2026-05-06 14:35 ftp://ftp.de.debian.org/debian/pool/main/b/bruteforce-salted-openssl/bruteforce-salted-openssl_1.5.0.orig.tar.gz cppcheck-options: --library=posix --library=gnu --library=bsd --library=openssl --inconclusive --enable=style,information --inline-suppr --template=daca2 --disable=missingInclude --suppress=unmatchedSuppression --check-library --debug-warnings --suppress=autoNoType --suppress=valueFlowBailout --suppress=bailoutUninitVar --suppress=symbolDatabaseWarning --suppress=normalCheckLevelConditionExpressions -D__GNUC__ --platform=unix64 -j1 platform: Linux-6.8.0-111-generic-x86_64-with-glibc2.39 python: 3.12.3 client-version: 1.3.70 compiler: g++ (Ubuntu 14.2.0-4ubuntu2~24.04.1) 14.2.0 cppcheck: head 2.20.0 head-info: 747e257 (2026-05-06 14:14:20 +0200) count: 27 25 elapsed-time: 0.5 0.5 head-timing-info: old-timing-info: head results: bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:128:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:232:15: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:308:15: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:363:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:450:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:604:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:669:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:837:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:866:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:883:11: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:934:11: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:948:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable LC_ALL [valueFlowBailoutIncompleteVar] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:147:19: portability: Non reentrant function 'localtime' called. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'. [prohibitedlocaltimeCalled] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:166:15: style: Condition 'stop==1' is always false [knownConditionTrueFalse] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:161:14: note: Assuming that condition 'stop==0' is not redundant bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:166:15: note: Condition 'stop==1' is always false bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:648:15: style: Condition 'stop==1' is always false [knownConditionTrueFalse] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:643:14: note: Assuming that condition 'stop==0' is not redundant bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:648:15: note: Condition 'stop==1' is always false bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1240:9: style: Variable 'ret' is reassigned a value before the old one has been used. [redundantAssignment] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1231:9: note: ret is assigned bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1240:9: note: ret is overwritten bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:432:25: style: Local variable 'len' shadows outer variable [shadowVariable] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:92:14: note: Shadowed declaration bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:432:25: note: Shadow variable bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:109:14: style: Variable 'time_info' can be declared as pointer to const [constVariablePointer] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:157:26: style: Parameter 'arg' can be declared as pointer to const. However it seems that 'status_func' is a callback function, if 'arg' is declared with const you might also need to cast function pointer(s). [constParameterCallback] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1294:49: note: You might need to cast the function pointer here bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:157:26: note: Parameter 'arg' can be declared as pointer to const bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:187:31: style: Parameter 'data' can be declared as pointer to const [constParameterPointer] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:416:31: style: Parameter 'buf' can be declared as pointer to const [constParameterPointer] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:639:25: style: Parameter 'arg' can be declared as pointer to const. However it seems that 'state_func' is a callback function, if 'arg' is declared with const you might also need to cast function pointer(s). [constParameterCallback] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1319:48: note: You might need to cast the function pointer here bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:639:25: note: Parameter 'arg' can be declared as pointer to const bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:825:16: style: Variable 'last' can be declared as pointer to const [constVariablePointer] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:854:16: style: Variable 'last' can be declared as pointer to const [constVariablePointer] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:881:18: style: Parameter 'progname' can be declared as pointer to const [constParameterPointer] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:432:25: style: Unused variable: len [unusedVariable] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1251:7: style: Variable 'ret' is assigned a value that is never used. [unreadVariable] diff: head bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:157:26: style: Parameter 'arg' can be declared as pointer to const. However it seems that 'status_func' is a callback function, if 'arg' is declared with const you might also need to cast function pointer(s). [constParameterCallback] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1294:49: note: You might need to cast the function pointer here bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:157:26: note: Parameter 'arg' can be declared as pointer to const head bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:639:25: style: Parameter 'arg' can be declared as pointer to const. However it seems that 'state_func' is a callback function, if 'arg' is declared with const you might also need to cast function pointer(s). [constParameterCallback] bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:1319:48: note: You might need to cast the function pointer here bruteforce-salted-openssl-1.5.0/src/bruteforce-salted-openssl.c:639:25: note: Parameter 'arg' can be declared as pointer to const DONE