2025-11-23 02:33 ftp://ftp.de.debian.org/debian/pool/main/o/openfortivpn/openfortivpn_1.23.1.orig.tar.gz cppcheck-options: --library=posix --library=gnu --library=bsd --library=openssl --inconclusive --enable=style,information --inline-suppr --template=daca2 --disable=missingInclude --suppress=unmatchedSuppression --check-library --debug-warnings --suppress=autoNoType --suppress=valueFlowBailout --suppress=bailoutUninitVar --suppress=symbolDatabaseWarning --suppress=normalCheckLevelConditionExpressions -D__GNUC__ --platform=unix64 -j1 platform: Linux-6.8.0-88-generic-x86_64-with-glibc2.39 python: 3.12.3 client-version: 1.3.69 compiler: g++ (Ubuntu 14.2.0-4ubuntu2~24.04) 14.2.0 cppcheck: head 2.18.0 head-info: cb76e52 (2025-11-22 14:47:37 +0100) count: 72 72 elapsed-time: 5.2 6.5 head-timing-info: old-timing-info: head results: openfortivpn-1.23.1/src/config.h:37:19: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/config.c:490:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/config.c:525:38: style:inconclusive: Function 'merge_config' argument 1 names different: declaration 'dest' definition 'dst'. [funcArgNamesDifferent] openfortivpn-1.23.1/src/config.h:156:38: note: Function 'merge_config' argument 1 names different: declaration 'dest' definition 'dst'. openfortivpn-1.23.1/src/config.c:525:38: note: Function 'merge_config' argument 1 names different: declaration 'dest' definition 'dst'. openfortivpn-1.23.1/src/config.c:525:62: style:inconclusive: Function 'merge_config' argument 2 names different: declaration 'source' definition 'src'. [funcArgNamesDifferent] openfortivpn-1.23.1/src/config.h:156:63: note: Function 'merge_config' argument 2 names different: declaration 'source' definition 'src'. openfortivpn-1.23.1/src/config.c:525:62: note: Function 'merge_config' argument 2 names different: declaration 'source' definition 'src'. openfortivpn-1.23.1/src/ssl.h:87:19: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ssl.h:97:30: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable SSL_RECEIVED_SHUTDOWN [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http.c:109:2: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http.c:182:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http.c:685:4: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http.c:89:9: style: Variable 'pwstart' can be declared as pointer to const [constVariablePointer] openfortivpn-1.23.1/src/http.c:409:57: style: Parameter 'buf' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/http_server.c:47:4: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http_server.c:110:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http_server.c:146:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http_server.c:239:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/http_server.c:115:24: portability: %lu in format string (no. 1) requires 'unsigned long' but the argument type is 'size_t {aka unsigned long}'. [invalidPrintfArgType_uint] openfortivpn-1.23.1/src/http_server.c:122:2: portability: %lu in format string (no. 1) requires 'unsigned long' but the argument type is 'size_t {aka unsigned long}'. [invalidPrintfArgType_uint] openfortivpn-1.23.1/src/http_server.c:182:8: style: Variable 'id_start' can be declared as pointer to const [constVariablePointer] openfortivpn-1.23.1/src/io.c:76:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable CRYPTO_LOCK [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/io.c:190:2: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/io.c:298:2: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/io.c:434:2: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/io.c:531:2: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/io.c:574:2: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/io.c:647:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/io.c:592:3: style: Obsolescent function 'usleep' called. It is recommended to use 'nanosleep' or 'setitimer' instead. [prohibitedusleepCalled] openfortivpn-1.23.1/src/io.c:382:54: style: Parameter 'packet' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/io.c:401:62: style: Parameter 'header' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/ipv4.c:52:19: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:76:24: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable RTF_GATEWAY [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:93:44: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable AF_INET [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:215:37: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable NETSTAT_PATH [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:628:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:695:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:743:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:875:22: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable RTF_GATEWAY [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:907:24: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable RTF_GATEWAY [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:951:25: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable RTF_GATEWAY [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:1124:4: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:1324:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/ipv4.c:1215:23: style: Condition 'dns_suffix[0]!='\0'' is always true [knownConditionTrueFalse] openfortivpn-1.23.1/src/ipv4.c:262:17: style: Variable 'flag_table' can be declared as const array [constVariable] openfortivpn-1.23.1/src/ipv4.c:433:10: style: Variable 'tmp_position' can be declared as pointer to const [constVariablePointer] openfortivpn-1.23.1/src/ipv4.c:835:59: style: Parameter 'dest' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/ipv4.c:835:71: style: Parameter 'mask' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/ipv4.c:836:36: style: Parameter 'gateway' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/ipv4.c:925:21: style: Variable 'cfg' can be declared as pointer to const [constVariablePointer] openfortivpn-1.23.1/src/ipv4.c:1019:21: style: Variable 'cfg' can be declared as pointer to const [constVariablePointer] openfortivpn-1.23.1/src/ipv4.c:1277:58: style: Parameter 'tunnel' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/log.c:63:11: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/log.c:105:11: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/log.c:143:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/log.c:77:21: style:inconclusive: Function 'set_syslog' argument 1 names different: declaration 'do_syslog' definition 'use_syslog'. [funcArgNamesDifferent] openfortivpn-1.23.1/src/log.h:38:21: note: Function 'set_syslog' argument 1 names different: declaration 'do_syslog' definition 'use_syslog'. openfortivpn-1.23.1/src/log.c:77:21: note: Function 'set_syslog' argument 1 names different: declaration 'do_syslog' definition 'use_syslog'. openfortivpn-1.23.1/src/main.c:66:0: error: #error "Neither HAVE_USR_SBIN_PPPD nor HAVE_USR_SBIN_PPP have been defined." [preprocessorErrorDirective] openfortivpn-1.23.1/src/tunnel.c:83:4: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable __func__ [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:172:33: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable PPP_PATH [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:474:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:569:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:607:47: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable AF_INET [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:637:60: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable IF_NAMESIZE [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:868:51: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable X509_V_OK [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:945:3: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:1073:17: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable SSL_OP_NO_SSLv3 [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:1254:18: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable s_addr [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/tunnel.c:471:42: style: Parameter 'tunnel' can be declared as pointer to const [constParameterPointer] openfortivpn-1.23.1/src/tunnel.c:850:22: style: Variable 'elem' can be declared as pointer to const [constVariablePointer] openfortivpn-1.23.1/src/userinput.c:114:32: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/userinput.c:194:30: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/userinput.c:343:9: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stdout [valueFlowBailoutIncompleteVar] openfortivpn-1.23.1/src/userinput.c:388:2: error: Memory leak: output [memleak] openfortivpn-1.23.1/src/userinput.c:136:11: warning:inconclusive: Possible null pointer dereference: buf [nullPointer] openfortivpn-1.23.1/src/userinput.c:102:14: note: Assignment 'buf=NULL', assigned value is 0 openfortivpn-1.23.1/src/userinput.c:136:11: note: Null pointer dereference openfortivpn-1.23.1/src/xml.c:39:42: style:inconclusive: Function 'xml_find' argument 2 names different: declaration 'tag' definition 'needle'. [funcArgNamesDifferent] openfortivpn-1.23.1/src/xml.h:21:42: note: Function 'xml_find' argument 2 names different: declaration 'tag' definition 'needle'. openfortivpn-1.23.1/src/xml.c:39:42: note: Function 'xml_find' argument 2 names different: declaration 'tag' definition 'needle'. diff: 2.18.0 openfortivpn-1.23.1/src/main.c:66:2: error: #error "Neither HAVE_USR_SBIN_PPPD nor HAVE_USR_SBIN_PPP have been defined." [preprocessorErrorDirective] head openfortivpn-1.23.1/src/tunnel.c:850:22: style: Variable 'elem' can be declared as pointer to const [constVariablePointer] DONE