2026-01-21 22:17
ftp://ftp.de.debian.org/debian/pool/main/f/fgetty/fgetty_0.7.orig.tar.bz2
cppcheck-options: --library=posix --library=gnu --library=bsd  --inconclusive --enable=style,information --inline-suppr --template=daca2 --disable=missingInclude --suppress=unmatchedSuppression --check-library --debug-warnings --suppress=autoNoType --suppress=valueFlowBailout --suppress=bailoutUninitVar --suppress=symbolDatabaseWarning --suppress=normalCheckLevelConditionExpressions -D__GNUC__ --platform=unix64 -j4
platform: Linux-6.12.63+deb13-amd64-x86_64-with-glibc2.41
python: 3.13.5
client-version: 1.3.69
compiler: g++ (20250906) 15.2.0
cppcheck: head 2.19.0
head-info: fdd7b1d (2026-01-21 19:51:39 +0100)
count: 54 54
elapsed-time: 0.1 0.3
head-timing-info:

old-timing-info:

head results:
fgetty-0.7/checkpassword-pam2.c:43:9: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable PAM_CONV_ERR [valueFlowBailoutIncompleteVar]
fgetty-0.7/checkpassword-pam2.c:98:19: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable PAM_SUCCESS [valueFlowBailoutIncompleteVar]
fgetty-0.7/checkpassword-pam2.c:55:8: style: Variable 'style' can be declared as pointer to const [constVariablePointer]
fgetty-0.7/login.c:61:1: portability: Omitted return type of function 'main' defaults to int, this is not supported by ISO C99 and later standards. [returnImplicitInt]
fgetty-0.7/fgetty.c:37:22: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable ECHO [valueFlowBailoutIncompleteVar]
fgetty-0.7/fgetty.c:66:16: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable LOGIN_PROCESS [valueFlowBailoutIncompleteVar]
fgetty-0.7/fgetty.c:86:17: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable SIG_IGN [valueFlowBailoutIncompleteVar]
fgetty-0.7/fgetty.c:180:23: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable USER_PROCESS [valueFlowBailoutIncompleteVar]
fgetty-0.7/fgetty.c:199:28: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable O_RDONLY [valueFlowBailoutIncompleteVar]
fgetty-0.7/fgetty.c:233:12: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable TCFLSH [valueFlowBailoutIncompleteVar]
fgetty-0.7/fgetty.c:282:29: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar]
fgetty-0.7/login.c:52:20: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable ECHO [valueFlowBailoutIncompleteVar]
fgetty-0.7/login.c:57:25: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable ECHO [valueFlowBailoutIncompleteVar]
fgetty-0.7/login.c:135:46: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable O_RDWR [valueFlowBailoutIncompleteVar]
fgetty-0.7/login.c:88:15: warning: Either the condition 'pwlen<0' is redundant or the array '__username[100]' is accessed at index -1, which is out of bounds. [negativeIndex]
fgetty-0.7/login.c:87:14: note: Assuming that condition 'pwlen<0' is not redundant
fgetty-0.7/login.c:88:15: note: Negative array index
fgetty-0.7/login.c:100:11: warning: Either the condition 'pwlen<0' is redundant or the array 'password[100]' is accessed at index -1, which is out of bounds. [negativeIndex]
fgetty-0.7/login.c:99:12: note: Assuming that condition 'pwlen<0' is not redundant
fgetty-0.7/login.c:100:11: note: Negative array index
fgetty-0.7/login.c:92:9: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/login.c:115:12: style: Local variable 'buf' shadows outer variable [shadowVariable]
fgetty-0.7/login.c:64:9: note: Shadowed declaration
fgetty-0.7/login.c:115:12: note: Shadow variable
fgetty-0.7/login.c:63:9: style: Variable 'username' can be declared as pointer to const [constVariablePointer]
fgetty-0.7/login2.c:59:1: portability: Omitted return type of function 'main' defaults to int, this is not supported by ISO C99 and later standards. [returnImplicitInt]
fgetty-0.7/login2.c:51:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable USER_PROCESS [valueFlowBailoutIncompleteVar]
fgetty-0.7/login2.c:81:29: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable O_RDONLY [valueFlowBailoutIncompleteVar]
fgetty-0.7/fgetty.c:74:3: error: Found an exit path from function with non-void return type that has missing return statement [missingReturn]
fgetty-0.7/fgetty.c:132:13: portability: Non reentrant function 'localtime' called. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'. [prohibitedlocaltimeCalled]
fgetty-0.7/fgetty.c:207:9: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/fgetty.c:309:34: style: Condition '(logname=get_logname())==0' is always false [knownConditionTrueFalse]
fgetty-0.7/fgetty.c:103:7: error: Return value of allocation function 'open' is not stored. [leakReturnValNotUsed]
fgetty-0.7/fgetty.c:97:29: portability: Casting non-zero decimal integer literal to pointer. [intToPointerCast]
fgetty-0.7/fgetty.c:29:18: style: Parameter 'message' can be declared as pointer to const [constParameterPointer]
fgetty-0.7/fgetty.c:204:11: style: Variable 'c' can be declared as pointer to const [constVariablePointer]
fgetty-0.7/fgetty.c:204:14: style: Variable 'last' can be declared as pointer to const [constVariablePointer]
fgetty-0.7/login2.c:48:3: error: Found an exit path from function with non-void return type that has missing return statement [missingReturn]
fgetty-0.7/login2.c:69:23: portability: Non reentrant function 'getgrnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrnam_r'. [prohibitedgetgrnamCalled]
fgetty-0.7/login2.c:95:15: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/login2.c:101:19: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword-pam.c:35:11: portability: Non reentrant function 'getpwnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'. [prohibitedgetpwnamCalled]
fgetty-0.7/checkpassword-pam.c:41:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword-pam.c:50:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword-pam.c:51:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword-pam.c:52:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword-pam.c:39:12: style: Local variable 'buf' shadows outer variable [shadowVariable]
fgetty-0.7/checkpassword-pam.c:18:8: note: Shadowed declaration
fgetty-0.7/checkpassword-pam.c:39:12: note: Shadow variable
fgetty-0.7/checkpassword-pam.c:19:9: style: Variable 'last' can be declared as pointer to const [constVariablePointer]
fgetty-0.7/checkpassword-pam.c:38:25: style: Unused variable: eptty [unusedVariable]
fgetty-0.7/checkpassword.c:45:11: portability: Non reentrant function 'getpwnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'. [prohibitedgetpwnamCalled]
fgetty-0.7/checkpassword.c:47:14: portability: Non reentrant function 'getspnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'. [prohibitedgetspnamCalled]
fgetty-0.7/checkpassword.c:50:29: portability: Non reentrant function 'crypt' called. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'. [prohibitedcryptCalled]
fgetty-0.7/checkpassword.c:54:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword.c:63:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword.c:64:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword.c:65:11: warning: Obsolete function 'alloca' called. In C99 and later it is recommended to use a variable length array instead. [allocaCalled]
fgetty-0.7/checkpassword.c:52:12: style: Local variable 'buf' shadows outer variable [shadowVariable]
fgetty-0.7/checkpassword.c:27:8: note: Shadowed declaration
fgetty-0.7/checkpassword.c:52:12: note: Shadow variable
fgetty-0.7/checkpassword.c:28:9: style: Variable 'last' can be declared as pointer to const [constVariablePointer]
fgetty-0.7/checkpassword.c:30:16: style: Variable 'passwd' can be declared as pointer to const [constVariablePointer]
fgetty-0.7/checkpassword.c:32:16: style: Variable 'spw' can be declared as pointer to const [constVariablePointer]
diff:


DONE