nss-3.117.0-1.fc44

List of Findings

Error: SHELLCHECK_WARNING (CWE-156): [#def1]
/usr/bin/nspr-config:145:21: warning[SC2046]: Quote this to prevent word splitting.
#  143|           fi
#  144|         done
#  145|->       echo $libdirs `pkg-config --variable=os_libs nspr`
#  146|   fi      
#  147|   

Error: SHELLCHECK_WARNING: [#def2]
/usr/bin/setup-nsssysinit.sh:62:10: warning[SC3037]: In POSIX sh, echo flags are undefined.
#   60|       ;;
#   61|     status )
#   62|->     echo -n 'NSS sysinit is '
#   63|       sysinit_enabled && echo 'enabled' || echo 'disabled'
#   64|       ;;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
nss-3.117/nspr/config/nsinstall.c:404:16: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir("..")’
nss-3.117/nspr/config/nsinstall.c:399:8: acquire_memory: allocated here
nss-3.117/nspr/config/nsinstall.c:400:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nspr/config/nsinstall.c:404:16: danger: ‘opendir("..")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  402|     }
#  403|     for (;;) {
#  404|->     if (!(ep = readdir(dp))) {
#  405|         fail("cannot find current directory");
#  406|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
nss-3.117/nspr/config/nsinstall.c:412:3: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrdup(&*<unknown>.d_name)’
nss-3.117/nspr/config/nsinstall.c:394:7: enter_function: entry to ‘ino2name’
nss-3.117/nspr/config/nsinstall.c:400:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nspr/config/nsinstall.c:404:8: branch_false: following ‘false’ branch...
nss-3.117/nspr/config/nsinstall.c:407:9: branch_false: ...to here
nss-3.117/nspr/config/nsinstall.c:411:10: call_function: calling ‘xstrdup’ from ‘ino2name’
nss-3.117/nspr/config/nsinstall.c:411:10: return_function: returning to ‘ino2name’ from ‘xstrdup’
nss-3.117/nspr/config/nsinstall.c:412:3: danger: ‘xstrdup(&*<unknown>.d_name)’ leaks here; was allocated at [(10)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/9)
#  410|     }
#  411|     name = xstrdup(ep->d_name);
#  412|->   closedir(dp);
#  413|     return name;
#  414|   }

Error: CPPCHECK_WARNING (CWE-457): [#def5]
nss-3.117/nspr/lib/ds/plhash.c:138: error[uninitvar]: Uninitialized variable: *hep
#  136|     h >>= ht->shift;
#  137|     hep = hep0 = &ht->buckets[h];
#  138|->   while ((he = *hep) != 0) {
#  139|       if (he->keyHash == keyHash && (*ht->keyCompare)(key, he->key)) {
#  140|         /* Move to front of chain if not already there */

Error: CPPCHECK_WARNING (CWE-457): [#def6]
nss-3.117/nspr/lib/ds/plhash.c:171: error[uninitvar]: Uninitialized variable: *hep
#  169|     h >>= ht->shift;
#  170|     hep = &ht->buckets[h];
#  171|->   while ((he = *hep) != 0) {
#  172|       if (he->keyHash == keyHash && (*ht->keyCompare)(key, he->key)) {
#  173|         break;

Error: COMPILER_WARNING (CWE-563): [#def7]
nss-3.117/nspr/lib/ds/plvrsion.c: scope_hint: In function ‘libVersionPoint’
nss-3.117/nspr/lib/ds/plvrsion.c:87:15: warning[-Wunused-but-set-variable]: variable ‘dummy’ set but not used
#   87 |   const char* dummy;
#      |               ^~~~~
#   85|      * from being optimized away as unused variables.
#   86|      */
#   87|->   const char* dummy;
#   88|   
#   89|     dummy = rcsid;

Error: COMPILER_WARNING (CWE-563): [#def8]
nss-3.117/nspr/lib/libc/src/plvrsion.c: scope_hint: In function ‘libVersionPoint’
nss-3.117/nspr/lib/libc/src/plvrsion.c:87:15: warning[-Wunused-but-set-variable]: variable ‘dummy’ set but not used
#   87 |   const char* dummy;
#      |               ^~~~~
#   85|      * from being optimized away as unused variables.
#   86|      */
#   87|->   const char* dummy;
#   88|   
#   89|     dummy = rcsid;

Error: COMPILER_WARNING (CWE-563): [#def9]
nss-3.117/nspr/pr/src/io/pripv6.c: scope_hint: In function ‘Ipv6ToIpv4SocketAccept’
nss-3.117/nspr/pr/src/io/pripv6.c:133:12: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  133 |   PRStatus rv;
#      |            ^~
#  131|                                                         PRNetAddr* addr,
#  132|                                                         PRIntervalTime timeout) {
#  133|->   PRStatus rv;
#  134|     PRFileDesc* newfd;
#  135|     PRFileDesc* newstack;

Error: COMPILER_WARNING (CWE-563): [#def10]
nss-3.117/nspr/pr/src/io/pripv6.c: scope_hint: In function ‘Ipv6ToIpv4SocketAcceptRead’
nss-3.117/nspr/pr/src/io/pripv6.c:172:12: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  172 |   PRStatus rv;
#      |            ^~
#  170|                                                         PRIntervalTime timeout) {
#  171|     PRInt32 nbytes;
#  172|->   PRStatus rv;
#  173|     PRNetAddr tmp_ipv4addr;
#  174|     PRFileDesc* newstack;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def11]
nss-3.117/nspr/pr/src/io/prlayer.c:62:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/io/prlayer.c:35:29: enter_function: entry to ‘pl_TopClose’
nss-3.117/nspr/pr/src/io/prlayer.c:44:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/io/prlayer.c:53:7: branch_false: ...to here
nss-3.117/nspr/pr/src/io/prlayer.c:53:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/io/prlayer.c:61:11: call_function: calling ‘PR_PopIOLayer’ from ‘pl_TopClose’
nss-3.117/nspr/pr/src/io/prlayer.c:61:11: return_function: returning to ‘pl_TopClose’ from ‘PR_PopIOLayer’
nss-3.117/nspr/pr/src/io/prlayer.c:62:5: danger: dereference of NULL ‘PR_PopIOLayer(*fd.higher, -2)’
#   60|        */
#   61|       top = PR_PopIOLayer(fd->higher, PR_TOP_IO_LAYER);
#   62|->     top->dtor(top);
#   63|       /*
#   64|        * then call lower layer

Error: COMPILER_WARNING (CWE-563): [#def12]
nss-3.117/nspr/pr/src/io/prlayer.c: scope_hint: In function ‘pl_TopAccept’
nss-3.117/nspr/pr/src/io/prlayer.c:169:12: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  169 |   PRStatus rv;
#      |            ^~
#  167|   static PRFileDesc* PR_CALLBACK pl_TopAccept(PRFileDesc* fd, PRNetAddr* addr,
#  168|                                               PRIntervalTime timeout) {
#  169|->   PRStatus rv;
#  170|     PRFileDesc *newfd, *layer = fd;
#  171|     PRFileDesc* newstack;

Error: COMPILER_WARNING (CWE-563): [#def13]
nss-3.117/nspr/pr/src/io/prlayer.c: scope_hint: In function ‘pl_DefAcceptread’
nss-3.117/nspr/pr/src/io/prlayer.c:278:12: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  278 |   PRStatus rv;
#      |            ^~
#  276|                                               PRInt32 amount, PRIntervalTime t) {
#  277|     PRInt32 nbytes;
#  278|->   PRStatus rv;
#  279|     PRFileDesc* newstack;
#  280|     PRFileDesc* layer = sd;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def14]
nss-3.117/nspr/pr/src/io/prlog.c:467:17: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
nss-3.117/nspr/pr/src/io/prlog.c:446:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/io/prlog.c:450:7: branch_false: ...to here
nss-3.117/nspr/pr/src/io/prlog.c:466:3: acquire_resource: ‘va_start’ called here
nss-3.117/nspr/pr/src/io/prlog.c:467:17: danger: missing call to ‘va_end’ to match ‘va_start’ at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  465|   
#  466|     va_start(ap, fmt);
#  467|->   nb = nb_tid + PR_vsnprintf(line + nb_tid, sizeof(line) - nb_tid - 1, fmt, ap);
#  468|     va_end(ap);
#  469|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def15]
nss-3.117/nspr/pr/src/io/prlog.c:476:17: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
nss-3.117/nspr/pr/src/io/prlog.c:446:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/io/prlog.c:450:7: branch_false: ...to here
nss-3.117/nspr/pr/src/io/prlog.c:474:6: branch_true: following ‘true’ branch (when ‘nb == 510’)...
nss-3.117/nspr/pr/src/io/prlog.c:475:5: branch_true: ...to here
nss-3.117/nspr/pr/src/io/prlog.c:475:5: acquire_resource: ‘va_start’ called here
nss-3.117/nspr/pr/src/io/prlog.c:476:17: danger: missing call to ‘va_end’ to match ‘va_start’ at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#  474|     if (nb == sizeof(line) - 2) {
#  475|       va_start(ap, fmt);
#  476|->     line_long = PR_vsmprintf(fmt, ap);
#  477|       va_end(ap);
#  478|       /* If this failed, we'll fall back to writing the truncated line. */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def16]
nss-3.117/nspr/pr/src/io/prscanf.c:403:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cArg’
nss-3.117/nspr/pr/src/io/prscanf.c:523:16: enter_function: entry to ‘DoScanf’
nss-3.117/nspr/pr/src/io/prscanf.c:540:15: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/io/prscanf.c:542:7: branch_true: ...to here
nss-3.117/nspr/pr/src/io/prscanf.c:567:14: call_function: calling ‘Convert’ from ‘DoScanf’
#  401|           }
#  402|           if (state->assign) {
#  403|->           *cArg++ = ch;
#  404|           }
#  405|         }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def17]
nss-3.117/nspr/pr/src/io/prscanf.c:465:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cArg’
nss-3.117/nspr/pr/src/io/prscanf.c:523:16: enter_function: entry to ‘DoScanf’
nss-3.117/nspr/pr/src/io/prscanf.c:540:15: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/io/prscanf.c:542:7: branch_true: ...to here
nss-3.117/nspr/pr/src/io/prscanf.c:567:14: call_function: calling ‘Convert’ from ‘DoScanf’
#  463|           }
#  464|           if (state->assign) {
#  465|->           *cArg++ = ch;
#  466|           }
#  467|         }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def18]
nss-3.117/nspr/pr/src/io/prscanf.c:469:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cArg’
nss-3.117/nspr/pr/src/io/prscanf.c:523:16: enter_function: entry to ‘DoScanf’
nss-3.117/nspr/pr/src/io/prscanf.c:540:15: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/io/prscanf.c:542:7: branch_true: ...to here
nss-3.117/nspr/pr/src/io/prscanf.c:567:14: call_function: calling ‘Convert’ from ‘DoScanf’
#  467|         }
#  468|         if (state->assign) {
#  469|->         *cArg = '\0';
#  470|           state->converted = PR_TRUE;
#  471|         }

Error: GCC_ANALYZER_WARNING (CWE-404): [#def19]
nss-3.117/nspr/pr/src/io/prstdio.c:27:15: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
nss-3.117/nspr/pr/src/io/prstdio.c:13:24: enter_function: entry to ‘PR_fprintf’
nss-3.117/nspr/pr/src/io/prstdio.c:17:3: acquire_resource: ‘va_start’ called here
nss-3.117/nspr/pr/src/io/prstdio.c:18:8: call_function: calling ‘PR_vfprintf’ from ‘PR_fprintf’
#   25|     /* XXX this could be better */
#   26|     PRUint32 rv, len;
#   27|->   char* msg = PR_vsmprintf(fmt, ap);
#   28|     if (NULL == msg) {
#   29|       return -1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def20]
nss-3.117/nspr/pr/src/linking/prlink.c:255:5: warning[-Wanalyzer-malloc-leak]: leak of ‘p’
nss-3.117/nspr/pr/src/linking/prlink.c:224:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/linking/prlink.c:244:10: branch_false: ...to here
nss-3.117/nspr/pr/src/linking/prlink.c:250:16: acquire_memory: allocated here
nss-3.117/nspr/pr/src/linking/prlink.c:251:8: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
nss-3.117/nspr/pr/src/linking/prlink.c:252:7: branch_true: ...to here
nss-3.117/nspr/pr/src/linking/prlink.c:255:5: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/linking/prlink.c:255:5: branch_true: ...to here
nss-3.117/nspr/pr/src/linking/prlink.c:255:5: danger: ‘p’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  253|       } /* if (p)  */
#  254|       ev = p;
#  255|->     PR_LOG(_pr_io_lm, PR_LOG_NOTICE, ("linker path '%s'", ev));
#  256|     }
#  257|   #  else

Error: GCC_ANALYZER_WARNING (CWE-401): [#def21]
nss-3.117/nspr/pr/src/linking/prlink.c:272:3: warning[-Wanalyzer-malloc-leak]: leak of ‘copy’
nss-3.117/nspr/pr/src/linking/prlink.c:269:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/linking/prlink.c:270:12: branch_true: ...to here
nss-3.117/nspr/pr/src/linking/prlink.c:270:12: acquire_memory: allocated here
nss-3.117/nspr/pr/src/linking/prlink.c:272:3: danger: ‘copy’ leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  270|       copy = strdup(_pr_currentLibPath);
#  271|     }
#  272|->   PR_ExitMonitor(pr_linker_lock);
#  273|     if (!copy) {
#  274|       PR_SetError(PR_OUT_OF_MEMORY_ERROR, 0);

Error: COMPILER_WARNING (CWE-563): [#def22]
nss-3.117/nspr/pr/src/md/unix/unix.c: scope_hint: In function ‘_PR_UnixInit’
nss-3.117/nspr/pr/src/md/unix/unix.c:2587:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 2587 |   int rv;
#      |       ^~
# 2585|   void _PR_UnixInit(void) {
# 2586|     struct sigaction sigact;
# 2587|->   int rv;
# 2588|   
# 2589|     sigemptyset(&timer_set);

Error: COMPILER_WARNING (CWE-252): [#def23]
nss-3.117/nspr/pr/src/md/unix/uxproces.c: scope_hint: In function ‘_MD_unix_terminate_waitpid_daemon’
nss-3.117/nspr/pr/src/md/unix/uxproces.c:119:5: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  119 |     write(pr_wp.pipefd[1], "", 1);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  117|     if (pr_wp.thread) {
#  118|       pr_waitpid_daemon_exit = 1;
#  119|->     write(pr_wp.pipefd[1], "", 1);
#  120|       PR_JoinThread(pr_wp.thread);
#  121|     }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def24]
nss-3.117/nspr/pr/src/md/unix/uxproces.c:259:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(*_29->secret.md.osfd, 0)’
nss-3.117/nspr/pr/src/md/unix/uxproces.c:139:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:6: branch_false: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:6: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:15: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:236:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:244:6: branch_false: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:244:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:253:8: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:253:8: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:257:11: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:257:10: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:259:13: acquire_resource: opened here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:259:12: danger: ‘dup2(*_29->secret.md.osfd, 0)’ leaks here; was opened at [(13)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/12)
#  257|         if (attr->stdinFd && attr->stdinFd->secret->md.osfd != 0) {
#  258|           in_osfd = attr->stdinFd->secret->md.osfd;
#  259|->         if (dup2(in_osfd, 0) != 0) {
#  260|             _exit(1); /* failed */
#  261|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def25]
nss-3.117/nspr/pr/src/md/unix/uxproces.c:269:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(*_37->secret.md.osfd, 1)’
nss-3.117/nspr/pr/src/md/unix/uxproces.c:139:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:6: branch_false: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:6: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:15: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:236:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:244:6: branch_false: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:244:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:253:8: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:253:8: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:257:11: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:267:10: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:269:13: acquire_resource: opened here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:269:12: danger: ‘dup2(*_37->secret.md.osfd, 1)’ leaks here; was opened at [(13)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/12)
#  267|         if (attr->stdoutFd && attr->stdoutFd->secret->md.osfd != 1) {
#  268|           out_osfd = attr->stdoutFd->secret->md.osfd;
#  269|->         if (dup2(out_osfd, 1) != 1) {
#  270|             _exit(1); /* failed */
#  271|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def26]
nss-3.117/nspr/pr/src/md/unix/uxproces.c:279:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(*_43->secret.md.osfd, 2)’
nss-3.117/nspr/pr/src/md/unix/uxproces.c:139:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:6: branch_false: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:6: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:145:15: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:236:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:244:6: branch_false: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:244:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:253:8: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:253:8: branch_true: following ‘true’ branch (when ‘attr’ is non-NULL)...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:257:11: branch_true: ...to here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:277:10: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/md/unix/uxproces.c:279:13: acquire_resource: opened here
nss-3.117/nspr/pr/src/md/unix/uxproces.c:279:12: danger: ‘dup2(*_43->secret.md.osfd, 2)’ leaks here; was opened at [(13)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/12)
#  277|         if (attr->stderrFd && attr->stderrFd->secret->md.osfd != 2) {
#  278|           err_osfd = attr->stderrFd->secret->md.osfd;
#  279|->         if (dup2(err_osfd, 2) != 2) {
#  280|             _exit(1); /* failed */
#  281|           }

Error: COMPILER_WARNING (CWE-563): [#def27]
nss-3.117/nspr/pr/src/md/unix/uxproces.c: scope_hint: In function ‘pr_InstallSigchldHandler’
nss-3.117/nspr/pr/src/md/unix/uxproces.c:655:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  655 |   int rv;
#      |       ^~
#  653|   static void pr_InstallSigchldHandler() {
#  654|     struct sigaction act, oact;
#  655|->   int rv;
#  656|   
#  657|     act.sa_handler = pr_SigchldHandler;

Error: COMPILER_WARNING (CWE-563): [#def28]
nss-3.117/nspr/pr/src/md/unix/uxproces.c: scope_hint: In function ‘_MD_InitProcesses’
nss-3.117/nspr/pr/src/md/unix/uxproces.c:672:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  672 |   int rv;
#      |       ^~
#  670|   static PRStatus _MD_InitProcesses(void) {
#  671|   #if !defined(_PR_NATIVE_THREADS)
#  672|->   int rv;
#  673|     int flags;
#  674|   #endif

Error: GCC_ANALYZER_WARNING (CWE-401): [#def29]
nss-3.117/nspr/pr/src/misc/prdtoa.c:554:3: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3554:1: enter_function: entry to ‘PR_cnvtf’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3564:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: branch_false: ...to here
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: call_function: calling ‘PR_dtoa’ from ‘PR_cnvtf’
#  552|   #endif
#  553|   
#  554|->   ACQUIRE_DTOA_LOCK(0);
#  555|     /* The k > Kmax case does not need ACQUIRE_DTOA_LOCK(0), */
#  556|     /* but this case seems very unlikely. */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def30]
nss-3.117/nspr/pr/src/misc/prdtoa.c:554:3: warning[-Wanalyzer-malloc-leak]: leak of ‘Balloc(1)’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3554:1: enter_function: entry to ‘PR_cnvtf’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3564:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: branch_false: ...to here
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: call_function: calling ‘PR_dtoa’ from ‘PR_cnvtf’
#  552|   #endif
#  553|   
#  554|->   ACQUIRE_DTOA_LOCK(0);
#  555|     /* The k > Kmax case does not need ACQUIRE_DTOA_LOCK(0), */
#  556|     /* but this case seems very unlikely. */

Error: CPPCHECK_WARNING (CWE-476): [#def31]
nss-3.117/nspr/pr/src/misc/prdtoa.c:573: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: rv
#  571|       }
#  572|   #endif
#  573|->     rv->k = k;
#  574|       rv->maxwds = x;
#  575|     }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def32]
nss-3.117/nspr/pr/src/misc/prdtoa.c:573:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘rv’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3554:1: enter_function: entry to ‘PR_cnvtf’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3564:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: branch_false: ...to here
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: call_function: calling ‘PR_dtoa’ from ‘PR_cnvtf’
#  571|       }
#  572|   #endif
#  573|->     rv->k = k;
#  574|       rv->maxwds = x;
#  575|     }

Error: CPPCHECK_WARNING (CWE-476): [#def33]
nss-3.117/nspr/pr/src/misc/prdtoa.c:574: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: rv
#  572|   #endif
#  573|       rv->k = k;
#  574|->     rv->maxwds = x;
#  575|     }
#  576|     FREE_DTOA_LOCK(0);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def34]
nss-3.117/nspr/pr/src/misc/prdtoa.c:576:3: warning[-Wanalyzer-malloc-leak]: leak of ‘rv’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3554:1: enter_function: entry to ‘PR_cnvtf’
nss-3.117/nspr/pr/src/misc/prdtoa.c:3564:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: branch_false: ...to here
nss-3.117/nspr/pr/src/misc/prdtoa.c:3569:7: call_function: calling ‘PR_dtoa’ from ‘PR_cnvtf’
#  574|       rv->maxwds = x;
#  575|     }
#  576|->   FREE_DTOA_LOCK(0);
#  577|     rv->sign = rv->wds = 0;
#  578|     return rv;

Error: CPPCHECK_WARNING (CWE-476): [#def35]
nss-3.117/nspr/pr/src/misc/prdtoa.c:577: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: rv
#  575|     }
#  576|     FREE_DTOA_LOCK(0);
#  577|->   rv->sign = rv->wds = 0;
#  578|     return rv;
#  579|   }

Error: CPPCHECK_WARNING (CWE-476): [#def36]
nss-3.117/nspr/pr/src/misc/prtime.c:1765: warning[nullPointer]: Possible null pointer dereference: ap
# 1763|     }
# 1764|   
# 1765|->   rv = strftime(buf, buflen, fmt, ap);
# 1766|     if (!rv && buf && buflen > 0) {
# 1767|       /*

Error: GCC_ANALYZER_WARNING (CWE-476): [#def37]
nss-3.117/nspr/pr/src/misc/prtpool.c:327:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pollfds’
nss-3.117/nspr/pr/src/misc/prtpool.c:296:10: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/misc/prtpool.c:299:18: branch_true: ...to here
nss-3.117/nspr/pr/src/misc/prtpool.c:300:8: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/misc/prtpool.c:327:32: branch_false: ...to here
nss-3.117/nspr/pr/src/misc/prtpool.c:327:5: danger: dereference of NULL ‘pollfds’
#  325|        * add the notify fd; used for unblocking io thread(s)
#  326|        */
#  327|->     pollfds[pollfds_used].fd = tp->ioq.notify_fd;
#  328|       pollfds[pollfds_used].in_flags = PR_POLL_READ;
#  329|       pollfds[pollfds_used].out_flags = 0;

Error: COMPILER_WARNING (CWE-563): [#def38]
nss-3.117/nspr/pr/src/misc/prtpool.c: scope_hint: In function ‘io_wstart’
nss-3.117/nspr/pr/src/misc/prtpool.c:387:16: warning[-Wunused-but-set-variable]: variable ‘rval_status’ set but not used
#  387 |       PRStatus rval_status;
#      |                ^~~~~~~~~~~
#  385|          * at least one io event is set
#  386|          */
#  387|->       PRStatus rval_status;
#  388|         PRInt32 index;
#  389|   

Error: COMPILER_WARNING (CWE-563): [#def39]
nss-3.117/nspr/pr/src/misc/prtpool.c: scope_hint: In function ‘notify_ioq’
nss-3.117/nspr/pr/src/misc/prtpool.c:958:12: warning[-Wunused-but-set-variable]: variable ‘rval_status’ set but not used
#  958 |   PRStatus rval_status;
#      |            ^~~~~~~~~~~
#  956|   
#  957|   static void notify_ioq(PRThreadPool* tp) {
#  958|->   PRStatus rval_status;
#  959|   
#  960|     /*

Error: COMPILER_WARNING (CWE-563): [#def40]
nss-3.117/nspr/pr/src/misc/prtpool.c: scope_hint: In function ‘PR_JoinThreadPool’
nss-3.117/nspr/pr/src/misc/prtpool.c:1080:12: warning[-Wunused-but-set-variable]: variable ‘rval_status’ set but not used
# 1080 |   PRStatus rval_status;
#      |            ^~~~~~~~~~~
# 1078|     PRStatus rval = PR_SUCCESS;
# 1079|     PRCList* head;
# 1080|->   PRStatus rval_status;
# 1081|   
# 1082|     PR_Lock(tpool->jobq.lock);

Error: COMPILER_WARNING (CWE-563): [#def41]
nss-3.117/nspr/pr/src/prvrsion.c: scope_hint: In function ‘libVersionPoint’
nss-3.117/nspr/pr/src/prvrsion.c:87:15: warning[-Wunused-but-set-variable]: variable ‘dummy’ set but not used
#   87 |   const char* dummy;
#      |               ^~~~~
#   85|      * from being optimized away as unused variables.
#   86|      */
#   87|->   const char* dummy;
#   88|   
#   89|     dummy = rcsid;

Error: COMPILER_WARNING (CWE-563): [#def42]
nss-3.117/nspr/pr/src/pthreads/ptio.c: scope_hint: In function ‘pt_linux_sendfile_cont’
nss-3.117/nspr/pr/src/pthreads/ptio.c:1094:9: warning[-Wunused-but-set-variable]: variable ‘oldoffset’ set but not used
# 1094 |   off_t oldoffset;
#      |         ^~~~~~~~~
# 1092|   static PRBool pt_linux_sendfile_cont(pt_Continuation* op, PRInt16 revents) {
# 1093|     ssize_t rv;
# 1094|->   off_t oldoffset;
# 1095|   
# 1096|     oldoffset = op->offset;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def43]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3320:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘osfd’
nss-3.117/nspr/pr/src/pthreads/ptio.c:3452:1: enter_function: entry to ‘PR_Socket’
nss-3.117/nspr/pr/src/pthreads/ptio.c:3464:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3468:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3516:10: acquire_resource: socket created here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3517:6: branch_false: following ‘false’ branch (when ‘osfd != -1’)...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3526:10: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3526:10: call_function: calling ‘pt_SetMethods’ from ‘PR_Socket’
# 3318|   static PRFileDesc* pt_SetMethods(PRIntn osfd, PRDescType type,
# 3319|                                    PRBool isAcceptedSocket, PRBool imported) {
# 3320|->   PRFileDesc* fd = _PR_Getfd();
# 3321|   
# 3322|     if (fd == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def44]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3320:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[0]’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4348:1: enter_function: entry to ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4351:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:29: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: call_function: calling ‘pt_SetMethods’ from ‘PR_CreatePipe’
# 3318|   static PRFileDesc* pt_SetMethods(PRIntn osfd, PRDescType type,
# 3319|                                    PRBool isAcceptedSocket, PRBool imported) {
# 3320|->   PRFileDesc* fd = _PR_Getfd();
# 3321|   
# 3322|     if (fd == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def45]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3320:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[1]’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4348:1: enter_function: entry to ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4351:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:29: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: call_function: calling ‘pt_SetMethods’ from ‘PR_CreatePipe’
# 3318|   static PRFileDesc* pt_SetMethods(PRIntn osfd, PRDescType type,
# 3319|                                    PRBool isAcceptedSocket, PRBool imported) {
# 3320|->   PRFileDesc* fd = _PR_Getfd();
# 3321|   
# 3322|     if (fd == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def46]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3323:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘osfd’
nss-3.117/nspr/pr/src/pthreads/ptio.c:3452:1: enter_function: entry to ‘PR_Socket’
nss-3.117/nspr/pr/src/pthreads/ptio.c:3464:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3468:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3516:10: acquire_resource: socket created here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3517:6: branch_false: following ‘false’ branch (when ‘osfd != -1’)...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3526:10: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3526:10: call_function: calling ‘pt_SetMethods’ from ‘PR_Socket’
# 3321|   
# 3322|     if (fd == NULL) {
# 3323|->     PR_SetError(PR_OUT_OF_MEMORY_ERROR, 0);
# 3324|     } else {
# 3325|       fd->secret->md.osfd = osfd;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def47]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3323:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[0]’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4348:1: enter_function: entry to ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4351:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:29: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: call_function: calling ‘pt_SetMethods’ from ‘PR_CreatePipe’
# 3321|   
# 3322|     if (fd == NULL) {
# 3323|->     PR_SetError(PR_OUT_OF_MEMORY_ERROR, 0);
# 3324|     } else {
# 3325|       fd->secret->md.osfd = osfd;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def48]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3323:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[1]’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4348:1: enter_function: entry to ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4351:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:29: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: call_function: calling ‘pt_SetMethods’ from ‘PR_CreatePipe’
# 3321|   
# 3322|     if (fd == NULL) {
# 3323|->     PR_SetError(PR_OUT_OF_MEMORY_ERROR, 0);
# 3324|     } else {
# 3325|       fd->secret->md.osfd = osfd;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def49]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3443:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘osfd’
nss-3.117/nspr/pr/src/pthreads/ptio.c:3441:10: acquire_resource: stream socket created here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3442:6: branch_true: following ‘true’ branch (when ‘osfd != -1’)...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3443:5: branch_true: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3443:5: danger: ‘osfd’ leaks here
# 3441|     osfd = socket(AF_INET6, SOCK_STREAM, 0);
# 3442|     if (osfd != -1) {
# 3443|->     close(osfd);
# 3444|       return PR_TRUE;
# 3445|     }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def50]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3528:7: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘osfd’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4316:27: enter_function: entry to ‘PR_OpenTCPSocket’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4317:10: call_function: calling ‘PR_Socket’ from ‘PR_OpenTCPSocket’
# 3526|       fd = pt_SetMethods(osfd, ftype, PR_FALSE, PR_FALSE);
# 3527|       if (fd == NULL) {
# 3528|->       close(osfd);
# 3529|       }
# 3530|     }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def51]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3796:11: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir(name)’
nss-3.117/nspr/pr/src/pthreads/ptio.c:3788:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3792:11: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3792:11: acquire_memory: allocated here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3793:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3796:11: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3796:11: danger: ‘opendir(name)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/2)
# 3794|       pt_MapError(_PR_MD_MAP_OPENDIR_ERROR, errno);
# 3795|     } else {
# 3796|->     dir = PR_NEWZAP(PRDir);
# 3797|       if (dir) {
# 3798|         dir->md.d = osdir;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def52]
nss-3.117/nspr/pr/src/pthreads/ptio.c:3800:13: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir(name)’
nss-3.117/nspr/pr/src/pthreads/ptio.c:3788:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3792:11: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3792:11: acquire_memory: allocated here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3793:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3796:11: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3797:8: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:3800:13: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:3800:13: danger: ‘opendir(name)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/2)
# 3798|         dir->md.d = osdir;
# 3799|       } else {
# 3800|->       (void)closedir(osdir);
# 3801|       }
# 3802|     }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def53]
nss-3.117/nspr/pr/src/pthreads/ptio.c:4362:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[0]’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4348:1: enter_function: entry to ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4351:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:29: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: call_function: calling ‘pt_SetMethods’ from ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: return_function: returning to ‘PR_CreatePipe’ from ‘pt_SetMethods’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4361:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4362:5: branch_true: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4362:5: danger: ‘pipefd[0]’ leaks here
# 4360|     *readPipe = pt_SetMethods(pipefd[0], PR_DESC_PIPE, PR_FALSE, PR_FALSE);
# 4361|     if (NULL == *readPipe) {
# 4362|->     close(pipefd[0]);
# 4363|       close(pipefd[1]);
# 4364|       return PR_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def54]
nss-3.117/nspr/pr/src/pthreads/ptio.c:4362:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[1]’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4348:1: enter_function: entry to ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4351:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:29: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: call_function: calling ‘pt_SetMethods’ from ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: return_function: returning to ‘PR_CreatePipe’ from ‘pt_SetMethods’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4361:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4362:5: branch_true: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4362:5: danger: ‘pipefd[1]’ leaks here
# 4360|     *readPipe = pt_SetMethods(pipefd[0], PR_DESC_PIPE, PR_FALSE, PR_FALSE);
# 4361|     if (NULL == *readPipe) {
# 4362|->     close(pipefd[0]);
# 4363|       close(pipefd[1]);
# 4364|       return PR_FAILURE;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def55]
nss-3.117/nspr/pr/src/pthreads/ptio.c:4363:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd[1]’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4348:1: enter_function: entry to ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4351:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:7: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4355:6: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:29: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: call_function: calling ‘pt_SetMethods’ from ‘PR_CreatePipe’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4360:15: return_function: returning to ‘PR_CreatePipe’ from ‘pt_SetMethods’
nss-3.117/nspr/pr/src/pthreads/ptio.c:4361:6: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/pthreads/ptio.c:4362:5: branch_true: ...to here
nss-3.117/nspr/pr/src/pthreads/ptio.c:4363:5: danger: ‘pipefd[1]’ leaks here
# 4361|     if (NULL == *readPipe) {
# 4362|       close(pipefd[0]);
# 4363|->     close(pipefd[1]);
# 4364|       return PR_FAILURE;
# 4365|     }

Error: COMPILER_WARNING (CWE-563): [#def56]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘_PR_InitLocks’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:46:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#   46 |   int rv;
#      |       ^~
#   44|   
#   45|   void _PR_InitLocks(void) {
#   46|->   int rv;
#   47|     rv = _PT_PTHREAD_MUTEXATTR_INIT(&_pt_mattr);
#   48|     PR_ASSERT(0 == rv);

Error: COMPILER_WARNING (CWE-563): [#def57]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘pt_PostNotifies’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:62:17: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#   62 |   PRIntn index, rv;
#      |                 ^~
#   60|   
#   61|   static void pt_PostNotifies(PRLock* lock, PRBool unlock) {
#   62|->   PRIntn index, rv;
#   63|     _PT_Notified post;
#   64|     _PT_Notified *notified, *prev = NULL;

Error: COMPILER_WARNING (CWE-563): [#def58]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_NewLock’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:122:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  122 |   PRIntn rv;
#      |          ^~
#  120|   
#  121|   PR_IMPLEMENT(PRLock*) PR_NewLock(void) {
#  122|->   PRIntn rv;
#  123|     PRLock* lock;
#  124|   

Error: COMPILER_WARNING (CWE-563): [#def59]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_DestroyLock’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:141:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  141 |   PRIntn rv;
#      |          ^~
#  139|   
#  140|   PR_IMPLEMENT(void) PR_DestroyLock(PRLock* lock) {
#  141|->   PRIntn rv;
#  142|     PR_ASSERT(NULL != lock);
#  143|     PR_ASSERT(PR_FALSE == lock->locked);

Error: COMPILER_WARNING (CWE-563): [#def60]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_Lock’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:159:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  159 |   PRIntn rv;
#      |          ^~
#  157|      * |tid| field of the current thread's PRThread structure because
#  158|      * _pt_root calls PR_Lock before setting thred->id and thred->tid. */
#  159|->   PRIntn rv;
#  160|     PR_ASSERT(lock != NULL);
#  161|     rv = pthread_mutex_lock(&lock->mutex);

Error: COMPILER_WARNING (CWE-563): [#def61]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_Unlock’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:179:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  179 |   PRIntn rv;
#      |          ^~
#  177|   PR_IMPLEMENT(PRStatus) PR_Unlock(PRLock* lock) {
#  178|     pthread_t self = pthread_self();
#  179|->   PRIntn rv;
#  180|   
#  181|     PR_ASSERT(lock != NULL);

Error: COMPILER_WARNING (CWE-563): [#def62]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘pt_PostNotifiesFromMonitor’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:433:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  433 |   PRIntn rv;
#      |          ^~
#  431|   
#  432|   static void pt_PostNotifiesFromMonitor(pthread_cond_t* cv, PRIntn times) {
#  433|->   PRIntn rv;
#  434|   
#  435|     /*

Error: COMPILER_WARNING (CWE-563): [#def63]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_DestroyMonitor’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:511:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  511 |   int rv;
#      |       ^~
#  509|   
#  510|   PR_IMPLEMENT(void) PR_DestroyMonitor(PRMonitor* mon) {
#  511|->   int rv;
#  512|   
#  513|     PR_ASSERT(mon != NULL);

Error: COMPILER_WARNING (CWE-563): [#def64]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_GetMonitorEntryCount’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:533:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  533 |   PRIntn rv;
#      |          ^~
#  531|   PR_IMPLEMENT(PRIntn) PR_GetMonitorEntryCount(PRMonitor* mon) {
#  532|     pthread_t self = pthread_self();
#  533|->   PRIntn rv;
#  534|     PRIntn count = 0;
#  535|   

Error: COMPILER_WARNING (CWE-563): [#def65]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_EnterMonitor’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:560:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  560 |   PRIntn rv;
#      |          ^~
#  558|   PR_IMPLEMENT(void) PR_EnterMonitor(PRMonitor* mon) {
#  559|     pthread_t self = pthread_self();
#  560|->   PRIntn rv;
#  561|   
#  562|     PR_ASSERT(mon != NULL);

Error: COMPILER_WARNING (CWE-563): [#def66]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PR_ExitMonitor’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:587:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  587 |   PRIntn rv;
#      |          ^~
#  585|   PR_IMPLEMENT(PRStatus) PR_ExitMonitor(PRMonitor* mon) {
#  586|     pthread_t self = pthread_self();
#  587|->   PRIntn rv;
#  588|     PRBool notifyEntryWaiter = PR_FALSE;
#  589|     PRIntn notifyTimes = 0;

Error: COMPILER_WARNING (CWE-563): [#def67]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PRP_DestroyNakedCondVar’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:1112:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1112 |   int rv;
#      |       ^~
# 1110|   
# 1111|   PR_IMPLEMENT(void) PRP_DestroyNakedCondVar(PRCondVar* cvar) {
# 1112|->   int rv;
# 1113|     rv = pthread_cond_destroy(&cvar->cv);
# 1114|     PR_ASSERT(0 == rv);

Error: COMPILER_WARNING (CWE-563): [#def68]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PRP_NakedNotify’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:1140:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1140 |   int rv;
#      |       ^~
# 1138|   
# 1139|   PR_IMPLEMENT(PRStatus) PRP_NakedNotify(PRCondVar* cvar) {
# 1140|->   int rv;
# 1141|     PR_ASSERT(cvar != NULL);
# 1142|     rv = pthread_cond_signal(&cvar->cv);

Error: COMPILER_WARNING (CWE-563): [#def69]
nss-3.117/nspr/pr/src/pthreads/ptsynch.c: scope_hint: In function ‘PRP_NakedBroadcast’
nss-3.117/nspr/pr/src/pthreads/ptsynch.c:1148:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1148 |   int rv;
#      |       ^~
# 1146|   
# 1147|   PR_IMPLEMENT(PRStatus) PRP_NakedBroadcast(PRCondVar* cvar) {
# 1148|->   int rv;
# 1149|     PR_ASSERT(cvar != NULL);
# 1150|     rv = pthread_cond_broadcast(&cvar->cv);

Error: COMPILER_WARNING (CWE-563): [#def70]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘pt_AttachThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:260:9: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  260 |     int rv;
#      |         ^~
#  258|     thred = PR_NEWZAP(PRThread);
#  259|     if (NULL != thred) {
#  260|->     int rv;
#  261|   
#  262|       thred->priority = PR_PRIORITY_NORMAL;

Error: COMPILER_WARNING (CWE-563): [#def71]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘PR_DetachThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:570:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  570 |   int rv;
#      |       ^~
#  568|   PR_IMPLEMENT(void) PR_DetachThread(void) {
#  569|     void* thred;
#  570|->   int rv;
#  571|   
#  572|     _PT_PTHREAD_GETSPECIFIC(pt_book.key, thred);

Error: COMPILER_WARNING (CWE-563): [#def72]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘PR_Interrupt’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:705:12: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  705 |     PRIntn rv;
#      |            ^~
#  703|     cv = thred->waiting;
#  704|     if ((NULL != cv) && !thred->interrupt_blocked) {
#  705|->     PRIntn rv;
#  706|       (void)PR_ATOMIC_INCREMENT(&cv->notify_pending);
#  707|       rv = pthread_cond_broadcast(&cv->cv);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def73]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:718:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:716:20: enter_function: entry to ‘PR_ClearInterrupt’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:717:18: call_function: calling ‘PR_GetCurrentThread’ from ‘PR_ClearInterrupt’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:717:18: return_function: returning to ‘PR_ClearInterrupt’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:718:3: danger: dereference of NULL ‘PR_GetCurrentThread()’
#  716|   PR_IMPLEMENT(void) PR_ClearInterrupt(void) {
#  717|     PRThread* me = PR_GetCurrentThread();
#  718|->   me->state &= ~PT_THREAD_ABORTED;
#  719|   } /* PR_ClearInterrupt */
#  720|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def74]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:723:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:721:20: enter_function: entry to ‘PR_BlockInterrupt’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:722:18: call_function: calling ‘PR_GetCurrentThread’ from ‘PR_BlockInterrupt’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:722:18: return_function: returning to ‘PR_BlockInterrupt’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:723:3: danger: dereference of NULL ‘PR_GetCurrentThread()’
#  721|   PR_IMPLEMENT(void) PR_BlockInterrupt(void) {
#  722|     PRThread* me = PR_GetCurrentThread();
#  723|->   _PT_THREAD_BLOCK_INTERRUPT(me);
#  724|   } /* PR_BlockInterrupt */
#  725|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def75]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:728:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:726:20: enter_function: entry to ‘PR_UnblockInterrupt’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:727:18: call_function: calling ‘PR_GetCurrentThread’ from ‘PR_UnblockInterrupt’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:727:18: return_function: returning to ‘PR_UnblockInterrupt’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:728:3: danger: dereference of NULL ‘PR_GetCurrentThread()’
#  726|   PR_IMPLEMENT(void) PR_UnblockInterrupt(void) {
#  727|     PRThread* me = PR_GetCurrentThread();
#  728|->   _PT_THREAD_UNBLOCK_INTERRUPT(me);
#  729|   } /* PR_UnblockInterrupt */
#  730|   

Error: COMPILER_WARNING (CWE-563): [#def76]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘_pt_thread_death’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:771:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
#  771 |   int rv;
#      |       ^~
#  769|   static void _pt_thread_death(void* arg) {
#  770|     void* thred;
#  771|->   int rv;
#  772|   
#  773|     _PT_PTHREAD_GETSPECIFIC(pt_book.key, thred);

Error: COMPILER_WARNING (CWE-563): [#def77]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘_PR_Fini’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1001:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1001 |   int rv;
#      |       ^~
#  999|   void _PR_Fini(void) {
# 1000|     void* thred;
# 1001|->   int rv;
# 1002|   
# 1003|     if (!_pr_initialized) {

Error: COMPILER_WARNING (CWE-563): [#def78]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘PR_Cleanup’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1033:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1033 |   int rv;
#      |       ^~
# 1031|   PR_IMPLEMENT(PRStatus) PR_Cleanup(void) {
# 1032|     PRThread* me = PR_GetCurrentThread();
# 1033|->   int rv;
# 1034|     PR_LOG(_pr_thread_lm, PR_LOG_MIN, ("PR_Cleanup: shutting down NSPR"));
# 1035|     PR_ASSERT(me->state & PT_THREAD_PRIMORD);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def79]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1036:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1031:24: enter_function: entry to ‘PR_Cleanup’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1032:18: call_function: calling ‘PR_GetCurrentThread’ from ‘PR_Cleanup’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1032:18: return_function: returning to ‘PR_Cleanup’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1036:7: danger: dereference of NULL ‘PR_GetCurrentThread()’
# 1034|     PR_LOG(_pr_thread_lm, PR_LOG_MIN, ("PR_Cleanup: shutting down NSPR"));
# 1035|     PR_ASSERT(me->state & PT_THREAD_PRIMORD);
# 1036|->   if (me->state & PT_THREAD_PRIMORD) {
# 1037|       PR_Lock(pt_book.ml);
# 1038|       while (pt_book.user > pt_book.this_many) {

Error: COMPILER_WARNING (CWE-563): [#def80]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘init_pthread_gc_support’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1144:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1144 |   PRIntn rv;
#      |          ^~
# 1142|    */
# 1143|   static void init_pthread_gc_support(void) {
# 1144|->   PRIntn rv;
# 1145|   
# 1146|     {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def81]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1177:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1175:20: enter_function: entry to ‘PR_SetThreadGCAble’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1177:3: call_function: calling ‘PR_GetCurrentThread’ from ‘PR_SetThreadGCAble’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1177:3: return_function: returning to ‘PR_SetThreadGCAble’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1177:3: danger: dereference of NULL ‘PR_GetCurrentThread()’
# 1175|   PR_IMPLEMENT(void) PR_SetThreadGCAble(void) {
# 1176|     PR_Lock(pt_book.ml);
# 1177|->   PR_GetCurrentThread()->state |= PT_THREAD_GCABLE;
# 1178|     PR_Unlock(pt_book.ml);
# 1179|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def82]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1183:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1181:20: enter_function: entry to ‘PR_ClearThreadGCAble’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1183:3: call_function: calling ‘PR_GetCurrentThread’ from ‘PR_ClearThreadGCAble’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1183:3: return_function: returning to ‘PR_ClearThreadGCAble’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1183:3: danger: dereference of NULL ‘PR_GetCurrentThread()’
# 1181|   PR_IMPLEMENT(void) PR_ClearThreadGCAble(void) {
# 1182|     PR_Lock(pt_book.ml);
# 1183|->   PR_GetCurrentThread()->state &= (~PT_THREAD_GCABLE);
# 1184|     PR_Unlock(pt_book.ml);
# 1185|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def83]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1285:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘me’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1278:13: enter_function: entry to ‘suspend_signal_handler’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1279:18: call_function: calling ‘PR_GetCurrentThread’ from ‘suspend_signal_handler’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1279:18: return_function: returning to ‘suspend_signal_handler’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1279:13: release_memory: ‘me’ is NULL
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1285:3: branch_true: following ‘true’ branch...
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1285:3: branch_true: ...to here
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1285:3: danger: dereference of NULL ‘PR_GetCurrentThread()’
# 1283|     PR_ASSERT((me->suspend & PT_THREAD_SUSPENDED) == 0);
# 1284|   
# 1285|->   PR_LOG(
# 1286|         _pr_gc_lm, PR_LOG_ALWAYS,
# 1287|         ("Begin suspend_signal_handler thred %p thread id = %X\n", me, me->id));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def84]
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1292:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1278:13: enter_function: entry to ‘suspend_signal_handler’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1279:18: call_function: calling ‘PR_GetCurrentThread’ from ‘suspend_signal_handler’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1279:18: return_function: returning to ‘suspend_signal_handler’ from ‘PR_GetCurrentThread’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1279:13: release_memory: ‘me’ is NULL
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1285:3: branch_false: following ‘false’ branch...
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1292:5: branch_false: ...to here
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1292:5: release_memory: ‘me’ is NULL
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1292:3: danger: dereference of NULL ‘me’
# 1290|      * save stack pointer
# 1291|      */
# 1292|->   me->sp = &me;
# 1293|   
# 1294|     /*

Error: COMPILER_WARNING (CWE-563): [#def85]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘pt_SuspendSet’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1336:10: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1336 |   PRIntn rv;
#      |          ^~
# 1334|   
# 1335|   static void pt_SuspendSet(PRThread* thred) {
# 1336|->   PRIntn rv;
# 1337|   
# 1338|     PR_LOG(_pr_gc_lm, PR_LOG_ALWAYS,

Error: COMPILER_WARNING (CWE-563): [#def86]
nss-3.117/nspr/pr/src/pthreads/ptthread.c: scope_hint: In function ‘PR_SuspendAll’
nss-3.117/nspr/pr/src/pthreads/ptthread.c:1437:7: warning[-Wunused-but-set-variable]: variable ‘rv’ set but not used
# 1437 |   int rv;
#      |       ^~
# 1435|     PRThread* thred = pt_book.first;
# 1436|     PRThread* me = PR_GetCurrentThread();
# 1437|->   int rv;
# 1438|   
# 1439|     rv = pthread_once(&pt_gc_support_control, init_pthread_gc_support);

Error: CPPCHECK_WARNING (CWE-457): [#def87]
nss-3.117/nspr/pr/src/threads/prcmon.c:228: error[uninitvar]: Uninitialized variable: *pp
#  226|     hash = HASH(address);
#  227|     pp = hash_buckets + hash;
#  228|->   while ((p = *pp) != 0) {
#  229|       if (p->address == address) {
#  230|         if (p->cacheEntryCount > 0) {

Error: CPPCHECK_WARNING (CWE-457): [#def88]
nss-3.117/nspr/pr/src/threads/prcmon.c:251: error[uninitvar]: Uninitialized variable: *pp
#  249|     hash = HASH(address);
#  250|     pp = hash_buckets + hash;
#  251|->   while ((p = *pp) != 0) {
#  252|       if (p->address == address) {
#  253|         goto gotit;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def89]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:87:29: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:500:29: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:501:16: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#   85|   print_crl_info(CERTName *name, SECItem *serial)
#   86|   {
#   87|->     PRBool saveWrapeState = SECU_GetWrapEnabled();
#   88|       SECU_EnableWrap(PR_FALSE);
#   89|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def90]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:88:5: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:500:29: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:501:16: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#   86|   {
#   87|       PRBool saveWrapeState = SECU_GetWrapEnabled();
#   88|->     SECU_EnableWrap(PR_FALSE);
#   89|   
#   90|       SECU_PrintNameQuotesOptional(stdout, name, "# Issuer", 0, PR_FALSE);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def91]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:90:5: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:500:29: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:501:16: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#   88|       SECU_EnableWrap(PR_FALSE);
#   89|   
#   90|->     SECU_PrintNameQuotesOptional(stdout, name, "# Issuer", 0, PR_FALSE);
#   91|       printf("\n");
#   92|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def92]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:93:5: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:500:29: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:501:16: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#   91|       printf("\n");
#   92|   
#   93|->     SECU_PrintInteger(stdout, serial, "# Serial Number", 0);
#   94|   
#   95|       SECU_EnableWrap(saveWrapeState);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def93]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:95:5: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:500:29: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:501:16: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#   93|       SECU_PrintInteger(stdout, serial, "# Serial Number", 0);
#   94|   
#   95|->     SECU_EnableWrap(saveWrapeState);
#   96|   }
#   97|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def94]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:111:13: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#  109|   
#  110|       rv = SEC_ERROR_NO_MEMORY;
#  111|->     arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
#  112|       if (!arena)
#  113|           return rv;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def95]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:115:14: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#  113|           return rv;
#  114|   
#  115|->     newCrl = CERT_DecodeDERCrlWithFlags(arena, sdder, SEC_CRL_TYPE,
#  116|                                           CRL_DECODE_DEFAULT_OPTIONS);
#  117|       if (!newCrl)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def96]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:158:5: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:495:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:500:29: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:501:16: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:594:14: call_function: calling ‘ConvertCRLEntry’ from ‘main’
#  156|       printf("CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE\n");
#  157|   
#  158|->     PORT_FreeArena(arena, PR_FALSE);
#  159|       return rv;
#  160|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def97]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:196:12: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:432:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:593:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:596:14: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:596:14: call_function: calling ‘ConvertCertificate’ from ‘main’
#  194|       const char *trust_info;
#  195|   
#  196|->     cert = CERT_DecodeDERCertificate(sdder, PR_FALSE, nickname);
#  197|       if (!cert) {
#  198|           return SECFailure;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def98]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:9: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:9: danger: ‘nickname’ leaks here; was allocated at [(11)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/10)
#  552|       nickname = strdup(addbuiltin.options[opt_Nickname].arg);
#  553|   
#  554|->     if (NSS_NoDB_Init(NULL) != SECSuccess) {
#  555|           exit(1);
#  556|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def99]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:573:14: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:565:18: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:573:14: danger: ‘nickname’ leaks here; was allocated at [(11)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/10)
#  571|   
#  572|       if (decodeTrust) {
#  573|->         rv = CERT_DecodeTrustString(&trust, trusts);
#  574|           if (rv) {
#  575|               fprintf(stderr, "%s: incorrectly formatted trust string.\n", progName);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def100]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:573:14: warning[-Wanalyzer-malloc-leak]: leak of ‘trusts’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:565:18: branch_true: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:565:18: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:573:14: danger: ‘trusts’ leaks here; was allocated at [(15)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/14)
#  571|   
#  572|       if (decodeTrust) {
#  573|->         rv = CERT_DecodeTrustString(&trust, trusts);
#  574|           if (rv) {
#  575|               fprintf(stderr, "%s: incorrectly formatted trust string.\n", progName);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def101]
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: warning[-Wanalyzer-malloc-leak]: leak of ‘nickname’
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:454:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:457:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:481:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:488:8: branch_false: following ‘false’ branch (when ‘mutuallyExclusiveOpts == 1’)...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:494:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:10: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:509:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:515:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:552:16: acquire_memory: allocated here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:554:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:559:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:558:9: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:564:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:16: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:567:15: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:9: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:580:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: branch_false: ...to here
nss-3.117/nss/cmd/addbuiltin/addbuiltin.c:589:5: danger: ‘nickname’ leaks here; was allocated at [(11)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/10)
#  587|       }
#  588|   
#  589|->     SECU_FileToItem(&derItem, infile);
#  590|   
#  591|       /*printheader();*/

Error: GCC_ANALYZER_WARNING (CWE-775): [#def102]
nss-3.117/nss/cmd/atob/atob.c:56:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘inFile’
nss-3.117/nss/cmd/atob/atob.c:111:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/atob/atob.c:126:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/atob/atob.c:127:17: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:135:26: acquire_resource: opened here
nss-3.117/nss/cmd/atob/atob.c:136:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:153:8: branch_false: following ‘false’ branch (when ‘inFile’ is non-NULL)...
nss-3.117/nss/cmd/atob/atob.c:157:8: branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:157:8: branch_true: following ‘true’ branch (when ‘outFile’ is NULL)...
nss-3.117/nss/cmd/atob/atob.c:167:9: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:170:10: call_function: calling ‘decode_file’ from ‘main’
#   54|       const char *ptr;
#   55|   
#   56|->     cx = NSSBase64Decoder_Create(output_binary, outFile);
#   57|       if (!cx) {
#   58|           return -1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def103]
nss-3.117/nss/cmd/atob/atob.c:56:10: warning[-Wanalyzer-malloc-leak]: leak of ‘inFile’
nss-3.117/nss/cmd/atob/atob.c:111:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/atob/atob.c:126:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/atob/atob.c:127:17: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:135:26: acquire_memory: allocated here
nss-3.117/nss/cmd/atob/atob.c:136:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:153:8: branch_false: following ‘false’ branch (when ‘inFile’ is non-NULL)...
nss-3.117/nss/cmd/atob/atob.c:157:8: branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:157:8: branch_true: following ‘true’ branch (when ‘outFile’ is NULL)...
nss-3.117/nss/cmd/atob/atob.c:167:9: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:170:10: call_function: calling ‘decode_file’ from ‘main’
#   54|       const char *ptr;
#   55|   
#   56|->     cx = NSSBase64Decoder_Create(output_binary, outFile);
#   57|       if (!cx) {
#   58|           return -1;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def104]
nss-3.117/nss/cmd/atob/atob.c:126:22: warning[-Wanalyzer-file-leak]: leak of FILE ‘inFile’
nss-3.117/nss/cmd/atob/atob.c:126:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/atob/atob.c:127:17: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:135:26: acquire_resource: opened here
nss-3.117/nss/cmd/atob/atob.c:136:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:126:22: danger: ‘inFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#  124|       /* Parse command line arguments */
#  125|       optstate = PL_CreateOptState(argc, argv, "?hi:o:");
#  126|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  127|           switch (optstate->option) {
#  128|               case '?':

Error: GCC_ANALYZER_WARNING (CWE-775): [#def105]
nss-3.117/nss/cmd/atob/atob.c:126:22: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/atob/atob.c:126:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/atob/atob.c:127:17: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:144:27: acquire_resource: opened here
nss-3.117/nss/cmd/atob/atob.c:145:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:126:22: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#  124|       /* Parse command line arguments */
#  125|       optstate = PL_CreateOptState(argc, argv, "?hi:o:");
#  126|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  127|           switch (optstate->option) {
#  128|               case '?':

Error: GCC_ANALYZER_WARNING (CWE-401): [#def106]
nss-3.117/nss/cmd/atob/atob.c:126:22: warning[-Wanalyzer-malloc-leak]: leak of ‘inFile’
nss-3.117/nss/cmd/atob/atob.c:126:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/atob/atob.c:127:17: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:135:26: acquire_memory: allocated here
nss-3.117/nss/cmd/atob/atob.c:136:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:126:22: danger: ‘inFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/2)
#  124|       /* Parse command line arguments */
#  125|       optstate = PL_CreateOptState(argc, argv, "?hi:o:");
#  126|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  127|           switch (optstate->option) {
#  128|               case '?':

Error: GCC_ANALYZER_WARNING (CWE-401): [#def107]
nss-3.117/nss/cmd/atob/atob.c:126:22: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/atob/atob.c:126:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/atob/atob.c:127:17: branch_true: ...to here
nss-3.117/nss/cmd/atob/atob.c:144:27: acquire_memory: allocated here
nss-3.117/nss/cmd/atob/atob.c:145:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/atob/atob.c:126:22: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
#  124|       /* Parse command line arguments */
#  125|       optstate = PL_CreateOptState(argc, argv, "?hi:o:");
#  126|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  127|           switch (optstate->option) {
#  128|               case '?':

Error: CPPCHECK_WARNING (CWE-475): [#def108]
nss-3.117/nss/cmd/bltest/blapitest.c:2750: error[shiftNegative]: Shifting by a negative value is undefined behaviour
# 2748|       if (exp->len <= 4) {
# 2749|           for (i = exp->len; i >= 0; --i)
# 2750|->             e |= exp->data[exp->len - i] << 8 * (i - 1);
# 2751|           fprintf(stdout, "%12d", e);
# 2752|       } else {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def109]
nss-3.117/nss/cmd/btoa/btoa.c:124:22: warning[-Wanalyzer-file-leak]: leak of FILE ‘inFile’
nss-3.117/nss/cmd/btoa/btoa.c:124:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/btoa/btoa.c:125:17: branch_true: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:132:26: acquire_resource: opened here
nss-3.117/nss/cmd/btoa/btoa.c:133:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:124:22: danger: ‘inFile’ leaks here; was opened at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#  122|       optstate = PL_CreateOptState(argc, argv, "i:o:w:");
#  123|       PORT_Assert(optstate);
#  124|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  125|           switch (optstate->option) {
#  126|               default:

Error: GCC_ANALYZER_WARNING (CWE-775): [#def110]
nss-3.117/nss/cmd/btoa/btoa.c:124:22: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/btoa/btoa.c:124:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/btoa/btoa.c:125:17: branch_true: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:141:27: acquire_resource: opened here
nss-3.117/nss/cmd/btoa/btoa.c:142:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:124:22: danger: ‘outFile’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  122|       optstate = PL_CreateOptState(argc, argv, "i:o:w:");
#  123|       PORT_Assert(optstate);
#  124|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  125|           switch (optstate->option) {
#  126|               default:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def111]
nss-3.117/nss/cmd/btoa/btoa.c:124:22: warning[-Wanalyzer-malloc-leak]: leak of ‘inFile’
nss-3.117/nss/cmd/btoa/btoa.c:124:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/btoa/btoa.c:125:17: branch_true: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:132:26: acquire_memory: allocated here
nss-3.117/nss/cmd/btoa/btoa.c:133:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:124:22: danger: ‘inFile’ leaks here; was allocated at [(5)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/4)
#  122|       optstate = PL_CreateOptState(argc, argv, "i:o:w:");
#  123|       PORT_Assert(optstate);
#  124|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  125|           switch (optstate->option) {
#  126|               default:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def112]
nss-3.117/nss/cmd/btoa/btoa.c:124:22: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/btoa/btoa.c:124:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/btoa/btoa.c:125:17: branch_true: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:141:27: acquire_memory: allocated here
nss-3.117/nss/cmd/btoa/btoa.c:142:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/btoa/btoa.c:124:22: danger: ‘outFile’ leaks here; was allocated at [(5)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/4)
#  122|       optstate = PL_CreateOptState(argc, argv, "i:o:w:");
#  123|       PORT_Assert(optstate);
#  124|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  125|           switch (optstate->option) {
#  126|               default:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def113]
nss-3.117/nss/cmd/crlutil/crlgen.c:816:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/cmd/crlutil/crlgen.c:789:1: enter_function: entry to ‘CRLGEN_ExtHandleInit’
nss-3.117/nss/cmd/crlutil/crlgen.c:796:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/crlutil/crlgen.c:808:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/crlutil/crlgen.c:810:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/crlutil/crlgen.c:811:42: branch_true: ...to here
nss-3.117/nss/cmd/crlutil/crlgen.c:813:17: call_function: calling ‘crlgen_PlaceAnEntry’ from ‘CRLGEN_ExtHandleInit’
nss-3.117/nss/cmd/crlutil/crlgen.c:813:17: return_function: returning to ‘CRLGEN_ExtHandleInit’ from ‘crlgen_PlaceAnEntry’
nss-3.117/nss/cmd/crlutil/crlgen.c:814:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/crlutil/crlgen.c:816:21: branch_true: ...to here
nss-3.117/nss/cmd/crlutil/crlgen.c:816:21: danger: dereference of NULL ‘crlgen_PlaceAnEntry(crlGenData, *entry, &**entry_21.serialNumber)’
#  814|               if ((*entry)->extensions) {
#  815|                   extData->extHandle =
#  816|->                     CERT_StartCRLEntryExtensions(&crlGenData->signCrl->crl,
#  817|                                                    (CERTCrlEntry *)extData->entry);
#  818|                   if (crlgen_InitExtensionHandle(extData->extHandle,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def114]
nss-3.117/nss/cmd/crlutil/crlgen_lex_orig.l:649:5: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(56)’
nss-3.117/nss/cmd/crlutil/crlgen_lex_orig.l:162:1: enter_function: entry to ‘CRLGEN_StartCrlGen’
nss-3.117/nss/cmd/crlutil/crlgen_lex_orig.l:172:10: call_function: calling ‘yylex’ from ‘CRLGEN_StartCrlGen’

Error: CPPCHECK_WARNING (CWE-457): [#def115]
nss-3.117/nss/cmd/dbtool/dbtool.c:634: warning[uninitvar]: Uninitialized variable: template.pValue
#  632|               template.pValue = alloc;
#  633|           }
#  634|->         if (template.pValue == NULL) {
#  635|               PR_fprintf(PR_STDERR, "    "
#  636|                                     "Could allocate %d bytes for  Attribute %s (0x%08x)\n",

Error: GCC_ANALYZER_WARNING (CWE-401): [#def116]
nss-3.117/nss/cmd/dbtool/sdb.c:2362:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2362:20: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/10)
# 2360|   
# 2361|           /* Can't bind parameters to a PRAGMA. */
# 2362|->         queryStr = sqlite3_mprintf("PRAGMA table_info(%s);", table);
# 2363|           if (queryStr == NULL) {
# 2364|               error = CKR_HOST_MEMORY;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def117]
nss-3.117/nss/cmd/dbtool/sdb.c:2362:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2362:20: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8)
# 2360|   
# 2361|           /* Can't bind parameters to a PRAGMA. */
# 2362|->         queryStr = sqlite3_mprintf("PRAGMA table_info(%s);", table);
# 2363|           if (queryStr == NULL) {
# 2364|               error = CKR_HOST_MEMORY;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def118]
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/10)
# 2365|               goto loser;
# 2366|           }
# 2367|->         sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|           sqlite3_free(queryStr);
# 2369|           queryStr = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def119]
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/8)
# 2365|               goto loser;
# 2366|           }
# 2367|->         sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|           sqlite3_free(queryStr);
# 2369|           queryStr = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def120]
nss-3.117/nss/cmd/dbtool/sdb.c:2368:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2368:9: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/10)
# 2366|           }
# 2367|           sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|->         sqlite3_free(queryStr);
# 2369|           queryStr = NULL;
# 2370|           if (sqlerr != SQLITE_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def121]
nss-3.117/nss/cmd/dbtool/sdb.c:2368:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2368:9: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/8)
# 2366|           }
# 2367|           sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|->         sqlite3_free(queryStr);
# 2369|           queryStr = NULL;
# 2370|           if (sqlerr != SQLITE_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def122]
nss-3.117/nss/cmd/dbtool/sdb.c:2380:22: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2380:22: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/16)
# 2378|           }
# 2379|           do {
# 2380|->             sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|                   PR_Sleep(SDB_BUSY_RETRY_TIME);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def123]
nss-3.117/nss/cmd/dbtool/sdb.c:2380:22: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2380:22: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/10)
# 2378|           }
# 2379|           do {
# 2380|->             sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|                   PR_Sleep(SDB_BUSY_RETRY_TIME);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def124]
nss-3.117/nss/cmd/dbtool/sdb.c:2380:22: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2380:22: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/8)
# 2378|           }
# 2379|           do {
# 2380|->             sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|                   PR_Sleep(SDB_BUSY_RETRY_TIME);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def125]
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2381:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/16)
# 2380|               sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|->                 PR_Sleep(SDB_BUSY_RETRY_TIME);
# 2383|               }
# 2384|               if (sqlerr == SQLITE_ROW) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def126]
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2381:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/10)
# 2380|               sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|->                 PR_Sleep(SDB_BUSY_RETRY_TIME);
# 2383|               }
# 2384|               if (sqlerr == SQLITE_ROW) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def127]
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2381:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2382:17: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/8)
# 2380|               sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|->                 PR_Sleep(SDB_BUSY_RETRY_TIME);
# 2383|               }
# 2384|               if (sqlerr == SQLITE_ROW) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def128]
nss-3.117/nss/cmd/dbtool/sdb.c:2387:21: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2401:18: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_true: following ‘true’ branch (when ‘backedAttrs == schemaAttrsCapacity’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2386:21: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2387:21: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/16)
# 2385|                   if (backedAttrs == schemaAttrsCapacity) {
# 2386|                       schemaAttrsCapacity += sftkdb_known_attributes_size;
# 2387|->                     sdb_p->schemaAttrs = realloc(sdb_p->schemaAttrs,
# 2388|                                                    schemaAttrsCapacity * sizeof(CK_ATTRIBUTE_TYPE));
# 2389|                       if (!sdb_p->schemaAttrs) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def129]
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/16)
# 2393|                   }
# 2394|                   /* Record the ULONG attribute value. */
# 2395|->                 char *val = (char *)sqlite3_column_text(stmt, 1);
# 2396|                   if (val && val[0] == 'a') {
# 2397|                       CK_ATTRIBUTE_TYPE attr = strtoul(&val[1], NULL, 16);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def130]
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/10)
# 2393|                   }
# 2394|                   /* Record the ULONG attribute value. */
# 2395|->                 char *val = (char *)sqlite3_column_text(stmt, 1);
# 2396|                   if (val && val[0] == 'a') {
# 2397|                       CK_ATTRIBUTE_TYPE attr = strtoul(&val[1], NULL, 16);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def131]
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2395:37: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/8)
# 2393|                   }
# 2394|                   /* Record the ULONG attribute value. */
# 2395|->                 char *val = (char *)sqlite3_column_text(stmt, 1);
# 2396|                   if (val && val[0] == 'a') {
# 2397|                       CK_ATTRIBUTE_TYPE attr = strtoul(&val[1], NULL, 16);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def132]
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/16)
# 2404|               goto loser;
# 2405|           }
# 2406|->         sqlerr = sqlite3_reset(stmt);
# 2407|           if (sqlerr != SQLITE_OK) {
# 2408|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def133]
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/18/codeFlows/0/threadFlows/0/locations/10)
# 2404|               goto loser;
# 2405|           }
# 2406|->         sqlerr = sqlite3_reset(stmt);
# 2407|           if (sqlerr != SQLITE_OK) {
# 2408|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def134]
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/8)
# 2404|               goto loser;
# 2405|           }
# 2406|->         sqlerr = sqlite3_reset(stmt);
# 2407|           if (sqlerr != SQLITE_OK) {
# 2408|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def135]
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/19/codeFlows/0/threadFlows/0/locations/16)
# 2408|               goto loser;
# 2409|           }
# 2410|->         sqlerr = sqlite3_finalize(stmt);
# 2411|           if (sqlerr != SQLITE_OK) {
# 2412|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def136]
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/20/codeFlows/0/threadFlows/0/locations/10)
# 2408|               goto loser;
# 2409|           }
# 2410|->         sqlerr = sqlite3_finalize(stmt);
# 2411|           if (sqlerr != SQLITE_OK) {
# 2412|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def137]
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/21/codeFlows/0/threadFlows/0/locations/8)
# 2408|               goto loser;
# 2409|           }
# 2410|->         sqlerr = sqlite3_finalize(stmt);
# 2411|           if (sqlerr != SQLITE_OK) {
# 2412|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def138]
nss-3.117/nss/cmd/dbtool/sdb.c:2418:9: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2411:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2415:9: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2418:9: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/24/codeFlows/0/threadFlows/0/locations/16)
# 2416|   
# 2417|           /* Sort these once so we can shortcut invalid attribute searches. */
# 2418|->         qsort(sdb_p->schemaAttrs, sdb_p->numSchemaAttrs,
# 2419|                 sizeof(CK_ATTRIBUTE_TYPE), sdb_attributeComparator);
# 2420|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def139]
nss-3.117/nss/cmd/dbtool/sdb.c:2418:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2411:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2415:9: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2418:9: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/22/codeFlows/0/threadFlows/0/locations/10)
# 2416|   
# 2417|           /* Sort these once so we can shortcut invalid attribute searches. */
# 2418|->         qsort(sdb_p->schemaAttrs, sdb_p->numSchemaAttrs,
# 2419|                 sizeof(CK_ATTRIBUTE_TYPE), sdb_attributeComparator);
# 2420|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def140]
nss-3.117/nss/cmd/dbtool/sdb.c:2418:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2411:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2415:9: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2418:9: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/8)
# 2416|   
# 2417|           /* Sort these once so we can shortcut invalid attribute searches. */
# 2418|->         qsort(sdb_p->schemaAttrs, sdb_p->numSchemaAttrs,
# 2419|                 sizeof(CK_ATTRIBUTE_TYPE), sdb_attributeComparator);
# 2420|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def141]
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/25/codeFlows/0/threadFlows/0/locations/10)
# 2421|   
# 2422|       /* invariant fields */
# 2423|->     sdb_p->sqlDBName = PORT_Strdup(dbname);
# 2424|       sdb_p->type = type;
# 2425|       sdb_p->table = table;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def142]
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/26/codeFlows/0/threadFlows/0/locations/8)
# 2421|   
# 2422|       /* invariant fields */
# 2423|->     sdb_p->sqlDBName = PORT_Strdup(dbname);
# 2424|       sdb_p->type = type;
# 2425|       sdb_p->table = table;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def143]
nss-3.117/nss/cmd/dbtool/sdb.c:2430:29: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2430:29: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/10)
# 2428|       /* set the cache delay time. This is how long we will wait before we
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|->     sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|       sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def144]
nss-3.117/nss/cmd/dbtool/sdb.c:2430:29: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2430:29: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/28/codeFlows/0/threadFlows/0/locations/8)
# 2428|       /* set the cache delay time. This is how long we will wait before we
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|->     sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|       sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def145]
nss-3.117/nss/cmd/dbtool/sdb.c:2431:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2431:20: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/30/codeFlows/0/threadFlows/0/locations/10)
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|       sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|->     sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */
# 2433|       sdb_p->sqlXactDB = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def146]
nss-3.117/nss/cmd/dbtool/sdb.c:2431:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/cmd/dbtool/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/dbtool/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/cmd/dbtool/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/cmd/dbtool/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/cmd/dbtool/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/cmd/dbtool/sdb.c:2431:20: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/29/codeFlows/0/threadFlows/0/locations/8)
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|       sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|->     sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */
# 2433|       sdb_p->sqlXactDB = NULL;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def147]
nss-3.117/nss/cmd/derdump/derdump.c:85:18: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:85:18: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   83|   
#   84|       if (!inFile)
#   85|->         inFile = PR_STDIN;
#   86|       if (!outFile)
#   87|           outFile = stdout;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def148]
nss-3.117/nss/cmd/derdump/derdump.c:85:18: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:85:18: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#   83|   
#   84|       if (!inFile)
#   85|->         inFile = PR_STDIN;
#   86|       if (!outFile)
#   87|           outFile = stdout;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def149]
nss-3.117/nss/cmd/derdump/derdump.c:89:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:89:10: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#   87|           outFile = stdout;
#   88|   
#   89|->     rv = NSS_NoDB_Init(NULL);
#   90|       if (rv != SECSuccess) {
#   91|           SECU_PrintPRandOSError(progName);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def150]
nss-3.117/nss/cmd/derdump/derdump.c:89:10: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:89:10: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#   87|           outFile = stdout;
#   88|   
#   89|->     rv = NSS_NoDB_Init(NULL);
#   90|       if (rv != SECSuccess) {
#   91|           SECU_PrintPRandOSError(progName);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def151]
nss-3.117/nss/cmd/derdump/derdump.c:91:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:91:9: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
#   89|       rv = NSS_NoDB_Init(NULL);
#   90|       if (rv != SECSuccess) {
#   91|->         SECU_PrintPRandOSError(progName);
#   92|           goto cleanup;
#   93|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def152]
nss-3.117/nss/cmd/derdump/derdump.c:91:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:91:9: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/2)
#   89|       rv = NSS_NoDB_Init(NULL);
#   90|       if (rv != SECSuccess) {
#   91|->         SECU_PrintPRandOSError(progName);
#   92|           goto cleanup;
#   93|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def153]
nss-3.117/nss/cmd/derdump/derdump.c:95:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:95:10: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/2)
#   93|       }
#   94|   
#   95|->     rv = SECU_ReadDERFromFile(&der, inFile, PR_FALSE, PR_FALSE);
#   96|       if (rv == SECSuccess) {
#   97|           rv = DER_PrettyPrint(outFile, &der, raw);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def154]
nss-3.117/nss/cmd/derdump/derdump.c:95:10: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:95:10: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
#   93|       }
#   94|   
#   95|->     rv = SECU_ReadDERFromFile(&der, inFile, PR_FALSE, PR_FALSE);
#   96|       if (rv == SECSuccess) {
#   97|           rv = DER_PrettyPrint(outFile, &der, raw);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def155]
nss-3.117/nss/cmd/derdump/derdump.c:97:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:97:14: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:97:14: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/2)
#   95|       rv = SECU_ReadDERFromFile(&der, inFile, PR_FALSE, PR_FALSE);
#   96|       if (rv == SECSuccess) {
#   97|->         rv = DER_PrettyPrint(outFile, &der, raw);
#   98|           if (rv == SECSuccess) {
#   99|               retval = 0;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def156]
nss-3.117/nss/cmd/derdump/derdump.c:97:14: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:97:14: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:97:14: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/2)
#   95|       rv = SECU_ReadDERFromFile(&der, inFile, PR_FALSE, PR_FALSE);
#   96|       if (rv == SECSuccess) {
#   97|->         rv = DER_PrettyPrint(outFile, &der, raw);
#   98|           if (rv == SECSuccess) {
#   99|               retval = 0;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def157]
nss-3.117/nss/cmd/derdump/derdump.c:104:16: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:104:16: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:104:16: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/2)
#  102|       }
#  103|   
#  104|->     xp_error = PORT_GetError();
#  105|       if (xp_error) {
#  106|           SECU_PrintError(progName, "error %d", xp_error);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def158]
nss-3.117/nss/cmd/derdump/derdump.c:104:16: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:104:16: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:104:16: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/2)
#  102|       }
#  103|   
#  104|->     xp_error = PORT_GetError();
#  105|       if (xp_error) {
#  106|           SECU_PrintError(progName, "error %d", xp_error);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def159]
nss-3.117/nss/cmd/derdump/derdump.c:106:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:104:16: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:105:8: branch_true: following ‘true’ branch (when ‘xp_error != 0’)...
nss-3.117/nss/cmd/derdump/derdump.c:106:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:106:9: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/2)
#  104|       xp_error = PORT_GetError();
#  105|       if (xp_error) {
#  106|->         SECU_PrintError(progName, "error %d", xp_error);
#  107|       }
#  108|       if (errno) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def160]
nss-3.117/nss/cmd/derdump/derdump.c:106:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:104:16: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:105:8: branch_true: following ‘true’ branch (when ‘xp_error != 0’)...
nss-3.117/nss/cmd/derdump/derdump.c:106:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:106:9: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/2)
#  104|       xp_error = PORT_GetError();
#  105|       if (xp_error) {
#  106|->         SECU_PrintError(progName, "error %d", xp_error);
#  107|       }
#  108|       if (errno) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def161]
nss-3.117/nss/cmd/derdump/derdump.c:109:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:104:16: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:108:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:109:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:109:9: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/2)
#  107|       }
#  108|       if (errno) {
#  109|->         SECU_PrintSystemError(progName, "errno=%d", errno);
#  110|       }
#  111|       retval = 1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def162]
nss-3.117/nss/cmd/derdump/derdump.c:109:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:95:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:96:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:104:16: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:108:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:109:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:109:9: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/2)
#  107|       }
#  108|       if (errno) {
#  109|->         SECU_PrintSystemError(progName, "errno=%d", errno);
#  110|       }
#  111|       retval = 1;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def163]
nss-3.117/nss/cmd/derdump/derdump.c:114:15: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:114:15: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/2)
#  112|   
#  113|   cleanup:
#  114|->     retval |= NSS_Shutdown();
#  115|       if (inFile) {
#  116|           PR_Close(inFile);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def164]
nss-3.117/nss/cmd/derdump/derdump.c:114:15: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:114:15: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/2)
#  112|   
#  113|   cleanup:
#  114|->     retval |= NSS_Shutdown();
#  115|       if (inFile) {
#  116|           PR_Close(inFile);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def165]
nss-3.117/nss/cmd/derdump/derdump.c:116:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:115:8: branch_true: following ‘true’ branch (when ‘inFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:116:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:116:9: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/18/codeFlows/0/threadFlows/0/locations/2)
#  114|       retval |= NSS_Shutdown();
#  115|       if (inFile) {
#  116|->         PR_Close(inFile);
#  117|       }
#  118|       if (outFile) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def166]
nss-3.117/nss/cmd/derdump/derdump.c:116:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:115:8: branch_true: following ‘true’ branch (when ‘inFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:116:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:116:9: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/19/codeFlows/0/threadFlows/0/locations/2)
#  114|       retval |= NSS_Shutdown();
#  115|       if (inFile) {
#  116|->         PR_Close(inFile);
#  117|       }
#  118|       if (outFile) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def167]
nss-3.117/nss/cmd/derdump/derdump.c:119:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_resource: opened here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:118:8: branch_true: following ‘true’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:119:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:119:9: danger: ‘outFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/20/codeFlows/0/threadFlows/0/locations/2)
#  117|       }
#  118|       if (outFile) {
#  119|->         fflush(outFile);
#  120|           fclose(outFile);
#  121|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def168]
nss-3.117/nss/cmd/derdump/derdump.c:119:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/derdump/derdump.c:52:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:53:17: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/derdump/derdump.c:65:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:81:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:84:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:85:18: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:86:8: branch_false: following ‘false’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:89:10: branch_false: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:90:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/derdump/derdump.c:91:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:118:8: branch_true: following ‘true’ branch (when ‘outFile’ is non-NULL)...
nss-3.117/nss/cmd/derdump/derdump.c:119:9: branch_true: ...to here
nss-3.117/nss/cmd/derdump/derdump.c:119:9: danger: ‘outFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/21/codeFlows/0/threadFlows/0/locations/2)
#  117|       }
#  118|       if (outFile) {
#  119|->         fflush(outFile);
#  120|           fclose(outFile);
#  121|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def169]
nss-3.117/nss/cmd/digest/digest.c:27:19: warning[-Wanalyzer-malloc-leak]: leak of ‘hashName’
nss-3.117/nss/cmd/digest/digest.c:120:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/digest/digest.c:138:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/digest/digest.c:147:16: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:148:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/digest/digest.c:149:17: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:173:28: acquire_memory: allocated here
nss-3.117/nss/cmd/digest/digest.c:148:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/digest/digest.c:178:8: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:178:8: branch_false: following ‘false’ branch (when ‘hashName’ is non-NULL)...
nss-3.117/nss/cmd/digest/digest.c:181:8: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:181:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/digest/digest.c:182:9: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:183:8: branch_true: following ‘true’ branch (when ‘outFile’ is NULL)...
nss-3.117/nss/cmd/digest/digest.c:184:9: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:186:15: call_function: calling ‘HashNameToOID’ from ‘main’
#   25|   
#   26|       for (htype = HASH_AlgNULL + 1; htype < HASH_AlgTOTAL; htype++) {
#   27|->         hashOID = SECOID_FindOIDByTag(HASH_GetHashOidTagByHashType(htype));
#   28|           if (PORT_Strcasecmp(hashName, hashOID->desc) == 0)
#   29|               break;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def170]
nss-3.117/nss/cmd/digest/digest.c:28:13: warning[-Wanalyzer-malloc-leak]: leak of ‘hashName’
nss-3.117/nss/cmd/digest/digest.c:120:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/digest/digest.c:138:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/digest/digest.c:147:16: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:148:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/digest/digest.c:149:17: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:173:28: acquire_memory: allocated here
nss-3.117/nss/cmd/digest/digest.c:148:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/digest/digest.c:178:8: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:178:8: branch_false: following ‘false’ branch (when ‘hashName’ is non-NULL)...
nss-3.117/nss/cmd/digest/digest.c:181:8: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:181:8: branch_true: following ‘true’ branch (when ‘inFile’ is NULL)...
nss-3.117/nss/cmd/digest/digest.c:182:9: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:183:8: branch_true: following ‘true’ branch (when ‘outFile’ is NULL)...
nss-3.117/nss/cmd/digest/digest.c:184:9: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:186:15: call_function: calling ‘HashNameToOID’ from ‘main’
#   26|       for (htype = HASH_AlgNULL + 1; htype < HASH_AlgTOTAL; htype++) {
#   27|           hashOID = SECOID_FindOIDByTag(HASH_GetHashOidTagByHashType(htype));
#   28|->         if (PORT_Strcasecmp(hashName, hashOID->desc) == 0)
#   29|               break;
#   30|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def171]
nss-3.117/nss/cmd/digest/digest.c:148:22: warning[-Wanalyzer-malloc-leak]: leak of ‘hashName’
nss-3.117/nss/cmd/digest/digest.c:138:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/digest/digest.c:147:16: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:148:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/digest/digest.c:149:17: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:173:28: acquire_memory: allocated here
nss-3.117/nss/cmd/digest/digest.c:148:22: danger: ‘hashName’ leaks here; was allocated at [(5)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/4)
#  146|        */
#  147|       optstate = PL_CreateOptState(argc, argv, "t:i:o:");
#  148|->     while ((status = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#  149|           switch (optstate->option) {
#  150|               case '?':

Error: GCC_ANALYZER_WARNING (CWE-401): [#def172]
nss-3.117/nss/cmd/digest/digest.c:173:28: warning[-Wanalyzer-malloc-leak]: leak of ‘hashName’
nss-3.117/nss/cmd/digest/digest.c:138:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/digest/digest.c:147:16: branch_false: ...to here
nss-3.117/nss/cmd/digest/digest.c:148:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/digest/digest.c:149:17: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:173:28: acquire_memory: allocated here
nss-3.117/nss/cmd/digest/digest.c:148:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/digest/digest.c:149:17: branch_true: ...to here
nss-3.117/nss/cmd/digest/digest.c:173:28: danger: ‘hashName’ leaks here; was allocated at [(5)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/4)
#  171|   
#  172|               case 't':
#  173|->                 hashName = strdup(optstate->value);
#  174|                   break;
#  175|           }

Error: CPPCHECK_WARNING (CWE-476): [#def173]
nss-3.117/nss/cmd/fipstest/fipstest.c:320: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: req
#  318|       req = fopen(reqfn, "r");
#  319|       resp = stdout;
#  320|->     while (fgets(buf, sizeof buf, req) != NULL) {
#  321|           /* a comment or blank line */
#  322|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def174]
nss-3.117/nss/cmd/fipstest/fipstest.c:763: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: req
#  761|       req = fopen(reqfn, "r");
#  762|       resp = stdout;
#  763|->     while (fgets(buf, sizeof buf, req) != NULL) {
#  764|           /* a comment or blank line */
#  765|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def175]
nss-3.117/nss/cmd/fipstest/fipstest.c:1035: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: aesreq
# 1033|       aesreq = fopen(reqfn, "r");
# 1034|       aesresp = stdout;
# 1035|->     while (fgets(buf, sizeof buf, aesreq) != NULL) {
# 1036|           /* a comment or blank line */
# 1037|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def176]
nss-3.117/nss/cmd/fipstest/fipstest.c:1252: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: aesreq
# 1250|       aesreq = fopen(reqfn, "r");
# 1251|       aesresp = stdout;
# 1252|->     while (fgets(buf, sizeof buf, aesreq) != NULL) {
# 1253|           /* a comment or blank line */
# 1254|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def177]
nss-3.117/nss/cmd/fipstest/fipstest.c:1460: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: aesreq
# 1458|       aesreq = fopen(reqfn, "r");
# 1459|       aesresp = stdout;
# 1460|->     while (fgets(buf, sizeof buf, aesreq) != NULL) {
# 1461|           /* a comment or blank line */
# 1462|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def178]
nss-3.117/nss/cmd/fipstest/fipstest.c:1744: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: aesreq
# 1742|       aesreq = fopen(reqfn, "r");
# 1743|       aesresp = stdout;
# 1744|->     while (fgets(buf, sizeof buf, aesreq) != NULL) {
# 1745|           /* a comment or blank line */
# 1746|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def179]
nss-3.117/nss/cmd/fipstest/fipstest.c:2396: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ecdsareq
# 2394|       ecdsaresp = stdout;
# 2395|       strcpy(curve, "nist");
# 2396|->     while (fgets(buf, sizeof buf, ecdsareq) != NULL) {
# 2397|           /* a comment or blank line */
# 2398|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def180]
nss-3.117/nss/cmd/fipstest/fipstest.c:2516: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ecdsareq
# 2514|       strcpy(curve, "nist");
# 2515|       pubkey.data = NULL;
# 2516|->     while (fgets(buf, sizeof buf, ecdsareq) != NULL) {
# 2517|           /* a comment or blank line */
# 2518|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def181]
nss-3.117/nss/cmd/fipstest/fipstest.c:2641: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ecdsareq
# 2639|       ecdsaresp = stdout;
# 2640|       strcpy(curve, "nist");
# 2641|->     while (fgets(buf, sizeof buf, ecdsareq) != NULL) {
# 2642|           /* a comment or blank line */
# 2643|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def182]
nss-3.117/nss/cmd/fipstest/fipstest.c:2801: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ecdsareq
# 2799|       ecpub.ecParams.arena = NULL;
# 2800|       strcpy(curve, "nist");
# 2801|->     while (fgets(buf, sizeof buf, ecdsareq) != NULL) {
# 2802|           /* a comment or blank line */
# 2803|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def183]
nss-3.117/nss/cmd/fipstest/fipstest.c:3007: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ecdhreq
# 3005|       strcpy(curve, "nist");
# 3006|       pubkey.data = NULL;
# 3007|->     while (fgets(buf, sizeof buf, ecdhreq) != NULL) {
# 3008|           /* a comment or blank line */
# 3009|           if (buf[0] == '#' || buf[0] == '\n' || buf[0] == '\r') {

Error: CPPCHECK_WARNING (CWE-476): [#def184]
nss-3.117/nss/cmd/fipstest/fipstest.c:3260: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ecdhreq
# 3258|       strcpy(curve, "nist");
# 3259|       pubkey.data = NULL;
# 3260|->     while (fgets(buf, sizeof buf, ecdhreq) != NULL) {
# 3261|           /* a comment or blank line */
# 3262|           if (buf[0] == '#' || buf[0] == '\n' || buf[0] == '\r') {

Error: CPPCHECK_WARNING (CWE-476): [#def185]
nss-3.117/nss/cmd/fipstest/fipstest.c:3526: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: dhreq
# 3524|       dhreq = fopen(reqfn, "r");
# 3525|       dhresp = stdout;
# 3526|->     while (fgets(buf, sizeof buf, dhreq) != NULL) {
# 3527|           /* a comment or blank line */
# 3528|           if (buf[0] == '#' || buf[0] == '\n' || buf[0] == '\r') {

Error: CPPCHECK_WARNING (CWE-476): [#def186]
nss-3.117/nss/cmd/fipstest/fipstest.c:3720: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: dhreq
# 3718|       dhreq = fopen(reqfn, "r");
# 3719|       dhresp = stdout;
# 3720|->     while (fgets(buf, sizeof buf, dhreq) != NULL) {
# 3721|           /* a comment or blank line */
# 3722|           if (buf[0] == '#' || buf[0] == '\n' || buf[0] == '\r') {

Error: CPPCHECK_WARNING (CWE-476): [#def187]
nss-3.117/nss/cmd/fipstest/fipstest.c:3963: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: rngreq
# 3961|       rngreq = fopen(reqfn, "r");
# 3962|       rngresp = stdout;
# 3963|->     while (fgets(buf, sizeof buf, rngreq) != NULL) {
# 3964|           switch (command) {
# 3965|               case INSTANTIATE:

Error: CPPCHECK_WARNING (CWE-476): [#def188]
nss-3.117/nss/cmd/fipstest/fipstest.c:4385: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: rngreq
# 4383|       rngreq = fopen(reqfn, "r");
# 4384|       rngresp = stdout;
# 4385|->     while (fgets(buf, sizeof buf, rngreq) != NULL) {
# 4386|           /* a comment or blank line */
# 4387|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def189]
nss-3.117/nss/cmd/fipstest/fipstest.c:4508: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: rngreq
# 4506|       rngreq = fopen(reqfn, "r");
# 4507|       rngresp = stdout;
# 4508|->     while (fgets(buf, sizeof buf, rngreq) != NULL) {
# 4509|           /* a comment or blank line */
# 4510|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def190]
nss-3.117/nss/cmd/fipstest/fipstest.c:4710: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: req
# 4708|       req = fopen(reqfn, "r");
# 4709|       resp = stdout;
# 4710|->     while (fgets(buf, bufSize, req) != NULL) {
# 4711|   
# 4712|           /* a comment or blank line */

Error: CPPCHECK_WARNING (CWE-476): [#def191]
nss-3.117/nss/cmd/fipstest/fipstest.c:4895: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: req
# 4893|       req = fopen(reqfn, "r");
# 4894|       resp = stdout;
# 4895|->     while (fgets(buf, bufSize, req) != NULL) {
# 4896|           if (strncmp(buf, "Mac", 3) == 0) {
# 4897|               i = 3;

Error: CPPCHECK_WARNING (CWE-476): [#def192]
nss-3.117/nss/cmd/fipstest/fipstest.c:5045: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: dsareq
# 5043|       dsareq = fopen(reqfn, "r");
# 5044|       dsaresp = stdout;
# 5045|->     while (fgets(buf, sizeof buf, dsareq) != NULL) {
# 5046|           /* a comment or blank line */
# 5047|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def193]
nss-3.117/nss/cmd/fipstest/fipstest.c:5182: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: dsareq
# 5180|       memset(&vfy, 0, sizeof(vfy));
# 5181|   
# 5182|->     while (fgets(buf, sizeof buf, dsareq) != NULL) {
# 5183|           /* a comment or blank line */
# 5184|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def194]
nss-3.117/nss/cmd/fipstest/fipstest.c:5510: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: dsareq
# 5508|       dsareq = fopen(reqfn, "r");
# 5509|       dsaresp = stdout;
# 5510|->     while (fgets(buf, sizeof buf, dsareq) != NULL) {
# 5511|           /* a comment or blank line */
# 5512|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def195]
nss-3.117/nss/cmd/fipstest/fipstest.c:5686: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: dsareq
# 5684|       dsaresp = stdout;
# 5685|   
# 5686|->     while (fgets(buf, sizeof buf, dsareq) != NULL) {
# 5687|           /* a comment or blank line */
# 5688|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def196]
nss-3.117/nss/cmd/fipstest/fipstest.c:5870: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: dsareq
# 5868|       memset(&pubkey, 0, sizeof(pubkey));
# 5869|   
# 5870|->     while (fgets(buf, sizeof buf, dsareq) != NULL) {
# 5871|           /* a comment or blank line */
# 5872|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def197]
nss-3.117/nss/cmd/fipstest/fipstest.c:6120: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: rsareq
# 6118|       rsareq = fopen(reqfn, "r");
# 6119|       rsaresp = stdout;
# 6120|->     while (fgets(buf, sizeof buf, rsareq) != NULL) {
# 6121|           /* a comment or blank line */
# 6122|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def198]
nss-3.117/nss/cmd/fipstest/fipstest.c:6233: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: rsareq
# 6231|       pe.type = siBuffer;
# 6232|   
# 6233|->     while (fgets(buf, sizeof buf, rsareq) != NULL) {
# 6234|           /* a comment or blank line */
# 6235|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def199]
nss-3.117/nss/cmd/fipstest/fipstest.c:6420: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: rsareq
# 6418|       memset(&rsaBlapiPublicKey, 0, sizeof(RSAPublicKey));
# 6419|   
# 6420|->     while (fgets(buf, sizeof buf, rsareq) != NULL) {
# 6421|           /* a comment or blank line */
# 6422|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def200]
nss-3.117/nss/cmd/fipstest/fipstest.c:6715: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: tlsreq
# 6713|       tlsreq = fopen(reqfn, "r");
# 6714|       tlsresp = stdout;
# 6715|->     while (fgets(buf, sizeof buf, tlsreq) != NULL) {
# 6716|           /* a comment or blank line */
# 6717|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def201]
nss-3.117/nss/cmd/fipstest/fipstest.c:7047: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ikereq
# 7045|       ikereq = fopen(reqfn, "r");
# 7046|       ikeresp = stdout;
# 7047|->     while (fgets(buf, sizeof buf, ikereq) != NULL) {
# 7048|           /* a comment or blank line */
# 7049|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def202]
nss-3.117/nss/cmd/fipstest/fipstest.c:7437: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ikereq
# 7435|       ikereq = fopen(reqfn, "r");
# 7436|       ikeresp = stdout;
# 7437|->     while (fgets(buf, sizeof buf, ikereq) != NULL) {
# 7438|           /* a comment or blank line */
# 7439|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def203]
nss-3.117/nss/cmd/fipstest/fipstest.c:7852: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: ikereq
# 7850|       ikereq = fopen(reqfn, "r");
# 7851|       ikeresp = stdout;
# 7852|->     while (fgets(buf, sizeof buf, ikereq) != NULL) {
# 7853|           /* a comment or blank line */
# 7854|           if (buf[0] == '#' || buf[0] == '\n') {

Error: CPPCHECK_WARNING (CWE-476): [#def204]
nss-3.117/nss/cmd/fipstest/fipstest.c:7961: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: seed_data
# 7959|               memset(gir, 0, gir_len);
# 7960|               memset(gir_new, 0, gir_len);
# 7961|->             memset(seed_data, 0, seed_data_len);
# 7962|               fputs(buf, ikeresp);
# 7963|               continue;

Error: CPPCHECK_WARNING (CWE-476): [#def205]
nss-3.117/nss/cmd/fipstest/fipstest.c:8332: warning[nullPointerOutOfResources]: If resource allocation fails, then there is a possible null pointer dereference: kbkdf_req
# 8330|       kbkdf_resp = stdout;
# 8331|   
# 8332|->     while (fgets(buf, sizeof buf, kbkdf_req) != NULL) {
# 8333|           /* If we have a comment, check if it tells us the type of KDF to use.
# 8334|            * This differs per-file, so we have to parse it. */

Error: GCC_ANALYZER_WARNING (CWE-404): [#def206]
nss-3.117/nss/cmd/modutil/install.c:277:18: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
nss-3.117/nss/cmd/modutil/install.c:310:1: enter_function: entry to ‘Pk11Install_DoInstall’
nss-3.117/nss/cmd/modutil/install.c:340:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/modutil/install.c:341:9: branch_true: ...to here
nss-3.117/nss/cmd/modutil/install.c:341:9: call_function: calling ‘error’ from ‘Pk11Install_DoInstall’
#  275|       if (handler) {
#  276|           va_start(ap, errcode);
#  277|->         errstr = PR_vsmprintf(errorString[errcode], ap);
#  278|           handler(errstr);
#  279|           PR_smprintf_free(errstr);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def207]
nss-3.117/nss/cmd/modutil/installparse.y:90:13: warning[-Wanalyzer-out-of-bounds]: buffer under-read
nss-3.117/nss/cmd/modutil/ytab.c:218:8: branch_true: following ‘true’ branch (when ‘yyn != 0’)...
nss-3.117/nss/cmd/modutil/ytab.c:219:9: branch_true: ...to here
nss-3.117/nss/cmd/modutil/installparse.y:90:13: danger: out-of-bounds read from byte -8 till byte -1 but ‘Pk11Install_yyvs’ starts at byte 0
#   88|   %%
#   89|   /*----------------------- Program Section --------------------------------*/
#   90|-> 
#   91|   /*************************************************************************/
#   92|   void

Error: GCC_ANALYZER_WARNING (CWE-127): [#def208]
nss-3.117/nss/cmd/modutil/installparse.y:109:26: warning[-Wanalyzer-out-of-bounds]: buffer under-read
nss-3.117/nss/cmd/modutil/ytab.c:218:8: branch_true: following ‘true’ branch (when ‘yyn != 0’)...
nss-3.117/nss/cmd/modutil/ytab.c:219:9: branch_true: ...to here
nss-3.117/nss/cmd/modutil/installparse.y:109:26: danger: out-of-bounds read from byte -24 till byte -17 but ‘Pk11Install_yyvs’ starts at byte 0

Error: GCC_ANALYZER_WARNING (CWE-457): [#def209]
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:943:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘c’
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:862:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:866:9: branch_false: ...to here
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:866:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:885:27: branch_false: ...to here
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:890:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:898:13: branch_false: ...to here
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:943:9: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:943:9: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:943:9: branch_false: ...to here
nss-3.117/nss/cmd/modutil/lex.Pk11Install_yy.cpp:943:9: danger: use of uninitialized value ‘c’ here

Error: CPPCHECK_WARNING (CWE-758): [#def210]
nss-3.117/nss/cmd/nssdefaults/nssdefaults.c:130: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  128|       }
#  129|       for (i = 0; i < sizeof(flags) * PR_BITS_PER_BYTE; i++) {
#  130|->         PRUint32 flag = (1 << i);
#  131|           const char *value;
#  132|           if ((flags & flag) == 0) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def211]
nss-3.117/nss/cmd/p7env/p7env.c:199:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘inFile’
nss-3.117/nss/cmd/p7env/p7env.c:153:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/p7env/p7env.c:154:17: branch_true: ...to here
nss-3.117/nss/cmd/p7env/p7env.c:164:26: acquire_resource: opened here
nss-3.117/nss/cmd/p7env/p7env.c:165:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/p7env/p7env.c:199:5: danger: ‘inFile’ leaks here; was opened at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  197|           }
#  198|       }
#  199|->     PL_DestroyOptState(optstate);
#  200|   
#  201|       if (!recipients)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def212]
nss-3.117/nss/cmd/p7env/p7env.c:199:5: warning[-Wanalyzer-malloc-leak]: leak of ‘inFile’
nss-3.117/nss/cmd/p7env/p7env.c:153:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/p7env/p7env.c:154:17: branch_true: ...to here
nss-3.117/nss/cmd/p7env/p7env.c:164:26: acquire_memory: allocated here
nss-3.117/nss/cmd/p7env/p7env.c:165:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/p7env/p7env.c:199:5: danger: ‘inFile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  197|           }
#  198|       }
#  199|->     PL_DestroyOptState(optstate);
#  200|   
#  201|       if (!recipients)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def213]
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:127:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:73:1: enter_function: entry to ‘ectest_curve_pkcs11’
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:88:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:93:51: branch_false: ...to here
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:99:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:111:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:113:22: call_function: calling ‘getKeyLengthEntry’ from ‘ectest_curve_pkcs11’
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:113:22: return_function: returning to ‘ectest_curve_pkcs11’ from ‘getKeyLengthEntry’
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:122:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:127:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11ectest/pk11ectest.c:127:9: danger: dereference of NULL ‘getKeyLengthEntry(oid)’
#  125|       }
#  126|       rv = SECFailure;
#  127|->     if (keyLengthEntry->encoded) {
#  128|           if (point.len == keyLengthEntry->len) {
#  129|               printf(" >>> Expected encoded CKA_EC_POINT and got a decoded value.\n");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def214]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:55:12: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   53|       key_item.data = (unsigned char *)key; /* const cast */
#   54|       key_item.len = keysize;
#   55|->     slot = PK11_GetInternalSlot();
#   56|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#   57|                                  CKA_ENCRYPT, &key_item, NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def215]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:55:12: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   53|       key_item.data = (unsigned char *)key; /* const cast */
#   54|       key_item.len = keysize;
#   55|->     slot = PK11_GetInternalSlot();
#   56|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#   57|                                  CKA_ENCRYPT, &key_item, NULL);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def216]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:56:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   54|       key_item.len = keysize;
#   55|       slot = PK11_GetInternalSlot();
#   56|->     symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#   57|                                  CKA_ENCRYPT, &key_item, NULL);
#   58|       PK11_FreeSlot(slot);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def217]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:56:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   54|       key_item.len = keysize;
#   55|       slot = PK11_GetInternalSlot();
#   56|->     symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#   57|                                  CKA_ENCRYPT, &key_item, NULL);
#   58|       PK11_FreeSlot(slot);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def218]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:58:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   56|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#   57|                                  CKA_ENCRYPT, &key_item, NULL);
#   58|->     PK11_FreeSlot(slot);
#   59|       slot = NULL;
#   60|       if (!symKey) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def219]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:58:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   56|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#   57|                                  CKA_ENCRYPT, &key_item, NULL);
#   58|->     PK11_FreeSlot(slot);
#   59|       slot = NULL;
#   60|       if (!symKey) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def220]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:75:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   73|       param.len = sizeof(gcm_params);
#   74|   
#   75|->     if (PK11_Encrypt(symKey, CKM_AES_GCM, &param,
#   76|                        output, outputlen, maxoutputlen,
#   77|                        input, inputlen) != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def221]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:75:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   73|       param.len = sizeof(gcm_params);
#   74|   
#   75|->     if (PK11_Encrypt(symKey, CKM_AES_GCM, &param,
#   76|                        output, outputlen, maxoutputlen,
#   77|                        input, inputlen) != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def222]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:86:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   84|   loser:
#   85|       if (symKey != NULL) {
#   86|->         PK11_FreeSymKey(symKey);
#   87|       }
#   88|       return rv;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def223]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:86:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#   84|   loser:
#   85|       if (symKey != NULL) {
#   86|->         PK11_FreeSymKey(symKey);
#   87|       }
#   88|       return rv;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def224]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:113:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tag’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  111|       }
#  112|       memcpy(concatenated, input, inputlen);
#  113|->     memcpy(concatenated + inputlen, tag, tagsize);
#  114|   
#  115|       /* Import key into NSS. */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def225]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:119:12: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  117|       key_item.data = (unsigned char *)key; /* const cast */
#  118|       key_item.len = keysize;
#  119|->     slot = PK11_GetInternalSlot();
#  120|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#  121|                                  CKA_DECRYPT, &key_item, NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def226]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:119:12: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  117|       key_item.data = (unsigned char *)key; /* const cast */
#  118|       key_item.len = keysize;
#  119|->     slot = PK11_GetInternalSlot();
#  120|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#  121|                                  CKA_DECRYPT, &key_item, NULL);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def227]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:120:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  118|       key_item.len = keysize;
#  119|       slot = PK11_GetInternalSlot();
#  120|->     symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#  121|                                  CKA_DECRYPT, &key_item, NULL);
#  122|       PK11_FreeSlot(slot);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def228]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:120:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  118|       key_item.len = keysize;
#  119|       slot = PK11_GetInternalSlot();
#  120|->     symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#  121|                                  CKA_DECRYPT, &key_item, NULL);
#  122|       PK11_FreeSlot(slot);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def229]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:122:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  120|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#  121|                                  CKA_DECRYPT, &key_item, NULL);
#  122|->     PK11_FreeSlot(slot);
#  123|       slot = NULL;
#  124|       if (!symKey) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def230]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:122:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  120|       symKey = PK11_ImportSymKey(slot, CKM_AES_GCM, PK11_OriginUnwrap,
#  121|                                  CKA_DECRYPT, &key_item, NULL);
#  122|->     PK11_FreeSlot(slot);
#  123|       slot = NULL;
#  124|       if (!symKey) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def231]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:139:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  137|       param.len = sizeof(gcm_params);
#  138|   
#  139|->     if (PK11_Decrypt(symKey, CKM_AES_GCM, &param,
#  140|                        output, outputlen, maxoutputlen,
#  141|                        concatenated, inputlen + tagsize) != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def232]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:139:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  137|       param.len = sizeof(gcm_params);
#  138|   
#  139|->     if (PK11_Decrypt(symKey, CKM_AES_GCM, &param,
#  140|                        output, outputlen, maxoutputlen,
#  141|                        concatenated, inputlen + tagsize) != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def233]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:149:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  147|   loser:
#  148|       if (symKey != NULL) {
#  149|->         PK11_FreeSymKey(symKey);
#  150|       }
#  151|       return rv;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def234]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:149:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  147|   loser:
#  148|       if (symKey != NULL) {
#  149|->         PK11_FreeSymKey(symKey);
#  150|       }
#  151|       return rv;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def235]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:208:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  206|       while (fgets(buf, sizeof buf, aesresp) != NULL) {
#  207|           /* a comment or blank line */
#  208|->         if (buf[0] == '#' || buf[0] == '\n') {
#  209|               continue;
#  210|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def236]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:208:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  206|       while (fgets(buf, sizeof buf, aesresp) != NULL) {
#  207|           /* a comment or blank line */
#  208|->         if (buf[0] == '#' || buf[0] == '\n') {
#  209|               continue;
#  210|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def237]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:350:17: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  348|                   goto loser;
#  349|               }
#  350|->             if (PORT_GetError() != SEC_ERROR_BAD_DATA) {
#  351|                   fprintf(stderr, "aes_decrypt_buf failed with incorrect "
#  352|                                   "error code\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def238]
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:350:17: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(respfn, "r")’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:440:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:442:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:446:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:453:8: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:455:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11gcmtest/pk11gcmtest.c:457:13: call_function: calling ‘aes_gcm_kat’ from ‘main’
#  348|                   goto loser;
#  349|               }
#  350|->             if (PORT_GetError() != SEC_ERROR_BAD_DATA) {
#  351|                   fprintf(stderr, "aes_decrypt_buf failed with incorrect "
#  352|                                   "error code\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def239]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:53:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pTemplate’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3458:1: enter_function: entry to ‘PKM_FindAllObjects’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3476:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3484:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3488:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3494:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3510:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3519:8: branch_false: following ‘false’ branch (when ‘pTemplate’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3526:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3541:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3542:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3542:13: call_function: calling ‘PKM_CK_RVtoStr’ from ‘PKM_FindAllObjects’
#   51|       const char *err;
#   52|   
#   53|->     err = getName(errNum, ConstResult);
#   54|   
#   55|       if (err)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def240]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:53:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:482:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:485:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:485:9: call_function: calling ‘PKM_CK_RVtoStr’ from ‘main’
#   51|       const char *err;
#   52|   
#   53|->     err = getName(errNum, ConstResult);
#   54|   
#   55|       if (err)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def241]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:32: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:32: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/8)
#  339|       PLOptStatus os;
#  340|       PLOptState *opt = PL_CreateOptState(argc, argv, "nvhf:Fd:p:");
#  341|->     while (PL_OPT_EOL != (os = PL_GetNextOpt(opt))) {
#  342|           if (PL_OPT_BAD == os)
#  343|               continue;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def242]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/8)
#  375|           }
#  376|       }
#  377|->     PL_DestroyOptState(opt);
#  378|   
#  379|       if (!pwd) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def243]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: call_function: calling ‘PKM_FilePasswd’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: return_function: returning to ‘main’ from ‘PKM_FilePasswd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:354:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: danger: ‘pwd’ leaks here; was allocated at [(16)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/15)
#  375|           }
#  376|       }
#  377|->     PL_DestroyOptState(opt);
#  378|   
#  379|       if (!pwd) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def244]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:382:14: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘pwd’ where non-null expected
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: this call could return NULL
nss-3.117/nss/cmd/pk11mode/pk11mode.c:382:14: danger: argument 1 (‘pwd’) from [(3)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strlen’ must be non-null
#  380|           pwd = (CK_UTF8CHAR *)strdup("1Mozilla");
#  381|       }
#  382|->     pwdLen = strlen((const char *)pwd);
#  383|       if (!configDir) {
#  384|           configDir = strdup(".");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def245]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: warning[-Wanalyzer-malloc-leak]: leak of ‘configDir’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: danger: ‘configDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/4)
#  419|           char *libname = NULL;
#  420|           /* Get the platform-dependent library name of the NSS cryptographic module */
#  421|->         libname = PR_GetLibraryName(NULL, "softokn3");
#  422|           assert(libname != NULL);
#  423|           lib = PR_LoadLibrary(libname);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def246]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/8)
#  419|           char *libname = NULL;
#  420|           /* Get the platform-dependent library name of the NSS cryptographic module */
#  421|->         libname = PR_GetLibraryName(NULL, "softokn3");
#  422|           assert(libname != NULL);
#  423|           lib = PR_LoadLibrary(libname);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def247]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: danger: ‘pwd’ leaks here; was allocated at [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
#  419|           char *libname = NULL;
#  420|           /* Get the platform-dependent library name of the NSS cryptographic module */
#  421|->         libname = PR_GetLibraryName(NULL, "softokn3");
#  422|           assert(libname != NULL);
#  423|           lib = PR_LoadLibrary(libname);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def248]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:423:15: warning[-Wanalyzer-malloc-leak]: leak of ‘configDir’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:423:15: danger: ‘configDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/4)
#  421|           libname = PR_GetLibraryName(NULL, "softokn3");
#  422|           assert(libname != NULL);
#  423|->         lib = PR_LoadLibrary(libname);
#  424|           assert(lib != NULL);
#  425|           PR_FreeLibraryName(libname);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def249]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:423:15: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:423:15: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/8)
#  421|           libname = PR_GetLibraryName(NULL, "softokn3");
#  422|           assert(libname != NULL);
#  423|->         lib = PR_LoadLibrary(libname);
#  424|           assert(lib != NULL);
#  425|           PR_FreeLibraryName(libname);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def250]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:423:15: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:423:15: danger: ‘pwd’ leaks here; was allocated at [(3)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/2)
#  421|           libname = PR_GetLibraryName(NULL, "softokn3");
#  422|           assert(libname != NULL);
#  423|->         lib = PR_LoadLibrary(libname);
#  424|           assert(lib != NULL);
#  425|           PR_FreeLibraryName(libname);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def251]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:425:9: warning[-Wanalyzer-malloc-leak]: leak of ‘configDir’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:425:9: danger: ‘configDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/20/codeFlows/0/threadFlows/0/locations/4)
#  423|           lib = PR_LoadLibrary(libname);
#  424|           assert(lib != NULL);
#  425|->         PR_FreeLibraryName(libname);
#  426|       }
#  427|       if (MODE == FIPSMODE) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def252]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:425:9: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:425:9: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/8)
#  423|           lib = PR_LoadLibrary(libname);
#  424|           assert(lib != NULL);
#  425|->         PR_FreeLibraryName(libname);
#  426|       }
#  427|       if (MODE == FIPSMODE) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def253]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:425:9: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:425:9: danger: ‘pwd’ leaks here; was allocated at [(3)](sarif:/runs/0/results/18/codeFlows/0/threadFlows/0/locations/2)
#  423|           lib = PR_LoadLibrary(libname);
#  424|           assert(lib != NULL);
#  425|->         PR_FreeLibraryName(libname);
#  426|       }
#  427|       if (MODE == FIPSMODE) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def254]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: warning[-Wanalyzer-malloc-leak]: leak of ‘configDir’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:427:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: danger: ‘configDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/24/codeFlows/0/threadFlows/0/locations/4)
#  426|       }
#  427|       if (MODE == FIPSMODE) {
#  428|->         pC_GetFunctionList = (CK_C_GetFunctionList)PR_FindFunctionSymbol(lib,
#  429|                                                                            "FC_GetFunctionList");
#  430|           assert(pC_GetFunctionList != NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def255]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:427:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/22/codeFlows/0/threadFlows/0/locations/8)
#  426|       }
#  427|       if (MODE == FIPSMODE) {
#  428|->         pC_GetFunctionList = (CK_C_GetFunctionList)PR_FindFunctionSymbol(lib,
#  429|                                                                            "FC_GetFunctionList");
#  430|           assert(pC_GetFunctionList != NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def256]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:427:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:428:52: danger: ‘pwd’ leaks here; was allocated at [(3)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/2)
#  426|       }
#  427|       if (MODE == FIPSMODE) {
#  428|->         pC_GetFunctionList = (CK_C_GetFunctionList)PR_FindFunctionSymbol(lib,
#  429|                                                                            "FC_GetFunctionList");
#  430|           assert(pC_GetFunctionList != NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def257]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: warning[-Wanalyzer-malloc-leak]: leak of ‘configDir’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:427:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: danger: ‘configDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/29/codeFlows/0/threadFlows/0/locations/4)
#  431|           slotID = 0;
#  432|       } else {
#  433|->         pC_GetFunctionList = (CK_C_GetFunctionList)PR_FindFunctionSymbol(lib,
#  434|                                                                            "C_GetFunctionList");
#  435|           assert(pC_GetFunctionList != NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def258]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:427:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/28/codeFlows/0/threadFlows/0/locations/8)
#  431|           slotID = 0;
#  432|       } else {
#  433|->         pC_GetFunctionList = (CK_C_GetFunctionList)PR_FindFunctionSymbol(lib,
#  434|                                                                            "C_GetFunctionList");
#  435|           assert(pC_GetFunctionList != NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def259]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:427:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:433:52: danger: ‘pwd’ leaks here; was allocated at [(3)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/2)
#  431|           slotID = 0;
#  432|       } else {
#  433|->         pC_GetFunctionList = (CK_C_GetFunctionList)PR_FindFunctionSymbol(lib,
#  434|                                                                            "C_GetFunctionList");
#  435|           assert(pC_GetFunctionList != NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def260]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:448:11: warning[-Wanalyzer-malloc-leak]: leak of ‘configDir’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:448:11: danger: ‘configDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/36/codeFlows/0/threadFlows/0/locations/4)
#  446|       }
#  447|   
#  448|->     crv = (*pC_GetFunctionList)(&pFunctionList);
#  449|       assert(crv == CKR_OK);
#  450|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def261]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:448:11: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:448:11: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/32/codeFlows/0/threadFlows/0/locations/8)
#  446|       }
#  447|   
#  448|->     crv = (*pC_GetFunctionList)(&pFunctionList);
#  449|       assert(crv == CKR_OK);
#  450|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def262]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:448:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:448:11: danger: ‘pwd’ leaks here; was allocated at [(3)](sarif:/runs/0/results/33/codeFlows/0/threadFlows/0/locations/2)
#  446|       }
#  447|   
#  448|->     crv = (*pC_GetFunctionList)(&pFunctionList);
#  449|       assert(crv == CKR_OK);
#  450|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def263]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:464:18: warning[-Wanalyzer-malloc-leak]: leak of ‘configDir’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:464:18: danger: ‘configDir’ leaks here; was allocated at [(15)](sarif:/runs/0/results/41/codeFlows/0/threadFlows/0/locations/14)
#  462|       initArgs.UnlockMutex = NULL;
#  463|       initArgs.flags = CKF_OS_LOCKING_OK;
#  464|->     moduleSpec = PR_smprintf("configdir='%s' certPrefix='%s' "
#  465|                                "keyPrefix='%s' secmod='secmod.db' flags= ",
#  466|                                configDir, dbPrefix, dbPrefix);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def264]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:464:18: warning[-Wanalyzer-malloc-leak]: leak of ‘dbPrefix’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:464:18: danger: ‘dbPrefix’ leaks here; was allocated at [(9)](sarif:/runs/0/results/37/codeFlows/0/threadFlows/0/locations/8)
#  462|       initArgs.UnlockMutex = NULL;
#  463|       initArgs.flags = CKF_OS_LOCKING_OK;
#  464|->     moduleSpec = PR_smprintf("configdir='%s' certPrefix='%s' "
#  465|                                "keyPrefix='%s' secmod='secmod.db' flags= ",
#  466|                                configDir, dbPrefix, dbPrefix);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def265]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:464:18: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:464:18: danger: ‘pwd’ leaks here; was allocated at [(13)](sarif:/runs/0/results/38/codeFlows/0/threadFlows/0/locations/12)
#  462|       initArgs.UnlockMutex = NULL;
#  463|       initArgs.flags = CKF_OS_LOCKING_OK;
#  464|->     moduleSpec = PR_smprintf("configdir='%s' certPrefix='%s' "
#  465|                                "keyPrefix='%s' secmod='secmod.db' flags= ",
#  466|                                configDir, dbPrefix, dbPrefix);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def266]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:467:23: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:467:23: danger: ‘pwd’ leaks here; was allocated at [(13)](sarif:/runs/0/results/42/codeFlows/0/threadFlows/0/locations/12)
#  465|                                "keyPrefix='%s' secmod='secmod.db' flags= ",
#  466|                                configDir, dbPrefix, dbPrefix);
#  467|->     moduleSpecRerun = PR_smprintf("configdir='%s' certPrefix='%s' "
#  468|                                     "keyPrefix='%s' secmod='secmod.db' flags=forcePOST ",
#  469|                                     configDir, dbPrefix, dbPrefix);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def267]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:481:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:364:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:366:28: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_true: following ‘true’ branch (when ‘pwd’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:380:30: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_false: following ‘false’ branch (when ‘dbPrefix’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:481:11: danger: ‘pwd’ leaks here; was allocated at [(13)](sarif:/runs/0/results/44/codeFlows/0/threadFlows/0/locations/12)
#  479|       /* software integrity test, and power-up self-tests before       */
#  480|       /* FC_Initialize returns                                         */
#  481|->     crv = pFunctionList->C_Initialize(&initArgs);
#  482|       if (crv == CKR_OK) {
#  483|           PKM_LogIt("C_Initialize succeeded\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def268]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1598:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: call_function: calling ‘PKM_FilePasswd’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: return_function: returning to ‘main’ from ‘PKM_FilePasswd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:354:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_false: following ‘false’ branch (when ‘pwd’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:382:14: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:482:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: call_function: calling ‘PKM_LogIt’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: return_function: returning to ‘main’ from ‘PKM_LogIt’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:490:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:498:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:499:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:509:15: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:510:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: call_function: calling ‘PKM_ShowInfo’ from ‘main’
# 1596|   
# 1597|       /* Get slot list */
# 1598|->     crv = pFunctionList->C_GetSlotList(CK_FALSE /* all slots */,
# 1599|                                          NULL, &slotCount);
# 1600|       if (crv != CKR_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def269]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1611:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pSlotList’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1600:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1605:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1606:31: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1607:8: branch_false: following ‘false’ branch (when ‘pSlotList’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1611:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1611:11: danger: ‘pSlotList’ leaks here; was allocated at [(3)](sarif:/runs/0/results/47/codeFlows/0/threadFlows/0/locations/2)
# 1609|           return NULL;
# 1610|       }
# 1611|->     crv = pFunctionList->C_GetSlotList(CK_FALSE /* all slots */,
# 1612|                                          pSlotList, &slotCount);
# 1613|       if (crv != CKR_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def270]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1611:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: call_function: calling ‘PKM_FilePasswd’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: return_function: returning to ‘main’ from ‘PKM_FilePasswd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:354:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_false: following ‘false’ branch (when ‘pwd’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:382:14: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:482:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: call_function: calling ‘PKM_LogIt’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: return_function: returning to ‘main’ from ‘PKM_LogIt’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:490:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:498:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:499:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:509:15: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:510:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: call_function: calling ‘PKM_ShowInfo’ from ‘main’
# 1609|           return NULL;
# 1610|       }
# 1611|->     crv = pFunctionList->C_GetSlotList(CK_FALSE /* all slots */,
# 1612|                                          pSlotList, &slotCount);
# 1613|       if (crv != CKR_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def271]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1754:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: call_function: calling ‘PKM_FilePasswd’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: return_function: returning to ‘main’ from ‘PKM_FilePasswd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:354:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_false: following ‘false’ branch (when ‘pwd’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:382:14: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:482:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: call_function: calling ‘PKM_LogIt’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: return_function: returning to ‘main’ from ‘PKM_LogIt’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:490:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:498:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:499:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:509:15: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:510:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: call_function: calling ‘PKM_ShowInfo’ from ‘main’
# 1752|       NUMTESTS++; /* increment NUMTESTS */
# 1753|   
# 1754|->     crv = pFunctionList->C_GetInfo(&info);
# 1755|       if (crv == CKR_OK) {
# 1756|           PKM_LogIt("C_GetInfo succeeded\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def272]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:1779:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pwd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: call_function: calling ‘PKM_FilePasswd’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:353:38: return_function: returning to ‘main’ from ‘PKM_FilePasswd’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:354:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:377:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:379:8: branch_false: following ‘false’ branch (when ‘pwd’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:382:14: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:383:8: branch_true: following ‘true’ branch (when ‘configDir’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:384:21: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:386:8: branch_true: following ‘true’ branch (when ‘dbPrefix’ is NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:387:20: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:390:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:393:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:394:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:421:19: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:451:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:453:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:459:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:482:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: call_function: calling ‘PKM_LogIt’ from ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:483:9: return_function: returning to ‘main’ from ‘PKM_LogIt’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:490:8: branch_true: following ‘true’ branch (when ‘doForkTests != 0’)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:498:15: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:499:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:509:15: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:510:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:514:11: call_function: calling ‘PKM_ShowInfo’ from ‘main’
# 1777|           return crv;
# 1778|       }
# 1779|->     crv = pFunctionList->C_GetSlotInfo(pSlotList[slotID], &slotInfo);
# 1780|       if (crv == CKR_OK) {
# 1781|           PKM_LogIt("C_GetSlotInfo succeeded\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def273]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:2082:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pMechanismList’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:2069:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:2074:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:2077:9: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:2078:8: branch_false: following ‘false’ branch (when ‘pMechanismList’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:2082:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:2082:11: danger: ‘pMechanismList’ leaks here; was allocated at [(3)](sarif:/runs/0/results/51/codeFlows/0/threadFlows/0/locations/2)
# 2080|           return crv;
# 2081|       }
# 2082|->     crv = pFunctionList->C_GetMechanismList(pSlotList[slotID],
# 2083|                                               pMechanismList, &mechanismCount);
# 2084|       if (crv != CKR_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def274]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3481:16: warning[-Wanalyzer-malloc-leak]: leak of ‘pTemplate’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3476:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3484:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3488:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3494:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3510:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3519:8: branch_false: following ‘false’ branch (when ‘pTemplate’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3526:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3481:16: danger: ‘pTemplate’ leaks here; was allocated at [(7)](sarif:/runs/0/results/52/codeFlows/0/threadFlows/0/locations/6)
# 3479|                     pSlotList[slotID], crv,
# 3480|                     PKM_CK_RVtoStr(crv));
# 3481|->         return crv;
# 3482|       }
# 3483|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def275]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3540:15: warning[-Wanalyzer-malloc-leak]: leak of ‘pTemplate’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3476:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3484:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3488:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3494:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3510:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3519:8: branch_false: following ‘false’ branch (when ‘pTemplate’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3526:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3540:15: danger: ‘pTemplate’ leaks here; was allocated at [(7)](sarif:/runs/0/results/53/codeFlows/0/threadFlows/0/locations/6)
# 3538|           const char *attName = NULL;
# 3539|   
# 3540|->         crv = pFunctionList->C_FindObjects(h, &o, 1, &nObjects);
# 3541|           if (CKR_OK != crv) {
# 3542|               PKM_Error("C_FindObjects(%lu, , 1, ) returned 0x%08X, %-26s\n",

Error: GCC_ANALYZER_WARNING (CWE-401): [#def276]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3567:15: warning[-Wanalyzer-malloc-leak]: leak of ‘pTemplate’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3476:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3484:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3488:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3494:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3510:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3519:8: branch_false: following ‘false’ branch (when ‘pTemplate’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3526:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3541:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3547:13: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3547:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3552:9: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3557:21: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3567:15: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3567:15: danger: ‘pTemplate’ leaks here; was allocated at [(7)](sarif:/runs/0/results/54/codeFlows/0/threadFlows/0/locations/6)
# 3565|           }
# 3566|   
# 3567|->         crv = pFunctionList->C_GetAttributeValue(h, o, pTemplate,
# 3568|                                                    number_of_all_known_attribute_types);
# 3569|           switch (crv) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def277]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3696:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pTemplate’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3476:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3484:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3488:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3494:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3510:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3517:35: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3519:8: branch_false: following ‘false’ branch (when ‘pTemplate’ is non-NULL)...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3526:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3541:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3547:13: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3547:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3548:13: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:3696:11: danger: ‘pTemplate’ leaks here; was allocated at [(7)](sarif:/runs/0/results/55/codeFlows/0/threadFlows/0/locations/6)
# 3694|       MODE = curMode; /* reset the logging MODE */
# 3695|   
# 3696|->     crv = pFunctionList->C_FindObjectsFinal(h);
# 3697|       if (CKR_OK != crv) {
# 3698|           PKM_Error("C_FindObjectsFinal(%lu) returned 0x%08X, %-26s\n", h, crv,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def278]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4173:11: warning[-Wanalyzer-malloc-leak]: leak of ‘pstate’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4097:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4103:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4104:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4105:9: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4119:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4120:9: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4128:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4134:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4137:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4143:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4144:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4150:5: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4152:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4157:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4159:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4165:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4166:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4172:27: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4172:27: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4173:11: danger: ‘pstate’ leaks here; was allocated at [(19)](sarif:/runs/0/results/56/codeFlows/0/threadFlows/0/locations/18)
# 4171|   
# 4172|       pstate = (CK_BYTE_PTR)malloc(statelen * sizeof(CK_BYTE_PTR));
# 4173|->     crv = pFunctionList->C_GetOperationState(hSession, pstate, &statelen);
# 4174|       if (crv != CKR_OK) {
# 4175|           PKM_Error("C_GetOperationState failed returned 0x%08X, %-26s\n", crv,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def279]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4429:11: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4405:8: branch_false: following ‘false’ branch (when ‘tmp_attrs’ is non-NULL)...
 branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4410:17: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4411:43: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4415:31: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4417:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4410:43: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4410:17: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4429:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4429:11: danger: ‘<unknown>’ leaks here; was allocated at [(5)](sarif:/runs/0/results/58/codeFlows/0/threadFlows/0/locations/4)
# 4427|   
# 4428|       /* then get the attributes from the object */
# 4429|->     crv = pFunctionList->C_GetAttributeValue(hSession, obj, tmp_attrs,
# 4430|                                                expected_attrs_count);
# 4431|       if (crv != CKR_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def280]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4429:11: warning[-Wanalyzer-malloc-leak]: leak of ‘tmp_attrs’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4403:17: acquire_memory: allocated here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4405:8: branch_false: following ‘false’ branch (when ‘tmp_attrs’ is non-NULL)...
 branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4410:17: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4429:11: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:4429:11: danger: ‘tmp_attrs’ leaks here; was allocated at [(1)](sarif:/runs/0/results/57/codeFlows/0/threadFlows/0/locations/0)
# 4427|   
# 4428|       /* then get the attributes from the object */
# 4429|->     crv = pFunctionList->C_GetAttributeValue(hSession, obj, tmp_attrs,
# 4430|                                                expected_attrs_count);
# 4431|       if (crv != CKR_OK) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def281]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:5193:39: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘src’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:358:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:360:29: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:360:29: acquire_memory: this call could return NULL
nss-3.117/nss/cmd/pk11mode/pk11mode.c:361:17: call_function: calling ‘PKM_CheckPath’ from ‘main’
# 5191|        * forward slashes.
# 5192|        */
# 5193|->     for (src = string, dest = string; *src; src++, dest++) {
# 5194|           if (*src == '\\') {
# 5195|               *dest = '/';

Error: GCC_ANALYZER_WARNING (CWE-127): [#def282]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:5200:9: warning[-Wanalyzer-out-of-bounds]: heap-based buffer under-read
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:358:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:360:29: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:361:17: call_function: calling ‘PKM_CheckPath’ from ‘main’
# 5198|       dest--;
# 5199|       /* if the last char is a / set it to 0 */
# 5200|->     if (*dest == '/')
# 5201|           *dest = 0;
# 5202|   }

Error: GCC_ANALYZER_WARNING (CWE-124): [#def283]
nss-3.117/nss/cmd/pk11mode/pk11mode.c:5201:9: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
nss-3.117/nss/cmd/pk11mode/pk11mode.c:319:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pk11mode/pk11mode.c:341:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_true: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:342:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:344:17: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:358:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pk11mode/pk11mode.c:360:29: branch_false: ...to here
nss-3.117/nss/cmd/pk11mode/pk11mode.c:361:17: call_function: calling ‘PKM_CheckPath’ from ‘main’
# 5199|       /* if the last char is a / set it to 0 */
# 5200|       if (*dest == '/')
# 5201|->         *dest = 0;
# 5202|   }
# 5203|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def284]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:174:15: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:193:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:293:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:302:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:303:27: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:307:32: call_function: calling ‘isBase64’ from ‘main’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:307:32: return_function: returning to ‘main’ from ‘isBase64’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:308:13: call_function: calling ‘doDecode’ from ‘main’
#  172|       SECItem *decoded;
#  173|   
#  174|->     decoded = NSSBase64_DecodeBuffer(NULL, NULL, dataString + 1, strLen);
#  175|       if ((decoded == NULL) || (decoded->len == 0)) {
#  176|           if (logFile) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def285]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:174:15: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:193:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:293:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:302:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:303:27: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:307:32: call_function: calling ‘isBase64’ from ‘main’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:307:32: return_function: returning to ‘main’ from ‘isBase64’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:308:13: call_function: calling ‘doDecode’ from ‘main’
#  172|       SECItem *decoded;
#  173|   
#  174|->     decoded = NSSBase64_DecodeBuffer(NULL, NULL, dataString + 1, strLen);
#  175|       if ((decoded == NULL) || (decoded->len == 0)) {
#  176|           if (logFile) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def286]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(input_file, "r")’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: danger: ‘fopen(input_file, "r")’ leaks here; was opened at [(9)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/8)
#  264|               return 1;
#  265|           }
#  266|->         PR_Free(input_file);
#  267|       }
#  268|       if (output_file) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def287]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(input_file, "r")’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: danger: ‘fopen(input_file, "r")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/8)
#  264|               return 1;
#  265|           }
#  266|->         PR_Free(input_file);
#  267|       }
#  268|       if (output_file) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def288]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(output_file, "w+")’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: danger: ‘fopen(output_file, "w+")’ leaks here; was opened at [(11)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/10)
#  272|               return 1;
#  273|           }
#  274|->         PR_Free(output_file);
#  275|       }
#  276|       if (log_file) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def289]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(output_file, "w+")’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: danger: ‘fopen(output_file, "w+")’ leaks here; was allocated at [(11)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/10)
#  272|               return 1;
#  273|           }
#  274|->         PR_Free(output_file);
#  275|       }
#  276|       if (log_file) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def290]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘inFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: following ‘false’ branch (when ‘output_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: danger: ‘inFile’ leaks here; was opened at [(9)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/8)
#  289|        * Initialize the Security libraries.
#  290|        */
#  291|->     PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|       rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def291]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: danger: ‘outFile’ leaks here; was opened at [(11)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/10)
#  289|        * Initialize the Security libraries.
#  290|        */
#  291|->     PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|       rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def292]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: warning[-Wanalyzer-malloc-leak]: leak of ‘inFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: following ‘false’ branch (when ‘output_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: danger: ‘inFile’ leaks here; was allocated at [(9)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/8)
#  289|        * Initialize the Security libraries.
#  290|        */
#  291|->     PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|       rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def293]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: danger: ‘outFile’ leaks here; was allocated at [(11)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/10)
#  289|        * Initialize the Security libraries.
#  290|        */
#  291|->     PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|       rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def294]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘inFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: following ‘false’ branch (when ‘output_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: danger: ‘inFile’ leaks here; was opened at [(9)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/8)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def295]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: danger: ‘outFile’ leaks here; was opened at [(11)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/10)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def296]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: warning[-Wanalyzer-malloc-leak]: leak of ‘inFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: following ‘false’ branch (when ‘output_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: danger: ‘inFile’ leaks here; was allocated at [(9)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/8)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def297]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:10: danger: ‘outFile’ leaks here; was allocated at [(11)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/10)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def298]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: warning[-Wanalyzer-file-leak]: leak of FILE ‘inFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: following ‘false’ branch (when ‘output_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: danger: ‘inFile’ leaks here; was opened at [(9)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/8)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def299]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_resource: opened here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: danger: ‘outFile’ leaks here; was opened at [(11)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/10)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def300]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: warning[-Wanalyzer-malloc-leak]: leak of ‘inFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_true: following ‘true’ branch (when ‘input_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:261:18: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:262:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:266:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: following ‘false’ branch (when ‘output_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: danger: ‘inFile’ leaks here; was allocated at [(9)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/8)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def301]
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:212:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:217:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:218:17: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:255:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:260:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:268:8: branch_true: following ‘true’ branch (when ‘output_file’ is non-NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: branch_true: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:269:19: acquire_memory: allocated here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:270:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:274:9: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:276:8: branch_false: following ‘false’ branch (when ‘log_file’ is NULL)...
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:291:5: branch_false: ...to here
nss-3.117/nss/cmd/pwdecrypt/pwdecrypt.c:292:19: danger: ‘outFile’ leaks here; was allocated at [(11)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/10)
#  290|        */
#  291|       PK11_SetPasswordFunc(SECU_GetModulePassword);
#  292|->     rv = NSS_Init(SECU_ConfigDirectory(NULL));
#  293|       if (rv != SECSuccess) {
#  294|           SECU_PrintError(program_name, "NSS_Init failed");

Error: CPPCHECK_WARNING (CWE-369): [#def302]
nss-3.117/nss/cmd/rsaperf/rsaperf.c:102: error[zerodiv]: Division by zero.
#  100|   
#  101|       LL_I2L(tmp, divisor);
#  102|->     LL_DIV(ctx->interval, ctx->interval, tmp);
#  103|   
#  104|       timingUpdate(ctx);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def303]
nss-3.117/nss/cmd/sdrtest/sdrtest.c:345:14: warning[-Wanalyzer-null-argument]: use of NULL ‘output_file’ where non-null expected
nss-3.117/nss/cmd/sdrtest/sdrtest.c:176:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:246:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/sdrtest/sdrtest.c:250:9: branch_false: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:250:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/sdrtest/sdrtest.c:250:9: branch_true: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:250:9: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/sdrtest/sdrtest.c:259:5: branch_false: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:261:8: branch_false: following ‘false’ branch (when ‘output_file’ is NULL)...
nss-3.117/nss/cmd/sdrtest/sdrtest.c:264:23: branch_false: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:266:8: branch_false: following ‘false’ branch (when ‘rv == 0’)...
nss-3.117/nss/cmd/sdrtest/sdrtest.c:273:5: branch_false: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:279:8: branch_false: following ‘false’ branch (when ‘input_file’ is NULL)...
nss-3.117/nss/cmd/sdrtest/sdrtest.c:305:17: branch_false: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:331:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/sdrtest/sdrtest.c:338:12: branch_false: ...to here
nss-3.117/nss/cmd/sdrtest/sdrtest.c:345:14: danger: argument 1 (‘output_file’) NULL where non-null expected
#  343|               printf("Encrypted result is %d bytes long\n", result.len);
#  344|   
#  345|->         if (!strcmp(output_file, "-")) {
#  346|               ascii = PR_TRUE;
#  347|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def304]
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1384:59: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘hash’
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1364:8: branch_true: following ‘true’ branch (when ‘hash’ is NULL)...
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1365:16: branch_true: ...to here
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1367:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1368:20: branch_true: ...to here
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1372:8: branch_true: following ‘true’ branch (when ‘key’ is NULL)...
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1374:22: branch_true: ...to here
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1384:59: danger: dereference of NULL ‘hash’
# 1382|           crv = generateAndExtractHMACKey(pFunctionList, hRwSession,
# 1383|                                           &hmacKeyGenMech,
# 1384|->                                         hash->hashLength, hash->keyType,
# 1385|                                           &hmacKeyValue, &hHMACKey);
# 1386|           if (crv != CKR_OK) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def305]
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1399:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘hash’
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1364:8: branch_true: following ‘true’ branch (when ‘hash’ is NULL)...
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1365:16: branch_true: ...to here
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1367:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1368:20: branch_true: ...to here
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1372:8: branch_false: following ‘false’ branch (when ‘key’ is non-NULL)...
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1392:17: branch_false: ...to here
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1393:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1399:13: branch_false: ...to here
nss-3.117/nss/cmd/shlibsign/shlibsign.c:1399:28: danger: dereference of NULL ‘hash’
# 1397|           }
# 1398|   
# 1399|->         if (keyItem.len != hash->hashLength) {
# 1400|               print_error("Supplied HMAC key does not match the HMAC hash length.");
# 1401|               SECITEM_FreeItem(&keyItem, PR_FALSE);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def306]
nss-3.117/nss/cmd/signtool/certgen.c:668:17: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:668:17: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  666|       }
#  667|   
#  668|->     certChain = SEC_PKCS7CreateCertsOnly(cert, PR_TRUE, db);
#  669|       encodedCertChain =
#  670|           SEC_PKCS7EncodeItem(NULL, NULL, certChain, NULL, NULL, NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def307]
nss-3.117/nss/cmd/signtool/certgen.c:668:17: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:668:17: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  666|       }
#  667|   
#  668|->     certChain = SEC_PKCS7CreateCertsOnly(cert, PR_TRUE, db);
#  669|       encodedCertChain =
#  670|           SEC_PKCS7EncodeItem(NULL, NULL, certChain, NULL, NULL, NULL);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def308]
nss-3.117/nss/cmd/signtool/certgen.c:670:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:670:9: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  668|       certChain = SEC_PKCS7CreateCertsOnly(cert, PR_TRUE, db);
#  669|       encodedCertChain =
#  670|->         SEC_PKCS7EncodeItem(NULL, NULL, certChain, NULL, NULL, NULL);
#  671|       SEC_PKCS7DestroyContentInfo(certChain);
#  672|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def309]
nss-3.117/nss/cmd/signtool/certgen.c:670:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:670:9: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  668|       certChain = SEC_PKCS7CreateCertsOnly(cert, PR_TRUE, db);
#  669|       encodedCertChain =
#  670|->         SEC_PKCS7EncodeItem(NULL, NULL, certChain, NULL, NULL, NULL);
#  671|       SEC_PKCS7DestroyContentInfo(certChain);
#  672|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def310]
nss-3.117/nss/cmd/signtool/certgen.c:671:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:671:5: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  669|       encodedCertChain =
#  670|           SEC_PKCS7EncodeItem(NULL, NULL, certChain, NULL, NULL, NULL);
#  671|->     SEC_PKCS7DestroyContentInfo(certChain);
#  672|   
#  673|       if (encodedCertChain) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def311]
nss-3.117/nss/cmd/signtool/certgen.c:671:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:671:5: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/0)
#  669|       encodedCertChain =
#  670|           SEC_PKCS7EncodeItem(NULL, NULL, certChain, NULL, NULL, NULL);
#  671|->     SEC_PKCS7DestroyContentInfo(certChain);
#  672|   
#  673|       if (encodedCertChain) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def312]
nss-3.117/nss/cmd/signtool/certgen.c:673:8: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/0)
#  671|       SEC_PKCS7DestroyContentInfo(certChain);
#  672|   
#  673|->     if (encodedCertChain) {
#  674|           fprintf(out, "Content-type: application/x-x509-ca-cert\n\n");
#  675|           fwrite(encodedCertChain->data, 1, encodedCertChain->len,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def313]
nss-3.117/nss/cmd/signtool/certgen.c:673:8: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/0)
#  671|       SEC_PKCS7DestroyContentInfo(certChain);
#  672|   
#  673|->     if (encodedCertChain) {
#  674|           fprintf(out, "Content-type: application/x-x509-ca-cert\n\n");
#  675|           fwrite(encodedCertChain->data, 1, encodedCertChain->len,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def314]
nss-3.117/nss/cmd/signtool/certgen.c:677:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:677:9: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/0)
#  675|           fwrite(encodedCertChain->data, 1, encodedCertChain->len,
#  676|                  out);
#  677|->         SECITEM_FreeItem(encodedCertChain, PR_TRUE);
#  678|       } else {
#  679|           PR_fprintf(errorFD, "%s: Can't DER encode this certificate\n",

Error: GCC_ANALYZER_WARNING (CWE-401): [#def315]
nss-3.117/nss/cmd/signtool/certgen.c:677:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:677:9: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/0)
#  675|           fwrite(encodedCertChain->data, 1, encodedCertChain->len,
#  676|                  out);
#  677|->         SECITEM_FreeItem(encodedCertChain, PR_TRUE);
#  678|       } else {
#  679|           PR_fprintf(errorFD, "%s: Can't DER encode this certificate\n",

Error: GCC_ANALYZER_WARNING (CWE-775): [#def316]
nss-3.117/nss/cmd/signtool/certgen.c:697:16: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:690:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:690:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:697:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:697:16: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(5)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/4)
#  695|       }
#  696|   
#  697|->     certData = BTOA_DataToAscii(cert->derCert.data, cert->derCert.len);
#  698|       fprintf(out, "%s\n%s\n%s\n", NS_CERT_HEADER, certData, NS_CERT_TRAILER);
#  699|       PORT_Free(certData);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def317]
nss-3.117/nss/cmd/signtool/certgen.c:697:16: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:690:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:690:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:697:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:697:16: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(5)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/4)
#  695|       }
#  696|   
#  697|->     certData = BTOA_DataToAscii(cert->derCert.data, cert->derCert.len);
#  698|       fprintf(out, "%s\n%s\n%s\n", NS_CERT_HEADER, certData, NS_CERT_TRAILER);
#  699|       PORT_Free(certData);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def318]
nss-3.117/nss/cmd/signtool/certgen.c:699:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:690:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:690:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:697:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:699:5: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(5)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/4)
#  697|       certData = BTOA_DataToAscii(cert->derCert.data, cert->derCert.len);
#  698|       fprintf(out, "%s\n%s\n%s\n", NS_CERT_HEADER, certData, NS_CERT_TRAILER);
#  699|->     PORT_Free(certData);
#  700|   
#  701|       PORT_Free(filename);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def319]
nss-3.117/nss/cmd/signtool/certgen.c:699:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:690:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:690:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:697:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:699:5: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(5)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/4)
#  697|       certData = BTOA_DataToAscii(cert->derCert.data, cert->derCert.len);
#  698|       fprintf(out, "%s\n%s\n%s\n", NS_CERT_HEADER, certData, NS_CERT_TRAILER);
#  699|->     PORT_Free(certData);
#  700|   
#  701|       PORT_Free(filename);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def320]
nss-3.117/nss/cmd/signtool/certgen.c:701:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:690:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/certgen.c:690:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:697:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:701:5: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was opened at [(5)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/4)
#  699|       PORT_Free(certData);
#  700|   
#  701|->     PORT_Free(filename);
#  702|       fclose(out);
#  703|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def321]
nss-3.117/nss/cmd/signtool/certgen.c:701:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(PORT_ZAlloc_Util(12), "wb")’
nss-3.117/nss/cmd/signtool/certgen.c:661:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:668:17: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:673:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:674:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:690:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/certgen.c:690:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/certgen.c:697:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/certgen.c:701:5: danger: ‘fopen(PORT_ZAlloc_Util(12), "wb")’ leaks here; was allocated at [(5)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/4)
#  699|       PORT_Free(certData);
#  700|   
#  701|->     PORT_Free(filename);
#  702|       fclose(out);
#  703|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def322]
nss-3.117/nss/cmd/signtool/sign.c:294:8: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&sf_file, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:15: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:8: danger: ‘fopen(&sf_file, "rb")’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  292|       }
#  293|   
#  294|->     if ((out = fopen(pk7_file, "wb")) == NULL) {
#  295|           PR_fprintf(errorFD, "%s: Can't open %s for writing\n", PROGRAM_NAME,
#  296|                      sf_file);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def323]
nss-3.117/nss/cmd/signtool/sign.c:294:8: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&sf_file, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:15: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:8: danger: ‘fopen(&sf_file, "rb")’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#  292|       }
#  293|   
#  294|->     if ((out = fopen(pk7_file, "wb")) == NULL) {
#  295|           PR_fprintf(errorFD, "%s: Can't open %s for writing\n", PROGRAM_NAME,
#  296|                      sf_file);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def324]
nss-3.117/nss/cmd/signtool/sign.c:303:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&pk7_file, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:301:14: return_function: returning to ‘create_pk7’ from ‘SignFile’
nss-3.117/nss/cmd/signtool/sign.c:303:5: danger: ‘fopen(&pk7_file, "wb")’ leaks here; was opened at [(8)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/7)
#  301|       status = SignFile(out, in, cert);
#  302|   
#  303|->     CERT_DestroyCertificate(cert);
#  304|       fclose(in);
#  305|       fclose(out);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def325]
nss-3.117/nss/cmd/signtool/sign.c:303:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&sf_file, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:15: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:301:14: return_function: returning to ‘create_pk7’ from ‘SignFile’
nss-3.117/nss/cmd/signtool/sign.c:303:5: danger: ‘fopen(&sf_file, "rb")’ leaks here; was opened at [(6)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/5)
#  301|       status = SignFile(out, in, cert);
#  302|   
#  303|->     CERT_DestroyCertificate(cert);
#  304|       fclose(in);
#  305|       fclose(out);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def326]
nss-3.117/nss/cmd/signtool/sign.c:303:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&pk7_file, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:301:14: return_function: returning to ‘create_pk7’ from ‘SignFile’
nss-3.117/nss/cmd/signtool/sign.c:303:5: danger: ‘fopen(&pk7_file, "wb")’ leaks here; was allocated at [(8)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/7)
#  301|       status = SignFile(out, in, cert);
#  302|   
#  303|->     CERT_DestroyCertificate(cert);
#  304|       fclose(in);
#  305|       fclose(out);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def327]
nss-3.117/nss/cmd/signtool/sign.c:303:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&sf_file, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:15: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:301:14: return_function: returning to ‘create_pk7’ from ‘SignFile’
nss-3.117/nss/cmd/signtool/sign.c:303:5: danger: ‘fopen(&sf_file, "rb")’ leaks here; was allocated at [(6)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/5)
#  301|       status = SignFile(out, in, cert);
#  302|   
#  303|->     CERT_DestroyCertificate(cert);
#  304|       fclose(in);
#  305|       fclose(out);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def328]
nss-3.117/nss/cmd/signtool/sign.c:307:8: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&pk7_file, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
#  305|       fclose(out);
#  306|   
#  307|->     if (status) {
#  308|           PR_fprintf(errorFD, "%s: PROBLEM signing data (%s)\n",
#  309|                      PROGRAM_NAME, SECU_Strerror(PORT_GetError()));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def329]
nss-3.117/nss/cmd/signtool/sign.c:307:8: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&sf_file, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:15: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
#  305|       fclose(out);
#  306|   
#  307|->     if (status) {
#  308|           PR_fprintf(errorFD, "%s: PROBLEM signing data (%s)\n",
#  309|                      PROGRAM_NAME, SECU_Strerror(PORT_GetError()));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def330]
nss-3.117/nss/cmd/signtool/sign.c:307:8: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&pk7_file, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
#  305|       fclose(out);
#  306|   
#  307|->     if (status) {
#  308|           PR_fprintf(errorFD, "%s: PROBLEM signing data (%s)\n",
#  309|                      PROGRAM_NAME, SECU_Strerror(PORT_GetError()));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def331]
nss-3.117/nss/cmd/signtool/sign.c:307:8: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&sf_file, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:250:1: enter_function: entry to ‘create_pk7’
nss-3.117/nss/cmd/signtool/sign.c:266:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:271:12: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:273:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:281:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:287:15: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:287:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:294:16: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:294:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:301:14: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:301:14: call_function: calling ‘SignFile’ from ‘create_pk7’
#  305|       fclose(out);
#  306|   
#  307|->     if (status) {
#  308|           PR_fprintf(errorFD, "%s: PROBLEM signing data (%s)\n",
#  309|                      PROGRAM_NAME, SECU_Strerror(PORT_GetError()));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def332]
nss-3.117/nss/cmd/signtool/sign.c:605:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(metafile, "r")’
nss-3.117/nss/cmd/signtool/sign.c:569:16: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:569:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:570:16: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:577:16: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:599:16: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/signtool/sign.c:603:17: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:604:20: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:605:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:605:21: danger: ‘fopen(metafile, "r")’ leaks here; was opened at [(1)](sarif:/runs/0/results/50/codeFlows/0/threadFlows/0/locations/0)
#  603|                   num++;
#  604|                   if (verbosity >= 0) {
#  605|->                     PR_fprintf(outputFD, "[%s] %s\n", name, meta);
#  606|                   }
#  607|                   fprintf(fp, "%s\n", meta);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def333]
nss-3.117/nss/cmd/signtool/sign.c:605:21: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(metafile, "r")’
nss-3.117/nss/cmd/signtool/sign.c:569:16: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:569:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:570:16: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:577:16: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:599:16: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/cmd/signtool/sign.c:603:17: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:604:20: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:605:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:605:21: danger: ‘fopen(metafile, "r")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/51/codeFlows/0/threadFlows/0/locations/0)
#  603|                   num++;
#  604|                   if (verbosity >= 0) {
#  605|->                     PR_fprintf(outputFD, "[%s] %s\n", name, meta);
#  606|                   }
#  607|                   fprintf(fp, "%s\n", meta);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def334]
nss-3.117/nss/cmd/signtool/sign.c:728:8: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/52/codeFlows/0/threadFlows/0/locations/0)
#  726|       }
#  727|   
#  728|->     if ((sfFile = fopen(whofile, "wb")) == NULL) {
#  729|           perror(who);
#  730|           exit(ERRX);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def335]
nss-3.117/nss/cmd/signtool/sign.c:728:8: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/53/codeFlows/0/threadFlows/0/locations/0)
#  726|       }
#  727|   
#  728|->     if ((sfFile = fopen(whofile, "wb")) == NULL) {
#  729|           perror(who);
#  730|           exit(ERRX);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def336]
nss-3.117/nss/cmd/signtool/sign.c:733:19: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:733:19: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/55/codeFlows/0/threadFlows/0/locations/2)
#  731|       }
#  732|   
#  733|->     buf = (char *)PORT_ZAlloc(BUFSIZ);
#  734|   
#  735|       if (buf)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def337]
nss-3.117/nss/cmd/signtool/sign.c:733:19: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:733:19: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/54/codeFlows/0/threadFlows/0/locations/0)
#  731|       }
#  732|   
#  733|->     buf = (char *)PORT_ZAlloc(BUFSIZ);
#  734|   
#  735|       if (buf)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def338]
nss-3.117/nss/cmd/signtool/sign.c:733:19: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:733:19: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/57/codeFlows/0/threadFlows/0/locations/2)
#  731|       }
#  732|   
#  733|->     buf = (char *)PORT_ZAlloc(BUFSIZ);
#  734|   
#  735|       if (buf)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def339]
nss-3.117/nss/cmd/signtool/sign.c:733:19: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:733:19: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/56/codeFlows/0/threadFlows/0/locations/0)
#  731|       }
#  732|   
#  733|->     buf = (char *)PORT_ZAlloc(BUFSIZ);
#  734|   
#  735|       if (buf)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def340]
nss-3.117/nss/cmd/signtool/sign.c:736:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:736:24: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/59/codeFlows/0/threadFlows/0/locations/2)
#  734|   
#  735|       if (buf)
#  736|->         name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|       if (buf == NULL || name == NULL)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def341]
nss-3.117/nss/cmd/signtool/sign.c:736:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:736:24: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/58/codeFlows/0/threadFlows/0/locations/0)
#  734|   
#  735|       if (buf)
#  736|->         name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|       if (buf == NULL || name == NULL)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def342]
nss-3.117/nss/cmd/signtool/sign.c:736:24: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:736:24: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/60/codeFlows/0/threadFlows/0/locations/2)
#  734|   
#  735|       if (buf)
#  736|->         name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|       if (buf == NULL || name == NULL)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def343]
nss-3.117/nss/cmd/signtool/sign.c:736:24: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:736:24: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/61/codeFlows/0/threadFlows/0/locations/0)
#  734|   
#  735|       if (buf)
#  736|->         name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|       if (buf == NULL || name == NULL)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def344]
nss-3.117/nss/cmd/signtool/sign.c:738:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:9: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/62/codeFlows/0/threadFlows/0/locations/2)
#  736|           name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|->     if (buf == NULL || name == NULL)
#  739|           out_of_memory();
#  740|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def345]
nss-3.117/nss/cmd/signtool/sign.c:738:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:9: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/63/codeFlows/0/threadFlows/0/locations/0)
#  736|           name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|->     if (buf == NULL || name == NULL)
#  739|           out_of_memory();
#  740|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def346]
nss-3.117/nss/cmd/signtool/sign.c:738:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:9: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/64/codeFlows/0/threadFlows/0/locations/2)
#  736|           name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|->     if (buf == NULL || name == NULL)
#  739|           out_of_memory();
#  740|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def347]
nss-3.117/nss/cmd/signtool/sign.c:738:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:9: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/65/codeFlows/0/threadFlows/0/locations/0)
#  736|           name = (char *)PORT_ZAlloc(BUFSIZ);
#  737|   
#  738|->     if (buf == NULL || name == NULL)
#  739|           out_of_memory();
#  740|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def348]
nss-3.117/nss/cmd/signtool/sign.c:739:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:738:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:739:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:739:9: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/71/codeFlows/0/threadFlows/0/locations/2)
#  737|   
#  738|       if (buf == NULL || name == NULL)
#  739|->         out_of_memory();
#  740|   
#  741|       fprintf(sfFile, "Signature-Version: 1.0\n");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def349]
nss-3.117/nss/cmd/signtool/sign.c:739:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:738:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:739:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:739:9: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/70/codeFlows/0/threadFlows/0/locations/0)
#  737|   
#  738|       if (buf == NULL || name == NULL)
#  739|->         out_of_memory();
#  740|   
#  741|       fprintf(sfFile, "Signature-Version: 1.0\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def350]
nss-3.117/nss/cmd/signtool/sign.c:739:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:738:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:739:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:739:9: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/72/codeFlows/0/threadFlows/0/locations/2)
#  737|   
#  738|       if (buf == NULL || name == NULL)
#  739|->         out_of_memory();
#  740|   
#  741|       fprintf(sfFile, "Signature-Version: 1.0\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def351]
nss-3.117/nss/cmd/signtool/sign.c:739:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:738:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:739:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:739:9: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/73/codeFlows/0/threadFlows/0/locations/0)
#  737|   
#  738|       if (buf == NULL || name == NULL)
#  739|->         out_of_memory();
#  740|   
#  741|       fprintf(sfFile, "Signature-Version: 1.0\n");

Error: GCC_ANALYZER_WARNING (CWE-688): [#def352]
nss-3.117/nss/cmd/signtool/sign.c:751:9: warning[-Wanalyzer-null-argument]: use of NULL ‘PORT_ZAlloc_Util(8192)’ where non-null expected
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:738:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:738:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:739:9: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:9: danger: argument 1 (‘PORT_ZAlloc_Util(8192)’) NULL where non-null expected
#  749|       }
#  750|   
#  751|->     if (strncmp(buf, "Manifest-Version:", 17)) {
#  752|           PR_fprintf(errorFD, "%s: not a manifest file!\n", PROGRAM_NAME);
#  753|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def353]
nss-3.117/nss/cmd/signtool/sign.c:757:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:757:5: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/75/codeFlows/0/threadFlows/0/locations/2)
#  755|       }
#  756|   
#  757|->     fseek(mfFile, 0L, SEEK_SET);
#  758|   
#  759|       /* Process blocks of headers, and calculate their hashen */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def354]
nss-3.117/nss/cmd/signtool/sign.c:757:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:757:5: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/76/codeFlows/0/threadFlows/0/locations/0)
#  755|       }
#  756|   
#  757|->     fseek(mfFile, 0L, SEEK_SET);
#  758|   
#  759|       /* Process blocks of headers, and calculate their hashen */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def355]
nss-3.117/nss/cmd/signtool/sign.c:757:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:757:5: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/78/codeFlows/0/threadFlows/0/locations/2)
#  755|       }
#  756|   
#  757|->     fseek(mfFile, 0L, SEEK_SET);
#  758|   
#  759|       /* Process blocks of headers, and calculate their hashen */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def356]
nss-3.117/nss/cmd/signtool/sign.c:757:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:757:5: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/77/codeFlows/0/threadFlows/0/locations/0)
#  755|       }
#  756|   
#  757|->     fseek(mfFile, 0L, SEEK_SET);
#  758|   
#  759|       /* Process blocks of headers, and calculate their hashen */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def357]
nss-3.117/nss/cmd/signtool/sign.c:763:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:763:14: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/79/codeFlows/0/threadFlows/0/locations/2)
#  761|       while (1) {
#  762|           /* Beginning range */
#  763|->         r1 = ftell(mfFile);
#  764|   
#  765|           if (fgets(name, BUFSIZ, mfFile) == NULL)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def358]
nss-3.117/nss/cmd/signtool/sign.c:763:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:763:14: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/80/codeFlows/0/threadFlows/0/locations/0)
#  761|       while (1) {
#  762|           /* Beginning range */
#  763|->         r1 = ftell(mfFile);
#  764|   
#  765|           if (fgets(name, BUFSIZ, mfFile) == NULL)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def359]
nss-3.117/nss/cmd/signtool/sign.c:763:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:763:14: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/82/codeFlows/0/threadFlows/0/locations/2)
#  761|       while (1) {
#  762|           /* Beginning range */
#  763|->         r1 = ftell(mfFile);
#  764|   
#  765|           if (fgets(name, BUFSIZ, mfFile) == NULL)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def360]
nss-3.117/nss/cmd/signtool/sign.c:763:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:763:14: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/81/codeFlows/0/threadFlows/0/locations/0)
#  761|       while (1) {
#  762|           /* Beginning range */
#  763|->         r1 = ftell(mfFile);
#  764|   
#  765|           if (fgets(name, BUFSIZ, mfFile) == NULL)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def361]
nss-3.117/nss/cmd/signtool/sign.c:771:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:771:13: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/84/codeFlows/0/threadFlows/0/locations/2)
#  769|   
#  770|           if (r1 != 0 && strncmp(name, "Name:", 5)) {
#  771|->             PR_fprintf(errorFD,
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def362]
nss-3.117/nss/cmd/signtool/sign.c:771:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:771:13: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/83/codeFlows/0/threadFlows/0/locations/0)
#  769|   
#  770|           if (r1 != 0 && strncmp(name, "Name:", 5)) {
#  771|->             PR_fprintf(errorFD,
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def363]
nss-3.117/nss/cmd/signtool/sign.c:771:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:771:13: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/85/codeFlows/0/threadFlows/0/locations/2)
#  769|   
#  770|           if (r1 != 0 && strncmp(name, "Name:", 5)) {
#  771|->             PR_fprintf(errorFD,
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def364]
nss-3.117/nss/cmd/signtool/sign.c:771:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:771:13: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/86/codeFlows/0/threadFlows/0/locations/0)
#  769|   
#  770|           if (r1 != 0 && strncmp(name, "Name:", 5)) {
#  771|->             PR_fprintf(errorFD,
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def365]
nss-3.117/nss/cmd/signtool/sign.c:774:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:774:13: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/87/codeFlows/0/threadFlows/0/locations/2)
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);
#  774|->             PR_fprintf(errorFD, "%s\n", name);
#  775|               warningCount++;
#  776|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def366]
nss-3.117/nss/cmd/signtool/sign.c:774:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:774:13: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/88/codeFlows/0/threadFlows/0/locations/0)
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);
#  774|->             PR_fprintf(errorFD, "%s\n", name);
#  775|               warningCount++;
#  776|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def367]
nss-3.117/nss/cmd/signtool/sign.c:774:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:774:13: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/90/codeFlows/0/threadFlows/0/locations/2)
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);
#  774|->             PR_fprintf(errorFD, "%s\n", name);
#  775|               warningCount++;
#  776|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def368]
nss-3.117/nss/cmd/signtool/sign.c:774:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:770:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:774:13: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/89/codeFlows/0/threadFlows/0/locations/0)
#  772|                          "warning: unexpected input in manifest file \"%s\" at line %d:\n",
#  773|                          manifile, line);
#  774|->             PR_fprintf(errorFD, "%s\n", name);
#  775|               warningCount++;
#  776|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def369]
nss-3.117/nss/cmd/signtool/sign.c:786:18: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:779:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:780:17: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:786:18: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/92/codeFlows/0/threadFlows/0/locations/2)
#  784|   
#  785|               /* Ending range for hashing */
#  786|->             r2 = ftell(mfFile);
#  787|           }
#  788|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def370]
nss-3.117/nss/cmd/signtool/sign.c:786:18: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:779:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:780:17: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:786:18: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/91/codeFlows/0/threadFlows/0/locations/0)
#  784|   
#  785|               /* Ending range for hashing */
#  786|->             r2 = ftell(mfFile);
#  787|           }
#  788|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def371]
nss-3.117/nss/cmd/signtool/sign.c:786:18: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:779:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:780:17: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:786:18: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/94/codeFlows/0/threadFlows/0/locations/2)
#  784|   
#  785|               /* Ending range for hashing */
#  786|->             r2 = ftell(mfFile);
#  787|           }
#  788|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def372]
nss-3.117/nss/cmd/signtool/sign.c:786:18: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:779:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:780:17: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:786:18: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/93/codeFlows/0/threadFlows/0/locations/0)
#  784|   
#  785|               /* Ending range for hashing */
#  786|->             r2 = ftell(mfFile);
#  787|           }
#  788|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def373]
nss-3.117/nss/cmd/signtool/sign.c:789:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:789:14: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/95/codeFlows/0/threadFlows/0/locations/2)
#  787|           }
#  788|   
#  789|->         r3 = ftell(mfFile);
#  790|   
#  791|           if (r1) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def374]
nss-3.117/nss/cmd/signtool/sign.c:789:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:789:14: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/96/codeFlows/0/threadFlows/0/locations/0)
#  787|           }
#  788|   
#  789|->         r3 = ftell(mfFile);
#  790|   
#  791|           if (r1) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def375]
nss-3.117/nss/cmd/signtool/sign.c:789:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:789:14: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/98/codeFlows/0/threadFlows/0/locations/2)
#  787|           }
#  788|   
#  789|->         r3 = ftell(mfFile);
#  790|   
#  791|           if (r1) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def376]
nss-3.117/nss/cmd/signtool/sign.c:789:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:789:14: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/97/codeFlows/0/threadFlows/0/locations/0)
#  787|           }
#  788|   
#  789|->         r3 = ftell(mfFile);
#  790|   
#  791|           if (r1) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def377]
nss-3.117/nss/cmd/signtool/sign.c:814:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:814:5: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/99/codeFlows/0/threadFlows/0/locations/2)
#  812|       }
#  813|   
#  814|->     PORT_Free(buf);
#  815|       PORT_Free(name);
#  816|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def378]
nss-3.117/nss/cmd/signtool/sign.c:814:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:814:5: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/100/codeFlows/0/threadFlows/0/locations/0)
#  812|       }
#  813|   
#  814|->     PORT_Free(buf);
#  815|       PORT_Free(name);
#  816|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def379]
nss-3.117/nss/cmd/signtool/sign.c:814:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:814:5: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/101/codeFlows/0/threadFlows/0/locations/2)
#  812|       }
#  813|   
#  814|->     PORT_Free(buf);
#  815|       PORT_Free(name);
#  816|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def380]
nss-3.117/nss/cmd/signtool/sign.c:814:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:814:5: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/102/codeFlows/0/threadFlows/0/locations/0)
#  812|       }
#  813|   
#  814|->     PORT_Free(buf);
#  815|       PORT_Free(name);
#  816|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def381]
nss-3.117/nss/cmd/signtool/sign.c:815:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:815:5: danger: ‘fopen(&whofile, "wb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/104/codeFlows/0/threadFlows/0/locations/2)
#  813|   
#  814|       PORT_Free(buf);
#  815|->     PORT_Free(name);
#  816|   
#  817|       fclose(sfFile);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def382]
nss-3.117/nss/cmd/signtool/sign.c:815:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:815:5: danger: ‘fopen(manifile, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/103/codeFlows/0/threadFlows/0/locations/0)
#  813|   
#  814|       PORT_Free(buf);
#  815|->     PORT_Free(name);
#  816|   
#  817|       fclose(sfFile);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def383]
nss-3.117/nss/cmd/signtool/sign.c:815:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:815:5: danger: ‘fopen(&whofile, "wb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/106/codeFlows/0/threadFlows/0/locations/2)
#  813|   
#  814|       PORT_Free(buf);
#  815|->     PORT_Free(name);
#  816|   
#  817|       fclose(sfFile);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def384]
nss-3.117/nss/cmd/signtool/sign.c:815:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:814:5: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:815:5: danger: ‘fopen(manifile, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/105/codeFlows/0/threadFlows/0/locations/0)
#  813|   
#  814|       PORT_Free(buf);
#  815|->     PORT_Free(name);
#  816|   
#  817|       fclose(sfFile);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def385]
nss-3.117/nss/cmd/signtool/sign.c:841:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  839|   
#  840|       /* position to the beginning of range */
#  841|->     fseek(fp, r1, SEEK_SET);
#  842|   
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def386]
nss-3.117/nss/cmd/signtool/sign.c:841:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  839|   
#  840|       /* position to the beginning of range */
#  841|->     fseek(fp, r1, SEEK_SET);
#  842|   
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def387]
nss-3.117/nss/cmd/signtool/sign.c:841:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  839|   
#  840|       /* position to the beginning of range */
#  841|->     fseek(fp, r1, SEEK_SET);
#  842|   
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def388]
nss-3.117/nss/cmd/signtool/sign.c:841:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  839|   
#  840|       /* position to the beginning of range */
#  841|->     fseek(fp, r1, SEEK_SET);
#  842|   
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def389]
nss-3.117/nss/cmd/signtool/sign.c:843:28: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  841|       fseek(fp, r1, SEEK_SET);
#  842|   
#  843|->     buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|           out_of_memory();

Error: GCC_ANALYZER_WARNING (CWE-775): [#def390]
nss-3.117/nss/cmd/signtool/sign.c:843:28: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  841|       fseek(fp, r1, SEEK_SET);
#  842|   
#  843|->     buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|           out_of_memory();

Error: GCC_ANALYZER_WARNING (CWE-401): [#def391]
nss-3.117/nss/cmd/signtool/sign.c:843:28: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  841|       fseek(fp, r1, SEEK_SET);
#  842|   
#  843|->     buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|           out_of_memory();

Error: GCC_ANALYZER_WARNING (CWE-401): [#def392]
nss-3.117/nss/cmd/signtool/sign.c:843:28: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  841|       fseek(fp, r1, SEEK_SET);
#  842|   
#  843|->     buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|           out_of_memory();

Error: GCC_ANALYZER_WARNING (CWE-775): [#def393]
nss-3.117/nss/cmd/signtool/sign.c:845:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|->         out_of_memory();
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def394]
nss-3.117/nss/cmd/signtool/sign.c:845:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|->         out_of_memory();
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def395]
nss-3.117/nss/cmd/signtool/sign.c:845:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|->         out_of_memory();
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def396]
nss-3.117/nss/cmd/signtool/sign.c:845:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  843|       buf = (unsigned char *)PORT_ZAlloc(range);
#  844|       if (buf == NULL)
#  845|->         out_of_memory();
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def397]
nss-3.117/nss/cmd/signtool/sign.c:848:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {
#  848|->         PR_fprintf(errorFD, "%s: expected %d bytes, got %d\n", PROGRAM_NAME,
#  849|                      range, num);
#  850|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def398]
nss-3.117/nss/cmd/signtool/sign.c:848:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {
#  848|->         PR_fprintf(errorFD, "%s: expected %d bytes, got %d\n", PROGRAM_NAME,
#  849|                      range, num);
#  850|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def399]
nss-3.117/nss/cmd/signtool/sign.c:848:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {
#  848|->         PR_fprintf(errorFD, "%s: expected %d bytes, got %d\n", PROGRAM_NAME,
#  849|                      range, num);
#  850|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def400]
nss-3.117/nss/cmd/signtool/sign.c:848:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  846|   
#  847|       if ((num = fread(buf, 1, range, fp)) != range) {
#  848|->         PR_fprintf(errorFD, "%s: expected %d bytes, got %d\n", PROGRAM_NAME,
#  849|                      range, num);
#  850|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def401]
nss-3.117/nss/cmd/signtool/sign.c:854:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  852|       }
#  853|   
#  854|->     rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|           rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def402]
nss-3.117/nss/cmd/signtool/sign.c:854:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  852|       }
#  853|   
#  854|->     rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|           rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def403]
nss-3.117/nss/cmd/signtool/sign.c:854:10: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  852|       }
#  853|   
#  854|->     rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|           rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def404]
nss-3.117/nss/cmd/signtool/sign.c:854:10: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  852|       }
#  853|   
#  854|->     rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|           rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def405]
nss-3.117/nss/cmd/signtool/sign.c:856:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  854|       rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|->         rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);
#  857|       }
#  858|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def406]
nss-3.117/nss/cmd/signtool/sign.c:856:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  854|       rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|->         rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);
#  857|       }
#  858|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def407]
nss-3.117/nss/cmd/signtool/sign.c:856:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  854|       rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|->         rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);
#  857|       }
#  858|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def408]
nss-3.117/nss/cmd/signtool/sign.c:856:14: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  854|       rv = PK11_HashBuf(SEC_OID_MD5, dig->md5, buf, range);
#  855|       if (rv == SECSuccess) {
#  856|->         rv = PK11_HashBuf(SEC_OID_SHA1, dig->sha1, buf, range);
#  857|       }
#  858|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def409]
nss-3.117/nss/cmd/signtool/sign.c:859:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  857|       }
#  858|       if (rv != SECSuccess) {
#  859|->         PR_fprintf(errorFD, "%s: can't generate digest context\n",
#  860|                      PROGRAM_NAME);
#  861|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def410]
nss-3.117/nss/cmd/signtool/sign.c:859:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  857|       }
#  858|       if (rv != SECSuccess) {
#  859|->         PR_fprintf(errorFD, "%s: can't generate digest context\n",
#  860|                      PROGRAM_NAME);
#  861|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def411]
nss-3.117/nss/cmd/signtool/sign.c:859:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  857|       }
#  858|       if (rv != SECSuccess) {
#  859|->         PR_fprintf(errorFD, "%s: can't generate digest context\n",
#  860|                      PROGRAM_NAME);
#  861|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def412]
nss-3.117/nss/cmd/signtool/sign.c:859:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  857|       }
#  858|       if (rv != SECSuccess) {
#  859|->         PR_fprintf(errorFD, "%s: can't generate digest context\n",
#  860|                      PROGRAM_NAME);
#  861|           errorCount++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def413]
nss-3.117/nss/cmd/signtool/sign.c:865:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  863|       }
#  864|   
#  865|->     PORT_Free(buf);
#  866|   
#  867|       return 0;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def414]
nss-3.117/nss/cmd/signtool/sign.c:865:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  863|       }
#  864|   
#  865|->     PORT_Free(buf);
#  866|   
#  867|       return 0;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def415]
nss-3.117/nss/cmd/signtool/sign.c:865:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&whofile, "wb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  863|       }
#  864|   
#  865|->     PORT_Free(buf);
#  866|   
#  867|       return 0;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def416]
nss-3.117/nss/cmd/signtool/sign.c:865:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(manifile, "rb")’
nss-3.117/nss/cmd/signtool/sign.c:710:1: enter_function: entry to ‘generate_SF_file’
nss-3.117/nss/cmd/signtool/sign.c:723:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/sign.c:723:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:728:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:728:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:733:19: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:735:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/sign.c:736:24: branch_true: ...to here
nss-3.117/nss/cmd/signtool/sign.c:745:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:751:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:751:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:757:5: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:765:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/sign.c:768:9: branch_false: ...to here
nss-3.117/nss/cmd/signtool/sign.c:796:9: call_function: calling ‘calculate_MD5_range’ from ‘generate_SF_file’
#  863|       }
#  864|   
#  865|->     PORT_Free(buf);
#  866|   
#  867|       return 0;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def417]
nss-3.117/nss/cmd/signtool/verify.c:197:33: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:197:33: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  195|                           if (!PORT_Strncmp(buf, "MD5-Digest: ", 12)) {
#  196|                               md5_digest =
#  197|->                                 ATOB_AsciiToData(buf + 12, &md5_length);
#  198|                           }
#  199|                           if (!PORT_Strncmp(buf, "SHA1-Digest: ", 13)) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def418]
nss-3.117/nss/cmd/signtool/verify.c:197:33: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:197:33: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/6)
#  195|                           if (!PORT_Strncmp(buf, "MD5-Digest: ", 12)) {
#  196|                               md5_digest =
#  197|->                                 ATOB_AsciiToData(buf + 12, &md5_length);
#  198|                           }
#  199|                           if (!PORT_Strncmp(buf, "SHA1-Digest: ", 13)) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def419]
nss-3.117/nss/cmd/signtool/verify.c:201:33: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:195:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:199:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:201:33: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
#  199|                           if (!PORT_Strncmp(buf, "SHA1-Digest: ", 13)) {
#  200|                               sha1_digest =
#  201|->                                 ATOB_AsciiToData(buf + 13, &sha1_length);
#  202|                           }
#  203|                           if (!PORT_Strncmp(buf, "SHA-Digest: ", 12)) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def420]
nss-3.117/nss/cmd/signtool/verify.c:201:33: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:195:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:199:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:201:33: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/6)
#  199|                           if (!PORT_Strncmp(buf, "SHA1-Digest: ", 13)) {
#  200|                               sha1_digest =
#  201|->                                 ATOB_AsciiToData(buf + 13, &sha1_length);
#  202|                           }
#  203|                           if (!PORT_Strncmp(buf, "SHA-Digest: ", 12)) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def421]
nss-3.117/nss/cmd/signtool/verify.c:205:33: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:195:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:199:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:205:33: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/6)
#  203|                           if (!PORT_Strncmp(buf, "SHA-Digest: ", 12)) {
#  204|                               sha1_digest =
#  205|->                                 ATOB_AsciiToData(buf + 12, &sha1_length);
#  206|                           }
#  207|                       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def422]
nss-3.117/nss/cmd/signtool/verify.c:205:33: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:195:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:199:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:205:33: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/6)
#  203|                           if (!PORT_Strncmp(buf, "SHA-Digest: ", 12)) {
#  204|                               sha1_digest =
#  205|->                                 ATOB_AsciiToData(buf + 12, &sha1_length);
#  206|                           }
#  207|                       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def423]
nss-3.117/nss/cmd/signtool/verify.c:212:25: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:199:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:203:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:203:28: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:212:25: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/6)
#  210|   
#  211|                       if (globaldig && md5_digest && verbosity >= 0) {
#  212|->                         PR_fprintf(outputFD,
#  213|                                      "  md5 digest on global metainfo: %s\n",
#  214|                                      PORT_Memcmp(md5_digest, globaldig->md5, MD5_LENGTH)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def424]
nss-3.117/nss/cmd/signtool/verify.c:212:25: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:199:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:203:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:203:28: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:212:25: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/6)
#  210|   
#  211|                       if (globaldig && md5_digest && verbosity >= 0) {
#  212|->                         PR_fprintf(outputFD,
#  213|                                      "  md5 digest on global metainfo: %s\n",
#  214|                                      PORT_Memcmp(md5_digest, globaldig->md5, MD5_LENGTH)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def425]
nss-3.117/nss/cmd/signtool/verify.c:220:25: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:195:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:199:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:220:25: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/6)
#  218|   
#  219|                       if (globaldig && sha1_digest && verbosity >= 0) {
#  220|->                         PR_fprintf(outputFD,
#  221|                                      "  sha digest on global metainfo: %s\n",
#  222|                                      PORT_Memcmp(sha1_digest, globaldig->sha1, SHA1_LENGTH)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def426]
nss-3.117/nss/cmd/signtool/verify.c:220:25: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:185:28: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:188:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:195:28: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:199:30: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:220:25: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/6)
#  218|   
#  219|                       if (globaldig && sha1_digest && verbosity >= 0) {
#  220|->                         PR_fprintf(outputFD,
#  221|                                      "  sha digest on global metainfo: %s\n",
#  222|                                      PORT_Memcmp(sha1_digest, globaldig->sha1, SHA1_LENGTH)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def427]
nss-3.117/nss/cmd/signtool/verify.c:228:25: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:228:25: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/6)
#  226|   
#  227|                       if (globaldig == NULL && verbosity >= 0) {
#  228|->                         PR_fprintf(outputFD,
#  229|                                      "global metadigest is not available, strange.\n");
#  230|                       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def428]
nss-3.117/nss/cmd/signtool/verify.c:228:25: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:228:25: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/6)
#  226|   
#  227|                       if (globaldig == NULL && verbosity >= 0) {
#  228|->                         PR_fprintf(outputFD,
#  229|                                      "global metadigest is not available, strange.\n");
#  230|                       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def429]
nss-3.117/nss/cmd/signtool/verify.c:232:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:232:21: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/6)
#  230|                       }
#  231|   
#  232|->                     PORT_Free(md5_digest);
#  233|                       PORT_Free(sha1_digest);
#  234|                       fclose(fp);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def430]
nss-3.117/nss/cmd/signtool/verify.c:232:21: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:232:21: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/6)
#  230|                       }
#  231|   
#  232|->                     PORT_Free(md5_digest);
#  233|                       PORT_Free(sha1_digest);
#  234|                       fclose(fp);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def431]
nss-3.117/nss/cmd/signtool/verify.c:233:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_resource: opened here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:233:21: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was opened at [(7)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/6)
#  231|   
#  232|                       PORT_Free(md5_digest);
#  233|->                     PORT_Free(sha1_digest);
#  234|                       fclose(fp);
#  235|                   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def432]
nss-3.117/nss/cmd/signtool/verify.c:233:21: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("signtool.tmp", "rb")’
nss-3.117/nss/cmd/signtool/verify.c:140:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:141:29: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:165:16: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signtool/verify.c:166:21: branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:173:20: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:184:27: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:184:27: acquire_memory: allocated here
nss-3.117/nss/cmd/signtool/verify.c:184:20: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signtool/verify.c:211:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:219:35: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:219:24: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signtool/verify.c:227:24: branch_false: ...to here
nss-3.117/nss/cmd/signtool/verify.c:233:21: danger: ‘fopen("signtool.tmp", "rb")’ leaks here; was allocated at [(7)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/6)
#  231|   
#  232|                       PORT_Free(md5_digest);
#  233|->                     PORT_Free(sha1_digest);
#  234|                       fclose(fp);
#  235|                   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def433]
nss-3.117/nss/cmd/signver/signver.c:55:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:109:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:251:22: call_function: calling ‘AlgorithmToHashType’ from ‘main’
#   53|   AlgorithmToHashType(SECAlgorithmID *digestAlgorithms)
#   54|   {
#   55|->     SECOidTag tag = SECOID_GetAlgorithmTag(digestAlgorithms);
#   56|       HASH_HashType hash = HASH_GetHashTypeByOidTag(tag);
#   57|       return hash;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def434]
nss-3.117/nss/cmd/signver/signver.c:55:21: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:109:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:251:22: call_function: calling ‘AlgorithmToHashType’ from ‘main’
#   53|   AlgorithmToHashType(SECAlgorithmID *digestAlgorithms)
#   54|   {
#   55|->     SECOidTag tag = SECOID_GetAlgorithmTag(digestAlgorithms);
#   56|       HASH_HashType hash = HASH_GetHashTypeByOidTag(tag);
#   57|       return hash;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def435]
nss-3.117/nss/cmd/signver/signver.c:56:26: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:109:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:251:22: call_function: calling ‘AlgorithmToHashType’ from ‘main’
#   54|   {
#   55|       SECOidTag tag = SECOID_GetAlgorithmTag(digestAlgorithms);
#   56|->     HASH_HashType hash = HASH_GetHashTypeByOidTag(tag);
#   57|       return hash;
#   58|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def436]
nss-3.117/nss/cmd/signver/signver.c:56:26: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:109:1: enter_function: entry to ‘main’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:251:22: call_function: calling ‘AlgorithmToHashType’ from ‘main’
#   54|   {
#   55|       SECOidTag tag = SECOID_GetAlgorithmTag(digestAlgorithms);
#   56|->     HASH_HashType hash = HASH_GetHashTypeByOidTag(tag);
#   57|       return hash;
#   58|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def437]
nss-3.117/nss/cmd/signver/signver.c:204:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:204:10: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/6)
#  202|   
#  203|       /* read in the input files' contents */
#  204|->     rv = SECU_ReadDERFromFile(&pkcs7der, signFile,
#  205|                                 signver.options[opt_ASCII].activated, PR_FALSE);
#  206|       if (signFile != PR_STDIN)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def438]
nss-3.117/nss/cmd/signver/signver.c:204:10: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:204:10: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/6)
#  202|   
#  203|       /* read in the input files' contents */
#  204|->     rv = SECU_ReadDERFromFile(&pkcs7der, signFile,
#  205|                                 signver.options[opt_ASCII].activated, PR_FALSE);
#  206|       if (signFile != PR_STDIN)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def439]
nss-3.117/nss/cmd/signver/signver.c:206:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:206:21: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/6)
#  204|       rv = SECU_ReadDERFromFile(&pkcs7der, signFile,
#  205|                                 signver.options[opt_ASCII].activated, PR_FALSE);
#  206|->     if (signFile != PR_STDIN)
#  207|           PR_Close(signFile);
#  208|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def440]
nss-3.117/nss/cmd/signver/signver.c:206:21: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:206:21: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/6)
#  204|       rv = SECU_ReadDERFromFile(&pkcs7der, signFile,
#  205|                                 signver.options[opt_ASCII].activated, PR_FALSE);
#  206|->     if (signFile != PR_STDIN)
#  207|           PR_Close(signFile);
#  208|       if (rv != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def441]
nss-3.117/nss/cmd/signver/signver.c:207:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:206:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:207:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:207:9: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/6)
#  205|                                 signver.options[opt_ASCII].activated, PR_FALSE);
#  206|       if (signFile != PR_STDIN)
#  207|->         PR_Close(signFile);
#  208|       if (rv != SECSuccess) {
#  209|           SECU_PrintError(progName, "problem reading PKCS7 input");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def442]
nss-3.117/nss/cmd/signver/signver.c:207:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:206:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:207:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:207:9: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/6)
#  205|                                 signver.options[opt_ASCII].activated, PR_FALSE);
#  206|       if (signFile != PR_STDIN)
#  207|->         PR_Close(signFile);
#  208|       if (rv != SECSuccess) {
#  209|           SECU_PrintError(progName, "problem reading PKCS7 input");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def443]
nss-3.117/nss/cmd/signver/signver.c:209:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:209:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:209:9: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/6)
#  207|           PR_Close(signFile);
#  208|       if (rv != SECSuccess) {
#  209|->         SECU_PrintError(progName, "problem reading PKCS7 input");
#  210|           goto cleanup;
#  211|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def444]
nss-3.117/nss/cmd/signver/signver.c:209:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:209:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:209:9: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/6)
#  207|           PR_Close(signFile);
#  208|       if (rv != SECSuccess) {
#  209|->         SECU_PrintError(progName, "problem reading PKCS7 input");
#  210|           goto cleanup;
#  211|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def445]
nss-3.117/nss/cmd/signver/signver.c:213:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:157:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:9: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:158:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_true: following ‘true’ branch (when ‘contentFile’ is non-NULL)...
nss-3.117/nss/cmd/signver/signver.c:213:14: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:213:14: danger: ‘outFile’ leaks here; was opened at [(11)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/10)
#  211|       }
#  212|       if (contentFile) {
#  213|->         rv = SECU_FileToItem(&content, contentFile);
#  214|           if (contentFile != PR_STDIN)
#  215|               PR_Close(contentFile);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def446]
nss-3.117/nss/cmd/signver/signver.c:213:14: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:157:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:9: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:158:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_true: following ‘true’ branch (when ‘contentFile’ is non-NULL)...
nss-3.117/nss/cmd/signver/signver.c:213:14: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:213:14: danger: ‘outFile’ leaks here; was allocated at [(11)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/10)
#  211|       }
#  212|       if (contentFile) {
#  213|->         rv = SECU_FileToItem(&content, contentFile);
#  214|           if (contentFile != PR_STDIN)
#  215|               PR_Close(contentFile);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def447]
nss-3.117/nss/cmd/signver/signver.c:214:28: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:157:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:9: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:158:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_true: following ‘true’ branch (when ‘contentFile’ is non-NULL)...
nss-3.117/nss/cmd/signver/signver.c:213:14: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:214:28: danger: ‘outFile’ leaks here; was opened at [(11)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/10)
#  212|       if (contentFile) {
#  213|           rv = SECU_FileToItem(&content, contentFile);
#  214|->         if (contentFile != PR_STDIN)
#  215|               PR_Close(contentFile);
#  216|           if (rv != SECSuccess)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def448]
nss-3.117/nss/cmd/signver/signver.c:214:28: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:157:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:9: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:158:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_true: following ‘true’ branch (when ‘contentFile’ is non-NULL)...
nss-3.117/nss/cmd/signver/signver.c:213:14: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:214:28: danger: ‘outFile’ leaks here; was allocated at [(11)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/10)
#  212|       if (contentFile) {
#  213|           rv = SECU_FileToItem(&content, contentFile);
#  214|->         if (contentFile != PR_STDIN)
#  215|               PR_Close(contentFile);
#  216|           if (rv != SECSuccess)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def449]
nss-3.117/nss/cmd/signver/signver.c:215:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:157:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:9: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:158:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_true: following ‘true’ branch (when ‘contentFile’ is non-NULL)...
nss-3.117/nss/cmd/signver/signver.c:213:14: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:214:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:215:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:215:13: danger: ‘outFile’ leaks here; was opened at [(11)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/10)
#  213|           rv = SECU_FileToItem(&content, contentFile);
#  214|           if (contentFile != PR_STDIN)
#  215|->             PR_Close(contentFile);
#  216|           if (rv != SECSuccess)
#  217|               content.data = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def450]
nss-3.117/nss/cmd/signver/signver.c:215:13: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:157:9: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:156:9: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:158:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_true: following ‘true’ branch (when ‘contentFile’ is non-NULL)...
nss-3.117/nss/cmd/signver/signver.c:213:14: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:214:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:215:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:215:13: danger: ‘outFile’ leaks here; was allocated at [(11)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/10)
#  213|           rv = SECU_FileToItem(&content, contentFile);
#  214|           if (contentFile != PR_STDIN)
#  215|->             PR_Close(contentFile);
#  216|           if (rv != SECSuccess)
#  217|               content.data = NULL;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def451]
nss-3.117/nss/cmd/signver/signver.c:227:17: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:227:17: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/18/codeFlows/0/threadFlows/0/locations/6)
#  225|           PRBool contentIsSigned;
#  226|   
#  227|->         cinfo = SEC_PKCS7DecodeItem(&pkcs7der, NULL, NULL, NULL, NULL,
#  228|                                       NULL, NULL, NULL);
#  229|           if (cinfo == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def452]
nss-3.117/nss/cmd/signver/signver.c:227:17: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:227:17: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/19/codeFlows/0/threadFlows/0/locations/6)
#  225|           PRBool contentIsSigned;
#  226|   
#  227|->         cinfo = SEC_PKCS7DecodeItem(&pkcs7der, NULL, NULL, NULL, NULL,
#  228|                                       NULL, NULL, NULL);
#  229|           if (cinfo == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def453]
nss-3.117/nss/cmd/signver/signver.c:230:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:230:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:230:13: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/20/codeFlows/0/threadFlows/0/locations/6)
#  228|                                       NULL, NULL, NULL);
#  229|           if (cinfo == NULL) {
#  230|->             PR_fprintf(PR_STDERR, "Unable to decode PKCS7 data\n");
#  231|               goto cleanup;
#  232|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def454]
nss-3.117/nss/cmd/signver/signver.c:230:13: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:230:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:230:13: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/21/codeFlows/0/threadFlows/0/locations/6)
#  228|                                       NULL, NULL, NULL);
#  229|           if (cinfo == NULL) {
#  230|->             PR_fprintf(PR_STDERR, "Unable to decode PKCS7 data\n");
#  231|               goto cleanup;
#  232|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def455]
nss-3.117/nss/cmd/signver/signver.c:230:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:230:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:230:24: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/22/codeFlows/0/threadFlows/0/locations/6)
#  228|                                       NULL, NULL, NULL);
#  229|           if (cinfo == NULL) {
#  230|->             PR_fprintf(PR_STDERR, "Unable to decode PKCS7 data\n");
#  231|               goto cleanup;
#  232|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def456]
nss-3.117/nss/cmd/signver/signver.c:230:24: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:230:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:230:24: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/6)
#  228|                                       NULL, NULL, NULL);
#  229|           if (cinfo == NULL) {
#  230|->             PR_fprintf(PR_STDERR, "Unable to decode PKCS7 data\n");
#  231|               goto cleanup;
#  232|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def457]
nss-3.117/nss/cmd/signver/signver.c:235:27: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:235:27: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/24/codeFlows/0/threadFlows/0/locations/6)
#  233|           /* below here, goto done */
#  234|   
#  235|->         contentIsSigned = SEC_PKCS7ContentIsSigned(cinfo);
#  236|           if (debugInfo) {
#  237|               PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",

Error: GCC_ANALYZER_WARNING (CWE-401): [#def458]
nss-3.117/nss/cmd/signver/signver.c:235:27: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:235:27: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/25/codeFlows/0/threadFlows/0/locations/6)
#  233|           /* below here, goto done */
#  234|   
#  235|->         contentIsSigned = SEC_PKCS7ContentIsSigned(cinfo);
#  236|           if (debugInfo) {
#  237|               PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",

Error: GCC_ANALYZER_WARNING (CWE-775): [#def459]
nss-3.117/nss/cmd/signver/signver.c:237:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:236:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:238:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:237:13: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/26/codeFlows/0/threadFlows/0/locations/6)
#  235|           contentIsSigned = SEC_PKCS7ContentIsSigned(cinfo);
#  236|           if (debugInfo) {
#  237|->             PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",
#  238|                          SEC_PKCS7ContentIsEncrypted(cinfo) ? "" : " not");
#  239|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def460]
nss-3.117/nss/cmd/signver/signver.c:237:13: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:236:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:238:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:237:13: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/6)
#  235|           contentIsSigned = SEC_PKCS7ContentIsSigned(cinfo);
#  236|           if (debugInfo) {
#  237|->             PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",
#  238|                          SEC_PKCS7ContentIsEncrypted(cinfo) ? "" : " not");
#  239|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def461]
nss-3.117/nss/cmd/signver/signver.c:237:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:236:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:238:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:237:24: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/28/codeFlows/0/threadFlows/0/locations/6)
#  235|           contentIsSigned = SEC_PKCS7ContentIsSigned(cinfo);
#  236|           if (debugInfo) {
#  237|->             PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",
#  238|                          SEC_PKCS7ContentIsEncrypted(cinfo) ? "" : " not");
#  239|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def462]
nss-3.117/nss/cmd/signver/signver.c:237:24: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:236:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:238:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:237:24: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/29/codeFlows/0/threadFlows/0/locations/6)
#  235|           contentIsSigned = SEC_PKCS7ContentIsSigned(cinfo);
#  236|           if (debugInfo) {
#  237|->             PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",
#  238|                          SEC_PKCS7ContentIsEncrypted(cinfo) ? "" : " not");
#  239|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def463]
nss-3.117/nss/cmd/signver/signver.c:238:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:236:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:238:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:238:24: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/30/codeFlows/0/threadFlows/0/locations/6)
#  236|           if (debugInfo) {
#  237|               PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",
#  238|->                        SEC_PKCS7ContentIsEncrypted(cinfo) ? "" : " not");
#  239|           }
#  240|           if (debugInfo || !contentIsSigned) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def464]
nss-3.117/nss/cmd/signver/signver.c:238:24: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:236:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:238:24: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:238:24: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/31/codeFlows/0/threadFlows/0/locations/6)
#  236|           if (debugInfo) {
#  237|               PR_fprintf(PR_STDERR, "Content is%s encrypted.\n",
#  238|->                        SEC_PKCS7ContentIsEncrypted(cinfo) ? "" : " not");
#  239|           }
#  240|           if (debugInfo || !contentIsSigned) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def465]
nss-3.117/nss/cmd/signver/signver.c:241:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:240:13: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:241:13: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/32/codeFlows/0/threadFlows/0/locations/6)
#  239|           }
#  240|           if (debugInfo || !contentIsSigned) {
#  241|->             PR_fprintf(PR_STDERR, "Content is%s signed.\n",
#  242|                          contentIsSigned ? "" : " not");
#  243|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def466]
nss-3.117/nss/cmd/signver/signver.c:241:13: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:240:13: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:241:13: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/33/codeFlows/0/threadFlows/0/locations/6)
#  239|           }
#  240|           if (debugInfo || !contentIsSigned) {
#  241|->             PR_fprintf(PR_STDERR, "Content is%s signed.\n",
#  242|                          contentIsSigned ? "" : " not");
#  243|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def467]
nss-3.117/nss/cmd/signver/signver.c:241:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:240:13: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:241:24: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/34/codeFlows/0/threadFlows/0/locations/6)
#  239|           }
#  240|           if (debugInfo || !contentIsSigned) {
#  241|->             PR_fprintf(PR_STDERR, "Content is%s signed.\n",
#  242|                          contentIsSigned ? "" : " not");
#  243|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def468]
nss-3.117/nss/cmd/signver/signver.c:241:24: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:240:13: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:241:24: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/35/codeFlows/0/threadFlows/0/locations/6)
#  239|           }
#  240|           if (debugInfo || !contentIsSigned) {
#  241|->             PR_fprintf(PR_STDERR, "Content is%s signed.\n",
#  242|                          contentIsSigned ? "" : " not");
#  243|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def469]
nss-3.117/nss/cmd/signver/signver.c:296:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:240:13: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:245:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:246:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:296:9: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/36/codeFlows/0/threadFlows/0/locations/6)
#  294|           }
#  295|       done:
#  296|->         SEC_PKCS7DestroyContentInfo(cinfo);
#  297|       }
#  298|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def470]
nss-3.117/nss/cmd/signver/signver.c:296:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:221:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:227:17: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:229:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:235:27: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:240:13: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:245:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:246:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:296:9: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/37/codeFlows/0/threadFlows/0/locations/6)
#  294|           }
#  295|       done:
#  296|->         SEC_PKCS7DestroyContentInfo(cinfo);
#  297|       }
#  298|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def471]
nss-3.117/nss/cmd/signver/signver.c:300:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:299:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:300:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:300:13: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/38/codeFlows/0/threadFlows/0/locations/6)
#  298|   
#  299|       if (displayAll) {
#  300|->         if (SV_PrintPKCS7ContentInfo(outFile, &pkcs7der))
#  301|               result = 1;
#  302|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def472]
nss-3.117/nss/cmd/signver/signver.c:300:13: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:208:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:212:8: branch_false: following ‘false’ branch (when ‘contentFile’ is NULL)...
nss-3.117/nss/cmd/signver/signver.c:221:9: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:299:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:300:13: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:300:13: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/39/codeFlows/0/threadFlows/0/locations/6)
#  298|   
#  299|       if (displayAll) {
#  300|->         if (SV_PrintPKCS7ContentInfo(outFile, &pkcs7der))
#  301|               result = 1;
#  302|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def473]
nss-3.117/nss/cmd/signver/signver.c:305:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:305:5: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/40/codeFlows/0/threadFlows/0/locations/6)
#  303|   
#  304|   cleanup:
#  305|->     SECITEM_FreeItem(&pkcs7der, PR_FALSE);
#  306|       SECITEM_FreeItem(&content, PR_FALSE);
#  307|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def474]
nss-3.117/nss/cmd/signver/signver.c:305:5: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:305:5: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/41/codeFlows/0/threadFlows/0/locations/6)
#  303|   
#  304|   cleanup:
#  305|->     SECITEM_FreeItem(&pkcs7der, PR_FALSE);
#  306|       SECITEM_FreeItem(&content, PR_FALSE);
#  307|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def475]
nss-3.117/nss/cmd/signver/signver.c:306:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:306:5: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/42/codeFlows/0/threadFlows/0/locations/6)
#  304|   cleanup:
#  305|       SECITEM_FreeItem(&pkcs7der, PR_FALSE);
#  306|->     SECITEM_FreeItem(&content, PR_FALSE);
#  307|   
#  308|       if (NSS_Shutdown() != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def476]
nss-3.117/nss/cmd/signver/signver.c:306:5: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:306:5: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/43/codeFlows/0/threadFlows/0/locations/6)
#  304|   cleanup:
#  305|       SECITEM_FreeItem(&pkcs7der, PR_FALSE);
#  306|->     SECITEM_FreeItem(&content, PR_FALSE);
#  307|   
#  308|       if (NSS_Shutdown() != SECSuccess) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def477]
nss-3.117/nss/cmd/signver/signver.c:308:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_resource: opened here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:308:9: danger: ‘outFile’ leaks here; was opened at [(7)](sarif:/runs/0/results/44/codeFlows/0/threadFlows/0/locations/6)
#  306|       SECITEM_FreeItem(&content, PR_FALSE);
#  307|   
#  308|->     if (NSS_Shutdown() != SECSuccess) {
#  309|           result = 1;
#  310|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def478]
nss-3.117/nss/cmd/signver/signver.c:308:9: warning[-Wanalyzer-malloc-leak]: leak of ‘outFile’
nss-3.117/nss/cmd/signver/signver.c:136:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:139:17: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:148:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:153:5: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:194:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/signver/signver.c:195:25: branch_true: ...to here
nss-3.117/nss/cmd/signver/signver.c:195:19: acquire_memory: allocated here
nss-3.117/nss/cmd/signver/signver.c:196:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/signver/signver.c:205:31: branch_false: ...to here
nss-3.117/nss/cmd/signver/signver.c:308:9: danger: ‘outFile’ leaks here; was allocated at [(7)](sarif:/runs/0/results/45/codeFlows/0/threadFlows/0/locations/6)
#  306|       SECITEM_FreeItem(&content, PR_FALSE);
#  307|   
#  308|->     if (NSS_Shutdown() != SECSuccess) {
#  309|           result = 1;
#  310|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def479]
nss-3.117/nss/cmd/smimetools/cmsutil.c:1423:21: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*<unknown>.value)’
nss-3.117/nss/cmd/smimetools/cmsutil.c:1176:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/smimetools/cmsutil.c:1177:17: branch_true: ...to here
nss-3.117/nss/cmd/smimetools/cmsutil.c:1422:34: acquire_memory: allocated here
nss-3.117/nss/cmd/smimetools/cmsutil.c:1423:21: danger: ‘strdup(*<unknown>.value)’ leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 1421|   
# 1422|                   usageType = atoi(strdup(optstate->value));
# 1423|->                 if (usageType < certUsageSSLClient || usageType > certUsageAnyCA)
# 1424|                       return -1;
# 1425|                   options.certUsage = (SECCertUsage)usageType;

Error: CPPCHECK_WARNING (CWE-401): [#def480]
nss-3.117/nss/cmd/smimetools/cmsutil.c:1424: error[memleak]: Memory leak: options.password
# 1422|                   usageType = atoi(strdup(optstate->value));
# 1423|                   if (usageType < certUsageSSLClient || usageType > certUsageAnyCA)
# 1424|->                     return -1;
# 1425|                   options.certUsage = (SECCertUsage)usageType;
# 1426|                   break;

Error: CPPCHECK_WARNING (CWE-401): [#def481]
nss-3.117/nss/cmd/smimetools/cmsutil.c:1424: error[memleak]: Memory leak: options.pwfile
# 1422|                   usageType = atoi(strdup(optstate->value));
# 1423|                   if (usageType < certUsageSSLClient || usageType > certUsageAnyCA)
# 1424|->                     return -1;
# 1425|                   options.certUsage = (SECCertUsage)usageType;
# 1426|                   break;

Error: CPPCHECK_WARNING (CWE-401): [#def482]
nss-3.117/nss/cmd/smimetools/cmsutil.c:1424: error[memleak]: Memory leak: signOptions.encryptionKeyPreferenceNick
# 1422|                   usageType = atoi(strdup(optstate->value));
# 1423|                   if (usageType < certUsageSSLClient || usageType > certUsageAnyCA)
# 1424|->                     return -1;
# 1425|                   options.certUsage = (SECCertUsage)usageType;
# 1426|                   break;

Error: CPPCHECK_WARNING (CWE-682): [#def483]
nss-3.117/nss/cmd/strsclnt/strsclnt.c:857: error[nullPointerArithmetic]: Pointer addition with NULL pointer.
#  855|           SSL_SetSockPeerID(ssl_sock, sockPeerIDString);
#  856|           SSL_HandshakeCallback(ssl_sock, myHandshakeCallback,
#  857|->                               (char *)NULL + thisPeerID);
#  858|   #else
#  859|               /* force a full handshake by setting the no cache option */

Error: GCC_ANALYZER_WARNING (CWE-835): [#def484]
nss-3.117/nss/cmd/strsclnt/strsclnt.c:948:33: warning[-Wanalyzer-infinite-loop]: infinite loop
nss-3.117/nss/cmd/strsclnt/strsclnt.c:930:1: enter_function: entry to ‘StressClient_GetClientAuthData’
nss-3.117/nss/cmd/strsclnt/strsclnt.c:948:33: danger: infinite loop here
nss-3.117/nss/cmd/strsclnt/strsclnt.c:948:17: branch_false: if it ever follows ‘false’ branch, it will always do so...
 branch_false: ...to here
#  946|       if (Cert_And_Key && Cert_And_Key->nickname) {
#  947|           while (PR_TRUE) {
#  948|->             if (Cert_And_Key && Cert_And_Key->lock) {
#  949|                   int timeout = 0;
#  950|                   PR_Lock(Cert_And_Key->lock);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def485]
nss-3.117/nss/cmd/tests/remtest.c:60:25: warning[-Wanalyzer-malloc-leak]: leak of ‘certDir’
nss-3.117/nss/cmd/tests/remtest.c:60:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/remtest.c:61:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/remtest.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/tests/remtest.c:60:25: danger: ‘certDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   58|   
#   59|       optstate = PL_CreateOptState(argc, argv, "rd:t:");
#   60|->     while ((optstatus = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#   61|           switch (optstate->option) {
#   62|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def486]
nss-3.117/nss/cmd/tests/remtest.c:64:27: warning[-Wanalyzer-malloc-leak]: leak of ‘certDir’
nss-3.117/nss/cmd/tests/remtest.c:60:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/remtest.c:61:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/remtest.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/tests/remtest.c:60:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/remtest.c:61:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/remtest.c:64:27: danger: ‘certDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#   62|   
#   63|               case 'd':
#   64|->                 certDir = strdup(optstate->value);
#   65|                   certDir = SECU_ConfigDirectory(certDir);
#   66|                   break;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def487]
nss-3.117/nss/cmd/tests/remtest.c:65:27: warning[-Wanalyzer-malloc-leak]: leak of ‘certDir’
nss-3.117/nss/cmd/tests/remtest.c:60:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/remtest.c:61:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/remtest.c:64:27: acquire_memory: allocated here
nss-3.117/nss/cmd/tests/remtest.c:65:27: danger: ‘certDir’ leaks here; was allocated at [(5)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/4)
#   63|               case 'd':
#   64|                   certDir = strdup(optstate->value);
#   65|->                 certDir = SECU_ConfigDirectory(certDir);
#   66|                   break;
#   67|               case 't':

Error: GCC_ANALYZER_WARNING (CWE-401): [#def488]
nss-3.117/nss/cmd/tests/secmodtest.c:83:25: warning[-Wanalyzer-malloc-leak]: leak of ‘dbDir’
nss-3.117/nss/cmd/tests/secmodtest.c:83:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:84:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:86:25: acquire_memory: allocated here
nss-3.117/nss/cmd/tests/secmodtest.c:83:25: danger: ‘dbDir’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   81|   
#   82|       optstate = PL_CreateOptState(argc, argv, "d:");
#   83|->     while ((optstatus = PL_GetNextOpt(optstate)) == PL_OPT_OK) {
#   84|           switch (optstate->option) {
#   85|               case 'd':

Error: GCC_ANALYZER_WARNING (CWE-401): [#def489]
nss-3.117/nss/cmd/tests/secmodtest.c:86:25: warning[-Wanalyzer-malloc-leak]: leak of ‘dbDir’
nss-3.117/nss/cmd/tests/secmodtest.c:83:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:84:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:86:25: acquire_memory: allocated here
nss-3.117/nss/cmd/tests/secmodtest.c:83:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:84:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:84:9: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:85:13: branch_true: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:86:25: danger: ‘dbDir’ leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#   84|           switch (optstate->option) {
#   85|               case 'd':
#   86|->                 dbDir = strdup(optstate->value);
#   87|                   break;
#   88|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def490]
nss-3.117/nss/cmd/tests/secmodtest.c:94:10: warning[-Wanalyzer-malloc-leak]: leak of ‘dbDir’
nss-3.117/nss/cmd/tests/secmodtest.c:83:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:84:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:86:25: acquire_memory: allocated here
nss-3.117/nss/cmd/tests/secmodtest.c:83:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:90:9: branch_false: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:94:10: branch_false: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:94:10: danger: ‘dbDir’ leaks here; was allocated at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#   92|       }
#   93|   
#   94|->     rv = NSS_NoDB_Init(NULL);
#   95|       if (rv != SECSuccess) {
#   96|           SECU_PrintError(progName, "unable to initialize NSS");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def491]
nss-3.117/nss/cmd/tests/secmodtest.c:96:9: warning[-Wanalyzer-malloc-leak]: leak of ‘dbDir’
nss-3.117/nss/cmd/tests/secmodtest.c:83:12: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:84:17: branch_true: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:86:25: acquire_memory: allocated here
nss-3.117/nss/cmd/tests/secmodtest.c:83:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:90:9: branch_false: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:90:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:94:10: branch_false: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:95:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tests/secmodtest.c:96:9: branch_true: ...to here
nss-3.117/nss/cmd/tests/secmodtest.c:96:9: danger: ‘dbDir’ leaks here; was allocated at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#   94|       rv = NSS_NoDB_Init(NULL);
#   95|       if (rv != SECSuccess) {
#   96|->         SECU_PrintError(progName, "unable to initialize NSS");
#   97|           goto loser;
#   98|       }

Error: CPPCHECK_WARNING (CWE-457): [#def492]
nss-3.117/nss/cmd/tstclnt/tstclnt.c:503: error[uninitvar]: Uninitialized variable: revTestsDoNotCheck.preferred_methods
#  501|           CERT_REV_MI_REQUIRE_SOME_FRESH_INFO_AVAILABLE;
#  502|   
#  503|->     rev.chainTests = revTestsDoNotCheck;
#  504|       rev.leafTests = revTestsDoNotCheck;
#  505|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def493]
nss-3.117/nss/cmd/tstclnt/tstclnt.c:503:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘revTestsDoNotCheck.preferred_methods’
nss-3.117/nss/cmd/tstclnt/tstclnt.c:678:1: enter_function: entry to ‘ownAuthCertificate’
nss-3.117/nss/cmd/tstclnt/tstclnt.c:683:8: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/tstclnt/tstclnt.c:687:10: branch_false: ...to here
nss-3.117/nss/cmd/tstclnt/tstclnt.c:687:8: branch_true: following ‘true’ branch...
nss-3.117/nss/cmd/tstclnt/tstclnt.c:692:14: branch_true: ...to here
nss-3.117/nss/cmd/tstclnt/tstclnt.c:692:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/tstclnt/tstclnt.c:702:16: branch_false: ...to here
nss-3.117/nss/cmd/tstclnt/tstclnt.c:703:12: branch_false: following ‘false’ branch...
nss-3.117/nss/cmd/tstclnt/tstclnt.c:707:15: branch_false: ...to here
nss-3.117/nss/cmd/tstclnt/tstclnt.c:719:9: call_function: calling ‘verifyFromSideChannel’ from ‘ownAuthCertificate’
#  501|           CERT_REV_MI_REQUIRE_SOME_FRESH_INFO_AVAILABLE;
#  502|   
#  503|->     rev.chainTests = revTestsDoNotCheck;
#  504|       rev.leafTests = revTestsDoNotCheck;
#  505|   

Error: CPPCHECK_WARNING (CWE-457): [#def494]
nss-3.117/nss/cmd/tstclnt/tstclnt.c:554: error[uninitvar]: Uninitialized variable: revTestsOverallHardFail.preferred_methods
#  552|           revTestsOverallHardFail.cert_rev_flags_per_method = methodFlagsCheckHardFail;
#  553|       }
#  554|->     rev.leafTests = revTestsOverallHardFail;
#  555|       rev.chainTests =
#  556|           sca->requireDataForIntermediates ? revTestsOverallHardFail : revTestsDoNotCheck;

Error: GCC_ANALYZER_WARNING: [#def495]
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:356:26: warning[-Wanalyzer-fd-use-without-check]: ‘read’ on possibly invalid file descriptor ‘open(name, 0)’
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:218:8: branch_false: following ‘false’ branch...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:221:17: branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:222:8: branch_false: following ‘false’ branch...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:226:8: branch_false: following ‘false’ branch (when ‘onlydir == 0’)...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:229:8: branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:229:8: branch_true: following ‘true’ branch (when ‘cwd’ is NULL)...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:230:15: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:231:12: branch_false: following ‘false’ branch (when ‘cwd’ is non-NULL)...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:236:5: branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:245:11: branch_false: following ‘false’ branch (when ‘owner’ is NULL)...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:246:11: branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:246:11: branch_false: following ‘false’ branch (when ‘group’ is NULL)...
 branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:248:12: branch_true: following ‘true’ branch (when ‘argc != 0’)...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:249:19: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:340:22: acquire_resource: opened here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:341:16: branch_true: following ‘true’ branch...
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:342:17: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/nsinstall.c:356:26: danger: ‘open(name, 0)’ could be invalid: unchecked value from [(17)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/16)
#  354|   
#  355|   	    bp = buf;
#  356|-> 	    while ((cc = read(fromfd, bp, sizeof buf)) > 0) {
#  357|   		while ((wc = write(tofd, bp, cc)) > 0) {
#  358|   		    if ((cc -= wc) == 0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def496]
nss-3.117/nss/coreconf/nsinstall/pathsub.c:87:20: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir("..")’
nss-3.117/nss/coreconf/nsinstall/pathsub.c:83:10: acquire_memory: allocated here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:84:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:87:20: danger: ‘opendir("..")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   85|   	fail("cannot read parent directory");
#   86|       for (;;) {
#   87|-> 	if (!(ep = readdir(dp)))
#   88|   	    fail("cannot find current directory");
#   89|   	if (ep->d_ino == ino)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def497]
nss-3.117/nss/coreconf/nsinstall/pathsub.c:93:5: warning[-Wanalyzer-malloc-leak]: leak of ‘xstrdup(&*<unknown>.d_name)’
nss-3.117/nss/coreconf/nsinstall/pathsub.c:179:1: enter_function: entry to ‘reversepath’
nss-3.117/nss/coreconf/nsinstall/pathsub.c:187:19: call_function: calling ‘getcomponent’ from ‘reversepath’
nss-3.117/nss/coreconf/nsinstall/pathsub.c:187:19: return_function: returning to ‘reversepath’ from ‘getcomponent’
nss-3.117/nss/coreconf/nsinstall/pathsub.c:187:12: branch_true: following ‘true’ branch...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:188:13: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:188:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:190:13: branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:190:12: branch_true: following ‘true’ branch (when the strings are equal)...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:191:17: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:191:16: branch_false: following ‘false’ branch...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:193:29: branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:193:20: call_function: calling ‘ino2name’ from ‘reversepath’
#   91|       }
#   92|       name = xstrdup(ep->d_name);
#   93|->     closedir(dp);
#   94|       return name;
#   95|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def498]
nss-3.117/nss/coreconf/nsinstall/pathsub.c:226:13: warning[-Wanalyzer-malloc-leak]: leak of ‘myPath’
nss-3.117/nss/coreconf/nsinstall/pathsub.c:218:8: branch_false: following ‘false’ branch...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:220:14: acquire_memory: allocated here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:221:8: branch_false: following ‘false’ branch (when ‘myPath’ is non-NULL)...
 branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:225:12: branch_true: following ‘true’ branch (when ‘rv < 0’)...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:226:13: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:226:13: danger: ‘myPath’ leaks here; was allocated at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#  224|       	rv = lstat(myPath, &sb);
#  225|   	if (rv < 0) {
#  226|-> 	    perror(myPath);
#  227|   	} else if (S_ISLNK(sb.st_mode)) {
#  228|   	    rv = readlink(myPath, buf, sizeof(buf) - 1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def499]
nss-3.117/nss/coreconf/nsinstall/pathsub.c:230:17: warning[-Wanalyzer-malloc-leak]: leak of ‘myPath’
nss-3.117/nss/coreconf/nsinstall/pathsub.c:218:8: branch_false: following ‘false’ branch...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:220:14: acquire_memory: allocated here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:221:8: branch_false: following ‘false’ branch (when ‘myPath’ is non-NULL)...
 branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:225:12: branch_false: following ‘false’ branch (when ‘rv >= 0’)...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:227:20: branch_false: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:227:19: branch_true: following ‘true’ branch...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:228:18: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:229:16: branch_true: following ‘true’ branch (when ‘rv < 0’)...
nss-3.117/nss/coreconf/nsinstall/pathsub.c:230:17: branch_true: ...to here
nss-3.117/nss/coreconf/nsinstall/pathsub.c:230:17: danger: ‘myPath’ leaks here; was allocated at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#  228|   	    rv = readlink(myPath, buf, sizeof(buf) - 1);
#  229|   	    if (rv < 0) {
#  230|-> 	    	perror("readlink");
#  231|   		buf[0] = 0;
#  232|   	    } else {

Error: CPPCHECK_WARNING (CWE-562): [#def500]
nss-3.117/nss/gtests/google_test/gtest/include/gtest/gtest-matchers.h:734: error[returnReference]: Reference to local variable returned.
#  732|     template <typename T>
#  733|     static const T& Unwrap(std::reference_wrapper<T> v) {
#  734|->     return v;
#  735|     }
#  736|   

Error: CPPCHECK_WARNING (CWE-664): [#def501]
nss-3.117/nss/gtests/google_test/gtest/include/gtest/internal/gtest-param-util.h:151: error[mismatchingContainers]: Iterators of different containers 'impl_' and 'other.impl_' are used together.
#  149|     }
#  150|     bool operator==(const ParamIterator& other) const {
#  151|->     return impl_.get() == other.impl_.get() || impl_->Equals(*other.impl_);
#  152|     }
#  153|     bool operator!=(const ParamIterator& other) const {

Error: CPPCHECK_WARNING (CWE-457): [#def502]
nss-3.117/nss/gtests/pk11_gtest/pk11_hpke_unittest.cc:285: warning[uninitvar]: Uninitialized variable: exp.len
#  283|           }
#  284|         }
#  285|->       all.push_back(exp);
#  286|       }
#  287|   

Error: CPPCHECK_WARNING (CWE-562): [#def503]
nss-3.117/nss/gtests/ssl_gtest/tls_agent.h:310: error[danglingLifetime]: Non-local variable 'handshake_callback_' will use lambda that captures local variable 'step'.
#  308|   
#  309|     void SetHandshakeCallback(HandshakeCallbackFunction handshake_callback) {
#  310|->     handshake_callback_ = handshake_callback;
#  311|     }
#  312|   

Error: CPPCHECK_WARNING (CWE-562): [#def504]
nss-3.117/nss/gtests/ssl_gtest/tls_agent.h:315: error[danglingLifetime]: Non-local variable 'auth_certificate_callback_' will use lambda that captures local variable 'called'.
#  313|     void SetAuthCertificateCallback(
#  314|         AuthCertificateCallbackFunction auth_certificate_callback) {
#  315|->     auth_certificate_callback_ = auth_certificate_callback;
#  316|     }
#  317|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def505]
nss-3.117/nss/lib/certdb/crl.c:2325:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dpcache’
nss-3.117/nss/lib/certdb/crl.c:2365:1: enter_function: entry to ‘cert_CheckCertRevocationStatus’
nss-3.117/nss/lib/certdb/crl.c:2372:17: release_memory: ‘dpcache’ is NULL
nss-3.117/nss/lib/certdb/crl.c:2378:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/certdb/crl.c:2383:8: branch_false: ...to here
nss-3.117/nss/lib/certdb/crl.c:2399:10: call_function: calling ‘AcquireDPCache’ from ‘cert_CheckCertRevocationStatus’
# 2323|       if (PR_FALSE == *writeLocked) {
# 2324|   #ifdef DPC_RWLOCK
# 2325|->         NSSRWLock_LockRead((*dpcache)->lock);
# 2326|   #else
# 2327|           PR_Lock((*dpcache)->lock);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def506]
nss-3.117/nss/lib/certhigh/ocsp.c:2242:27: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
nss-3.117/nss/lib/certhigh/ocsp.c:2232:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/certhigh/ocsp.c:2236:19: branch_false: ...to here
nss-3.117/nss/lib/certhigh/ocsp.c:2238:8: branch_true: following ‘true’ branch (when ‘count != 1’)...
nss-3.117/nss/lib/certhigh/ocsp.c:2239:9: branch_true: ...to here
nss-3.117/nss/lib/certhigh/ocsp.c:2239:9: acquire_resource: ‘va_start’ called here
nss-3.117/nss/lib/certhigh/ocsp.c:2240:16: branch_true: following ‘true’ branch (when ‘i < count’)...
nss-3.117/nss/lib/certhigh/ocsp.c:2241:13: branch_true: ...to here
nss-3.117/nss/lib/certhigh/ocsp.c:2242:27: danger: missing call to ‘va_end’ to match ‘va_start’ at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
# 2240|           for (; i < count; i++) {
# 2241|               responseType = va_arg(ap, SECOidTag);
# 2242|->             responseOid = SECOID_FindOIDByTag(responseType);
# 2243|               acceptableResponses[i] = &(responseOid->oid);
# 2244|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def507]
nss-3.117/nss/lib/certhigh/ocsp.c:5891:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘statusContext’
nss-3.117/nss/lib/certhigh/ocsp.c:5832:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/certhigh/ocsp.c:5863:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/certhigh/ocsp.c:5868:21: branch_false: ...to here
nss-3.117/nss/lib/certhigh/ocsp.c:5873:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/certhigh/ocsp.c:5874:14: branch_true: ...to here
nss-3.117/nss/lib/certhigh/ocsp.c:5875:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/certhigh/ocsp.c:5878:25: branch_false: ...to here
nss-3.117/nss/lib/certhigh/ocsp.c:5891:9: danger: dereference of NULL ‘statusContext’
# 5889|        * Get rid of old url and name if there.
# 5890|        */
# 5891|->     if (statusContext->defaultResponderNickname != NULL)
# 5892|           PORT_Free(statusContext->defaultResponderNickname);
# 5893|       if (statusContext->defaultResponderURI != NULL)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def508]
nss-3.117/nss/lib/crmf/crmfpop.c:360:38: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘privKeyTemplate’
nss-3.117/nss/lib/crmf/crmfpop.c:440:1: enter_function: entry to ‘crmf_add_privkey_dhmac’
nss-3.117/nss/lib/crmf/crmfpop.c:453:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/crmf/crmfpop.c:456:5: branch_false: ...to here
nss-3.117/nss/lib/crmf/crmfpop.c:461:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/crmf/crmfpop.c:464:5: branch_false: ...to here
nss-3.117/nss/lib/crmf/crmfpop.c:467:10: call_function: inlined call to ‘crmf_get_template_for_privkey’ from ‘crmf_add_privkey_dhmac’
nss-3.117/nss/lib/crmf/crmfpop.c:467:10: call_function: calling ‘crmf_encode_popoprivkey’ from ‘crmf_add_privkey_dhmac’
#  358|        * most tag myself. -javi
#  359|        */
#  360|->     derTemp.data[0] = (unsigned char)privKeyTemplate->kind;
#  361|       derTemp.data[1] = (unsigned char)derTemp.len;
#  362|       derTemp.len += 2;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def509]
nss-3.117/nss/lib/dev/devtoken.c:304:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&staticObjects’
nss-3.117/nss/lib/dev/devtoken.c:665:1: enter_function: entry to ‘nssToken_FindCertificatesByEmail’
nss-3.117/nss/lib/dev/devtoken.c:688:15: call_function: calling ‘find_objects’ from ‘nssToken_FindCertificatesByEmail’
#  302|               objectHandles = nss_ZNEWARRAY(NULL, CK_OBJECT_HANDLE, arraySize);
#  303|               if (objectHandles) {
#  304|->                 PORT_Memcpy(objectHandles, staticObjects,
#  305|                               OBJECT_STACK_SIZE * sizeof(objectHandles[1]));
#  306|               }

Error: COMPILER_WARNING: [#def510]
nss-3.117/nss/lib/freebl/aes-x86.c:28:5: note[note]: called from here
#   26|       pre_align __m128i tmp post_align;
#   27|       keySchedule[0] = _mm_loadu_si128((__m128i *)key);
#   28|->     EXPAND_KEY128(keySchedule[0], 0x01, keySchedule[1]);
#   29|       EXPAND_KEY128(keySchedule[1], 0x02, keySchedule[2]);
#   30|       EXPAND_KEY128(keySchedule[2], 0x04, keySchedule[3]);

Error: COMPILER_WARNING: [#def511]
nss-3.117/nss/lib/freebl/aes-x86.c:29:5: note[note]: called from here
#   27|       keySchedule[0] = _mm_loadu_si128((__m128i *)key);
#   28|       EXPAND_KEY128(keySchedule[0], 0x01, keySchedule[1]);
#   29|->     EXPAND_KEY128(keySchedule[1], 0x02, keySchedule[2]);
#   30|       EXPAND_KEY128(keySchedule[2], 0x04, keySchedule[3]);
#   31|       EXPAND_KEY128(keySchedule[3], 0x08, keySchedule[4]);

Error: COMPILER_WARNING: [#def512]
nss-3.117/nss/lib/freebl/aes-x86.c:30:5: note[note]: called from here
#   28|       EXPAND_KEY128(keySchedule[0], 0x01, keySchedule[1]);
#   29|       EXPAND_KEY128(keySchedule[1], 0x02, keySchedule[2]);
#   30|->     EXPAND_KEY128(keySchedule[2], 0x04, keySchedule[3]);
#   31|       EXPAND_KEY128(keySchedule[3], 0x08, keySchedule[4]);
#   32|       EXPAND_KEY128(keySchedule[4], 0x10, keySchedule[5]);

Error: COMPILER_WARNING: [#def513]
nss-3.117/nss/lib/freebl/aes-x86.c:31:5: note[note]: called from here
#   29|       EXPAND_KEY128(keySchedule[1], 0x02, keySchedule[2]);
#   30|       EXPAND_KEY128(keySchedule[2], 0x04, keySchedule[3]);
#   31|->     EXPAND_KEY128(keySchedule[3], 0x08, keySchedule[4]);
#   32|       EXPAND_KEY128(keySchedule[4], 0x10, keySchedule[5]);
#   33|       EXPAND_KEY128(keySchedule[5], 0x20, keySchedule[6]);

Error: COMPILER_WARNING: [#def514]
nss-3.117/nss/lib/freebl/aes-x86.c:32:5: note[note]: called from here
#   30|       EXPAND_KEY128(keySchedule[2], 0x04, keySchedule[3]);
#   31|       EXPAND_KEY128(keySchedule[3], 0x08, keySchedule[4]);
#   32|->     EXPAND_KEY128(keySchedule[4], 0x10, keySchedule[5]);
#   33|       EXPAND_KEY128(keySchedule[5], 0x20, keySchedule[6]);
#   34|       EXPAND_KEY128(keySchedule[6], 0x40, keySchedule[7]);

Error: COMPILER_WARNING: [#def515]
nss-3.117/nss/lib/freebl/aes-x86.c:33:5: note[note]: called from here
#   31|       EXPAND_KEY128(keySchedule[3], 0x08, keySchedule[4]);
#   32|       EXPAND_KEY128(keySchedule[4], 0x10, keySchedule[5]);
#   33|->     EXPAND_KEY128(keySchedule[5], 0x20, keySchedule[6]);
#   34|       EXPAND_KEY128(keySchedule[6], 0x40, keySchedule[7]);
#   35|       EXPAND_KEY128(keySchedule[7], 0x80, keySchedule[8]);

Error: COMPILER_WARNING: [#def516]
nss-3.117/nss/lib/freebl/aes-x86.c:34:5: note[note]: called from here
#   32|       EXPAND_KEY128(keySchedule[4], 0x10, keySchedule[5]);
#   33|       EXPAND_KEY128(keySchedule[5], 0x20, keySchedule[6]);
#   34|->     EXPAND_KEY128(keySchedule[6], 0x40, keySchedule[7]);
#   35|       EXPAND_KEY128(keySchedule[7], 0x80, keySchedule[8]);
#   36|       EXPAND_KEY128(keySchedule[8], 0x1B, keySchedule[9]);

Error: COMPILER_WARNING: [#def517]
nss-3.117/nss/lib/freebl/aes-x86.c:35:5: note[note]: called from here
#   33|       EXPAND_KEY128(keySchedule[5], 0x20, keySchedule[6]);
#   34|       EXPAND_KEY128(keySchedule[6], 0x40, keySchedule[7]);
#   35|->     EXPAND_KEY128(keySchedule[7], 0x80, keySchedule[8]);
#   36|       EXPAND_KEY128(keySchedule[8], 0x1B, keySchedule[9]);
#   37|       EXPAND_KEY128(keySchedule[9], 0x36, keySchedule[10]);

Error: COMPILER_WARNING: [#def518]
nss-3.117/nss/lib/freebl/aes-x86.c:36:5: note[note]: called from here
#   34|       EXPAND_KEY128(keySchedule[6], 0x40, keySchedule[7]);
#   35|       EXPAND_KEY128(keySchedule[7], 0x80, keySchedule[8]);
#   36|->     EXPAND_KEY128(keySchedule[8], 0x1B, keySchedule[9]);
#   37|       EXPAND_KEY128(keySchedule[9], 0x36, keySchedule[10]);
#   38|   }

Error: COMPILER_WARNING: [#def519]
nss-3.117/nss/lib/freebl/aes-x86.c:37:5: note[note]: called from here
#   35|       EXPAND_KEY128(keySchedule[7], 0x80, keySchedule[8]);
#   36|       EXPAND_KEY128(keySchedule[8], 0x1B, keySchedule[9]);
#   37|->     EXPAND_KEY128(keySchedule[9], 0x36, keySchedule[10]);
#   38|   }
#   39|   

Error: CPPCHECK_WARNING (CWE-758): [#def520]
nss-3.117/nss/lib/freebl/aeskeywrap.c:600: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  598|       /* verify ICV magic */
#  599|       magic = decode_PRUint32_BE(iv);
#  600|->     good = PORT_CT_EQ(magic, AES_KEY_WRAP_ICV2_INT32);
#  601|       /* fetch and verify plain text length */
#  602|       outLen = decode_PRUint32_BE(iv + AES_KEY_WRAP_ICV2_LEN);

Error: CPPCHECK_WARNING (CWE-758): [#def521]
nss-3.117/nss/lib/freebl/aeskeywrap.c:603: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  601|       /* fetch and verify plain text length */
#  602|       outLen = decode_PRUint32_BE(iv + AES_KEY_WRAP_ICV2_LEN);
#  603|->     good &= PORT_CT_LE(outLen, paddedLen);
#  604|       /* now verify the padding */
#  605|       padLen = paddedLen - outLen;

Error: CPPCHECK_WARNING (CWE-758): [#def522]
nss-3.117/nss/lib/freebl/aeskeywrap.c:607: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  605|       padLen = paddedLen - outLen;
#  606|       padLen2 = BLOCK_PAD_POWER2(outLen, AES_KEY_WRAP_BLOCK_SIZE);
#  607|->     good &= PORT_CT_EQ(padLen, padLen2);
#  608|       for (i = 0; i < AES_KEY_WRAP_BLOCK_SIZE; i++) {
#  609|           unsigned int doTest = PORT_CT_GT(padLen, i);

Error: CPPCHECK_WARNING (CWE-758): [#def523]
nss-3.117/nss/lib/freebl/aeskeywrap.c:609: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  607|       good &= PORT_CT_EQ(padLen, padLen2);
#  608|       for (i = 0; i < AES_KEY_WRAP_BLOCK_SIZE; i++) {
#  609|->         unsigned int doTest = PORT_CT_GT(padLen, i);
#  610|           unsigned int result = PORT_CT_ZERO(newBuf[paddedLen - i - 1]);
#  611|           good &= PORT_CT_SEL(doTest, result, PORT_CT_TRUE);

Error: CPPCHECK_WARNING (CWE-758): [#def524]
nss-3.117/nss/lib/freebl/aeskeywrap.c:610: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  608|       for (i = 0; i < AES_KEY_WRAP_BLOCK_SIZE; i++) {
#  609|           unsigned int doTest = PORT_CT_GT(padLen, i);
#  610|->         unsigned int result = PORT_CT_ZERO(newBuf[paddedLen - i - 1]);
#  611|           good &= PORT_CT_SEL(doTest, result, PORT_CT_TRUE);
#  612|       }

Error: GCC_ANALYZER_WARNING (CWE-121): [#def525]
nss-3.117/nss/lib/freebl/aeskeywrap.c:610:31: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
nss-3.117/nss/lib/freebl/aeskeywrap.c:547:1: enter_function: entry to ‘AESKeyWrap_DecryptKWP’
nss-3.117/nss/lib/freebl/aeskeywrap.c:565:8: branch_true: following ‘true’ branch (when ‘inputLen == 16’)...
nss-3.117/nss/lib/freebl/aeskeywrap.c:566:14: branch_true: ...to here
nss-3.117/nss/lib/freebl/aeskeywrap.c:588:8: branch_false: following ‘false’ branch (when ‘rv == 0’)...
nss-3.117/nss/lib/freebl/aeskeywrap.c:592:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/aeskeywrap.c:592:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/aeskeywrap.c:599:13: call_function: inlined call to ‘decode_PRUint32_BE’ from ‘AESKeyWrap_DecryptKWP’
nss-3.117/nss/lib/freebl/aeskeywrap.c:602:14: call_function: inlined call to ‘decode_PRUint32_BE’ from ‘AESKeyWrap_DecryptKWP’
nss-3.117/nss/lib/freebl/aeskeywrap.c:608:17: branch_true: following ‘true’ branch (when ‘i != 8’)...
nss-3.117/nss/lib/freebl/aeskeywrap.c:609:31: branch_true: ...to here
nss-3.117/nss/lib/freebl/aeskeywrap.c:610:31: danger: read of 1 byte at offset ‘(long int)(sizetype)(inputLen + 4294967287) + 8’ exceeds ‘iv’
#  608|       for (i = 0; i < AES_KEY_WRAP_BLOCK_SIZE; i++) {
#  609|           unsigned int doTest = PORT_CT_GT(padLen, i);
#  610|->         unsigned int result = PORT_CT_ZERO(newBuf[paddedLen - i - 1]);
#  611|           good &= PORT_CT_SEL(doTest, result, PORT_CT_TRUE);
#  612|       }

Error: COMPILER_WARNING: [#def526]
nss-3.117/nss/lib/freebl/gcm-x86.c:61:13: note[note]: called from here
#   59|   
#   60|           /* Do binary mult ghash->X = Ci * ghash->H. */
#   61|->         C = _mm_clmulepi64_si128(Ci, ghash->h, 0x00);
#   62|           D = _mm_clmulepi64_si128(Ci, ghash->h, 0x11);
#   63|           E = _mm_clmulepi64_si128(Ci, ghash->h, 0x01);

Error: COMPILER_WARNING: [#def527]
nss-3.117/nss/lib/freebl/gcm-x86.c:62:13: note[note]: called from here
#   60|           /* Do binary mult ghash->X = Ci * ghash->H. */
#   61|           C = _mm_clmulepi64_si128(Ci, ghash->h, 0x00);
#   62|->         D = _mm_clmulepi64_si128(Ci, ghash->h, 0x11);
#   63|           E = _mm_clmulepi64_si128(Ci, ghash->h, 0x01);
#   64|           F = _mm_clmulepi64_si128(Ci, ghash->h, 0x10);

Error: COMPILER_WARNING: [#def528]
nss-3.117/nss/lib/freebl/gcm-x86.c:63:13: note[note]: called from here
#   61|           C = _mm_clmulepi64_si128(Ci, ghash->h, 0x00);
#   62|           D = _mm_clmulepi64_si128(Ci, ghash->h, 0x11);
#   63|->         E = _mm_clmulepi64_si128(Ci, ghash->h, 0x01);
#   64|           F = _mm_clmulepi64_si128(Ci, ghash->h, 0x10);
#   65|           tmp = _mm_xor_si128(E, F);

Error: COMPILER_WARNING: [#def529]
nss-3.117/nss/lib/freebl/gcm-x86.c:64:13: note[note]: called from here
#   62|           D = _mm_clmulepi64_si128(Ci, ghash->h, 0x11);
#   63|           E = _mm_clmulepi64_si128(Ci, ghash->h, 0x01);
#   64|->         F = _mm_clmulepi64_si128(Ci, ghash->h, 0x10);
#   65|           tmp = _mm_xor_si128(E, F);
#   66|           z_high = _mm_xor_si128(tmp, _mm_slli_si128(D, 8));

Error: GCC_ANALYZER_WARNING (CWE-688): [#def530]
nss-3.117/nss/lib/freebl/genload.c:37:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘resolved’ where non-null expected
nss-3.117/nss/lib/freebl/lowhash_vector.c:218:1: enter_function: entry to ‘NSSLOWHASH_Length’
nss-3.117/nss/lib/freebl/lowhash_vector.c:220:9: call_function: inlined call to ‘freebl_InitVector’ from ‘NSSLOWHASH_Length’
#argument 1 of ‘__builtin_strcpy’ must be non-null
#   35|           return NULL;
#   36|       resolved = PR_Malloc(strlen(tmp) + 1);
#   37|->     strcpy(resolved, tmp); /* This is necessary because PR_Free might not be using free() */
#   38|       free(tmp);
#   39|       return resolved;

Error: CPPCHECK_WARNING (CWE-758): [#def531]
nss-3.117/nss/lib/freebl/hmacct.c:24: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   22|   constantTimeGE(unsigned int a, unsigned int b)
#   23|   {
#   24|->     return PORT_CT_GE(a, b);
#   25|   }
#   26|   

Error: CPPCHECK_WARNING (CWE-758): [#def532]
nss-3.117/nss/lib/freebl/hmacct.c:31: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   29|   constantTimeEQ(unsigned char a, unsigned char b)
#   30|   {
#   31|->     return PORT_CT_EQ(a, b);
#   32|   }
#   33|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def533]
nss-3.117/nss/lib/freebl/kyber-pqcrystals-ref.c:444:20: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>[1]’
nss-3.117/nss/lib/freebl/kyber-pqcrystals-ref.c:2561:1: enter_function: entry to ‘pqcrystals_kyber768_ref_keypair’
nss-3.117/nss/lib/freebl/kyber-pqcrystals-ref.c:2567:5: call_function: calling ‘pqcrystals_kyber768_ref_keypair_derand’ from ‘pqcrystals_kyber768_ref_keypair’
#  442|       uint32_t r;
#  443|       r = (uint32_t)x[0];
#  444|->     r |= (uint32_t)x[1] << 8;
#  445|       r |= (uint32_t)x[2] << 16;
#  446|       r |= (uint32_t)x[3] << 24;

Error: CPPCHECK_WARNING (CWE-758): [#def534]
nss-3.117/nss/lib/freebl/mpi/mpi.c:1984: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1982|           /* Step 1: conditional swap. */
# 1983|           /* Set cond if delta > 0 and g is odd. */
# 1984|->         cond = (-delta >> (8 * sizeof(delta) - 1)) & DIGIT(&g, 0) & 1;
# 1985|           /* If cond is set replace (delta,f) with (-delta,-f). */
# 1986|           delta = (-cond & -delta) | ((cond - 1) & delta);

Error: CPPCHECK_WARNING (CWE-758): [#def535]
nss-3.117/nss/lib/freebl/mpi/mpi.c:2425: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 2423|           /* Step 1: conditional swap. */
# 2424|           /* Set cond if delta > 0 and g is odd. */
# 2425|->         cond = (-delta >> (8 * sizeof(delta) - 1)) & DIGIT(&g, 0) & 1;
# 2426|           /* If cond is set replace (delta,f,v) with (-delta,-f,-v). */
# 2427|           delta = (-cond & -delta) | ((cond - 1) & delta);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def536]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:216:16: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: call_function: calling ‘mpp_fermat’ from ‘mpp_make_prime_ext_random’
#  214|       mp_err res;
#  215|   
#  216|->     if ((res = mp_init(&base)) != MP_OKAY)
#  217|           return res;
#  218|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def537]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:219:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: call_function: calling ‘mpp_fermat’ from ‘mpp_make_prime_ext_random’
#  217|           return res;
#  218|   
#  219|->     mp_set(&base, w);
#  220|   
#  221|       if ((res = mp_init(&test)) != MP_OKAY)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def538]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:221:16: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: call_function: calling ‘mpp_fermat’ from ‘mpp_make_prime_ext_random’
#  219|       mp_set(&base, w);
#  220|   
#  221|->     if ((res = mp_init(&test)) != MP_OKAY)
#  222|           goto TEST;
#  223|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def539]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:225:16: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: call_function: calling ‘mpp_fermat’ from ‘mpp_make_prime_ext_random’
#  223|   
#  224|       /* Compute test = base^a (mod a) */
#  225|->     if ((res = mp_exptmod(&base, a, a, &test)) != MP_OKAY)
#  226|           goto CLEANUP;
#  227|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def540]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:228:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: call_function: calling ‘mpp_fermat’ from ‘mpp_make_prime_ext_random’
#  226|           goto CLEANUP;
#  227|   
#  228|->     if (mp_cmp(&base, &test) == 0)
#  229|           res = MP_YES;
#  230|       else

Error: GCC_ANALYZER_WARNING (CWE-401): [#def541]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:234:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: call_function: calling ‘mpp_fermat’ from ‘mpp_make_prime_ext_random’
#  232|   
#  233|   CLEANUP:
#  234|->     mp_clear(&test);
#  235|   TEST:
#  236|       mp_clear(&base);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def542]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:236:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:498:15: call_function: calling ‘mpp_fermat’ from ‘mpp_make_prime_ext_random’
#  234|       mp_clear(&test);
#  235|   TEST:
#  236|->     mp_clear(&base);
#  237|   
#  238|       return res;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def543]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:391:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
#  389|           mp_digit prime = primes[ix];
#  390|           mp_size i;
#  391|->         if ((res = mp_mod_d(trial, prime, &rem)) != MP_OKAY)
#  392|               return res;
#  393|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def544]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/4)
#  435|       MP_DIGITS(&trial) = 0;
#  436|       MP_DIGITS(&q) = 0;
#  437|->     MP_CHECKOK(mp_init(&trial));
#  438|       MP_CHECKOK(mp_init(&q));
#  439|       /* values originally taken from table 4.4,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def545]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/4)
#  436|       MP_DIGITS(&q) = 0;
#  437|       MP_CHECKOK(mp_init(&trial));
#  438|->     MP_CHECKOK(mp_init(&q));
#  439|       /* values originally taken from table 4.4,
#  440|        * HandBook of Applied Cryptography, augmented by FIPS-186

Error: GCC_ANALYZER_WARNING (CWE-401): [#def546]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/4)
#  468|       if (strong)
#  469|           --nBits;
#  470|->     MP_CHECKOK(mpl_set_bit(start, nBits - 1, 1));
#  471|       MP_CHECKOK(mpl_set_bit(start, 0, 1));
#  472|       for (i = mpl_significant_bits(start) - 1; i >= nBits; --i) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def547]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/4)
#  469|           --nBits;
#  470|       MP_CHECKOK(mpl_set_bit(start, nBits - 1, 1));
#  471|->     MP_CHECKOK(mpl_set_bit(start, 0, 1));
#  472|       for (i = mpl_significant_bits(start) - 1; i >= nBits; --i) {
#  473|           MP_CHECKOK(mpl_set_bit(start, i, 0));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def548]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/4)
#  470|       MP_CHECKOK(mpl_set_bit(start, nBits - 1, 1));
#  471|       MP_CHECKOK(mpl_set_bit(start, 0, 1));
#  472|->     for (i = mpl_significant_bits(start) - 1; i >= nBits; --i) {
#  473|           MP_CHECKOK(mpl_set_bit(start, i, 0));
#  474|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def549]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:473:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:47: branch_true: following ‘true’ branch (when ‘nBits <= i’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:473:9: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:473:9: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/4)
#  471|       MP_CHECKOK(mpl_set_bit(start, 0, 1));
#  472|       for (i = mpl_significant_bits(start) - 1; i >= nBits; --i) {
#  473|->         MP_CHECKOK(mpl_set_bit(start, i, 0));
#  474|       }
#  475|       /* start sieveing with prime value of 3. */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def550]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:419:1: enter_function: entry to ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:438:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:442:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:470:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:471:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:472:14: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: call_function: calling ‘mpp_sieve’ from ‘mpp_make_prime_ext_random’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: return_function: returning to ‘mpp_make_prime_ext_random’ from ‘mpp_sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:476:5: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:492:17: branch_true: following ‘true’ branch (when ‘i != 32768’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:18: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:493:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:495:9: danger: ‘sieve’ leaks here; was allocated at [(6)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/5)
#  493|           if (sieve[i]) /* this number is composite */
#  494|               continue;
#  495|->         MP_CHECKOK(mp_add_d(start, 2 * i, &trial));
#  496|           FPUTC('.', stderr);
#  497|           /* run a Fermat test */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def551]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:562:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:562:5: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/4)
#  560|           mp_exch(&trial, start);
#  561|   CLEANUP:
#  562|->     mp_clear(&trial);
#  563|       mp_clear(&q);
#  564|       if (sieve != NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def552]
nss-3.117/nss/lib/freebl/mpi/mpprime.c:563:5: warning[-Wanalyzer-malloc-leak]: leak of ‘sieve’
nss-3.117/nss/lib/freebl/mpi/mpprime.c:429:5: branch_false: following ‘false’ branch (when ‘start’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:430:5: branch_false: following ‘false’ branch (when ‘nBits > 16’)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:432:13: acquire_memory: allocated here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:433:5: branch_false: following ‘false’ branch (when ‘sieve’ is non-NULL)...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:435:5: branch_false: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/freebl/mpi/mpprime.c:437:5: branch_true: ...to here
nss-3.117/nss/lib/freebl/mpi/mpprime.c:563:5: danger: ‘sieve’ leaks here; was allocated at [(5)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/4)
#  561|   CLEANUP:
#  562|       mp_clear(&trial);
#  563|->     mp_clear(&q);
#  564|       if (sieve != NULL) {
#  565|           memset(sieve, 0, SIEVE_SIZE);

Error: GCC_ANALYZER_WARNING (CWE-126): [#def553]
nss-3.117/nss/lib/freebl/rsapkcs.c:1045:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
nss-3.117/nss/lib/freebl/rsapkcs.c:1071:1: enter_function: entry to ‘rsa_GetErrorLength’
nss-3.117/nss/lib/freebl/rsapkcs.c:1080:10: call_function: calling ‘rsa_HMACPrf’ from ‘rsa_GetErrorLength’
# 1043|               return rv;
# 1044|           }
# 1045|->         PORT_Memcpy(output, hmacLast, left);
# 1046|           PORT_SafeZero(hmacLast, sizeof(hmacLast));
# 1047|       }

Error: CPPCHECK_WARNING (CWE-758): [#def554]
nss-3.117/nss/lib/freebl/rsapkcs.c:1088: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1086|           int candidate = outp[0] << 8 | outp[1];
# 1087|           candidate = candidate & lengthMask;
# 1088|->         outLength = PORT_CT_SEL(PORT_CT_LT(candidate, maxLegalLen),
# 1089|                                   candidate, outLength);
# 1090|       }

Error: CPPCHECK_WARNING (CWE-758): [#def555]
nss-3.117/nss/lib/freebl/rsapkcs.c:1177: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1175|       rv = RSA_PrivateKeyOp(key, buffer, input);
# 1176|   
# 1177|->     fail = PORT_CT_NE(rv, SECSuccess);
# 1178|       fail |= PORT_CT_NE(buffer[0], RSA_BLOCK_FIRST_OCTET) | PORT_CT_NE(buffer[1], RSA_BlockPublic);
# 1179|   

Error: CPPCHECK_WARNING (CWE-758): [#def556]
nss-3.117/nss/lib/freebl/rsapkcs.c:1178: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1176|   
# 1177|       fail = PORT_CT_NE(rv, SECSuccess);
# 1178|->     fail |= PORT_CT_NE(buffer[0], RSA_BLOCK_FIRST_OCTET) | PORT_CT_NE(buffer[1], RSA_BlockPublic);
# 1179|   
# 1180|       /* There have to be at least 8 bytes of padding. */

Error: CPPCHECK_WARNING (CWE-758): [#def557]
nss-3.117/nss/lib/freebl/rsapkcs.c:1182: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1180|       /* There have to be at least 8 bytes of padding. */
# 1181|       for (i = 2; i < 10; i++) {
# 1182|->         fail |= PORT_CT_EQ(buffer[i], RSA_BLOCK_AFTER_PAD_OCTET);
# 1183|       }
# 1184|   

Error: CPPCHECK_WARNING (CWE-758): [#def558]
nss-3.117/nss/lib/freebl/rsapkcs.c:1187: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1185|       for (i = 10; i < modulusLen; i++) {
# 1186|           unsigned int newLen = modulusLen - i - 1;
# 1187|->         PRUint32 condition = PORT_CT_EQ(buffer[i], RSA_BLOCK_AFTER_PAD_OCTET) & PORT_CT_EQ(outLen, modulusLen);
# 1188|           outLen = PORT_CT_SEL(condition, newLen, outLen);
# 1189|       }

Error: CPPCHECK_WARNING (CWE-758): [#def559]
nss-3.117/nss/lib/freebl/rsapkcs.c:1191: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 1189|       }
# 1190|       // this can only happen if a zero wasn't found above
# 1191|->     fail |= PORT_CT_GE(outLen, modulusLen);
# 1192|   
# 1193|       outLen = PORT_CT_SEL(fail, errorLength, outLen);

Error: COMPILER_WARNING: [#def560]
nss-3.117/nss/lib/freebl/sha256-x86.c:98:5: note[note]: called from here
#   96|       w1 = h1;
#   97|   
#   98|->     ROUND(0, a, b, c, d)
#   99|       ROUND(1, b, c, d, a)
#  100|       ROUND(2, c, d, a, b)

Error: COMPILER_WARNING: [#def561]
nss-3.117/nss/lib/freebl/sha256-x86.c:99:5: note[note]: called from here
#   97|   
#   98|       ROUND(0, a, b, c, d)
#   99|->     ROUND(1, b, c, d, a)
#  100|       ROUND(2, c, d, a, b)
#  101|       ROUND(3, d, a, b, c)

Error: COMPILER_WARNING: [#def562]
nss-3.117/nss/lib/freebl/sha256-x86.c:100:5: note[note]: called from here
#   98|       ROUND(0, a, b, c, d)
#   99|       ROUND(1, b, c, d, a)
#  100|->     ROUND(2, c, d, a, b)
#  101|       ROUND(3, d, a, b, c)
#  102|       ROUND(4, a, b, c, d)

Error: COMPILER_WARNING: [#def563]
nss-3.117/nss/lib/freebl/sha256-x86.c:101:5: note[note]: called from here
#   99|       ROUND(1, b, c, d, a)
#  100|       ROUND(2, c, d, a, b)
#  101|->     ROUND(3, d, a, b, c)
#  102|       ROUND(4, a, b, c, d)
#  103|       ROUND(5, b, c, d, a)

Error: COMPILER_WARNING: [#def564]
nss-3.117/nss/lib/freebl/sha256-x86.c:102:5: note[note]: called from here
#  100|       ROUND(2, c, d, a, b)
#  101|       ROUND(3, d, a, b, c)
#  102|->     ROUND(4, a, b, c, d)
#  103|       ROUND(5, b, c, d, a)
#  104|       ROUND(6, c, d, a, b)

Error: COMPILER_WARNING: [#def565]
nss-3.117/nss/lib/freebl/sha256-x86.c:103:5: note[note]: called from here
#  101|       ROUND(3, d, a, b, c)
#  102|       ROUND(4, a, b, c, d)
#  103|->     ROUND(5, b, c, d, a)
#  104|       ROUND(6, c, d, a, b)
#  105|       ROUND(7, d, a, b, c)

Error: COMPILER_WARNING: [#def566]
nss-3.117/nss/lib/freebl/sha256-x86.c:104:5: note[note]: called from here
#  102|       ROUND(4, a, b, c, d)
#  103|       ROUND(5, b, c, d, a)
#  104|->     ROUND(6, c, d, a, b)
#  105|       ROUND(7, d, a, b, c)
#  106|       ROUND(8, a, b, c, d)

Error: COMPILER_WARNING: [#def567]
nss-3.117/nss/lib/freebl/sha256-x86.c:105:5: note[note]: called from here
#  103|       ROUND(5, b, c, d, a)
#  104|       ROUND(6, c, d, a, b)
#  105|->     ROUND(7, d, a, b, c)
#  106|       ROUND(8, a, b, c, d)
#  107|       ROUND(9, b, c, d, a)

Error: COMPILER_WARNING: [#def568]
nss-3.117/nss/lib/freebl/sha256-x86.c:106:5: note[note]: called from here
#  104|       ROUND(6, c, d, a, b)
#  105|       ROUND(7, d, a, b, c)
#  106|->     ROUND(8, a, b, c, d)
#  107|       ROUND(9, b, c, d, a)
#  108|       ROUND(10, c, d, a, b)

Error: COMPILER_WARNING: [#def569]
nss-3.117/nss/lib/freebl/sha256-x86.c:107:5: note[note]: called from here
#  105|       ROUND(7, d, a, b, c)
#  106|       ROUND(8, a, b, c, d)
#  107|->     ROUND(9, b, c, d, a)
#  108|       ROUND(10, c, d, a, b)
#  109|       ROUND(11, d, a, b, c)

Error: COMPILER_WARNING: [#def570]
nss-3.117/nss/lib/freebl/sha256-x86.c:108:5: note[note]: called from here
#  106|       ROUND(8, a, b, c, d)
#  107|       ROUND(9, b, c, d, a)
#  108|->     ROUND(10, c, d, a, b)
#  109|       ROUND(11, d, a, b, c)
#  110|       ROUND(12, a, b, c, d)

Error: COMPILER_WARNING: [#def571]
nss-3.117/nss/lib/freebl/sha256-x86.c:109:5: note[note]: called from here
#  107|       ROUND(9, b, c, d, a)
#  108|       ROUND(10, c, d, a, b)
#  109|->     ROUND(11, d, a, b, c)
#  110|       ROUND(12, a, b, c, d)
#  111|       ROUND(13, b, c, d, a)

Error: COMPILER_WARNING: [#def572]
nss-3.117/nss/lib/freebl/sha256-x86.c:110:5: note[note]: called from here
#  108|       ROUND(10, c, d, a, b)
#  109|       ROUND(11, d, a, b, c)
#  110|->     ROUND(12, a, b, c, d)
#  111|       ROUND(13, b, c, d, a)
#  112|       ROUND(14, c, d, a, b)

Error: COMPILER_WARNING: [#def573]
nss-3.117/nss/lib/freebl/sha256-x86.c:111:5: note[note]: called from here
#  109|       ROUND(11, d, a, b, c)
#  110|       ROUND(12, a, b, c, d)
#  111|->     ROUND(13, b, c, d, a)
#  112|       ROUND(14, c, d, a, b)
#  113|       ROUND(15, d, a, b, c)

Error: COMPILER_WARNING: [#def574]
nss-3.117/nss/lib/freebl/sha256-x86.c:112:5: note[note]: called from here
#  110|       ROUND(12, a, b, c, d)
#  111|       ROUND(13, b, c, d, a)
#  112|->     ROUND(14, c, d, a, b)
#  113|       ROUND(15, d, a, b, c)
#  114|   

Error: COMPILER_WARNING: [#def575]
nss-3.117/nss/lib/freebl/sha256-x86.c:113:5: note[note]: called from here
#  111|       ROUND(13, b, c, d, a)
#  112|       ROUND(14, c, d, a, b)
#  113|->     ROUND(15, d, a, b, c)
#  114|   
#  115|       h0 = _mm_add_epi32(h0, w0);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def576]
nss-3.117/nss/lib/freebl/stubs.c:267:5: warning[-Wanalyzer-malloc-leak]: leak of ‘mem’
nss-3.117/nss/lib/freebl/stubs.c:265:1: enter_function: entry to ‘PORT_ZAllocAlignedOffset_stub’
nss-3.117/nss/lib/freebl/stubs.c:267:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/stubs.c:268:8: branch_false: ...to here
nss-3.117/nss/lib/freebl/stubs.c:268:8: branch_false: following ‘false’ branch (when ‘offset <= size’)...
nss-3.117/nss/lib/freebl/stubs.c:272:11: branch_false: ...to here
nss-3.117/nss/lib/freebl/stubs.c:273:15: call_function: calling ‘PORT_ZAllocAligned_stub’ from ‘PORT_ZAllocAlignedOffset_stub’
nss-3.117/nss/lib/freebl/stubs.c:273:15: return_function: returning to ‘PORT_ZAllocAlignedOffset_stub’ from ‘PORT_ZAllocAligned_stub’
nss-3.117/nss/lib/freebl/stubs.c:274:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/lib/freebl/stubs.c:267:5: danger: ‘mem’ leaks here; was allocated at [(16)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/15)
#  265|   PORT_ZAllocAlignedOffset_stub(size_t size, size_t alignment, size_t offset)
#  266|   {
#  267|->     STUB_SAFE_CALL3(PORT_ZAllocAlignedOffset_Util, size, alignment, offset);
#  268|       if (offset > size) {
#  269|           return NULL;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def577]
nss-3.117/nss/lib/freebl/unix_urandom.c:82:8: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/urandom", 0)’
nss-3.117/nss/lib/freebl/unix_urandom.c:55:8: branch_false: following ‘false’ branch (when ‘fileBytes != maxLen’)...
nss-3.117/nss/lib/freebl/unix_urandom.c:60:9: branch_false: ...to here
nss-3.117/nss/lib/freebl/unix_urandom.c:60:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/freebl/unix_urandom.c:68:10: branch_false: ...to here
nss-3.117/nss/lib/freebl/unix_urandom.c:68:10: acquire_resource: opened here
nss-3.117/nss/lib/freebl/unix_urandom.c:69:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/freebl/unix_urandom.c:82:8: danger: ‘open("/dev/urandom", 0)’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   80|       }
#   81|       (void)close(fd);
#   82|->     if (fileBytes != maxLen) {
#   83|           PORT_SetError(SEC_ERROR_NEED_RANDOM);
#   84|           return 0;

Error: COMPILER_WARNING: [#def578]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:54:50: note[note]: called from here
#   52|               KRML_PRE_ALIGN(32)
#   53|               Lib_IntVector_Intrinsics_vec256 e[5U] KRML_POST_ALIGN(32) = { 0U };
#   54|->             Lib_IntVector_Intrinsics_vec256 lo = Lib_IntVector_Intrinsics_vec256_load64_le(block);
#   55|               Lib_IntVector_Intrinsics_vec256
#   56|                   hi = Lib_IntVector_Intrinsics_vec256_load64_le(block + (uint32_t)32U);

Error: COMPILER_WARNING: [#def579]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:56:22: note[note]: called from here
#   54|               Lib_IntVector_Intrinsics_vec256 lo = Lib_IntVector_Intrinsics_vec256_load64_le(block);
#   55|               Lib_IntVector_Intrinsics_vec256
#   56|->                 hi = Lib_IntVector_Intrinsics_vec256_load64_le(block + (uint32_t)32U);
#   57|               Lib_IntVector_Intrinsics_vec256
#   58|                   mask260 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);

Error: COMPILER_WARNING: [#def580]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:58:27: note[note]: called from here
#   56|                   hi = Lib_IntVector_Intrinsics_vec256_load64_le(block + (uint32_t)32U);
#   57|               Lib_IntVector_Intrinsics_vec256
#   58|->                 mask260 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#   59|               Lib_IntVector_Intrinsics_vec256
#   60|                   m0 = Lib_IntVector_Intrinsics_vec256_interleave_low128(lo, hi);

Error: COMPILER_WARNING: [#def581]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:60:22: note[note]: called from here
#   58|                   mask260 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#   59|               Lib_IntVector_Intrinsics_vec256
#   60|->                 m0 = Lib_IntVector_Intrinsics_vec256_interleave_low128(lo, hi);
#   61|               Lib_IntVector_Intrinsics_vec256
#   62|                   m1 = Lib_IntVector_Intrinsics_vec256_interleave_high128(lo, hi);

Error: COMPILER_WARNING: [#def582]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:62:22: note[note]: called from here
#   60|                   m0 = Lib_IntVector_Intrinsics_vec256_interleave_low128(lo, hi);
#   61|               Lib_IntVector_Intrinsics_vec256
#   62|->                 m1 = Lib_IntVector_Intrinsics_vec256_interleave_high128(lo, hi);
#   63|               Lib_IntVector_Intrinsics_vec256
#   64|                   m2 = Lib_IntVector_Intrinsics_vec256_shift_right(m0, (uint32_t)48U);

Error: COMPILER_WARNING: [#def583]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:64:22: note[note]: called from here
#   62|                   m1 = Lib_IntVector_Intrinsics_vec256_interleave_high128(lo, hi);
#   63|               Lib_IntVector_Intrinsics_vec256
#   64|->                 m2 = Lib_IntVector_Intrinsics_vec256_shift_right(m0, (uint32_t)48U);
#   65|               Lib_IntVector_Intrinsics_vec256
#   66|                   m3 = Lib_IntVector_Intrinsics_vec256_shift_right(m1, (uint32_t)48U);

Error: COMPILER_WARNING: [#def584]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:66:22: note[note]: called from here
#   64|                   m2 = Lib_IntVector_Intrinsics_vec256_shift_right(m0, (uint32_t)48U);
#   65|               Lib_IntVector_Intrinsics_vec256
#   66|->                 m3 = Lib_IntVector_Intrinsics_vec256_shift_right(m1, (uint32_t)48U);
#   67|               Lib_IntVector_Intrinsics_vec256
#   68|                   m4 = Lib_IntVector_Intrinsics_vec256_interleave_high64(m0, m1);

Error: COMPILER_WARNING: [#def585]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:68:22: note[note]: called from here
#   66|                   m3 = Lib_IntVector_Intrinsics_vec256_shift_right(m1, (uint32_t)48U);
#   67|               Lib_IntVector_Intrinsics_vec256
#   68|->                 m4 = Lib_IntVector_Intrinsics_vec256_interleave_high64(m0, m1);
#   69|               Lib_IntVector_Intrinsics_vec256
#   70|                   t010 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m0, m1);

Error: COMPILER_WARNING: [#def586]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:70:24: note[note]: called from here
#   68|                   m4 = Lib_IntVector_Intrinsics_vec256_interleave_high64(m0, m1);
#   69|               Lib_IntVector_Intrinsics_vec256
#   70|->                 t010 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m0, m1);
#   71|               Lib_IntVector_Intrinsics_vec256
#   72|                   t30 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m2, m3);

Error: COMPILER_WARNING: [#def587]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:72:23: note[note]: called from here
#   70|                   t010 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m0, m1);
#   71|               Lib_IntVector_Intrinsics_vec256
#   72|->                 t30 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m2, m3);
#   73|               Lib_IntVector_Intrinsics_vec256
#   74|                   t20 = Lib_IntVector_Intrinsics_vec256_shift_right64(t30, (uint32_t)4U);

Error: COMPILER_WARNING: [#def588]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:74:23: note[note]: called from here
#   72|                   t30 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m2, m3);
#   73|               Lib_IntVector_Intrinsics_vec256
#   74|->                 t20 = Lib_IntVector_Intrinsics_vec256_shift_right64(t30, (uint32_t)4U);
#   75|               Lib_IntVector_Intrinsics_vec256 o20 = Lib_IntVector_Intrinsics_vec256_and(t20, mask260);
#   76|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def589]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:75:51: note[note]: called from here
#   73|               Lib_IntVector_Intrinsics_vec256
#   74|                   t20 = Lib_IntVector_Intrinsics_vec256_shift_right64(t30, (uint32_t)4U);
#   75|->             Lib_IntVector_Intrinsics_vec256 o20 = Lib_IntVector_Intrinsics_vec256_and(t20, mask260);
#   76|               Lib_IntVector_Intrinsics_vec256
#   77|                   t10 = Lib_IntVector_Intrinsics_vec256_shift_right64(t010, (uint32_t)26U);

Error: COMPILER_WARNING: [#def590]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:77:23: note[note]: called from here
#   75|               Lib_IntVector_Intrinsics_vec256 o20 = Lib_IntVector_Intrinsics_vec256_and(t20, mask260);
#   76|               Lib_IntVector_Intrinsics_vec256
#   77|->                 t10 = Lib_IntVector_Intrinsics_vec256_shift_right64(t010, (uint32_t)26U);
#   78|               Lib_IntVector_Intrinsics_vec256 o10 = Lib_IntVector_Intrinsics_vec256_and(t10, mask260);
#   79|               Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t010, mask260);

Error: COMPILER_WARNING: [#def591]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:78:51: note[note]: called from here
#   76|               Lib_IntVector_Intrinsics_vec256
#   77|                   t10 = Lib_IntVector_Intrinsics_vec256_shift_right64(t010, (uint32_t)26U);
#   78|->             Lib_IntVector_Intrinsics_vec256 o10 = Lib_IntVector_Intrinsics_vec256_and(t10, mask260);
#   79|               Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t010, mask260);
#   80|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def592]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:79:50: note[note]: called from here
#   77|                   t10 = Lib_IntVector_Intrinsics_vec256_shift_right64(t010, (uint32_t)26U);
#   78|               Lib_IntVector_Intrinsics_vec256 o10 = Lib_IntVector_Intrinsics_vec256_and(t10, mask260);
#   79|->             Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t010, mask260);
#   80|               Lib_IntVector_Intrinsics_vec256
#   81|                   t31 = Lib_IntVector_Intrinsics_vec256_shift_right64(t30, (uint32_t)30U);

Error: COMPILER_WARNING: [#def593]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:81:23: note[note]: called from here
#   79|               Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t010, mask260);
#   80|               Lib_IntVector_Intrinsics_vec256
#   81|->                 t31 = Lib_IntVector_Intrinsics_vec256_shift_right64(t30, (uint32_t)30U);
#   82|               Lib_IntVector_Intrinsics_vec256 o30 = Lib_IntVector_Intrinsics_vec256_and(t31, mask260);
#   83|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def594]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:82:51: note[note]: called from here
#   80|               Lib_IntVector_Intrinsics_vec256
#   81|                   t31 = Lib_IntVector_Intrinsics_vec256_shift_right64(t30, (uint32_t)30U);
#   82|->             Lib_IntVector_Intrinsics_vec256 o30 = Lib_IntVector_Intrinsics_vec256_and(t31, mask260);
#   83|               Lib_IntVector_Intrinsics_vec256
#   84|                   o40 = Lib_IntVector_Intrinsics_vec256_shift_right64(m4, (uint32_t)40U);

Error: COMPILER_WARNING: [#def595]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:84:23: note[note]: called from here
#   82|               Lib_IntVector_Intrinsics_vec256 o30 = Lib_IntVector_Intrinsics_vec256_and(t31, mask260);
#   83|               Lib_IntVector_Intrinsics_vec256
#   84|->                 o40 = Lib_IntVector_Intrinsics_vec256_shift_right64(m4, (uint32_t)40U);
#   85|               Lib_IntVector_Intrinsics_vec256 o00 = o5;
#   86|               Lib_IntVector_Intrinsics_vec256 o11 = o10;

Error: COMPILER_WARNING: [#def596]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:96:52: note[note]: called from here
#   94|               e[4U] = o41;
#   95|               uint64_t b = (uint64_t)0x1000000U;
#   96|->             Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#   97|               Lib_IntVector_Intrinsics_vec256 f4 = e[4U];
#   98|               e[4U] = Lib_IntVector_Intrinsics_vec256_or(f4, mask);

Error: COMPILER_WARNING: [#def597]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:98:21: note[note]: called from here
#   96|               Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#   97|               Lib_IntVector_Intrinsics_vec256 f4 = e[4U];
#   98|->             e[4U] = Lib_IntVector_Intrinsics_vec256_or(f4, mask);
#   99|               Lib_IntVector_Intrinsics_vec256 *rn = pre0 + (uint32_t)10U;
#  100|               Lib_IntVector_Intrinsics_vec256 *rn5 = pre0 + (uint32_t)15U;

Error: COMPILER_WARNING: [#def598]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:115:50: note[note]: called from here
#  113|               Lib_IntVector_Intrinsics_vec256 f130 = acc0[3U];
#  114|               Lib_IntVector_Intrinsics_vec256 f140 = acc0[4U];
#  115|->             Lib_IntVector_Intrinsics_vec256 a0 = Lib_IntVector_Intrinsics_vec256_mul64(r0, f10);
#  116|               Lib_IntVector_Intrinsics_vec256 a1 = Lib_IntVector_Intrinsics_vec256_mul64(r1, f10);
#  117|               Lib_IntVector_Intrinsics_vec256 a2 = Lib_IntVector_Intrinsics_vec256_mul64(r2, f10);

Error: COMPILER_WARNING: [#def599]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:116:50: note[note]: called from here
#  114|               Lib_IntVector_Intrinsics_vec256 f140 = acc0[4U];
#  115|               Lib_IntVector_Intrinsics_vec256 a0 = Lib_IntVector_Intrinsics_vec256_mul64(r0, f10);
#  116|->             Lib_IntVector_Intrinsics_vec256 a1 = Lib_IntVector_Intrinsics_vec256_mul64(r1, f10);
#  117|               Lib_IntVector_Intrinsics_vec256 a2 = Lib_IntVector_Intrinsics_vec256_mul64(r2, f10);
#  118|               Lib_IntVector_Intrinsics_vec256 a3 = Lib_IntVector_Intrinsics_vec256_mul64(r3, f10);

Error: COMPILER_WARNING: [#def600]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:117:50: note[note]: called from here
#  115|               Lib_IntVector_Intrinsics_vec256 a0 = Lib_IntVector_Intrinsics_vec256_mul64(r0, f10);
#  116|               Lib_IntVector_Intrinsics_vec256 a1 = Lib_IntVector_Intrinsics_vec256_mul64(r1, f10);
#  117|->             Lib_IntVector_Intrinsics_vec256 a2 = Lib_IntVector_Intrinsics_vec256_mul64(r2, f10);
#  118|               Lib_IntVector_Intrinsics_vec256 a3 = Lib_IntVector_Intrinsics_vec256_mul64(r3, f10);
#  119|               Lib_IntVector_Intrinsics_vec256 a4 = Lib_IntVector_Intrinsics_vec256_mul64(r4, f10);

Error: COMPILER_WARNING: [#def601]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:118:50: note[note]: called from here
#  116|               Lib_IntVector_Intrinsics_vec256 a1 = Lib_IntVector_Intrinsics_vec256_mul64(r1, f10);
#  117|               Lib_IntVector_Intrinsics_vec256 a2 = Lib_IntVector_Intrinsics_vec256_mul64(r2, f10);
#  118|->             Lib_IntVector_Intrinsics_vec256 a3 = Lib_IntVector_Intrinsics_vec256_mul64(r3, f10);
#  119|               Lib_IntVector_Intrinsics_vec256 a4 = Lib_IntVector_Intrinsics_vec256_mul64(r4, f10);
#  120|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def602]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:119:50: note[note]: called from here
#  117|               Lib_IntVector_Intrinsics_vec256 a2 = Lib_IntVector_Intrinsics_vec256_mul64(r2, f10);
#  118|               Lib_IntVector_Intrinsics_vec256 a3 = Lib_IntVector_Intrinsics_vec256_mul64(r3, f10);
#  119|->             Lib_IntVector_Intrinsics_vec256 a4 = Lib_IntVector_Intrinsics_vec256_mul64(r4, f10);
#  120|               Lib_IntVector_Intrinsics_vec256
#  121|                   a01 =

Error: COMPILER_WARNING: [#def603]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:122:21: note[note]: called from here
#  120|               Lib_IntVector_Intrinsics_vec256
#  121|                   a01 =
#  122|->                     Lib_IntVector_Intrinsics_vec256_add64(a0,
#  123|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r54, f110));
#  124|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def604]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:126:21: note[note]: called from here
#  124|               Lib_IntVector_Intrinsics_vec256
#  125|                   a11 =
#  126|->                     Lib_IntVector_Intrinsics_vec256_add64(a1,
#  127|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r0, f110));
#  128|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def605]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:130:21: note[note]: called from here
#  128|               Lib_IntVector_Intrinsics_vec256
#  129|                   a21 =
#  130|->                     Lib_IntVector_Intrinsics_vec256_add64(a2,
#  131|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r1, f110));
#  132|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def606]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:134:21: note[note]: called from here
#  132|               Lib_IntVector_Intrinsics_vec256
#  133|                   a31 =
#  134|->                     Lib_IntVector_Intrinsics_vec256_add64(a3,
#  135|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r2, f110));
#  136|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def607]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:138:21: note[note]: called from here
#  136|               Lib_IntVector_Intrinsics_vec256
#  137|                   a41 =
#  138|->                     Lib_IntVector_Intrinsics_vec256_add64(a4,
#  139|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r3, f110));
#  140|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def608]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:142:21: note[note]: called from here
#  140|               Lib_IntVector_Intrinsics_vec256
#  141|                   a02 =
#  142|->                     Lib_IntVector_Intrinsics_vec256_add64(a01,
#  143|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r53, f120));
#  144|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def609]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:146:21: note[note]: called from here
#  144|               Lib_IntVector_Intrinsics_vec256
#  145|                   a12 =
#  146|->                     Lib_IntVector_Intrinsics_vec256_add64(a11,
#  147|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r54, f120));
#  148|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def610]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:150:21: note[note]: called from here
#  148|               Lib_IntVector_Intrinsics_vec256
#  149|                   a22 =
#  150|->                     Lib_IntVector_Intrinsics_vec256_add64(a21,
#  151|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r0, f120));
#  152|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def611]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:154:21: note[note]: called from here
#  152|               Lib_IntVector_Intrinsics_vec256
#  153|                   a32 =
#  154|->                     Lib_IntVector_Intrinsics_vec256_add64(a31,
#  155|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r1, f120));
#  156|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def612]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:158:21: note[note]: called from here
#  156|               Lib_IntVector_Intrinsics_vec256
#  157|                   a42 =
#  158|->                     Lib_IntVector_Intrinsics_vec256_add64(a41,
#  159|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r2, f120));
#  160|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def613]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:162:21: note[note]: called from here
#  160|               Lib_IntVector_Intrinsics_vec256
#  161|                   a03 =
#  162|->                     Lib_IntVector_Intrinsics_vec256_add64(a02,
#  163|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r52, f130));
#  164|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def614]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:166:21: note[note]: called from here
#  164|               Lib_IntVector_Intrinsics_vec256
#  165|                   a13 =
#  166|->                     Lib_IntVector_Intrinsics_vec256_add64(a12,
#  167|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r53, f130));
#  168|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def615]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:170:21: note[note]: called from here
#  168|               Lib_IntVector_Intrinsics_vec256
#  169|                   a23 =
#  170|->                     Lib_IntVector_Intrinsics_vec256_add64(a22,
#  171|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r54, f130));
#  172|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def616]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:174:21: note[note]: called from here
#  172|               Lib_IntVector_Intrinsics_vec256
#  173|                   a33 =
#  174|->                     Lib_IntVector_Intrinsics_vec256_add64(a32,
#  175|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r0, f130));
#  176|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def617]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:178:21: note[note]: called from here
#  176|               Lib_IntVector_Intrinsics_vec256
#  177|                   a43 =
#  178|->                     Lib_IntVector_Intrinsics_vec256_add64(a42,
#  179|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r1, f130));
#  180|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def618]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:182:21: note[note]: called from here
#  180|               Lib_IntVector_Intrinsics_vec256
#  181|                   a04 =
#  182|->                     Lib_IntVector_Intrinsics_vec256_add64(a03,
#  183|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r51, f140));
#  184|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def619]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:186:21: note[note]: called from here
#  184|               Lib_IntVector_Intrinsics_vec256
#  185|                   a14 =
#  186|->                     Lib_IntVector_Intrinsics_vec256_add64(a13,
#  187|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r52, f140));
#  188|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def620]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:190:21: note[note]: called from here
#  188|               Lib_IntVector_Intrinsics_vec256
#  189|                   a24 =
#  190|->                     Lib_IntVector_Intrinsics_vec256_add64(a23,
#  191|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r53, f140));
#  192|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def621]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:194:21: note[note]: called from here
#  192|               Lib_IntVector_Intrinsics_vec256
#  193|                   a34 =
#  194|->                     Lib_IntVector_Intrinsics_vec256_add64(a33,
#  195|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r54, f140));
#  196|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def622]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:198:21: note[note]: called from here
#  196|               Lib_IntVector_Intrinsics_vec256
#  197|                   a44 =
#  198|->                     Lib_IntVector_Intrinsics_vec256_add64(a43,
#  199|                                                             Lib_IntVector_Intrinsics_vec256_mul64(r0, f140));
#  200|               Lib_IntVector_Intrinsics_vec256 t01 = a04;

Error: COMPILER_WARNING: [#def623]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:206:26: note[note]: called from here
#  204|               Lib_IntVector_Intrinsics_vec256 t4 = a44;
#  205|               Lib_IntVector_Intrinsics_vec256
#  206|->                 mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  207|               Lib_IntVector_Intrinsics_vec256
#  208|                   z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);

Error: COMPILER_WARNING: [#def624]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:208:22: note[note]: called from here
#  206|                   mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  207|               Lib_IntVector_Intrinsics_vec256
#  208|->                 z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);
#  209|               Lib_IntVector_Intrinsics_vec256
#  210|                   z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);

Error: COMPILER_WARNING: [#def625]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:210:22: note[note]: called from here
#  208|                   z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);
#  209|               Lib_IntVector_Intrinsics_vec256
#  210|->                 z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  211|               Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  212|               Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);

Error: COMPILER_WARNING: [#def626]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:211:50: note[note]: called from here
#  209|               Lib_IntVector_Intrinsics_vec256
#  210|                   z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  211|->             Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  212|               Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  213|               Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);

Error: COMPILER_WARNING: [#def627]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:212:50: note[note]: called from here
#  210|                   z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  211|               Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  212|->             Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  213|               Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);
#  214|               Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);

Error: COMPILER_WARNING: [#def628]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:213:50: note[note]: called from here
#  211|               Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  212|               Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  213|->             Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);
#  214|               Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  215|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def629]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:214:50: note[note]: called from here
#  212|               Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  213|               Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);
#  214|->             Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  215|               Lib_IntVector_Intrinsics_vec256
#  216|                   z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);

Error: COMPILER_WARNING: [#def630]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:216:23: note[note]: called from here
#  214|               Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  215|               Lib_IntVector_Intrinsics_vec256
#  216|->                 z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  217|               Lib_IntVector_Intrinsics_vec256
#  218|                   z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);

Error: COMPILER_WARNING: [#def631]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:218:23: note[note]: called from here
#  216|                   z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  217|               Lib_IntVector_Intrinsics_vec256
#  218|->                 z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  219|               Lib_IntVector_Intrinsics_vec256
#  220|                   t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);

Error: COMPILER_WARNING: [#def632]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:220:21: note[note]: called from here
#  218|                   z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  219|               Lib_IntVector_Intrinsics_vec256
#  220|->                 t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  221|               Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  222|               Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);

Error: COMPILER_WARNING: [#def633]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:221:51: note[note]: called from here
#  219|               Lib_IntVector_Intrinsics_vec256
#  220|                   t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  221|->             Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  222|               Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  223|               Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);

Error: COMPILER_WARNING: [#def634]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:222:51: note[note]: called from here
#  220|                   t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  221|               Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  222|->             Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  223|               Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  224|               Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);

Error: COMPILER_WARNING: [#def635]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:223:51: note[note]: called from here
#  221|               Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  222|               Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  223|->             Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  224|               Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  225|               Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);

Error: COMPILER_WARNING: [#def636]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:224:50: note[note]: called from here
#  222|               Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  223|               Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  224|->             Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  225|               Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  226|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def637]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:225:51: note[note]: called from here
#  223|               Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  224|               Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  225|->             Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  226|               Lib_IntVector_Intrinsics_vec256
#  227|                   z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);

Error: COMPILER_WARNING: [#def638]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:227:23: note[note]: called from here
#  225|               Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  226|               Lib_IntVector_Intrinsics_vec256
#  227|->                 z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  228|               Lib_IntVector_Intrinsics_vec256
#  229|                   z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);

Error: COMPILER_WARNING: [#def639]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:229:23: note[note]: called from here
#  227|                   z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  228|               Lib_IntVector_Intrinsics_vec256
#  229|->                 z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  230|               Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  231|               Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);

Error: COMPILER_WARNING: [#def640]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:230:51: note[note]: called from here
#  228|               Lib_IntVector_Intrinsics_vec256
#  229|                   z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  230|->             Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  231|               Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  232|               Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);

Error: COMPILER_WARNING: [#def641]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:231:51: note[note]: called from here
#  229|                   z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  230|               Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  231|->             Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  232|               Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  233|               Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);

Error: COMPILER_WARNING: [#def642]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:232:51: note[note]: called from here
#  230|               Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  231|               Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  232|->             Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  233|               Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  234|               Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def643]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:233:51: note[note]: called from here
#  231|               Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  232|               Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  233|->             Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  234|               Lib_IntVector_Intrinsics_vec256
#  235|                   z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);

Error: COMPILER_WARNING: [#def644]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:235:23: note[note]: called from here
#  233|               Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  234|               Lib_IntVector_Intrinsics_vec256
#  235|->                 z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  236|               Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  237|               Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);

Error: COMPILER_WARNING: [#def645]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:236:51: note[note]: called from here
#  234|               Lib_IntVector_Intrinsics_vec256
#  235|                   z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  236|->             Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  237|               Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  238|               Lib_IntVector_Intrinsics_vec256 o01 = x02;

Error: COMPILER_WARNING: [#def646]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:237:51: note[note]: called from here
#  235|                   z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  236|               Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  237|->             Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  238|               Lib_IntVector_Intrinsics_vec256 o01 = x02;
#  239|               Lib_IntVector_Intrinsics_vec256 o12 = x12;

Error: COMPILER_WARNING: [#def647]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:258:50: note[note]: called from here
#  256|               Lib_IntVector_Intrinsics_vec256 f23 = e[3U];
#  257|               Lib_IntVector_Intrinsics_vec256 f24 = e[4U];
#  258|->             Lib_IntVector_Intrinsics_vec256 o0 = Lib_IntVector_Intrinsics_vec256_add64(f100, f20);
#  259|               Lib_IntVector_Intrinsics_vec256 o1 = Lib_IntVector_Intrinsics_vec256_add64(f11, f21);
#  260|               Lib_IntVector_Intrinsics_vec256 o2 = Lib_IntVector_Intrinsics_vec256_add64(f12, f22);

Error: COMPILER_WARNING: [#def648]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:259:50: note[note]: called from here
#  257|               Lib_IntVector_Intrinsics_vec256 f24 = e[4U];
#  258|               Lib_IntVector_Intrinsics_vec256 o0 = Lib_IntVector_Intrinsics_vec256_add64(f100, f20);
#  259|->             Lib_IntVector_Intrinsics_vec256 o1 = Lib_IntVector_Intrinsics_vec256_add64(f11, f21);
#  260|               Lib_IntVector_Intrinsics_vec256 o2 = Lib_IntVector_Intrinsics_vec256_add64(f12, f22);
#  261|               Lib_IntVector_Intrinsics_vec256 o3 = Lib_IntVector_Intrinsics_vec256_add64(f13, f23);

Error: COMPILER_WARNING: [#def649]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:260:50: note[note]: called from here
#  258|               Lib_IntVector_Intrinsics_vec256 o0 = Lib_IntVector_Intrinsics_vec256_add64(f100, f20);
#  259|               Lib_IntVector_Intrinsics_vec256 o1 = Lib_IntVector_Intrinsics_vec256_add64(f11, f21);
#  260|->             Lib_IntVector_Intrinsics_vec256 o2 = Lib_IntVector_Intrinsics_vec256_add64(f12, f22);
#  261|               Lib_IntVector_Intrinsics_vec256 o3 = Lib_IntVector_Intrinsics_vec256_add64(f13, f23);
#  262|               Lib_IntVector_Intrinsics_vec256 o4 = Lib_IntVector_Intrinsics_vec256_add64(f14, f24);

Error: COMPILER_WARNING: [#def650]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:261:50: note[note]: called from here
#  259|               Lib_IntVector_Intrinsics_vec256 o1 = Lib_IntVector_Intrinsics_vec256_add64(f11, f21);
#  260|               Lib_IntVector_Intrinsics_vec256 o2 = Lib_IntVector_Intrinsics_vec256_add64(f12, f22);
#  261|->             Lib_IntVector_Intrinsics_vec256 o3 = Lib_IntVector_Intrinsics_vec256_add64(f13, f23);
#  262|               Lib_IntVector_Intrinsics_vec256 o4 = Lib_IntVector_Intrinsics_vec256_add64(f14, f24);
#  263|               acc0[0U] = o0;

Error: COMPILER_WARNING: [#def651]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:262:50: note[note]: called from here
#  260|               Lib_IntVector_Intrinsics_vec256 o2 = Lib_IntVector_Intrinsics_vec256_add64(f12, f22);
#  261|               Lib_IntVector_Intrinsics_vec256 o3 = Lib_IntVector_Intrinsics_vec256_add64(f13, f23);
#  262|->             Lib_IntVector_Intrinsics_vec256 o4 = Lib_IntVector_Intrinsics_vec256_add64(f14, f24);
#  263|               acc0[0U] = o0;
#  264|               acc0[1U] = o1;

Error: COMPILER_WARNING: [#def652]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:283:46: note[note]: called from here
#  281|           uint64_t u = load64_le(block + (uint32_t)8U);
#  282|           uint64_t hi = u;
#  283|->         Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_load64(lo);
#  284|           Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_load64(hi);
#  285|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def653]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:284:46: note[note]: called from here
#  282|           uint64_t hi = u;
#  283|           Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_load64(lo);
#  284|->         Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_load64(hi);
#  285|           Lib_IntVector_Intrinsics_vec256
#  286|               f010 =

Error: COMPILER_WARNING: [#def654]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:287:17: note[note]: called from here
#  285|           Lib_IntVector_Intrinsics_vec256
#  286|               f010 =
#  287|->                 Lib_IntVector_Intrinsics_vec256_and(f0,
#  288|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));
#  289|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def655]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:291:17: note[note]: called from here
#  289|           Lib_IntVector_Intrinsics_vec256
#  290|               f110 =
#  291|->                 Lib_IntVector_Intrinsics_vec256_and(Lib_IntVector_Intrinsics_vec256_shift_right64(f0,
#  292|                                                                                                     (uint32_t)26U),
#  293|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));

Error: COMPILER_WARNING: [#def656]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:296:17: note[note]: called from here
#  294|           Lib_IntVector_Intrinsics_vec256
#  295|               f20 =
#  296|->                 Lib_IntVector_Intrinsics_vec256_or(Lib_IntVector_Intrinsics_vec256_shift_right64(f0,
#  297|                                                                                                    (uint32_t)52U),
#  298|                                                      Lib_IntVector_Intrinsics_vec256_shift_left64(Lib_IntVector_Intrinsics_vec256_and(f1,

Error: COMPILER_WARNING: [#def657]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:303:17: note[note]: called from here
#  301|           Lib_IntVector_Intrinsics_vec256
#  302|               f30 =
#  303|->                 Lib_IntVector_Intrinsics_vec256_and(Lib_IntVector_Intrinsics_vec256_shift_right64(f1,
#  304|                                                                                                     (uint32_t)14U),
#  305|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));

Error: COMPILER_WARNING: [#def658]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:307:19: note[note]: called from here
#  305|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));
#  306|           Lib_IntVector_Intrinsics_vec256
#  307|->             f40 = Lib_IntVector_Intrinsics_vec256_shift_right64(f1, (uint32_t)40U);
#  308|           Lib_IntVector_Intrinsics_vec256 f01 = f010;
#  309|           Lib_IntVector_Intrinsics_vec256 f111 = f110;

Error: COMPILER_WARNING: [#def659]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:319:48: note[note]: called from here
#  317|           e[4U] = f41;
#  318|           uint64_t b = (uint64_t)0x1000000U;
#  319|->         Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#  320|           Lib_IntVector_Intrinsics_vec256 f4 = e[4U];
#  321|           e[4U] = Lib_IntVector_Intrinsics_vec256_or(f4, mask);

Error: COMPILER_WARNING: [#def660]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:321:17: note[note]: called from here
#  319|           Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#  320|           Lib_IntVector_Intrinsics_vec256 f4 = e[4U];
#  321|->         e[4U] = Lib_IntVector_Intrinsics_vec256_or(f4, mask);
#  322|           Lib_IntVector_Intrinsics_vec256 *r1 = pre0;
#  323|           Lib_IntVector_Intrinsics_vec256 *r5 = pre0 + (uint32_t)5U;

Error: COMPILER_WARNING: [#def661]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:343:47: note[note]: called from here
#  341|           Lib_IntVector_Intrinsics_vec256 a3 = acc0[3U];
#  342|           Lib_IntVector_Intrinsics_vec256 a4 = acc0[4U];
#  343|->         Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  344|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  345|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);

Error: COMPILER_WARNING: [#def662]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:344:47: note[note]: called from here
#  342|           Lib_IntVector_Intrinsics_vec256 a4 = acc0[4U];
#  343|           Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  344|->         Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  345|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  346|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);

Error: COMPILER_WARNING: [#def663]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:345:47: note[note]: called from here
#  343|           Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  344|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  345|->         Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  346|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  347|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);

Error: COMPILER_WARNING: [#def664]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:346:47: note[note]: called from here
#  344|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  345|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  346|->         Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  347|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  348|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);

Error: COMPILER_WARNING: [#def665]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:347:47: note[note]: called from here
#  345|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  346|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  347|->         Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  348|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  349|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);

Error: COMPILER_WARNING: [#def666]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:348:47: note[note]: called from here
#  346|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  347|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  348|->         Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  349|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  350|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);

Error: COMPILER_WARNING: [#def667]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:349:47: note[note]: called from here
#  347|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  348|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  349|->         Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  350|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  351|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);

Error: COMPILER_WARNING: [#def668]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:350:47: note[note]: called from here
#  348|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  349|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  350|->         Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  351|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  352|           Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);

Error: COMPILER_WARNING: [#def669]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:351:47: note[note]: called from here
#  349|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  350|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  351|->         Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  352|           Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);
#  353|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def670]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:352:47: note[note]: called from here
#  350|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  351|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  352|->         Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);
#  353|           Lib_IntVector_Intrinsics_vec256
#  354|               a03 =

Error: COMPILER_WARNING: [#def671]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:355:17: note[note]: called from here
#  353|           Lib_IntVector_Intrinsics_vec256
#  354|               a03 =
#  355|->                 Lib_IntVector_Intrinsics_vec256_add64(a02,
#  356|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a11));
#  357|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def672]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:359:17: note[note]: called from here
#  357|           Lib_IntVector_Intrinsics_vec256
#  358|               a13 =
#  359|->                 Lib_IntVector_Intrinsics_vec256_add64(a12,
#  360|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a11));
#  361|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def673]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:363:17: note[note]: called from here
#  361|           Lib_IntVector_Intrinsics_vec256
#  362|               a23 =
#  363|->                 Lib_IntVector_Intrinsics_vec256_add64(a22,
#  364|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a11));
#  365|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def674]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:367:17: note[note]: called from here
#  365|           Lib_IntVector_Intrinsics_vec256
#  366|               a33 =
#  367|->                 Lib_IntVector_Intrinsics_vec256_add64(a32,
#  368|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r2, a11));
#  369|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def675]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:371:17: note[note]: called from here
#  369|           Lib_IntVector_Intrinsics_vec256
#  370|               a43 =
#  371|->                 Lib_IntVector_Intrinsics_vec256_add64(a42,
#  372|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r3, a11));
#  373|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def676]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:375:17: note[note]: called from here
#  373|           Lib_IntVector_Intrinsics_vec256
#  374|               a04 =
#  375|->                 Lib_IntVector_Intrinsics_vec256_add64(a03,
#  376|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a21));
#  377|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def677]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:379:17: note[note]: called from here
#  377|           Lib_IntVector_Intrinsics_vec256
#  378|               a14 =
#  379|->                 Lib_IntVector_Intrinsics_vec256_add64(a13,
#  380|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a21));
#  381|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def678]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:383:17: note[note]: called from here
#  381|           Lib_IntVector_Intrinsics_vec256
#  382|               a24 =
#  383|->                 Lib_IntVector_Intrinsics_vec256_add64(a23,
#  384|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a21));
#  385|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def679]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:387:17: note[note]: called from here
#  385|           Lib_IntVector_Intrinsics_vec256
#  386|               a34 =
#  387|->                 Lib_IntVector_Intrinsics_vec256_add64(a33,
#  388|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a21));
#  389|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def680]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:391:17: note[note]: called from here
#  389|           Lib_IntVector_Intrinsics_vec256
#  390|               a44 =
#  391|->                 Lib_IntVector_Intrinsics_vec256_add64(a43,
#  392|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r2, a21));
#  393|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def681]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:395:17: note[note]: called from here
#  393|           Lib_IntVector_Intrinsics_vec256
#  394|               a05 =
#  395|->                 Lib_IntVector_Intrinsics_vec256_add64(a04,
#  396|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r52, a31));
#  397|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def682]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:399:17: note[note]: called from here
#  397|           Lib_IntVector_Intrinsics_vec256
#  398|               a15 =
#  399|->                 Lib_IntVector_Intrinsics_vec256_add64(a14,
#  400|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a31));
#  401|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def683]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:403:17: note[note]: called from here
#  401|           Lib_IntVector_Intrinsics_vec256
#  402|               a25 =
#  403|->                 Lib_IntVector_Intrinsics_vec256_add64(a24,
#  404|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a31));
#  405|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def684]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:407:17: note[note]: called from here
#  405|           Lib_IntVector_Intrinsics_vec256
#  406|               a35 =
#  407|->                 Lib_IntVector_Intrinsics_vec256_add64(a34,
#  408|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a31));
#  409|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def685]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:411:17: note[note]: called from here
#  409|           Lib_IntVector_Intrinsics_vec256
#  410|               a45 =
#  411|->                 Lib_IntVector_Intrinsics_vec256_add64(a44,
#  412|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a31));
#  413|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def686]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:415:17: note[note]: called from here
#  413|           Lib_IntVector_Intrinsics_vec256
#  414|               a06 =
#  415|->                 Lib_IntVector_Intrinsics_vec256_add64(a05,
#  416|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r51, a41));
#  417|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def687]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:419:17: note[note]: called from here
#  417|           Lib_IntVector_Intrinsics_vec256
#  418|               a16 =
#  419|->                 Lib_IntVector_Intrinsics_vec256_add64(a15,
#  420|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r52, a41));
#  421|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def688]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:423:17: note[note]: called from here
#  421|           Lib_IntVector_Intrinsics_vec256
#  422|               a26 =
#  423|->                 Lib_IntVector_Intrinsics_vec256_add64(a25,
#  424|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a41));
#  425|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def689]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:427:17: note[note]: called from here
#  425|           Lib_IntVector_Intrinsics_vec256
#  426|               a36 =
#  427|->                 Lib_IntVector_Intrinsics_vec256_add64(a35,
#  428|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a41));
#  429|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def690]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:431:17: note[note]: called from here
#  429|           Lib_IntVector_Intrinsics_vec256
#  430|               a46 =
#  431|->                 Lib_IntVector_Intrinsics_vec256_add64(a45,
#  432|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a41));
#  433|           Lib_IntVector_Intrinsics_vec256 t01 = a06;

Error: COMPILER_WARNING: [#def691]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:439:22: note[note]: called from here
#  437|           Lib_IntVector_Intrinsics_vec256 t4 = a46;
#  438|           Lib_IntVector_Intrinsics_vec256
#  439|->             mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  440|           Lib_IntVector_Intrinsics_vec256
#  441|               z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);

Error: COMPILER_WARNING: [#def692]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:441:18: note[note]: called from here
#  439|               mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  440|           Lib_IntVector_Intrinsics_vec256
#  441|->             z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);
#  442|           Lib_IntVector_Intrinsics_vec256
#  443|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);

Error: COMPILER_WARNING: [#def693]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:443:18: note[note]: called from here
#  441|               z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);
#  442|           Lib_IntVector_Intrinsics_vec256
#  443|->             z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  444|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  445|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);

Error: COMPILER_WARNING: [#def694]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:444:46: note[note]: called from here
#  442|           Lib_IntVector_Intrinsics_vec256
#  443|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  444|->         Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  445|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  446|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);

Error: COMPILER_WARNING: [#def695]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:445:46: note[note]: called from here
#  443|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  444|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  445|->         Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  446|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);
#  447|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);

Error: COMPILER_WARNING: [#def696]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:446:46: note[note]: called from here
#  444|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  445|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  446|->         Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);
#  447|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  448|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def697]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:447:46: note[note]: called from here
#  445|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  446|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);
#  447|->         Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  448|           Lib_IntVector_Intrinsics_vec256
#  449|               z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);

Error: COMPILER_WARNING: [#def698]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:449:19: note[note]: called from here
#  447|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  448|           Lib_IntVector_Intrinsics_vec256
#  449|->             z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  450|           Lib_IntVector_Intrinsics_vec256
#  451|               z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);

Error: COMPILER_WARNING: [#def699]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:451:19: note[note]: called from here
#  449|               z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  450|           Lib_IntVector_Intrinsics_vec256
#  451|->             z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  452|           Lib_IntVector_Intrinsics_vec256
#  453|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);

Error: COMPILER_WARNING: [#def700]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:453:17: note[note]: called from here
#  451|               z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  452|           Lib_IntVector_Intrinsics_vec256
#  453|->             t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  454|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  455|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);

Error: COMPILER_WARNING: [#def701]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:454:47: note[note]: called from here
#  452|           Lib_IntVector_Intrinsics_vec256
#  453|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  454|->         Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  455|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  456|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);

Error: COMPILER_WARNING: [#def702]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:455:47: note[note]: called from here
#  453|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  454|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  455|->         Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  456|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  457|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);

Error: COMPILER_WARNING: [#def703]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:456:47: note[note]: called from here
#  454|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  455|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  456|->         Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  457|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  458|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);

Error: COMPILER_WARNING: [#def704]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:457:46: note[note]: called from here
#  455|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  456|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  457|->         Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  458|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  459|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def705]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:458:47: note[note]: called from here
#  456|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  457|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  458|->         Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  459|           Lib_IntVector_Intrinsics_vec256
#  460|               z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);

Error: COMPILER_WARNING: [#def706]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:460:19: note[note]: called from here
#  458|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  459|           Lib_IntVector_Intrinsics_vec256
#  460|->             z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  461|           Lib_IntVector_Intrinsics_vec256
#  462|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);

Error: COMPILER_WARNING: [#def707]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:462:19: note[note]: called from here
#  460|               z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  461|           Lib_IntVector_Intrinsics_vec256
#  462|->             z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  463|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  464|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);

Error: COMPILER_WARNING: [#def708]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:463:47: note[note]: called from here
#  461|           Lib_IntVector_Intrinsics_vec256
#  462|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  463|->         Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  464|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  465|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);

Error: COMPILER_WARNING: [#def709]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:464:47: note[note]: called from here
#  462|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  463|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  464|->         Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  465|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  466|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);

Error: COMPILER_WARNING: [#def710]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:465:47: note[note]: called from here
#  463|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  464|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  465|->         Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  466|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  467|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def711]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:466:47: note[note]: called from here
#  464|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  465|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  466|->         Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  467|           Lib_IntVector_Intrinsics_vec256
#  468|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);

Error: COMPILER_WARNING: [#def712]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:468:19: note[note]: called from here
#  466|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  467|           Lib_IntVector_Intrinsics_vec256
#  468|->             z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  469|           Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  470|           Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);

Error: COMPILER_WARNING: [#def713]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:469:47: note[note]: called from here
#  467|           Lib_IntVector_Intrinsics_vec256
#  468|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  469|->         Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  470|           Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  471|           Lib_IntVector_Intrinsics_vec256 o0 = x02;

Error: COMPILER_WARNING: [#def714]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:470:47: note[note]: called from here
#  468|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  469|           Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  470|->         Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  471|           Lib_IntVector_Intrinsics_vec256 o0 = x02;
#  472|           Lib_IntVector_Intrinsics_vec256 o1 = x12;

Error: COMPILER_WARNING: [#def715]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:492:46: note[note]: called from here
#  490|           uint64_t u = load64_le(tmp + (uint32_t)8U);
#  491|           uint64_t hi = u;
#  492|->         Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_load64(lo);
#  493|           Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_load64(hi);
#  494|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def716]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:493:46: note[note]: called from here
#  491|           uint64_t hi = u;
#  492|           Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_load64(lo);
#  493|->         Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_load64(hi);
#  494|           Lib_IntVector_Intrinsics_vec256
#  495|               f010 =

Error: COMPILER_WARNING: [#def717]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:496:17: note[note]: called from here
#  494|           Lib_IntVector_Intrinsics_vec256
#  495|               f010 =
#  496|->                 Lib_IntVector_Intrinsics_vec256_and(f0,
#  497|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));
#  498|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def718]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:500:17: note[note]: called from here
#  498|           Lib_IntVector_Intrinsics_vec256
#  499|               f110 =
#  500|->                 Lib_IntVector_Intrinsics_vec256_and(Lib_IntVector_Intrinsics_vec256_shift_right64(f0,
#  501|                                                                                                     (uint32_t)26U),
#  502|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));

Error: COMPILER_WARNING: [#def719]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:505:17: note[note]: called from here
#  503|           Lib_IntVector_Intrinsics_vec256
#  504|               f20 =
#  505|->                 Lib_IntVector_Intrinsics_vec256_or(Lib_IntVector_Intrinsics_vec256_shift_right64(f0,
#  506|                                                                                                    (uint32_t)52U),
#  507|                                                      Lib_IntVector_Intrinsics_vec256_shift_left64(Lib_IntVector_Intrinsics_vec256_and(f1,

Error: COMPILER_WARNING: [#def720]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:512:17: note[note]: called from here
#  510|           Lib_IntVector_Intrinsics_vec256
#  511|               f30 =
#  512|->                 Lib_IntVector_Intrinsics_vec256_and(Lib_IntVector_Intrinsics_vec256_shift_right64(f1,
#  513|                                                                                                     (uint32_t)14U),
#  514|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));

Error: COMPILER_WARNING: [#def721]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:516:19: note[note]: called from here
#  514|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));
#  515|           Lib_IntVector_Intrinsics_vec256
#  516|->             f40 = Lib_IntVector_Intrinsics_vec256_shift_right64(f1, (uint32_t)40U);
#  517|           Lib_IntVector_Intrinsics_vec256 f01 = f010;
#  518|           Lib_IntVector_Intrinsics_vec256 f111 = f110;

Error: COMPILER_WARNING: [#def722]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:528:48: note[note]: called from here
#  526|           e[4U] = f4;
#  527|           uint64_t b = (uint64_t)1U << rem1 * (uint32_t)8U % (uint32_t)26U;
#  528|->         Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#  529|           Lib_IntVector_Intrinsics_vec256 fi = e[rem1 * (uint32_t)8U / (uint32_t)26U];
#  530|           e[rem1 * (uint32_t)8U / (uint32_t)26U] = Lib_IntVector_Intrinsics_vec256_or(fi, mask);

Error: COMPILER_WARNING: [#def723]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:530:50: note[note]: called from here
#  528|           Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#  529|           Lib_IntVector_Intrinsics_vec256 fi = e[rem1 * (uint32_t)8U / (uint32_t)26U];
#  530|->         e[rem1 * (uint32_t)8U / (uint32_t)26U] = Lib_IntVector_Intrinsics_vec256_or(fi, mask);
#  531|           Lib_IntVector_Intrinsics_vec256 *r1 = pre0;
#  532|           Lib_IntVector_Intrinsics_vec256 *r5 = pre0 + (uint32_t)5U;

Error: COMPILER_WARNING: [#def724]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:552:47: note[note]: called from here
#  550|           Lib_IntVector_Intrinsics_vec256 a3 = acc0[3U];
#  551|           Lib_IntVector_Intrinsics_vec256 a4 = acc0[4U];
#  552|->         Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  553|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  554|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);

Error: COMPILER_WARNING: [#def725]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:553:47: note[note]: called from here
#  551|           Lib_IntVector_Intrinsics_vec256 a4 = acc0[4U];
#  552|           Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  553|->         Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  554|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  555|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);

Error: COMPILER_WARNING: [#def726]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:554:47: note[note]: called from here
#  552|           Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  553|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  554|->         Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  555|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  556|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);

Error: COMPILER_WARNING: [#def727]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:555:47: note[note]: called from here
#  553|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  554|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  555|->         Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  556|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  557|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);

Error: COMPILER_WARNING: [#def728]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:556:47: note[note]: called from here
#  554|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  555|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  556|->         Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  557|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  558|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);

Error: COMPILER_WARNING: [#def729]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:557:47: note[note]: called from here
#  555|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  556|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  557|->         Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  558|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  559|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);

Error: COMPILER_WARNING: [#def730]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:558:47: note[note]: called from here
#  556|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  557|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  558|->         Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  559|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  560|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);

Error: COMPILER_WARNING: [#def731]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:559:47: note[note]: called from here
#  557|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  558|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  559|->         Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  560|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  561|           Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);

Error: COMPILER_WARNING: [#def732]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:560:47: note[note]: called from here
#  558|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  559|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  560|->         Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  561|           Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);
#  562|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def733]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:561:47: note[note]: called from here
#  559|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  560|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  561|->         Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);
#  562|           Lib_IntVector_Intrinsics_vec256
#  563|               a03 =

Error: COMPILER_WARNING: [#def734]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:564:17: note[note]: called from here
#  562|           Lib_IntVector_Intrinsics_vec256
#  563|               a03 =
#  564|->                 Lib_IntVector_Intrinsics_vec256_add64(a02,
#  565|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a11));
#  566|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def735]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:568:17: note[note]: called from here
#  566|           Lib_IntVector_Intrinsics_vec256
#  567|               a13 =
#  568|->                 Lib_IntVector_Intrinsics_vec256_add64(a12,
#  569|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a11));
#  570|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def736]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:572:17: note[note]: called from here
#  570|           Lib_IntVector_Intrinsics_vec256
#  571|               a23 =
#  572|->                 Lib_IntVector_Intrinsics_vec256_add64(a22,
#  573|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a11));
#  574|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def737]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:576:17: note[note]: called from here
#  574|           Lib_IntVector_Intrinsics_vec256
#  575|               a33 =
#  576|->                 Lib_IntVector_Intrinsics_vec256_add64(a32,
#  577|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r2, a11));
#  578|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def738]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:580:17: note[note]: called from here
#  578|           Lib_IntVector_Intrinsics_vec256
#  579|               a43 =
#  580|->                 Lib_IntVector_Intrinsics_vec256_add64(a42,
#  581|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r3, a11));
#  582|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def739]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:584:17: note[note]: called from here
#  582|           Lib_IntVector_Intrinsics_vec256
#  583|               a04 =
#  584|->                 Lib_IntVector_Intrinsics_vec256_add64(a03,
#  585|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a21));
#  586|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def740]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:588:17: note[note]: called from here
#  586|           Lib_IntVector_Intrinsics_vec256
#  587|               a14 =
#  588|->                 Lib_IntVector_Intrinsics_vec256_add64(a13,
#  589|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a21));
#  590|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def741]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:592:17: note[note]: called from here
#  590|           Lib_IntVector_Intrinsics_vec256
#  591|               a24 =
#  592|->                 Lib_IntVector_Intrinsics_vec256_add64(a23,
#  593|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a21));
#  594|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def742]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:596:17: note[note]: called from here
#  594|           Lib_IntVector_Intrinsics_vec256
#  595|               a34 =
#  596|->                 Lib_IntVector_Intrinsics_vec256_add64(a33,
#  597|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a21));
#  598|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def743]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:600:17: note[note]: called from here
#  598|           Lib_IntVector_Intrinsics_vec256
#  599|               a44 =
#  600|->                 Lib_IntVector_Intrinsics_vec256_add64(a43,
#  601|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r2, a21));
#  602|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def744]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:604:17: note[note]: called from here
#  602|           Lib_IntVector_Intrinsics_vec256
#  603|               a05 =
#  604|->                 Lib_IntVector_Intrinsics_vec256_add64(a04,
#  605|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r52, a31));
#  606|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def745]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:608:17: note[note]: called from here
#  606|           Lib_IntVector_Intrinsics_vec256
#  607|               a15 =
#  608|->                 Lib_IntVector_Intrinsics_vec256_add64(a14,
#  609|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a31));
#  610|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def746]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:612:17: note[note]: called from here
#  610|           Lib_IntVector_Intrinsics_vec256
#  611|               a25 =
#  612|->                 Lib_IntVector_Intrinsics_vec256_add64(a24,
#  613|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a31));
#  614|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def747]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:616:17: note[note]: called from here
#  614|           Lib_IntVector_Intrinsics_vec256
#  615|               a35 =
#  616|->                 Lib_IntVector_Intrinsics_vec256_add64(a34,
#  617|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a31));
#  618|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def748]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:620:17: note[note]: called from here
#  618|           Lib_IntVector_Intrinsics_vec256
#  619|               a45 =
#  620|->                 Lib_IntVector_Intrinsics_vec256_add64(a44,
#  621|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a31));
#  622|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def749]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:624:17: note[note]: called from here
#  622|           Lib_IntVector_Intrinsics_vec256
#  623|               a06 =
#  624|->                 Lib_IntVector_Intrinsics_vec256_add64(a05,
#  625|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r51, a41));
#  626|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def750]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:628:17: note[note]: called from here
#  626|           Lib_IntVector_Intrinsics_vec256
#  627|               a16 =
#  628|->                 Lib_IntVector_Intrinsics_vec256_add64(a15,
#  629|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r52, a41));
#  630|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def751]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:632:17: note[note]: called from here
#  630|           Lib_IntVector_Intrinsics_vec256
#  631|               a26 =
#  632|->                 Lib_IntVector_Intrinsics_vec256_add64(a25,
#  633|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a41));
#  634|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def752]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:636:17: note[note]: called from here
#  634|           Lib_IntVector_Intrinsics_vec256
#  635|               a36 =
#  636|->                 Lib_IntVector_Intrinsics_vec256_add64(a35,
#  637|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a41));
#  638|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def753]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:640:17: note[note]: called from here
#  638|           Lib_IntVector_Intrinsics_vec256
#  639|               a46 =
#  640|->                 Lib_IntVector_Intrinsics_vec256_add64(a45,
#  641|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a41));
#  642|           Lib_IntVector_Intrinsics_vec256 t01 = a06;

Error: COMPILER_WARNING: [#def754]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:648:22: note[note]: called from here
#  646|           Lib_IntVector_Intrinsics_vec256 t4 = a46;
#  647|           Lib_IntVector_Intrinsics_vec256
#  648|->             mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  649|           Lib_IntVector_Intrinsics_vec256
#  650|               z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);

Error: COMPILER_WARNING: [#def755]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:650:18: note[note]: called from here
#  648|               mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  649|           Lib_IntVector_Intrinsics_vec256
#  650|->             z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);
#  651|           Lib_IntVector_Intrinsics_vec256
#  652|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);

Error: COMPILER_WARNING: [#def756]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:652:18: note[note]: called from here
#  650|               z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t01, (uint32_t)26U);
#  651|           Lib_IntVector_Intrinsics_vec256
#  652|->             z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  653|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  654|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);

Error: COMPILER_WARNING: [#def757]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:653:46: note[note]: called from here
#  651|           Lib_IntVector_Intrinsics_vec256
#  652|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  653|->         Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  654|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  655|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);

Error: COMPILER_WARNING: [#def758]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:654:46: note[note]: called from here
#  652|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  653|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  654|->         Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  655|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);
#  656|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);

Error: COMPILER_WARNING: [#def759]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:655:46: note[note]: called from here
#  653|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t01, mask26);
#  654|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  655|->         Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);
#  656|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  657|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def760]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:656:46: note[note]: called from here
#  654|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  655|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t11, z0);
#  656|->         Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  657|           Lib_IntVector_Intrinsics_vec256
#  658|               z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);

Error: COMPILER_WARNING: [#def761]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:658:19: note[note]: called from here
#  656|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  657|           Lib_IntVector_Intrinsics_vec256
#  658|->             z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  659|           Lib_IntVector_Intrinsics_vec256
#  660|               z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);

Error: COMPILER_WARNING: [#def762]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:660:19: note[note]: called from here
#  658|               z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  659|           Lib_IntVector_Intrinsics_vec256
#  660|->             z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  661|           Lib_IntVector_Intrinsics_vec256
#  662|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);

Error: COMPILER_WARNING: [#def763]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:662:17: note[note]: called from here
#  660|               z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  661|           Lib_IntVector_Intrinsics_vec256
#  662|->             t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  663|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  664|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);

Error: COMPILER_WARNING: [#def764]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:663:47: note[note]: called from here
#  661|           Lib_IntVector_Intrinsics_vec256
#  662|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  663|->         Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  664|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  665|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);

Error: COMPILER_WARNING: [#def765]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:664:47: note[note]: called from here
#  662|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  663|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  664|->         Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  665|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  666|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);

Error: COMPILER_WARNING: [#def766]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:665:47: note[note]: called from here
#  663|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  664|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  665|->         Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  666|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  667|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);

Error: COMPILER_WARNING: [#def767]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:666:46: note[note]: called from here
#  664|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  665|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  666|->         Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  667|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  668|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def768]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:667:47: note[note]: called from here
#  665|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  666|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  667|->         Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  668|           Lib_IntVector_Intrinsics_vec256
#  669|               z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);

Error: COMPILER_WARNING: [#def769]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:669:19: note[note]: called from here
#  667|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  668|           Lib_IntVector_Intrinsics_vec256
#  669|->             z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  670|           Lib_IntVector_Intrinsics_vec256
#  671|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);

Error: COMPILER_WARNING: [#def770]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:671:19: note[note]: called from here
#  669|               z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  670|           Lib_IntVector_Intrinsics_vec256
#  671|->             z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  672|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  673|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);

Error: COMPILER_WARNING: [#def771]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:672:47: note[note]: called from here
#  670|           Lib_IntVector_Intrinsics_vec256
#  671|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  672|->         Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  673|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  674|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);

Error: COMPILER_WARNING: [#def772]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:673:47: note[note]: called from here
#  671|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  672|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  673|->         Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  674|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  675|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);

Error: COMPILER_WARNING: [#def773]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:674:47: note[note]: called from here
#  672|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  673|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  674|->         Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  675|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  676|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def774]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:675:47: note[note]: called from here
#  673|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  674|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  675|->         Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  676|           Lib_IntVector_Intrinsics_vec256
#  677|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);

Error: COMPILER_WARNING: [#def775]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:677:19: note[note]: called from here
#  675|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  676|           Lib_IntVector_Intrinsics_vec256
#  677|->             z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  678|           Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  679|           Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);

Error: COMPILER_WARNING: [#def776]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:678:47: note[note]: called from here
#  676|           Lib_IntVector_Intrinsics_vec256
#  677|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  678|->         Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  679|           Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  680|           Lib_IntVector_Intrinsics_vec256 o0 = x02;

Error: COMPILER_WARNING: [#def777]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:679:47: note[note]: called from here
#  677|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  678|           Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  679|->         Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  680|           Lib_IntVector_Intrinsics_vec256 o0 = x02;
#  681|           Lib_IntVector_Intrinsics_vec256 o1 = x12;

Error: COMPILER_WARNING: [#def778]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:702:46: note[note]: called from here
#  700|           uint64_t u = load64_le(tmp + (uint32_t)8U);
#  701|           uint64_t hi = u;
#  702|->         Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_load64(lo);
#  703|           Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_load64(hi);
#  704|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def779]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:703:46: note[note]: called from here
#  701|           uint64_t hi = u;
#  702|           Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_load64(lo);
#  703|->         Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_load64(hi);
#  704|           Lib_IntVector_Intrinsics_vec256
#  705|               f010 =

Error: COMPILER_WARNING: [#def780]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:706:17: note[note]: called from here
#  704|           Lib_IntVector_Intrinsics_vec256
#  705|               f010 =
#  706|->                 Lib_IntVector_Intrinsics_vec256_and(f0,
#  707|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));
#  708|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def781]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:710:17: note[note]: called from here
#  708|           Lib_IntVector_Intrinsics_vec256
#  709|               f110 =
#  710|->                 Lib_IntVector_Intrinsics_vec256_and(Lib_IntVector_Intrinsics_vec256_shift_right64(f0,
#  711|                                                                                                     (uint32_t)26U),
#  712|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));

Error: COMPILER_WARNING: [#def782]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:715:17: note[note]: called from here
#  713|           Lib_IntVector_Intrinsics_vec256
#  714|               f20 =
#  715|->                 Lib_IntVector_Intrinsics_vec256_or(Lib_IntVector_Intrinsics_vec256_shift_right64(f0,
#  716|                                                                                                    (uint32_t)52U),
#  717|                                                      Lib_IntVector_Intrinsics_vec256_shift_left64(Lib_IntVector_Intrinsics_vec256_and(f1,

Error: COMPILER_WARNING: [#def783]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:722:17: note[note]: called from here
#  720|           Lib_IntVector_Intrinsics_vec256
#  721|               f30 =
#  722|->                 Lib_IntVector_Intrinsics_vec256_and(Lib_IntVector_Intrinsics_vec256_shift_right64(f1,
#  723|                                                                                                     (uint32_t)14U),
#  724|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));

Error: COMPILER_WARNING: [#def784]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:726:19: note[note]: called from here
#  724|                                                       Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU));
#  725|           Lib_IntVector_Intrinsics_vec256
#  726|->             f40 = Lib_IntVector_Intrinsics_vec256_shift_right64(f1, (uint32_t)40U);
#  727|           Lib_IntVector_Intrinsics_vec256 f01 = f010;
#  728|           Lib_IntVector_Intrinsics_vec256 f111 = f110;

Error: COMPILER_WARNING: [#def785]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:738:48: note[note]: called from here
#  736|           e[4U] = f41;
#  737|           uint64_t b = (uint64_t)0x1000000U;
#  738|->         Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#  739|           Lib_IntVector_Intrinsics_vec256 f4 = e[4U];
#  740|           e[4U] = Lib_IntVector_Intrinsics_vec256_or(f4, mask);

Error: COMPILER_WARNING: [#def786]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:740:17: note[note]: called from here
#  738|           Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b);
#  739|           Lib_IntVector_Intrinsics_vec256 f4 = e[4U];
#  740|->         e[4U] = Lib_IntVector_Intrinsics_vec256_or(f4, mask);
#  741|           Lib_IntVector_Intrinsics_vec256 *r1 = pre;
#  742|           Lib_IntVector_Intrinsics_vec256 *r5 = pre + (uint32_t)5U;

Error: COMPILER_WARNING: [#def787]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:762:47: note[note]: called from here
#  760|           Lib_IntVector_Intrinsics_vec256 a3 = acc[3U];
#  761|           Lib_IntVector_Intrinsics_vec256 a4 = acc[4U];
#  762|->         Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  763|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  764|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);

Error: COMPILER_WARNING: [#def788]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:763:47: note[note]: called from here
#  761|           Lib_IntVector_Intrinsics_vec256 a4 = acc[4U];
#  762|           Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  763|->         Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  764|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  765|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);

Error: COMPILER_WARNING: [#def789]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:764:47: note[note]: called from here
#  762|           Lib_IntVector_Intrinsics_vec256 a01 = Lib_IntVector_Intrinsics_vec256_add64(a0, f10);
#  763|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  764|->         Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  765|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  766|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);

Error: COMPILER_WARNING: [#def790]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:765:47: note[note]: called from here
#  763|           Lib_IntVector_Intrinsics_vec256 a11 = Lib_IntVector_Intrinsics_vec256_add64(a1, f11);
#  764|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  765|->         Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  766|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  767|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);

Error: COMPILER_WARNING: [#def791]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:766:47: note[note]: called from here
#  764|           Lib_IntVector_Intrinsics_vec256 a21 = Lib_IntVector_Intrinsics_vec256_add64(a2, f12);
#  765|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  766|->         Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  767|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  768|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);

Error: COMPILER_WARNING: [#def792]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:767:47: note[note]: called from here
#  765|           Lib_IntVector_Intrinsics_vec256 a31 = Lib_IntVector_Intrinsics_vec256_add64(a3, f13);
#  766|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  767|->         Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  768|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  769|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);

Error: COMPILER_WARNING: [#def793]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:768:47: note[note]: called from here
#  766|           Lib_IntVector_Intrinsics_vec256 a41 = Lib_IntVector_Intrinsics_vec256_add64(a4, f14);
#  767|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  768|->         Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  769|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  770|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);

Error: COMPILER_WARNING: [#def794]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:769:47: note[note]: called from here
#  767|           Lib_IntVector_Intrinsics_vec256 a02 = Lib_IntVector_Intrinsics_vec256_mul64(r0, a01);
#  768|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  769|->         Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  770|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  771|           Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);

Error: COMPILER_WARNING: [#def795]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:770:47: note[note]: called from here
#  768|           Lib_IntVector_Intrinsics_vec256 a12 = Lib_IntVector_Intrinsics_vec256_mul64(r11, a01);
#  769|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  770|->         Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  771|           Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);
#  772|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def796]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:771:47: note[note]: called from here
#  769|           Lib_IntVector_Intrinsics_vec256 a22 = Lib_IntVector_Intrinsics_vec256_mul64(r2, a01);
#  770|           Lib_IntVector_Intrinsics_vec256 a32 = Lib_IntVector_Intrinsics_vec256_mul64(r3, a01);
#  771|->         Lib_IntVector_Intrinsics_vec256 a42 = Lib_IntVector_Intrinsics_vec256_mul64(r4, a01);
#  772|           Lib_IntVector_Intrinsics_vec256
#  773|               a03 =

Error: COMPILER_WARNING: [#def797]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:774:17: note[note]: called from here
#  772|           Lib_IntVector_Intrinsics_vec256
#  773|               a03 =
#  774|->                 Lib_IntVector_Intrinsics_vec256_add64(a02,
#  775|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a11));
#  776|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def798]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:778:17: note[note]: called from here
#  776|           Lib_IntVector_Intrinsics_vec256
#  777|               a13 =
#  778|->                 Lib_IntVector_Intrinsics_vec256_add64(a12,
#  779|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a11));
#  780|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def799]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:782:17: note[note]: called from here
#  780|           Lib_IntVector_Intrinsics_vec256
#  781|               a23 =
#  782|->                 Lib_IntVector_Intrinsics_vec256_add64(a22,
#  783|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a11));
#  784|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def800]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:786:17: note[note]: called from here
#  784|           Lib_IntVector_Intrinsics_vec256
#  785|               a33 =
#  786|->                 Lib_IntVector_Intrinsics_vec256_add64(a32,
#  787|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r2, a11));
#  788|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def801]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:790:17: note[note]: called from here
#  788|           Lib_IntVector_Intrinsics_vec256
#  789|               a43 =
#  790|->                 Lib_IntVector_Intrinsics_vec256_add64(a42,
#  791|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r3, a11));
#  792|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def802]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:794:17: note[note]: called from here
#  792|           Lib_IntVector_Intrinsics_vec256
#  793|               a04 =
#  794|->                 Lib_IntVector_Intrinsics_vec256_add64(a03,
#  795|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a21));
#  796|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def803]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:798:17: note[note]: called from here
#  796|           Lib_IntVector_Intrinsics_vec256
#  797|               a14 =
#  798|->                 Lib_IntVector_Intrinsics_vec256_add64(a13,
#  799|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a21));
#  800|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def804]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:802:17: note[note]: called from here
#  800|           Lib_IntVector_Intrinsics_vec256
#  801|               a24 =
#  802|->                 Lib_IntVector_Intrinsics_vec256_add64(a23,
#  803|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a21));
#  804|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def805]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:806:17: note[note]: called from here
#  804|           Lib_IntVector_Intrinsics_vec256
#  805|               a34 =
#  806|->                 Lib_IntVector_Intrinsics_vec256_add64(a33,
#  807|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a21));
#  808|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def806]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:810:17: note[note]: called from here
#  808|           Lib_IntVector_Intrinsics_vec256
#  809|               a44 =
#  810|->                 Lib_IntVector_Intrinsics_vec256_add64(a43,
#  811|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r2, a21));
#  812|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def807]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:814:17: note[note]: called from here
#  812|           Lib_IntVector_Intrinsics_vec256
#  813|               a05 =
#  814|->                 Lib_IntVector_Intrinsics_vec256_add64(a04,
#  815|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r52, a31));
#  816|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def808]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:818:17: note[note]: called from here
#  816|           Lib_IntVector_Intrinsics_vec256
#  817|               a15 =
#  818|->                 Lib_IntVector_Intrinsics_vec256_add64(a14,
#  819|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a31));
#  820|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def809]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:822:17: note[note]: called from here
#  820|           Lib_IntVector_Intrinsics_vec256
#  821|               a25 =
#  822|->                 Lib_IntVector_Intrinsics_vec256_add64(a24,
#  823|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a31));
#  824|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def810]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:826:17: note[note]: called from here
#  824|           Lib_IntVector_Intrinsics_vec256
#  825|               a35 =
#  826|->                 Lib_IntVector_Intrinsics_vec256_add64(a34,
#  827|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a31));
#  828|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def811]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:830:17: note[note]: called from here
#  828|           Lib_IntVector_Intrinsics_vec256
#  829|               a45 =
#  830|->                 Lib_IntVector_Intrinsics_vec256_add64(a44,
#  831|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r11, a31));
#  832|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def812]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:834:17: note[note]: called from here
#  832|           Lib_IntVector_Intrinsics_vec256
#  833|               a06 =
#  834|->                 Lib_IntVector_Intrinsics_vec256_add64(a05,
#  835|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r51, a41));
#  836|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def813]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:838:17: note[note]: called from here
#  836|           Lib_IntVector_Intrinsics_vec256
#  837|               a16 =
#  838|->                 Lib_IntVector_Intrinsics_vec256_add64(a15,
#  839|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r52, a41));
#  840|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def814]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:842:17: note[note]: called from here
#  840|           Lib_IntVector_Intrinsics_vec256
#  841|               a26 =
#  842|->                 Lib_IntVector_Intrinsics_vec256_add64(a25,
#  843|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r53, a41));
#  844|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def815]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:846:17: note[note]: called from here
#  844|           Lib_IntVector_Intrinsics_vec256
#  845|               a36 =
#  846|->                 Lib_IntVector_Intrinsics_vec256_add64(a35,
#  847|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r54, a41));
#  848|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def816]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:850:17: note[note]: called from here
#  848|           Lib_IntVector_Intrinsics_vec256
#  849|               a46 =
#  850|->                 Lib_IntVector_Intrinsics_vec256_add64(a45,
#  851|                                                         Lib_IntVector_Intrinsics_vec256_mul64(r0, a41));
#  852|           Lib_IntVector_Intrinsics_vec256 t0 = a06;

Error: COMPILER_WARNING: [#def817]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:858:22: note[note]: called from here
#  856|           Lib_IntVector_Intrinsics_vec256 t4 = a46;
#  857|           Lib_IntVector_Intrinsics_vec256
#  858|->             mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  859|           Lib_IntVector_Intrinsics_vec256
#  860|               z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t0, (uint32_t)26U);

Error: COMPILER_WARNING: [#def818]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:860:18: note[note]: called from here
#  858|               mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#  859|           Lib_IntVector_Intrinsics_vec256
#  860|->             z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t0, (uint32_t)26U);
#  861|           Lib_IntVector_Intrinsics_vec256
#  862|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);

Error: COMPILER_WARNING: [#def819]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:862:18: note[note]: called from here
#  860|               z0 = Lib_IntVector_Intrinsics_vec256_shift_right64(t0, (uint32_t)26U);
#  861|           Lib_IntVector_Intrinsics_vec256
#  862|->             z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  863|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);
#  864|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);

Error: COMPILER_WARNING: [#def820]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:863:46: note[note]: called from here
#  861|           Lib_IntVector_Intrinsics_vec256
#  862|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  863|->         Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);
#  864|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  865|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);

Error: COMPILER_WARNING: [#def821]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:864:46: note[note]: called from here
#  862|               z1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)26U);
#  863|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);
#  864|->         Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  865|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);
#  866|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);

Error: COMPILER_WARNING: [#def822]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:865:46: note[note]: called from here
#  863|           Lib_IntVector_Intrinsics_vec256 x0 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);
#  864|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  865|->         Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);
#  866|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  867|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def823]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:866:46: note[note]: called from here
#  864|           Lib_IntVector_Intrinsics_vec256 x3 = Lib_IntVector_Intrinsics_vec256_and(t3, mask26);
#  865|           Lib_IntVector_Intrinsics_vec256 x1 = Lib_IntVector_Intrinsics_vec256_add64(t1, z0);
#  866|->         Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  867|           Lib_IntVector_Intrinsics_vec256
#  868|               z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);

Error: COMPILER_WARNING: [#def824]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:868:19: note[note]: called from here
#  866|           Lib_IntVector_Intrinsics_vec256 x4 = Lib_IntVector_Intrinsics_vec256_add64(t4, z1);
#  867|           Lib_IntVector_Intrinsics_vec256
#  868|->             z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  869|           Lib_IntVector_Intrinsics_vec256
#  870|               z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);

Error: COMPILER_WARNING: [#def825]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:870:19: note[note]: called from here
#  868|               z01 = Lib_IntVector_Intrinsics_vec256_shift_right64(x1, (uint32_t)26U);
#  869|           Lib_IntVector_Intrinsics_vec256
#  870|->             z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  871|           Lib_IntVector_Intrinsics_vec256
#  872|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);

Error: COMPILER_WARNING: [#def826]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:872:17: note[note]: called from here
#  870|               z11 = Lib_IntVector_Intrinsics_vec256_shift_right64(x4, (uint32_t)26U);
#  871|           Lib_IntVector_Intrinsics_vec256
#  872|->             t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  873|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  874|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);

Error: COMPILER_WARNING: [#def827]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:873:47: note[note]: called from here
#  871|           Lib_IntVector_Intrinsics_vec256
#  872|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  873|->         Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  874|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  875|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);

Error: COMPILER_WARNING: [#def828]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:874:47: note[note]: called from here
#  872|               t = Lib_IntVector_Intrinsics_vec256_shift_left64(z11, (uint32_t)2U);
#  873|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  874|->         Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  875|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  876|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);

Error: COMPILER_WARNING: [#def829]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:875:47: note[note]: called from here
#  873|           Lib_IntVector_Intrinsics_vec256 z12 = Lib_IntVector_Intrinsics_vec256_add64(z11, t);
#  874|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  875|->         Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  876|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  877|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);

Error: COMPILER_WARNING: [#def830]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:876:46: note[note]: called from here
#  874|           Lib_IntVector_Intrinsics_vec256 x11 = Lib_IntVector_Intrinsics_vec256_and(x1, mask26);
#  875|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  876|->         Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  877|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  878|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def831]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:877:47: note[note]: called from here
#  875|           Lib_IntVector_Intrinsics_vec256 x41 = Lib_IntVector_Intrinsics_vec256_and(x4, mask26);
#  876|           Lib_IntVector_Intrinsics_vec256 x2 = Lib_IntVector_Intrinsics_vec256_add64(t2, z01);
#  877|->         Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  878|           Lib_IntVector_Intrinsics_vec256
#  879|               z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);

Error: COMPILER_WARNING: [#def832]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:879:19: note[note]: called from here
#  877|           Lib_IntVector_Intrinsics_vec256 x01 = Lib_IntVector_Intrinsics_vec256_add64(x0, z12);
#  878|           Lib_IntVector_Intrinsics_vec256
#  879|->             z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  880|           Lib_IntVector_Intrinsics_vec256
#  881|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);

Error: COMPILER_WARNING: [#def833]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:881:19: note[note]: called from here
#  879|               z02 = Lib_IntVector_Intrinsics_vec256_shift_right64(x2, (uint32_t)26U);
#  880|           Lib_IntVector_Intrinsics_vec256
#  881|->             z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  882|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  883|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);

Error: COMPILER_WARNING: [#def834]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:882:47: note[note]: called from here
#  880|           Lib_IntVector_Intrinsics_vec256
#  881|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  882|->         Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  883|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  884|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);

Error: COMPILER_WARNING: [#def835]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:883:47: note[note]: called from here
#  881|               z13 = Lib_IntVector_Intrinsics_vec256_shift_right64(x01, (uint32_t)26U);
#  882|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  883|->         Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  884|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  885|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);

Error: COMPILER_WARNING: [#def836]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:884:47: note[note]: called from here
#  882|           Lib_IntVector_Intrinsics_vec256 x21 = Lib_IntVector_Intrinsics_vec256_and(x2, mask26);
#  883|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  884|->         Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  885|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  886|           Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def837]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:885:47: note[note]: called from here
#  883|           Lib_IntVector_Intrinsics_vec256 x02 = Lib_IntVector_Intrinsics_vec256_and(x01, mask26);
#  884|           Lib_IntVector_Intrinsics_vec256 x31 = Lib_IntVector_Intrinsics_vec256_add64(x3, z02);
#  885|->         Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  886|           Lib_IntVector_Intrinsics_vec256
#  887|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);

Error: COMPILER_WARNING: [#def838]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:887:19: note[note]: called from here
#  885|           Lib_IntVector_Intrinsics_vec256 x12 = Lib_IntVector_Intrinsics_vec256_add64(x11, z13);
#  886|           Lib_IntVector_Intrinsics_vec256
#  887|->             z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  888|           Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  889|           Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);

Error: COMPILER_WARNING: [#def839]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:888:47: note[note]: called from here
#  886|           Lib_IntVector_Intrinsics_vec256
#  887|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  888|->         Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  889|           Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  890|           Lib_IntVector_Intrinsics_vec256 o0 = x02;

Error: COMPILER_WARNING: [#def840]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:889:47: note[note]: called from here
#  887|               z03 = Lib_IntVector_Intrinsics_vec256_shift_right64(x31, (uint32_t)26U);
#  888|           Lib_IntVector_Intrinsics_vec256 x32 = Lib_IntVector_Intrinsics_vec256_and(x31, mask26);
#  889|->         Lib_IntVector_Intrinsics_vec256 x42 = Lib_IntVector_Intrinsics_vec256_add64(x41, z03);
#  890|           Lib_IntVector_Intrinsics_vec256 o0 = x02;
#  891|           Lib_IntVector_Intrinsics_vec256 o1 = x12;

Error: COMPILER_WARNING: [#def841]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20Poly1305_256.c:933:37: warning[-Wpsabi]: AVX vector return without AVX enabled changes the ABI
#  931|       uint64_t u = load64_le(block + (uint32_t)8U);
#  932|       uint64_t hi = u;
#  933|->     Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_load64(lo);
#  934|       Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_load64(hi);
#  935|       Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def842]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20_Vec256.c:193:5: note[note]: called from here
#  191|                       uint32_t x = r;
#  192|                       os[i] = x;);
#  193|->     KRML_MAYBE_FOR16(i,
#  194|                        (uint32_t)0U,
#  195|                        (uint32_t)16U,

Error: COMPILER_WARNING: [#def843]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20_Vec256.c:203:13: note[note]: called from here
#  201|       Lib_IntVector_Intrinsics_vec256
#  202|           ctr1 =
#  203|->             Lib_IntVector_Intrinsics_vec256_load32s((uint32_t)0U,
#  204|                                                       (uint32_t)1U,
#  205|                                                       (uint32_t)2U,

Error: COMPILER_WARNING: [#def844]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20_Vec256.c:212:16: note[note]: called from here
#  210|                                                       (uint32_t)7U);
#  211|       Lib_IntVector_Intrinsics_vec256 c12 = ctx[12U];
#  212|->     ctx[12U] = Lib_IntVector_Intrinsics_vec256_add32(c12, ctr1);
#  213|   }
#  214|   

Error: COMPILER_WARNING: [#def845]
nss-3.117/nss/lib/freebl/verified/Hacl_Chacha20_Vec256.c:261:13: warning[-Wpsabi]: AVX vector return without AVX enabled changes the ABI
#  259|           Lib_IntVector_Intrinsics_vec256 v70 = st7;
#  260|           Lib_IntVector_Intrinsics_vec256
#  261|->             v0_ = Lib_IntVector_Intrinsics_vec256_interleave_low32(v00, v16);
#  262|           Lib_IntVector_Intrinsics_vec256
#  263|               v1_ = Lib_IntVector_Intrinsics_vec256_interleave_high32(v00, v16);

Error: COMPILER_WARNING: [#def846]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:32:37: warning[-Wpsabi]: AVX vector return without AVX enabled changes the ABI
#   30|       KRML_PRE_ALIGN(32)
#   31|       Lib_IntVector_Intrinsics_vec256 e[5U] KRML_POST_ALIGN(32) = { 0U };
#   32|->     Lib_IntVector_Intrinsics_vec256 lo = Lib_IntVector_Intrinsics_vec256_load64_le(b);
#   33|       Lib_IntVector_Intrinsics_vec256
#   34|           hi = Lib_IntVector_Intrinsics_vec256_load64_le(b + (uint32_t)32U);

Error: COMPILER_WARNING: [#def847]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:32:42: note[note]: called from here
#   30|       KRML_PRE_ALIGN(32)
#   31|       Lib_IntVector_Intrinsics_vec256 e[5U] KRML_POST_ALIGN(32) = { 0U };
#   32|->     Lib_IntVector_Intrinsics_vec256 lo = Lib_IntVector_Intrinsics_vec256_load64_le(b);
#   33|       Lib_IntVector_Intrinsics_vec256
#   34|           hi = Lib_IntVector_Intrinsics_vec256_load64_le(b + (uint32_t)32U);

Error: COMPILER_WARNING: [#def848]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:34:14: note[note]: called from here
#   32|       Lib_IntVector_Intrinsics_vec256 lo = Lib_IntVector_Intrinsics_vec256_load64_le(b);
#   33|       Lib_IntVector_Intrinsics_vec256
#   34|->         hi = Lib_IntVector_Intrinsics_vec256_load64_le(b + (uint32_t)32U);
#   35|       Lib_IntVector_Intrinsics_vec256
#   36|           mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);

Error: COMPILER_WARNING: [#def849]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:36:18: note[note]: called from here
#   34|           hi = Lib_IntVector_Intrinsics_vec256_load64_le(b + (uint32_t)32U);
#   35|       Lib_IntVector_Intrinsics_vec256
#   36|->         mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#   37|       Lib_IntVector_Intrinsics_vec256 m0 = Lib_IntVector_Intrinsics_vec256_interleave_low128(lo, hi);
#   38|       Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def850]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:37:42: note[note]: called from here
#   35|       Lib_IntVector_Intrinsics_vec256
#   36|           mask26 = Lib_IntVector_Intrinsics_vec256_load64((uint64_t)0x3ffffffU);
#   37|->     Lib_IntVector_Intrinsics_vec256 m0 = Lib_IntVector_Intrinsics_vec256_interleave_low128(lo, hi);
#   38|       Lib_IntVector_Intrinsics_vec256
#   39|           m1 = Lib_IntVector_Intrinsics_vec256_interleave_high128(lo, hi);

Error: COMPILER_WARNING: [#def851]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:39:14: note[note]: called from here
#   37|       Lib_IntVector_Intrinsics_vec256 m0 = Lib_IntVector_Intrinsics_vec256_interleave_low128(lo, hi);
#   38|       Lib_IntVector_Intrinsics_vec256
#   39|->         m1 = Lib_IntVector_Intrinsics_vec256_interleave_high128(lo, hi);
#   40|       Lib_IntVector_Intrinsics_vec256
#   41|           m2 = Lib_IntVector_Intrinsics_vec256_shift_right(m0, (uint32_t)48U);

Error: COMPILER_WARNING: [#def852]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:41:14: note[note]: called from here
#   39|           m1 = Lib_IntVector_Intrinsics_vec256_interleave_high128(lo, hi);
#   40|       Lib_IntVector_Intrinsics_vec256
#   41|->         m2 = Lib_IntVector_Intrinsics_vec256_shift_right(m0, (uint32_t)48U);
#   42|       Lib_IntVector_Intrinsics_vec256
#   43|           m3 = Lib_IntVector_Intrinsics_vec256_shift_right(m1, (uint32_t)48U);

Error: COMPILER_WARNING: [#def853]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:43:14: note[note]: called from here
#   41|           m2 = Lib_IntVector_Intrinsics_vec256_shift_right(m0, (uint32_t)48U);
#   42|       Lib_IntVector_Intrinsics_vec256
#   43|->         m3 = Lib_IntVector_Intrinsics_vec256_shift_right(m1, (uint32_t)48U);
#   44|       Lib_IntVector_Intrinsics_vec256 m4 = Lib_IntVector_Intrinsics_vec256_interleave_high64(m0, m1);
#   45|       Lib_IntVector_Intrinsics_vec256 t0 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m0, m1);

Error: COMPILER_WARNING: [#def854]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:44:42: note[note]: called from here
#   42|       Lib_IntVector_Intrinsics_vec256
#   43|           m3 = Lib_IntVector_Intrinsics_vec256_shift_right(m1, (uint32_t)48U);
#   44|->     Lib_IntVector_Intrinsics_vec256 m4 = Lib_IntVector_Intrinsics_vec256_interleave_high64(m0, m1);
#   45|       Lib_IntVector_Intrinsics_vec256 t0 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m0, m1);
#   46|       Lib_IntVector_Intrinsics_vec256 t3 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m2, m3);

Error: COMPILER_WARNING: [#def855]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:45:42: note[note]: called from here
#   43|           m3 = Lib_IntVector_Intrinsics_vec256_shift_right(m1, (uint32_t)48U);
#   44|       Lib_IntVector_Intrinsics_vec256 m4 = Lib_IntVector_Intrinsics_vec256_interleave_high64(m0, m1);
#   45|->     Lib_IntVector_Intrinsics_vec256 t0 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m0, m1);
#   46|       Lib_IntVector_Intrinsics_vec256 t3 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m2, m3);
#   47|       Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def856]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:46:42: note[note]: called from here
#   44|       Lib_IntVector_Intrinsics_vec256 m4 = Lib_IntVector_Intrinsics_vec256_interleave_high64(m0, m1);
#   45|       Lib_IntVector_Intrinsics_vec256 t0 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m0, m1);
#   46|->     Lib_IntVector_Intrinsics_vec256 t3 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m2, m3);
#   47|       Lib_IntVector_Intrinsics_vec256
#   48|           t2 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)4U);

Error: COMPILER_WARNING: [#def857]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:48:14: note[note]: called from here
#   46|       Lib_IntVector_Intrinsics_vec256 t3 = Lib_IntVector_Intrinsics_vec256_interleave_low64(m2, m3);
#   47|       Lib_IntVector_Intrinsics_vec256
#   48|->         t2 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)4U);
#   49|       Lib_IntVector_Intrinsics_vec256 o20 = Lib_IntVector_Intrinsics_vec256_and(t2, mask26);
#   50|       Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def858]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:49:43: note[note]: called from here
#   47|       Lib_IntVector_Intrinsics_vec256
#   48|           t2 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)4U);
#   49|->     Lib_IntVector_Intrinsics_vec256 o20 = Lib_IntVector_Intrinsics_vec256_and(t2, mask26);
#   50|       Lib_IntVector_Intrinsics_vec256
#   51|           t1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t0, (uint32_t)26U);

Error: COMPILER_WARNING: [#def859]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:51:14: note[note]: called from here
#   49|       Lib_IntVector_Intrinsics_vec256 o20 = Lib_IntVector_Intrinsics_vec256_and(t2, mask26);
#   50|       Lib_IntVector_Intrinsics_vec256
#   51|->         t1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t0, (uint32_t)26U);
#   52|       Lib_IntVector_Intrinsics_vec256 o10 = Lib_IntVector_Intrinsics_vec256_and(t1, mask26);
#   53|       Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);

Error: COMPILER_WARNING: [#def860]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:52:43: note[note]: called from here
#   50|       Lib_IntVector_Intrinsics_vec256
#   51|           t1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t0, (uint32_t)26U);
#   52|->     Lib_IntVector_Intrinsics_vec256 o10 = Lib_IntVector_Intrinsics_vec256_and(t1, mask26);
#   53|       Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);
#   54|       Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def861]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:53:42: note[note]: called from here
#   51|           t1 = Lib_IntVector_Intrinsics_vec256_shift_right64(t0, (uint32_t)26U);
#   52|       Lib_IntVector_Intrinsics_vec256 o10 = Lib_IntVector_Intrinsics_vec256_and(t1, mask26);
#   53|->     Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);
#   54|       Lib_IntVector_Intrinsics_vec256
#   55|           t31 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)30U);

Error: COMPILER_WARNING: [#def862]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:55:15: note[note]: called from here
#   53|       Lib_IntVector_Intrinsics_vec256 o5 = Lib_IntVector_Intrinsics_vec256_and(t0, mask26);
#   54|       Lib_IntVector_Intrinsics_vec256
#   55|->         t31 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)30U);
#   56|       Lib_IntVector_Intrinsics_vec256 o30 = Lib_IntVector_Intrinsics_vec256_and(t31, mask26);
#   57|       Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def863]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:56:43: note[note]: called from here
#   54|       Lib_IntVector_Intrinsics_vec256
#   55|           t31 = Lib_IntVector_Intrinsics_vec256_shift_right64(t3, (uint32_t)30U);
#   56|->     Lib_IntVector_Intrinsics_vec256 o30 = Lib_IntVector_Intrinsics_vec256_and(t31, mask26);
#   57|       Lib_IntVector_Intrinsics_vec256
#   58|           o40 = Lib_IntVector_Intrinsics_vec256_shift_right64(m4, (uint32_t)40U);

Error: COMPILER_WARNING: [#def864]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:58:15: note[note]: called from here
#   56|       Lib_IntVector_Intrinsics_vec256 o30 = Lib_IntVector_Intrinsics_vec256_and(t31, mask26);
#   57|       Lib_IntVector_Intrinsics_vec256
#   58|->         o40 = Lib_IntVector_Intrinsics_vec256_shift_right64(m4, (uint32_t)40U);
#   59|       Lib_IntVector_Intrinsics_vec256 o0 = o5;
#   60|       Lib_IntVector_Intrinsics_vec256 o1 = o10;

Error: COMPILER_WARNING: [#def865]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:70:44: note[note]: called from here
#   68|       e[4U] = o4;
#   69|       uint64_t b1 = (uint64_t)0x1000000U;
#   70|->     Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b1);
#   71|       Lib_IntVector_Intrinsics_vec256 f40 = e[4U];
#   72|       e[4U] = Lib_IntVector_Intrinsics_vec256_or(f40, mask);

Error: COMPILER_WARNING: [#def866]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:72:13: note[note]: called from here
#   70|       Lib_IntVector_Intrinsics_vec256 mask = Lib_IntVector_Intrinsics_vec256_load64(b1);
#   71|       Lib_IntVector_Intrinsics_vec256 f40 = e[4U];
#   72|->     e[4U] = Lib_IntVector_Intrinsics_vec256_or(f40, mask);
#   73|       Lib_IntVector_Intrinsics_vec256 acc0 = acc[0U];
#   74|       Lib_IntVector_Intrinsics_vec256 acc1 = acc[1U];

Error: COMPILER_WARNING: [#def867]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:83:42: note[note]: called from here
#   81|       Lib_IntVector_Intrinsics_vec256 e3 = e[3U];
#   82|       Lib_IntVector_Intrinsics_vec256 e4 = e[4U];
#   83|->     Lib_IntVector_Intrinsics_vec256 r0 = Lib_IntVector_Intrinsics_vec256_zero;
#   84|       Lib_IntVector_Intrinsics_vec256 r1 = Lib_IntVector_Intrinsics_vec256_zero;
#   85|       Lib_IntVector_Intrinsics_vec256 r2 = Lib_IntVector_Intrinsics_vec256_zero;

Error: COMPILER_WARNING: [#def868]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:84:42: note[note]: called from here
#   82|       Lib_IntVector_Intrinsics_vec256 e4 = e[4U];
#   83|       Lib_IntVector_Intrinsics_vec256 r0 = Lib_IntVector_Intrinsics_vec256_zero;
#   84|->     Lib_IntVector_Intrinsics_vec256 r1 = Lib_IntVector_Intrinsics_vec256_zero;
#   85|       Lib_IntVector_Intrinsics_vec256 r2 = Lib_IntVector_Intrinsics_vec256_zero;
#   86|       Lib_IntVector_Intrinsics_vec256 r3 = Lib_IntVector_Intrinsics_vec256_zero;

Error: COMPILER_WARNING: [#def869]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:85:42: note[note]: called from here
#   83|       Lib_IntVector_Intrinsics_vec256 r0 = Lib_IntVector_Intrinsics_vec256_zero;
#   84|       Lib_IntVector_Intrinsics_vec256 r1 = Lib_IntVector_Intrinsics_vec256_zero;
#   85|->     Lib_IntVector_Intrinsics_vec256 r2 = Lib_IntVector_Intrinsics_vec256_zero;
#   86|       Lib_IntVector_Intrinsics_vec256 r3 = Lib_IntVector_Intrinsics_vec256_zero;
#   87|       Lib_IntVector_Intrinsics_vec256 r4 = Lib_IntVector_Intrinsics_vec256_zero;

Error: COMPILER_WARNING: [#def870]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:86:42: note[note]: called from here
#   84|       Lib_IntVector_Intrinsics_vec256 r1 = Lib_IntVector_Intrinsics_vec256_zero;
#   85|       Lib_IntVector_Intrinsics_vec256 r2 = Lib_IntVector_Intrinsics_vec256_zero;
#   86|->     Lib_IntVector_Intrinsics_vec256 r3 = Lib_IntVector_Intrinsics_vec256_zero;
#   87|       Lib_IntVector_Intrinsics_vec256 r4 = Lib_IntVector_Intrinsics_vec256_zero;
#   88|       Lib_IntVector_Intrinsics_vec256

Error: COMPILER_WARNING: [#def871]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:87:42: note[note]: called from here
#   85|       Lib_IntVector_Intrinsics_vec256 r2 = Lib_IntVector_Intrinsics_vec256_zero;
#   86|       Lib_IntVector_Intrinsics_vec256 r3 = Lib_IntVector_Intrinsics_vec256_zero;
#   87|->     Lib_IntVector_Intrinsics_vec256 r4 = Lib_IntVector_Intrinsics_vec256_zero;
#   88|       Lib_IntVector_Intrinsics_vec256
#   89|           r01 =

Error: COMPILER_WARNING: [#def872]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:90:13: note[note]: called from here
#   88|       Lib_IntVector_Intrinsics_vec256
#   89|           r01 =
#   90|->             Lib_IntVector_Intrinsics_vec256_insert64(r0,
#   91|                                                        Lib_IntVector_Intrinsics_vec256_extract64(acc0, (uint32_t)0U),
#   92|                                                        (uint32_t)0U);

Error: COMPILER_WARNING: [#def873]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:95:13: note[note]: called from here
#   93|       Lib_IntVector_Intrinsics_vec256
#   94|           r11 =
#   95|->             Lib_IntVector_Intrinsics_vec256_insert64(r1,
#   96|                                                        Lib_IntVector_Intrinsics_vec256_extract64(acc1, (uint32_t)0U),
#   97|                                                        (uint32_t)0U);

Error: COMPILER_WARNING: [#def874]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:100:13: note[note]: called from here
#   98|       Lib_IntVector_Intrinsics_vec256
#   99|           r21 =
#  100|->             Lib_IntVector_Intrinsics_vec256_insert64(r2,
#  101|                                                        Lib_IntVector_Intrinsics_vec256_extract64(acc2, (uint32_t)0U),
#  102|                                                        (uint32_t)0U);

Error: COMPILER_WARNING: [#def875]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:105:13: note[note]: called from here
#  103|       Lib_IntVector_Intrinsics_vec256
#  104|           r31 =
#  105|->             Lib_IntVector_Intrinsics_vec256_insert64(r3,
#  106|                                                        Lib_IntVector_Intrinsics_vec256_extract64(acc3, (uint32_t)0U),
#  107|                                                        (uint32_t)0U);

Error: COMPILER_WARNING: [#def876]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:110:13: note[note]: called from here
#  108|       Lib_IntVector_Intrinsics_vec256
#  109|           r41 =
#  110|->             Lib_IntVector_Intrinsics_vec256_insert64(r4,
#  111|                                                        Lib_IntVector_Intrinsics_vec256_extract64(acc4, (uint32_t)0U),
#  112|                                                        (uint32_t)0U);

Error: COMPILER_WARNING: [#def877]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:113:42: note[note]: called from here
#  111|                                                        Lib_IntVector_Intrinsics_vec256_extract64(acc4, (uint32_t)0U),
#  112|                                                        (uint32_t)0U);
#  113|->     Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_add64(r01, e0);
#  114|       Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_add64(r11, e1);
#  115|       Lib_IntVector_Intrinsics_vec256 f2 = Lib_IntVector_Intrinsics_vec256_add64(r21, e2);

Error: COMPILER_WARNING: [#def878]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:114:42: note[note]: called from here
#  112|                                                        (uint32_t)0U);
#  113|       Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_add64(r01, e0);
#  114|->     Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_add64(r11, e1);
#  115|       Lib_IntVector_Intrinsics_vec256 f2 = Lib_IntVector_Intrinsics_vec256_add64(r21, e2);
#  116|       Lib_IntVector_Intrinsics_vec256 f3 = Lib_IntVector_Intrinsics_vec256_add64(r31, e3);

Error: COMPILER_WARNING: [#def879]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:115:42: note[note]: called from here
#  113|       Lib_IntVector_Intrinsics_vec256 f0 = Lib_IntVector_Intrinsics_vec256_add64(r01, e0);
#  114|       Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_add64(r11, e1);
#  115|->     Lib_IntVector_Intrinsics_vec256 f2 = Lib_IntVector_Intrinsics_vec256_add64(r21, e2);
#  116|       Lib_IntVector_Intrinsics_vec256 f3 = Lib_IntVector_Intrinsics_vec256_add64(r31, e3);
#  117|       Lib_IntVector_Intrinsics_vec256 f4 = Lib_IntVector_Intrinsics_vec256_add64(r41, e4);

Error: COMPILER_WARNING: [#def880]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:116:42: note[note]: called from here
#  114|       Lib_IntVector_Intrinsics_vec256 f1 = Lib_IntVector_Intrinsics_vec256_add64(r11, e1);
#  115|       Lib_IntVector_Intrinsics_vec256 f2 = Lib_IntVector_Intrinsics_vec256_add64(r21, e2);
#  116|->     Lib_IntVector_Intrinsics_vec256 f3 = Lib_IntVector_Intrinsics_vec256_add64(r31, e3);
#  117|       Lib_IntVector_Intrinsics_vec256 f4 = Lib_IntVector_Intrinsics_vec256_add64(r41, e4);
#  118|       Lib_IntVector_Intrinsics_vec256 acc01 = f0;

Error: COMPILER_WARNING: [#def881]
nss-3.117/nss/lib/freebl/verified/Hacl_Poly1305_256.c:117:42: note[note]: called from here
#  115|       Lib_IntVector_Intrinsics_vec256 f2 = Lib_IntVector_Intrinsics_vec256_add64(r21, e2);
#  116|       Lib_IntVector_Intrinsics_vec256 f3 = Lib_IntVector_Intrinsics_vec256_add64(r31, e3);
#  117|->     Lib_IntVector_Intrinsics_vec256 f4 = Lib_IntVector_Intrinsics_vec256_add64(r41, e4);
#  118|       Lib_IntVector_Intrinsics_vec256 acc01 = f0;
#  119|       Lib_IntVector_Intrinsics_vec256 acc11 = f1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def882]
nss-3.117/nss/lib/jar/jar.c:460:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘signer’
nss-3.117/nss/lib/jar/jar.c:322:1: enter_function: entry to ‘JAR_find_next’
nss-3.117/nss/lib/jar/jar.c:337:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/jar/jar.c:385:12: branch_false: following ‘false’ branch (when ‘list’ is non-NULL)...
nss-3.117/nss/lib/jar/jar.c:391:13: branch_false: ...to here
nss-3.117/nss/lib/jar/jar.c:391:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/jar/jar.c:407:13: branch_false: ...to here
nss-3.117/nss/lib/jar/jar.c:407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/jar/jar.c:426:13: branch_false: ...to here
nss-3.117/nss/lib/jar/jar.c:426:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/jar/jar.c:433:16: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/jar/jar.c:441:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/jar/jar.c:445:21: branch_true: ...to here
nss-3.117/nss/lib/jar/jar.c:445:21: call_function: calling ‘jar_find_first_cert’ from ‘JAR_find_next’
#  458|   {
#  459|       ZZLink *link;
#  460|->     ZZList *list = signer->certs;
#  461|       int status = JAR_ERR_PNF;
#  462|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def883]
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:82:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:62:1: enter_function: entry to ‘pkix_ComCertSelParams_Duplicate’
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:68:32: release_memory: ‘paramsDuplicate’ is NULL
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:71:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:73:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:73:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:79:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:79:9: call_function: calling ‘PKIX_ComCertSelParams_Create’ from ‘pkix_ComCertSelParams_Duplicate’
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:79:9: return_function: returning to ‘pkix_ComCertSelParams_Duplicate’ from ‘PKIX_ComCertSelParams_Create’
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:79:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:82:24: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:82:24: release_memory: ‘paramsDuplicate’ is NULL
nss-3.117/nss/lib/libpkix/pkix/certsel/pkix_comcertselparams.c:82:9: danger: dereference of NULL ‘paramsDuplicate’
#   80|                       PKIX_COMCERTSELPARAMSCREATEFAILED);
#   81|   
#   82|->         paramsDuplicate->minPathLength = params->minPathLength;
#   83|           paramsDuplicate->matchAllSubjAltNames = params->matchAllSubjAltNames;
#   84|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def884]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:456:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:430:1: enter_function: entry to ‘pkix_List_Duplicate’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:436:20: release_memory: ‘listDuplicate’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:439:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:441:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:441:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:446:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:446:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:452:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:452:17: call_function: calling ‘pkix_List_Create_Internal’ from ‘pkix_List_Duplicate’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:452:17: return_function: returning to ‘pkix_List_Duplicate’ from ‘pkix_List_Create_Internal’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:452:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:456:30: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:456:30: release_memory: ‘listDuplicate’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:456:17: danger: dereference of NULL ‘listDuplicate’
#  454|                               PKIX_LISTCREATEINTERNALFAILED);
#  455|   
#  456|->                 listDuplicate->length = list->length;
#  457|   
#  458|                   PKIX_INCREF(list->item);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def885]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1421:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1387:1: enter_function: entry to ‘PKIX_List_AppendItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1393:20: release_memory: ‘newElement’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1397:9: branch_false: following ‘false’ branch (when ‘list’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1399:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1399:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1403:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1407:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1416:9: call_function: calling ‘pkix_List_Create_Internal’ from ‘PKIX_List_AppendItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1416:9: return_function: returning to ‘PKIX_List_AppendItem’ from ‘pkix_List_Create_Internal’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1416:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1420:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1420:9: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1421:19: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1421:19: release_memory: ‘newElement’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1421:9: danger: dereference of NULL ‘newElement’
# 1419|   
# 1420|           PKIX_INCREF(item);
# 1421|->         newElement->item = item;
# 1422|   
# 1423|           PKIX_CHECK(PKIX_PL_Object_InvalidateCache

Error: GCC_ANALYZER_WARNING (CWE-476): [#def886]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1471:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘element’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1442:1: enter_function: entry to ‘PKIX_List_InsertItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1448:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1449:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1452:9: branch_false: following ‘false’ branch (when ‘list’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1455:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1459:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1459:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: call_function: calling ‘pkix_List_Create_Internal’ from ‘PKIX_List_InsertItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: return_function: returning to ‘PKIX_List_InsertItem’ from ‘pkix_List_Create_Internal’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1467:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1467:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1468:13: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1468:13: call_function: calling ‘pkix_List_GetElement’ from ‘PKIX_List_InsertItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1468:13: return_function: returning to ‘PKIX_List_InsertItem’ from ‘pkix_List_GetElement’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1468:13: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1471:36: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1471:36: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1471:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1471:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1471:29: danger: dereference of NULL ‘element’
# 1469|                          PKIX_LISTGETELEMENTFAILED);
# 1470|               /* Copy the old element's contents into the new element */
# 1471|->             newElem->item = element->item;
# 1472|               /* Add new item to the list */
# 1473|               PKIX_INCREF(item);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def887]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1482:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1442:1: enter_function: entry to ‘PKIX_List_InsertItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1448:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1449:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1452:9: branch_false: following ‘false’ branch (when ‘list’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1455:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1455:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1459:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1459:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: call_function: calling ‘pkix_List_Create_Internal’ from ‘PKIX_List_InsertItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: return_function: returning to ‘PKIX_List_InsertItem’ from ‘pkix_List_Create_Internal’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1464:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1467:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1467:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1481:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1481:13: branch_false: following ‘false’ branch (when ‘item’ is NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1482:20: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1482:20: release_memory: ‘newElem’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1483:13: release_memory: using NULL here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1484:13: release_memory: ‘*list.next’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1485:13: release_memory: ‘newElem’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1483:13: release_memory: using NULL here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1484:13: release_memory: ‘*list.next’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1485:13: release_memory: ‘newElem’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1482:13: danger: dereference of NULL ‘newElem’
# 1480|           } else {
# 1481|               PKIX_INCREF(item);
# 1482|->             newElem->item = item;
# 1483|               newElem->next = NULL;
# 1484|               list->next = newElem;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def888]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1520:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘element’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1502:1: enter_function: entry to ‘PKIX_List_GetItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1508:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1511:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1513:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1513:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1517:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1517:9: call_function: calling ‘pkix_List_GetElement’ from ‘PKIX_List_GetItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1517:9: return_function: returning to ‘PKIX_List_GetItem’ from ‘pkix_List_GetElement’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1517:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1520:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1520:9: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1520:9: danger: dereference of NULL ‘element’
# 1518|                       PKIX_LISTGETELEMENTFAILED);
# 1519|   
# 1520|->         PKIX_INCREF(element->item);
# 1521|           *pItem = element->item;
# 1522|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def889]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1555:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘element’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1532:1: enter_function: entry to ‘PKIX_List_SetItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1538:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1541:9: branch_false: following ‘false’ branch (when ‘list’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1543:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1543:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1547:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1547:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1551:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1551:9: call_function: calling ‘pkix_List_GetElement’ from ‘PKIX_List_SetItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1551:9: return_function: returning to ‘PKIX_List_SetItem’ from ‘pkix_List_GetElement’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1551:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1555:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1555:9: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1555:9: danger: dereference of NULL ‘element’
# 1553|   
# 1554|           /* DecRef old contents */
# 1555|->         PKIX_DECREF(element->item);
# 1556|   
# 1557|           /* Set New Contents */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def890]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1598:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘element’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1574:1: enter_function: entry to ‘PKIX_List_DeleteItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1579:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1580:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1584:9: branch_false: following ‘false’ branch (when ‘list’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1586:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1586:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1590:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1590:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: call_function: calling ‘pkix_List_GetElement’ from ‘PKIX_List_DeleteItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: return_function: returning to ‘PKIX_List_DeleteItem’ from ‘pkix_List_GetElement’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1598:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1598:9: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1598:9: danger: dereference of NULL ‘element’
# 1596|   
# 1597|           /* DecRef old contents */
# 1598|->         PKIX_DECREF(element->item);
# 1599|   
# 1600|           nextElement = element->next;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def891]
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1623:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1574:1: enter_function: entry to ‘PKIX_List_DeleteItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1579:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1580:20: release_memory: ‘element’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1584:9: branch_false: following ‘false’ branch (when ‘list’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1586:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1586:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1590:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1590:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: call_function: calling ‘pkix_List_GetElement’ from ‘PKIX_List_DeleteItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: return_function: returning to ‘PKIX_List_DeleteItem’ from ‘pkix_List_GetElement’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1594:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1598:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1598:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1600:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1602:12: branch_false: following ‘false’ branch (when ‘nextElement’ is NULL)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1616:20: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1616:20: branch_true: following ‘true’ branch (when ‘index != 0’)...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1617:25: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1617:25: call_function: calling ‘pkix_List_GetElement’ from ‘PKIX_List_DeleteItem’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1617:25: return_function: returning to ‘PKIX_List_DeleteItem’ from ‘pkix_List_GetElement’
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1617:25: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1623:28: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1623:28: release_memory: ‘prevElement’ is NULL
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1623:17: release_memory: using NULL here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1623:17: release_memory: using NULL here
nss-3.117/nss/lib/libpkix/pkix/util/pkix_list.c:1623:17: danger: dereference of NULL ‘prevElement’
# 1621|                           prevElement = list;
# 1622|                   }
# 1623|->                 prevElement->next = NULL;
# 1624|   
# 1625|                   /* Delete the element */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def892]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:371:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘hcv1’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:248:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:254:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:256:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:256:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:256:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:370:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:371:19: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:371:19: danger: dereference of NULL ‘hcv1’
#  369|           if (PKIX_ERROR_RECEIVED) {
#  370|               if (aiaMgr->client.hdata.requestSession != NULL) {
#  371|->                 (*hcv1->freeFcn)(aiaMgr->client.hdata.requestSession);
#  372|                   aiaMgr->client.hdata.requestSession = NULL;
#  373|               }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def893]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:375:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘hcv1’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:248:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:254:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:256:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:256:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:256:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:370:16: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:374:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:374:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:375:19: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_aiamgr.c:375:19: danger: dereference of NULL ‘hcv1’
#  373|               }
#  374|               if (aiaMgr->client.hdata.serverSession != NULL) {
#  375|->                 (*hcv1->freeSessionFcn)(aiaMgr->client.hdata.serverSession);
#  376|                   aiaMgr->client.hdata.serverSession = NULL;
#  377|               }

Error: GCC_ANALYZER_WARNING (CWE-465): [#def894]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1111:17: warning[-Wanalyzer-deref-before-check]: check of ‘colCertStoreContext’ for NULL after already dereferencing it
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1086:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1090:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1096:32: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1096:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1098:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1098:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1098:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1105:20: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1111:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1111:17: danger: pointer ‘colCertStoreContext’ is checked for NULL here but it was already dereferenced at [(9)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/8)
# 1109|                   }
# 1110|   
# 1111|->                 PKIX_OBJECT_UNLOCK(colCertStoreContext);
# 1112|           }
# 1113|   

Error: GCC_ANALYZER_WARNING (CWE-465): [#def895]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1192:17: warning[-Wanalyzer-deref-before-check]: check of ‘colCertStoreContext’ for NULL after already dereferencing it
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1167:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1171:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1177:32: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1177:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1179:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1179:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1179:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1186:20: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1192:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_colcertstore.c:1192:17: danger: pointer ‘colCertStoreContext’ is checked for NULL here but it was already dereferenced at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8)
# 1190|                   }
# 1191|   
# 1192|->                 PKIX_OBJECT_UNLOCK(colCertStoreContext);
# 1193|   
# 1194|           }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def896]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:629:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘requestParams.nc’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:565:1: enter_function: entry to ‘pkix_pl_LdapCertStore_GetCert’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:586:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:601:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:605:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:605:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:613:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:613:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:617:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:617:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:621:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:621:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:622:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:622:17: call_function: calling ‘pkix_pl_LdapCertStore_MakeNameAVAList’ from ‘pkix_pl_LdapCertStore_GetCert’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:622:17: return_function: returning to ‘pkix_pl_LdapCertStore_GetCert’ from ‘pkix_pl_LdapCertStore_MakeNameAVAList’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:622:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:629:22: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:629:22: danger: use of uninitialized value ‘requestParams.nc’ here
#  627|                           PKIX_LDAPCERTSTOREMAKENAMEAVALISTFAILED);
#  628|   
#  629|->                 if (*requestParams.nc == NULL) {
#  630|                           /*
#  631|                            * The subjectName may not include any components

Error: GCC_ANALYZER_WARNING (CWE-457): [#def897]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:899:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘requestParams.nc’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:822:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:852:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:856:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:856:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:860:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:860:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:870:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:870:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:872:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:872:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:876:21: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:876:20: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:882:25: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:882:25: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:889:25: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:889:25: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:897:25: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:897:25: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:899:30: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapcertstore.c:899:30: danger: use of uninitialized value ‘requestParams.nc’ here
#  897|                           PKIX_DECREF(issuer);
#  898|   
#  899|->                         if (*requestParams.nc == NULL) {
#  900|                                   /*
#  901|                                           * The issuer may not include any

Error: GCC_ANALYZER_WARNING (CWE-476): [#def898]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2470:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘encoded’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2456:18: release_memory: ‘encoded’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2459:9: branch_false: following ‘false’ branch (when ‘client’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2461:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2461:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2462:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2462:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2469:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2470:17: release_memory: ‘encoded’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_ldapdefaultclient.c:2470:17: danger: dereference of NULL ‘encoded’
# 2468|   
# 2469|                   callbackList = (PKIX_PL_Socket_Callback *)(client->callbackList);
# 2470|->                 PKIX_CHECK(callbackList->sendCallback
# 2471|                           (client->clientSocket,
# 2472|                           encoded->data,

Error: GCC_ANALYZER_WARNING (CWE-465): [#def899]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:444:9: warning[-Wanalyzer-deref-before-check]: check of ‘dp’ for NULL after already dereferencing it
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:399:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:402:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:402:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:413:11: branch_true: following ‘true’ branch (when ‘hasFetchedCrlInCache == 0’)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:413:33: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:413:11: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:414:34: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:413:11: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:417:13: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:419:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:423:15: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:423:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:425:13: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:444:9: danger: pointer ‘dp’ is checked for NULL here but it was already dereferenced at [(13)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/12)
#  442|               }
#  443|           }
#  444|->         PKIX_DECREF(dp);
#  445|       }
#  446|   cleanup:

Error: GCC_ANALYZER_WARNING (CWE-465): [#def900]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:748:9: warning[-Wanalyzer-deref-before-check]: check of ‘dp’ for NULL after already dereferencing it
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:683:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:692:5: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:694:10: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:695:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:699:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:703:9: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:703:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:707:16: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:707:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:710:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:710:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:712:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:740:12: branch_false: following ‘false’ branch (when ‘removeDp == 0’)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:746:13: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:748:9: danger: pointer ‘dp’ is checked for NULL here but it was already dereferenced at [(11)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/10)
#  746|               dpIndex += 1;
#  747|           }
#  748|->         PKIX_DECREF(dp);
#  749|       }
#  750|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def901]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:882:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘myHttpResponseDataLen’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:787:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:788:10: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:787:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:791:5: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:796:16: branch_false: following ‘false’ branch (when ‘derGenName’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:797:18: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:803:16: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:806:46: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:808:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:810:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:860:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:867:14: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:872:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:882:17: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_pk11certstore.c:882:17: danger: use of uninitialized value ‘myHttpResponseDataLen’ here
#  880|           derGenName = *dp->nssdp->derFullName;
#  881|       } else {
#  882|->         SECItem derCrl = { siBuffer,
#  883|                              (void*)myHttpResponseData,
#  884|                              myHttpResponseDataLen };

Error: GCC_ANALYZER_WARNING (CWE-476): [#def902]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:764:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:728:1: enter_function: entry to ‘pkix_pl_CRLEntry_Create’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:734:27: release_memory: ‘crlEntry’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:742:9: branch_false: following ‘false’ branch (when ‘pCrlEntryList’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:746:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:746:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:749:12: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:749:12: branch_true: following ‘true’ branch (when ‘nssCrlEntries’ is non-NULL)...
 branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:750:20: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:751:17: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:751:17: call_function: calling ‘pkix_pl_CRLEntry_CreateEntry’ from ‘pkix_pl_CRLEntry_Create’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:751:17: return_function: returning to ‘pkix_pl_CRLEntry_Create’ from ‘pkix_pl_CRLEntry_CreateEntry’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:751:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:756:36: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:760:17: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:764:25: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:764:25: release_memory: ‘crlEntry’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_crlentry.c:764:17: danger: dereference of NULL ‘crlEntry’
#  762|                               PKIX_BIGINTCREATEWITHBYTESFAILED);
#  763|   
#  764|->                 crlEntry->serialNumber = serialNumber;
#  765|                   crlEntry->nssCrlEntry = *entries;
#  766|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def903]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:164:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘objectHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1270:1: enter_function: entry to ‘PKIX_PL_Object_InvalidateCache’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1274:25: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1277:9: branch_false: following ‘false’ branch (when ‘object’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: call_function: calling ‘pkix_pl_Object_GetHeader’ from ‘PKIX_PL_Object_InvalidateCache’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: return_function: returning to ‘PKIX_PL_Object_InvalidateCache’ from ‘pkix_pl_Object_GetHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1283:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1283:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1287:21: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1290:9: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1290:9: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1290:9: call_function: calling ‘PKIX_PL_Object_DecRef’ from ‘PKIX_PL_Object_InvalidateCache’
#  162|   
#  163|           /* Attempt to delete an object still being used */
#  164|->         if (objectHeader->references != 0) {
#  165|                   PKIX_ERROR_FATAL(PKIX_OBJECTSTILLREFERENCED);
#  166|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def904]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:853:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘objectHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1270:1: enter_function: entry to ‘PKIX_PL_Object_InvalidateCache’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1274:25: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1277:9: branch_false: following ‘false’ branch (when ‘object’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: call_function: calling ‘pkix_pl_Object_GetHeader’ from ‘PKIX_PL_Object_InvalidateCache’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: return_function: returning to ‘PKIX_PL_Object_InvalidateCache’ from ‘pkix_pl_Object_GetHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1283:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1283:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1287:21: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1290:9: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1290:9: branch_true: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1290:9: call_function: calling ‘PKIX_PL_Object_DecRef’ from ‘PKIX_PL_Object_InvalidateCache’
#  851|               PKIX_PL_DestructorCallback destructor = NULL;
#  852|               pkix_ClassTable_Entry *ctEntry = NULL;
#  853|->             PKIX_UInt32 objType = objectHeader->type;
#  854|               
#  855|               /* first, special handling for system types */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def905]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1096:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘objectHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1078:1: enter_function: entry to ‘PKIX_PL_Object_Hashcode’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1083:25: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1089:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1092:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1092:9: call_function: calling ‘pkix_pl_Object_GetHeader’ from ‘PKIX_PL_Object_Hashcode’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1092:9: return_function: returning to ‘PKIX_PL_Object_Hashcode’ from ‘pkix_pl_Object_GetHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1092:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1096:26: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1096:26: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1096:14: danger: dereference of NULL ‘objectHeader’
# 1094|   
# 1095|           /* if we don't have a cached copy from before, we create one */
# 1096|->         if (!objectHeader->hashcodeCached){
# 1097|   
# 1098|                   PKIX_UInt32 objType = objectHeader->type;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def906]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1190:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘objectHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1172:1: enter_function: entry to ‘PKIX_PL_Object_ToString’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1177:25: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1183:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1186:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1186:9: call_function: calling ‘pkix_pl_Object_GetHeader’ from ‘PKIX_PL_Object_ToString’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1186:9: return_function: returning to ‘PKIX_PL_Object_ToString’ from ‘pkix_pl_Object_GetHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1186:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1190:26: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1190:26: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1190:14: danger: dereference of NULL ‘objectHeader’
# 1188|   
# 1189|           /* if we don't have a cached copy from before, we create one */
# 1190|->         if (!objectHeader->stringRep){
# 1191|   
# 1192|                   PKIX_UInt32 objType = objectHeader->type;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def907]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1287:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1270:1: enter_function: entry to ‘PKIX_PL_Object_InvalidateCache’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1274:25: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1277:9: branch_false: following ‘false’ branch (when ‘object’ is non-NULL)...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: call_function: calling ‘pkix_pl_Object_GetHeader’ from ‘PKIX_PL_Object_InvalidateCache’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: return_function: returning to ‘PKIX_PL_Object_InvalidateCache’ from ‘pkix_pl_Object_GetHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1280:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1283:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1283:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1287:21: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1287:21: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1287:9: danger: dereference of NULL ‘objectHeader’
# 1285|   
# 1286|           /* invalidate hashcode */
# 1287|->         objectHeader->hashcode = 0;
# 1288|           objectHeader->hashcodeCached = PKIX_FALSE;
# 1289|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def908]
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1435:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘objectHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1421:1: enter_function: entry to ‘PKIX_PL_Object_GetType’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1426:25: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1429:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1432:9: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1432:9: call_function: calling ‘pkix_pl_Object_GetHeader’ from ‘PKIX_PL_Object_GetType’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1432:9: return_function: returning to ‘PKIX_PL_Object_GetType’ from ‘pkix_pl_Object_GetHeader’
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1432:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1435:30: branch_false: ...to here
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1435:30: release_memory: ‘objectHeader’ is NULL
nss-3.117/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_object.c:1435:18: danger: dereference of NULL ‘objectHeader’
# 1433|                       PKIX_RECEIVEDCORRUPTEDOBJECTARGUMENT);
# 1434|   
# 1435|->         *pType = objectHeader->type;
# 1436|   
# 1437|   cleanup:

Error: GCC_ANALYZER_WARNING (CWE-775): [#def909]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3394:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3414:1: enter_function: entry to ‘print_final_statistics’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_resource: opened here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3446:12: branch_false: following ‘false’ branch (when ‘calls != 0’)...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: call_function: calling ‘getPrintTime’ from ‘print_final_statistics’
# 3392|       }
# 3393|   
# 3394|->     prTime = PR_IntervalToSeconds(time);
# 3395|   
# 3396|       if (prTime >= 600) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def910]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3394:14: warning[-Wanalyzer-malloc-leak]: leak of ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3414:1: enter_function: entry to ‘print_final_statistics’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_memory: allocated here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3446:12: branch_false: following ‘false’ branch (when ‘calls != 0’)...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: call_function: calling ‘getPrintTime’ from ‘print_final_statistics’
# 3392|       }
# 3393|   
# 3394|->     prTime = PR_IntervalToSeconds(time);
# 3395|   
# 3396|       if (prTime >= 600) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def911]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3404:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3414:1: enter_function: entry to ‘print_final_statistics’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_resource: opened here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3446:12: branch_false: following ‘false’ branch (when ‘calls != 0’)...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: call_function: calling ‘getPrintTime’ from ‘print_final_statistics’
# 3402|           return prTime;
# 3403|       }
# 3404|->     prTime = PR_IntervalToMilliseconds(time);
# 3405|       if (prTime >= 10) {
# 3406|           *type = "ms";

Error: GCC_ANALYZER_WARNING (CWE-401): [#def912]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3404:14: warning[-Wanalyzer-malloc-leak]: leak of ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3414:1: enter_function: entry to ‘print_final_statistics’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_memory: allocated here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3446:12: branch_false: following ‘false’ branch (when ‘calls != 0’)...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: call_function: calling ‘getPrintTime’ from ‘print_final_statistics’
# 3402|           return prTime;
# 3403|       }
# 3404|->     prTime = PR_IntervalToMilliseconds(time);
# 3405|       if (prTime >= 10) {
# 3406|           *type = "ms";

Error: GCC_ANALYZER_WARNING (CWE-775): [#def913]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3410:12: warning[-Wanalyzer-file-leak]: leak of FILE ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3414:1: enter_function: entry to ‘print_final_statistics’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_resource: opened here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3446:12: branch_false: following ‘false’ branch (when ‘calls != 0’)...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: call_function: calling ‘getPrintTime’ from ‘print_final_statistics’
# 3408|       }
# 3409|       *type = "us";
# 3410|->     return PR_IntervalToMicroseconds(time);
# 3411|   }
# 3412|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def914]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3410:12: warning[-Wanalyzer-malloc-leak]: leak of ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3414:1: enter_function: entry to ‘print_final_statistics’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_memory: allocated here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3446:12: branch_false: following ‘false’ branch (when ‘calls != 0’)...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3450:18: call_function: calling ‘getPrintTime’ from ‘print_final_statistics’
# 3408|       }
# 3409|       *type = "us";
# 3410|->     return PR_IntervalToMicroseconds(time);
# 3411|   }
# 3412|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def915]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3442:27: warning[-Wanalyzer-file-leak]: leak of FILE ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_resource: opened here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3442:27: danger: ‘outfile’ leaks here; was opened at [(3)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/2)
# 3440|       for (i = 0; i < nssdbg_prof_size; i++) {
# 3441|           PRIntervalTime time = nssdbg_prof_data[i].time;
# 3442|->         PRUint32 usTime = PR_IntervalToMicroseconds(time);
# 3443|           PRUint32 prTime = 0;
# 3444|           PRUint32 calls = nssdbg_prof_data[i].calls;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def916]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3442:27: warning[-Wanalyzer-malloc-leak]: leak of ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_memory: allocated here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3440:17: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3441:24: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3442:27: danger: ‘outfile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
# 3440|       for (i = 0; i < nssdbg_prof_size; i++) {
# 3441|           PRIntervalTime time = nssdbg_prof_data[i].time;
# 3442|->         PRUint32 usTime = PR_IntervalToMicroseconds(time);
# 3443|           PRUint32 prTime = 0;
# 3444|           PRUint32 calls = nssdbg_prof_data[i].calls;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def917]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3467:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_resource: opened here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3467:5: danger: ‘outfile’ leaks here; was opened at [(3)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/2)
# 3465|       fprintf(outfile, "\n\nMaximum number of concurrent open sessions: %d\n\n",
# 3466|               maxOpenSessions);
# 3467|->     fflush(outfile);
# 3468|       if (outfile != stdout) {
# 3469|           fclose(outfile);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def918]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3467:5: warning[-Wanalyzer-malloc-leak]: leak of ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_memory: allocated here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3467:5: danger: ‘outfile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/2)
# 3465|       fprintf(outfile, "\n\nMaximum number of concurrent open sessions: %d\n\n",
# 3466|               maxOpenSessions);
# 3467|->     fflush(outfile);
# 3468|       if (outfile != stdout) {
# 3469|           fclose(outfile);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def919]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3471:1: warning[-Wanalyzer-file-leak]: leak of FILE ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_resource: opened here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3468:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3471:1: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3471:1: danger: ‘outfile’ leaks here; was opened at [(3)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/2)
# 3469|           fclose(outfile);
# 3470|       }
# 3471|-> }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def920]
nss-3.117/nss/lib/pk11wrap/debug_module.c:3471:1: warning[-Wanalyzer-malloc-leak]: leak of ‘outfile’
nss-3.117/nss/lib/pk11wrap/debug_module.c:3425:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3427:19: acquire_memory: allocated here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3429:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3433:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3468:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/debug_module.c:3471:1: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/debug_module.c:3471:1: danger: ‘outfile’ leaks here; was allocated at [(3)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/2)
# 3469|           fclose(outfile);
# 3470|       }
# 3471|-> }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def921]
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2814:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pubKeyData’
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2044:1: enter_function: entry to ‘SECKEY_SetPublicValue’
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2053:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2054:9: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2053:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2054:38: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2053:9: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2059:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2068:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2072:5: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2134:8: branch_true: following ‘true’ branch (when ‘rv == 0’)...
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2135:14: branch_true: ...to here
nss-3.117/nss/lib/pk11wrap/pk11akey.c:2135:14: call_function: calling ‘PK11_ImportPublicKey’ from ‘SECKEY_SetPublicValue’
# 2812|       SECStatus rv;
# 2813|   
# 2814|->     if (pubKeyData->len <= SHA1_LENGTH) {
# 2815|           /* probably an already hashed value. The strongest known public
# 2816|            * key values <= 160 bits would be less than 40 bit symetric in

Error: GCC_ANALYZER_WARNING (CWE-476): [#def922]
nss-3.117/nss/lib/pk11wrap/pk11slot.c:481:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘slot’
nss-3.117/nss/lib/pk11wrap/pk11slot.c:1864:1: enter_function: entry to ‘PK11_IsInternalKeySlot’
nss-3.117/nss/lib/pk11wrap/pk11slot.c:1869:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/pk11wrap/pk11slot.c:1873:16: branch_false: ...to here
nss-3.117/nss/lib/pk11wrap/pk11slot.c:1873:16: call_function: calling ‘PK11_GetInternalKeySlot’ from ‘PK11_IsInternalKeySlot’
nss-3.117/nss/lib/pk11wrap/pk11slot.c:1873:16: return_function: returning to ‘PK11_IsInternalKeySlot’ from ‘PK11_GetInternalKeySlot’
nss-3.117/nss/lib/pk11wrap/pk11slot.c:1875:5: call_function: calling ‘PK11_FreeSlot’ from ‘PK11_IsInternalKeySlot’
#  479|   
#  480|       /* free up all the sessions on this slot */
#  481|->     if (slot->functionList) {
#  482|           PK11_GETTAB(slot)
#  483|               ->C_CloseAllSessions(slot->slotID);

Error: CPPCHECK_WARNING (CWE-909): [#def923]
nss-3.117/nss/lib/pkcs7/p7decode.c:1655: error[uninitStructMember]: Uninitialized struct member: holder.len
# 1653|           if (sigkey != NULL) {
# 1654|               PORT_Assert(sig == &holder);
# 1655|->             PORT_ZFree(holder.data, holder.len);
# 1656|           }
# 1657|       }

Error: CPPCHECK_WARNING (CWE-190): [#def924]
nss-3.117/nss/lib/softoken/pkcs11u.c:1366: error[integerOverflow]: Signed integer overflow for expression '0-1'.
# 1364|       if (so) {
# 1365|           PZ_Lock(session->objectLock);
# 1366|->         sftkqueue_add(&so->sessionList, 0, session->objects, 0);
# 1367|           so->session = session;
# 1368|           PZ_Unlock(session->objectLock);

Error: CPPCHECK_WARNING (CWE-190): [#def925]
nss-3.117/nss/lib/softoken/pkcs11u.c:1389: error[integerOverflow]: Signed integer overflow for expression '0-1'.
# 1387|           session = so->session;
# 1388|           PZ_Lock(session->objectLock);
# 1389|->         sftkqueue_delete(&so->sessionList, 0, session->objects, 0);
# 1390|           PZ_Unlock(session->objectLock);
# 1391|           PZ_Lock(slot->objectLock);

Error: CPPCHECK_WARNING (CWE-758): [#def926]
nss-3.117/nss/lib/softoken/pkcs11u.c:2245: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 2243|   {
# 2244|       PR_STATIC_ASSERT(CKR_OK == 0);
# 2245|->     return ~PORT_CT_NOT_ZERO(rv);
# 2246|   }
# 2247|   

Error: CPPCHECK_WARNING (CWE-758): [#def927]
nss-3.117/nss/lib/softoken/pkcs11u.c:2259: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 2257|   
# 2258|       /* If padSize <= blockSize, set goodPad to all-1s and all-0s otherwise.*/
# 2259|->     unsigned int goodPad = PORT_CT_DUPLICATE_MSB_TO_ALL(~(blockSize - padSize));
# 2260|       /* padSize should not be 0 */
# 2261|       goodPad &= PORT_CT_NOT_ZERO(padSize);

Error: CPPCHECK_WARNING (CWE-758): [#def928]
nss-3.117/nss/lib/softoken/pkcs11u.c:2261: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 2259|       unsigned int goodPad = PORT_CT_DUPLICATE_MSB_TO_ALL(~(blockSize - padSize));
# 2260|       /* padSize should not be 0 */
# 2261|->     goodPad &= PORT_CT_NOT_ZERO(padSize);
# 2262|   
# 2263|       unsigned int i;

Error: CPPCHECK_WARNING (CWE-758): [#def929]
nss-3.117/nss/lib/softoken/pkcs11u.c:2266: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 2264|       for (i = 0; i < blockSize; i++) {
# 2265|           /* If i < padSize, set loopMask to all-1s and all-0s otherwise.*/
# 2266|->         unsigned int loopMask = PORT_CT_DUPLICATE_MSB_TO_ALL(~(padSize - 1 - i));
# 2267|           /* Get the padding value (should be padSize) from buffer */
# 2268|           unsigned int padVal = pBuf[bufLen - 1 - i];

Error: CPPCHECK_WARNING (CWE-758): [#def930]
nss-3.117/nss/lib/softoken/pkcs11u.c:2280: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 2278|       goodPad &= goodPad >> 1;
# 2279|       goodPad <<= sizeof(goodPad) * 8 - 1;
# 2280|->     goodPad = PORT_CT_DUPLICATE_MSB_TO_ALL(goodPad);
# 2281|   
# 2282|       /* Set outPadSize to padSize or 0 */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def931]
nss-3.117/nss/lib/softoken/sdb.c:2362:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2362:20: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/10)
# 2360|   
# 2361|           /* Can't bind parameters to a PRAGMA. */
# 2362|->         queryStr = sqlite3_mprintf("PRAGMA table_info(%s);", table);
# 2363|           if (queryStr == NULL) {
# 2364|               error = CKR_HOST_MEMORY;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def932]
nss-3.117/nss/lib/softoken/sdb.c:2362:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2362:20: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/8)
# 2360|   
# 2361|           /* Can't bind parameters to a PRAGMA. */
# 2362|->         queryStr = sqlite3_mprintf("PRAGMA table_info(%s);", table);
# 2363|           if (queryStr == NULL) {
# 2364|               error = CKR_HOST_MEMORY;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def933]
nss-3.117/nss/lib/softoken/sdb.c:2367:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2367:18: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/10)
# 2365|               goto loser;
# 2366|           }
# 2367|->         sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|           sqlite3_free(queryStr);
# 2369|           queryStr = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def934]
nss-3.117/nss/lib/softoken/sdb.c:2367:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2367:18: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/8)
# 2365|               goto loser;
# 2366|           }
# 2367|->         sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|           sqlite3_free(queryStr);
# 2369|           queryStr = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def935]
nss-3.117/nss/lib/softoken/sdb.c:2368:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2368:9: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/10)
# 2366|           }
# 2367|           sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|->         sqlite3_free(queryStr);
# 2369|           queryStr = NULL;
# 2370|           if (sqlerr != SQLITE_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def936]
nss-3.117/nss/lib/softoken/sdb.c:2368:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2368:9: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/8)
# 2366|           }
# 2367|           sqlerr = sqlite3_prepare_v2(sqlDB, queryStr, -1, &stmt, NULL);
# 2368|->         sqlite3_free(queryStr);
# 2369|           queryStr = NULL;
# 2370|           if (sqlerr != SQLITE_OK) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def937]
nss-3.117/nss/lib/softoken/sdb.c:2380:22: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2380:22: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/16)
# 2378|           }
# 2379|           do {
# 2380|->             sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|                   PR_Sleep(SDB_BUSY_RETRY_TIME);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def938]
nss-3.117/nss/lib/softoken/sdb.c:2380:22: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2380:22: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/10)
# 2378|           }
# 2379|           do {
# 2380|->             sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|                   PR_Sleep(SDB_BUSY_RETRY_TIME);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def939]
nss-3.117/nss/lib/softoken/sdb.c:2380:22: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2380:22: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/8)
# 2378|           }
# 2379|           do {
# 2380|->             sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|                   PR_Sleep(SDB_BUSY_RETRY_TIME);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def940]
nss-3.117/nss/lib/softoken/sdb.c:2382:17: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2381:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2382:17: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2382:17: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/16)
# 2380|               sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|->                 PR_Sleep(SDB_BUSY_RETRY_TIME);
# 2383|               }
# 2384|               if (sqlerr == SQLITE_ROW) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def941]
nss-3.117/nss/lib/softoken/sdb.c:2382:17: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2381:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2382:17: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2382:17: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/10)
# 2380|               sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|->                 PR_Sleep(SDB_BUSY_RETRY_TIME);
# 2383|               }
# 2384|               if (sqlerr == SQLITE_ROW) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def942]
nss-3.117/nss/lib/softoken/sdb.c:2382:17: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2381:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2382:17: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2382:17: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/8)
# 2380|               sqlerr = sqlite3_step(stmt);
# 2381|               if (sqlerr == SQLITE_BUSY) {
# 2382|->                 PR_Sleep(SDB_BUSY_RETRY_TIME);
# 2383|               }
# 2384|               if (sqlerr == SQLITE_ROW) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def943]
nss-3.117/nss/lib/softoken/sdb.c:2387:21: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/lib/softoken/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2401:18: branch_true: following ‘true’ branch...
 branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_true: following ‘true’ branch (when ‘backedAttrs == schemaAttrsCapacity’)...
nss-3.117/nss/lib/softoken/sdb.c:2386:21: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2387:21: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/16)
# 2385|                   if (backedAttrs == schemaAttrsCapacity) {
# 2386|                       schemaAttrsCapacity += sftkdb_known_attributes_size;
# 2387|->                     sdb_p->schemaAttrs = realloc(sdb_p->schemaAttrs,
# 2388|                                                    schemaAttrsCapacity * sizeof(CK_ATTRIBUTE_TYPE));
# 2389|                       if (!sdb_p->schemaAttrs) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def944]
nss-3.117/nss/lib/softoken/sdb.c:2395:37: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/lib/softoken/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2395:37: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/16)
# 2393|                   }
# 2394|                   /* Record the ULONG attribute value. */
# 2395|->                 char *val = (char *)sqlite3_column_text(stmt, 1);
# 2396|                   if (val && val[0] == 'a') {
# 2397|                       CK_ATTRIBUTE_TYPE attr = strtoul(&val[1], NULL, 16);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def945]
nss-3.117/nss/lib/softoken/sdb.c:2395:37: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/lib/softoken/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2395:37: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/10)
# 2393|                   }
# 2394|                   /* Record the ULONG attribute value. */
# 2395|->                 char *val = (char *)sqlite3_column_text(stmt, 1);
# 2396|                   if (val && val[0] == 'a') {
# 2397|                       CK_ATTRIBUTE_TYPE attr = strtoul(&val[1], NULL, 16);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def946]
nss-3.117/nss/lib/softoken/sdb.c:2395:37: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2384:16: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_true: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2385:20: branch_false: following ‘false’ branch (when ‘backedAttrs != schemaAttrsCapacity’)...
nss-3.117/nss/lib/softoken/sdb.c:2395:37: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2395:37: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/8)
# 2393|                   }
# 2394|                   /* Record the ULONG attribute value. */
# 2395|->                 char *val = (char *)sqlite3_column_text(stmt, 1);
# 2396|                   if (val && val[0] == 'a') {
# 2397|                       CK_ATTRIBUTE_TYPE attr = strtoul(&val[1], NULL, 16);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def947]
nss-3.117/nss/lib/softoken/sdb.c:2406:18: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2406:18: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/18/codeFlows/0/threadFlows/0/locations/16)
# 2404|               goto loser;
# 2405|           }
# 2406|->         sqlerr = sqlite3_reset(stmt);
# 2407|           if (sqlerr != SQLITE_OK) {
# 2408|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def948]
nss-3.117/nss/lib/softoken/sdb.c:2406:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2406:18: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/10)
# 2404|               goto loser;
# 2405|           }
# 2406|->         sqlerr = sqlite3_reset(stmt);
# 2407|           if (sqlerr != SQLITE_OK) {
# 2408|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def949]
nss-3.117/nss/lib/softoken/sdb.c:2406:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2406:18: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/8)
# 2404|               goto loser;
# 2405|           }
# 2406|->         sqlerr = sqlite3_reset(stmt);
# 2407|           if (sqlerr != SQLITE_OK) {
# 2408|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def950]
nss-3.117/nss/lib/softoken/sdb.c:2410:18: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2410:18: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/19/codeFlows/0/threadFlows/0/locations/16)
# 2408|               goto loser;
# 2409|           }
# 2410|->         sqlerr = sqlite3_finalize(stmt);
# 2411|           if (sqlerr != SQLITE_OK) {
# 2412|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def951]
nss-3.117/nss/lib/softoken/sdb.c:2410:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2410:18: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/20/codeFlows/0/threadFlows/0/locations/10)
# 2408|               goto loser;
# 2409|           }
# 2410|->         sqlerr = sqlite3_finalize(stmt);
# 2411|           if (sqlerr != SQLITE_OK) {
# 2412|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def952]
nss-3.117/nss/lib/softoken/sdb.c:2410:18: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2410:18: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/21/codeFlows/0/threadFlows/0/locations/8)
# 2408|               goto loser;
# 2409|           }
# 2410|->         sqlerr = sqlite3_finalize(stmt);
# 2411|           if (sqlerr != SQLITE_OK) {
# 2412|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def953]
nss-3.117/nss/lib/softoken/sdb.c:2418:9: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2374:30: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2411:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2415:9: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2418:9: danger: ‘<unknown>’ leaks here; was allocated at [(17)](sarif:/runs/0/results/22/codeFlows/0/threadFlows/0/locations/16)
# 2416|   
# 2417|           /* Sort these once so we can shortcut invalid attribute searches. */
# 2418|->         qsort(sdb_p->schemaAttrs, sdb_p->numSchemaAttrs,
# 2419|                 sizeof(CK_ATTRIBUTE_TYPE), sdb_attributeComparator);
# 2420|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def954]
nss-3.117/nss/lib/softoken/sdb.c:2418:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2411:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2415:9: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2418:9: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/10)
# 2416|   
# 2417|           /* Sort these once so we can shortcut invalid attribute searches. */
# 2418|->         qsort(sdb_p->schemaAttrs, sdb_p->numSchemaAttrs,
# 2419|                 sizeof(CK_ATTRIBUTE_TYPE), sdb_attributeComparator);
# 2420|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def955]
nss-3.117/nss/lib/softoken/sdb.c:2418:9: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2363:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2367:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2370:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2374:30: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2375:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2403:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2406:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2407:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2410:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2411:12: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2415:9: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2418:9: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/24/codeFlows/0/threadFlows/0/locations/8)
# 2416|   
# 2417|           /* Sort these once so we can shortcut invalid attribute searches. */
# 2418|->         qsort(sdb_p->schemaAttrs, sdb_p->numSchemaAttrs,
# 2419|                 sizeof(CK_ATTRIBUTE_TYPE), sdb_attributeComparator);
# 2420|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def956]
nss-3.117/nss/lib/softoken/sdb.c:2423:24: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2423:24: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/25/codeFlows/0/threadFlows/0/locations/10)
# 2421|   
# 2422|       /* invariant fields */
# 2423|->     sdb_p->sqlDBName = PORT_Strdup(dbname);
# 2424|       sdb_p->type = type;
# 2425|       sdb_p->table = table;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def957]
nss-3.117/nss/lib/softoken/sdb.c:2423:24: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2423:24: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/26/codeFlows/0/threadFlows/0/locations/8)
# 2421|   
# 2422|       /* invariant fields */
# 2423|->     sdb_p->sqlDBName = PORT_Strdup(dbname);
# 2424|       sdb_p->type = type;
# 2425|       sdb_p->table = table;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def958]
nss-3.117/nss/lib/softoken/sdb.c:2430:29: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2430:29: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/10)
# 2428|       /* set the cache delay time. This is how long we will wait before we
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|->     sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|       sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def959]
nss-3.117/nss/lib/softoken/sdb.c:2430:29: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2430:29: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/28/codeFlows/0/threadFlows/0/locations/8)
# 2428|       /* set the cache delay time. This is how long we will wait before we
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|->     sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|       sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def960]
nss-3.117/nss/lib/softoken/sdb.c:2431:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb_p’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2345:27: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2431:20: danger: ‘sdb_p’ leaks here; was allocated at [(11)](sarif:/runs/0/results/29/codeFlows/0/threadFlows/0/locations/10)
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|       sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|->     sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */
# 2433|       sdb_p->sqlXactDB = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def961]
nss-3.117/nss/lib/softoken/sdb.c:2431:20: warning[-Wanalyzer-malloc-leak]: leak of ‘sdb’
nss-3.117/nss/lib/softoken/sdb.c:2102:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2106:14: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2107:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/softoken/sdb.c:2118:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2209:15: branch_false: following ‘false’ branch (when ‘flags == 1’)...
nss-3.117/nss/lib/softoken/sdb.c:2229:8: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2320:8: branch_false: following ‘false’ branch (when ‘enableCache == 0’)...
nss-3.117/nss/lib/softoken/sdb.c:2340:18: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2340:18: acquire_memory: allocated here
nss-3.117/nss/lib/softoken/sdb.c:2341:8: branch_false: following ‘false’ branch (when ‘sdb’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2345:27: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2346:8: branch_false: following ‘false’ branch (when ‘sdb_p’ is non-NULL)...
nss-3.117/nss/lib/softoken/sdb.c:2354:5: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2356:10: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2355:9: branch_false: following ‘false’ branch (when the strings are non-equal)...
nss-3.117/nss/lib/softoken/sdb.c:2423:24: branch_false: ...to here
nss-3.117/nss/lib/softoken/sdb.c:2431:20: danger: ‘sdb’ leaks here; was allocated at [(9)](sarif:/runs/0/results/30/codeFlows/0/threadFlows/0/locations/8)
# 2429|        * decide the existing cache is stale. Currently set to 10 sec */
# 2430|       sdb_p->updateInterval = PR_SecondsToInterval(10);
# 2431|->     sdb_p->dbMon = PR_NewMonitor();
# 2432|       /* these fields are protected by the lock */
# 2433|       sdb_p->sqlXactDB = NULL;

Error: CPPCHECK_WARNING (CWE-758): [#def962]
nss-3.117/nss/lib/ssl/ssl3con.c:13160: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13158|   SECStatusToMask(SECStatus rv)
#13159|   {
#13160|->     return PORT_CT_EQ(rv, SECSuccess);
#13161|   }
#13162|   

Error: CPPCHECK_WARNING (CWE-758): [#def963]
nss-3.117/nss/lib/ssl/ssl3con.c:13167: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13165|   ssl_ConstantTimeGE(unsigned int a, unsigned int b)
#13166|   {
#13167|->     return PORT_CT_GE(a, b);
#13168|   }
#13169|   

Error: CPPCHECK_WARNING (CWE-758): [#def964]
nss-3.117/nss/lib/ssl/ssl3con.c:13174: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13172|   ssl_ConstantTimeEQ(unsigned char a, unsigned char b)
#13173|   {
#13174|->     return PORT_CT_EQ(a, b);
#13175|   }
#13176|   

Error: CPPCHECK_WARNING (CWE-758): [#def965]
nss-3.117/nss/lib/ssl/ssl3con.c:13200: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13198|       paddingLength = plaintext->buf[plaintext->len - 1];
#13199|       /* SSLv3 padding bytes are random and cannot be checked. */
#13200|->     good = PORT_CT_GE(plaintext->len, paddingLength + overhead);
#13201|       /* SSLv3 requires that the padding is minimal. */
#13202|       good &= PORT_CT_GE(blockSize, paddingLength + 1);

Error: CPPCHECK_WARNING (CWE-758): [#def966]
nss-3.117/nss/lib/ssl/ssl3con.c:13202: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13200|       good = PORT_CT_GE(plaintext->len, paddingLength + overhead);
#13201|       /* SSLv3 requires that the padding is minimal. */
#13202|->     good &= PORT_CT_GE(blockSize, paddingLength + 1);
#13203|       plaintext->len -= good & (paddingLength + 1);
#13204|       return (good & SECSuccess) | (~good & SECFailure);

Error: CPPCHECK_WARNING (CWE-758): [#def967]
nss-3.117/nss/lib/ssl/ssl3con.c:13220: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13218|   
#13219|       paddingLength = plaintext->buf[plaintext->len - 1];
#13220|->     good = PORT_CT_GE(plaintext->len, paddingLength + overhead);
#13221|   
#13222|       /* The padding consists of a length byte at the end of the record and then

Error: CPPCHECK_WARNING (CWE-758): [#def968]
nss-3.117/nss/lib/ssl/ssl3con.c:13239: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13237|           /* If i <= paddingLength then the MSB of t is zero and mask is
#13238|            * 0xff.  Otherwise, mask is 0. */
#13239|->         unsigned char mask = PORT_CT_LE(i, paddingLength);
#13240|           unsigned char b = plaintext->buf[plaintext->len - 1 - i];
#13241|           /* The final |paddingLength+1| bytes should all have the value

Error: CPPCHECK_WARNING (CWE-758): [#def969]
nss-3.117/nss/lib/ssl/ssl3con.c:13254: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#13252|       good &= good >> 1;
#13253|       good <<= sizeof(good) * 8 - 1;
#13254|->     good = PORT_CT_DUPLICATE_MSB_TO_ALL(good);
#13255|   
#13256|       plaintext->len -= good & (paddingLength + 1);

Error: CPPCHECK_WARNING (CWE-457): [#def970]
nss-3.117/nss/lib/ssl/ssl3con.c:14245: warning[uninitvar]: Uninitialized variable: schemes
#14243|           schemes[i] = (algorithms[i].hashAlg << 8) | algorithms[i].sigAlg;
#14244|       }
#14245|->     return SSL_SignatureSchemePrefSet(fd, schemes, count);
#14246|   }
#14247|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def971]
nss-3.117/nss/lib/ssl/sslinfo.c:117:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&inf’
nss-3.117/nss/lib/ssl/sslinfo.c:23:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslinfo.c:29:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslinfo.c:35:5: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslinfo.c:117:5: danger: use of uninitialized value ‘&inf’ here
#  115|       }
#  116|   
#  117|->     memcpy(info, &inf, inf.length);
#  118|   
#  119|       return SECSuccess;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def972]
nss-3.117/nss/lib/ssl/sslinfo.c:185:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&inf’
nss-3.117/nss/lib/ssl/sslinfo.c:133:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslinfo.c:139:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslinfo.c:146:5: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslinfo.c:158:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslinfo.c:176:30: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslinfo.c:183:25: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslinfo.c:183:5: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslinfo.c:185:5: danger: use of uninitialized value ‘&inf’ here
#  183|       inf.echPublicName = (inf.echAccepted == PR_FALSE) ? ss->ssl3.hs.echPublicName : NULL;
#  184|   
#  185|->     memcpy(info, &inf, inf.length);
#  186|       return SECSuccess;
#  187|   }

Error: GCC_ANALYZER_WARNING (CWE-835): [#def973]
nss-3.117/nss/lib/ssl/sslnonce.c:1170:12: warning[-Wanalyzer-infinite-loop]: infinite loop
nss-3.117/nss/lib/ssl/sslnonce.c:1167:1: enter_function: entry to ‘SSL_ClearSessionCache’
nss-3.117/nss/lib/ssl/sslnonce.c:1170:12: danger: infinite loop here
nss-3.117/nss/lib/ssl/sslnonce.c:1170:12: branch_true: if it ever follows ‘true’ branch, it will always do so...
nss-3.117/nss/lib/ssl/sslnonce.c:1171:9: call_function: inlined call to ‘UncacheSID’ from ‘SSL_ClearSessionCache’
 branch_true: ...to here
# 1168|   {
# 1169|       LOCK_CACHE;
# 1170|->     while (cache != NULL)
# 1171|           UncacheSID(cache);
# 1172|       UNLOCK_CACHE;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def974]
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: warning[-Wanalyzer-jump-through-null]: jump through null pointer
nss-3.117/nss/lib/ssl/sslsock.c:2461:1: enter_function: entry to ‘SSL_ReconfigFD’
nss-3.117/nss/lib/ssl/sslsock.c:2467:8: branch_false: following ‘false’ branch (when ‘model’ is non-NULL)...
nss-3.117/nss/lib/ssl/sslsock.c:2471:10: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:2471:10: call_function: calling ‘ssl_FindSocket’ from ‘SSL_ReconfigFD’
nss-3.117/nss/lib/ssl/sslsock.c:2471:10: return_function: returning to ‘SSL_ReconfigFD’ from ‘ssl_FindSocket’
nss-3.117/nss/lib/ssl/sslsock.c:2472:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslsock.c:2477:10: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:2477:10: call_function: calling ‘ssl_FindSocket’ from ‘SSL_ReconfigFD’
nss-3.117/nss/lib/ssl/sslsock.c:2477:10: return_function: returning to ‘SSL_ReconfigFD’ from ‘ssl_FindSocket’
nss-3.117/nss/lib/ssl/sslsock.c:2479:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslsock.c:2484:5: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:2498:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:2533:10: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: branch_true: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: call_function: calling ‘SSL_GetExperimentalAPI’ from ‘SSL_ReconfigFD’
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: return_function: returning to ‘SSL_ReconfigFD’ from ‘SSL_GetExperimentalAPI’
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: branch_true: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: call_function: calling ‘SSL_GetExperimentalAPI’ from ‘SSL_ReconfigFD’
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: return_function: returning to ‘SSL_ReconfigFD’ from ‘SSL_GetExperimentalAPI’
nss-3.117/nss/lib/ssl/sslsock.c:2536:14: danger: jump through null pointer here
# 2534|            cursor = PR_NEXT_LINK(cursor)) {
# 2535|           sslCustomExtensionHooks *hook = (sslCustomExtensionHooks *)cursor;
# 2536|->         rv = SSL_InstallExtensionHooks(ss->fd, hook->type,
# 2537|                                          hook->writer, hook->writerArg,
# 2538|                                          hook->handler, hook->handlerArg);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def975]
nss-3.117/nss/lib/ssl/sslsock.c:4705:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&token’
nss-3.117/nss/lib/ssl/sslsock.c:4668:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslsock.c:4677:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslsock.c:4683:22: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:4687:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/sslsock.c:4690:8: branch_false: ...to here
nss-3.117/nss/lib/ssl/sslsock.c:4705:5: danger: use of uninitialized value ‘&token’ here
# 4703|   
# 4704|       token.length = PR_MIN(sizeof(SSLResumptionTokenInfo), len);
# 4705|->     PORT_Memcpy(tokenOut, &token, token.length);
# 4706|   
# 4707|       ssl_DestroySID(&sid, PR_FALSE);

Error: CPPCHECK_WARNING (CWE-758): [#def976]
nss-3.117/nss/lib/ssl/tls13con.c:6479: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
# 6477|   
# 6478|       /* Return "disallowed" if the message mask bit isn't set. */
# 6479|->     if (!(_M(message) & KnownExtensions[i].messages)) {
# 6480|           return tls13_extension_disallowed;
# 6481|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def977]
nss-3.117/nss/lib/ssl/tls13ech.c:2363:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘tmpEchInner’
nss-3.117/nss/lib/ssl/tls13ech.c:2333:14: release_memory: ‘tmpEchInner’ is NULL
nss-3.117/nss/lib/ssl/tls13ech.c:2345:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/ssl/tls13ech.c:2355:5: branch_false: ...to here
nss-3.117/nss/lib/ssl/tls13ech.c:2357:8: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/ssl/tls13ech.c:2358:9: branch_true: ...to here
nss-3.117/nss/lib/ssl/tls13ech.c:2363:24: release_memory: ‘tmpEchInner’ is NULL
nss-3.117/nss/lib/ssl/tls13ech.c:2363:13: danger: dereference of NULL ‘tmpEchInner’
# 2361|   
# 2362|           /* Start over on ECHInner */
# 2363|->         b = tmpEchInner->data;
# 2364|           length = tmpEchInner->len;
# 2365|           rv = ssl3_HandleClientHelloPreamble(ss, &b, &length, &tmpSid,

Error: GCC_ANALYZER_WARNING (CWE-476): [#def978]
nss-3.117/nss/lib/util/secasn1d.c:1079:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘*state.parent’
nss-3.117/nss/lib/util/secasn1d.c:2754:1: enter_function: entry to ‘SEC_ASN1DecoderUpdate_Util’
nss-3.117/nss/lib/util/secasn1d.c:2764:12: branch_true: following ‘true’ branch...
nss-3.117/nss/lib/util/secasn1d.c:2765:9: branch_true: ...to here
nss-3.117/nss/lib/util/secasn1d.c:2796:17: call_function: calling ‘sec_asn1d_prepare_for_contents’ from ‘SEC_ASN1DecoderUpdate_Util’
# 1077|            * until it is too late (for one-pass processing).
# 1078|            */
# 1079|->         if (state->parent->place == afterPointer) {
# 1080|               void **placep;
# 1081|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def979]
nss-3.117/nss/lib/util/utilmod.c:261:25: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  259|   
#  260|       len += str_len;
#  261|->     newString = (char *)PORT_Realloc(baseString, len);
#  262|       if (newString == NULL) {
#  263|           PORT_Free(baseString);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def980]
nss-3.117/nss/lib/util/utilmod.c:261:25: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  259|   
#  260|       len += str_len;
#  261|->     newString = (char *)PORT_Realloc(baseString, len);
#  262|       if (newString == NULL) {
#  263|           PORT_Free(baseString);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def981]
nss-3.117/nss/lib/util/utilmod.c:261:25: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  259|   
#  260|       len += str_len;
#  261|->     newString = (char *)PORT_Realloc(baseString, len);
#  262|       if (newString == NULL) {
#  263|           PORT_Free(baseString);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def982]
nss-3.117/nss/lib/util/utilmod.c:263:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  261|       newString = (char *)PORT_Realloc(baseString, len);
#  262|       if (newString == NULL) {
#  263|->         PORT_Free(baseString);
#  264|           return NULL;
#  265|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def983]
nss-3.117/nss/lib/util/utilmod.c:263:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  261|       newString = (char *)PORT_Realloc(baseString, len);
#  262|       if (newString == NULL) {
#  263|->         PORT_Free(baseString);
#  264|           return NULL;
#  265|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def984]
nss-3.117/nss/lib/util/utilmod.c:263:9: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  261|       newString = (char *)PORT_Realloc(baseString, len);
#  262|       if (newString == NULL) {
#  263|->         PORT_Free(baseString);
#  264|           return NULL;
#  265|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def985]
nss-3.117/nss/lib/util/utilmod.c:301:30: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  299|   
#  300|       *useCount += SECMOD_STEP;
#  301|->     newModuleList = (char **)PORT_Realloc(*pModuleList,
#  302|                                             *useCount * sizeof(char *));
#  303|       if (newModuleList == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def986]
nss-3.117/nss/lib/util/utilmod.c:301:30: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  299|   
#  300|       *useCount += SECMOD_STEP;
#  301|->     newModuleList = (char **)PORT_Realloc(*pModuleList,
#  302|                                             *useCount * sizeof(char *));
#  303|       if (newModuleList == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def987]
nss-3.117/nss/lib/util/utilmod.c:352:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  350|       FILE *file;
#  351|   
#  352|->     fd = os_open(name,
#  353|                    (om == lfopen_truncate) ? os_truncate_open_flags : os_append_open_flags,
#  354|                    open_perms);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def988]
nss-3.117/nss/lib/util/utilmod.c:352:10: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  350|       FILE *file;
#  351|   
#  352|->     fd = os_open(name,
#  353|                    (om == lfopen_truncate) ? os_truncate_open_flags : os_append_open_flags,
#  354|                    open_perms);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def989]
nss-3.117/nss/lib/util/utilmod.c:360:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  358|       file = os_fdopen(fd, (om == lfopen_truncate) ? "w+" : "a+");
#  359|       if (!file) {
#  360|->         close(fd);
#  361|       }
#  362|       /* file inherits fd */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def990]
nss-3.117/nss/lib/util/utilmod.c:360:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  358|       file = os_fdopen(fd, (om == lfopen_truncate) ? "w+" : "a+");
#  359|       if (!file) {
#  360|->         close(fd);
#  361|       }
#  362|       /* file inherits fd */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def991]
nss-3.117/nss/lib/util/utilmod.c:460:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  458|                    * we found this (see following comment about why this
#  459|                    * is necessary). */
#  460|->                 if (PORT_Strncasecmp(line, "parameters", 10) == 0) {
#  461|                       skipParams = PR_TRUE;
#  462|                   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def992]
nss-3.117/nss/lib/util/utilmod.c:460:21: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  458|                    * we found this (see following comment about why this
#  459|                    * is necessary). */
#  460|->                 if (PORT_Strncasecmp(line, "parameters", 10) == 0) {
#  461|                       skipParams = PR_TRUE;
#  462|                   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def993]
nss-3.117/nss/lib/util/utilmod.c:481:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  479|                    *    parameters take precident.
#  480|                    */
#  481|->             } else if (PORT_Strncasecmp(line, "parameters", 10) == 0) {
#  482|                   /* already have parameters */
#  483|                   if (paramsValue) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def994]
nss-3.117/nss/lib/util/utilmod.c:481:24: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  479|                    *    parameters take precident.
#  480|                    */
#  481|->             } else if (PORT_Strncasecmp(line, "parameters", 10) == 0) {
#  482|                   /* already have parameters */
#  483|                   if (paramsValue) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def995]
nss-3.117/nss/lib/util/utilmod.c:486:31: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  484|                       continue;
#  485|                   }
#  486|->                 paramsValue = NSSUTIL_Quote(&value[1], '"');
#  487|                   if (paramsValue == NULL)
#  488|                       goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def996]
nss-3.117/nss/lib/util/utilmod.c:486:31: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  484|                       continue;
#  485|                   }
#  486|->                 paramsValue = NSSUTIL_Quote(&value[1], '"');
#  487|                   if (paramsValue == NULL)
#  488|                       goto loser;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def997]
nss-3.117/nss/lib/util/utilmod.c:501:27: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  499|                   if (moduleString == NULL)
#  500|                       goto loser;
#  501|->                 newLine = NSSUTIL_Quote(&value[1], '"');
#  502|                   if (newLine == NULL)
#  503|                       goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def998]
nss-3.117/nss/lib/util/utilmod.c:501:27: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  499|                   if (moduleString == NULL)
#  500|                       goto loser;
#  501|->                 newLine = NSSUTIL_Quote(&value[1], '"');
#  502|                   if (newLine == NULL)
#  503|                       goto loser;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def999]
nss-3.117/nss/lib/util/utilmod.c:505:17: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  503|                       goto loser;
#  504|                   moduleString = nssutil_DupCat(moduleString, newLine);
#  505|->                 PORT_Free(newLine);
#  506|                   if (moduleString == NULL)
#  507|                       goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1000]
nss-3.117/nss/lib/util/utilmod.c:505:17: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  503|                       goto loser;
#  504|                   moduleString = nssutil_DupCat(moduleString, newLine);
#  505|->                 PORT_Free(newLine);
#  506|                   if (moduleString == NULL)
#  507|                       goto loser;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1001]
nss-3.117/nss/lib/util/utilmod.c:511:17: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  509|   
#  510|               /* check to see if it's internal? */
#  511|->             if (PORT_Strncasecmp(line, "NSS=", 4) == 0) {
#  512|                   /* This should be case insensitive! reviewers make
#  513|                    * me fix it if it's not */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1002]
nss-3.117/nss/lib/util/utilmod.c:511:17: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  509|   
#  510|               /* check to see if it's internal? */
#  511|->             if (PORT_Strncasecmp(line, "NSS=", 4) == 0) {
#  512|                   /* This should be case insensitive! reviewers make
#  513|                    * me fix it if it's not */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1003]
nss-3.117/nss/lib/util/utilmod.c:518:25: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  516|                       /* override the parameters */
#  517|                       if (paramsValue) {
#  518|->                         PORT_Free(paramsValue);
#  519|                       }
#  520|                       paramsValue = NSSUTIL_Quote(params, '"');

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1004]
nss-3.117/nss/lib/util/utilmod.c:518:25: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  516|                       /* override the parameters */
#  517|                       if (paramsValue) {
#  518|->                         PORT_Free(paramsValue);
#  519|                       }
#  520|                       paramsValue = NSSUTIL_Quote(params, '"');

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1005]
nss-3.117/nss/lib/util/utilmod.c:520:35: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  518|                           PORT_Free(paramsValue);
#  519|                       }
#  520|->                     paramsValue = NSSUTIL_Quote(params, '"');
#  521|                   }
#  522|               }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1006]
nss-3.117/nss/lib/util/utilmod.c:520:35: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  518|                           PORT_Free(paramsValue);
#  519|                       }
#  520|->                     paramsValue = NSSUTIL_Quote(params, '"');
#  521|                   }
#  522|               }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1007]
nss-3.117/nss/lib/util/utilmod.c:544:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  542|                       goto loser;
#  543|               }
#  544|->             PORT_Free(paramsValue);
#  545|               paramsValue = NULL;
#  546|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1008]
nss-3.117/nss/lib/util/utilmod.c:544:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  542|                       goto loser;
#  543|               }
#  544|->             PORT_Free(paramsValue);
#  545|               paramsValue = NULL;
#  546|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1009]
nss-3.117/nss/lib/util/utilmod.c:568:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  566|   
#  567|       if (moduleString) {
#  568|->         PORT_Free(moduleString);
#  569|           moduleString = NULL;
#  570|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1010]
nss-3.117/nss/lib/util/utilmod.c:568:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  566|   
#  567|       if (moduleString) {
#  568|->         PORT_Free(moduleString);
#  569|           moduleString = NULL;
#  570|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1011]
nss-3.117/nss/lib/util/utilmod.c:603:24: warning[-Wanalyzer-file-leak]: leak of FILE ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  601|       if (!moduleList[0]) {
#  602|           char *newParams;
#  603|->         moduleString = PORT_Strdup(NSSUTIL_DEFAULT_INTERNAL_INIT1);
#  604|           newParams = NSSUTIL_Quote(params, '"');
#  605|           if (newParams == NULL)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1012]
nss-3.117/nss/lib/util/utilmod.c:603:24: warning[-Wanalyzer-malloc-leak]: leak of ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  601|       if (!moduleList[0]) {
#  602|           char *newParams;
#  603|->         moduleString = PORT_Strdup(NSSUTIL_DEFAULT_INTERNAL_INIT1);
#  604|           newParams = NSSUTIL_Quote(params, '"');
#  605|           if (newParams == NULL)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1013]
nss-3.117/nss/lib/util/utilmod.c:604:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  602|           char *newParams;
#  603|           moduleString = PORT_Strdup(NSSUTIL_DEFAULT_INTERNAL_INIT1);
#  604|->         newParams = NSSUTIL_Quote(params, '"');
#  605|           if (newParams == NULL)
#  606|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1014]
nss-3.117/nss/lib/util/utilmod.c:604:21: warning[-Wanalyzer-malloc-leak]: leak of ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  602|           char *newParams;
#  603|           moduleString = PORT_Strdup(NSSUTIL_DEFAULT_INTERNAL_INIT1);
#  604|->         newParams = NSSUTIL_Quote(params, '"');
#  605|           if (newParams == NULL)
#  606|               goto loser;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1015]
nss-3.117/nss/lib/util/utilmod.c:634:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  632|       /* deal with trust cert db here */
#  633|       if (moduleString) {
#  634|->         PORT_Free(moduleString);
#  635|           moduleString = NULL;
#  636|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1016]
nss-3.117/nss/lib/util/utilmod.c:634:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  632|       /* deal with trust cert db here */
#  633|       if (moduleString) {
#  634|->         PORT_Free(moduleString);
#  635|           moduleString = NULL;
#  636|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1017]
nss-3.117/nss/lib/util/utilmod.c:638:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  636|       }
#  637|       if (paramsValue) {
#  638|->         PORT_Free(paramsValue);
#  639|           paramsValue = NULL;
#  640|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1018]
nss-3.117/nss/lib/util/utilmod.c:638:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fd’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  636|       }
#  637|       if (paramsValue) {
#  638|->         PORT_Free(paramsValue);
#  639|           paramsValue = NULL;
#  640|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1019]
nss-3.117/nss/lib/util/utilmod.c:723:12: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  721|           goto loser;
#  722|   
#  723|->     name = NSSUTIL_ArgGetParamValue("name", args);
#  724|       if (name) {
#  725|           name_len = PORT_Strlen(name);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1020]
nss-3.117/nss/lib/util/utilmod.c:723:12: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  721|           goto loser;
#  722|   
#  723|->     name = NSSUTIL_ArgGetParamValue("name", args);
#  724|       if (name) {
#  725|           name_len = PORT_Strlen(name);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1021]
nss-3.117/nss/lib/util/utilmod.c:723:12: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  721|           goto loser;
#  722|   
#  723|->     name = NSSUTIL_ArgGetParamValue("name", args);
#  724|       if (name) {
#  725|           name_len = PORT_Strlen(name);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1022]
nss-3.117/nss/lib/util/utilmod.c:727:11: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  725|           name_len = PORT_Strlen(name);
#  726|       }
#  727|->     lib = NSSUTIL_ArgGetParamValue("library", args);
#  728|       if (lib) {
#  729|           lib_len = PORT_Strlen(lib);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1023]
nss-3.117/nss/lib/util/utilmod.c:727:11: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  725|           name_len = PORT_Strlen(name);
#  726|       }
#  727|->     lib = NSSUTIL_ArgGetParamValue("library", args);
#  728|       if (lib) {
#  729|           lib_len = PORT_Strlen(lib);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1024]
nss-3.117/nss/lib/util/utilmod.c:727:11: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  725|           name_len = PORT_Strlen(name);
#  726|       }
#  727|->     lib = NSSUTIL_ArgGetParamValue("library", args);
#  728|       if (lib) {
#  729|           lib_len = PORT_Strlen(lib);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1025]
nss-3.117/nss/lib/util/utilmod.c:748:38: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  746|               /* if we haven't found the block yet, check to see if this block
#  747|                * matches our requirements */
#  748|->             if (!found && ((name && (PORT_Strncasecmp(line, "name=", 5) == 0) &&
#  749|                               (PORT_Strncmp(line + 5, name, name_len) == 0)) ||
#  750|                              (lib && (PORT_Strncasecmp(line, "library=", 8) == 0) &&

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1026]
nss-3.117/nss/lib/util/utilmod.c:748:38: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  746|               /* if we haven't found the block yet, check to see if this block
#  747|                * matches our requirements */
#  748|->             if (!found && ((name && (PORT_Strncasecmp(line, "name=", 5) == 0) &&
#  749|                               (PORT_Strncmp(line + 5, name, name_len) == 0)) ||
#  750|                              (lib && (PORT_Strncasecmp(line, "library=", 8) == 0) &&

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1027]
nss-3.117/nss/lib/util/utilmod.c:748:38: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  746|               /* if we haven't found the block yet, check to see if this block
#  747|                * matches our requirements */
#  748|->             if (!found && ((name && (PORT_Strncasecmp(line, "name=", 5) == 0) &&
#  749|                               (PORT_Strncmp(line + 5, name, name_len) == 0)) ||
#  750|                              (lib && (PORT_Strncasecmp(line, "library=", 8) == 0) &&

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1028]
nss-3.117/nss/lib/util/utilmod.c:750:37: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  748|               if (!found && ((name && (PORT_Strncasecmp(line, "name=", 5) == 0) &&
#  749|                               (PORT_Strncmp(line + 5, name, name_len) == 0)) ||
#  750|->                            (lib && (PORT_Strncasecmp(line, "library=", 8) == 0) &&
#  751|                               (PORT_Strncmp(line + 8, lib, lib_len) == 0)))) {
#  752|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1029]
nss-3.117/nss/lib/util/utilmod.c:750:37: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  748|               if (!found && ((name && (PORT_Strncasecmp(line, "name=", 5) == 0) &&
#  749|                               (PORT_Strncmp(line + 5, name, name_len) == 0)) ||
#  750|->                            (lib && (PORT_Strncasecmp(line, "library=", 8) == 0) &&
#  751|                               (PORT_Strncmp(line + 8, lib, lib_len) == 0)))) {
#  752|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1030]
nss-3.117/nss/lib/util/utilmod.c:750:37: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  748|               if (!found && ((name && (PORT_Strncasecmp(line, "name=", 5) == 0) &&
#  749|                               (PORT_Strncmp(line + 5, name, name_len) == 0)) ||
#  750|->                            (lib && (PORT_Strncasecmp(line, "library=", 8) == 0) &&
#  751|                               (PORT_Strncmp(line + 8, lib, lib_len) == 0)))) {
#  752|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1031]
nss-3.117/nss/lib/util/utilmod.c:754:17: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  752|   
#  753|                   /* yup, we don't need to save any more data, */
#  754|->                 PORT_Free(block);
#  755|                   block = NULL;
#  756|                   /* we don't need to collect more of this block */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1032]
nss-3.117/nss/lib/util/utilmod.c:754:17: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  752|   
#  753|                   /* yup, we don't need to save any more data, */
#  754|->                 PORT_Free(block);
#  755|                   block = NULL;
#  756|                   /* we don't need to collect more of this block */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1033]
nss-3.117/nss/lib/util/utilmod.c:754:17: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:924:22: call_function: calling ‘nssutil_AddSecmodDBEntry’ from ‘NSSUTIL_DoModuleDBFunction’
#  752|   
#  753|                   /* yup, we don't need to save any more data, */
#  754|->                 PORT_Free(block);
#  755|                   block = NULL;
#  756|                   /* we don't need to collect more of this block */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1034]
nss-3.117/nss/lib/util/utilmod.c:770:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  768|           if (block) {
#  769|               fwrite(block, PORT_Strlen(block), 1, fd2);
#  770|->             PORT_Free(block);
#  771|               block = NULL;
#  772|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1035]
nss-3.117/nss/lib/util/utilmod.c:770:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(dbname, "r")’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  768|           if (block) {
#  769|               fwrite(block, PORT_Strlen(block), 1, fd2);
#  770|->             PORT_Free(block);
#  771|               block = NULL;
#  772|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1036]
nss-3.117/nss/lib/util/utilmod.c:770:13: warning[-Wanalyzer-malloc-leak]: leak of ‘lfopen(PORT_Strdup_Util(dbname), 0, file_mode)’
nss-3.117/nss/lib/util/utilmod.c:898:1: enter_function: entry to ‘NSSUTIL_DoModuleDBFunction’
nss-3.117/nss/lib/util/utilmod.c:910:8: branch_false: following ‘false’ branch...
nss-3.117/nss/lib/util/utilmod.c:918:5: branch_false: ...to here
nss-3.117/nss/lib/util/utilmod.c:920:21: call_function: calling ‘nssutil_ReadSecmodDB’ from ‘NSSUTIL_DoModuleDBFunction’
#  768|           if (block) {
#  769|               fwrite(block, PORT_Strlen(block), 1, fd2);
#  770|->             PORT_Free(block);
#  771|               block = NULL;
#  772|           }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1037]
nss-3.117/nss/lib/util/utilpars.c:1141:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
nss-3.117/nss/lib/util/utilpars.c:1140:17: branch_true: following ‘true’ branch (when ‘i < slotCount’)...
nss-3.117/nss/lib/util/utilpars.c:1141:44: branch_true: ...to here
nss-3.117/nss/lib/util/utilpars.c:1144:9: release_memory: ‘*slotStrings’ is NULL
nss-3.117/nss/lib/util/utilpars.c:1144:9: release_memory: ‘*slotStrings’ is NULL
nss-3.117/nss/lib/util/utilpars.c:1144:9: release_memory: ‘*slotStrings’ is NULL
nss-3.117/nss/lib/util/utilpars.c:1144:9: release_memory: ‘*slotStrings’ is NULL
nss-3.117/nss/lib/util/utilpars.c:1140:17: branch_true: following ‘true’ branch (when ‘i < slotCount’)...
nss-3.117/nss/lib/util/utilpars.c:1141:44: branch_true: ...to here
nss-3.117/nss/lib/util/utilpars.c:1141:9: release_memory: ‘*slotStrings’ is NULL
nss-3.117/nss/lib/util/utilpars.c:1143:9: release_memory: ‘*slotStrings’ is NULL
nss-3.117/nss/lib/util/utilpars.c:1141:9: danger: argument 2 (‘*<unknown>’) NULL where non-null expected
#argument 2 of ‘__builtin_strcat’ must be non-null
# 1139|       PORT_Memset(slotParams, 0, slotLen);
# 1140|       for (i = 0; i < (int)slotCount; i++) {
# 1141|->         PORT_Strcat(slotParams, slotStrings[i]);
# 1142|           PORT_Strcat(slotParams, " ");
# 1143|           PR_smprintf_free(slotStrings[i]);