2025-11-23 11:23 ftp://ftp.de.debian.org/debian/pool/main/p/pwauth/pwauth_2.3.11.orig.tar.gz cppcheck-options: --library=posix --library=gnu --library=bsd --inconclusive --enable=style,information --inline-suppr --template=daca2 --disable=missingInclude --suppress=unmatchedSuppression --check-library --debug-warnings --suppress=autoNoType --suppress=valueFlowBailout --suppress=bailoutUninitVar --suppress=symbolDatabaseWarning --suppress=normalCheckLevelConditionExpressions -D__GNUC__ --platform=unix64 -j4 platform: Linux-6.12.57+deb13-amd64-x86_64-with-glibc2.41 python: 3.13.5 client-version: 1.3.67 compiler: g++ (Debian 14.2.0-19) 14.2.0 cppcheck: head 2.18.0 head-info: cb76e52 (2025-11-22 14:47:37 +0100) count: 24 24 elapsed-time: 0.0 0.1 head-timing-info: old-timing-info: head results: pwauth-2.3.11/auth_sun.c:73:13: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable errno [valueFlowBailoutIncompleteVar] pwauth-2.3.11/checkfaillog.c:78:14: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable stderr [valueFlowBailoutIncompleteVar] pwauth-2.3.11/auth_sun.c:65:24: portability: Non reentrant function 'getspnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'. [prohibitedgetspnamCalled] pwauth-2.3.11/auth_sun.c:75:15: portability: Non reentrant function 'getpwnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'. [prohibitedgetpwnamCalled] pwauth-2.3.11/auth_sun.c:85:12: portability: Non reentrant function 'crypt' called. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'. [prohibitedcryptCalled] pwauth-2.3.11/lastlog.c:56:27: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable O_WRONLY [valueFlowBailoutIncompleteVar] pwauth-2.3.11/auth_sun.c:62:22: style: Parameter 'login' can be declared as pointer to const [constParameterPointer] pwauth-2.3.11/auth_sun.c:62:35: style: Parameter 'passwd' can be declared as pointer to const [constParameterPointer] pwauth-2.3.11/auth_sun.c:64:11: style: Variable 'cpass' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/auth_sun.c:65:18: style: Variable 'spwd' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/auth_sun.c:67:20: style: Variable 'pwd' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/main.c:47:1: portability: Omitted return type of function 'main' defaults to int, this is not supported by ISO C99 and later standards. [returnImplicitInt] pwauth-2.3.11/main.c:64:21: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable RLIMIT_CORE [valueFlowBailoutIncompleteVar] pwauth-2.3.11/lastlog.c:43:11: style: Variable 'hostname' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/lastlog.c:44:11: style: Variable 'hostaddr' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/nologin.c:41:1: portability: Omitted return type of function 'check_nologin' defaults to int, this is not supported by ISO C99 and later standards. [returnImplicitInt] pwauth-2.3.11/snooze.c:45:1: portability: Omitted return type of function 'snooze' defaults to int, this is not supported by ISO C99 and later standards. [returnImplicitInt] pwauth-2.3.11/snooze.c:49:18: debug: valueFlowConditionExpressions bailout: Skipping function due to incomplete variable F_WRLCK [valueFlowBailoutIncompleteVar] pwauth-2.3.11/checkfaillog.c:76:11: portability: Non reentrant function 'getpwnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'. [prohibitedgetpwnamCalled] pwauth-2.3.11/main.c:111:5: style: Obsolescent function 'bzero' called. It is recommended to use 'memset' instead. [prohibitedbzeroCalled] pwauth-2.3.11/checkfaillog.c:47:11: style: Variable 'user' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/checkfaillog.c:47:24: style: Variable 'msg' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/checkfaillog.c:74:17: style: Variable 'pw' can be declared as pointer to const [constVariablePointer] pwauth-2.3.11/checkfaillog.c:89:5: style: Variable 'uid' is assigned a value that is never used. [unreadVariable] diff: DONE