2026-05-27 21:35
ftp://ftp.de.debian.org/debian/pool/main/libs/libsphinx/libsphinx_1.0.2.orig.tar.gz
cppcheck-options: --library=posix --library=gnu --library=bsd  --inconclusive --enable=style,information --inline-suppr --template=daca2 --disable=missingInclude --suppress=unmatchedSuppression --check-library --debug-warnings --suppress=autoNoType --suppress=valueFlowBailout --suppress=bailoutUninitVar --suppress=symbolDatabaseWarning --suppress=normalCheckLevelConditionExpressions -D__GNUC__ --platform=unix64 -j8
platform: Linux-6.17.0-29-generic-x86_64-with-glibc2.39
python: 3.12.3
client-version: 1.4.0
compiler: g++ (Ubuntu 13.3.0-6ubuntu2~24.04.1) 13.3.0
cppcheck: head 2.20.0
head-info: 6e46c6b (2026-05-27 18:39:55 +0200)
count: 31 31
elapsed-time: 0.0 0.1
head-timing-info:

old-timing-info:

head results:
libsphinx-1.0.2/src/bin/challenge.c:31:16: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_HASHBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/derive.c:29:17: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_SCALARBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/respond.c:27:21: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_BYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/common.c:52:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_HASHBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/common.c:103:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_HASHBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/derive.c:46:5: error: Resource leak: f [resourceLeak]
libsphinx-1.0.2/src/common.c:137:27: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_BYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/respond.c:44:5: error: Resource leak: f [resourceLeak]
libsphinx-1.0.2/src/tests/test.c:9:24: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_SCALARBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/sphinx.c:44:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_HASHBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/sphinx.c:124:20: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_SCALARBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/2pass.c:68:11: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/2pass.c:75:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/2pass.c:126:15: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stdin [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:36:59: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable JNI_ABORT [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:46:46: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_BYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:65:45: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_core_ristretto255_BYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:93:60: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable JNI_ABORT [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:112:27: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_sign_PUBLICKEYBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:127:48: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_sign_PUBLICKEYBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:140:48: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_sign_BYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:164:48: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_aead_xchacha20poly1305_ietf_NPUBBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/jni.c:187:58: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable crypto_aead_xchacha20poly1305_ietf_NPUBBYTES [valueFlowBailoutIncompleteVar]
libsphinx-1.0.2/src/bin/2pass.c:93:33: style: Condition '*ptr=='l'' is always false [knownConditionTrueFalse]
libsphinx-1.0.2/src/bin/2pass.c:94:33: style: Condition '*ptr=='s'' is always false [knownConditionTrueFalse]
libsphinx-1.0.2/src/bin/2pass.c:95:33: style: Condition '*ptr=='d'' is always false [knownConditionTrueFalse]
libsphinx-1.0.2/src/bin/2pass.c:93:25: style: Same expression on both sides of '||'. [duplicateExpression]
libsphinx-1.0.2/src/bin/2pass.c:94:25: style: Same expression on both sides of '||'. [duplicateExpression]
libsphinx-1.0.2/src/bin/2pass.c:95:25: style: Same expression on both sides of '||'. [duplicateExpression]
libsphinx-1.0.2/src/bin/2pass.c:119:57: style: Variable 'cptr' is assigned a value that is never used. [unreadVariable]
libsphinx-1.0.2/src/bin/2pass.c:125:18: style: Variable 'y' is assigned a value that is never used. [unreadVariable]
diff:


DONE