} and ‘unsigned int’
#  909 |         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#      |                           ^
#  907|   
#  908|           /* Print second DES_LENGTH bytes */
#  909|->         for( i = count; i < hexSessionKeyShare.len; i += 4 ) {
#  910|               PR_fprintf( PR_STDOUT,
#  911|                           "%c%c%c%c ",

Error: COMPILER_WARNING (CWE-563): [#def770]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:1077:44: warning[-Wunused-parameter]: unused parameter ‘mechanism’
# 1077 |                         CK_MECHANISM_TYPE  mechanism,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~
# 1075|   TKS_ImportSymmetricKey( const char        *symmetricKeyName,
# 1076|                           PK11SlotInfo      *slot,
# 1077|->                         CK_MECHANISM_TYPE  mechanism,
# 1078|                           CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,

Error: COMPILER_WARNING (CWE-563): [#def771]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:1078:44: warning[-Wunused-parameter]: unused parameter ‘operation’
# 1078 |                         CK_ATTRIBUTE_TYPE  operation,
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~~~~
# 1076|                           PK11SlotInfo      *slot,
# 1077|                           CK_MECHANISM_TYPE  mechanism,
# 1078|->                         CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,
# 1080|                           secuPWData        *pwdata, PRBool isPerm )

Error: COMPILER_WARNING (CWE-694): [#def772]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c: scope_hint: In function ‘TKS_ImportSymmetricKey’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:1080:44: warning[-Wshadow]: declaration of ‘pwdata’ shadows a global declaration
# 1080 |                         secuPWData        *pwdata, PRBool isPerm )
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:22:15: note: shadowed declaration is here
#   22 | secuPWData    pwdata = { PW_NONE,
#      |               ^~~~~~
# 1078|                           CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,
# 1080|->                         secuPWData        *pwdata, PRBool isPerm )
# 1081|   {
# 1082|       PK11Origin  origin = PK11_OriginGenerated;

Error: COMPILER_WARNING (CWE-563): [#def773]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:1080:44: warning[-Wunused-parameter]: unused parameter ‘pwdata’
# 1080 |                         secuPWData        *pwdata, PRBool isPerm )
#      |                         ~~~~~~~~~~~~~~~~~~~^~~~~~
# 1078|                           CK_ATTRIBUTE_TYPE  operation,
# 1079|                           SECItem           *sessionKeyShare,
# 1080|->                         secuPWData        *pwdata, PRBool isPerm )
# 1081|   {
# 1082|       PK11Origin  origin = PK11_OriginGenerated;

Error: COMPILER_WARNING (CWE-563): [#def774]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/key.c:1082:17: warning[-Wunused-variable]: unused variable ‘origin’
# 1082 |     PK11Origin  origin = PK11_OriginGenerated;
#      |                 ^~~~~~
# 1080|                           secuPWData        *pwdata, PRBool isPerm )
# 1081|   {
# 1082|->     PK11Origin  origin = PK11_OriginGenerated;
# 1083|       PK11SymKey *symKey = NULL;
# 1084|       PK11SymKey *sessKey = NULL;

Error: COMPILER_WARNING (CWE-563): [#def775]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/list.c: scope_hint: In function ‘TKS_ListKeys’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/list.c:132:19: warning[-Wunused-parameter]: unused parameter ‘index’
#  132 |               int index,
#      |               ~~~~^~~~~
#  130|                 PK11SlotInfo *slot,
#  131|                 char *keyname,
#  132|->               int index, 
#  133|                 PRBool dopriv,
#  134|                 secuPWData *pwdata )

Error: COMPILER_WARNING (CWE-563): [#def776]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/list.c:133:22: warning[-Wunused-parameter]: unused parameter ‘dopriv’
#  133 |               PRBool dopriv,
#      |               ~~~~~~~^~~~~~
#  131|                 char *keyname,
#  132|                 int index, 
#  133|->               PRBool dopriv,
#  134|                 secuPWData *pwdata )
#  135|   {

Error: COMPILER_WARNING (CWE-909): [#def777]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:76:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   76 |           offsetof(CERTPolicyQualifier, qualifierID) },
#      |           ^~~~~~~~
/usr/include/nss3/secoid.h:18: included_from: Included from here.
/usr/include/nss3/secmodt.h:9: included_from: Included from here.
/usr/include/nss3/keythi.h:12: included_from: Included from here.
/usr/include/nss3/cert.h:21: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:53: included_from: Included from here.
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   74|   	  0, NULL, sizeof(CERTPolicyQualifier) },
#   75|       { SEC_ASN1_OBJECT_ID,
#   76|-> 	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|   	  offsetof(CERTPolicyQualifier, qualifierValue) },

Error: COMPILER_WARNING (CWE-909): [#def778]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:78:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   78 |           offsetof(CERTPolicyQualifier, qualifierValue) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   76|   	  offsetof(CERTPolicyQualifier, qualifierID) },
#   77|       { SEC_ASN1_ANY | SEC_ASN1_OPTIONAL,
#   78|-> 	  offsetof(CERTPolicyQualifier, qualifierValue) },
#   79|       { 0 }
#   80|   };

Error: COMPILER_WARNING (CWE-909): [#def779]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:86:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘sub’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   86 |           offsetof(CERTPolicyInfo, policyID) },
#      |           ^~~~~~~~
/usr/include/nss3/secasn1t.h:47:17: note: ‘sub’ declared here
#   47 |     const void *sub;
#      |                 ^~~
#   84|   	  0, NULL, sizeof(CERTPolicyInfo) },
#   85|       { SEC_ASN1_OBJECT_ID,
#   86|-> 	  offsetof(CERTPolicyInfo, policyID) },
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),

Error: COMPILER_WARNING (CWE-909): [#def780]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:89:11: warning[-Wmissing-field-initializers]: missing initializer for field ‘size’ of ‘SEC_ASN1Template’ {aka ‘const struct sec_ASN1Template_struct’}
#   89 |           secu_PolicyQualifierTemplate },
#      |           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/nss3/secasn1t.h:55:18: note: ‘size’ declared here
#   55 |     unsigned int size;
#      |                  ^~~~
#   87|       { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_OPTIONAL,
#   88|   	  offsetof(CERTPolicyInfo, policyQualifiers),
#   89|-> 	  secu_PolicyQualifierTemplate },
#   90|       { 0 }
#   91|   };

Error: COMPILER_WARNING (CWE-563): [#def781]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c: scope_hint: In function ‘secu_PrintUserNoticeQualifier’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:181:43: warning[-Wunused-parameter]: unused parameter ‘msg’
#  181 |                               const char *msg, int level)
#      |                               ~~~~~~~~~~~~^~~
#  179|   static SECStatus
#  180|   secu_PrintUserNoticeQualifier(FILE *out, SECItem * qualifierValue,
#  181|->                               const char *msg, int level)
#  182|   {
#  183|       CERTUserNotice *userNotice = NULL;

Error: COMPILER_WARNING: [#def782]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyQualifier’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:224:11: warning[-Wimplicit-fallthrough=]: this statement may fall through
#  224 |        if (SECSuccess == rv)
#      |           ^
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:227:4: note: here
#  227 |    case SEC_OID_PKIX_CPS_POINTER_QUALIFIER:
#      |    ^~~~
#  222|      case SEC_OID_PKIX_USER_NOTICE_QUALIFIER:
#  223|          rv = secu_PrintUserNoticeQualifier(out, qualifierValue, msg, level);
#  224|->        if (SECSuccess == rv)
#  225|   	   break;
#  226|          /* fall through on error */

Error: COMPILER_WARNING (CWE-563): [#def783]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c: scope_hint: In function ‘secu_PrintPolicyInfo’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/pppolicy.c:236:71: warning[-Wunused-parameter]: unused parameter ‘msg’
#  236 | secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,const char *msg,int level)
#      |                                                           ~~~~~~~~~~~~^~~
#  234|   
#  235|   static SECStatus
#  236|-> secu_PrintPolicyInfo(FILE *out,CERTPolicyInfo *policyInfo,const char *msg,int level)
#  237|   {
#  238|      CERTPolicyQualifier **policyQualifiers;

Error: COMPILER_WARNING (CWE-758): [#def784]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secerror.c:74:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_Strerror’
#   74 | SECU_Strerror(PRErrorCode errNum) {
#      | ^~~~~~~~~~~~~
#   72|    */
#   73|   const char *
#   74|-> SECU_Strerror(PRErrorCode errNum) {
#   75|       PRInt32 low  = 0;
#   76|       PRInt32 high = numStrings - 1;

Error: COMPILER_WARNING (CWE-252): [#def785]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secpwd.c: scope_hint: In function ‘SEC_GetPassword’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secpwd.c:69:21: warning[-Wunused-result]: ignoring return value of ‘fgets’ declared with attribute ‘warn_unused_result’
#   69 | #define QUIET_FGETS fgets
#      |                     ^
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secpwd.c:117:9: note: in expansion of macro ‘QUIET_FGETS’
#  117 |         QUIET_FGETS ( phrase, sizeof(phrase), input);
#      |         ^~~~~~~~~~~
#   67|   static char * quiet_fgets (char *buf, int length, FILE *input);
#   68|   #else
#   69|-> #define QUIET_FGETS fgets
#   70|   #endif
#   71|   

Error: COMPILER_WARNING (CWE-758): [#def786]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:99:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_GetString’
#   99 | SECU_GetString(int16 error_number)
#      | ^~~~~~~~~~~~~~
#   97|   
#   98|   char *
#   99|-> SECU_GetString(int16 error_number)
#  100|   {
#  101|   

Error: COMPILER_WARNING (CWE-758): [#def787]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:108:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintErrMsg’
#  108 | SECU_PrintErrMsg(FILE *out, int level, const char *progName, const char *msg, ...)
#      | ^~~~~~~~~~~~~~~~
#  106|   
#  107|   void 
#  108|-> SECU_PrintErrMsg(FILE *out, int level, const char *progName, const char *msg, ...)
#  109|   {
#  110|       va_list args;

Error: COMPILER_WARNING: [#def788]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintErrMsg’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:118:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintErrMsg’ might be a candidate for ‘gnu_printf’ format attribute
#  118 |     vfprintf(out, msg, args);
#      |     ^~~~~~~~
#  116|       SECU_Indent(out, level);
#  117|       fprintf(out, "%s: ", progName);
#  118|->     vfprintf(out, msg, args);
#  119|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  120|   	fprintf(out, ": %s\n", errString);

Error: COMPILER_WARNING: [#def789]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintError’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:137:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintError’ might be a candidate for ‘gnu_printf’ format attribute
#  137 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  135|   
#  136|       fprintf(stderr, "%s: ", progName);
#  137|->     vfprintf(stderr, msg, args);
#  138|       if (errString != NULL && PORT_Strlen(errString) > 0)
#  139|   	fprintf(stderr, ": %s\n", errString);

Error: COMPILER_WARNING: [#def790]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintSystemError’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:153:5: warning[-Wsuggest-attribute=format]: function ‘SECU_PrintSystemError’ might be a candidate for ‘gnu_printf’ format attribute
#  153 |     vfprintf(stderr, msg, args);
#      |     ^~~~~~~~
#  151|       va_start(args, msg);
#  152|       fprintf(stderr, "%s: ", progName);
#  153|->     vfprintf(stderr, msg, args);
#  154|   #if defined(_WIN32_WCE)
#  155|       fprintf(stderr, ": %d\n", PR_GetOSError());

Error: COMPILER_WARNING (CWE-563): [#def791]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_GetPasswordString’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:172:30: warning[-Wunused-parameter]: unused parameter ‘arg’
#  172 | SECU_GetPasswordString(void *arg, char *prompt)
#      |                        ~~~~~~^~~
#  170|   
#  171|   char *
#  172|-> SECU_GetPasswordString(void *arg, char *prompt)
#  173|   {
#  174|   #ifndef _WINDOWS

Error: COMPILER_WARNING (CWE-563): [#def792]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_FilePasswd’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:222:31: warning[-Wunused-parameter]: unused parameter ‘slot’
#  222 | SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#      |                 ~~~~~~~~~~~~~~^~~~
#  220|    */
#  221|   char *
#  222|-> SECU_FilePasswd(PK11SlotInfo *slot, PRBool retry, void *arg)
#  223|   {
#  224|       unsigned char phrase[200];

Error: COMPILER_WARNING (CWE-704): [#def793]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_GetModulePassword’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:263:40: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  263 |     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#      |                                        ^~~~~~~~~~
#  261|       secuPWData *pwdata = (secuPWData *)arg;
#  262|       secuPWData pwnull = { PW_NONE, 0 };
#  263|->     secuPWData pwxtrn = { PW_EXTERNAL, "external" };
#  264|       char *pw;
#  265|   

Error: COMPILER_WARNING (CWE-758): [#def794]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:308:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_InitSlotPassword’
#  308 | secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#      | ^~~~~~~~~~~~~~~~~~~~~
#  306|   
#  307|   char *
#  308|-> secu_InitSlotPassword(PK11SlotInfo *slot, PRBool retry, void *arg)
#  309|   {
#  310|       char *p0 = NULL;

Error: COMPILER_WARNING (CWE-563): [#def795]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ChangePW’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:376:15: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  376 |     SECStatus rv;
#      |               ^~
#  374|   SECU_ChangePW(PK11SlotInfo *slot, char *passwd, char *pwFile)
#  375|   {
#  376|->     SECStatus rv;
#  377|       secuPWData pwdata, newpwdata;
#  378|       char *oldpw = NULL, *newpw = NULL;

Error: COMPILER_WARNING (CWE-704): [#def796]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ConfigDirectory’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:485:25: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  485 |         if (!home) home = "";
#      |                         ^
#  483|       if (base == NULL || *base == 0) {
#  484|   	home = PR_GetEnv("HOME");
#  485|-> 	if (!home) home = "";
#  486|   
#  487|   	if (*home && home[strlen(home) - 1] == '/')

Error: COMPILER_WARNING (CWE-563): [#def797]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_GetClientAuthData’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:505:47: warning[-Wunused-parameter]: unused parameter ‘fd’
#  505 | SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#      |                                   ~~~~~~~~~~~~^~
#  503|   /* This gets called by SSL when server wants our cert & key */
#  504|   int
#  505|-> SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  506|   		       struct CERTDistNamesStr *caNames,
#  507|                         struct CERTCertificateStr **pRetCert,

Error: COMPILER_WARNING (CWE-563): [#def798]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:506:49: warning[-Wunused-parameter]: unused parameter ‘caNames’
#  506 |                        struct CERTDistNamesStr *caNames,
#      |                        ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
#  504|   int
#  505|   SECU_GetClientAuthData(void *arg, PRFileDesc *fd,
#  506|-> 		       struct CERTDistNamesStr *caNames,
#  507|                         struct CERTCertificateStr **pRetCert,
#  508|                         struct SECKEYPrivateKeyStr **pRetKey)

Error: COMPILER_WARNING (CWE-758): [#def799]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:546:1: warning[-Wmissing-prototypes]: no previous prototype for ‘secu_StdinToItem’
#  546 | secu_StdinToItem(SECItem *dst)
#      | ^~~~~~~~~~~~~~~~
#  544|   
#  545|   SECStatus
#  546|-> secu_StdinToItem(SECItem *dst)
#  547|   {
#  548|       unsigned char buf[1000];

Error: COMPILER_WARNING (CWE-909): [#def800]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ReadDERFromFile’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:671:9: warning[-Wmissing-field-initializers]: missing initializer for field ‘len’ of ‘SECItem’ {aka ‘struct SECItemStr’}
#  671 |         SECItem filedata = {siBuffer,0};
#      |         ^~~~~~~
/usr/include/nss3/blapit.h:11: included_from: Included from here.
/usr/include/nss3/cryptohi.h:11: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:59: included_from: Included from here.
/usr/include/nss3/seccomon.h:53:18: note: ‘len’ declared here
#   53 |     unsigned int len;
#      |                  ^~~
#  669|       if (ascii) {
#  670|   	/* First convert ascii to binary */
#  671|-> 	SECItem filedata = {siBuffer,0};
#  672|   	char *asc, *body;
#  673|   

Error: COMPILER_WARNING (CWE-758): [#def801]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:877:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_StripTagAndLength’
#  877 | SECU_StripTagAndLength(SECItem *i)
#      | ^~~~~~~~~~~~~~~~~~~~~~
#  875|   
#  876|   SECStatus
#  877|-> SECU_StripTagAndLength(SECItem *i)
#  878|   {
#  879|       unsigned int start;

Error: COMPILER_WARNING (CWE-758): [#def802]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1077:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSet’
# 1077 | SECU_PrintSet(FILE *out, SECItem *t, const char *m, int level)
#      | ^~~~~~~~~~~~~
# 1075|   /* This prints a SET or SEQUENCE */
# 1076|   void
# 1077|-> SECU_PrintSet(FILE *out, SECItem *t, const char *m, int level)
# 1078|   {
# 1079|       int            type        = t->data[0] & SEC_ASN1_TAGNUM_MASK;

Error: COMPILER_WARNING (CWE-758): [#def803]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1209:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedBoolean’
# 1209 | SECU_PrintEncodedBoolean(FILE *out, SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1207|   /* Print a DER encoded Boolean */
# 1208|   void
# 1209|-> SECU_PrintEncodedBoolean(FILE *out, SECItem *i, const char *m, int level)
# 1210|   {
# 1211|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def804]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1218:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedInteger’
# 1218 | SECU_PrintEncodedInteger(FILE *out, SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 1216|   /* Print a DER encoded integer */
# 1217|   void
# 1218|-> SECU_PrintEncodedInteger(FILE *out, SECItem *i, const char *m, int level)
# 1219|   {
# 1220|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-758): [#def805]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1227:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintEncodedObjectID’
# 1227 | SECU_PrintEncodedObjectID(FILE *out, SECItem *i, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 1225|   /* Print a DER encoded OID */
# 1226|   void
# 1227|-> SECU_PrintEncodedObjectID(FILE *out, SECItem *i, const char *m, int level)
# 1228|   {
# 1229|       SECItem my    = *i;

Error: COMPILER_WARNING (CWE-563): [#def806]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintSubjectPublicKeyInfo’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1515:56: warning[-Wunused-parameter]: unused parameter ‘arena’
# 1515 | secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1513|   
# 1514|   static void
# 1515|-> secu_PrintSubjectPublicKeyInfo(FILE *out, PRArenaPool *arena,
# 1516|   		       CERTSubjectPublicKeyInfo *i, const char *msg, int level)
# 1517|   {

Error: COMPILER_WARNING (CWE-563): [#def807]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintX509KeyUsage’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1690:57: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1690 | secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level)
#      |                                                   ~~~~~~^~~
# 1688|   /* X509KeyUsage is merely a bit string whose bits are displayed symbolically */
# 1689|   static void
# 1690|-> secu_PrintX509KeyUsage(FILE *out, SECItem *value, char *msg, int level) 
# 1691|   {
# 1692|       int     unused;

Error: COMPILER_WARNING (CWE-563): [#def808]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintAuthKeyIDExtension’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1804:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1804 | secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1802|   
# 1803|   static void
# 1804|-> secu_PrintAuthKeyIDExtension(FILE *out, SECItem *value, char *msg, int level) 
# 1805|   {
# 1806|       CERTAuthKeyID *kid  = NULL;

Error: COMPILER_WARNING (CWE-563): [#def809]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintCRLDistPtsExtension’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1872:64: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1872 | secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                          ~~~~~~^~~
# 1870|   
# 1871|   static void
# 1872|-> secu_PrintCRLDistPtsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1873|   {
# 1874|       CERTCrlDistributionPoints * dPoints;

Error: COMPILER_WARNING (CWE-563): [#def810]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintNameConstraintsExtension’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1931:69: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1931 | secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
#      |                                                               ~~~~~~^~~
# 1929|   
# 1930|   static void
# 1931|-> secu_PrintNameConstraintsExtension(FILE *out, SECItem *value, char *msg, int level)
# 1932|   {
# 1933|       CERTNameConstraints * cnstrnts;

Error: COMPILER_WARNING (CWE-563): [#def811]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘secu_PrintAuthorityInfoAcess’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:1957:63: warning[-Wunused-parameter]: unused parameter ‘msg’
# 1957 | secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
#      |                                                         ~~~~~~^~~
# 1955|   
# 1956|   static void
# 1957|-> secu_PrintAuthorityInfoAcess(FILE *out, SECItem *value, char *msg, int level)
# 1958|   {
# 1959|       CERTAuthInfoAccess **infos = NULL;

Error: COMPILER_WARNING (CWE-704): [#def812]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintName’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2130:13: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2130 |         str = "!Invalid AVA!";
#      |             ^
# 2128|       str = nameStr = CERT_NameToAscii(name);
# 2129|       if (!str) {
# 2130|->     	str = "!Invalid AVA!";
# 2131|       }
# 2132|       my.data = (unsigned char *)str;

Error: COMPILER_WARNING (CWE-477): [#def813]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘printflags’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2151:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2151 |     if (flags & CERTDB_VALID_PEER)
#      |     ^~
# 2149|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2150|   	    PORT_Strcat(trusts, "c");
# 2151|->     if (flags & CERTDB_VALID_PEER)
# 2152|   	if (!(flags & CERTDB_TRUSTED))
# 2153|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-477): [#def814]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2151:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2149|   	    !(flags & CERTDB_TRUSTED_CLIENT_CA))
# 2150|   	    PORT_Strcat(trusts, "c");
# 2151|->     if (flags & CERTDB_VALID_PEER)
# 2152|   	if (!(flags & CERTDB_TRUSTED))
# 2153|   	    PORT_Strcat(trusts, "p");

Error: COMPILER_WARNING (CWE-704): [#def815]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintCertNickname’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2194:14: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2194 |         name = "(NULL)";
#      |              ^
# 2192|       }
# 2193|       if (!name || !name[0]) {
# 2194|->         name = "(NULL)";
# 2195|       }
# 2196|   

Error: COMPILER_WARNING (CWE-758): [#def816]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2213:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_DecodeAndPrintExtensions’
# 2213 | SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 2211|   
# 2212|   int
# 2213|-> SECU_DecodeAndPrintExtensions(FILE *out, SECItem *any, const char *m, int level)
# 2214|   {
# 2215|       CERTCertExtension **extensions = NULL;

Error: COMPILER_WARNING (CWE-758): [#def817]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2234:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfExtensions’
# 2234 | SECU_PrintSetOfExtensions(FILE *out, SECItem **any, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~~
# 2232|   /* print a decoded SET OF or SEQUENCE OF Extensions */
# 2233|   int
# 2234|-> SECU_PrintSetOfExtensions(FILE *out, SECItem **any, const char *m, int level)
# 2235|   {
# 2236|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def818]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2249:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintSetOfAny’
# 2249 | SECU_PrintSetOfAny(FILE *out, SECItem **any, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~
# 2247|   /* print a decoded SET OF or SEQUENCE OF "ANY" */
# 2248|   int
# 2249|-> SECU_PrintSetOfAny(FILE *out, SECItem **any, const char *m, int level)
# 2250|   {
# 2251|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def819]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2263:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttribute’
# 2263 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~
# 2261|   
# 2262|   int
# 2263|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
# 2264|   {
# 2265|       int rv = 0;

Error: COMPILER_WARNING (CWE-563): [#def820]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintCertAttribute’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2263:69: warning[-Wunused-parameter]: unused parameter ‘m’
# 2263 | SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
#      |                                                         ~~~~~~~~~~~~^
# 2261|   
# 2262|   int
# 2263|-> SECU_PrintCertAttribute(FILE *out, CERTAttribute *attr, const char *m, int level)
# 2264|   {
# 2265|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def821]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: At top level
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2277:1: warning[-Wmissing-prototypes]: no previous prototype for ‘SECU_PrintCertAttributes’
# 2277 | SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, const char *m, int level)
#      | ^~~~~~~~~~~~~~~~~~~~~~~~
# 2275|   
# 2276|   int
# 2277|-> SECU_PrintCertAttributes(FILE *out, CERTAttribute **attrs, const char *m, int level)
# 2278|   {
# 2279|       int rv = 0;

Error: COMPILER_WARNING (CWE-758): [#def822]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2952:1: warning[-Wmissing-prototypes]: no previous prototype for ‘printFlags’
# 2952 | printFlags(FILE *out, unsigned int flags, int level)
#      | ^~~~~~~~~~
# 2950|   
# 2951|   void
# 2952|-> printFlags(FILE *out, unsigned int flags, int level)
# 2953|   {
# 2954|       if ( flags & CERTDB_VALID_PEER ) {

Error: COMPILER_WARNING (CWE-477): [#def823]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘printFlags’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2954:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2954 |     if ( flags & CERTDB_VALID_PEER ) {
#      |     ^~
# 2952|   printFlags(FILE *out, unsigned int flags, int level)
# 2953|   {
# 2954|->     if ( flags & CERTDB_VALID_PEER ) {
# 2955|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2956|       }

Error: COMPILER_WARNING (CWE-477): [#def824]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:2954:5: warning[-Wdeprecated-declarations]: ‘__CERTDB_VALID_PEER’ is deprecated: CERTDB_VALID_PEER is now CERTDB_TERMINAL_RECORD
# 2952|   printFlags(FILE *out, unsigned int flags, int level)
# 2953|   {
# 2954|->     if ( flags & CERTDB_VALID_PEER ) {
# 2955|   	SECU_Indent(out, level); fprintf(out, "Valid Peer\n");
# 2956|       }

Error: COMPILER_WARNING (CWE-563): [#def825]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_ParseCommandLine’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3030:52: warning[-Wunused-parameter]: unused parameter ‘progName’
# 3030 | SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
#      |                                              ~~~~~~^~~~~~~~
# 3028|   
# 3029|   SECStatus
# 3030|-> SECU_ParseCommandLine(int argc, char **argv, char *progName, secuCommand *cmd)
# 3031|   {
# 3032|       PRBool found;

Error: CPPCHECK_WARNING (CWE-476): [#def826]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3042: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3040|   
# 3041|       for (i=0; i<cmd->numCommands; i++) {
# 3042|-> 	optstring[j++] = cmd->commands[i].flag;
# 3043|       }
# 3044|       for (i=0; i<cmd->numOptions; i++) {

Error: CPPCHECK_WARNING (CWE-476): [#def827]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3045: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3043|       }
# 3044|       for (i=0; i<cmd->numOptions; i++) {
# 3045|-> 	optstring[j++] = cmd->options[i].flag;
# 3046|   	if (cmd->options[i].needsArg)
# 3047|   	    optstring[j++] = ':';

Error: CPPCHECK_WARNING (CWE-476): [#def828]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3049: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: optstring
# 3047|   	    optstring[j++] = ':';
# 3048|       }
# 3049|->     optstring[j] = '\0';
# 3050|       optstate = PL_CreateOptState(argc, argv, optstring);
# 3051|   

Error: COMPILER_WARNING (CWE-195): [#def829]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_PrintPRandOSError’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3235:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3235 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3233|       char buffer[513];
# 3234|       PRInt32     errLen = PR_GetErrorTextLength();
# 3235|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3236|           PR_GetErrorText(buffer);
# 3237|       }

Error: COMPILER_WARNING (CWE-195): [#def830]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3239:30: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
# 3239 |     if (errLen > 0 && errLen < sizeof buffer) {
#      |                              ^
# 3237|       }
# 3238|       SECU_PrintError(progName, "function failed");
# 3239|->     if (errLen > 0 && errLen < sizeof buffer) {
# 3240|           PR_fprintf(PR_STDERR, "\t%s\n", buffer);
# 3241|       }

Error: COMPILER_WARNING (CWE-704): [#def831]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3299:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3299 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3297|   	    switch (node->error) {
# 3298|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3299|-> 		flags = (unsigned int)node->arg;
# 3300|   		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING (CWE-704): [#def832]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3299:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3297|   	    switch (node->error) {
# 3298|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3299|-> 		flags = (unsigned int)node->arg;
# 3300|   		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:

Error: COMPILER_WARNING: [#def833]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_printCertProblems’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3300:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3300 |                 switch (flags) {
#      |                 ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3314:13: note: here
# 3314 |             case SEC_ERROR_INADEQUATE_CERT_TYPE:
#      |             ^~~~
# 3298|   	    case SEC_ERROR_INADEQUATE_KEY_USAGE:
# 3299|   		flags = (unsigned int)node->arg;
# 3300|-> 		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:
# 3302|   		    errstr = "Cert cannot sign.";

Error: COMPILER_WARNING (CWE-704): [#def834]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3302:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3302 |                     errstr = "Cert cannot sign.";
#      |                            ^
# 3300|   		switch (flags) {
# 3301|   		case KU_DIGITAL_SIGNATURE:
# 3302|-> 		    errstr = "Cert cannot sign.";
# 3303|   		    break;
# 3304|   		case KU_KEY_ENCIPHERMENT:

Error: COMPILER_WARNING (CWE-704): [#def835]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3305:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3305 |                     errstr = "Cert cannot encrypt.";
#      |                            ^
# 3303|   		    break;
# 3304|   		case KU_KEY_ENCIPHERMENT:
# 3305|-> 		    errstr = "Cert cannot encrypt.";
# 3306|   		    break;
# 3307|   		case KU_KEY_CERT_SIGN:

Error: COMPILER_WARNING (CWE-704): [#def836]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3308:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3308 |                     errstr = "Cert cannot sign other certs.";
#      |                            ^
# 3306|   		    break;
# 3307|   		case KU_KEY_CERT_SIGN:
# 3308|-> 		    errstr = "Cert cannot sign other certs.";
# 3309|   		    break;
# 3310|   		default:

Error: COMPILER_WARNING (CWE-704): [#def837]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3311:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3311 |                     errstr = "[unknown usage].";
#      |                            ^
# 3309|   		    break;
# 3310|   		default:
# 3311|-> 		    errstr = "[unknown usage].";
# 3312|   		    break;
# 3313|   		}

Error: COMPILER_WARNING (CWE-704): [#def838]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3315:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3315 |                 flags = (unsigned int)node->arg;
#      |                         ^
# 3313|   		}
# 3314|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3315|-> 		flags = (unsigned int)node->arg;
# 3316|   		switch (flags) {
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING (CWE-704): [#def839]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3315:25: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
# 3313|   		}
# 3314|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3315|-> 		flags = (unsigned int)node->arg;
# 3316|   		switch (flags) {
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:

Error: COMPILER_WARNING: [#def840]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3316:17: warning[-Wimplicit-fallthrough=]: this statement may fall through
# 3316 |                 switch (flags) {
#      |                 ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3340:13: note: here
# 3340 |             case SEC_ERROR_UNKNOWN_ISSUER:
#      |             ^~~~
# 3314|   	    case SEC_ERROR_INADEQUATE_CERT_TYPE:
# 3315|   		flags = (unsigned int)node->arg;
# 3316|-> 		switch (flags) {
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3318|   		case NS_CERT_TYPE_SSL_SERVER:

Error: COMPILER_WARNING (CWE-704): [#def841]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3319:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3319 |                     errstr = "Cert cannot be used for SSL.";
#      |                            ^
# 3317|   		case NS_CERT_TYPE_SSL_CLIENT:
# 3318|   		case NS_CERT_TYPE_SSL_SERVER:
# 3319|-> 		    errstr = "Cert cannot be used for SSL.";
# 3320|   		    break;
# 3321|   		case NS_CERT_TYPE_SSL_CA:

Error: COMPILER_WARNING (CWE-704): [#def842]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3322:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3322 |                     errstr = "Cert cannot be used as an SSL CA.";
#      |                            ^
# 3320|   		    break;
# 3321|   		case NS_CERT_TYPE_SSL_CA:
# 3322|-> 		    errstr = "Cert cannot be used as an SSL CA.";
# 3323|   		    break;
# 3324|   		case NS_CERT_TYPE_EMAIL:

Error: COMPILER_WARNING (CWE-704): [#def843]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3325:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3325 |                     errstr = "Cert cannot be used for SMIME.";
#      |                            ^
# 3323|   		    break;
# 3324|   		case NS_CERT_TYPE_EMAIL:
# 3325|-> 		    errstr = "Cert cannot be used for SMIME.";
# 3326|   		    break;
# 3327|   		case NS_CERT_TYPE_EMAIL_CA:

Error: COMPILER_WARNING (CWE-704): [#def844]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3328:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3328 |                     errstr = "Cert cannot be used as an SMIME CA.";
#      |                            ^
# 3326|   		    break;
# 3327|   		case NS_CERT_TYPE_EMAIL_CA:
# 3328|-> 		    errstr = "Cert cannot be used as an SMIME CA.";
# 3329|   		    break;
# 3330|   		case NS_CERT_TYPE_OBJECT_SIGNING:

Error: COMPILER_WARNING (CWE-704): [#def845]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3331:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3331 |                     errstr = "Cert cannot be used for object signing.";
#      |                            ^
# 3329|   		    break;
# 3330|   		case NS_CERT_TYPE_OBJECT_SIGNING:
# 3331|-> 		    errstr = "Cert cannot be used for object signing.";
# 3332|   		    break;
# 3333|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:

Error: COMPILER_WARNING (CWE-704): [#def846]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3334:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3334 |                     errstr = "Cert cannot be used as an object signing CA.";
#      |                            ^
# 3332|   		    break;
# 3333|   		case NS_CERT_TYPE_OBJECT_SIGNING_CA:
# 3334|-> 		    errstr = "Cert cannot be used as an object signing CA.";
# 3335|   		    break;
# 3336|   		default:

Error: COMPILER_WARNING (CWE-704): [#def847]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3337:28: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 3337 |                     errstr = "[unknown usage].";
#      |                            ^
# 3335|   		    break;
# 3336|   		default:
# 3337|-> 		    errstr = "[unknown usage].";
# 3338|   		    break;
# 3339|   		}

Error: COMPILER_WARNING (CWE-195): [#def848]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_StoreCRL’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3399:62: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘unsigned int’
# 3399 |             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
#      |                                                              ^~
# 3397|                          NS_CRL_TRAILER);
# 3398|           } else {
# 3399|->             if (PR_Write(outFile, derCrl->data, derCrl->len) != derCrl->len) {
# 3400|                   return SECFailure;
# 3401|               }

Error: COMPILER_WARNING (CWE-563): [#def849]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c: scope_hint: In function ‘SECU_FindCrlIssuer’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/secutil.c:3613:35: warning[-Wunused-parameter]: unused parameter ‘authorityKeyID’
# 3613 |                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
#      |                    ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
# 3611|   CERTCertificate *
# 3612|   SECU_FindCrlIssuer(CERTCertDBHandle *dbhandle, SECItem* subject,
# 3613|->                    CERTAuthKeyID* authorityKeyID, PRTime validTime)
# 3614|   {
# 3615|       CERTCertificate *issuerCert = NULL;

Error: COMPILER_WARNING (CWE-704): [#def850]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/tkstool.c: scope_hint: In function ‘main’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/tkstool.c:155:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  155 |     char                          *DBPrefix                    = "";
#      |                                                                  ^~
#  153|       char                           commandToRun                = '\0';
#  154|       char                          *DBDir                       = NULL;
#  155|->     char                          *DBPrefix                    = "";
#  156|       char                          *input                       = NULL;
#  157|       char                          *keyname                     = NULL;

Error: COMPILER_WARNING (CWE-704): [#def851]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/tkstool.c:161:66: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  161 |     char                          *slotname                    = "internal";
#      |                                                                  ^~~~~~~~~~
#  159|       char                          *output                      = NULL;
#  160|       char                          *SeedNoise                   = NULL;
#  161|->     char                          *slotname                    = "internal";
#  162|       char                          *transport_keyname           = NULL;
#  163|       int                            commandsEntered             = 0;

Error: COMPILER_WARNING (CWE-195): [#def852]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/tkstool.c:878:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  878 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
#  876|           PRInt32 errLen = PR_GetErrorTextLength();
#  877|   
#  878|->         if( errLen > 0 && errLen < sizeof buffer ) {
#  879|               PR_GetErrorText( buffer );
#  880|           }

Error: COMPILER_WARNING (CWE-195): [#def853]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/tkstool.c:888:34: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  888 |         if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                  ^
#  886|                       "NSS_Initialize() failed" );
#  887|   
#  888|->         if( errLen > 0 && errLen < sizeof buffer ) {
#  889|               PR_fprintf( PR_STDERR, "\t%s\n", buffer );
#  890|           } else {

Error: COMPILER_WARNING (CWE-195): [#def854]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/tkstool.c:919:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  919 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
#  917|               PRInt32 errLen = PR_GetErrorTextLength();
#  918|   
#  919|->             if( errLen > 0 && errLen < sizeof buffer ) {
#  920|                   PR_GetErrorText( buffer );
#  921|               }

Error: COMPILER_WARNING (CWE-195): [#def855]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/tkstool.c:931:38: warning[-Wsign-compare]: comparison of integer expressions of different signedness: ‘PRInt32’ {aka ‘int’} and ‘long unsigned int’
#  931 |             if( errLen > 0 && errLen < sizeof buffer ) {
#      |                                      ^
#  929|                           "\" exists!" );
#  930|   
#  931|->             if( errLen > 0 && errLen < sizeof buffer ) {
#  932|                   PR_fprintf( PR_STDERR, "\t%s\n", buffer );
#  933|               } else {

Error: COMPILER_WARNING (CWE-252): [#def856]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c: scope_hint: In function ‘TKS_ClearScreen’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c:351:5: warning[-Wunused-result]: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’
#  351 |     system( "tput clear" );
#      |     ^~~~~~~~~~~~~~~~~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/delete.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/secutil.h:51: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/include/pistool.h:58: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/pistool/src/file.c:20: included_from: Included from here.
/usr/include/nss3/key.h:9:9: note: ‘#pragma message: key.h is deprecated. Please include keyhi.h instead.’
#    9 | #pragma message("key.h is deprecated. Please include keyhi.h instead.")
#      |         ^~~~~~~
#  349|   {
#  350|   #if defined(XP_UNIX) && !defined(VMS)
#  351|->     system( "tput clear" );
#  352|   #else
#  353|       system( "cls" );

Error: COMPILER_WARNING (CWE-563): [#def857]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c:383:20: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  383 |     int            rv = 0;
#      |                    ^~
#  381|       int            count;
#  382|       int            c;
#  383|->     int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;

Error: COMPILER_WARNING (CWE-563): [#def858]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c:385:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_min’ set but not used
#  385 |     cc_t           orig_cc_min;
#      |                    ^~~~~~~~~~~
#  383|       int            rv = 0;
#  384|   #ifdef XP_UNIX
#  385|->     cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;

Error: COMPILER_WARNING (CWE-563): [#def859]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c:386:20: warning[-Wunused-but-set-variable]: variable ‘orig_cc_time’ set but not used
#  386 |     cc_t           orig_cc_time;
#      |                    ^~~~~~~~~~~~
#  384|   #ifdef XP_UNIX
#  385|       cc_t           orig_cc_min;
#  386|->     cc_t           orig_cc_time;
#  387|       tcflag_t       orig_lflag;
#  388|       struct termios tio;

Error: COMPILER_WARNING (CWE-563): [#def860]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c:387:20: warning[-Wunused-but-set-variable]: variable ‘orig_lflag’ set but not used
#  387 |     tcflag_t       orig_lflag;
#      |                    ^~~~~~~~~~
#  385|       cc_t           orig_cc_min;
#  386|       cc_t           orig_cc_time;
#  387|->     tcflag_t       orig_lflag;
#  388|       struct termios tio;
#  389|   #endif

Error: COMPILER_WARNING: [#def861]
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c: scope_hint: In function ‘TKS_TypeProceedToContinue’
pki-11.8.0-beta6/base/tools/src/main/native/tkstool/util.c:390:60: warning[-Wunterminated-string-initialization]: initializer-string for array of ‘char’ truncates NUL terminator but destination lacks ‘nonstring’ attribute (10 chars into 9 available)
#  390 |     char           keystrokes[KEYSTROKES_TO_PROCEED + 1] = "\0\0\0\0\0\0\0\0\0";
#      |                                                            ^~~~~~~~~~~~~~~~~~~~
#  388|       struct termios tio;
#  389|   #endif
#  390|->     char           keystrokes[KEYSTROKES_TO_PROCEED + 1] = "\0\0\0\0\0\0\0\0\0";
#  391|   
#  392|       /* display the continuation message */

Error: CPPCHECK_WARNING (CWE-628): [#def862]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Client.cpp:147: error[sprintfOverlappingData]: Undefined behavior: Variable 'output' is used as parameter and destination in sprintf().
#  145|     for (i = 0; i < (int) buf.size (); ++i)
#  146|       {
#  147|->       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#  148|       }
#  149|   }

Error: COMPILER_WARNING: [#def863]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Client.cpp: scope_hint: In member function ‘RA_Client::OpTokenStatus(NameValueSet*)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Client.cpp:147:27: warning[-Wformat-overflow=]: ‘%02x’ directive writing 2 bytes into a region of size between 1 and 2048
#  147 |       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#      |                           ^~~~
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Client.cpp:147:24: note: directive argument in the range [0, 255]
#  147 |       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#      |                        ^~~~~~~~
/usr/include/bits/stdio2.h:30:34: note: ‘__sprintf_chk’ output between 3 and 2050 bytes into a destination of size 2048
#   30 |   return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
#      |          ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   31 |                                   __glibc_objsize (__s), __fmt,
#      |                                   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   32 |                                   __va_arg_pack ());
#      |                                   ~~~~~~~~~~~~~~~~~
#  145|     for (i = 0; i < (int) buf.size (); ++i)
#  146|       {
#  147|->       sprintf (output, "%s%02x", output, ((BYTE *) buf)[i]);
#  148|       }
#  149|   }

Error: COMPILER_WARNING (CWE-1164): [#def864]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Conn.cpp:156:1: warning[-Wunused-function]: ‘void printBuf(Buffer*)’ defined but not used
#  156 | printBuf (Buffer * buf)
#      | ^~~~~~~~
#  154|   
#  155|   static void
#  156|-> printBuf (Buffer * buf)
#  157|   {
#  158|     int sum = 0;

Error: COMPILER_WARNING (CWE-1164): [#def865]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Conn.cpp: scope_hint: At global scope
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Conn.cpp:213:1: warning[-Wunused-function]: ‘PRUint32 GetIPAddress(const char*)’ defined but not used
#  213 | GetIPAddress (const char *hostName)
#      | ^~~~~~~~~~~~
#  211|   
#  212|   static PRUint32
#  213|-> GetIPAddress (const char *hostName)
#  214|   {
#  215|     const unsigned char *p;

Error: COMPILER_WARNING (CWE-563): [#def866]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Conn.cpp: scope_hint: In function ‘int ReadResponseHeader(PRFileDesc*)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Conn.cpp:457:11: warning[-Wunused-but-set-variable]: variable ‘rc’ set but not used
#  457 |   PRInt32 rc;
#      |           ^~
#  455|   {
#  456|     char buf[1024];
#  457|->   PRInt32 rc;
#  458|     char *cur = buf;
#  459|     int i;

Error: COMPILER_WARNING (CWE-710): [#def867]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:59:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   59 |   { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#      |     ^~~~~~~~~~~
#   57|   static CurveNameTagPair nameTagPair[] =
#   58|   { 
#   59|->   { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#   60|     { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},

Error: COMPILER_WARNING (CWE-710): [#def868]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:60:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   60 |   { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#      |     ^~~~~~~~~~
#   58|   { 
#   59|     { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#   60|->   { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},

Error: COMPILER_WARNING (CWE-710): [#def869]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:61:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   61 |   { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#      |     ^~~~~~~~~~~
#   59|     { "sect163k1", SEC_OID_SECG_EC_SECT163K1},
#   60|     { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|->   { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},

Error: COMPILER_WARNING (CWE-710): [#def870]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:62:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   62 |   { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#      |     ^~~~~~~~~~~
#   60|     { "nistk163", SEC_OID_SECG_EC_SECT163K1},
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|->   { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},

Error: COMPILER_WARNING (CWE-710): [#def871]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:63:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   63 |   { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#      |     ^~~~~~~~~~
#   61|     { "sect163r1", SEC_OID_SECG_EC_SECT163R1},
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|->   { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},

Error: COMPILER_WARNING (CWE-710): [#def872]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:64:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   64 |   { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#      |     ^~~~~~~~~~~
#   62|     { "sect163r2", SEC_OID_SECG_EC_SECT163R2},
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|->   { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},

Error: COMPILER_WARNING (CWE-710): [#def873]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:65:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   65 |   { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#      |     ^~~~~~~~~~~
#   63|     { "nistb163", SEC_OID_SECG_EC_SECT163R2},
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|->   { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},

Error: COMPILER_WARNING (CWE-710): [#def874]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:66:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   66 |   { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#      |     ^~~~~~~~~~~
#   64|     { "sect193r1", SEC_OID_SECG_EC_SECT193R1},
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|->   { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},

Error: COMPILER_WARNING (CWE-710): [#def875]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:67:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   67 |   { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#      |     ^~~~~~~~~~
#   65|     { "sect193r2", SEC_OID_SECG_EC_SECT193R2},
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|->   { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},

Error: COMPILER_WARNING (CWE-710): [#def876]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:68:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   68 |   { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#      |     ^~~~~~~~~~~
#   66|     { "sect233k1", SEC_OID_SECG_EC_SECT233K1},
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|->   { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},

Error: COMPILER_WARNING (CWE-710): [#def877]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:69:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   69 |   { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#      |     ^~~~~~~~~~
#   67|     { "nistk233", SEC_OID_SECG_EC_SECT233K1},
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|->   { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},

Error: COMPILER_WARNING (CWE-710): [#def878]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:70:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   70 |   { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#      |     ^~~~~~~~~~~
#   68|     { "sect233r1", SEC_OID_SECG_EC_SECT233R1},
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|->   { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},

Error: COMPILER_WARNING (CWE-710): [#def879]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:71:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   71 |   { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#      |     ^~~~~~~~~~~
#   69|     { "nistb233", SEC_OID_SECG_EC_SECT233R1},
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|->   { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},

Error: COMPILER_WARNING (CWE-710): [#def880]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:72:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   72 |   { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#      |     ^~~~~~~~~~
#   70|     { "sect239k1", SEC_OID_SECG_EC_SECT239K1},
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|->   { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},

Error: COMPILER_WARNING (CWE-710): [#def881]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:73:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   73 |   { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#      |     ^~~~~~~~~~~
#   71|     { "sect283k1", SEC_OID_SECG_EC_SECT283K1},
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|->   { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},

Error: COMPILER_WARNING (CWE-710): [#def882]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:74:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   74 |   { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#      |     ^~~~~~~~~~
#   72|     { "nistk283", SEC_OID_SECG_EC_SECT283K1},
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|->   { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},

Error: COMPILER_WARNING (CWE-710): [#def883]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:75:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   75 |   { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#      |     ^~~~~~~~~~~
#   73|     { "sect283r1", SEC_OID_SECG_EC_SECT283R1},
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|->   { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},

Error: COMPILER_WARNING (CWE-710): [#def884]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:76:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   76 |   { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#      |     ^~~~~~~~~~
#   74|     { "nistb283", SEC_OID_SECG_EC_SECT283R1},
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|->   { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},

Error: COMPILER_WARNING (CWE-710): [#def885]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:77:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   77 |   { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#      |     ^~~~~~~~~~~
#   75|     { "sect409k1", SEC_OID_SECG_EC_SECT409K1},
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|->   { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},

Error: COMPILER_WARNING (CWE-710): [#def886]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:78:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   78 |   { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#      |     ^~~~~~~~~~
#   76|     { "nistk409", SEC_OID_SECG_EC_SECT409K1},
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|->   { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},

Error: COMPILER_WARNING (CWE-710): [#def887]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:79:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   79 |   { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#      |     ^~~~~~~~~~~
#   77|     { "sect409r1", SEC_OID_SECG_EC_SECT409R1},
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|->   { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},

Error: COMPILER_WARNING (CWE-710): [#def888]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:80:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   80 |   { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#      |     ^~~~~~~~~~
#   78|     { "nistb409", SEC_OID_SECG_EC_SECT409R1},
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|->   { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},

Error: COMPILER_WARNING (CWE-710): [#def889]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:81:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   81 |   { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#      |     ^~~~~~~~~~~
#   79|     { "sect571k1", SEC_OID_SECG_EC_SECT571K1},
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|->   { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},

Error: COMPILER_WARNING (CWE-710): [#def890]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:82:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   82 |   { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#      |     ^~~~~~~~~~
#   80|     { "nistk571", SEC_OID_SECG_EC_SECT571K1},
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|->   { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},

Error: COMPILER_WARNING (CWE-710): [#def891]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:83:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   83 |   { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#      |     ^~~~~~~~~~~
#   81|     { "sect571r1", SEC_OID_SECG_EC_SECT571R1},
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|->   { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},

Error: COMPILER_WARNING (CWE-710): [#def892]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:84:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   84 |   { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#      |     ^~~~~~~~~~~
#   82|     { "nistb571", SEC_OID_SECG_EC_SECT571R1},
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|->   { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},

Error: COMPILER_WARNING (CWE-710): [#def893]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:85:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   85 |   { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#      |     ^~~~~~~~~~~
#   83|     { "secp160k1", SEC_OID_SECG_EC_SECP160K1},
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|->   { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},

Error: COMPILER_WARNING (CWE-710): [#def894]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:86:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   86 |   { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#      |     ^~~~~~~~~~~
#   84|     { "secp160r1", SEC_OID_SECG_EC_SECP160R1},
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|->   { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},

Error: COMPILER_WARNING (CWE-710): [#def895]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:87:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   87 |   { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#      |     ^~~~~~~~~~~
#   85|     { "secp160r2", SEC_OID_SECG_EC_SECP160R2},
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|->   { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},

Error: COMPILER_WARNING (CWE-710): [#def896]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:88:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   88 |   { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#      |     ^~~~~~~~~~
#   86|     { "secp192k1", SEC_OID_SECG_EC_SECP192K1},
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|->   { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},

Error: COMPILER_WARNING (CWE-710): [#def897]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:89:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   89 |   { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#      |     ^~~~~~~~~~~
#   87|     { "secp192r1", SEC_OID_SECG_EC_SECP192R1},
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|->   { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},

Error: COMPILER_WARNING (CWE-710): [#def898]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:90:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   90 |   { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#      |     ^~~~~~~~~~~
#   88|     { "nistp192", SEC_OID_SECG_EC_SECP192R1},
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|->   { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},

Error: COMPILER_WARNING (CWE-710): [#def899]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:91:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   91 |   { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#      |     ^~~~~~~~~~
#   89|     { "secp224k1", SEC_OID_SECG_EC_SECP224K1},
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|->   { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},

Error: COMPILER_WARNING (CWE-710): [#def900]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:92:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   92 |   { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#      |     ^~~~~~~~~~~
#   90|     { "secp224r1", SEC_OID_SECG_EC_SECP224R1},
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|->   { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},

Error: COMPILER_WARNING (CWE-710): [#def901]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:93:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   93 |   { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#      |     ^~~~~~~~~~~
#   91|     { "nistp224", SEC_OID_SECG_EC_SECP224R1},
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|->   { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},

Error: COMPILER_WARNING (CWE-710): [#def902]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:94:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   94 |   { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#      |     ^~~~~~~~~~
#   92|     { "secp256k1", SEC_OID_SECG_EC_SECP256K1},
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|->   { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},

Error: COMPILER_WARNING (CWE-710): [#def903]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:95:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   95 |   { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#      |     ^~~~~~~~~~~
#   93|     { "secp256r1", SEC_OID_SECG_EC_SECP256R1},
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|->   { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|     { "secp521r1", SEC_OID_SECG_EC_SECP521R1},

Error: COMPILER_WARNING (CWE-710): [#def904]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:96:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   96 |   { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#      |     ^~~~~~~~~~
#   94|     { "nistp256", SEC_OID_SECG_EC_SECP256R1},
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|->   { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|     { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#   98|     { "nistp521", SEC_OID_SECG_EC_SECP521R1},

Error: COMPILER_WARNING (CWE-710): [#def905]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:97:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   97 |   { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#      |     ^~~~~~~~~~~
#   95|     { "secp384r1", SEC_OID_SECG_EC_SECP384R1},
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|->   { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#   98|     { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#   99|   

Error: COMPILER_WARNING (CWE-710): [#def906]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:98:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#   98 |   { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#      |     ^~~~~~~~~~
#   96|     { "nistp384", SEC_OID_SECG_EC_SECP384R1},
#   97|     { "secp521r1", SEC_OID_SECG_EC_SECP521R1},
#   98|->   { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#   99|   
#  100|     { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },

Error: COMPILER_WARNING (CWE-710): [#def907]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:100:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  100 |   { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#      |     ^~~~~~~~~~~~
#   98|     { "nistp521", SEC_OID_SECG_EC_SECP521R1},
#   99|   
#  100|->   { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#  101|     { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },

Error: COMPILER_WARNING (CWE-710): [#def908]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:101:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  101 |   { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#      |     ^~~~~~~~~~~~
#   99|   
#  100|     { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#  101|->   { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },

Error: COMPILER_WARNING (CWE-710): [#def909]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:102:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  102 |   { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#      |     ^~~~~~~~~~~~
#  100|     { "prime192v1", SEC_OID_ANSIX962_EC_PRIME192V1 },
#  101|     { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|->   { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|     { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },

Error: COMPILER_WARNING (CWE-710): [#def910]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:103:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  103 |   { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#      |     ^~~~~~~~~~~~
#  101|     { "prime192v2", SEC_OID_ANSIX962_EC_PRIME192V2 },
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|->   { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|     { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#  105|     { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },

Error: COMPILER_WARNING (CWE-710): [#def911]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:104:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  104 |   { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#      |     ^~~~~~~~~~~~
#  102|     { "prime192v3", SEC_OID_ANSIX962_EC_PRIME192V3 },
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|->   { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#  105|     { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#  106|   

Error: COMPILER_WARNING (CWE-710): [#def912]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:105:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  105 |   { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#      |     ^~~~~~~~~~~~
#  103|     { "prime239v1", SEC_OID_ANSIX962_EC_PRIME239V1 },
#  104|     { "prime239v2", SEC_OID_ANSIX962_EC_PRIME239V2 },
#  105|->   { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#  106|   
#  107|     { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },

Error: COMPILER_WARNING (CWE-710): [#def913]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:107:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  107 |   { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#      |     ^~~~~~~~~~~~
#  105|     { "prime239v3", SEC_OID_ANSIX962_EC_PRIME239V3 },
#  106|   
#  107|->   { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#  108|     { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },

Error: COMPILER_WARNING (CWE-710): [#def914]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:108:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  108 |   { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#      |     ^~~~~~~~~~~~
#  106|   
#  107|     { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#  108|->   { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },

Error: COMPILER_WARNING (CWE-710): [#def915]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:109:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  109 |   { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#      |     ^~~~~~~~~~~~
#  107|     { "c2pnb163v1", SEC_OID_ANSIX962_EC_C2PNB163V1 },
#  108|     { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|->   { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },

Error: COMPILER_WARNING (CWE-710): [#def916]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:110:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  110 |   { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#      |     ^~~~~~~~~~~~
#  108|     { "c2pnb163v2", SEC_OID_ANSIX962_EC_C2PNB163V2 },
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|->   { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },

Error: COMPILER_WARNING (CWE-710): [#def917]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:111:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  111 |   { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#      |     ^~~~~~~~~~~~
#  109|     { "c2pnb163v3", SEC_OID_ANSIX962_EC_C2PNB163V3 },
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|->   { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },

Error: COMPILER_WARNING (CWE-710): [#def918]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:112:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  112 |   { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#      |     ^~~~~~~~~~~~
#  110|     { "c2pnb176v1", SEC_OID_ANSIX962_EC_C2PNB176V1 },
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|->   { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },

Error: COMPILER_WARNING (CWE-710): [#def919]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:113:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  113 |   { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#      |     ^~~~~~~~~~~~
#  111|     { "c2tnb191v1", SEC_OID_ANSIX962_EC_C2TNB191V1 },
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|->   { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },

Error: COMPILER_WARNING (CWE-710): [#def920]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:114:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  114 |   { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#      |     ^~~~~~~~~~~~
#  112|     { "c2tnb191v2", SEC_OID_ANSIX962_EC_C2TNB191V2 },
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|->   { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },

Error: COMPILER_WARNING (CWE-710): [#def921]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:115:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  115 |   { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#      |     ^~~~~~~~~~~~
#  113|     { "c2tnb191v3", SEC_OID_ANSIX962_EC_C2TNB191V3 },
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|->   { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },

Error: COMPILER_WARNING (CWE-710): [#def922]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:116:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  116 |   { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#      |     ^~~~~~~~~~~~
#  114|     { "c2onb191v4", SEC_OID_ANSIX962_EC_C2ONB191V4 },
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|->   { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },

Error: COMPILER_WARNING (CWE-710): [#def923]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:117:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  117 |   { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#      |     ^~~~~~~~~~~~
#  115|     { "c2onb191v5", SEC_OID_ANSIX962_EC_C2ONB191V5 },
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|->   { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },

Error: COMPILER_WARNING (CWE-710): [#def924]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:118:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  118 |   { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#      |     ^~~~~~~~~~~~
#  116|     { "c2pnb208w1", SEC_OID_ANSIX962_EC_C2PNB208W1 },
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|->   { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },

Error: COMPILER_WARNING (CWE-710): [#def925]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:119:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  119 |   { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#      |     ^~~~~~~~~~~~
#  117|     { "c2tnb239v1", SEC_OID_ANSIX962_EC_C2TNB239V1 },
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|->   { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },

Error: COMPILER_WARNING (CWE-710): [#def926]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:120:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  120 |   { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#      |     ^~~~~~~~~~~~
#  118|     { "c2tnb239v2", SEC_OID_ANSIX962_EC_C2TNB239V2 },
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|->   { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },

Error: COMPILER_WARNING (CWE-710): [#def927]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:121:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  121 |   { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#      |     ^~~~~~~~~~~~
#  119|     { "c2tnb239v3", SEC_OID_ANSIX962_EC_C2TNB239V3 },
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|->   { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },

Error: COMPILER_WARNING (CWE-710): [#def928]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:122:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  122 |   { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#      |     ^~~~~~~~~~~~
#  120|     { "c2onb239v4", SEC_OID_ANSIX962_EC_C2ONB239V4 },
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|->   { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },

Error: COMPILER_WARNING (CWE-710): [#def929]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:123:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  123 |   { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#      |     ^~~~~~~~~~~~
#  121|     { "c2onb239v5", SEC_OID_ANSIX962_EC_C2ONB239V5 },
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|->   { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|     { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },

Error: COMPILER_WARNING (CWE-710): [#def930]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:124:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  124 |   { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#      |     ^~~~~~~~~~~~
#  122|     { "c2pnb272w1", SEC_OID_ANSIX962_EC_C2PNB272W1 },
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|->   { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|     { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#  126|     { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },

Error: COMPILER_WARNING (CWE-710): [#def931]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:125:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  125 |   { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#      |     ^~~~~~~~~~~~
#  123|     { "c2pnb304w1", SEC_OID_ANSIX962_EC_C2PNB304W1 },
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|->   { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#  126|     { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#  127|   

Error: COMPILER_WARNING (CWE-710): [#def932]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:126:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  126 |   { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#      |     ^~~~~~~~~~~~
#  124|     { "c2tnb359v1", SEC_OID_ANSIX962_EC_C2TNB359V1 },
#  125|     { "c2pnb368w1", SEC_OID_ANSIX962_EC_C2PNB368W1 },
#  126|->   { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#  127|   
#  128|     { "secp112r1", SEC_OID_SECG_EC_SECP112R1},

Error: COMPILER_WARNING (CWE-710): [#def933]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:128:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  128 |   { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#      |     ^~~~~~~~~~~
#  126|     { "c2tnb431r1", SEC_OID_ANSIX962_EC_C2TNB431R1 },
#  127|   
#  128|->   { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#  129|     { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|     { "secp128r1", SEC_OID_SECG_EC_SECP128R1},

Error: COMPILER_WARNING (CWE-710): [#def934]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:129:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  129 |   { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#      |     ^~~~~~~~~~~
#  127|   
#  128|     { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#  129|->   { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|     { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#  131|     { "secp128r2", SEC_OID_SECG_EC_SECP128R2},

Error: COMPILER_WARNING (CWE-710): [#def935]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:130:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  130 |   { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#      |     ^~~~~~~~~~~
#  128|     { "secp112r1", SEC_OID_SECG_EC_SECP112R1},
#  129|     { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|->   { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#  131|     { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#  132|   

Error: COMPILER_WARNING (CWE-710): [#def936]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:131:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  131 |   { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#      |     ^~~~~~~~~~~
#  129|     { "secp112r2", SEC_OID_SECG_EC_SECP112R2},
#  130|     { "secp128r1", SEC_OID_SECG_EC_SECP128R1},
#  131|->   { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#  132|   
#  133|     { "sect113r1", SEC_OID_SECG_EC_SECT113R1},

Error: COMPILER_WARNING (CWE-710): [#def937]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:133:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  133 |   { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#      |     ^~~~~~~~~~~
#  131|     { "secp128r2", SEC_OID_SECG_EC_SECP128R2},
#  132|   
#  133|->   { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#  134|     { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|     { "sect131r1", SEC_OID_SECG_EC_SECT131R1},

Error: COMPILER_WARNING (CWE-710): [#def938]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:134:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  134 |   { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#      |     ^~~~~~~~~~~
#  132|   
#  133|     { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#  134|->   { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|     { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#  136|     { "sect131r2", SEC_OID_SECG_EC_SECT131R2},

Error: COMPILER_WARNING (CWE-710): [#def939]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:135:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  135 |   { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#      |     ^~~~~~~~~~~
#  133|     { "sect113r1", SEC_OID_SECG_EC_SECT113R1},
#  134|     { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|->   { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#  136|     { "sect131r2", SEC_OID_SECG_EC_SECT131R2},
#  137|   };

Error: COMPILER_WARNING (CWE-710): [#def940]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:136:5: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  136 |   { "sect131r2", SEC_OID_SECG_EC_SECT131R2},
#      |     ^~~~~~~~~~~
#  134|     { "sect113r2", SEC_OID_SECG_EC_SECT113R2},
#  135|     { "sect131r1", SEC_OID_SECG_EC_SECT131R1},
#  136|->   { "sect131r2", SEC_OID_SECG_EC_SECT131R2},
#  137|   };
#  138|   

Error: COMPILER_WARNING (CWE-710): [#def941]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp: scope_hint: In member function ‘void RA_Token::SetMSN(Buffer&)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:348:25: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
#  348 |     m_msn = *(ToBuffer ("FFFFFFFF"));
#      |                         ^~~~~~~~~~
#  346|       // Supply a default value of 'FFFFFFFF' for 'msn'
#  347|       printf ("RA_Token::SetMSN - Use 'FFFFFFFF' instead of specified 'msn'!\n");
#  348|->     m_msn = *(ToBuffer ("FFFFFFFF"));
#  349|     } else {
#  350|       m_msn = msn;

Error: COMPILER_WARNING (CWE-563): [#def942]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp: scope_hint: In member function ‘PK11SymKey* RA_Token::CreateSessionKey(keyType, Buffer&, Buffer&)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:761:8: warning[-Wunused-but-set-variable]: variable ‘input’ set but not used
#  761 |   char input[16];
#      |        ^~~~~
#  759|   {
#  760|     BYTE *key = NULL;
#  761|->   char input[16];
#  762|     int i;
#  763|     BYTE *cc = (BYTE *) card_challenge;

Error: COMPILER_WARNING (CWE-563): [#def943]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp: scope_hint: In member function ‘APDU_Response* RA_Token::ProcessGenerateKey(Generate_Key_APDU*, NameValueSet*, NameValueSet*)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1076:13: warning[-Wunused-but-set-variable]: variable ‘algtag’ set but not used
# 1076 |   SECOidTag algtag;
#      |             ^~~~~~
# 1074|   {
# 1075|     CK_MECHANISM_TYPE mechanism;
# 1076|->   SECOidTag algtag;
# 1077|     PK11RSAGenParams rsaparams;
# 1078|     void *x_params;

Error: COMPILER_WARNING (CWE-710): [#def944]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp: scope_hint: In member function ‘APDU_Response* RA_Token::ProcessGenerateKeyECC(Generate_Key_ECC_APDU*, NameValueSet*, NameValueSet*)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1380:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1380 |         keycurve = "nistp256";
#      |                    ^~~~~~~~~~
# 1378|       /* only three curves are supported by token */
# 1379|       if (keysize == 256) {
# 1380|->         keycurve = "nistp256";
# 1381|       } else if (keysize == 384) {
# 1382|           keycurve = "nistp384";

Error: COMPILER_WARNING (CWE-710): [#def945]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1382:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1382 |         keycurve = "nistp384";
#      |                    ^~~~~~~~~~
# 1380|           keycurve = "nistp256";
# 1381|       } else if (keysize == 384) {
# 1382|->         keycurve = "nistp384";
# 1383|       } else if (keysize == 521) {
# 1384|           keycurve = "nistp521";

Error: COMPILER_WARNING (CWE-710): [#def946]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1384:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1384 |         keycurve = "nistp521";
#      |                    ^~~~~~~~~~
# 1382|           keycurve = "nistp384";
# 1383|       } else if (keysize == 521) {
# 1384|->         keycurve = "nistp521";
# 1385|       } else {
# 1386|           Output("unsupported key size: %d, default to nistp256", keysize);

Error: COMPILER_WARNING (CWE-710): [#def947]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1387:20: warning[-Wwrite-strings]: ISO C++ forbids converting a string constant to ‘char*’
# 1387 |         keycurve = "nistp256";
#      |                    ^~~~~~~~~~
# 1385|       } else {
# 1386|           Output("unsupported key size: %d, default to nistp256", keysize);
# 1387|->         keycurve = "nistp256";
# 1388|       }
# 1389|   

Error: COMPILER_WARNING (CWE-563): [#def948]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1397:19: warning[-Wunused-variable]: unused variable ‘attrFlags’
# 1397 |     PK11AttrFlags attrFlags = 0;
#      |                   ^~~~~~~~~
# 1395|           wrapped_challenge_len);
# 1396|   
# 1397|->     PK11AttrFlags attrFlags = 0;
# 1398|   
# 1399|       /* generate key pair */

Error: COMPILER_WARNING (CWE-563): [#def949]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1418:17: warning[-Wunused-variable]: unused variable ‘n’
# 1418 |             int n = ReadLine(fd_slotname, slotname, 500, &removed_return);
#      |                 ^
# 1416|           } else {
# 1417|               fd_slotname = PR_Open(slotnamefile, PR_RDWR, 00400|00200);
# 1418|->             int n = ReadLine(fd_slotname, slotname, 500, &removed_return);
# 1419|               slot = PK11_FindSlotByName(slotname);
# 1420|           }

Error: COMPILER_WARNING (CWE-563): [#def950]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1521:28: warning[-Wunused-variable]: unused variable ‘pkeyb’
# 1521 |             unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
#      |                            ^~~~~
# 1519|               printf("begin verifying proof");
# 1520|   #endif
# 1521|->             unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
# 1522|               int pkeyb_len = data_blob.size ();
# 1523|   

Error: COMPILER_WARNING (CWE-563): [#def951]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:1522:17: warning[-Wunused-variable]: unused variable ‘pkeyb_len’
# 1522 |             int pkeyb_len = data_blob.size ();
#      |                 ^~~~~~~~~
# 1520|   #endif
# 1521|               unsigned char *pkeyb = (unsigned char *) (BYTE *) data_blob;
# 1522|->             int pkeyb_len = data_blob.size ();
# 1523|   
# 1524|   Output("skipping VerifyProof");

Error: CPPCHECK_WARNING (CWE-476): [#def952]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:2393: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_pin
# 2391|     for (i = 0; i < (int) new_pin_buf.size (); i++)
# 2392|       {
# 2393|->       new_pin[i] = ((BYTE *) new_pin_buf)[i];
# 2394|       }
# 2395|     new_pin[new_pin_buf.size ()] = '\0';

Error: CPPCHECK_WARNING (CWE-476): [#def953]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/RA_Token.cpp:2395: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_pin
# 2393|         new_pin[i] = ((BYTE *) new_pin_buf)[i];
# 2394|       }
# 2395|->   new_pin[new_pin_buf.size ()] = '\0';
# 2396|   
# 2397|     if (m_pin != NULL)

Error: COMPILER_WARNING (CWE-563): [#def954]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/TPSClientCLI.cpp: scope_hint: In function ‘void Java_com_netscape_cmstools_tps_TPSClientCLI_handleSecureIdRequest(JNIEnv*, jobject, jlong, jobject, jlong, jlong, jlong)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/TPSClientCLI.cpp:364:30: warning[-Wunused-variable]: unused variable ‘msg’
#  364 |     RA_SecureId_Request_Msg* msg = (RA_SecureId_Request_Msg*) message;
#      |                              ^~~
#  362|       NameValueSet* set = convertParams(env, params);
#  363|       RA_Conn* conn = (RA_Conn*) connection;
#  364|->     RA_SecureId_Request_Msg* msg = (RA_SecureId_Request_Msg*) message;
#  365|   
#  366|       RA_SecureId_Response_Msg* resp = new RA_SecureId_Response_Msg(

Error: COMPILER_WARNING (CWE-563): [#def955]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/Util.cpp: scope_hint: In static member function ‘static PK11SymKey* Util::DiversifyKey(PK11SymKey*, Buffer&, PK11SlotInfo*)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/Util.cpp:528:14: warning[-Wunused-but-set-variable]: variable ‘status’ set but not used
#  528 |     PRStatus status = PR_FAILURE ;
#      |              ^~~~~~
#  526|   {
#  527|       PK11SymKey *key = NULL;
#  528|->     PRStatus status = PR_FAILURE ;
#  529|       PK11Context *context = NULL;
#  530|   #ifdef DES2_WORKAROUND

Error: COMPILER_WARNING (CWE-457): [#def956]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/tools/raclient/tpsclient.cpp: scope_hint: In function ‘EnrollToken(RA_Client*, NameValueSet*, NameValueSet*, RA_Token*, RA_Conn*)’
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/tools/raclient/tpsclient.cpp:581:10: warning[-Wmaybe-uninitialized]: ‘status’ may be used uninitialized
#  581 |   return status;
#      |          ^~~~~~
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/tools/raclient/tpsclient.cpp:487:7: note: ‘status’ was declared here
#  487 |   int status;
#      |       ^~~~~~
#  579|       }
#  580|   
#  581|->   return status;
#  582|   }
#  583|   

Error: COMPILER_WARNING (CWE-686): [#def957]
pki-11.8.0-beta6/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-KyDXc2/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘vsnprintf’; expected ‘int(char *, long unsigned int,  const char *, __va_list_tag *)’

Error: COMPILER_WARNING (CWE-686): [#def958]
pki-11.8.0-beta6/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-WhaiHW/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘snprintf’; expected ‘int(char *, long unsigned int,  const char *, ...)’

Error: COMPILER_WARNING (CWE-686): [#def959]
pki-11.8.0-beta6/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-aNKzcb/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘strncpy’; expected ‘char *(char *, const char *, long unsigned int)’

Error: COMPILER_WARNING: [#def960]
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/include/main/NameValueSet.h:36: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/NameValueSet.cpp:28: included_from: Included from here.
pki-11.8.0-beta6/redhat-linux-build/config.h:42:9: warning: ‘XP_UNIX’ redefined
#   42 | #define XP_UNIX 1
#      |         ^~~~~~~
/usr/include/nspr4/prtypes.h:26: included_from: Included from here.
/usr/include/nspr4/prmem.h:14: included_from: Included from here.
pki-11.8.0-beta6/base/tools/src/main/native/tpsclient/src/main/NameValueSet.cpp:23: included_from: Included from here.
/usr/include/nspr4/prcpucfg.h:15:9: note: this is the location of the previous definition
#   15 | #define XP_UNIX
#      |         ^~~~~~~
#   40|   /**************************** PLATTFORM ****************************/
#   41|   
#   42|-> #define XP_UNIX 1
#   43|   /* #undef VMS */
#   44|