Merge pull request #474 from haircommander/sast-fixes

fix some issues flagged by SAST scan

src/conn_sock.c

@@ -263,7 +263,7 @@ static char *bind_unix_socket(char *socket_relative_name, int sock_type, mode_t
 	int socket_fd = -1;
 
 	/* get the parent_dir of the socket. We'll use this to get the location of the socket. */
-	char *parent_dir = socket_parent_dir(use_full_attach_path, max_socket_path_len());
+	_cleanup_free_ char *parent_dir = socket_parent_dir(use_full_attach_path, max_socket_path_len());
 
 	/*
 	 * To be able to access the location of the attach socket, without first creating the attach socket

src/ctr_stdio.c

@@ -106,8 +106,8 @@ static void drain_log_buffers(stdpipe_t pipe)
 {
 	/* We pass a single byte buffer because write_to_logs expects that there is one
 	   byte of capacity beyond the buflen that we specify */
-	char buf;
-	write_to_logs(pipe, &buf, 0);
+	char buf[1];
+	write_to_logs(pipe, buf, 0);
 }
 
 static bool read_stdio(int fd, stdpipe_t pipe, gboolean *eof)