Changeset View
Changeset View
Standalone View
Standalone View
PVS-Studio-log-freebsd.txt
| ===============General Analysis (GA)=============== | |||||
| \sys\amd64\amd64\genassym.c (115): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (116): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (114): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (112): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (113): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (190): error V547: Expression '(sizeof (struct trapframe)) < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (201): error V547: Expression '(sizeof (struct pcpu)) < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (155): error V547: Expression '(sizeof (struct pcb)) < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (117): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (118): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (100): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (101): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (99): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (97): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (98): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (105): error V547: Expression '(sizeof (pt_entry_t)) < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (111): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (104): error V547: Expression '(sizeof (pd_entry_t)) < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (102): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\amd64\genassym.c (103): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\amd64\vmm\amd\svm_genassym.c (50): error V547: Expression '(0xc0000101) < 0' is always false. | |||||
| \sys\cam\cam_xpt.c (4926): error V576: Incorrect format. Consider checking the third actual argument of the 'printf' function. The actual argument equals '4294967295'. | |||||
| \sys\cam\cam_xpt.c (4926): error V576: Incorrect format. Consider checking the second actual argument of the 'printf' function. The actual argument equals '4294967295'. | |||||
| \sys\cam\ctl\ctl.c (9534): error V512: A call of the 'memset' function will lead to underflow of the buffer 'sn_ptr->serial_num'. | |||||
| \sys\cam\ctl\ctl_frontend_cam_sim.c (390): error V614: Potentially uninitialized pointer 'ctl_ptr' used. | |||||
| \sys\cam\ctl\ctl_frontend_ioctl.c (229): error V614: Potentially uninitialized pointer 'kern_ptr' used. | |||||
| \sys\cam\ctl\ctl_tpc_local.c (219): error V614: Potentially uninitialized pointer 'kern_ptr' used. | |||||
| \sys\cam\scsi\scsi_da.c (3231): error V705: It is possible that 'else' block was forgotten or commented out, thus altering the program's operation logics. | |||||
imp: False positive, but addressed in https://svnweb.freebsd.org/base?view=revision&revision=295759 | |||||
| \sys\cam\scsi\scsi_da.c (3074): error V595: The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 3074, 3083. | |||||
impUnsubmitted Not Done Inline ActionsFalse positive. We always have a bp for a DELETE ccb, but the code is twisty enough that the static analyzer missed it. imp: False positive. We always have a bp for a DELETE ccb, but the code is twisty enough that the… | |||||
| \sys\cam\scsi\scsi_enc.c (599): error V595: The 'dptr' pointer was utilized before it was verified against nullptr. Check lines: 599, 611. | |||||
| \sys\cam\scsi\scsi_xpt.c (1598): error V595: The 'serial_buf' pointer was utilized before it was verified against nullptr. Check lines: 1598, 1612. | |||||
impUnsubmitted Not Done Inline ActionsFalse positive. serial_buf is always != NULL when have_serial is true, which we check in this loop. imp: False positive. serial_buf is always != NULL when have_serial is true, which we check in this… | |||||
| \sys\cddl\contrib\opensolaris\common\avl\avl.c (689): error V595: The 'tree' pointer was utilized before it was verified against nullptr. Check lines: 689, 691. | |||||
| \sys\cddl\contrib\opensolaris\common\avl\avl.c (489): error V595: The 'tree' pointer was utilized before it was verified against nullptr. Check lines: 489, 491. | |||||
| \sys\cddl\contrib\opensolaris\common\nvpair\opensolaris_nvpair.c (2912): error V501: There are identical sub-expressions '!xdr_int(xdr, & zero)' to the left and to the right of the '||' operator. | |||||
| \sys\cddl\contrib\opensolaris\common\nvpair\opensolaris_nvpair.c (2928): error V595: The 'nvp' pointer was utilized before it was verified against nullptr. Check lines: 2928, 2934. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c (3188): error V595: The 'mstate->dtms_probe' pointer was utilized before it was verified against nullptr. Check lines: 3188, 3209. | |||||
markjUnsubmitted Not Done Inline ActionsThe comment below tries to explain it: the check is bogus and is intended to prevent the compiler from making the dtrace_getarg() call a tail call. So this is a false positive. I wonder if that trick is really reliable though. The check is only false if undefined behaviour has been invoked. markj: The comment below tries to explain it: the check is bogus and is intended to prevent the… | |||||
| \sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c (9535): error V614: Potentially uninitialized pointer 'pp' used. | |||||
markjUnsubmitted Not Done Inline ActionsFalse positive. panic() doesn't return. markj: False positive. panic() doesn't return. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c (15164): error V595: The 'spec' pointer was utilized before it was verified against nullptr. Check lines: 15164, 15166. | |||||
markjUnsubmitted Not Done Inline ActionsFalse positive; nspec > 0 => spec != NULL. markj: False positive; nspec > 0 => spec != NULL. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c (12485): error V595: The 'enab->dten_desc' pointer was utilized before it was verified against nullptr. Check lines: 12485, 12498. | |||||
markjUnsubmitted Not Done Inline ActionsFalse positive; the code is assuming that enab->dten_ndesc > 0 implies that enab->dten_desc != NULL. markj: False positive; the code is assuming that enab->dten_ndesc > 0 implies that enab->dten_desc !=… | |||||
| \sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c (1844): error V590: Consider inspecting this expression. The expression is excessive or contains a misprint. | |||||
markjUnsubmitted Not Done Inline ActionsIt does seem excessive, but I don't see why it might be wrong. It's also an assertion condition. markj: It does seem excessive, but I don't see why it might be wrong. It's also an assertion condition. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c (713): error V595: The 'dn' pointer was utilized before it was verified against nullptr. Check lines: 713, 716. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c (230): error V595: The 'dbf' pointer was utilized before it was verified against nullptr. Check lines: 230, 231. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dmu_send.c (578): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dmu_traverse.c (338): error V595: The 'buf' pointer was utilized before it was verified against nullptr. Check lines: 338, 360. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode.c (1898): error V595: The 'db' pointer was utilized before it was verified against nullptr. Check lines: 1898, 1902. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode.c (252): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode_sync.c (174): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode_sync.c (171): error V634: The priority of the '*' operation is higher than that of the '<<' operation. It's possible that parentheses should be used in the expression. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode_sync.c (175): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dsl_dir.c (1038): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\metaslab.c (2600): error V501: There are identical sub-expressions to the left and to the right of the '==' operator: (txg) == (txg) | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\refcount.c (133): error V547: Expression 'rc->rc_count >= 0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\sa.c (1792): error V595: The 'hdl' pointer was utilized before it was verified against nullptr. Check lines: 1792, 1797. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c (1341): error V595: The 'spa->spa_spares.sav_vdevs' pointer was utilized before it was verified against nullptr. Check lines: 1341, 1342. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c (1355): error V595: The 'spa->spa_l2cache.sav_vdevs' pointer was utilized before it was verified against nullptr. Check lines: 1355, 1357. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c (1398): error V595: The 'spa->spa_spares.sav_vdevs' pointer was utilized before it was verified against nullptr. Check lines: 1398, 1408. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c (1583): error V595: The 'oldvdevs' pointer was utilized before it was verified against nullptr. Check lines: 1583, 1595. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\sys\dmu.h (219): error V616: The '(DMU_BSWAP_UINT8)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\sys\dmu.h (220): error V616: The '(DMU_BSWAP_UINT8)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev.c (704): error V595: The 'vd->vdev_child' pointer was utilized before it was verified against nullptr. Check lines: 704, 706. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev.c (311): error V595: The 'pvd->vdev_child' pointer was utilized before it was verified against nullptr. Check lines: 311, 318. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_geom.c (413): error V595: The '* configs' pointer was utilized before it was verified against nullptr. Check lines: 413, 414. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_mirror.c (179): error V547: Expression '(lastoffset - zio_offset) < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_micro.c (500): error V502: Perhaps the '?:' operator works in a different way than it was expected. The '?:' operator has a lower priority than the '==' operator. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_acl.c (2023): error V729: Function body contains the 'done' label that is not used by any 'goto' statements. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_acl.c (2447): error V614: Uninitialized pointer 'xzp' used. Consider checking the first actual argument of the 'ZTOV' function. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_fuid.c (615): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_fuid.c (590): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_ioctl.c (5723): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_ioctl.c (5699): error V547: Expression '__left >= __right' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_log.c (296): error V595: The 'fuidp' pointer was utilized before it was verified against nullptr. Check lines: 296, 323. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_log.c (587): error V595: The 'fuidp' pointer was utilized before it was verified against nullptr. Check lines: 587, 609. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vfsops.c (498): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vfsops.c (1851): error V547: Expression 'ZTOV(zp)->v_usecount >= 0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c (6582): error V595: The 'zp' pointer was utilized before it was verified against nullptr. Check lines: 6582, 6584. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c (2000): error V595: The 'xzp' pointer was utilized before it was verified against nullptr. Check lines: 2000, 2020. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zil.c (1981): error V629: Consider inspecting the '(uint64_t) 0x1 << 63' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zio.c (3128): error V595: The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 3128, 3135. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\os\list.c (79): error V595: The 'list' pointer was utilized before it was verified against nullptr. Check lines: 79, 81. | |||||
| \sys\cddl\contrib\opensolaris\uts\common\zmod\adler32.c (71): error V595: The 'buf' pointer was utilized before it was verified against nullptr. Check lines: 71, 81. | |||||
| \sys\cddl\dev\dtrace\dtrace_debug.c (102): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 102, 109. | |||||
| \sys\compat\linux\linux_vdso.c (208): error V535: The variable 'i' is being used for this loop and for the outer loop. Check lines: 197, 208. | |||||
| \sys\compat\ndis\subr_ntoskrnl.c (2710): error V595: The 'children' pointer was utilized before it was verified against nullptr. Check lines: 2710, 2720. | |||||
| \sys\compat\x86bios\x86bios.c (589): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& x86bios_emu.x86'. | |||||
| \sys\compat\x86bios\x86bios.c (631): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& x86bios_emu.x86'. | |||||
| \sys\contrib\dev\acpica\components\dispatcher\dscontrol.c (194): error V724: Converting type 'UINT16' to type 'BOOLEAN' can lead to a loss of high-order bits. Non-zero value can become 'FALSE'. | |||||
| \sys\contrib\dev\acpica\components\dispatcher\dswexec.c (251): error V595: The 'OutOp' pointer was utilized before it was verified against nullptr. Check lines: 251, 272. | |||||
| \sys\contrib\dev\acpica\components\dispatcher\dswload.c (497): error V595: The 'Op->Common.Value.Arg' pointer was utilized before it was verified against nullptr. Check lines: 497, 520. | |||||
| \sys\contrib\dev\acpica\components\events\evglock.c (355): error V724: Converting type 'int' to type 'BOOLEAN' can lead to a loss of high-order bits. Non-zero value can become 'FALSE'. | |||||
| \sys\contrib\dev\acpica\components\events\evglock.c (281): error V724: Converting type 'int' to type 'BOOLEAN' can lead to a loss of high-order bits. Non-zero value can become 'FALSE'. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (944): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 944, 1337. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3549): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3549, 3590. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (876): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 876, 944. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3590): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3590, 3594. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3594): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3594, 3601. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (1407): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 1407, 1467. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (1337): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 1337, 1407. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3769): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3769, 3788. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3765): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3765, 3769. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3685): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3685, 3689. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3789): error V571: Recurring check. The 'if (0)' condition was already verified in line 3788. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3748): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3748, 3765. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3847): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3847, 3864. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3843): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3843, 3847. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3744): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3744, 3748. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3806): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3806, 3810. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3654): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3654, 3661. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3650): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3650, 3654. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3810): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3810, 3827. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3545): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3545, 3549. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3619): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3619, 3650. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3706): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3706, 3711. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3689): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3689, 3706. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3711): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3711, 3726. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c (3615): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 3615, 3619. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c (3035): error V610: Undefined behavior. Check the shift operator '<<'. The right operand ('i' = [0..35]) is greater than or equal to the length in bits of the promoted left operand. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c (4513): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 4513, 4520. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c (1676): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 1676, 1680. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_mci.c (218): error V616: The '(MCI_GPM_COEX_VERSION_QUERY)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_misc.c (3869): error V512: A call of the 'memcpy' function will lead to overflow of the buffer 'ctl_index + 12'. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_misc.c (3878): error V512: A call of the 'memcpy' function will lead to overflow of the buffer 'ctl_index + 9'. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_misc.c (2881): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (366): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(- 15)' is negative. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (363): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(- 10)' is negative. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (371): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(- 10)' is negative. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (1554): error V634: The priority of the '*' operation is higher than that of the '<<' operation. It's possible that parentheses should be used in the expression. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (1528): error V634: The priority of the '*' operation is higher than that of the '<<' operation. It's possible that parentheses should be used in the expression. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (305): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(- 15)' is negative. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (303): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(- 3)' is negative. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (358): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(- 6)' is negative. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c (355): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(- 3)' is negative. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_reset.c (965): error V501: There are identical sub-expressions 'HAL_FREQ_BAND_2GHZ' to the left and to the right of the '==' operator. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_reset.c (2971): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 2971, 2973. | |||||
| \sys\contrib\dev\ath\ath_hal\ar9300\ar9300_reset.c (2964): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 2964, 2966. | |||||
| \sys\contrib\ipfilter\netinet\ip_ftp_pxy.c (1949): error V595: The 's' pointer was utilized before it was verified against nullptr. Check lines: 1949, 1954. | |||||
| \sys\contrib\ipfilter\netinet\ip_irc_pxy.c (151): error V595: The 'ipf_p_irc_dcctypes[j]' pointer was utilized before it was verified against nullptr. Check lines: 151, 154. | |||||
| \sys\contrib\ipfilter\netinet\ip_nat.c (2171): error V594: The 'ipnn->ipn_data + sizeof (* aps)' pointer steps out of array's bounds. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (994): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (436): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (912): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (877): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (549): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (438): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (437): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (895): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (891): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c (433): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\contrib\ipfilter\netinet\ip_sync.c (358): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\contrib\ipfilter\netinet\ip_sync.c (330): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\contrib\ngatm\netnatm\sig\sig_call.c (2955): error V595: The 'p' pointer was utilized before it was verified against nullptr. Check lines: 2955, 2958. | |||||
| \sys\contrib\ngatm\netnatm\sig\sig_call.c (2855): error V595: The 'p' pointer was utilized before it was verified against nullptr. Check lines: 2855, 2858. | |||||
| \sys\contrib\ngatm\netnatm\sig\sig_verify.c (94): error V590: Consider inspecting this expression. The expression is excessive or contains a misprint. | |||||
| \sys\contrib\x86emu\x86emu.c (7058): error V646: Consider inspecting the application's logic. It's possible that 'else' keyword is missing. | |||||
| \sys\contrib\x86emu\x86emu.c (7032): error V646: Consider inspecting the application's logic. It's possible that 'else' keyword is missing. | |||||
| \sys\contrib\x86emu\x86emu.c (7006): error V646: Consider inspecting the application's logic. It's possible that 'else' keyword is missing. | |||||
| \sys\contrib\xz-embedded\linux\lib\xz\xz_dec_lzma2.c (1114): error V517: The use of 'if (A) {...} else if (A) {...}' pattern was detected. There is a probability of logical error presence. Check lines: 1114, 1120. | |||||
| \sys\crypto\aesni\aesni.c (633): error V595: The 'authcrd' pointer was utilized before it was verified against nullptr. Check lines: 633, 644. | |||||
| \sys\crypto\via\padlock_hash.c (106): error V567: Undefined behavior. The 'src' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\aacraid\aacraid.c (2861): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\aacraid\aacraid.c (2854): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\aacraid\aacraid_cam.c (573): error V512: A call of the 'strcpy' function will lead to overflow of the buffer 'p->revision'. | |||||
| \sys\dev\aacraid\aacraid_cam.c (572): error V512: A call of the 'strcpy' function will lead to overflow of the buffer 'p->product'. | |||||
| \sys\dev\aacraid\aacraid_cam.c (571): error V512: A call of the 'strcpy' function will lead to overflow of the buffer 'p->vendor'. | |||||
| \sys\dev\acpica\acpi_ec.c (434): error V595: The 'params' pointer was utilized before it was verified against nullptr. Check lines: 434, 439. | |||||
| \sys\dev\acpica\acpi_package.c (83): error V579: The bzero function receives the pointer and its size as arguments. It is possibly a mistake. Inspect the second argument. | |||||
| \sys\dev\acpica\acpi_video.c (612): error V595: The 'vo->vo_levels' pointer was utilized before it was verified against nullptr. Check lines: 612, 614. | |||||
| \sys\dev\advansys\advansys.c (489): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\ae\if_ae.c (1699): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\ae\if_ae.c (1663): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\age\if_age.c (591): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\aic7xxx\aic79xx.c (8664): error V562: It's odd to compare 0 or 1 with a value of 0. | |||||
| \sys\dev\aic7xxx\aic79xx.c (2412): error V595: The 'scb' pointer was utilized before it was verified against nullptr. Check lines: 2412, 2427. | |||||
| \sys\dev\aic7xxx\aic79xx.c (7173): error V616: The 'AHD_REMOVABLE' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\aic7xxx\aic79xx_inline.h (963): error V616: The 'AHD_REMOVABLE' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\aic7xxx\aic7xxx_osm.c (549): error V614: Uninitialized pointer 'lstate' used. | |||||
| \sys\dev\alc\if_alc.c (1535): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\ale\if_ale.c (606): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\arcmsr\arcmsr.c (662): error V512: A call of the 'memcpy' function will lead to the 'srb->arcmsr_cdb.SenseData' buffer becoming out of range. | |||||
| \sys\dev\arcmsr\arcmsr.c (2368): error V512: A call of the 'memset' function will lead to underflow of the buffer 'pQbuffer'. | |||||
| \sys\dev\arcmsr\arcmsr.c (2614): error V512: A call of the 'memset' function will lead to underflow of the buffer 'pQbuffer'. | |||||
| \sys\dev\arcmsr\arcmsr.c (2370): error V512: A call of the 'memset' function will lead to underflow of the buffer 'pQbuffer'. | |||||
| \sys\dev\arcmsr\arcmsr.c (2616): error V512: A call of the 'memset' function will lead to underflow of the buffer 'pQbuffer'. | |||||
| \sys\dev\ata\chipsets\ata-highpoint.c (102): error V541: It is dangerous to print the string 'buffer' into itself. | |||||
| \sys\dev\ata\chipsets\ata-promise.c (796): error V617: Consider inspecting the condition. The '1' argument of the '|' bitwise operation contains a non-zero value. | |||||
| \sys\dev\ata\chipsets\ata-promise.c (208): error V541: It is dangerous to print the string 'buffer' into itself. | |||||
| \sys\dev\ata\chipsets\ata-serverworks.c (166): error V502: Perhaps the '?:' operator works in a different way than it was expected. The '?:' operator has a lower priority than the '|' operator. | |||||
| \sys\dev\ata\chipsets\ata-siliconimage.c (133): error V595: The 'ctlr->r_res2' pointer was utilized before it was verified against nullptr. Check lines: 133, 144. | |||||
| \sys\dev\ath\ath_hal\ar5210\ar5210_reset.c (504): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '-127' is negative. | |||||
| \sys\dev\ath\ath_hal\ar5210\ar5210_reset.c (502): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative. | |||||
| \sys\dev\ath\ath_hal\ar5210\ar5210_reset.c (504): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative. | |||||
| \sys\dev\ath\if_ath.c (6496): error V595: The 'ni' pointer was utilized before it was verified against nullptr. Check lines: 6496, 6501. | |||||
| \sys\dev\ath\if_ath_tx_edma.c (803): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& bf->bf_status'. | |||||
| \sys\dev\bce\if_bce.c (6828): error V595: The 'm0' pointer was utilized before it was verified against nullptr. Check lines: 6828, 6839. | |||||
| \sys\dev\bwi\if_bwi.c (1365): error V595: The 'ni' pointer was utilized before it was verified against nullptr. Check lines: 1365, 1373. | |||||
| \sys\dev\bwn\if_bwn.c (1276): error V595: The 'ni' pointer was utilized before it was verified against nullptr. Check lines: 1276, 1285. | |||||
| \sys\dev\bwn\if_bwn.c (2042): error V547: Expression '32768 + i * pab2 < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\dev\bwn\if_bwn.c (10046): error V595: The 'mac' pointer was utilized before it was verified against nullptr. Check lines: 10046, 10049. | |||||
| \sys\dev\bwn\if_bwn.c (10838): error V502: Perhaps the '?:' operator works in a different way than it was expected. The '?:' operator has a lower priority than the '&' operator. | |||||
| \sys\dev\bwn\if_bwn.c (2041): error V547: Expression '16 * pab0 + i * pab1 < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\dev\bxe\bxe.c (10658): error V512: A call of the 'memset' function will lead to underflow of the buffer '& sc->cmng'. | |||||
| \sys\dev\bxe\bxe.c (1828): error V616: The '(ETH_CONNECTION_TYPE)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\bxe\bxe.c (4037): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\bxe\bxe.c (1824): error V616: The '(ETH_CONNECTION_TYPE)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\bxe\bxe.c (3528): error V595: The 'm' pointer was utilized before it was verified against nullptr. Check lines: 3528, 3553. | |||||
| \sys\dev\bxe\bxe_elink.c (3253): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\bxe\bxe_elink.c (1407): error V705: It is possible that 'else' block was forgotten or commented out, thus altering the program's operation logics. | |||||
| \sys\dev\bxe\bxe_elink.c (14583): error V547: Expression '(next_page & 0xe0) == 0x2' is always false. | |||||
| \sys\dev\bxe\bxe_stats.c (1657): error V512: A call of the 'memcpy' function will lead to a buffer overflow. | |||||
| \sys\dev\bxe\bxe_stats.c (1060): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\dev\bxe\bxe_stats.c (1058): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\dev\bxe\bxe_stats.c (1057): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\dev\bxe\bxe_stats.c (902): error V512: A call of the 'memcpy' function will lead to overflow of the buffer '& (estats->rx_stat_ifhcinbadoctets_hi)'. | |||||
| \sys\dev\bxe\bxe_stats.c (1659): error V512: A call of the 'memcpy' function will lead to a buffer overflow. | |||||
| \sys\dev\bxe\ecore_init_ops.h (667): error V595: The 'ilt' pointer was utilized before it was verified against nullptr. Check lines: 667, 669. | |||||
| \sys\dev\ciss\ciss.c (1086): error V595: The 'cr' pointer was utilized before it was verified against nullptr. Check lines: 1086, 1098. | |||||
| \sys\dev\cxgb\common\cxgb_t3_hw.c (3587): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\cxgb\common\cxgb_t3_hw.c (3583): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\cxgb\common\cxgb_t3_hw.c (3586): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\cxgb\common\cxgb_t3_hw.c (3584): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\cxgb\common\cxgb_t3_hw.c (3585): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\cxgbe\cxgbei\cxgbei.c (126): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'ppod'. | |||||
| \sys\dev\cxgbe\t4_main.c (2636): error V595: The 'kld_fw' pointer was utilized before it was verified against nullptr. Check lines: 2636, 2646. | |||||
| \sys\dev\cxgbe\tom\t4_ddp.c (768): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\drm\radeon_cs.c (153): error V522: Dereferencing of the null pointer 'dev_priv' might take place. | |||||
| \sys\dev\drm\radeon_cs.c (146): error V595: The 'dev_priv' pointer was utilized before it was verified against nullptr. Check lines: 146, 151. | |||||
| \sys\dev\drm2\drm_edid.c (416): error V679: The 'out' variable was not initialized. This variable is passed by a pointer to the 'drm_do_probe_ddc_edid' function in which its value will be utilized. Inspect the second argument. | |||||
| \sys\dev\drm2\drm_fb_helper.c (1356): error V595: The 'fb_crtc' pointer was utilized before it was verified against nullptr. Check lines: 1356, 1358. | |||||
| \sys\dev\drm2\i915\i915_gem.c (1507): error V595: The 'page' pointer was utilized before it was verified against nullptr. Check lines: 1507, 1510. | |||||
| \sys\dev\drm2\i915\i915_gem_tiling.c (504): error V562: It's odd to compare 0 or 1 with a value of 0. | |||||
| \sys\dev\drm2\i915\i915_gem_tiling.c (486): error V562: It's odd to compare 0 or 1 with a value of 0. | |||||
| \sys\dev\drm2\i915\intel_display.c (1388): error V654: The condition of loop is always false. | |||||
| \sys\dev\drm2\i915\intel_display.c (1398): error V654: The condition of loop is always false. | |||||
| \sys\dev\drm2\i915\intel_display.c (1361): error V654: The condition of loop is always false. | |||||
| \sys\dev\drm2\i915\intel_display.c (1372): error V654: The condition of loop is always false. | |||||
| \sys\dev\drm2\i915\intel_sdvo.c (2620): error V679: The 'byte' variable was not initialized. This variable is passed by a pointer to the 'intel_sdvo_read_byte' function in which its value will be utilized. Inspect the third argument. | |||||
| \sys\dev\drm2\i915\intel_sdvo.c (896): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'sdvo_data'. | |||||
| \sys\dev\drm2\i915\intel_sdvo.c (518): error V679: The 'status' variable was not initialized. This variable is passed by a pointer to the 'intel_sdvo_read_byte' function in which its value will be utilized. Inspect the third argument. | |||||
| \sys\dev\drm2\radeon\evergreen.c (1656): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\evergreen.c (1662): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\ni.c (1007): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\ni.c (270): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\ni.c (1013): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600.c (3379): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600.c (3384): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600.c (3394): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600.c (3389): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600.c (2185): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600.c (3374): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600.c (2191): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600_cp.c (438): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600_cp.c (432): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600_cp.c (525): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\r600_cp.c (531): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\radeon_bios.c (250): error V614: Potentially uninitialized pointer 'atrm_handle' used. Consider checking the first actual argument of the 'radeon_atrm_call' function. | |||||
| \sys\dev\drm2\radeon\radeon_clocks.c (627): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\drm2\radeon\radeon_legacy_crtc.c (939): error V501: There are identical sub-expressions '(rdev->family == CHIP_RS400)' to the left and to the right of the '||' operator. | |||||
| \sys\dev\drm2\radeon\radeon_legacy_crtc.c (939): error V501: There are identical sub-expressions '(rdev->family == CHIP_RS480)' to the left and to the right of the '||' operator. | |||||
| \sys\dev\drm2\radeon\rv770.c (355): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\rv770.c (349): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\si.c (1922): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\si.c (1915): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\si.c (1929): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\si.c (3267): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\radeon\si.c (257): error V567: Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\drm2\ttm\ttm_memory.c (278): error V530: The return value of function 'ttm_dma_page_alloc_init' is required to be utilized. | |||||
| \sys\dev\drm2\ttm\ttm_object.c (245): error V614: Potentially uninitialized pointer 'base' used. | |||||
| \sys\dev\e1000\e1000_ich8lan.c (2029): error V654: The condition 'blocked && (i ++ < 10)' of loop is always false. | |||||
| \sys\dev\esp\ncr53c9x.c (1354): error V512: A call of the 'memset' function will lead to underflow of the buffer 'ss'. | |||||
mariusUnsubmitted Not Done Inline ActionsFalse positive marius: False positive | |||||
| \sys\dev\fb\splash.c (133): error V595: The 'decoder_set' pointer was utilized before it was verified against nullptr. Check lines: 133, 141. | |||||
| \sys\dev\fdc\fdc.c (935): error V595: The 'fd' pointer was utilized before it was verified against nullptr. Check lines: 935, 942. | |||||
| \sys\dev\firewire\firewire.c (1369): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\firewire\firewire.c (1366): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\firewire\firewire.c (1368): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\firewire\fwcrom.c (464): error V567: Undefined behavior. The 'p' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\firewire\sbp.c (2318): error V522: Dereferencing of the null pointer 'sbp' might take place. | |||||
| \sys\dev\firewire\sbp_targ.c (1327): error V501: There are identical sub-expressions to the left and to the right of the '|' operator: PIM_NOBUSRESET | PIM_NOBUSRESET | |||||
| \sys\dev\fxp\if_fxp.c (1626): error V557: Array underrun is possible. The '-1' index is pointing beyond array bound. | |||||
| \sys\dev\hptnr\hptnr_osm_bsd.c (860): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'devconf.pIdentifyData->FirmwareRevision'. | |||||
| \sys\dev\hptnr\hptnr_osm_bsd.c (858): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'devconf.pIdentifyData->ModelNumber'. | |||||
| \sys\dev\hyperv\netvsc\hv_netvsc_drv_freebsd.c (838): error V512: A call of the 'memset' function will lead to overflow of the buffer 'rndis_mesg'. | |||||
| \sys\dev\hyperv\storvsc\hv_storvsc_drv_freebsd.c (1560): error V595: The 'sgl_node' pointer was utilized before it was verified against nullptr. Check lines: 1560, 1561. | |||||
| \sys\dev\hyperv\storvsc\hv_storvsc_drv_freebsd.c (1529): error V595: The 'sgl_node' pointer was utilized before it was verified against nullptr. Check lines: 1529, 1530. | |||||
| \sys\dev\hyperv\storvsc\hv_storvsc_drv_freebsd.c (813): error V576: Incorrect format. Consider checking the third actual argument of the 'printf' function. The actual argument equals '4294967295'. | |||||
| \sys\dev\ida\ida.c (91): error V595: The 'ida->qcbs' pointer was utilized before it was verified against nullptr. Check lines: 91, 104. | |||||
| \sys\dev\ioat\ioat.c (1177): error V595: The 'ring' pointer was utilized before it was verified against nullptr. Check lines: 1177, 1183. | |||||
| \sys\dev\ipw\if_ipw.c (1855): error V590: Consider inspecting the 'error == 0 || error != 35' expression. The expression is excessive or contains a misprint. | |||||
| \sys\dev\isci\scil\scic_sds_smp_request.c (438): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& task_context->type.smp'. | |||||
| \sys\dev\iscsi\iscsi.c (1204): error V567: Undefined behavior. The 'io->io_datasn' variable is modified while being used twice between sequence points. | |||||
traszUnsubmitted Not Done Inline ActionsHm, no idea what might be wrong here. False positive, perhaps? I'd appreciate if someone took a look at this. trasz: Hm, no idea what might be wrong here. False positive, perhaps? I'd appreciate if someone took… | |||||
| \sys\dev\iscsi_initiator\isc_cam.c (177): error V595: The 'sp' pointer was utilized before it was verified against nullptr. Check lines: 177, 181. | |||||
| \sys\dev\iscsi_initiator\iscsi_subr.c (540): error V595: The 'ccb' pointer was utilized before it was verified against nullptr. Check lines: 540, 547. | |||||
| \sys\dev\iscsi_initiator\iscsi_subr.c (569): error V595: The 'pq->mp' pointer was utilized before it was verified against nullptr. Check lines: 569, 575. | |||||
| \sys\dev\isp\isp.c (2301): error V733: It is possible that macro expansion resulted in incorrect evaluation order. Check expression: chan - 1 * 20. | |||||
| \sys\dev\isp\isp.c (5390): error V501: There are identical sub-expressions '((xs)->ccb_h.status & CAM_STATUS_MASK) == CAM_REQ_INPROG' to the left and to the right of the '||' operator. | |||||
| \sys\dev\isp\isp_library.c (925): error V567: Undefined behavior. The 'a' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\isp\isp_library.c (1042): error V567: Undefined behavior. The 'a' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\isp\isp_library.c (953): error V567: Undefined behavior. The 'a' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\isp\isp_library.c (916): error V567: Undefined behavior. The 'a' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\iwm\if_iwm.c (2873): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\iwm\if_iwm_mac_ctxt.c (281): error V595: The 'in' pointer was utilized before it was verified against nullptr. Check lines: 281, 291. | |||||
| \sys\dev\iwn\if_iwn.c (5695): error V547: Expression '(rssi) > (phy->rssi[0])' is always false. Unsigned type value is never < 0. | |||||
| \sys\dev\ixgb\if_ixgb.c (2164): error V595: The 'adapter->fmp' pointer was utilized before it was verified against nullptr. Check lines: 2164, 2168. | |||||
| \sys\dev\ixl\if_ixl.c (6314): error V564: The '&' operator is applied to bool type value. You've probably forgotten to include parentheses or intended to use the '&&' operator. | |||||
| \sys\dev\jme\if_jme.c (807): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\kbdmux\kbdmux.c (995): error V595: The 'k->kbd' pointer was utilized before it was verified against nullptr. Check lines: 995, 1000. | |||||
| \sys\dev\mfi\mfi.c (3365): error V595: The 'cm' pointer was utilized before it was verified against nullptr. Check lines: 3365, 3385. | |||||
| \sys\dev\mfi\mfi_tbolt.c (183): error V535: The variable 'i' is being used for this loop and for the outer loop. Check lines: 182, 183. | |||||
| \sys\dev\mfi\mfi_tbolt.c (1110): error V547: Expression 'cdb[0] != 0x28 || cdb[0] != 0x2A' is always true. Probably the '&&' operator should be used here. | |||||
| \sys\dev\mfi\mfi_tbolt.c (779): error V512: A call of the 'memset' function will lead to overflow of the buffer 'cmd->io_request'. | |||||
| \sys\dev\mlx5\device.h (538): error V512: A call of the 'memcpy' function will lead to the '& cqe->rss_hash_type' buffer becoming out of range. | |||||
| \sys\dev\mlx5\mlx5_core\mlx5_main.c (367): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'dev->hca_caps_cur[MLX5_CAP_GENERAL]'. | |||||
| \sys\dev\mlx5\mlx5_core\mlx5_qp.c (137): error V597: The compiler could delete the 'memset' function call, which is used to flush 'dout' object. The RtlSecureZeroMemory() function should be used to erase the private data. | |||||
| \sys\dev\mlx5\mlx5_core\mlx5_srq.c (89): error V616: The '(MLX5_SRQC_STATE_GOOD)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_core\mlx5_vport.c (330): error V616: The '(MLX5_NIC_VPORT_LIST_TYPE_UC)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (2043): error V616: The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (2013): error V616: The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (2071): error V616: The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (2057): error V616: The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (2000): error V616: The '(MLX5_L4_PROT_TYPE_TCP)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (605): error V616: The '(MLX5E_STATE_ASYNC_EVENTS_ENABLE)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (772): error V616: The '(MLX5_RQC_STATE_RST)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (598): error V616: The '(MLX5E_STATE_ASYNC_EVENTS_ENABLE)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (347): error V616: The '(MLX5_IEEE_802_3_COUNTERS_GROUP)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (590): error V616: The '(MLX5E_STATE_ASYNC_EVENTS_ENABLE)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (1983): error V616: The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (1985): error V616: The '(MLX5_L4_PROT_TYPE_TCP)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (1945): error V616: The '(MLX5_TIRC_DISP_TYPE_DIRECT)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (1095): error V616: The '(MLX5_SQC_STATE_RST)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mlx5\mlx5_en\mlx5_en_main.c (1587): error V616: The '(MLX5_WQ_TYPE_LINKED_LIST)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\dev\mly\mly.c (2954): error V595: The 'mc' pointer was utilized before it was verified against nullptr. Check lines: 2954, 2955. | |||||
| \sys\dev\mpr\mpr_sas_lsi.c (1260): error V595: The 'done_ccb' pointer was utilized before it was verified against nullptr. Check lines: 1260, 1266. | |||||
| \sys\dev\mpr\mpr_sas_lsi.c (1336): error V595: The 'cm' pointer was utilized before it was verified against nullptr. Check lines: 1336, 1347. | |||||
| \sys\dev\mpr\mpr_sas_lsi.c (336): error V595: The 'cm' pointer was utilized before it was verified against nullptr. Check lines: 336, 363. | |||||
| \sys\dev\mps\mps_sas_lsi.c (1164): error V595: The 'done_ccb' pointer was utilized before it was verified against nullptr. Check lines: 1164, 1170. | |||||
| \sys\dev\mps\mps_sas_lsi.c (1240): error V595: The 'cm' pointer was utilized before it was verified against nullptr. Check lines: 1240, 1251. | |||||
| \sys\dev\mpt\mpt_cam.c (3381): error V547: Expression 'MPT_PRT_ALWAYS <= (mpt)->verbose' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\mpt\mpt_cam.c (3642): error V547: Expression 'MPT_PRT_ALWAYS <= (mpt)->verbose' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\mpt\mpt_cam.c (4703): error V512: A call of the 'memset' function will lead to overflow of the buffer '& rsp'. | |||||
| \sys\dev\mpt\mpt_cam.c (2884): error V547: Expression 'MPT_PRT_ALWAYS <= (mpt)->verbose' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\mpt\mpt_raid.c (573): error V512: A call of the 'memcpy' function will lead to the '& reply->ActionData' buffer becoming out of range. | |||||
| \sys\dev\mrsas\mrsas.c (1279): error V522: Dereferencing of the null pointer 'sc' might take place. | |||||
| \sys\dev\mrsas\mrsas.c (4027): error V522: Dereferencing of the null pointer 'sc' might take place. | |||||
| \sys\dev\mrsas\mrsas_cam.c (618): error V512: A call of the 'memset' function will lead to overflow of the buffer 'cmd->io_request'. | |||||
| \sys\dev\mrsas\mrsas_cam.c (342): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\mrsas\mrsas_fp.c (336): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'pDrvRaidMap->arMapInfo'. | |||||
| \sys\dev\msk\if_msk.c (1626): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\mxge\if_mxge.c (1964): error V564: The '&' operator is applied to bool type value. You've probably forgotten to include parentheses or intended to use the '&&' operator. | |||||
| \sys\dev\ntb\ntb_hw\ntb_hw.c (1375): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
cemUnsubmitted Not Done Inline ActionsThis is sort of maybe just dead code. I'm not sure anyone is using NTB on "Atom" (a specific, older model) as opposed to "Xeon" (includes Broadwell-DE class SoC). cem: This is sort of maybe just dead code. I'm not sure anyone is using NTB on "Atom" (a specific… | |||||
| \sys\dev\nvme\nvme_ns.c (577): error V595: The 'ns->cdev' pointer was utilized before it was verified against nullptr. Check lines: 577, 580. | |||||
| \sys\dev\nxge\if_nxge.c (1987): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\nxge\if_nxge.c (2073): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\nxge\if_nxge.c (1498): error V579: The copyout function receives the pointer and its size as arguments. It is possibly a mistake. Inspect the third argument. | |||||
| \sys\dev\nxge\xgehal\xgehal-mm.c (396): error V595: The 'mempool->memblocks_arr' pointer was utilized before it was verified against nullptr. Check lines: 396, 422. | |||||
| \sys\dev\nxge\xgehal\xgehal-mm.c (393): error V595: The 'mempool->memblocks_priv_arr' pointer was utilized before it was verified against nullptr. Check lines: 393, 417. | |||||
| \sys\dev\nxge\xgehal\xgehal-mm.c (383): error V595: The 'mempool->shadow_items_arr' pointer was utilized before it was verified against nullptr. Check lines: 383, 406. | |||||
| \sys\dev\oce\oce_queue.c (770): error V595: The 'mq' pointer was utilized before it was verified against nullptr. Check lines: 770, 774. | |||||
| \sys\dev\patm\if_patm_tx.c (826): error V654: The condition '!done' of loop is always true. | |||||
| \sys\dev\pccard\pccard.c (900): error V595: The 'devi' pointer was utilized before it was verified against nullptr. Check lines: 900, 906. | |||||
| \sys\dev\pci\pci_user.c (713): error V501: There are identical sub-expressions '(dinfo != ((void *) 0))' to the left and to the right of the '&&' operator. | |||||
seUnsubmitted Not Done Inline ActionsDoes no harm, but I'll fix it to simplify the loop condition where it occurs. se: Does no harm, but I'll fix it to simplify the loop condition where it occurs. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (780): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (27613): error V579: The bzero function receives the pointer and its size as arguments. It is possibly a mistake. Inspect the second argument. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (22245): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (22196): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (25319): error V512: A call of the 'memset' function will lead to underflow of the buffer '& pccb->tiSuperScsiRequest'. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (25185): error V512: A call of the 'memset' function will lead to underflow of the buffer '& pccb->tiSuperScsiRequest'. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (3961): error V547: Expression 'pccb->targetId >= 0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (27844): error V561: It's probably better to assign value to 'pCard' variable than to declare it anew. Previous declaration: agtiapi.c, line 21637. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (4777): error V512: A call of the 'memset' function will lead to underflow of the buffer '& pccb->tiSuperScsiRequest'. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (3103): error V595: The 'pmcsc' pointer was utilized before it was verified against nullptr. Check lines: 3103, 3109. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (829): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (4607): error V512: A call of the 'memset' function will lead to underflow of the buffer '& pccb->tiSuperScsiRequest'. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\agtiapi.c (3109): error V547: Expression 'pccb->targetId >= 0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\osapi.c (316): error V579: The bzero function receives the pointer and its size as arguments. It is possibly a mistake. Inspect the second argument. | |||||
| \sys\dev\pms\freebsd\driver\ini\src\osapi.c (767): error V561: It's probably better to assign value to 'pCard' variable than to declare it anew. Previous declaration: lxencrypt.h, line 80. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (7845): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (8061): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (7915): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (431): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (347): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (374): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (131): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (201): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (8117): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (8088): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (8145): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\discovery\dm\dminit.c (403): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\sahw.c (1949): error V571: Recurring check. This condition was already verified in line 1946. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\sahw.c (10646): error V571: Recurring check. This condition was already verified in line 10643. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\saint.c (2023): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\saint.c (10451): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\saioctlcmd.c (2322): error V547: Expression '(value & ((1 << 12) | (1 << 13))) == 0x2' is always false. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\saioctlcmd.c (10831): error V547: Expression '(value & ((1 << 10) | (1 << 11))) == 0x2' is always false. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\saioctlcmd.c (2321): error V547: Expression '(value & ((1 << 10) | (1 << 11))) == 0x2' is always false. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\saioctlcmd.c (10832): error V547: Expression '(value & ((1 << 12) | (1 << 13))) == 0x2' is always false. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\sampirsp.c (7224): error V560: A part of conditional expression is always true: 0x2002. | |||||
| \sys\dev\pms\RefTisa\sallsdk\spc\sampirsp.c (15018): error V560: A part of conditional expression is always true: 0x2002. | |||||
| \sys\dev\pms\RefTisa\sat\src\sminit.c (9104): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\sminit.c (9273): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\sminit.c (279): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\sminit.c (110): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (10395): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (11501): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (19821): error V547: Expression '(scsiCmnd->cdb[2] & 0x20) == 0x01' is always false. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (21030): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (11412): error V547: Expression '(scsiCmnd->cdb[2] & 0x20) == 0x01' is always false. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (2848): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (1454): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsat.c (12652): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (14697): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (5793): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (18193): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (14662): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (5828): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (9684): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (11498): error V595: The 'satOrgIOContext' pointer was utilized before it was verified against nullptr. Check lines: 11498, 11501. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (11341): error V595: The 'satOrgIOContext' pointer was utilized before it was verified against nullptr. Check lines: 11341, 11344. | |||||
| \sys\dev\pms\RefTisa\sat\src\smsatcb.c (13706): error V595: The 'agFirstDword' pointer was utilized before it was verified against nullptr. Check lines: 13706, 13729. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c (6491): error V595: The 'onePortContext' pointer was utilized before it was verified against nullptr. Check lines: 6491, 6497. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (12456): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (12422): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13425): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (12493): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13277): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13249): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13305): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13365): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13333): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (12561): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (12529): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (12591): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13188): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (12891): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (14296): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1795): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1049): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1823): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1879): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1851): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (914): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (880): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (951): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1019): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (987): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (3484): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (14364): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (13393): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (3416): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1939): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1911): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c (1971): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (14367): error V712: Be advised that compiler may delete this cycle or make it infinity. Use volatile variable(s) or synchronization primitives to avoid this. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (15065): error V614: Uninitialized variable 'status' used. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (13818): error V512: A call of the 'memcpy' function will lead to overflow of the buffer '& pIoErrorPayload->IoError'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (13851): error V512: A call of the 'memcpy' function will lead to overflow of the buffer '& pIoEventPayload->IoEvent'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (1939): error V595: The 'agIOCTLPayload' pointer was utilized before it was verified against nullptr. Check lines: 1939, 1942. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (2522): error V712: Be advised that compiler may delete this cycle or make it infinity. Use volatile variable(s) or synchronization primitives to avoid this. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (3396): error V614: Uninitialized variable 'status' used. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (1918): error V512: A call of the 'memcpy' function will lead to overflow of the buffer '& pIoEventPayload->IoEvent'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (1340): error V595: The 'tiRoot' pointer was utilized before it was verified against nullptr. Check lines: 1340, 1352. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (1344): error V595: The 'agIOCTLPayload' pointer was utilized before it was verified against nullptr. Check lines: 1344, 1352. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c (1885): error V512: A call of the 'memcpy' function will lead to overflow of the buffer '& pIoErrorPayload->IoError'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2680): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2653): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3272): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3367): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3599): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3630): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3096): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3242): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3337): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3694): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (5210): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'localname'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (5213): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'remotename'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1749): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3724): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3810): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (5200): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'localname'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2797): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2835): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2864): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2714): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2742): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2770): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2893): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3009): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3038): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (3067): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2922): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2951): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2980): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1374): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1401): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1345): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1289): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1316): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1608): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1640): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1577): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1430): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1546): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1258): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (356): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (388): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (318): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (248): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (281): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1204): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1231): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1177): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (422): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (453): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2160): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2195): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2125): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2064): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2094): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2348): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2374): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2323): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2225): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2271): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2034): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1821): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1851): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1781): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1670): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1710): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1974): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (2004): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1943): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1882): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\common\tdport.c (1912): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (17555): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'tdSMPRequestBody->smpPayload'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (17596): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'tdSMPRequestBody->smpPayload'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (12268): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (12034): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (7272): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'tdSMPRequestBody->smpPayload'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (539): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (278): error V621: Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c (7403): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'tdSMPRequestBody->smpPayload'. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdinit.c (12058): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdinit.c (310): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c (8320): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c (8355): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c (4473): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c (17143): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c (20877): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c (20842): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c (8827): error V547: Expression '(scsiCmnd->cdb[2] & 0x20) == 0x01' is always false. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c (10484): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c (29409): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c (21152): error V547: Expression '(scsiCmnd->cdb[2] & 0x20) == 0x01' is always false. | |||||
| \sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c (18591): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\qlxgb\qla_hw.c (799): error V547: Expression is always true. Probably the '&&' operator should be used here. | |||||
| \sys\dev\qlxgbe\ql_isr.c (728): error V522: Dereferencing of the null pointer 'ha' might take place. | |||||
| \sys\dev\qlxge\qls_dump.c (1615): error V512: A call of the 'memcpy' function will lead to the '"MPI Coredump"' buffer becoming out of range. | |||||
| \sys\dev\qlxge\qls_dump.c (589): error V610: Unspecified behavior. Check the shift operator '>>'. The left operand '(0x1 << 31)' is negative. | |||||
| \sys\dev\re\if_re.c (1787): error V595: The 'ifp' pointer was utilized before it was verified against nullptr. Check lines: 1787, 1803. | |||||
mariusUnsubmitted Not Done Inline ActionsFalse positive marius: False positive | |||||
| \sys\dev\rl\if_rl.c (1941): error V571: Recurring check. This condition was already verified in line 1940. | |||||
| \sys\dev\rtwn\if_rtwn.c (682): error V512: A call of the 'memset' function will lead to underflow of the buffer 'desc'. | |||||
| \sys\dev\safe\safe.c (1608): error V547: Expression 'j >= 0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\safe\safe.c (1596): error V547: Expression 'j >= 0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\sfxge\common\efx_filter.c (664): error V547: Expression '__x >= __y' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\sfxge\common\efx_rx.c (1096): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\sfxge\common\efx_tx.c (821): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\sfxge\common\hunt_filter.c (973): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\sfxge\common\hunt_phy.c (594): error V595: The 'valuesp' pointer was utilized before it was verified against nullptr. Check lines: 594, 601. | |||||
| \sys\dev\sfxge\common\hunt_rx.c (698): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\sfxge\common\hunt_tx.c (500): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\sfxge\common\siena_phy.c (715): error V595: The 'valuesp' pointer was utilized before it was verified against nullptr. Check lines: 715, 728. | |||||
| \sys\dev\sfxge\common\siena_phy.c (474): error V595: The 'esmp' pointer was utilized before it was verified against nullptr. Check lines: 474, 484. | |||||
| \sys\dev\si\si.c (313): error V622: Consider inspecting the 'switch' statement. It's possible that the first 'case' operator is missing. | |||||
emasteUnsubmitted Not Done Inline ActionsThis error was introduced in rS166091; I'll take it. emaste: This error was introduced in rS166091; I'll take it. | |||||
| \sys\dev\sk\if_sk.c (3141): error V595: The 'ifp0' pointer was utilized before it was verified against nullptr. Check lines: 3141, 3157. | |||||
| \sys\dev\sk\if_sk.c (3149): error V595: The 'ifp1' pointer was utilized before it was verified against nullptr. Check lines: 3149, 3160. | |||||
| \sys\dev\sound\midi\midi.c (1153): error V595: The 'm' pointer was utilized before it was verified against nullptr. Check lines: 1153, 1157. | |||||
| \sys\dev\sound\midi\sequencer.c (944): error V595: The 'scp' pointer was utilized before it was verified against nullptr. Check lines: 944, 947. | |||||
| \sys\dev\sound\pci\cmi.c (1007): error V595: The 'sc' pointer was utilized before it was verified against nullptr. Check lines: 1007, 1016. | |||||
| \sys\dev\sound\pci\emu10kx.c (3494): error V595: The 'childlist' pointer was utilized before it was verified against nullptr. Check lines: 3494, 3496. | |||||
| \sys\dev\sound\pci\es137x.c (1882): error V595: The 'es' pointer was utilized before it was verified against nullptr. Check lines: 1882, 1893. | |||||
| \sys\dev\sound\pci\via8233.c (1375): error V595: The 'via' pointer was utilized before it was verified against nullptr. Check lines: 1375, 1392. | |||||
| \sys\dev\sound\pci\via82c686.c (604): error V595: The 'via' pointer was utilized before it was verified against nullptr. Check lines: 604, 613. | |||||
| \sys\dev\sound\pcm\channel.c (676): error V595: The 'c' pointer was utilized before it was verified against nullptr. Check lines: 676, 695. | |||||
| \sys\dev\sound\pcm\channel.c (777): error V595: The 'c' pointer was utilized before it was verified against nullptr. Check lines: 777, 786. | |||||
| \sys\dev\sound\pcm\dsp.c (2729): error V535: The variable 'i' is being used for this loop and for the outer loop. Check lines: 2573, 2729. | |||||
| \sys\dev\sound\pcm\dsp.c (2561): error V595: The 'i_dev' pointer was utilized before it was verified against nullptr. Check lines: 2561, 2589. | |||||
| \sys\dev\sound\pcm\dsp.c (2582): error V595: The 'd' pointer was utilized before it was verified against nullptr. Check lines: 2582, 2589. | |||||
| \sys\dev\stge\if_stge.c (511): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\sym\sym_hipd.c (617): error V595: The 'vbp' pointer was utilized before it was verified against nullptr. Check lines: 617, 620. | |||||
seUnsubmitted Not Done Inline ActionsFalse positive: baddr != NULL is tested and only possible for vbp != NULL se: False positive: baddr != NULL is tested and only possible for vbp != NULL | |||||
| \sys\dev\sym\sym_hipd.c (4402): error V595: The 'cp' pointer was utilized before it was verified against nullptr. Check lines: 4402, 4424. | |||||
seUnsubmitted Not Done Inline ActionsLooks like a false positive: The value read into cp cannot be NULL unless there was a malloc error during driver attach (which had made the attach fail). se: Looks like a false positive: The value read into cp cannot be NULL unless there was a malloc… | |||||
| \sys\dev\syscons\scvidctl.c (551): error V595: The 'adp' pointer was utilized before it was verified against nullptr. Check lines: 551, 554. | |||||
| \sys\dev\syscons\syscons.c (1695): error V595: The 'scp->sc->kbd' pointer was utilized before it was verified against nullptr. Check lines: 1695, 1698. | |||||
| \sys\dev\syscons\syscons.c (1673): error V595: The 'scp->sc->kbd' pointer was utilized before it was verified against nullptr. Check lines: 1673, 1678. | |||||
| \sys\dev\ti\if_ti.c (3826): error V547: Expression 'mem_param->tgAddr >= 0x0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\dev\ti\if_ti.c (806): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\dev\twe\twe.c (1679): error V595: The 'p[0]' pointer was utilized before it was verified against nullptr. Check lines: 1679, 1690. | |||||
| \sys\dev\twe\twe_freebsd.c (731): error V595: The 'sc' pointer was utilized before it was verified against nullptr. Check lines: 731, 735. | |||||
| \sys\dev\tws\tws_cam.c (1066): error V522: Dereferencing of the null pointer 'sc' might take place. | |||||
| \sys\dev\txp\if_txp.c (401): error V595: The 'rsp' pointer was utilized before it was verified against nullptr. Check lines: 401, 403. | |||||
| \sys\dev\usb\controller\ehci.c (3335): error V512: A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_hub_desc.temp'. | |||||
| \sys\dev\usb\controller\ohci.c (2307): error V512: A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_hub_desc.temp'. | |||||
| \sys\dev\usb\controller\uhci.c (2692): error V512: A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_hub_desc.temp'. | |||||
| \sys\dev\usb\controller\xhci.c (3500): error V512: A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_hub_desc.temp'. | |||||
| \sys\dev\usb\net\if_smsc.c (1365): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\usb\storage\umass.c (2748): error V512: A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_transfer.cmd_data'. | |||||
| \sys\dev\usb\storage\umass.c (588): error V737: It is possible that ',' comma is missing at the end of the string. | |||||
| \sys\dev\usb\storage\umass.c (2826): error V512: A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_transfer.cmd_data'. | |||||
| \sys\dev\usb\storage\umass.c (619): error V737: It is possible that ',' comma is missing at the end of the string. | |||||
| \sys\dev\usb\usb_debug.c (294): error V547: Expression 'val < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\dev\usb\wlan\if_rsu.c (1516): error V569: Truncation of constant value -96. The value range of unsigned char type: [0, 255]. | |||||
| \sys\dev\usb\wlan\if_rum.c (2752): error V610: Undefined behavior. Check the shift operator '<<'. The right operand ('i' = [0..63]) is greater than or equal to the length in bits of the promoted left operand. | |||||
| \sys\dev\vmware\vmxnet3\if_vmx.c (2747): error V590: Consider inspecting the 'error == 0 || error != 27' expression. The expression is excessive or contains a misprint. | |||||
| \sys\dev\vte\if_vte.c (431): error V593: Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-blockpool.c (225): error V595: The 'blockpool' pointer was utilized before it was verified against nullptr. Check lines: 225, 233. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-doorbells.c (255): error V629: Consider inspecting the '1 << (16 - vp->vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-doorbells.c (113): error V629: Consider inspecting the '1 << (16 - vp->vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-mm.c (454): error V595: The 'mempool->memblocks_priv_arr' pointer was utilized before it was verified against nullptr. Check lines: 454, 484. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-mm.c (448): error V595: The 'mempool->shadow_items_arr' pointer was utilized before it was verified against nullptr. Check lines: 448, 471. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-mrpcim.c (2383): error V629: Consider inspecting the '1 << (16 - hldev->first_vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-mrpcim.c (2494): error V629: Consider inspecting the '1 << (16 - hldev->first_vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (515): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (497): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (500): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (518): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (552): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (5363): error V595: The 'vpath' pointer was utilized before it was verified against nullptr. Check lines: 5363, 5371. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (5014): error V629: Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (5305): error V595: The 'vpath' pointer was utilized before it was verified against nullptr. Check lines: 5305, 5313. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (5205): error V595: The 'vp' pointer was utilized before it was verified against nullptr. Check lines: 5205, 5213. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (573): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (570): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (341): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (2935): error V567: Undefined behavior. The 'Key' variable is modified while being used twice between sequence points. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (591): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (588): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (338): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (383): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (479): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (482): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (356): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (359): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (380): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (9321): error V595: The 'vp' pointer was utilized before it was verified against nullptr. Check lines: 9321, 9329. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (9275): error V595: The 'vp' pointer was utilized before it was verified against nullptr. Check lines: 9275, 9283. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (555): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (10402): error V629: Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (10346): error V629: Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (7933): error V629: Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (6122): error V629: Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (10285): error V629: Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (7835): error V629: Consider inspecting the '1 << (16 - vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\vxge\vxgehal\vxgehal-virtualpath.c (7800): error V629: Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\dev\xen\blkfront\blkfront.c (677): error V522: Dereferencing of the null pointer 'sc' might take place. | |||||
| \sys\dev\xen\blkfront\blkfront.c (1133): error V562: It's odd to compare 0 or 1 with a value of 0. | |||||
| \sys\dev\xen\netback\netback_unit_tests.c (1497): error V595: The 'mbufc' pointer was utilized before it was verified against nullptr. Check lines: 1497, 1498. | |||||
| \sys\dev\xen\netback\netback_unit_tests.c (1977): error V595: The 'mbufc' pointer was utilized before it was verified against nullptr. Check lines: 1977, 1978. | |||||
| \sys\dev\xen\netback\netback_unit_tests.c (1540): error V595: The 'mbufc' pointer was utilized before it was verified against nullptr. Check lines: 1540, 1541. | |||||
| \sys\dev\xen\netback\netback_unit_tests.c (1622): error V595: The 'mbufc' pointer was utilized before it was verified against nullptr. Check lines: 1622, 1623. | |||||
| \sys\dev\xen\netback\netback_unit_tests.c (1264): error V595: The 'pMbuf' pointer was utilized before it was verified against nullptr. Check lines: 1264, 1274. | |||||
| \sys\fs\cd9660\cd9660_rrip.c (562): error V595: The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 562, 567. | |||||
| \sys\fs\cd9660\cd9660_vfsops.c (739): error V595: The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 739, 744. | |||||
| \sys\fs\cd9660\cd9660_vfsops.c (466): error V595: The 'supbp' pointer was utilized before it was verified against nullptr. Check lines: 466, 469. | |||||
| \sys\fs\cd9660\cd9660_vfsops.c (261): error V627: Consider inspecting the expression. The argument of sizeof() is the macro which expands to a number. | |||||
| \sys\fs\cd9660\cd9660_vnops.c (831): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'ap->a_fhp'. | |||||
| \sys\fs\ext2fs\ext2_vnops.c (1048): error V595: The 'xp' pointer was utilized before it was verified against nullptr. Check lines: 1048, 1052. | |||||
| \sys\fs\fuse\fuse_node.c (247): error V595: The 'cnp' pointer was utilized before it was verified against nullptr. Check lines: 247, 250. | |||||
| \sys\fs\msdosfs\msdosfs_lookup.c (865): error V595: The 'dep' pointer was utilized before it was verified against nullptr. Check lines: 865, 879. | |||||
| \sys\fs\nfs\nfs_commonacl.c (59): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
rmacklemUnsubmitted Not Done Inline ActionsAll of the "tl" ones are bogus. The NFSM_BUILD() and NFSM_DISSECT() macros rmacklem: All of the "tl" ones are bogus. The NFSM_BUILD() and NFSM_DISSECT() macros
set tl to point to a… | |||||
| \sys\fs\nfs\nfs_commonacl.c (58): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonacl.c (57): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonkrpc.c (856): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonkrpc.c (868): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonkrpc.c (828): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonkrpc.c (852): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonkrpc.c (851): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonkrpc.c (933): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonkrpc.c (827): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonsubs.c (780): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonsubs.c (1368): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonsubs.c (1353): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonsubs.c (1572): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfs\nfs_commonsubs.c (3201): error V595: The 'nfsuserhash' pointer was utilized before it was verified against nullptr. Check lines: 3201, 3220. | |||||
rmacklemUnsubmitted Not Done Inline ActionsThe case where it is used it is valid and non-null. rmacklem: The case where it is used it is valid and non-null. | |||||
| \sys\fs\nfsclient\nfs_clbio.c (687): error V595: The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 687, 691. | |||||
rmacklemUnsubmitted Not Done Inline Actionsbp is only used when n > 0 and it is always valid and non-null when n > 0. rmacklem: bp is only used when n > 0 and it is always valid and non-null when n > 0.
| |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4806): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4169): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4798): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4170): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4168): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4114): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4209): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4208): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4207): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4210): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4633): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4622): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4635): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4204): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4174): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4172): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4793): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4206): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4205): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4752): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4808): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (2082): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (2075): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (2945): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (3879): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (3352): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (476): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (232): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (483): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (1701): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (1689): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (5133): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (5770): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4933): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4898): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4900): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4112): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4111): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4113): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (5782): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clrpcops.c (4528): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3326): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3345): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3452): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3325): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (1000): error V614: Potentially uninitialized pointer 'clp' used. Consider checking the first actual argument of the 'nfscl_finddeleg' function. | |||||
rmacklemUnsubmitted Not Done Inline ActionsIt is initialized before it is used. rmacklem: It is initialized before it is used. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3192): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3195): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3454): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3248): error V595: The 'nfhp' pointer was utilized before it was verified against nullptr. Check lines: 3248, 3278. | |||||
rmacklemUnsubmitted Not Done Inline ActionsIt is initialized before used. rmacklem: It is initialized before used. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (3453): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsclient\nfs_clstate.c (4710): error V595: The 'lyp' pointer was utilized before it was verified against nullptr. Check lines: 4710, 4716. | |||||
rmacklemUnsubmitted Not Done Inline ActionsIt is initialized before being used. rmacklem: It is initialized before being used. | |||||
| \sys\fs\nfsclient\nfs_clvnops.c (2889): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
rmacklemUnsubmitted Not Done Inline ActionsThe if and else do the same thing, which is silly but not broken. I believe this rmacklem: The if and else do the same thing, which is silly but not broken. I believe this
was inherited… | |||||
| \sys\fs\nfsserver\nfs_nfsdport.c (599): error V507: Pointer to local array 'iv' is stored outside the scope of this array. Such a pointer will become invalid. | |||||
rmacklemUnsubmitted Not Done Inline ActionsThis one I don't understand. "iv" is declared local to the function and is used rmacklem: This one I don't understand. "iv" is declared local to the function and is used
within the… | |||||
| \sys\fs\nfsserver\nfs_nfsdport.c (3311): error V595: The 'procp' pointer was utilized before it was verified against nullptr. Check lines: 3311, 3316. | |||||
rmacklemUnsubmitted Not Done Inline ActionsFalse positive, since the code checks for nfsd_master_proc != NULL rmacklem: False positive, since the code checks for nfsd_master_proc != NULL
and then procp ==… | |||||
| \sys\fs\nfsserver\nfs_nfsdport.c (1829): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdport.c (1572): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3896): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3897): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2615): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3895): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3880): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3881): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3894): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3898): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2515): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2497): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3231): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2516): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3967): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3968): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3969): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3116): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3177): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2616): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3035): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2663): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2768): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3031): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3235): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3877): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3878): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3879): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3869): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3236): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3524): error V595: The 'clp' pointer was utilized before it was verified against nullptr. Check lines: 3524, 3532. | |||||
rmacklemUnsubmitted Not Done Inline ActionsIt is initialized before being used. rmacklem: It is initialized before being used. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (3776): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (4078): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2194): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (1870): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2229): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2234): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2230): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (834): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (825): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (852): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (818): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (1190): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (327): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (1226): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2388): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (2257): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (678): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdserv.c (655): error V567: Undefined behavior. The 'tl' variable is modified while being used twice between sequence points. | |||||
| \sys\fs\nfsserver\nfs_nfsdstate.c (949): error V614: Potentially uninitialized pointer 'lfp' used. | |||||
rmacklemUnsubmitted Not Done Inline ActionsIt is initialized before being used. rmacklem: It is initialized before being used. | |||||
| \sys\fs\nfsserver\nfs_nfsdstate.c (515): error V595: The 'nd' pointer was utilized before it was verified against nullptr. Check lines: 515, 525. | |||||
rmacklemUnsubmitted Not Done Inline ActionsAlso a false positive. The only time nd == NULL is when the function is rmacklem: Also a false positive. The only time nd == NULL is when the function is
called with CLOPS_RENEW. | |||||
| \sys\fs\unionfs\union_subr.c (281): error V595: The 'lowervp' pointer was utilized before it was verified against nullptr. Check lines: 281, 293. | |||||
| \sys\fs\unionfs\union_vnops.c (499): error V595: The 'lvp' pointer was utilized before it was verified against nullptr. Check lines: 499, 514. | |||||
| \sys\gdb\gdb_main.c (263): error V501: There are identical sub-expressions 'gdb_rx_char() != ';'' to the left and to the right of the '||' operator. | |||||
| \sys\geom\geom_slice.c (320): error V595: The 'pp' pointer was utilized before it was verified against nullptr. Check lines: 320, 323. | |||||
| \sys\geom\raid\md_nvidia.c (531): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\geom\raid\md_promise.c (1852): error V595: The 'pd->pd_meta[j]' pointer was utilized before it was verified against nullptr. Check lines: 1852, 1857. | |||||
| \sys\geom\vinum\geom_vinum_plex.c (173): error V503: This is a nonsensical comparison: pointer >= 0. | |||||
| \sys\geom\vinum\geom_vinum_raid5.c (610): error V503: This is a nonsensical comparison: pointer >= 0. | |||||
| \sys\geom\vinum\geom_vinum_raid5.c (602): error V503: This is a nonsensical comparison: pointer >= 0. | |||||
| \sys\geom\vinum\geom_vinum_state.c (186): error V564: The '&' operator is applied to bool type value. You've probably forgotten to include parentheses or intended to use the '&&' operator. | |||||
| \sys\gnu\fs\reiserfs\reiserfs_vfsops.c (647): error V627: Consider inspecting the expression. The argument of sizeof() is the macro which expands to a number. | |||||
| \sys\gnu\fs\reiserfs\reiserfs_vfsops.c (230): error V595: The 'rmp' pointer was utilized before it was verified against nullptr. Check lines: 230, 241. | |||||
| \sys\kern\imgact_elf.c (2156): error V614: Uninitialized variable 'structsize' used. Consider checking the second actual argument of the 'sbuf_bcat' function. | |||||
opUnsubmitted Not Done Inline ActionsThis is false positive, but moving "structsize = sizeof(elf_kinfo_proc_t);" before the check would fix this warning. op: This is false positive, but moving "structsize = sizeof(elf_kinfo_proc_t);" before the check… | |||||
| \sys\kern\kern_cpuset.c (1107): error V595: The 'p' pointer was utilized before it was verified against nullptr. Check lines: 1107, 1134. | |||||
opUnsubmitted Not Done Inline ActionsThis is false positive, p used as dummy parameter at this call. op: This is false positive, p used as dummy parameter at this call. | |||||
| \sys\kern\kern_module.c (162): error V595: The 'container' pointer was utilized before it was verified against nullptr. Check lines: 162, 176. | |||||
| \sys\kern\kern_ntptime.c (721): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(int64_t)(- 500000L)' is negative. | |||||
| \sys\kern\kern_ntptime.c (409): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '(int64_t)(- 500000L)' is negative. | |||||
| \sys\kern\kern_numa.c (153): error V595: The 'p' pointer was utilized before it was verified against nullptr. Check lines: 153, 159. | |||||
| \sys\kern\kern_rmlock.c (669): error V523: The 'then' statement is equivalent to the 'else' statement. | |||||
| \sys\kern\link_elf_obj.c (956): error V595: The 'ef->relatab' pointer was utilized before it was verified against nullptr. Check lines: 956, 959. | |||||
kibUnsubmitted Not Done Inline ActionsThis is false positive, but warning should be gone by r295489. kib: This is false positive, but warning should be gone by r295489. | |||||
| \sys\kern\subr_turnstile.c (1196): error V583: The '?:' operator, regardless of its conditional expression, always returns one and the same value: td->td_name. | |||||
| \sys\kern\subr_turnstile.c (1029): error V583: The '?:' operator, regardless of its conditional expression, always returns one and the same value: td->td_name. | |||||
| \sys\kern\subr_turnstile.c (1112): error V583: The '?:' operator, regardless of its conditional expression, always returns one and the same value: td->td_name. | |||||
kibUnsubmitted Not Done Inline ActionsI will handle subr_turnstile. This is a consequence of r173600. kib: I will handle subr_turnstile. This is a consequence of r173600. | |||||
kibUnsubmitted Not Done Inline Actionsr295488 kib: r295488 | |||||
| \sys\kern\uipc_socket.c (1738): error V595: The 'm' pointer was utilized before it was verified against nullptr. Check lines: 1738, 1762. | |||||
| \sys\kern\uipc_socket.c (1751): error V595: The 'm' pointer was utilized before it was verified against nullptr. Check lines: 1751, 1762. | |||||
| \sys\kern\vfs_bio.c (2339): error V595: The 'bp->b_vp' pointer was utilized before it was verified against nullptr. Check lines: 2339, 2349. | |||||
kibUnsubmitted Not Done Inline ActionsThis one is false positive. B_VMIO implies that b_vp is assigned. kib: This one is false positive. B_VMIO implies that b_vp is assigned. | |||||
| \sys\libkern\iconv_ucs.c (110): error V549: The first argument of 'strcmp' function is equal to the second argument. | |||||
| \sys\net\if_bridge.c (2452): error V696: The 'continue' operator will terminate 'do { ... } while (FALSE)' loop because the condition is always false. Check lines: 2452, 2452. | |||||
| \sys\net\if_bridge.c (2461): error V696: The 'continue' operator will terminate 'do { ... } while (FALSE)' loop because the condition is always false. Check lines: 2461, 2461. | |||||
| \sys\net\if_enc.c (290): error V595: The '* ctx->mp' pointer was utilized before it was verified against nullptr. Check lines: 290, 293. | |||||
| \sys\net\if_spppsubr.c (4349): error V557: Array overrun is possible. The '3' index is pointing beyond array bound. | |||||
| \sys\net\if_spppsubr.c (4348): error V557: Array overrun is possible. The '2' index is pointing beyond array bound. | |||||
| \sys\net\route.c (1805): error V595: The 'rt->rt_ifa' pointer was utilized before it was verified against nullptr. Check lines: 1805, 1817. | |||||
| \sys\net\rtsock.c (963): error V595: The 'sa' pointer was utilized before it was verified against nullptr. Check lines: 963, 974. | |||||
| \sys\net\slcompress.c (565): error V567: Undefined behavior. The 'cp' variable is modified while being used twice between sequence points. | |||||
| \sys\net\slcompress.c (567): error V567: Undefined behavior. The 'cp' variable is modified while being used twice between sequence points. | |||||
| \sys\net\slcompress.c (563): error V567: Undefined behavior. The 'cp' variable is modified while being used twice between sequence points. | |||||
| \sys\net\slcompress.c (571): error V567: Undefined behavior. The 'cp' variable is modified while being used twice between sequence points. | |||||
| \sys\net\slcompress.c (559): error V567: Undefined behavior. The 'cp' variable is modified while being used twice between sequence points. | |||||
| \sys\net80211\ieee80211_adhoc.c (676): error V634: The priority of the '*' operation is higher than that of the '<<' operation. It's possible that parentheses should be used in the expression. | |||||
| \sys\net80211\ieee80211_crypto_ccmp.c (347): error V512: A call of the 'memcpy' function will lead to the 'wh->i_addr1' buffer becoming out of range. | |||||
| \sys\net80211\ieee80211_hostap.c (1436): error V610: Undefined behavior. Check the shift operator '<<'. The right operand ('rsn_cipher(frm, & rsn->rsn_ucastkeylen)' = [0..32]) is greater than or equal to the length in bits of the promoted left operand. | |||||
| \sys\net80211\ieee80211_hostap.c (1289): error V610: Undefined behavior. Check the shift operator '<<'. The right operand ('wpa_cipher(frm, & rsn->rsn_ucastkeylen)' = [0..32]) is greater than or equal to the length in bits of the promoted left operand. | |||||
| \sys\net80211\ieee80211_hostap.c (1666): error V634: The priority of the '*' operation is higher than that of the '<<' operation. It's possible that parentheses should be used in the expression. | |||||
| \sys\net80211\ieee80211_mesh.c (3289): error V616: The '(IEEE80211_MPPID_MPM)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\net80211\ieee80211_mesh.c (3274): error V616: The '(IEEE80211_MPPID_MPM)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\net80211\ieee80211_mesh.c (3280): error V616: The '(IEEE80211_MPPID_MPM)' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\net80211\ieee80211_output.c (924): error V616: The 'tid' named constant with the value of 0 is used in the bitwise operation. | |||||
| \sys\netgraph\atm\ngatmbase.c (160): error V595: The 'msg' pointer was utilized before it was verified against nullptr. Check lines: 160, 167. | |||||
| \sys\netgraph\bluetooth\l2cap\ng_l2cap_ulpi.c (1530): error V694: The condition (ptr+value) is only false if there is pointer overflow which is undefined behaviour anyway. | |||||
| \sys\netgraph\ng_nat.c (374): error V547: Expression is always false. Unsigned type value is never < 0. | |||||
| \sys\netgraph\ng_tty.c (387): error V547: Expression 'sc->outqlen >= 0' is always true. Unsigned type value is always >= 0. | |||||
| \sys\netinet\igmp.c (1939): error V547: Expression is always true. Probably the '&&' operator should be used here. | |||||
| \sys\netinet\in.c (1057): error V562: It's odd to compare 0 or 1 with a value of 0. | |||||
| \sys\netinet\ip_fastfwd.c (245): error V713: The pointer m was utilized in the logical expression before it was verified against nullptr in the same logical expression. | |||||
| \sys\netinet\ip_options.c (455): error V512: A call of the 'memcpy' function will lead to the '& (opts->ip_srcrt.nop)' buffer becoming out of range. | |||||
| \sys\netinet\libalias\alias_sctp.c (424): error V547: Expression 'level < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\netinet\sctp_input.c (5692): error V595: The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 5692, 5707. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. If net != NULL then stcb =! NULL. tuexen: False positive. If net != NULL then stcb =! NULL. | |||||
| \sys\netinet\sctp_input.c (3024): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'cp'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_input.c (3024): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& bkup'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_input.c (912): error V595: The 'stcb->sctp_socket' pointer was utilized before it was verified against nullptr. Check lines: 912, 918. | |||||
tuexenUnsubmitted Not Done Inline ActionsAddressed in https://svnweb.freebsd.org/changeset/base/295710. tuexen: Addressed in https://svnweb.freebsd.org/changeset/base/295710. | |||||
| \sys\netinet\sctp_input.c (4863): error V595: The 'locked_tcb' pointer was utilized before it was verified against nullptr. Check lines: 4863, 4888. | |||||
tuexenUnsubmitted Not Done Inline ActionsAddressed in https://svnweb.freebsd.org/changeset/base/295710. tuexen: Addressed in https://svnweb.freebsd.org/changeset/base/295710. | |||||
| \sys\netinet\sctp_output.c (10691): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '~0' is negative. | |||||
tuexenUnsubmitted Not Done Inline ActionsAddressed in https://svnweb.freebsd.org/changeset/base/295708. tuexen: Addressed in https://svnweb.freebsd.org/changeset/base/295708. | |||||
| \sys\netinet\sctp_output.c (11290): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'hb->heartbeat.hb_info.address'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_output.c (6861): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& ca->sndrcv'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_output.c (2792): error V512: A call of the 'memcpy' function will lead to the '& ro->ro_dst' buffer becoming out of range. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_output.c (6861): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'srcv'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_output.c (10616): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '~0' is negative. | |||||
tuexenUnsubmitted Not Done Inline ActionsAdressed in https://svnweb.freebsd.org/changeset/base/295708. tuexen: Adressed in https://svnweb.freebsd.org/changeset/base/295708. | |||||
| \sys\netinet\sctp_pcb.c (3127): error V512: A call of the 'memcpy' function will lead to the 'addr' buffer becoming out of range. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_pcb.c (3884): error V595: The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 3884, 3912. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_pcb.c (4730): error V595: The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 4730, 4739. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_pcb.c (4725): error V595: The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 4725, 4739. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_pcb.c (4726): error V595: The 'inp' pointer was utilized before it was verified against nullptr. Check lines: 4726, 4739. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_timer.c (116): error V595: The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 116, 120. | |||||
tuexenUnsubmitted Not Done Inline ActionsThis is not an issue, but the code has been cleaned up such that the warning will not show up anymore. tuexen: This is not an issue, but the code has been cleaned up such that the warning will not show up… | |||||
| \sys\netinet\sctp_usrreq.c (2861): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& ssp->ssp_addr'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_usrreq.c (2815): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 's_info'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_usrreq.c (2870): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& ssp->ssp_addr'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_usrreq.c (1186): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'sas'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_usrreq.c (1245): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'sas'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctp_usrreq.c (2808): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 's_info'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (5649): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'sinfo'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (2849): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& spc->spc_aaddr'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (2837): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& spc->spc_aaddr'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (2849): error V512: A call of the 'memcpy' function will lead to the 'sa' buffer becoming out of range. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (3268): error V595: The 'stcb->sctp_ep' pointer was utilized before it was verified against nullptr. Check lines: 3268, 3289. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (3284): error V595: The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 3284, 3289. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (3227): error V595: The 'stcb->sctp_ep' pointer was utilized before it was verified against nullptr. Check lines: 3227, 3229. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet\sctputil.c (5649): error V512: A call of the 'memcpy' function will lead to underflow of the buffer 'control'. | |||||
tuexenUnsubmitted Not Done Inline ActionsFalse positive. tuexen: False positive. | |||||
| \sys\netinet6\icmp6.c (2358): error V562: It's odd to compare 0 or 1 with a value of 0. | |||||
| \sys\netinet6\in6.c (1318): error V502: Perhaps the '?:' operator works in a different way than it was expected. The '?:' operator has a lower priority than the '|' operator. | |||||
| \sys\netinet6\in6_mcast.c (1781): error V595: The 'in6p' pointer was utilized before it was verified against nullptr. Check lines: 1781, 1787. | |||||
| \sys\netinet6\ip6_input.c (1188): error V595: The 'm' pointer was utilized before it was verified against nullptr. Check lines: 1188, 1202. | |||||
| \sys\netinet6\ip6_input.c (560): error V595: The 'm' pointer was utilized before it was verified against nullptr. Check lines: 560, 572. | |||||
| \sys\netinet6\nd6.c (2119): error V590: Consider inspecting the 'error == 0 || error != - 1' expression. The expression is excessive or contains a misprint. | |||||
| \sys\netinet6\sctp6_usrreq.c (1164): error V512: A call of the 'memcpy' function will lead to overflow of the buffer 'addr'. | |||||
tuexenUnsubmitted Not Done Inline ActionsThe bug reported can not happen, since the function is not really working as expected. tuexen: The bug reported can not happen, since the function is not really working as expected.
This is… | |||||
| \sys\netinet6\sctp6_usrreq.c (1201): error V512: A call of the 'memcpy' function will lead to overflow of the buffer 'addr'. | |||||
tuexenUnsubmitted Not Done Inline ActionsThe bug reported can not happen, since the function is not really working as expected. tuexen: The bug reported can not happen, since the function is not really working as expected.
This is… | |||||
| \sys\netipsec\key.c (947): error V696: The 'continue' operator will terminate 'do { ... } while (FALSE)' loop because the condition is always false. Check lines: 947, 947. | |||||
| \sys\netipsec\key.c (2725): error V696: The 'continue' operator will terminate 'do { ... } while (FALSE)' loop because the condition is always false. Check lines: 2725, 2725. | |||||
| \sys\netipsec\key.c (1117): error V696: The 'continue' operator will terminate 'do { ... } while (FALSE)' loop because the condition is always false. Check lines: 1117, 1117. | |||||
| \sys\netipsec\key.c (7208): error V501: There are identical sub-expressions to the left and to the right of the '!=' operator: m->m_pkthdr.len != m->m_pkthdr.len | |||||
| \sys\netpfil\ipfw\ip_fw_dynamic.c (1503): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& (dst->rule)'. | |||||
| \sys\netpfil\ipfw\ip_fw_pfil.c (242): error V595: The '* m0' pointer was utilized before it was verified against nullptr. Check lines: 242, 253. | |||||
| \sys\netpfil\ipfw\ip_fw_sockopt.c (2893): error V501: There are identical sub-expressions '(uintptr_t) b->handler' to the left and to the right of the '>' operator. | |||||
| \sys\netpfil\ipfw\ip_fw_sockopt.c (2996): error V595: The 'ctl3_handlers' pointer was utilized before it was verified against nullptr. Check lines: 2996, 3000. | |||||
| \sys\netpfil\ipfw\ip_fw_sockopt.c (913): error V595: The 'map' pointer was utilized before it was verified against nullptr. Check lines: 913, 922. | |||||
| \sys\netpfil\ipfw\ip_fw_sockopt.c (2768): error V595: The 'ctl3_rewriters' pointer was utilized before it was verified against nullptr. Check lines: 2768, 2772. | |||||
| \sys\netpfil\ipfw\ip_fw_table_algo.c (3984): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& tent->k'. | |||||
| \sys\netpfil\ipfw\ip_fw_table_algo.c (1383): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& tent->k'. | |||||
| \sys\netpfil\ipfw\ip_fw_table_algo.c (529): error V512: A call of the 'memcpy' function will lead to underflow of the buffer '& tent->k'. | |||||
| \sys\netpfil\ipfw\ip_fw_table_value.c (100): error V512: A call of the 'memcmp' function will lead to underflow of the buffer '((struct table_val_link *) no)->pval'. | |||||
| \sys\netpfil\pf\if_pfsync.c (1685): error V595: The 'sc' pointer was utilized before it was verified against nullptr. Check lines: 1685, 1687. | |||||
kpUnsubmitted Not Done Inline ActionsThis looks like it might be a problem, added to my TODO list. kp: This looks like it might be a problem, added to my TODO list. | |||||
| \sys\netpfil\pf\pf.c (1222): error V629: Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type. | |||||
| \sys\netpfil\pf\pf_ioctl.c (1538): error V595: The 'newrule' pointer was utilized before it was verified against nullptr. Check lines: 1538, 1554. | |||||
kpUnsubmitted Not Done Inline ActionsDoesn't look like a bug, we don't always allocate new rule, (but if we do it's never NULL because M_WAITOK), so it makes sense to NULL-check it. kp: Doesn't look like a bug, we don't always allocate new rule, (but if we do it's never NULL… | |||||
| \sys\netpfil\pf\pf_ioctl.c (3592): error V595: The '* m' pointer was utilized before it was verified against nullptr. Check lines: 3592, 3594. | |||||
kpUnsubmitted Not Done Inline ActionsThis check is just wrong. Yes, we use *m before checking it, but that's because pf_test6() can change it. kp: This check is just wrong. Yes, we use *m before checking it, but that's because pf_test6() can… | |||||
| \sys\netpfil\pf\pf_ioctl.c (2424): error V595: The 'newpa' pointer was utilized before it was verified against nullptr. Check lines: 2424, 2426. | |||||
kpUnsubmitted Not Done Inline ActionsAlso seems to be wrong, we can only hit the NULL check from places where newpa is allocated. kp: Also seems to be wrong, we can only hit the NULL check from places where newpa is allocated.
We… | |||||
| \sys\netpfil\pf\pf_table.c (464): error V595: The 'size2' pointer was utilized before it was verified against nullptr. Check lines: 464, 488. | |||||
kpUnsubmitted Not Done Inline Actionssize2 is never NULL, so we can get rid of the NULL check (perhaps adding an assert at the top of the function. kp: size2 is never NULL, so we can get rid of the NULL check (perhaps adding an assert at the top… | |||||
| \sys\netpfil\pf\pf_table.c (911): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative. | |||||
| \sys\netpfil\pf\pf_table.c (918): error V610: Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative. | |||||
| \sys\nlm\nlm_advlock.c (317): error V595: The 'ns' pointer was utilized before it was verified against nullptr. Check lines: 317, 332. | |||||
| \sys\rpc\rpc_callmsg.c (107): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (155): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (118): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (156): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (108): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (121): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (120): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (117): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (112): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_callmsg.c (116): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_prot.c (193): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_prot.c (188): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\rpc_prot.c (187): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\svc_auth_unix.c (91): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\svc_auth_unix.c (98): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\svc_auth_unix.c (81): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\svc_auth_unix.c (82): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\svc_auth_unix.c (89): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\svc_auth_unix.c (90): error V567: Undefined behavior. The 'buf' variable is modified while being used twice between sequence points. | |||||
| \sys\rpc\svc_dg.c (275): error V595: The 'xprt->xp_socket' pointer was utilized before it was verified against nullptr. Check lines: 275, 280. | |||||
| \sys\rpc\svc_vc.c (458): error V595: The 'xprt->xp_socket' pointer was utilized before it was verified against nullptr. Check lines: 458, 465. | |||||
| \sys\security\audit\audit_syscalls.c (306): error V547: Expression 'udata.au_qctrl64.aq64_minfree < 0' is always false. Unsigned type value is never < 0. | |||||
| \sys\security\mac\mac_process.c (352): error V646: Consider inspecting the application's logic. It's possible that 'else' keyword is missing. | |||||
| \sys\security\mac_bsdextended\mac_bsdextended.c (128): error V617: Consider inspecting the condition. The '0x00000080' argument of the '|' bitwise operation contains a non-zero value. | |||||
| \sys\ufs\ufs\ufs_lookup.c (1477): error V595: The 'vp1' pointer was utilized before it was verified against nullptr. Check lines: 1477, 1487. | |||||
markjUnsubmitted Not Done Inline ActionsThis one looks like a valid bug: ufs_dir_dd_ino() should set *dd_vp to NULL before returning in all cases. markj: This one looks like a valid bug: ufs_dir_dd_ino() should set *dd_vp to NULL before returning in… | |||||
| \sys\x86\cpufreq\powernow.c (733): error V711: It is dangerous to create a local variable within a loop with a same name as a variable controlling this loop. | |||||
| \sys\x86\isa\clock.c (157): error V595: The 'sc' pointer was utilized before it was verified against nullptr. Check lines: 157, 169. | |||||
False positive, but addressed in https://svnweb.freebsd.org/base?view=revision&revision=295759