Automated Code Analysis

cppcheck analysis of syslinux_3.85+dfsg-2.dsc

• ./com32/cmenu/libmenu/des.c:583 [possible error] - Array index out of bounds
• ./com32/cmenu/libmenu/des.c:584 [possible error] - Array index out of bounds
• ./com32/cmenu/libmenu/help.c:69 [error] - Uninitialized variable: i
• ./com32/gpllib/disk/write.c:118 [error] - Memory leak: rb
• ./com32/gpllib/dmi/dmi_memory.c:200 [error] - Undefined behaviour: type is used wrong in call to sprintf or snprintf. Quote: If copying takes place between objects that overlap as a result of a call to sprintf() or snprintf(), the results are undefined.
• ./com32/gpllib/dmi/dmi_memory.c:212 [error] - Undefined behaviour: connection is used wrong in call to sprintf or snprintf. Quote: If copying takes place between objects that overlap as a result of a call to sprintf() or snprintf(), the results are undefined.
• ./com32/gpllib/dmi/dmi_memory.c:242 [error] - Undefined behaviour: size is used wrong in call to sprintf or snprintf. Quote: If copying takes place between objects that overlap as a result of a call to sprintf() or snprintf(), the results are undefined.
• ./com32/gpllib/dmi/dmi_memory.c:244 [error] - Undefined behaviour: size is used wrong in call to sprintf or snprintf. Quote: If copying takes place between objects that overlap as a result of a call to sprintf() or snprintf(), the results are undefined.
• ./com32/lib/libpng/pngmem.c:452 [error] - Invalid number of character (() when these macros are defined: 'PNG_MAX_MALLOC_64K'.
• ./com32/modules/ethersel.c:188 [error] - Resource leak: f
• ./com32/rosh/rosh.c:473 [error] - Resource leak: fd
• ./extlinux/main.c:754 [error] - Memory leak: file
• ./extlinux/main.c:877 [error] - Resource leak: devfd
• ./gpxe/src/drivers/net/sundance.c:329 [error] - Array 'rx_ring[4]' index 4 out of bounds
• ./gpxe/src/hci/mucurses/windows.c:58 [error] - Memory leak: child
• ./gpxe/src/hci/mucurses/windows.c:127 [error] - Memory leak: win
• ./gpxe/src/hci/mucurses/windows.c:154 [error] - Memory leak: child
• ./gpxe/src/net/80211/net80211.c:1595 [error] - Possible null pointer dereference: ctx - otherwise it is redundant to check if ctx is null at line 1597
• ./gpxe/src/util/elf2efi.c:352 [error] - Uninitialized variable: data_start
• ./gpxe/src/util/nrv2b.c:634 [possible error] - Array 'best_pos[1]' index 2 out of bounds
• ./gpxe/src/util/nrv2b.c:635 [possible error] - Array 'best_pos[1]' index 2 out of bounds

---