Skip to content

Minor fixes

Minor fixes #196

Triggered via pull request August 31, 2024 07:39
Status Success
Total duration 45s
Artifacts

c-lint.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

1 error and 10 warnings
src/download.c:6:10 [clang-diagnostic-error]: src/download.c#L6
'curl/curl.h' file not found
src/install.c:1:9 [bugprone-reserved-identifier]: src/install.c#L1
declaration uses identifier '_GNU_SOURCE', which is a reserved identifier
src/install.c:43:5 [readability-function-cognitive-complexity]: src/install.c#L43
function 'f_install_package_source' has cognitive complexity of 61 (threshold 25)
src/install.c:85:9 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]: src/install.c#L85
Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11
src/install.c:92:9 [clang-analyzer-unix.Malloc]: src/install.c#L92
Potential leak of memory pointed to by 'env_path'
src/install.c:96:9 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]: src/install.c#L96
Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11
src/install.c:98:15 [cppcoreguidelines-init-variables]: src/install.c#L98
variable 'env_file' is not initialized
src/install.c:99:18 [clang-analyzer-unix.Malloc]: src/install.c#L99
Potential leak of memory pointed to by 'env_path'
src/install.c:118:17 [clang-analyzer-core.NonNullParamChecker]: src/install.c#L118
Null pointer passed to 2nd parameter expecting 'nonnull'
src/install.c:163:8 [clang-analyzer-core.NonNullParamChecker]: src/install.c#L163
Null pointer passed to 1st parameter expecting 'nonnull'
src/install.c:167:9 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]: src/install.c#L167
Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11