devs/cproof
1
2
Fork 1
Code Issues 43 Pull Requests 6 Actions Packages Projects 1 Releases Wiki Activity

WIP: fix: address GCC -fanalyzer warnings #107

Closed
jabber.developer2 wants to merge 1 commits from fix/analyzer-warnings into master
pull from: fix/analyzer-warnings
merge into: devs:master
Conversation 1 Commits 1 Files Changed 2 +14 -1

1 Commits

Author SHA1 Message Date
jabber.developer2
0ad7327fea fix: null pointer dereference guards (CWE-476)
All checks were successful
CI Code / Check spelling (pull_request) Successful in 17s
Details
CI Code / Check coding style (pull_request) Successful in 32s
Details
CI Code / Code Coverage (pull_request) Successful in 2m44s
Details
CI Code / Linux (debian) (pull_request) Successful in 4m43s
Details
CI Code / Linux (ubuntu) (pull_request) Successful in 4m58s
Details
CI Code / Linux (arch) (pull_request) Successful in 5m49s
Details 
- cmd_funcs.c: check strtok() return before use in cmd_process_input
- cmd_funcs.c: check fdopen() return before use in cmd_sendfile
- omemo.c: init fingerprint_len=0 and check _omemo_fingerprint_decode()
  return in omemo_is_trusted_identity (CWE-457/CWE-690)
- omemo.c: early NULL return in _omemo_fingerprint_decode() for NULL input

Found via GCC -fanalyzer. Not covered by upstream.
 2026-05-16 08:53:37 +00:00