Error: BAD_SIZEOF (CWE-467): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:915: bad_sizeof: Taking the size of "&myhome", which is the address of an object, is suspicious. Did you intend the size of the object itself? Error: BAD_SIZEOF (CWE-467): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_otp/otp_radstate.c:100: bad_sizeof: Taking the size of pointer parameter "key" is suspicious. Error: BAD_SIZEOF (CWE-467): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:415: bad_sizeof: Taking the size of binary expression "4UL * sizeof (char *) /*8*/" is suspicious. Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/log.c:96: check_return: Calling function "pthread_setspecific" without checking return value (as is done elsewhere 8 out of 10 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:210: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:236: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:254: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:269: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)(PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)(PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:344: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/log.c:96: unchecked_value: No check of the return value of "pthread_setspecific(fr_strerror_key, buffer)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1356: check_return: Calling function "stat" without checking return value (as is done elsewhere 17 out of 18 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:300: example_checked: "stat(this->name, &buf)" has its value checked in "stat(this->name, &buf) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:1232: example_checked: "stat(conf->make_cert_command, &buf)" has its value checked in "stat(conf->make_cert_command, &buf) == 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_fastusers/rlm_fastusers.c:138: example_checked: "stat(inst->acctusersfile, &statbuf)" has its value checked in "stat(inst->acctusersfile, &statbuf) != -1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_fastusers/rlm_fastusers.c:156: example_checked: "stat(inst->usersfile, &statbuf)" has its value checked in "stat(inst->usersfile, &statbuf) != -1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/parse.c:1597: example_checked: "stat(buffer, &buf)" has its value checked in "stat(buffer, &buf) != 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1356: unchecked_value: No check of the return value of "stat(fn, &statbuf)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1730: check_return: Calling function "fr_hash_table_replace" without checking return value (as is done elsewhere 6 out of 7 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:474: example_checked: "fr_hash_table_replace(vendors_byvalue, dv)" has its value checked in "fr_hash_table_replace(vendors_byvalue, dv)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:632: example_checked: "fr_hash_table_replace(attributes_byname, attr)" has its value checked in "fr_hash_table_replace(attributes_byname, attr)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:648: example_checked: "fr_hash_table_replace(attributes_byvalue, attr)" has its value checked in "fr_hash_table_replace(attributes_byvalue, attr)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:804: example_checked: "fr_hash_table_replace(values_byvalue, dval)" has its value checked in "fr_hash_table_replace(values_byvalue, dval)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1718: example_checked: "fr_hash_table_replace(values_byname, this->dval)" has its value checked in "fr_hash_table_replace(values_byname, this->dval)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1730: unchecked_value: No check of the return value of "fr_hash_table_replace(values_byvalue, this->dval)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:1831: check_return: Calling function "radius_evaluate_condition" without checking return value (as is done elsewhere 4 out of 5 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/main/modcall.c:1696: example_checked: "radius_evaluate_condition(NULL, 0, 0, modname, 0, &result)" has its value checked in "radius_evaluate_condition(NULL, 0, 0, modname, 0, &result)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/modcall.c:1725: example_checked: "radius_evaluate_condition(NULL, 0, 0, modname, 0, &result)" has its value checked in "radius_evaluate_condition(NULL, 0, 0, modname, 0, &result)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/modcall.c:438: example_checked: "radius_evaluate_condition(request, myresult, 0, &p, 1, &condition)" has its value checked in "radius_evaluate_condition(request, myresult, 0, &p, 1, &condition)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/evaluate.c:616: example_checked: "radius_evaluate_condition(request, modreturn, depth + 1, &end, evaluate_next_condition, &result)" has its value checked in "radius_evaluate_condition(request, modreturn, depth + 1, &end, evaluate_next_condition, &result)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:1831: unchecked_value: No check of the return value of "radius_evaluate_condition(request, 2, 0, &my_debug, 1, &result)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1711: check_return: Calling function "cf_section_parse" without checking return value (as is done elsewhere 51 out of 54 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_wimax/rlm_wimax.c:92: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_acctlog/rlm_acctlog.c:66: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_acct_unique/rlm_acct_unique.c:145: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_always/rlm_always.c:102: example_checked: "cf_section_parse(conf, data, module_config)" has its value checked in "cf_section_parse(conf, data, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_attr_filter/rlm_attr_filter.c:152: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1711: unchecked_value: No check of the return value of "cf_section_parse(cs, rc, proxy_config)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/mainconfig.c:900: check_return: Calling function "cf_section_parse" without checking return value (as is done elsewhere 51 out of 54 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_wimax/rlm_wimax.c:92: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_acctlog/rlm_acctlog.c:66: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_acct_unique/rlm_acct_unique.c:145: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_always/rlm_always.c:102: example_checked: "cf_section_parse(conf, data, module_config)" has its value checked in "cf_section_parse(conf, data, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_attr_filter/rlm_attr_filter.c:152: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/mainconfig.c:900: unchecked_value: No check of the return value of "cf_section_parse(cs, NULL, server_config)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radwho.c:424: check_return: Calling function "cf_section_parse" without checking return value (as is done elsewhere 51 out of 54 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_wimax/rlm_wimax.c:92: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_acctlog/rlm_acctlog.c:66: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_acct_unique/rlm_acct_unique.c:145: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_always/rlm_always.c:102: example_checked: "cf_section_parse(conf, data, module_config)" has its value checked in "cf_section_parse(conf, data, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_attr_filter/rlm_attr_filter.c:152: example_checked: "cf_section_parse(conf, inst, module_config)" has its value checked in "cf_section_parse(conf, inst, module_config) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radwho.c:424: unchecked_value: No check of the return value of "cf_section_parse(cs, NULL, module_config)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:272: check_return: Calling function "pthread_setspecific" without checking return value (as is done elsewhere 8 out of 10 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:210: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:236: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:254: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:269: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)(PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)(PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:344: example_checked: "pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)" has its value checked in "_eC_ = pthread_setspecific(*Perl_Gthr_key_ptr(NULL), (void *)perl)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:272: unchecked_value: No check of the return value of "pthread_setspecific(*key, interp)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/evaluate.c:734: check_return: Calling function "regcomp" without checking return value (as is done elsewhere 10 out of 11 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1961: example_assign: Assigning: "compare" = return value from "regcomp(®, one->data.strvalue, 1)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1963: example_checked: "compare" has its value checked in "compare != 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c:276: example_checked: "regcomp(&preg, search_STR, cflags)" has its value checked in "err = regcomp(&preg, search_STR, cflags)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_checkval/rlm_checkval.c:268: example_assign: Assigning: "err" = return value from "regcomp(®, (char *)chk_vp->data.strvalue, 9)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_checkval/rlm_checkval.c:269: example_checked: "err" has its value checked in "err". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/evaluate.c:668: example_checked: "regcomp(®, this->rhs, 1)" has its value checked in "regcomp(®, this->rhs, 1) != 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/valuepair.c:83: example_assign: Assigning: "compare" = return value from "regcomp(®, check->data.strvalue, 1)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/valuepair.c:84: example_checked: "compare" has its value checked in "compare != 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/evaluate.c:734: unchecked_value: No check of the return value of "regcomp(®, this->rhs, 9)". Error: CHECKED_RETURN (CWE-252): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/sql.c:257: check_return: Calling function "connect_single_socket" without checking return value (as is done elsewhere 4 out of 5 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/sql.c:120: example_checked: "connect_single_socket(sqlsocket, inst)" has its value checked in "connect_single_socket(sqlsocket, inst) == 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/sql.c:480: example_checked: "connect_single_socket(sqlsocket, inst)" has its value checked in "connect_single_socket(sqlsocket, inst) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/sql.c:529: example_checked: "connect_single_socket(sqlsocket, inst)" has its value checked in "connect_single_socket(sqlsocket, inst) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/sql.c:579: example_checked: "connect_single_socket(sqlsocket, inst)" has its value checked in "connect_single_socket(sqlsocket, inst) < 0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/sql.c:257: unchecked_value: No check of the return value of "connect_single_socket(cur, inst)". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:927: dead_error_condition: On this path, the condition "rcode != token" cannot be true. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:919: const: After this line, the value of "rcode" is equal to 6. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:922: const: After this line, the value of "token" is equal to 6. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:919: new_values: Noticing condition "rcode != sizeof (filter->mask) /*6*/". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:922: new_values: Noticing condition "token != sizeof (filter->value) /*6*/". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:927: dead_error_line: Execution cannot reach this statement "return -1;". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1075: dead_error_condition: On this path, the switch value "type" cannot reach the default case. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1023: const: After this line, the value of "type" is equal to 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1023: const: After this line, the value of "type" is equal to 1. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1023: const: After this line, the value of "type" is equal to 2. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1024: equality_cond: Jumping to case "0". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1025: equality_cond: Jumping to case "1". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1026: equality_cond: Jumping to case "2". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/filters.c:1089: dead_error_begin: Execution cannot reach this statement "default:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:166: dead_error_condition: On this path, the switch value "result" cannot be "3". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:94: const: After this line, the value of "result" is equal to 1. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:41: const: After this line, the value of "result" is equal to 2. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:94: const: After this line, the value of "result" is equal to 2. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:94: const: After this line, the value of "result" is equal to 7. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:94: const: After this line, the value of "result" is equal to 8. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:41: assignment: Assigning: "result" = "2". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:100: equality_cond: Jumping to case "1". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:102: equality_cond: Jumping to case "2". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:101: equality_cond: Jumping to case "7". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:103: equality_cond: Jumping to case "8". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/acct.c:166: dead_error_begin: Execution cannot reach this statement "case 3:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:927: dead_error_condition: On this path, the condition "value" cannot be false. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:869: cannot_single: After this line (or expression), the value of "value" cannot be 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:921: cannot_single: After this line (or expression), the value of "value" cannot be 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:927: dead_error_line: Execution cannot reach this expression ""(null)"" inside statement "cf_log_info(cs, "\t%s = \"%...". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:963: dead_error_condition: On this path, the condition "value" cannot be false. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:869: cannot_single: After this line (or expression), the value of "value" cannot be 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:960: cannot_single: After this line (or expression), the value of "value" cannot be 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:963: dead_error_line: Execution cannot reach this expression ""(null)"" inside statement "cf_log_info(cs, "\t%s = \"%...". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:295: dead_error_condition: On this path, the condition "extra" cannot be true. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:116: const: After this line, the value of "extra" is equal to 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:116: assignment: Assigning: "extra" = "0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:296: dead_error_line: Execution cannot reach this statement "entry.extra = '\x1';". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:285: dead_error_condition: On this path, the condition "mppp" cannot be true. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:111: const: After this line, the value of "mppp" is equal to 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:111: assignment: Assigning: "mppp" = "0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ippool/rlm_ippool_tool.c:286: dead_error_line: Execution cannot reach this statement "extra = 1;". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:603: dead_error_condition: On this path, the switch value "scheme" cannot be "0". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:603: dead_error_line: Execution cannot reach this statement "case 0:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:619: dead_error_condition: On this path, the switch value "scheme" cannot be "1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:619: dead_error_line: Execution cannot reach this statement "case 1:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:752: dead_error_condition: On this path, the switch value "scheme" cannot be "1057". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:752: dead_error_line: Execution cannot reach this statement "case 1057:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:726: dead_error_condition: On this path, the switch value "scheme" cannot be "1058". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:726: dead_error_line: Execution cannot reach this statement "case 1058:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:680: dead_error_condition: On this path, the switch value "scheme" cannot be "1093". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:680: dead_error_line: Execution cannot reach this statement "case 1093:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:702: dead_error_condition: On this path, the switch value "scheme" cannot be "1094". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:702: dead_error_line: Execution cannot reach this statement "case 1094:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:631: dead_error_condition: On this path, the switch value "scheme" cannot be "1095". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:631: dead_error_line: Execution cannot reach this statement "case 1095:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:653: dead_error_condition: On this path, the switch value "scheme" cannot be "1096". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:653: dead_error_line: Execution cannot reach this statement "case 1096:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:781: dead_error_condition: On this path, the switch value "scheme" cannot be "8". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: const: After this line, the value of "scheme" is equal to -1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:517: assignment: Assigning: "scheme" = "-1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_pap/rlm_pap.c:781: dead_error_line: Execution cannot reach this statement "case 8:". Error: DEADCODE (CWE-561): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:873: dead_error_condition: On this path, the switch value "acct_status_type" cannot reach the default case. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:850: const: After this line, the value of "acct_status_type" is equal to 1. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:850: const: After this line, the value of "acct_status_type" is equal to 2. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:850: const: After this line, the value of "acct_status_type" is equal to 3. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:850: const: After this line, the value of "acct_status_type" is equal to 7. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:850: const: After this line, the value of "acct_status_type" is equal to 8. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:851: equality_cond: Jumping to case "1". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:853: equality_cond: Jumping to case "2". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:852: equality_cond: Jumping to case "3". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:854: equality_cond: Jumping to case "7". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:855: equality_cond: Jumping to case "8". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sqlippool/rlm_sqlippool.c:894: dead_error_begin: Execution cannot reach this statement "default:". Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/rbtree.c:403: var_compare_op: Comparing "Parent" to null implies that "Parent" might be null. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/rbtree.c:417: var_deref_model: Passing null variable "Parent" to function "DeleteFixup", which dereferences it. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/rbtree.c:311: deref_parm: Directly dereferencing parameter "Parent". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/rbtree.c:443: var_deref_model: Passing null variable "Parent" to function "DeleteFixup", which dereferences it. Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:913: var_compare_op: Comparing "cs" to null implies that "cs" might be null. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:918: var_deref_model: Passing null variable "cs" to function "cf_expand_variables", which dereferences it. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:715: deref_parm_in_call: Function "cf_top_section" dereferences parameter "outercs". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:690: deref_parm: Directly dereferencing parameter "cs". Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:952: var_compare_op: Comparing "cs" to null implies that "cs" might be null. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:957: var_deref_model: Passing null variable "cs" to function "cf_expand_variables", which dereferences it. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:715: deref_parm_in_call: Function "cf_top_section" dereferences parameter "outercs". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:690: deref_parm: Directly dereferencing parameter "cs". Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:1539: assign_zero: Assigning: "data" = 0. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:1549: var_deref_op: Dereferencing null variable "data". Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/stats.c:400: var_compare_op: Comparing "server_port" to null implies that "server_port" might be null. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/stats.c:462: var_deref_model: Passing null variable "server_port" to function "paircopyvp", which dereferences it. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:327: deref_parm: Directly dereferencing parameter "vp". Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1440: var_compare_op: Comparing "auth_pool_name" to null implies that "auth_pool_name" might be null. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1462: var_deref_model: Passing null variable "auth_pool_name" to function "strcmp", which dereferences it. (The dereference is assumed on the basis of the 'nonnull' parameter attribute.) Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radconf2xml.c:112: var_compare_op: Comparing "file" to null implies that "file" might be null. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radconf2xml.c:124: var_deref_model: Passing null variable "file" to function "unlink", which dereferences it. (The dereference is assumed on the basis of the 'nonnull' parameter attribute.) Error: FORWARD_NULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radmin.c:307: var_compare_op: Comparing "file" to null implies that "file" might be null. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radmin.c:452: var_deref_model: Passing null variable "file" to function "fr_domain_socket", which dereferences it. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radmin.c:104: deref_parm_in_call: Function "strlen" dereferences parameter "path". (The dereference is assumed on the basis of the 'nonnull' parameter attribute.) Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/auth.c:306: unterminated_case: This case (value -1) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/auth.c:309: fallthrough: The above case falls through to this one. Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:1558: unterminated_case: This case (value 20) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:1565: fallthrough: The above case falls through to this one. Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:1677: unterminated_case: This case (value 25) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/conffile.c:1685: fallthrough: The above case falls through to this one. Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:1282: unterminated_case: This case (value 5) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:1288: fallthrough: The above case falls through to this one. Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:2386: unterminated_case: This case (value 1) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:2455: fallthrough: The above case falls through to this one. Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:2900: unterminated_case: This case (value 5) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/event.c:2902: fallthrough: The above case falls through to this one. Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_dbm/rlm_dbm_parser.c:321: unterminated_case: This case (value 120) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_dbm/rlm_dbm_parser.c:323: fallthrough: The above case falls through to this one. Error: MISSING_BREAK (CWE-484): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/sql_unixodbc.c:414: unterminated_case: This case (value 49) is not terminated by a 'break' statement. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/sql_unixodbc.c:416: fallthrough: The above case falls through to this one. Error: NEGATIVE_RETURNS (CWE-687): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:841: negative_return_fn: Function "dup(listener->fd)" returns a negative number. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:841: negative_returns: "dup(listener->fd)" is passed to a parameter that cannot be negative. Error: NEGATIVE_RETURNS (CWE-687): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:894: negative_return_fn: Function "dup(listener->fd)" returns a negative number. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:894: negative_returns: "dup(listener->fd)" is passed to a parameter that cannot be negative. Error: NEGATIVE_RETURNS (CWE-687): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:655: negative_return_fn: Function "dup(listener->fd)" returns a negative number. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:655: negative_returns: "dup(listener->fd)" is passed to a parameter that cannot be negative. Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c:263: array_null: Comparing an array to null is not useful: "attr_vp->data.strvalue == NULL". Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_counter/rlm_counter.c:675: array_null: Comparing an array to null is not useful: "counter.uniqueid != NULL". Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_counter/rlm_counter.c:672: array_null: Comparing an array to null is not useful: "counter.uniqueid". Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ldap/rlm_ldap.c:1351: array_null: Comparing an array to null is not useful: "request->username->data.strvalue == NULL". Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_ldap/rlm_ldap.c:1016: array_null: Comparing an array to null is not useful: "check->data.strvalue == NULL". Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:721: no_effect_deref: The dereference in "*sp--" has no effect. Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:366: no_effect_deref: The dereference in "*sp--" has no effect. Error: NO_EFFECT (CWE-665): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_sql/rlm_sql.c:605: array_null: Comparing an array to null is not useful: "check->data.strvalue". Error: NULL_RETURNS (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:965: returned_null: Function "strrchr" returns null (checked 24 out of 28 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:962: example_checked: "strrchr(value, 43)" has its value checked in "(p = strrchr(value, 43)) != NULL". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1336: example_checked: "strrchr(fn, 47)" has its value checked in "(p = strrchr(fn, 47)) != NULL". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_detail/rlm_detail.c:234: example_assign: Assigning: "p" = return value from "strrchr(buffer, 47)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_detail/rlm_detail.c:240: example_checked: "p" has its value checked in "p". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_linelog/rlm_linelog.c:248: example_assign: Assigning: "p" = return value from "strrchr(buffer, 47)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_linelog/rlm_linelog.c:249: example_checked: "p" has its value checked in "p". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1485: example_assign: Assigning: "ts" = return value from "strrchr(attribute, 58)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1486: example_checked: "ts" has its value checked in "ts". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:965: var_assigned: Assigning: "p" = null return value from "strrchr". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:966: dereference: Dereferencing a null pointer "p". Error: NULL_RETURNS (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1494: returned_null: Function "strrchr" returns null (checked 24 out of 28 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:962: example_checked: "strrchr(value, 43)" has its value checked in "(p = strrchr(value, 43)) != NULL". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1336: example_checked: "strrchr(fn, 47)" has its value checked in "(p = strrchr(fn, 47)) != NULL". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_detail/rlm_detail.c:234: example_assign: Assigning: "p" = return value from "strrchr(buffer, 47)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_detail/rlm_detail.c:240: example_checked: "p" has its value checked in "p". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_linelog/rlm_linelog.c:248: example_assign: Assigning: "p" = return value from "strrchr(buffer, 47)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_linelog/rlm_linelog.c:249: example_checked: "p" has its value checked in "p". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1485: example_assign: Assigning: "ts" = return value from "strrchr(attribute, 58)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1486: example_checked: "ts" has its value checked in "ts". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1494: var_assigned: Assigning: "ts" = null return value from "strrchr". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:1497: dereference: Dereferencing a null pointer "ts". Error: NULL_RETURNS (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c:1081: returned_null: Function "pairfind" returns null (checked 332 out of 362 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:226: var_tested_null: "first" is null. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:228: return_null_var: Returning "first", which is null. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:3471: example_assign: Assigning: "challenge" = return value from "pairfind(packet->vps, 60)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:3472: example_checked: "challenge" has its value checked in "challenge". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:462: example_assign: Assigning: "found" = return value from "pairfind(*to, i->attribute)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:470: example_checked: "found" has its value checked in "found". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:559: example_assign: Assigning: "vp" = return value from "pairfind(packet->vps, 11008)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:560: example_checked: "vp" has its value checked in "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:574: example_assign: Assigning: "vp" = return value from "pairfind(packet->vps, 11009)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:586: example_checked: "vp" has its value checked in "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_wimax/rlm_wimax.c:119: example_assign: Assigning: "vp" = return value from "pairfind(request->packet->vps, 31)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_wimax/rlm_wimax.c:120: example_checked: "vp" has its value checked in "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c:1081: var_assigned: Assigning: "fake->username" = null return value from "pairfind". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c:1184: dereference: Dereferencing a pointer that might be null "fake->username" when calling "rad_authenticate". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/auth.c:665: deref_parm_in_call: Function "rad_check_password" dereferences parameter "request->username". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/auth.c:205: deref_parm: Directly dereferencing parameter "request->username". Error: NULL_RETURNS (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_otp/otp_mppe.c:53: returned_null: Function "pairfind" returns null (checked 332 out of 362 times). /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:226: var_tested_null: "first" is null. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:228: return_null_var: Returning "first", which is null. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:3471: example_assign: Assigning: "challenge" = return value from "pairfind(packet->vps, 60)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:3472: example_checked: "challenge" has its value checked in "challenge". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:462: example_assign: Assigning: "found" = return value from "pairfind(*to, i->attribute)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:470: example_checked: "found" has its value checked in "found". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:559: example_assign: Assigning: "vp" = return value from "pairfind(packet->vps, 11008)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:560: example_checked: "vp" has its value checked in "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:574: example_assign: Assigning: "vp" = return value from "pairfind(packet->vps, 11009)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:586: example_checked: "vp" has its value checked in "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_wimax/rlm_wimax.c:119: example_assign: Assigning: "vp" = return value from "pairfind(request->packet->vps, 31)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_wimax/rlm_wimax.c:120: example_checked: "vp" has its value checked in "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_otp/otp_mppe.c:53: var_assigned: Assigning: "rvp" = null return value from "pairfind". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_otp/otp_mppe.c:218: dereference: Dereferencing a null pointer "rvp". Error: OVERRUN_DYNAMIC (CWE-125): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:604: buffer_alloc: Calling allocating function "malloc" which allocated 8 bytes dictated by parameter 1. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:604: var_assign: Assigning: "packet->data" = "malloc(length)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:611: alias: Assigning: "ptr" = "packet->data". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/vqp.c:663: overrun-local: Overrunning dynamic array "ptr" of size 0 bytes at position 0 with index variable "0". Error: OVERRUN_STATIC (CWE-125): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:514: overrun-local: Overrunning static array of size 128 bytes at byte position 128 by accessing with pointer "&passwd[len]" through dereference in call to "memset". (The dereference is assumed on the basis of the 'nonnull' parameter attribute.) /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:514: overrun-local: Note: These bugs are often difficult to see at first glance. Coverity recommends a close inspection of the events leading to this overrun. Error: OVERRUN_STATIC (CWE-125): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:675: ptr_assign: Pointer "data" is assigned the address of a static array pointer "array" of size 4 bytes. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:782: overrun-buffer-val: Overrunning static array "data" of size 4 bytes by passing it as an argument to a function which indexes it at byte position 15. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:490: loop_bounded_by_parm: Loop condition "i < 16" is bounded by constant "16". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:491: index_bounded_by_const: Pointer "value" is indexed by "i", whose upper bound is constant "16" in "i < 16". Error: OVERRUN_STATIC (CWE-125): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_leap/eap_leap.c:337: overrun-buffer-val: Overrunning static array "ntpwdhash" of size 16 bytes by passing it as an argument to a function which indexes it at byte position 63. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/md4.c:29: access_dbuff_const: Calling "fr_MD4Update" indexes array "input" at byte position 63. /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/md4.c:181: access_dbuff_const: Calling "memcpy" indexes array "buf" with index "64UL" at byte position 63. Error: OVERRUN_STATIC (CWE-125): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_peap/peap.c:803: assignment: Assigning: "t->username->length" = "data_len - 1U". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_peap/peap.c:936: overrun-buffer-arg: Overrunning static array "&vp->data.octets[4] + 1" of size 254 bytes by passing it to a function which indexes it with argument "t->username->length" at byte position 256. Error: OVERRUN_STATIC (CWE-125): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:535: overrun-buffer-arg: Overrunning static array "buf" of size 64 bytes by passing it to a function which indexes it with argument "asn_time->length" at byte position 252. Error: OVERRUN_STATIC (CWE-125): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c:536: overrun-local: Overrunning static array "buf", with 64 elements, at position 253 with index variable "asn_time->length". Error: RESOURCE_LEAK (CWE-404): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2628: alloc_fn: Calling allocation function "rad_coalesce". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2561: alloc_fn: Storage is returned from allocation function "malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2561: var_assign: Assigning: "tlv_data" = "malloc(tlv_length)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2561: var_assign: Assigning: "tlv" = "tlv_data". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2564: noescape: Variable "tlv" is not freed or pointed-to in function "memcpy". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2603: return_alloc: Returning allocated memory "tlv_data". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2628: var_assign: Assigning: "tlv_data" = storage returned from "rad_coalesce(attribute, length, data, packet_length, &tlv_length)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:2656: leaked_storage: Variable "tlv_data" going out of scope leaks the storage it points to. Error: RESOURCE_LEAK (CWE-404): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:810: alloc_fn: Calling allocation function "paircreate". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:174: alloc_fn: Storage is returned from allocation function "pairalloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:72: alloc_fn: Storage is returned from allocation function "malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:72: var_assign: Assigning: "vp" = "malloc(sizeof (*vp) /*312*/ + name_len)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:74: noescape: Variable "vp" is not freed or pointed-to in function "memset". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:134: return_alloc: Returning allocated memory "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:174: var_assign: Assigning: "vp" = "pairalloc(da)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/valuepair.c:185: return_alloc: Returning allocated memory "vp". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:810: var_assign: Assigning: "tlv" = storage returned from "paircreate(attribute, 14)". /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/radius.c:862: leaked_storage: Variable "tlv" going out of scope leaks the storage it points to. Error: RESOURCE_LEAK (CWE-404): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:838: alloc_fn: Calling allocation function "opendir". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:838: var_assign: Assigning: "dir" = storage returned from "opendir(value)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:848: noescape: Variable "dir" is not freed or pointed-to in function "readdir". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:877: leaked_storage: Variable "dir" going out of scope leaks the storage it points to. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:886: leaked_storage: Variable "dir" going out of scope leaks the storage it points to. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:889: leaked_storage: Variable "dir" going out of scope leaks the storage it points to. Error: RESOURCE_LEAK (CWE-404): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:655: alloc_fn: Calling allocation function "fdopen". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:655: var_assign: Assigning: "fp" = storage returned from "fdopen(dup(listener->fd), "a")". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:664: leaked_storage: Variable "fp" going out of scope leaks the storage it points to. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/command.c:670: leaked_storage: Variable "fp" going out of scope leaks the storage it points to. Error: RESOURCE_LEAK (CWE-404): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1704: alloc_fn: Calling allocation function "rad_malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:346: alloc_fn: Storage is returned from allocation function "malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:346: var_assign: Assigning: "ptr" = "malloc(size)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:353: return_alloc: Returning allocated memory "ptr". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1704: var_assign: Assigning: "rc" = storage returned from "rad_malloc(sizeof (*rc) /*32*/)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1705: noescape: Variable "rc" is not freed or pointed-to in function "memset". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1756: leaked_storage: Variable "rc" going out of scope leaks the storage it points to. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1758: noescape: Variable "rc" is not freed or pointed-to in function "server_pool_add". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:775:44: noescape: "server_pool_add" does not free or save its pointer parameter "rc". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:1759: leaked_storage: Variable "rc" going out of scope leaks the storage it points to. Error: RESOURCE_LEAK (CWE-404): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:414: alloc_fn: Calling allocation function "rad_malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:346: alloc_fn: Storage is returned from allocation function "malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:346: var_assign: Assigning: "ptr" = "malloc(size)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:353: return_alloc: Returning allocated memory "ptr". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:414: var_assign: Assigning: "embed" = storage returned from "rad_malloc(32UL)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:415: noescape: Variable "embed" is not freed or pointed-to in function "memset". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:428: leaked_storage: Variable "embed" going out of scope leaks the storage it points to. /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:457: leaked_storage: Variable "embed" going out of scope leaks the storage it points to. Error: RESOURCE_LEAK (CWE-404): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/parse.c:999: alloc_fn: Calling allocation function "rad_malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:346: alloc_fn: Storage is returned from allocation function "malloc". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:346: var_assign: Assigning: "ptr" = "malloc(size)". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:353: return_alloc: Returning allocated memory "ptr". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/parse.c:999: var_assign: Assigning: "this" = storage returned from "rad_malloc(sizeof (*this) /*40*/)". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/parse.c:1003: noescape: Variable "this" is not freed or pointed-to in function "memset". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_policy/parse.c:1034: leaked_storage: Variable "this" going out of scope leaks the storage it points to. Error: REVERSE_INULL (CWE-476): /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1326: deref_ptr_in_call: Dereferencing pointer "dir". (The dereference is assumed on the basis of the 'nonnull' parameter attribute.) /builddir/build/BUILD/freeradius-server-2.1.12/src/lib/dict.c:1340: check_after_deref: Dereferencing "dir" before a null check. Error: REVERSE_NEGATIVE (CWE-129): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radmin.c:321: negative_sink: Using "num_commands" as index to array "commands". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radmin.c:487: check_after_sink: You might be using variable "num_commands" before verifying that it is >= 0. Error: SIZEOF_MISMATCH (CWE-569): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:915: suspicious_sizeof: Passing argument "&myhome" of type "home_server *" and argument "sizeof (&myhome) /*8*/" to function "memset" is suspicious. Did you intend to use "sizeof(*&myhome)" instead of "sizeof (&myhome)" ? Error: SIZEOF_MISMATCH (CWE-569): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_otp/otp_radstate.c:100: suspicious_sizeof: Passing argument "key" of type "unsigned char const *" and argument "sizeof (key) /*8*/" to function "HMAC_Init" is suspicious. Error: UNINIT (CWE-457): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/listen.c:1972: var_decl: Declaring variable "server_ipaddr" without initializer. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/listen.c:2031: uninit_use: Using uninitialized value "server_ipaddr": field "server_ipaddr".scope is uninitialized. Error: UNINIT (CWE-457): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/listen.c:503: var_decl: Declaring variable "ipaddr" without initializer. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/listen.c:544: uninit_use: Using uninitialized value "ipaddr": field "ipaddr".scope is uninitialized. Error: UNINIT (CWE-457): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/stats.c:539: var_decl: Declaring variable "ipaddr" without initializer. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/stats.c:554: uninit_use_in_call: Using uninitialized value "ipaddr": field "ipaddr".scope is uninitialized when calling "home_server_find". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/realms.c:2179: read_parm: Reading a parameter value. Error: UNINIT (CWE-457): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:50: var_decl: Declaring variable "act" without initializer. /builddir/build/BUILD/freeradius-server-2.1.12/src/main/util.c:58: uninit_use_in_call: Using uninitialized value "act": field "act".sa_restorer is uninitialized when calling "sigaction". Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/radclient.c:597: returned_pointer: Pointer "vp" returned by "pairfind(radclient->request->vps, 1133)" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:504: returned_pointer: Pointer "rad_check_hv" returned by "Perl_get_hv((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)), "RAD_CHECK", 1)" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:497: returned_pointer: Pointer "rad_check_hv" returned by "Perl_newHV((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:505: returned_pointer: Pointer "rad_config_hv" returned by "Perl_get_hv((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)), "RAD_CONFIG", 1)" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:498: returned_pointer: Pointer "rad_config_hv" returned by "Perl_newHV((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:503: returned_pointer: Pointer "rad_reply_hv" returned by "Perl_get_hv((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)), "RAD_REPLY", 1)" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:496: returned_pointer: Pointer "rad_reply_hv" returned by "Perl_newHV((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:506: returned_pointer: Pointer "rad_request_hv" returned by "Perl_get_hv((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)), "RAD_REQUEST", 1)" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:499: returned_pointer: Pointer "rad_request_hv" returned by "Perl_newHV((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:507: returned_pointer: Pointer "rad_request_proxy_hv" returned by "Perl_get_hv((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)), "RAD_REQUEST_PROXY", 1)" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:500: returned_pointer: Pointer "rad_request_proxy_hv" returned by "Perl_newHV((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:508: returned_pointer: Pointer "rad_request_proxy_reply_hv" returned by "Perl_get_hv((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)), "RAD_REQUEST_PROXY_REPLY", 1)" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_perl/rlm_perl.c:501: returned_pointer: Pointer "rad_request_proxy_reply_hv" returned by "Perl_newHV((PerlInterpreter *)pthread_getspecific(*Perl_Gthr_key_ptr(NULL)))" is never used. Error: UNUSED_VALUE (CWE-563): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_preprocess/rlm_preprocess.c:154: returned_pointer: Pointer "dattr" returned by "dict_attrbyname(newattr)" is never used. Error: USE_AFTER_FREE (CWE-416): /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:749: freed_arg: "client_free" frees "c". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:116: freed_arg: "free" frees parameter "client". /builddir/build/BUILD/freeradius-server-2.1.12/src/main/client.c:750: deref_after_free: Dereferencing freed pointer "c". Error: USE_AFTER_FREE (CWE-416): /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_counter/rlm_counter.c:514: freed_arg: "free" frees "time_datum.dptr". /builddir/build/BUILD/freeradius-server-2.1.12/src/modules/rlm_counter/rlm_counter.c:532: deref_arg: Calling "memcpy" dereferences freed pointer "time_datum.dptr". (The dereference is assumed on the basis of the 'nonnull' parameter attribute.)