2026-05-27 17:43 ftp://ftp.de.debian.org/debian/pool/main/liba/libapache2-mod-auth-openid/libapache2-mod-auth-openid_0.8.orig.tar.gz cppcheck-options: --library=posix --library=gnu --library=bsd --library=libcurl --library=pcre --library=sqlite3 --inconclusive --enable=style,information --inline-suppr --template=daca2 --disable=missingInclude --suppress=unmatchedSuppression --check-library --debug-warnings --suppress=autoNoType --suppress=valueFlowBailout --suppress=bailoutUninitVar --suppress=symbolDatabaseWarning --suppress=normalCheckLevelConditionExpressions -D__GNUC__ --platform=unix64 -j8 platform: Linux-6.17.0-29-generic-x86_64-with-glibc2.39 python: 3.12.3 client-version: 1.4.0 compiler: g++ (Ubuntu 13.3.0-6ubuntu2~24.04.1) 13.3.0 cppcheck: head 2.20.0 head-info: 6e46c6b (2026-05-27 18:39:55 +0200) count: 62 62 elapsed-time: 0.0 0.1 head-timing-info: old-timing-info: head results: mod_auth_openid-0.8/src/db_info.cpp:37:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable cout [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/db_info.cpp:49:5: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable cout [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/types.h:42:9: warning: Member variable 'session::expires_on' has no initializer. [uninitMemberVarNoCtor] mod_auth_openid-0.8/src/types.h:48:47: performance: Variable 'bom' is assigned in constructor body. Consider performing initialization in initialization list. [useInitializationList] mod_auth_openid-0.8/src/types.h:48:5: style: Class 'modauthopenid_message_t' has a constructor with 1 argument that is not explicit. [noExplicitConstructor] mod_auth_openid-0.8/src/SessionManager.h:36:5: style: Class 'SessionManager' has a constructor with 1 argument that is not explicit. [noExplicitConstructor] mod_auth_openid-0.8/src/db_info.cpp:36:29: performance: Function parameter 'db_location' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/mod_auth_openid.cpp:618:2: error: failed to evaluate #if condition, undefined function-like macro invocation: AP_MODULE_MAGIC_AT_LEAST( ... ) [syntaxError] mod_auth_openid-0.8/src/SessionManager.cpp:36:26: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable S_IRWXO [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/SessionManager.cpp:74:15: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/SessionManager.cpp:117:31: error: Dereferencing 'db' after it is deallocated / released [deallocuse] mod_auth_openid-0.8/src/SessionManager.cpp:92:11: warning: If memory allocation fails, then there is a possible null pointer dereference: query [nullPointerOutOfMemory] mod_auth_openid-0.8/src/SessionManager.cpp:91:34: note: Assuming allocation function fails mod_auth_openid-0.8/src/SessionManager.cpp:91:34: note: Assignment 'query=sqlite3_mprintf(url,session_id.c_str(),hostname.c_str(),path.c_str(),identity.c_str(),username.c_str(),expires_on)', assigned value is 0 mod_auth_openid-0.8/src/SessionManager.cpp:92:11: note: Null pointer dereference mod_auth_openid-0.8/src/MoidConsumer.cpp:37:26: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable S_IRWXO [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/MoidConsumer.cpp:97:27: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable OPKELE_CP_ [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/MoidConsumer.cpp:131:27: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable OPKELE_CP_ [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/MoidConsumer.cpp:148:15: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/MoidConsumer.cpp:186:38: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable OPKELE_CP_ [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/MoidConsumer.cpp:250:31: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable OPKELE_CP_ [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/MoidConsumer.cpp:302:31: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable OPKELE_CP_ [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/moid_utils.cpp:146:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stdout [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/moid_utils.cpp:165:15: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:46:51: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable APR_SUCCESS [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:53:35: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable npos [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:86:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable HTTP_MOVED_TEMPORARILY [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:130:39: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable HTTP_UNAUTHORIZED [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:162:21: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable npos [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:173:41: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable npos [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:235:31: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable OPKELE_CP_ [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:295:17: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable APR_SUCCESS [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/http_helpers.cpp:334:35: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable M_POST [valueFlowBailoutIncompleteVar] mod_auth_openid-0.8/src/MoidConsumer.h:78:18: performance: Function 'get_this_url()' should return member 'serverurl' by const reference. [returnByReference] mod_auth_openid-0.8/src/MoidConsumer.cpp:326:31: error: Dereferencing 'db' after it is deallocated / released [deallocuse] mod_auth_openid-0.8/src/MoidConsumer.cpp:194:8: style: Redundant initialization for 'rc'. The initialized value is overwritten before it is read. [redundantInitialization] mod_auth_openid-0.8/src/MoidConsumer.cpp:181:12: note: rc is initialized mod_auth_openid-0.8/src/MoidConsumer.cpp:194:8: note: rc is overwritten mod_auth_openid-0.8/src/MoidConsumer.cpp:176:48: style:inconclusive: Function 'check_nonce' argument 1 names different: declaration 'OP' definition 'server'. [funcArgNamesDifferent] mod_auth_openid-0.8/src/MoidConsumer.h:56:36: note: Function 'check_nonce' argument 1 names different: declaration 'OP' definition 'server'. mod_auth_openid-0.8/src/MoidConsumer.cpp:176:48: note: Function 'check_nonce' argument 1 names different: declaration 'OP' definition 'server'. mod_auth_openid-0.8/src/moid_utils.cpp:196:28: style: C-style pointer casting [cstyleCast] mod_auth_openid-0.8/src/moid_utils.cpp:196:60: style: C-style pointer casting [cstyleCast] mod_auth_openid-0.8/src/moid_utils.cpp:33:21: performance: Function parameter 's' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:96:29: performance: Function parameter 'needle' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:96:44: performance: Function parameter 'replacement' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:96:64: performance: Function parameter 'haystack' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:122:28: performance: Function parameter 'pattern' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:128:27: performance: Function parameter 'subject' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:145:47: performance: Function parameter 'tablename' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:171:55: performance: Function parameter 'exec_location' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:171:77: performance: Function parameter 'id' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/moid_utils.cpp:150:8: style: Variable 'rc' is assigned a value that is never used. [unreadVariable] mod_auth_openid-0.8/src/http_helpers.cpp:239:7: error: Resource leak: curl [resourceLeak] mod_auth_openid-0.8/src/http_helpers.cpp:98:12: style: The scope of the variable 'key' can be reduced. [variableScope] mod_auth_openid-0.8/src/http_helpers.cpp:98:17: style: The scope of the variable 'value' can be reduced. [variableScope] mod_auth_openid-0.8/src/http_helpers.cpp:281:46: style:inconclusive: Function 'get_post_data' argument 2 names different: declaration 'query_string' definition 'qs'. [funcArgNamesDifferent] mod_auth_openid-0.8/src/http_helpers.h:79:46: note: Function 'get_post_data' argument 2 names different: declaration 'query_string' definition 'qs'. mod_auth_openid-0.8/src/http_helpers.cpp:281:46: note: Function 'get_post_data' argument 2 names different: declaration 'query_string' definition 'qs'. mod_auth_openid-0.8/src/http_helpers.cpp:33:46: performance: Function parameter 's' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/http_helpers.cpp:51:45: performance: Function parameter 'location' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/http_helpers.cpp:77:44: performance: Function parameter 'location' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/http_helpers.cpp:90:46: performance: Function parameter 'msg' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/http_helpers.cpp:133:46: performance: Function parameter 'cookie_name' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/http_helpers.cpp:156:24: performance: Function parameter 'path' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/http_helpers.cpp:170:35: performance: Function parameter 'url' should be passed by const reference. [passedByValue] mod_auth_openid-0.8/src/http_helpers.cpp:269:18: style: Variable 'tmp' can be declared as pointer to const [constVariablePointer] mod_auth_openid-0.8/src/http_helpers.cpp:61:54: performance: Prefer prefix ++/-- operators for non-primitive types. [postfixOperator] mod_auth_openid-0.8/src/http_helpers.cpp:99:54: performance: Prefer prefix ++/-- operators for non-primitive types. [postfixOperator] mod_auth_openid-0.8/src/http_helpers.cpp:199:54: performance: Prefer prefix ++/-- operators for non-primitive types. [postfixOperator] mod_auth_openid-0.8/src/http_helpers.cpp:212:62: performance: Prefer prefix ++/-- operators for non-primitive types. [postfixOperator] diff: head mod_auth_openid-0.8/src/types.h:42:9: warning: Member variable 'session::expires_on' has no initializer. [uninitMemberVarNoCtor] 2.20.0 mod_auth_openid-0.8/src/types.h:48:39: style: Parameter '_bom' can be declared as reference to const [constParameterReference] DONE