2026-05-01 14:05
ftp://ftp.de.debian.org/debian/pool/main/c/cryptokit/cryptokit_1.21.1.orig.tar.gz
cppcheck-options: --library=posix --library=gnu --library=bsd --library=zlib  --inconclusive --enable=style,information --inline-suppr --template=daca2 --disable=missingInclude --suppress=unmatchedSuppression --check-library --debug-warnings --suppress=autoNoType --suppress=valueFlowBailout --suppress=bailoutUninitVar --suppress=symbolDatabaseWarning --suppress=normalCheckLevelConditionExpressions -D__GNUC__ --platform=unix64 -j6
platform: Linux-7.0.3+deb14-amd64-x86_64-with-glibc2.42
python: 3.13.12
client-version: 1.4.0
compiler: g++ (Debian 15.2.0-17) 15.2.0
cppcheck: head 2.20.0
head-info: e5c4a734 (2026-05-01 11:10:43 +0200)
count: 95 91
elapsed-time: 0.5 0.4
head-timing-info:

old-timing-info:

head results:
cryptokit-release1211/src/aesni.c:308:45: style: Parameter 'ckey' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/aesni.c:313:45: style: Parameter 'ckey' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/aesni.c:320:35: style: Parameter 'out' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/aesni.c:325:35: style: Parameter 'out' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/arcfour.c:17:39: style: Parameter 'key_data' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/arcfour.c:39:29: style: Parameter 'src' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/blake3_dispatch.c:87:22: style: Condition 'g_cpu_features!=UNDEFINED' is always false [knownConditionTrueFalse]
cryptokit-release1211/src/blake3_impl.h:169:60: style: Parameter 'cv_words' can be declared as const array [constParameter]
cryptokit-release1211/src/blowfish.c:473:61: style: Parameter 'key' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/ghash.c:62:8: style: Variable 'hi' is assigned a value that is never used. [unreadVariable]
cryptokit-release1211/src/ghash.c:92:9: style: Unused variable: ret [unusedVariable]
cryptokit-release1211/src/ghash.c:93:14: style: Unused variable: hi [unusedVariable]
cryptokit-release1211/src/ghash.c:93:18: style: Unused variable: lo [unusedVariable]
cryptokit-release1211/src/d3des.c:52:43: style:inconclusive: Function 'd3des_cook_key' argument 2 names different: declaration 'mode' definition 'edf'. [funcArgNamesDifferent]
cryptokit-release1211/src/d3des.h:18:43: note: Function 'd3des_cook_key' argument 2 names different: declaration 'mode' definition 'edf'.
cryptokit-release1211/src/d3des.c:52:43: note: Function 'd3des_cook_key' argument 2 names different: declaration 'mode' definition 'edf'.
cryptokit-release1211/src/d3des.c:88:26: style:inconclusive: Function 'cookey' argument 1 names different: declaration '<unnamed>' definition 'raw1'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:88:38: style:inconclusive: Function 'cookey' argument 2 names different: declaration '<unnamed>' definition 'cook'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:107:45: style:inconclusive: Function 'd3des_transform' argument 2 names different: declaration 'from' definition 'inblock'. [funcArgNamesDifferent]
cryptokit-release1211/src/d3des.h:24:45: note: Function 'd3des_transform' argument 2 names different: declaration 'from' definition 'inblock'.
cryptokit-release1211/src/d3des.c:107:45: note: Function 'd3des_transform' argument 2 names different: declaration 'from' definition 'inblock'.
cryptokit-release1211/src/d3des.c:107:60: style:inconclusive: Function 'd3des_transform' argument 3 names different: declaration 'to' definition 'outblock'. [funcArgNamesDifferent]
cryptokit-release1211/src/d3des.h:24:57: note: Function 'd3des_transform' argument 3 names different: declaration 'to' definition 'outblock'.
cryptokit-release1211/src/d3des.c:107:60: note: Function 'd3des_transform' argument 3 names different: declaration 'to' definition 'outblock'.
cryptokit-release1211/src/d3des.c:116:26: style:inconclusive: Function 'scrunch' argument 1 names different: declaration '<unnamed>' definition 'outof'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:116:39: style:inconclusive: Function 'scrunch' argument 2 names different: declaration '<unnamed>' definition 'into'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:122:27: style:inconclusive: Function 'unscrun' argument 1 names different: declaration '<unnamed>' definition 'outof'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:122:39: style:inconclusive: Function 'unscrun' argument 2 names different: declaration '<unnamed>' definition 'into'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:281:27: style:inconclusive: Function 'desfunc' argument 1 names different: declaration '<unnamed>' definition 'block'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:281:40: style:inconclusive: Function 'desfunc' argument 2 names different: declaration '<unnamed>' definition 'keys'. [funcArgNamesDifferentUnnamed]
cryptokit-release1211/src/d3des.c:90:17: style: Variable 'raw0' can be declared as pointer to const [constVariablePointer]
cryptokit-release1211/src/d3des.c:116:26: style: Parameter 'outof' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/d3des.c:122:27: style: Parameter 'outof' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/d3des.c:281:40: style: Parameter 'keys' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/pclmul.c:109:33: style: Parameter 'res' can be declared as const array [constParameter]
cryptokit-release1211/src/chacha20.c:137:29: style:inconclusive: Function 'chacha20_init' argument 6 names different: declaration 'ctr' definition 'counter'. [funcArgNamesDifferent]
cryptokit-release1211/src/chacha20.h:18:36: note: Function 'chacha20_init' argument 6 names different: declaration 'ctr' definition 'counter'.
cryptokit-release1211/src/chacha20.c:137:29: note: Function 'chacha20_init' argument 6 names different: declaration 'ctr' definition 'counter'.
cryptokit-release1211/src/blake3.c:138:3: warning: Assignment of function parameter has no effect outside the function. Did you forget dereferencing it? [uselessAssignmentPtrArg]
cryptokit-release1211/src/blake3.c:139:3: style: Assignment of function parameter has no effect outside the function. [uselessAssignmentArg]
cryptokit-release1211/src/blake3.c:447:57: style: Parameter 'new_cv' can be declared as const array [constParameter]
cryptokit-release1211/src/blake3.c:186:20: warning: Uninitialized variable: chunks_array [uninitvar]
cryptokit-release1211/src/blake3.c:180:37: note: Assuming condition is false
cryptokit-release1211/src/blake3.c:186:20: note: Uninitialized variable: chunks_array
cryptokit-release1211/src/blake3.c:229:20: warning: Uninitialized variable: parents_array [uninitvar]
cryptokit-release1211/src/blake3.c:223:56: note: Assuming condition is false
cryptokit-release1211/src/blake3.c:229:20: note: Uninitialized variable: parents_array
cryptokit-release1211/src/blake3.c:138:9: style: Variable 'input' is assigned a value that is never used. [unreadVariable]
cryptokit-release1211/src/blake3.c:139:13: style: Variable 'input_len' is assigned a value that is never used. [unreadVariable]
cryptokit-release1211/src/blake2.c:38:49: style: Parameter 'src' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/blake2.c:120:60: style: Parameter 'key' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/blake2.c:179:49: style: Parameter 'src' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/blake2.c:259:60: style: Parameter 'key' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/rijndael-alg-fst.c:1032:2: style: Variable '(ct+12)[3]' is assigned a value that is never used. [unreadVariable]
cryptokit-release1211/src/rijndael-alg-fst.c:1213:2: style: Variable '(pt+12)[3]' is assigned a value that is never used. [unreadVariable]
cryptokit-release1211/src/stubs-arcfour.c:41:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-aes.c:77:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-aes.c:93:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blake2.c:38:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blake2.c:44:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blake2.c:67:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blake2.c:73:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-chacha20.c:42:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-chacha20.c:57:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blowfish.c:58:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blowfish.c:74:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blake3.c:66:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blake3.c:73:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-blake3.c:85:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-ghash.c:65:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-des.c:39:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-md5.c:48:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-md5.c:54:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-misc.c:27:18: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable uintnat [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-misc.c:52:36: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Custom_tag [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-rng.c:102:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-rng.c:107:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-rng.c:113:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_false [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-rng.c:181:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_false [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-rng.c:184:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_false [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-poly1305.c:32:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-poly1305.c:38:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha1.c:31:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha1.c:37:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/ripemd160.c:88:44: style: Parameter 'src' can be declared as pointer to const [constParameterPointer]
cryptokit-release1211/src/stubs-sha256.c:38:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha256.c:44:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha256.c:54:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/blake3.c:293:51: style: Condition 'degree==1' is always true [knownConditionTrueFalse]
cryptokit-release1211/src/blake3.c:292:37: note: Calling function 'blake3_simd_degree' returns 1
cryptokit-release1211/src/blake3.c:292:37: note: Assignment 'degree=blake3_simd_degree()', assigned value is 1
cryptokit-release1211/src/blake3.c:293:51: note: Condition 'degree==1' is always true
cryptokit-release1211/src/stubs-sha3.c:56:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha3.c:72:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha3.c:86:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-siphash.c:34:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-siphash.c:40:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-zlib.c:197:37: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-zlib.c:203:37: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-zlib.c:207:37: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-zlib.c:211:37: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-zlib.c:217:37: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-zlib.c:221:37: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha512.c:52:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha512.c:58:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha512.c:68:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha512.c:78:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-sha512.c:88:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-ripemd160.c:31:10: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable Val_unit [valueFlowBailoutIncompleteVar]
cryptokit-release1211/src/stubs-ripemd160.c:37:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable res [valueFlowBailoutIncompleteVar]
diff:
2.20.0 cryptokit-release1211/src/blowfish.c:398:8: warning: Uninitialized variable: *xl [uninitvar]
     cryptokit-release1211/src/stubs-blowfish.c:54:55: note: Calling function 'Blowfish_Encrypt', 2nd argument '&xl' value is <Uninit>
     cryptokit-release1211/src/blowfish.c:398:8: note: Uninitialized variable: *xl
2.20.0 cryptokit-release1211/src/blowfish.c:399:8: warning: Uninitialized variable: *xr [uninitvar]
     cryptokit-release1211/src/stubs-blowfish.c:54:60: note: Calling function 'Blowfish_Encrypt', 3rd argument '&xr' value is <Uninit>
     cryptokit-release1211/src/blowfish.c:399:8: note: Uninitialized variable: *xr
2.20.0 cryptokit-release1211/src/blowfish.c:452:8: warning: Uninitialized variable: *xl [uninitvar]
     cryptokit-release1211/src/stubs-blowfish.c:70:55: note: Calling function 'Blowfish_Decrypt', 2nd argument '&xl' value is <Uninit>
     cryptokit-release1211/src/blowfish.c:452:8: note: Uninitialized variable: *xl
2.20.0 cryptokit-release1211/src/blowfish.c:453:8: warning: Uninitialized variable: *xr [uninitvar]
     cryptokit-release1211/src/stubs-blowfish.c:70:60: note: Calling function 'Blowfish_Decrypt', 3rd argument '&xr' value is <Uninit>
     cryptokit-release1211/src/blowfish.c:453:8: note: Uninitialized variable: *xr
head cryptokit-release1211/src/d3des.c:116:26: style:inconclusive: Function 'scrunch' argument 1 names different: declaration '<unnamed>' definition 'outof'. [funcArgNamesDifferentUnnamed]
head cryptokit-release1211/src/d3des.c:116:39: style:inconclusive: Function 'scrunch' argument 2 names different: declaration '<unnamed>' definition 'into'. [funcArgNamesDifferentUnnamed]
head cryptokit-release1211/src/d3des.c:122:27: style:inconclusive: Function 'unscrun' argument 1 names different: declaration '<unnamed>' definition 'outof'. [funcArgNamesDifferentUnnamed]
head cryptokit-release1211/src/d3des.c:122:39: style:inconclusive: Function 'unscrun' argument 2 names different: declaration '<unnamed>' definition 'into'. [funcArgNamesDifferentUnnamed]
head cryptokit-release1211/src/d3des.c:281:27: style:inconclusive: Function 'desfunc' argument 1 names different: declaration '<unnamed>' definition 'block'. [funcArgNamesDifferentUnnamed]
head cryptokit-release1211/src/d3des.c:281:40: style:inconclusive: Function 'desfunc' argument 2 names different: declaration '<unnamed>' definition 'keys'. [funcArgNamesDifferentUnnamed]
head cryptokit-release1211/src/d3des.c:88:26: style:inconclusive: Function 'cookey' argument 1 names different: declaration '<unnamed>' definition 'raw1'. [funcArgNamesDifferentUnnamed]
head cryptokit-release1211/src/d3des.c:88:38: style:inconclusive: Function 'cookey' argument 2 names different: declaration '<unnamed>' definition 'cook'. [funcArgNamesDifferentUnnamed]


DONE