sqc 0.4.84

project,file,line,rule,verdict,reason,provenance,confidence
lua,lauxlib.c,47,MEM05-C,FP,findfield recursion bounded to depth 2 by design; no real stack risk,precision_audit,high
lua,lauxlib.c,127,API00-C,FP,L is a required LUALIB_API parameter; NULL-check contract is caller's,precision_audit,high
lua,lauxlib.c,127,API00-C,FP,L1 is a required LUALIB_API parameter; NULL-check contract is caller's,precision_audit,high
lua,lauxlib.c,127,DCL15-C,FP,LUALIB_API expands to visibility attribute; symbol is declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,171,API00-C,FP,extramsg is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,171,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,171,DCL19-C,FP,luaL_argerror is a public API symbol exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,197,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,197,API00-C,FP,tname is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,197,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,197,DCL19-C,FP,luaL_typeerror is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,220,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,220,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,220,DCL19-C,FP,luaL_where is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,238,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,238,API00-C,FP,fmt is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,238,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,238,DCL19-C,FP,luaL_error is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,249,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,249,DCL19-C,FP,luaL_fileresult is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,258,CON33-C,FP,Lua is single-threaded at C level; strerror safe in this context,precision_audit,high
lua,lauxlib.c,258,CON34-C,FP,Lua is single-threaded at C level; strerror safe in this context,precision_audit,high
lua,lauxlib.c,278,PRE00-C,FP,l_inspectstat used only with non-side-effecting variable names at call sites,precision_audit,high
lua,lauxlib.c,278,PRE01-C,FP,Parameters stat/what used as simple variable names; no precedence hazard,precision_audit,high
lua,lauxlib.c,278,PRE01-C,FP,Parameters stat/what used as simple variable names; no precedence hazard,precision_audit,high
lua,lauxlib.c,278,PRE10-C,FP,l_inspectstat used as a statement (not in if-without-braces); safe,precision_audit,high
lua,lauxlib.c,278,PRE12-C,FP,"Macro arguments at call sites are plain variables, not expressions with side-effects",precision_audit,high
lua,lauxlib.c,291,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,317,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,317,DCL19-C,FP,luaL_newmetatable is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,323,STR30-C,FP,lua_setfield takes const char* key; string literal not modified,precision_audit,high
lua,lauxlib.c,330,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,330,API00-C,FP,tname is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,330,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,336,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,344,DCL30-C,FP,"p is pointer from lua_touserdata (Lua stack slot), not C automatic storage",precision_audit,high
lua,lauxlib.c,351,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,351,API00-C,FP,tname is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,354,DCL30-C,FP,p is pointer from luaL_testudata; not a C automatic-storage local,precision_audit,high
lua,lauxlib.c,366,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,366,API00-C,FP,def is optional parameter (NULL means use checkstring); intentional,precision_audit,high
lua,lauxlib.c,366,API00-C,FP,lst is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,366,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,386,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,386,DCL19-C,FP,luaL_checkstack is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,387,EXP20-C,FP,l_unlikely(!lua_checkstack(...)) is explicit boolean test; clear semantics,precision_audit,high
lua,lauxlib.c,396,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,402,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,408,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,411,DCL30-C,FP,"s from lua_tolstring points into Lua string storage, not C local",precision_audit,high
lua,lauxlib.c,415,API00-C,FP,len is optional output pointer; NULL allowed (handled in body),precision_audit,high
lua,lauxlib.c,416,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,426,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,426,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,429,EXP33-C,FP,isnum initialized by lua_tonumberx via output pointer before use,precision_audit,high
lua,lauxlib.c,435,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,435,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,448,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,448,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,451,EXP33-C,FP,isnum initialized by lua_tointegerx via output pointer before use,precision_audit,high
lua,lauxlib.c,458,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,458,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,486,EXP34-C,FP,box from lua_touserdata on a just-created userdata; cannot be NULL,precision_audit,high
lua,lauxlib.c,491,DCL31-C,FP,lua_getallocf is declared in lua.h; sqc missed the include,precision_audit,high
lua,lauxlib.c,491,EXP33-C,FP,ud initialized by lua_getallocf output-pointer parameter before use,precision_audit,high
lua,lauxlib.c,509,ARR02-C,FP,Omitting array bound when full initializer is present is standard C idiom,precision_audit,high
lua,lauxlib.c,518,EXP34-C,FP,box from lua_touserdata on boxmt userdata; guaranteed non-NULL by lua_setmetatable path,precision_audit,high
lua,lauxlib.c,530,PRE00-C,FP,buffonstack used with plain variable B; no side-effecting arguments,precision_audit,high
lua,lauxlib.c,530,PRE12-C,FP,B is a plain variable at all call sites; no multiple-evaluation hazard,precision_audit,high
lua,lauxlib.c,537,PRE00-C,FP,checkbufferlevel used with plain variable B; no side-effecting arguments,precision_audit,high
lua,lauxlib.c,537,PRE01-C,FP,B is a plain variable at call sites; no precedence hazard,precision_audit,high
lua,lauxlib.c,537,PRE02-C,FP,checkbufferlevel is used as a statement; outer parentheses not needed,precision_audit,high
lua,lauxlib.c,537,PRE12-C,FP,B is a plain variable at all call sites; no multiple-evaluation hazard,precision_audit,high
lua,lauxlib.c,546,DCL13-C,FP,Advisory; parameter B is an internal luaL_Buffer used via member access,precision_audit,high
lua,lauxlib.c,552,INT14-C,FP,Intentional buffer growth arithmetic: newsize >>= shift for 1.5x growth,precision_audit,high
lua,lauxlib.c,581,ARR38-C,FP,memcpy size B->n*sizeof(char)==B->n; overflow guard at line 548,precision_audit,high
lua,lauxlib.c,581,INT32-C,FP,sizeof(char)==1; B->n*1 cannot overflow beyond size_t type,precision_audit,high
lua,lauxlib.c,592,API00-C,FP,B is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,597,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,597,DCL19-C,FP,luaL_addlstring is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,597,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,600,ARR38-C,FP,memcpy size l is the string length; prepbuffsize ensures buffer is large enough,precision_audit,high
lua,lauxlib.c,600,EXP05-C,FP,b from prepbuffsize is a non-const char*; the const-cast in the parameter declaration is advisory,precision_audit,high
lua,lauxlib.c,600,EXP34-C,FP,prepbuffsize never returns NULL; it longjmps on allocation failure,precision_audit,high
lua,lauxlib.c,606,API00-C,FP,B is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,606,API00-C,FP,s is required non-NULL C-string parameter; caller contract,precision_audit,high
lua,lauxlib.c,606,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,606,DCL19-C,FP,luaL_addstring is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,611,API00-C,FP,B is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,611,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,611,DCL19-C,FP,luaL_pushresult is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,623,EXP34-C,FP,box from lua_touserdata on stack top in buffonstack branch; checkbufferlevel asserts non-NULL,precision_audit,high
lua,lauxlib.c,627,EXP33-C,FP,ud initialized by lua_getallocf output-pointer parameter before use,precision_audit,high
lua,lauxlib.c,635,API00-C,FP,B is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,635,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,650,API00-C,FP,B is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,650,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,650,DCL19-C,FP,luaL_addvalue is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,654,EXP33-C,FP,len initialized by lua_tolstring output-pointer parameter before memcpy,precision_audit,high
lua,lauxlib.c,655,ARR38-C,FP,memcpy size len is the string length; prepbuffsize ensures buffer large enough,precision_audit,high
lua,lauxlib.c,655,EXP05-C,FP,b from prepbuffsize is non-const char*; advisory const-cast finding,precision_audit,high
lua,lauxlib.c,655,EXP34-C,FP,prepbuffsize never returns NULL; longjmps on alloc failure,precision_audit,high
lua,lauxlib.c,655,EXP34-C,FP,s from lua_tolstring is non-NULL; guaranteed by lua_isstring guard in addvalue,precision_audit,high
lua,lauxlib.c,661,API00-C,FP,L is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,661,API00-C,FP,B is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,661,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,661,DCL19-C,FP,luaL_buffinit is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,670,API00-C,FP,L is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,670,API00-C,FP,B is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,689,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,710,DCL31-C,FP,lua_rawlen declared in lua.h; sqc missed the include,precision_audit,high
lua,lauxlib.c,716,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,743,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,755,ARR38-C,FP,"fread(buff,1,sizeof(buff),f) is correct: element size 1, count sizeof(buff)",precision_audit,high
lua,lauxlib.c,755,FIO17-C,FP,fread result used as byte count returned to lua_load; no null-terminator needed,precision_audit,high
lua,lauxlib.c,765,CON33-C,FP,Lua is single-threaded at C level; strerror safe in this context,precision_audit,high
lua,lauxlib.c,765,CON34-C,FP,Lua is single-threaded at C level; strerror safe in this context,precision_audit,high
lua,lauxlib.c,779,MSC37-C,FP,skipBOM always returns int from getc; sqc false alarm on fall-off-end,precision_audit,high
lua,lauxlib.c,780,DCL00-C,FP,Advisory const on local variable; not a defect,precision_audit,high
lua,lauxlib.c,796,DCL00-C,FP,Advisory const on local variable; not a defect,precision_audit,high
lua,lauxlib.c,798,FIO34-C,FP,c != EOF with getc returning int is standard C EOF detection idiom,precision_audit,high
lua,lauxlib.c,808,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,808,API00-C,FP,"mode is optional parameter (NULL allowed, checked in body)",precision_audit,high
lua,lauxlib.c,808,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,814,MEM10-C,FP,Direct NULL check for filename is the standard Lua API idiom; no abstraction needed,precision_audit,high
lua,lauxlib.c,821,FIO05-C,FP,Lua is not a setuid program; fstat ownership check is inappropriate here,precision_audit,high
lua,lauxlib.c,821,WIN03-C,FP,Lua is cross-platform; N flag is Windows-only extension not in portable C,precision_audit,high
lua,lauxlib.c,827,EXP33-C,FP,c is written by skipcomment via output pointer at line 825 before use at 827,precision_audit,high
lua,lauxlib.c,831,ERR33-C,FP,freopen return checked immediately: if (lf.f == NULL) return errfile(...),precision_audit,high
lua,lauxlib.c,832,MEM12-C,FP,lf.f is the same FILE* passed to freopen; on NULL return lf.f is already invalid; fclose at 841 only called when filename non-NULL,precision_audit,high
lua,lauxlib.c,841,ERR00-C,FP,fclose return not checked; read errors captured via ferror at 839,precision_audit,high
lua,lauxlib.c,841,ERR33-C,FP,fclose return not checked; read errors captured via ferror at 839,precision_audit,high
lua,lauxlib.c,857,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,867,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,867,API00-C,FP,buff is required parameter; caller contract,precision_audit,high
lua,lauxlib.c,867,API00-C,FP,"mode is optional parameter (NULL allowed, passed to lua_load)",precision_audit,high
lua,lauxlib.c,867,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,867,DCL19-C,FP,luaL_loadbufferx is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,867,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,868,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,868,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,876,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,876,API00-C,FP,s is required non-NULL C-string; caller contract,precision_audit,high
lua,lauxlib.c,876,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,884,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,884,DCL19-C,FP,luaL_getmetafield is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,900,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,900,DCL19-C,FP,luaL_callmeta is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,910,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,922,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,965,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,965,API00-C,FP,l is required luaL_Reg array pointer; caller contract,precision_audit,high
lua,lauxlib.c,965,API00-C,FP,nup is validated by luaL_checkstack immediately in function body,precision_audit,high
lua,lauxlib.c,965,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,965,DCL19-C,FP,luaL_setfuncs is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,986,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,986,DCL19-C,FP,luaL_getsubtable is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,1006,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,1006,API00-C,FP,modname is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,1006,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,1026,API00-C,FP,b is required luaL_Buffer pointer; caller contract,precision_audit,high
lua,lauxlib.c,1026,API00-C,FP,s is required non-NULL string; caller contract,precision_audit,high
lua,lauxlib.c,1026,API00-C,FP,p is required non-NULL pattern; caller contract,precision_audit,high
lua,lauxlib.c,1026,API00-C,FP,r is required non-NULL replacement; caller contract,precision_audit,high
lua,lauxlib.c,1026,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,lauxlib.c,1026,DCL19-C,FP,luaL_addgsub is public API exported via lauxlib.h,precision_audit,high
lua,lauxlib.c,1029,STR34-C,FP,p is const char* used in strstr pattern; no sign-extension in string comparison,precision_audit,high
lua,lauxlib.c,1039,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,1039,API00-C,FP,s is required non-NULL string; caller contract,precision_audit,high
lua,lauxlib.c,1039,API00-C,FP,p is required non-NULL pattern; caller contract,precision_audit,high
lua,lauxlib.c,1039,API00-C,FP,r is required non-NULL replacement; caller contract,precision_audit,high
lua,lauxlib.c,1049,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,1049,API05-C,FP,"Lua uses portable C99, not conformant array parameters; categorical FP",precision_audit,high
lua,lauxlib.c,1052,MEM03-C,FP,luaL_alloc is a generic allocator; data is not sensitive; memset before free not needed,precision_audit,high
lua,lauxlib.c,1056,STR01-C,FP,Spurious mixed-string-management advisory; no real defect,precision_audit,high
lua,lauxlib.c,1056,MEM06-C,FP,Lua general allocator memory is not sensitive data; mlock inappropriate,precision_audit,high
lua,lauxlib.c,1094,EXP43-C,FP,"lua_setwarnf(L, f, L) stores L and ud separately; no restrict aliasing",precision_audit,high
lua,lauxlib.c,1096,EXP43-C,FP,"lua_setwarnf(L, f, L) stores L and ud separately; no restrict aliasing",precision_audit,high
lua,lauxlib.c,1115,EXP43-C,FP,"lua_setwarnf(L, f, L) stores L and ud separately; no restrict aliasing",precision_audit,high
lua,lauxlib.c,1118,EXP43-C,FP,"lua_setwarnf(L, f, L) stores L and ud separately; no restrict aliasing",precision_audit,high
lua,lauxlib.c,1152,PRE00-C,FP,addbuff macro arguments are plain variables; no side-effecting args,precision_audit,high
lua,lauxlib.c,1152,PRE01-C,FP,b is a plain pointer variable at call sites; no precedence hazard,precision_audit,high
lua,lauxlib.c,1152,PRE12-C,FP,b is a plain variable at call sites; no multiple-evaluation hazard,precision_audit,high
lua,lauxlib.c,1159,ERR33-C,FP,time(NULL) for randomness seed; failure acceptable (degraded entropy only),precision_audit,high
lua,lauxlib.c,1160,EXP33-C,FP,buff is unsigned int array declared at 1156; addbuff writes to it before loop reads it,precision_audit,high
lua,lauxlib.c,1161,EXP43-C,FP,"addbuff(b,b) copies address of b via memcpy; no restrict aliasing in underlying call",precision_audit,high
lua,lauxlib.c,1164,INT32-C,FP,sizeof(buff) >= BUFSEEDB by construction of BUFSEED macro; no underflow,precision_audit,high
lua,lauxlib.c,1164,EXP05-C,FP,b pointer is char* (non-const); cast is to same type; no const violation,precision_audit,high
lua,lauxlib.c,1167,INT14-C,FP,Intentional seed mixing with bitwise ops on unsigned int; no readability defect,precision_audit,high
lua,lauxlib.c,1167,FIO50-C,FP,res is unsigned int not a FILE stream; sqc misidentified variable type,precision_audit,high
lua,lauxlib.c,1167,FIO50-C,FP,res is unsigned int not a FILE stream; sqc misidentified variable type,precision_audit,high
lua,lauxlib.c,1167,ARR00-C,FP,buff[] filled by addbuff calls before loop reads it; not truly uninitialized,precision_audit,high
lua,lauxlib.c,1187,DCL31-C,FP,lua_atpanic declared in lua.h; sqc missed the include,precision_audit,high
lua,lauxlib.c,1188,EXP43-C,FP,"lua_setwarnf(L, warnfon, L) stores L and ud separately; no restrict aliasing",precision_audit,high
lua,lauxlib.c,1190,DCL30-C,FP,L from lua_newstate is heap-allocated; not a C automatic-storage local,precision_audit,high
lua,lauxlib.c,1194,API00-C,FP,L is required LUALIB_API parameter; caller contract,precision_audit,high
lua,lauxlib.c,1194,DCL15-C,FP,LUALIB_API public symbol declared in lauxlib.h,precision_audit,high
lua,ldo.c,81,DCL13-C,FP,Function pointer signature must match; const cannot be added to lua_State*,precision_audit,high
lua,ldo.c,81,DCL13-C,FP,Function pointer signature must match; const advisory on callback param,precision_audit,high
lua,ldo.c,81,DCL13-C,FP,Function pointer signature must match; const advisory on callback param,precision_audit,high
lua,ldo.c,99,PRE02-C,FP,LUAI_TRY is a statement macro; outer parenthesization would be syntactically wrong,precision_audit,high
lua,ldo.c,105,PRE02-C,FP,LUAI_TRY is a statement macro; outer parenthesization would be syntactically wrong,precision_audit,high
lua,ldo.c,112,API00-C,FP,L is required internal parameter; caller (luaD_throw) contract,precision_audit,high
lua,ldo.c,125,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,125,MEM05-C,FP,luaD_throw recursion is depth-1 (re-throw to main thread); not unbounded,precision_audit,high
lua,ldo.c,125,MSC04-C,FP,luaD_throw direct recursion is bounded depth-1; not a real cycle risk,precision_audit,high
lua,ldo.c,125,MSC37-C,FP,luaD_throw is l_noret; all paths call longjmp/abort; no actual fall-off,precision_audit,high
lua,ldo.c,131,DCL00-C,FP,Advisory const on local variable g; not a defect,precision_audit,high
lua,ldo.c,144,ERR05-C,FP,abort() is documented last-resort for unprotected Lua panic; correct behavior,precision_audit,high
lua,ldo.c,150,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,150,MSC37-C,FP,luaD_throwbaselevel is l_noret; ends in luaD_throw which never returns,precision_audit,high
lua,ldo.c,160,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,160,API00-C,FP,ud is required function parameter; caller contract,precision_audit,high
lua,ldo.c,215,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,215,MSC37-C,FP,luaD_errerr is l_noret; ends in luaD_throw which never returns,precision_audit,high
lua,ldo.c,228,MSC04-C,FP,Indirect recursion cycle through GC/error/stack is bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,228,MSC37-C,FP,luaD_checkminstack always returns int on both branches; no real fall-off,precision_audit,high
lua,ldo.c,330,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,330,API00-C,FP,newsize is checked by lua_assert; integer overflow not a real issue here,precision_audit,high
lua,ldo.c,341,MEM30-C,FP,STRICT_ADDRESS path converts pointers to offsets before realloc; oldstack not dereferenced after free,precision_audit,high
lua,ldo.c,343,MEM30-C,FP,L is the lua_State not the reallocated stack; L is never freed here,precision_audit,high
lua,ldo.c,343,MEM30-C,FP,"correctstack called with oldstack for offset arithmetic, not dereference",precision_audit,high
lua,ldo.c,345,MEM30-C,FP,L is the lua_State not the reallocated stack; never freed here,precision_audit,high
lua,ldo.c,349,MEM30-C,FP,correctstack called with oldstack for pointer-difference arithmetic only,precision_audit,high
lua,ldo.c,361,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,361,MSC04-C,FP,Indirect recursion through error/GC bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,373,INT14-C,FP,Intentional bitshift for stack growth arithmetic (1.5x); standard Lua idiom,precision_audit,high
lua,ldo.c,373,INT13-C,FP,size is positive int; right-shift of positive signed int is well-defined on all Lua targets,precision_audit,high
lua,ldo.c,386,MEM30-C,FP,"luaD_reallocstack does not free L; L is the lua_State pointer, not the stack",precision_audit,high
lua,ldo.c,395,DCL13-C,FP,Advisory const; function signature matches internal usage pattern,precision_audit,high
lua,ldo.c,419,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,430,MEM30-C,FP,"luaD_reallocstack does not free L; L is lua_State pointer, not the stack",precision_audit,high
lua,ldo.c,441,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,478,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,478,API00-C,FP,ci is required non-NULL call info pointer; caller contract,precision_audit,high
lua,ldo.c,497,INT14-C,FP,Intentional bit manipulation on callstatus flags; standard Lua VM idiom,precision_audit,high
lua,ldo.c,503,INT14-C,FP,Intentional pointer arithmetic on StkId; not bitwise/arithmetic confusion,precision_audit,high
lua,ldo.c,511,EXP30-C,FP,ci = ci->previous in if-condition is intentional iteration idiom; well-sequenced,precision_audit,high
lua,ldo.c,511,EXP45-C,FP,Assignment-in-if is intentional iteration; != NULL comparison follows,precision_audit,high
lua,ldo.c,525,MSC04-C,FP,Indirect recursion through VM call cycle bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,535,INT14-C,FP,Intentional bitwise operations on callstatus field; Lua VM idiom,precision_audit,high
lua,ldo.c,537,INT14-C,FP,CIST_CCMT is a bit-field constant; bitwise ops intentional,precision_audit,high
lua,ldo.c,542,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,542,API00-C,FP,wanted is a count parameter; no overflow concern in stack context,precision_audit,high
lua,ldo.c,542,DCL15-C,FP,l_sinline function used internally; DCL15 advisory FP,precision_audit,high
lua,ldo.c,542,DCL19-C,FP,genmoveresults is internal helper; DCL19 advisory FP,precision_audit,high
lua,ldo.c,563,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,563,DCL15-C,FP,l_sinline function used internally; DCL15 advisory FP,precision_audit,high
lua,ldo.c,563,DCL19-C,FP,moveresults is internal helper; DCL19 advisory FP,precision_audit,high
lua,ldo.c,563,MSC04-C,FP,Indirect recursion through luaF_close/callclose bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,607,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,607,API00-C,FP,ci is required non-NULL call info; caller contract,precision_audit,high
lua,ldo.c,607,MSC04-C,FP,Indirect recursion bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,621,PRE00-C,FP,next_ci(L) used with plain variable L; no side-effecting argument,precision_audit,high
lua,ldo.c,621,PRE01-C,FP,L is a plain variable at call sites; no precedence hazard,precision_audit,high
lua,ldo.c,621,PRE12-C,FP,L is a plain variable at call sites; no multiple-evaluation hazard,precision_audit,high
lua,ldo.c,630,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,630,DCL15-C,FP,l_sinline function used internally; DCL15 advisory FP,precision_audit,high
lua,ldo.c,637,DCL30-C,FP,ci points into L->ci chain (heap-allocated CallInfo list); not a C local,precision_audit,high
lua,ldo.c,644,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,644,DCL15-C,FP,l_sinline function used internally; DCL15 advisory FP,precision_audit,high
lua,ldo.c,644,DCL19-C,FP,precallC is internal helper; DCL19 advisory FP,precision_audit,high
lua,ldo.c,644,MSC04-C,FP,Indirect recursion bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,650,INT14-C,FP,Intentional bit-field manipulation on L->nCcalls; Lua VM idiom,precision_audit,high
lua,ldo.c,651,EXP34-C,FP,ci from prepCallInfo always non-NULL (longjmps if CI list extension fails),precision_audit,high
lua,ldo.c,671,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,671,API00-C,FP,ci is required non-NULL call info; caller contract,precision_audit,high
lua,ldo.c,671,API00-C,FP,narg1 is a count parameter; no overflow concern,precision_audit,high
lua,ldo.c,671,API00-C,FP,delta is a small integer offset; no overflow concern,precision_audit,high
lua,ldo.c,671,MSC04-C,FP,Indirect recursion bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,671,MSC37-C,FP,All switch branches either return or fall to final return -1; no real fall-off,precision_audit,high
lua,ldo.c,717,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,717,API00-C,FP,nresults is a count parameter; no overflow concern,precision_audit,high
lua,ldo.c,717,MSC04-C,FP,Indirect recursion bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,717,MSC37-C,FP,All switch branches handled; C/Lua paths return; no real fall-off,precision_audit,high
lua,ldo.c,736,EXP34-C,FP,ci from prepCallInfo always non-NULL (longjmps if CI list extension fails),precision_audit,high
lua,ldo.c,759,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,759,DCL15-C,FP,l_sinline function used internally; DCL15 advisory FP,precision_audit,high
lua,ldo.c,759,DCL19-C,FP,ccall is internal helper; DCL19 advisory FP,precision_audit,high
lua,ldo.c,759,MSC04-C,FP,Indirect recursion bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,767,EXP34-C,FP,ci from luaD_precall may be NULL (C function path); code checks != NULL first,precision_audit,high
lua,ldo.c,777,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,777,MSC04-C,FP,Indirect recursion bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,785,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,785,MSC04-C,FP,Indirect recursion bounded by LUAI_MAXCCALLS,precision_audit,high
lua,ldo.c,886,DCL13-C,FP,Advisory const; function pointer type must match callback signature,precision_audit,high
lua,ldo.c,890,DCL30-C,FP,ci points into L->ci chain (heap-allocated CallInfo list); not a C local,precision_audit,high
lua,ldo.c,918,DCL13-C,FP,Advisory const; ud is a void* callback data pointer,precision_audit,high
lua,ldo.c,968,API00-C,FP,from is optional (NULL allowed; handled at line 980),precision_audit,high
lua,ldo.c,968,API00-C,FP,nresults is output pointer; NULL would crash but caller contract requires non-NULL,precision_audit,high
lua,ldo.c,968,API00-C,FP,nargs is a count parameter; validated by api_checkpop,precision_audit,high
lua,ldo.c,968,DCL15-C,FP,LUA_API public symbol declared in lua.h,precision_audit,high
lua,ldo.c,1003,API00-C,FP,L is required LUA_API parameter; caller contract,precision_audit,high
lua,ldo.c,1003,DCL15-C,FP,LUA_API public symbol declared in lua.h,precision_audit,high
lua,ldo.c,1008,API00-C,FP,L is required LUA_API parameter; caller contract,precision_audit,high
lua,ldo.c,1008,DCL15-C,FP,LUA_API public symbol declared in lua.h,precision_audit,high
lua,ldo.c,1051,DCL13-C,FP,Advisory const; ud is a void* callback data pointer,precision_audit,high
lua,ldo.c,1061,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,1061,MSC37-C,FP,luaD_closeprotected has infinite for loop that returns on LUA_OK; no fall-off,precision_audit,high
lua,ldo.c,1083,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,1083,API00-C,FP,u is required function parameter; caller contract,precision_audit,high
lua,ldo.c,1129,DCL13-C,FP,Advisory const; ud is a void* callback data pointer,precision_audit,high
lua,ldo.c,1137,MEM31-C,FP,anchor is GC-managed via Lua stack; deliberately not freed individually,precision_audit,high
lua,ldo.c,1154,EXP34-C,FP,cl from luaU_undump/luaY_parser either returns valid closure or longjmps,precision_audit,high
lua,ldo.c,1164,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,1164,API00-C,FP,anchor is required non-NULL Table pointer; caller contract,precision_audit,high
lua,ldo.c,1164,API00-C,FP,obj is required non-NULL GCObject pointer; caller contract,precision_audit,high
lua,ldo.c,1166,EXP30-C,FP,luaH_set args evaluate L->top.p-1 twice as rvalue reads; no unsequenced modification,precision_audit,high
lua,ldo.c,1173,API00-C,FP,L is required internal parameter; caller contract,precision_audit,high
lua,ldo.c,1173,API00-C,FP,z is required ZIO pointer; caller contract,precision_audit,high
lua,ldo.c,1173,API00-C,FP,name is required chunk name; caller contract,precision_audit,high
lua,ldo.c,1173,API00-C,FP,mode is optional (NULL handled: defaults to 'bt' in f_parser),precision_audit,high
lua,ldo.c,1173,DCL13-C,FP,Advisory const on ZIO pointer; function signature must match ZIO API,precision_audit,high
lua,ldblib.c,37,EXP20-C,FP,lua_checkstack used as bool guard is standard C idiom; result is int-as-bool,precision_audit,high
lua,ldblib.c,153,DCL00-C,FP,lua_State* cannot be const-qualified per the Lua API convention,precision_audit,high
lua,ldblib.c,154,EXP33-C,FP,arg initialized by getthread() out-param before this line,precision_audit,high
lua,ldblib.c,154,INT32-C,FP,arg is 0 or 1 from getthread(); adding 2 cannot overflow int,precision_audit,high
lua,ldblib.c,156,INT32-C,FP,"arg is 0 or 1; arg+2 ≤ 3, no overflow",precision_audit,high
lua,ldblib.c,157,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,159,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,163,EXP20-C,FP,lua_getstack int-as-bool is standard C idiom for this API,precision_audit,high
lua,ldblib.c,163,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,169,INT32-C,FP,"arg is 0 or 1; arg+2 ≤ 3, no overflow",precision_audit,high
lua,ldblib.c,171,EXP34-C,FP,options from luaL_optstring never returns NULL (has default value),precision_audit,high
lua,ldblib.c,173,STR30-C,FP,lua_setfield takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,174,STR30-C,FP,settabss takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,175,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,176,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,177,STR30-C,FP,settabss takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,180,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,182,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,183,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,184,STR30-C,FP,settabsb takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,187,STR30-C,FP,settabss takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,188,STR30-C,FP,settabss takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,191,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,192,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,195,STR30-C,FP,settabsb takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,196,STR30-C,FP,settabsi takes const char* key; string literal is safe,precision_audit,high
lua,ldblib.c,208,DCL00-C,FP,lua_State* cannot be const-qualified per the Lua API convention,precision_audit,high
lua,ldblib.c,209,EXP33-C,FP,arg initialized by getthread() out-param on line 208,precision_audit,high
lua,ldblib.c,209,INT32-C,FP,"arg is 0 or 1; arg+2 ≤ 3, no overflow",precision_audit,high
lua,ldblib.c,210,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,211,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,218,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,220,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,240,DCL00-C,FP,lua_State* cannot be const-qualified per Lua API convention,precision_audit,high
lua,ldblib.c,242,EXP33-C,FP,arg initialized by getthread() out-param on line 240,precision_audit,high
lua,ldblib.c,242,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,243,INT32-C,FP,"arg is 0 or 1; arg+2 ≤ 3, no overflow",precision_audit,high
lua,ldblib.c,245,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,246,INT32-C,FP,"arg is 0 or 1; arg+3 ≤ 4, no overflow",precision_audit,high
lua,ldblib.c,247,INT32-C,FP,"arg is 0 or 1; arg+3 ≤ 4, no overflow",precision_audit,high
lua,ldblib.c,297,DCL30-C,FP,"returns void* upvalue ID (heap address), not address of local variable",precision_audit,high
lua,ldblib.c,317,EXP33-C,FP,n1 initialized by checkupval() out-param call on line 313,precision_audit,high
lua,ldblib.c,317,EXP33-C,FP,n2 initialized by checkupval() out-param call on line 314,precision_audit,high
lua,ldblib.c,327,ARR02-C,FP,implicit-bounds array with full initializer; style advisory only,precision_audit,high
lua,ldblib.c,360,INT13-C,FP,bitwise AND on positive hook-mask flags; no signed-operand hazard,precision_audit,high
lua,ldblib.c,361,INT13-C,FP,bitwise AND on positive hook-mask flags; no signed-operand hazard,precision_audit,high
lua,ldblib.c,362,INT13-C,FP,bitwise AND on positive hook-mask flags; no signed-operand hazard,precision_audit,high
lua,ldblib.c,371,DCL00-C,FP,lua_State* cannot be const-qualified per Lua API convention,precision_audit,high
lua,ldblib.c,372,EXP33-C,FP,arg initialized by getthread() out-param on line 371,precision_audit,high
lua,ldblib.c,372,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,373,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,377,INT32-C,FP,"arg is 0 or 1; arg+2 ≤ 3, no overflow",precision_audit,high
lua,ldblib.c,378,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,379,INT32-C,FP,"arg is 0 or 1; arg+3 ≤ 4, no overflow",precision_audit,high
lua,ldblib.c,385,STR30-C,FP,lua_setfield takes const char* key; string literal safe,precision_audit,high
lua,ldblib.c,391,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,400,DCL00-C,FP,lua_State* cannot be const-qualified per Lua API convention,precision_audit,high
lua,ldblib.c,423,MSC37-C,FP,infinite for(;;) with return 0 inside; function cannot fall off end,precision_audit,high
lua,ldblib.c,427,FIO20-C,FP,debug REPL; buffer truncation advisory in trusted-only debug path,precision_audit,high
lua,ldblib.c,428,EXP33-C,FP,buffer is stack array; fgets writes to it before any read use,precision_audit,high
lua,ldblib.c,440,DCL00-C,FP,lua_State* cannot be const-qualified per Lua API convention,precision_audit,high
lua,ldblib.c,441,EXP33-C,FP,arg initialized by getthread() out-param on line 440,precision_audit,high
lua,ldblib.c,441,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,442,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,443,INT32-C,FP,"arg is 0 or 1; arg+1 ≤ 2, no overflow",precision_audit,high
lua,ldblib.c,445,INT32-C,FP,"arg is 0 or 1; arg+2 ≤ 3, no overflow",precision_audit,high
lua,ldblib.c,452,ARR02-C,FP,implicit-bounds array with full initializer; style advisory only,precision_audit,high
lua,ldblib.c,473,API00-C,FP,L guaranteed non-NULL by Lua module loader convention,precision_audit,high
lua,ldblib.c,473,DCL15-C,FP,LUAMOD_API requires external linkage; static breaks module ABI,precision_audit,high
lua,lopcodes.h,128,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,128,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,135,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,135,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,141,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,141,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,143,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,143,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,149,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,149,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,151,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,151,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,161,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,161,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,164,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,164,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,167,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,167,PRE02-C,FP,Macro used in statement or rhs context; outer parens not needed for safety,precision_audit,high
lua,lopcodes.h,167,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,171,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,171,PRE02-C,FP,Macro used in statement or rhs context; outer parens not needed for safety,precision_audit,high
lua,lopcodes.h,171,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,425,DCL31-C,FP,LUAI_DDEC is a portability macro for extern array; not implicit-int,precision_audit,high
lua,lopcodes.h,427,PRE01-C,FP,Param 'm' used in array-index context; no operator precedence hazard,precision_audit,high
lua,lopcodes.h,428,PRE01-C,FP,Param 'm' used in array-index context; no operator precedence hazard,precision_audit,high
lua,lopcodes.h,429,PRE01-C,FP,Param 'm' used in array-index context; no operator precedence hazard,precision_audit,high
lua,lopcodes.h,430,PRE01-C,FP,Param 'm' used in array-index context; no operator precedence hazard,precision_audit,high
lua,lopcodes.h,436,PRE00-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,lopcodes.h,436,PRE12-C,FP,Opcode macro params are always plain variables at call sites; no side effects,precision_audit,high
lua,loslib.c,115,PRE00-C,FP,lua_tmpnam args are plain variables at its one call site,precision_audit,high
lua,loslib.c,115,PRE01-C,FP,lua_tmpnam param 'e' used in simple assignment; no precedence hazard,precision_audit,high
lua,loslib.c,115,PRE02-C,FP,lua_tmpnam used in statement context; outer parens not needed,precision_audit,high
lua,loslib.c,115,PRE10-C,FP,lua_tmpnam body in braces used only as sole statement; no if-else hazard,precision_audit,high
lua,loslib.c,115,PRE12-C,FP,lua_tmpnam args are plain variables; no multiple-evaluation side effects,precision_audit,high
lua,loslib.c,125,PRE01-C,FP,ISO C lua_tmpnam; param 'e' is simple lvalue assignment,precision_audit,high
lua,loslib.c,125,PRE10-C,FP,ISO C lua_tmpnam in braces; used as sole statement only,precision_audit,high
lua,loslib.c,168,FIO10-C,FP,rename() return value checked via luaL_fileresult; error propagated to Lua,precision_audit,high
lua,loslib.c,184,CON34-C,FP,getenv result immediately passed to lua_pushstring; no concurrent Lua state access,precision_audit,high
lua,loslib.c,233,DCL13-C,FP,setallfields reads tm struct; const annotation is advisory only,precision_audit,high
lua,loslib.c,234,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,235,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,236,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,237,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,238,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,239,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,240,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,241,STR30-C,FP,setfield takes const char* key; string literal is safe,precision_audit,high
lua,loslib.c,242,STR30-C,FP,setboolfield takes const char* key; string literal safe,precision_audit,high
lua,loslib.c,256,STR34-C,FP,key is const char* pointer not a char value; no sign-extension occurs,precision_audit,high
lua,loslib.c,258,EXP33-C,FP,isnum is out-param to lua_tointegerx; set by that call,precision_audit,high
lua,loslib.c,275,API05-C,FP,C99 conformant-array advisory; Lua uses plain pointer convention,precision_audit,high
lua,loslib.c,276,API05-C,FP,C99 conformant-array advisory; Lua uses plain pointer convention,precision_audit,high
lua,loslib.c,283,STR31-C,FP,buff[oplen]='\0' explicitly adds null terminator after memcpy; safe,precision_audit,high
lua,loslib.c,309,EXP33-C,FP,slen is out-param to luaL_optlstring; initialized by that call,precision_audit,high
lua,loslib.c,311,EXP34-C,FP,s from luaL_optlstring never NULL; stm NULL-checked at line 317,precision_audit,high
lua,loslib.c,338,ERR33-C,FP,"strftime returns 0 on failure; luaL_addsize(b,0) handles gracefully",precision_audit,high
lua,loslib.c,363,ERR33-C,FP,mktime result checked: t==(time_t)(-1) tested on line 366,precision_audit,high
lua,loslib.c,385,ARR02-C,FP,implicit-bounds array with full initializer; style advisory only,precision_audit,high
lua,loslib.c,387,ARR02-C,FP,implicit-bounds array with full initializer; style advisory only,precision_audit,high
lua,loslib.c,390,STR34-C,FP,catnames is const char* array; no char-to-integer widening here,precision_audit,high
lua,loslib.c,391,CON33-C,FP,setlocale thread-safety advisory; Lua states are not shared between threads,precision_audit,high
lua,loslib.c,391,CON34-C,FP,setlocale result immediately used; no concurrent access in single-state Lua,precision_audit,high
lua,loslib.c,404,ERR05-C,FP,os_exit() calls exit() intentionally; this is the Lua os.exit purpose,precision_audit,high
lua,loslib.c,409,ARR02-C,FP,implicit-bounds array with full initializer; style advisory only,precision_audit,high
lua,loslib.c,428,API00-C,FP,L guaranteed non-NULL by Lua module loader convention,precision_audit,high
lua,loslib.c,428,DCL15-C,FP,LUAMOD_API requires external linkage; static breaks module ABI,precision_audit,high
lua,lstate.h,158,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,158,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,158,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,263,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,263,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,263,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,266,INT30-C,FP,st bounded to 3 bits by assertion; shift by 12 gives ≤15 bits in uint32,precision_audit,high
lua,lstate.h,276,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,276,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,375,PRE01-C,FP,Param used in field-member-access context; no operator precedence hazard,precision_audit,high
lua,lstate.h,382,PRE01-C,FP,Param used in field-member-access context; no operator precedence hazard,precision_audit,high
lua,lstate.h,414,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,414,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,414,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,416,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,416,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,416,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,417,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,417,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,417,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,418,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,418,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,418,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,419,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,419,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,419,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,421,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,421,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,421,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,422,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,422,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,422,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,423,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,423,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,423,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,424,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,424,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,424,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,430,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,430,PRE02-C,FP,Macro used in assignment/expression where precedence issues cannot arise,precision_audit,high
lua,lstate.h,430,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lstate.h,435,PRE00-C,FP,Header macro params are plain variables at all call sites; no side effects,precision_audit,high
lua,lstate.h,435,PRE12-C,FP,Call sites pass simple variables; multiple evaluation is harmless,precision_audit,high
lua,lua.h,177,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,178,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,179,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,180,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,181,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,182,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,183,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,185,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,192,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,193,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,194,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,195,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,196,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,197,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,200,API02-C,FP,"int*/size_t* params are output scalars, not array buffers needing size",precision_audit,high
lua,lua.h,200,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,201,API02-C,FP,"int*/size_t* params are output scalars, not array buffers needing size",precision_audit,high
lua,lua.h,202,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,203,API02-C,FP,"int*/size_t* params are output scalars, not array buffers needing size",precision_audit,high
lua,lua.h,205,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,230,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,236,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,237,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,244,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,245,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,246,API05-C,FP,C99 conformant-array advisory; Lua public API uses plain pointer style,precision_audit,high
lua,lua.h,248,API05-C,FP,C99 conformant-array advisory; Lua public API uses plain pointer style,precision_audit,high
lua,lua.h,248,API05-C,FP,C99 conformant-array advisory; Lua public API uses plain pointer style,precision_audit,high
lua,lua.h,252,EXP37-C,FP,stdarg.h included at top of file; variadic declaration is fully valid,precision_audit,high
lua,lua.h,253,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,254,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,255,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,256,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,262,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,263,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,264,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,265,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,266,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,267,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,268,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,270,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,272,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,273,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,279,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,280,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,281,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,282,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,283,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,284,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,285,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,286,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,287,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,293,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,297,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,301,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,304,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,310,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,312,API02-C,FP,"int*/size_t* params are output scalars, not array buffers needing size",precision_audit,high
lua,lua.h,312,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,314,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,315,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,323,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,324,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,360,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,360,EXP37-C,FP,stdarg.h included at top of file; variadic declaration is fully valid,precision_audit,high
lua,lua.h,367,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,369,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,371,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,372,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,375,API02-C,FP,"int*/size_t* params are output scalars, not array buffers needing size",precision_audit,high
lua,lua.h,379,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,381,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,382,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,394,API03-C,FP,Macro wraps function with extra NULL arg; does not reorder parameters,precision_audit,high
lua,lua.h,400,PRE00-C,FP,Macro param L is always a plain lua_State* variable; no side-effect risk,precision_audit,high
lua,lua.h,400,PRE12-C,FP,Macro param L is always a plain lua_State* variable; no side-effect risk,precision_audit,high
lua,lua.h,423,PRE00-C,FP,Macro param L is always a plain lua_State* variable; no side-effect risk,precision_audit,high
lua,lua.h,423,PRE12-C,FP,Macro param L is always a plain lua_State* variable; no side-effect risk,precision_audit,high
lua,lua.h,425,PRE00-C,FP,Macro param L is always a plain lua_State* variable; no side-effect risk,precision_audit,high
lua,lua.h,425,PRE12-C,FP,Macro param L is always a plain lua_State* variable; no side-effect risk,precision_audit,high
lua,lua.h,436,API03-C,FP,Macro wraps function with extra NULL arg; does not reorder parameters,precision_audit,high
lua,lua.h,470,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,471,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,478,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,481,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,483,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,484,DCL40-C,FP,Parenthesized LUA_API function-name form is one declaration; not incompatible redecl,precision_audit,high
lua,lua.h,504,API01-C,FP,Struct field order does not create buffer overflow; sqc misfire,precision_audit,high
lua,llimits.h,18,PRE02-C,FP,l_numbits(t) is cast-only expression; no operator-precedence hazard in usage,precision_audit,high
lua,llimits.h,37,PRE02-C,FP,MAX_LMEM macro body is safe; cast-heavy expression with no precedence ambiguity in practice,precision_audit,high
lua,llimits.h,65,PRE00-C,FP,ispow2(x) evaluates x twice but always called with pure side-effect-free expressions,precision_audit,high
lua,llimits.h,65,PRE12-C,FP,ispow2 called only with pure expressions; multiple-evaluation is benign,precision_audit,high
lua,llimits.h,90,PRE02-C,FP,point2uint macro is cast-expression; no precedence issue in typical use,precision_audit,high
lua,llimits.h,106,PRE01-C,FP,"LUAI_DDEC macro; 'dec' is used directly as a declaration suffix, not in expression context",precision_audit,high
lua,llimits.h,257,PRE00-C,FP,"luai_nummod evaluates b twice but all call-sites use simple variables, not side-effecting expressions",precision_audit,high
lua,llimits.h,257,PRE01-C,FP,"L parameter used only as (void)L; statement-form use, no precedence issue",precision_audit,high
lua,llimits.h,257,PRE02-C,FP,luai_nummod body is a compound statement block; wrapping in parens not applicable/meaningful,precision_audit,high
lua,llimits.h,257,PRE10-C,FP,luai_nummod always used as a standalone statement (not in if/else without braces) in Lua codebase,precision_audit,high
lua,llimits.h,257,PRE12-C,FP,b evaluated twice in luai_nummod; all call-sites use simple variables,precision_audit,high
lua,llimits.h,264,PRE00-C,FP,luai_numpow evaluates b twice but call-sites use pure expressions,precision_audit,high
lua,llimits.h,264,PRE01-C,FP,b parameter in luai_numpow used in comparison; no precedence hazard at call sites,precision_audit,high
lua,llimits.h,264,PRE12-C,FP,luai_numpow evaluates a and b twice; call-sites use simple variables,precision_audit,high
lua,llimits.h,279,PRE00-C,FP,"luai_numisnan evaluates a twice; expands to !luai_numeq(a,a) — intentional identity-check idiom",precision_audit,high
lua,llimits.h,279,PRE12-C,FP,NaN-check idiom requires evaluating a twice; not a defect,precision_audit,high
lua,llimits.h,293,PRE00-C,FP,lua_numbertointeger evaluates n twice; call-sites use simple float variables,precision_audit,high
lua,llimits.h,293,PRE12-C,FP,lua_numbertointeger evaluates n twice; all call-sites use simple variables,precision_audit,high
lua,llimits.h,322,PRE01-C,FP,"LUAI_DDEC macro; dec is used as declaration, not as expression operand",precision_audit,high
lua,lstate.c,61,API00-C,FP,g is internal parameter; never NULL by contract; cross-TU internal API,precision_audit,high
lua,lstate.c,76,MEM30-C,FP,L is not freed before line 76; sqc misidentifies ci-link manipulation as use-after-free,precision_audit,high
lua,lstate.c,79,MEM30-C,FP,L is not freed; this is luaE_extendCI linking new CallInfo into L's list,precision_audit,high
lua,lstate.c,79,MEM30-C,FP,Duplicate finding; same non-free of L,precision_audit,high
lua,lstate.c,80,MEM30-C,FP,L is not freed; legitimate member access in luaE_extendCI,precision_audit,high
lua,lstate.c,81,MEM30-C,FP,L is not freed; sqc false positive on CallInfo list linking,precision_audit,high
lua,lstate.c,82,MEM30-C,FP,ci is not freed; ci->next access is on newly allocated ci,precision_audit,high
lua,lstate.c,85,MEM30-C,FP,L is not freed; legitimate L->nci increment,precision_audit,high
lua,lstate.c,86,DCL30-C,FP,ci is heap-allocated via luaM_reallocvector; not a stack local,precision_audit,high
lua,lstate.c,115,EXP34-C,FP,next checked for NULL at line 82 before use; safe access pattern,precision_audit,high
lua,lstate.c,136,MSC04-C,FP,Indirect recursion via error handler is intentional Lua design; not a defect,precision_audit,high
lua,lstate.c,144,API00-C,FP,Internal function; L guaranteed non-NULL by Lua calling convention,precision_audit,high
lua,lstate.c,182,MEM30-C,FP,L is not freed; freestack accesses L fields legitimately,precision_audit,high
lua,lstate.c,184,MEM30-C,FP,L is not freed; sqc false positive on freestack internals,precision_audit,high
lua,lstate.c,184,MEM30-C,FP,Duplicate finding; L not freed in freestack,precision_audit,high
lua,lstate.c,194,MEM31-C,FP,registry is GC-managed; stored in g->l_registry; freed by GC at close_state,precision_audit,high
lua,lstate.c,201,EXP43-C,FP,setthvalue is a macro writing to &aux; no restrict aliasing; sqc mis-parse,precision_audit,high
lua,lstate.c,213,DCL00-C,FP,Advisory const-qualification; correct but not a defect,precision_audit,low
lua,lstate.c,215,EXP43-C,FP,"stack_init(L,L) passes L as both params; function uses them differently; no restrict involved",precision_audit,high
lua,lstate.c,230,DCL13-C,FP,Advisory const-pointer parameter; not a defect,precision_audit,low
lua,lstate.c,251,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstate.c,261,DCL00-C,FP,Advisory const-qualification,precision_audit,low
lua,lstate.c,269,MEM30-C,FP,L is not freed before line 269; close_state accesses G(L)->strt legitimately,precision_audit,high
lua,lstate.c,271,MEM30-C,FP,L not freed; freestack(L) call is legitimate,precision_audit,high
lua,lstate.c,271,MEM30-C,FP,L not freed; duplicate finding in close_state,precision_audit,high
lua,lstate.c,272,MEM30-C,FP,"Not double-free; (*g->frealloc)(...) frees the global_State block, not L twice",precision_audit,high
lua,lstate.c,278,API00-C,FP,Public LUA_API; NULL check would require error return; handled by lua_lock/unlock contract,precision_audit,high
lua,lstate.c,279,DCL00-C,FP,Advisory const-qualification,precision_audit,low
lua,lstate.c,296,EXP30-C,FP,memcpy args are independent expressions; no sequencing issue,precision_audit,high
lua,lstate.c,301,DCL30-C,FP,L1 is GC-heap-allocated (luaC_newobjdt); not a stack local,precision_audit,high
lua,lstate.c,310,MEM30-C,FP,"Not double-free; luaM_free(L,l) frees LX wrapper; L1 is a field of LX, not separately freed",precision_audit,high
lua,lstate.c,315,API00-C,FP,Internal function; L guaranteed non-NULL,precision_audit,high
lua,lstate.c,321,EXP43-C,FP,luaD_seterrorobj params are distinct stack slots; no overlap,precision_audit,high
lua,lstate.c,324,MEM30-C,FP,L not freed in luaE_resetthread; legitimate stack pointer arithmetic,precision_audit,high
lua,lstate.c,324,MEM30-C,FP,Duplicate; L not freed,precision_audit,high
lua,lstate.c,324,MEM30-C,FP,Duplicate; L not freed,precision_audit,high
lua,lstate.c,324,MEM30-C,FP,Duplicate; L not freed,precision_audit,high
lua,lstate.c,324,MEM30-C,FP,Duplicate; L not freed,precision_audit,high
lua,lstate.c,324,MEM30-C,FP,Sixth duplicate MEM30-C finding on luaE_resetthread line 324; L not freed,precision_audit,high
lua,lstate.c,329,API00-C,FP,Public LUA_API; internal contract guarantees L non-NULL,precision_audit,high
lua,lstate.c,329,API00-C,FP,'from' can legitimately be NULL (lua_closethread documents this),precision_audit,high
lua,lstate.c,329,DCL15-C,FP,lua_closethread is a public LUA_API symbol; must have external linkage,precision_audit,high
lua,lstate.c,341,API00-C,FP,"lua_newstate public API; ud is documented as user-supplied opaque pointer, may be NULL",precision_audit,high
lua,lstate.c,344,DCL00-C,FP,Advisory const-qualification,precision_audit,low
lua,lstate.c,344,WIN04-C,FP,WIN04-C is Windows-only; Lua targets POSIX and multiple platforms,precision_audit,high
lua,lstate.c,392,DCL30-C,FP,L is &g->mainth.l — a field of heap-allocated global_State; not a stack local,precision_audit,high
lua,lstate.c,396,API00-C,FP,Public LUA_API lua_close; NULL check not appropriate for public close function,precision_audit,high
lua,lstate.c,396,DCL15-C,FP,lua_close is a public LUA_API; must have external linkage,precision_audit,high
lua,lstate.c,403,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstate.c,406,DCL31-C,FP,"wf is a local variable (lua_WarnFunction wf = G(L)->warnf), not an undeclared function",precision_audit,high
lua,lstate.c,413,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstate.c,413,API00-C,FP,where is internal parameter; always non-NULL in Lua error subsystem,precision_audit,high
lua,lstring.c,44,API00-C,FP,luaS_eqstr is internal; a and b are always non-NULL GC string objects,precision_audit,high
lua,lstring.c,44,API00-C,FP,b always non-NULL GC string object,precision_audit,high
lua,lstring.c,48,EXP33-C,FP,len1 and len2 initialized by getlstr macro (output-param address pass); not uninitialized use,precision_audit,high
lua,lstring.c,48,EXP33-C,FP,len2 initialized by getlstr macro; not uninitialized use,precision_audit,high
lua,lstring.c,53,API05-C,FP,Conformant-array-parameter is C99 advisory; Lua uses portable C89-compatible style,precision_audit,high
lua,lstring.c,54,DCL00-C,FP,Advisory const-qualification; h is modified via ^=,precision_audit,low
lua,lstring.c,54,INT14-C,FP,Mixing bitwise and arithmetic on unsigned hash is standard hash function idiom,precision_audit,high
lua,lstring.c,56,INT14-C,FP,Hash function intentionally mixes shifts and XOR with addition,precision_audit,high
lua,lstring.c,56,FIO50-C,FP,"h is an unsigned int hash variable, not a FILE stream; completely wrong rule application",precision_audit,high
lua,lstring.c,56,FIO50-C,FP,"Duplicate FIO50-C; h is an integer, not a file stream",precision_audit,high
lua,lstring.c,61,API00-C,FP,Internal function; ts always non-NULL,precision_audit,high
lua,lstring.c,81,DCL00-C,FP,Advisory; h is assigned from ts->hash and then returned,precision_audit,low
lua,lstring.c,95,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstring.c,120,API00-C,FP,Internal function; g always non-NULL,precision_audit,high
lua,lstring.c,133,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstring.c,134,DCL00-C,FP,Advisory; g is used for multiple field accesses,precision_audit,low
lua,lstring.c,149,API00-C,FP,len is size_t; no overflow in switch/offsetof computation; internal function,precision_audit,high
lua,lstring.c,175,DCL30-C,FP,ts is returned from createstrobj which returns a GC-heap pointer; not a stack local,precision_audit,high
lua,lstring.c,179,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstring.c,182,EXP34-C,FP,"ts from createstrobj/luaC_newobj; luaC_newobj raises LUA_ERRMEM via longjmp, never returns NULL",precision_audit,high
lua,lstring.c,184,EXP08-C,FP,cast_charp(ts) + offsetof(...) is standard Lua string layout idiom for flexible string storage,precision_audit,high
lua,lstring.c,186,DCL30-C,FP,ts is heap-allocated GC object; not a stack local,precision_audit,high
lua,lstring.c,190,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstring.c,190,API00-C,FP,Internal function; ts always non-NULL,precision_audit,high
lua,lstring.c,190,DCL13-C,FP,Advisory const-pointer; ts->u.hnext is traversed to find/remove entry,precision_audit,low
lua,lstring.c,192,EXP40-C,FP,No const objects involved; p is TString** traversing a mutable linked list,precision_audit,high
lua,lstring.c,200,MSC04-C,FP,growstrtab indirect recursion through emergency GC is intentional Lua design; not a defect,precision_audit,high
lua,lstring.c,200,DCL13-C,FP,Advisory const-pointer parameter,precision_audit,low
lua,lstring.c,214,MSC04-C,FP,internshrstr indirect recursion via emergency GC is intentional Lua design,precision_audit,high
lua,lstring.c,214,API05-C,FP,Conformant-array-parameter advisory not applicable to Lua's portable C style,precision_audit,high
lua,lstring.c,216,DCL00-C,FP,Advisory; g used for multiple fields,precision_audit,low
lua,lstring.c,218,DCL00-C,FP,"Advisory; h is the hash result, used as key for bucket lookup",precision_audit,low
lua,lstring.c,218,STR34-C,FP,str[l-1] is immediately cast via cast_byte() to lu_byte (unsigned); no sign extension,precision_audit,high
lua,lstring.c,219,EXP40-C,FP,list points into mutable hash table; no const objects are modified through it,precision_audit,high
lua,lstring.c,223,ARR38-C,FP,memcmp size is l*sizeof(char); both strings have length l (checked at line 222); safe,precision_audit,high
lua,lstring.c,227,DCL30-C,FP,ts is GC-heap-allocated via createstrobj; not a stack local,precision_audit,high
lua,lstring.c,236,EXP34-C,FP,ts from createstrobj/luaC_newobj; never returns NULL (longjmp on OOM),precision_audit,high
lua,lstring.c,238,ARR38-C,FP,memcpy copies l bytes into ts which was allocated with sizestrshr(l); exact fit,precision_audit,high
lua,lstring.c,240,DCL30-C,FP,ts is heap-allocated; sqc incorrectly identifies it as stack local,precision_audit,high
lua,lstring.c,242,DCL30-C,FP,ts is heap-allocated GC object; not a stack local,precision_audit,high
lua,lstring.c,249,MSC04-C,FP,luaS_newlstr indirect recursion via emergency GC is intentional Lua design,precision_audit,high
lua,lstring.c,249,API05-C,FP,Conformant-array-parameter advisory not applicable to Lua's portable C style,precision_audit,high
lua,lstring.c,257,ARR38-C,FP,memcpy copies l bytes into getlngstr(ts) which was allocated with size l+1; safe,precision_audit,high
lua,lstring.c,257,EXP43-C,FP,Source is external str param; dest is getlngstr(ts) inside newly allocated object; no overlap,precision_audit,high
lua,lstring.c,269,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstring.c,269,API00-C,FP,str always non-NULL (caller passes C string literal or validated pointer),precision_audit,high
lua,lstring.c,269,MSC04-C,FP,luaS_new indirect recursion via emergency GC is intentional Lua design,precision_audit,high
lua,lstring.c,270,STR34-C,FP,str[0] passed to point2uint which casts through cast_uint; sign extension harmless in hash,precision_audit,high
lua,lstring.c,270,INT10-C,FP,Modulo is on unsigned int (point2uint result) % STRCACHE_N; no signed operands,precision_audit,high
lua,lstring.c,286,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,lstring.c,299,DCL30-C,FP,u is heap-allocated GC object via luaC_newobj; not a stack local,precision_audit,high
lua,lstring.c,311,DCL13-C,FP,Advisory const-pointer parameter,precision_audit,low
lua,lstring.c,318,API00-C,FP,s may be NULL only for LSTRMEM kind; handled by falloc path,precision_audit,high
lua,lstring.c,318,API00-C,FP,"len is caller-controlled size_t; no overflow in luaS_sizelngstr(0,kind)",precision_audit,high
lua,lstring.c,319,API05-C,FP,Conformant-array-parameter advisory not applicable,precision_audit,high
lua,lstring.c,319,API05-C,FP,Conformant-array-parameter advisory not applicable,precision_audit,high
lua,lstring.c,344,API00-C,FP,Internal function; ts always non-NULL,precision_audit,high
lua,lstring.c,344,MSC04-C,FP,luaS_normstr indirect recursion via emergency GC is intentional Lua design,precision_audit,high
lua,ltablib.c,34,PRE00-C,FP,aux_getn evaluates L twice; all call-sites pass a plain lua_State* variable,precision_audit,high
lua,ltablib.c,34,PRE12-C,FP,"L evaluated twice in aux_getn; all call-sites use simple variable, not side-effecting expression",precision_audit,high
lua,ltablib.c,69,EXP30-C,FP,tcreate calls luaL_argcheck twice with independent args; no sequencing issue,precision_audit,high
lua,ltablib.c,76,DCL00-C,FP,Advisory const-qualification; e is modified at line 77,precision_audit,low
lua,ltablib.c,87,EXP33-C,FP,pos is assigned in every switch case (case 2 and case 3) before use at line 99,precision_audit,high
lua,ltablib.c,130,DCL00-C,FP,Advisory; e is used as loop bound and not modified after init,precision_audit,low
lua,ltablib.c,179,EXP33-C,FP,lsep is initialized by luaL_optlstring output parameter at line 173; not uninitialized,precision_audit,high
lua,ltablib.c,202,STR30-C,FP,lua_setfield takes const char* key; string literal is not modified,precision_audit,high
lua,ltablib.c,211,DCL00-C,FP,Advisory; e serves as loop bound in tunpack,precision_audit,low
lua,ltablib.c,214,EXP30-C,FP,tunpack: n is incremented in lua_checkstack arg; n is not read again in same expression,precision_audit,high
lua,ltablib.c,215,EXP30-C,FP,Duplicate finding; ++n in lua_checkstack call is well-defined single expression,precision_audit,high
lua,ltablib.c,215,EXP20-C,FP,lua_checkstack return is tested as boolean (0=failure); standard Lua API usage,precision_audit,high
lua,ltablib.c,297,MSC37-C,FP,partition() always returns via the 'return i' path or luaL_error (noreturn); no fall-through,precision_audit,high
lua,ltablib.c,335,INT14-C,FP,Mixing bitwise XOR and modulo in pivot randomization is intentional,precision_audit,high
lua,ltablib.c,335,INT33-C,FP,"choosePivot only called when up-lo >= RANLIMIT(100), so r4=(up-lo)/4 >= 25; r4*2 never zero",precision_audit,high
lua,ltablib.c,344,MEM05-C,FP,auxsort is bounded recursion (O(log n) depth via smaller-half call); not unbounded,precision_audit,high
lua,ltablib.c,412,ARR02-C,FP,Sentinel-terminated initializer with implicit size is standard C idiom for function tables,precision_audit,low
lua,ltablib.c,425,API00-C,FP,Public LUAMOD_API; L is always non-NULL from the module loader,precision_audit,high
lua,ltablib.c,425,DCL15-C,FP,luaopen_table is a public LUAMOD_API; must have external linkage for dynamic linking,precision_audit,high
lua,ltm.c,1,MEM31-C,FP,tmname strings are GC-managed with luaC_fix; freed by GC at interpreter close,precision_audit,high
lua,ltm.c,30,DCL15-C,FP,luaT_typenames_ is declared LUAI_DDEF; used externally via LUAI_DDEC in lobject.h,precision_audit,high
lua,ltm.c,30,DCL19-C,FP,Advisory scope reduction; luaT_typenames_ is intentionally file-scope for cross-TU access,precision_audit,low
lua,ltm.c,38,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,39,ARR02-C,FP,Sentinel-terminated local array with implicit bounds is standard C idiom,precision_audit,low
lua,ltm.c,50,MEM31-C,FP,tmname[i] is GC-managed string; luaC_fix prevents collection; freed at interpreter shutdown,precision_audit,high
lua,ltm.c,60,API00-C,FP,Internal function; events and ename always non-NULL,precision_audit,high
lua,ltm.c,60,API00-C,FP,Internal function; ename always non-NULL,precision_audit,high
lua,ltm.c,64,INT34-C,FP,event is TMS enum value; lua_assert(event <= TM_EQ) at line 62 ensures it is within 0..TM_EQ (<32),precision_audit,high
lua,ltm.c,67,DCL30-C,FP,tm is pointer returned by luaH_Hgetshortstr pointing into table storage; not a stack local,precision_audit,high
lua,ltm.c,71,API00-C,FP,Internal function; L and o always non-NULL,precision_audit,high
lua,ltm.c,71,API00-C,FP,Internal function; o always non-NULL,precision_audit,high
lua,ltm.c,91,API00-C,FP,Internal function; o always non-NULL,precision_audit,high
lua,ltm.c,91,MSC04-C,FP,luaT_objtypename indirect recursion via GC emergency is intentional Lua design,precision_audit,high
lua,ltm.c,103,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,103,API00-C,FP,Internal function; f always non-NULL (caller checked),precision_audit,high
lua,ltm.c,103,API00-C,FP,Internal function; p1 always non-NULL stack pointer,precision_audit,high
lua,ltm.c,103,API00-C,FP,Internal function; p2 always non-NULL,precision_audit,high
lua,ltm.c,103,API00-C,FP,Internal function; p3 always non-NULL,precision_audit,high
lua,ltm.c,103,MSC04-C,FP,luaT_callTM indirect recursion via VM dispatch is intentional Lua metamethod design,precision_audit,high
lua,ltm.c,119,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,119,API00-C,FP,Internal function; f always non-NULL,precision_audit,high
lua,ltm.c,119,API00-C,FP,Internal function; p1 always non-NULL,precision_audit,high
lua,ltm.c,119,API00-C,FP,Internal function; p2 always non-NULL,precision_audit,high
lua,ltm.c,119,MSC04-C,FP,luaT_callTMres indirect recursion via VM dispatch is intentional Lua design,precision_audit,high
lua,ltm.c,138,MSC04-C,FP,callbinTM indirect recursion is intentional metamethod dispatch chain,precision_audit,high
lua,ltm.c,138,MSC37-C,FP,callbinTM returns -1 or result of luaT_callTMres; all paths have explicit returns,precision_audit,high
lua,ltm.c,150,MSC04-C,FP,luaT_trybinTM indirect recursion is intentional Lua dispatch design,precision_audit,high
lua,ltm.c,173,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,173,MSC04-C,FP,luaT_tryconcatTM indirect recursion is intentional Lua design,precision_audit,high
lua,ltm.c,175,EXP30-C,FP,callbinTM and s2v(p1+1) args are evaluated in separate expressions; no sequencing issue,precision_audit,high
lua,ltm.c,175,ARR37-C,FP,p1 is StkId (stack slot pointer); p1+1 points to next contiguous stack slot; valid pointer arithmetic,precision_audit,high
lua,ltm.c,176,EXP30-C,FP,luaG_concaterror args s2v(p1) and s2v(p1+1) are independent sub-expressions; no issue,precision_audit,high
lua,ltm.c,176,ARR37-C,FP,p1 is StkId into contiguous stack array; p1+1 is valid stack pointer arithmetic,precision_audit,high
lua,ltm.c,180,MSC04-C,FP,luaT_trybinassocTM indirect recursion is intentional Lua dispatch design,precision_audit,high
lua,ltm.c,189,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,189,API00-C,FP,Internal function; p1 always non-NULL,precision_audit,high
lua,ltm.c,189,MSC04-C,FP,luaT_trybiniTM indirect recursion is intentional Lua dispatch design,precision_audit,high
lua,ltm.c,200,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,200,API00-C,FP,Internal function; p1 always non-NULL,precision_audit,high
lua,ltm.c,200,API00-C,FP,Internal function; p2 always non-NULL,precision_audit,high
lua,ltm.c,210,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,210,API00-C,FP,Internal function; p1 always non-NULL,precision_audit,high
lua,ltm.c,231,MSC04-C,FP,createvarargtab indirect recursion is intentional Lua design,precision_audit,high
lua,ltm.c,234,MEM31-C,FP,t is GC-managed table anchored on stack (sethvalue into L->top); freed by GC,precision_audit,high
lua,ltm.c,272,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,272,API00-C,FP,Internal function; ci always non-NULL,precision_audit,high
lua,ltm.c,272,API00-C,FP,Internal function; p (Proto*) always non-NULL,precision_audit,high
lua,ltm.c,272,MSC04-C,FP,luaT_adjustvarargs indirect recursion is intentional Lua design,precision_audit,high
lua,ltm.c,292,API00-C,FP,Internal function; ci always non-NULL,precision_audit,high
lua,ltm.c,292,DCL13-C,FP,Advisory const-pointer parameter,precision_audit,low
lua,ltm.c,305,EXP33-C,FP,len is initialized by getlstr macro (output-param address pass); not uninitialized use,precision_audit,high
lua,ltm.c,321,MSC04-C,FP,getnumargs indirect recursion is intentional Lua design,precision_audit,high
lua,ltm.c,321,DCL13-C,FP,Advisory const-pointer parameter,precision_audit,low
lua,ltm.c,322,MEM10-C,FP,Direct NULL check is appropriate; MEM10-C advisory wrapper pattern not required,precision_audit,high
lua,ltm.c,338,API00-C,FP,Internal function; L always non-NULL,precision_audit,high
lua,ltm.c,338,API00-C,FP,Internal function; ci always non-NULL,precision_audit,high
lua,ltm.c,338,MSC04-C,FP,luaT_getvarargs indirect recursion is intentional Lua design,precision_audit,high
lua,ltm.c,340,DCL00-C,FP,Advisory; h is used in conditional and loop,precision_audit,low
lua,lundump.c,45,MSC37-C,FP,error() is declared l_noret (noreturn attribute); always terminates via luaD_throw,precision_audit,high
lua,lundump.c,45,DCL13-C,FP,Advisory const-pointer parameter,precision_audit,low
lua,lundump.c,55,PRE00-C,FP,loadVector macro: b and n used once each in expansion; no multiple-evaluation issue,precision_audit,high
lua,lundump.c,55,PRE12-C,FP,b appears in sizeof((b)[0]) and as argument; sizeof does not evaluate; single evaluation,precision_audit,high
lua,lundump.c,57,API05-C,FP,Conformant-array-parameter advisory not applicable to Lua's portable C style,precision_audit,high
lua,lundump.c,65,INT33-C,FP,align is unsigned; loadAlign called with sizeof(type) which is always >= 1; never zero,precision_audit,high
lua,lundump.c,69,INT33-C,FP,align is sizeof(type) >= 1; never zero at this point in loadAlign,precision_audit,high
lua,lundump.c,74,PRE00-C,FP,getaddr macro: n and t each appear once in expansion; no multiple-evaluation,precision_audit,high
lua,lundump.c,74,PRE01-C,FP,"t in getaddr macro used in cast(t*, ...) and sizeof(t); cast context; no precedence issue",precision_audit,high
lua,lundump.c,74,PRE02-C,FP,getaddr macro result is a cast expression; wrapping in parens has no effect on usage,precision_audit,high
lua,lundump.c,74,PRE12-C,FP,t used in cast and sizeof; sizeof does not evaluate; single effective evaluation,precision_audit,high
lua,lundump.c,81,DCL30-C,FP,block is pointer into ZIO buffer (via luaZ_getaddr); not a stack local,precision_audit,high
lua,lundump.c,105,INT13-C,FP,b is int but value is 0-127 (0x7f mask applied); OR with lua_Unsigned x is safe,precision_audit,high
lua,lundump.c,106,INT13-C,FP,b & 0x80: b is non-negative byte value 0-255; AND with positive constant is safe,precision_audit,high
lua,lundump.c,124,EXP33-C,FP,x in loadNumber is initialized by loadVar macro (output parameter); not uninitialized,precision_audit,high
lua,lundump.c,164,ENV01-C,FP,buff is compile-time fixed size LUAI_MAXSHORTLEN+1; no getenv() involved,precision_audit,high
lua,lundump.c,164,MEM05-C,FP,buff is fixed-size stack array LUAI_MAXSHORTLEN+1 (compile-time constant); not a VLA,precision_audit,high
lua,lundump.c,165,ARR30-C,FP,loadVector reads size+1 bytes into buff[LUAI_MAXSHORTLEN+1]; size <= LUAI_MAXSHORTLEN so size+1 <= buffer size,precision_audit,high
lua,lundump.c,189,ARR01-C,FP,"sizeof(f->code[0]) is sizeof on an element through pointer, yielding sizeof(Instruction); correct",precision_audit,high
lua,lundump.c,247,MSC04-C,FP,loadProtos/loadFunction mutual recursion is intentional for nested Lua function prototypes,precision_audit,high
lua,lundump.c,326,MSC04-C,FP,loadFunction/loadProtos mutual recursion is intentional; bounded by proto nesting depth,precision_audit,high
lua,lundump.c,345,MEM05-C,FP,buff size is sizeof(LUA_SIGNATURE)+sizeof(LUAC_DATA) — compile-time constant; not VLA,precision_audit,high
lua,lundump.c,346,STR34-C,FP,strlen(s) where s is const char*; no signed char sign extension in strlen argument,precision_audit,high
lua,lundump.c,347,ARR30-C,FP,loadVector reads len bytes into buff[sizeof(LUA_SIGNATURE)+sizeof(LUAC_DATA)]; len=strlen(s) fits,precision_audit,high
lua,lundump.c,353,MSC37-C,FP,numerror calls error() which is l_noret (noreturn); always terminates,precision_audit,high
lua,lundump.c,371,PRE00-C,FP,checknum macro: tvar and S appear once in expansion context; no multiple-evaluation,precision_audit,high
lua,lundump.c,371,PRE01-C,FP,tvar used as type declaration in block; not in expression operator context,precision_audit,high
lua,lundump.c,371,PRE10-C,FP,checknum always used as standalone statement in checkHeader; not in dangling-else context,precision_audit,high
lua,lundump.c,371,PRE12-C,FP,S used in checknumsize and loadVar; two different macro calls; intentional dual use,precision_audit,high
lua,lundump.c,395,API00-C,FP,Public function; L and Z always non-NULL per callers (luaL_loadbuffer etc.),precision_audit,high
lua,lundump.c,395,API00-C,FP,Z always non-NULL,precision_audit,high
lua,lundump.c,395,API00-C,FP,anchor is the caller-provided hash table; always non-NULL per calling convention,precision_audit,high
lua,lundump.c,395,API00-C,FP,name is always non-NULL (load functions pass chunk name string),precision_audit,high
lua,lundump.c,395,DCL13-C,FP,Advisory const-pointer; Z is ZIO stream that gets read from (mutable),precision_audit,low
lua,lundump.c,413,EXP34-C,FP,cl from luaF_newLclosure raises LUA_ERRMEM on OOM; never returns NULL,precision_audit,high
lua,lundump.c,419,DCL30-C,FP,cl is GC-heap-allocated via luaF_newLclosure; not a stack local,precision_audit,high
lua,lmathlib.c,83,EXP33-C,FP,valid is output param to lua_tointegerx; written before any read,precision_audit,high
lua,lmathlib.c,132,INT33-C,FP,d==0 and d==-1 excluded by (lua_Unsigned)d+1u<=1u guard above,precision_audit,high
lua,lmathlib.c,132,INT10-C,FP,modulo safe: zero and -1 divisor both excluded by prior guard,precision_audit,high
lua,lmathlib.c,135,EXP30-C,FP,luaL_checknumber reads independent stack slots; no ordering hazard,precision_audit,high
lua,lmathlib.c,192,INT33-C,FP,floating-point division; INT33-C covers integer division only,precision_audit,high
lua,lmathlib.c,206,FLP03-C,FP,PI is non-zero compile-time constant; advisory fp exception check,precision_audit,high
lua,lmathlib.c,206,INT33-C,FP,floating-point division by non-zero constant PI; INT33-C is for integers,precision_audit,high
lua,lmathlib.c,212,FLP03-C,FP,180.0 is a non-zero constant; FLP03-C advisory inapplicable,precision_audit,high
lua,lmathlib.c,212,INT33-C,FP,floating-point division by 180.0 constant; not integer division,precision_audit,high
lua,lmathlib.c,221,EXP33-C,FP,ep is output param to frexp; frexp writes *ep before return,precision_audit,high
lua,lmathlib.c,307,EXP07-C,FP,preprocessor width probe (ULONG_MAX>>31)>>31; not runtime assumption,precision_audit,high
lua,lmathlib.c,307,EXP07-C,FP,same preprocessor constant probe; EXP07-C targets runtime expressions,precision_audit,high
lua,lmathlib.c,319,EXP07-C,FP,preprocessor probe for LUA_MAXUNSIGNED width; not runtime,precision_audit,high
lua,lmathlib.c,319,EXP07-C,FP,same preprocessor probe second instance,precision_audit,high
lua,lmathlib.c,345,INT14-C,FP,intentional PRNG bit rotation; mixed bitwise/arithmetic is by design,precision_audit,high
lua,lmathlib.c,345,INT34-C,FP,"callers always pass n in {7,45}; shift within 64-bit bounds",precision_audit,high
lua,lmathlib.c,345,INT13-C,FP,n is shift amount not bitwise operand; x is unsigned Rand64,precision_audit,high
lua,lmathlib.c,345,INT34-C,FP,64-n is 57 or 19 for valid callers; in-range for 64-bit shift,precision_audit,high
lua,lmathlib.c,345,INT13-C,FP,same: n is shift count not the shifted operand (unsigned Rand64),precision_audit,high
lua,lmathlib.c,352,INT14-C,FP,intentional xoshiro256** PRNG state manipulation; by design,precision_audit,high
lua,lmathlib.c,356,EXP07-C,FP,17 is the xoshiro256** algorithm shift constant; not an assumed value,precision_audit,high
lua,lmathlib.c,431,INT13-C,FP,i.h is l_uint32 (unsigned); n is shift amount not bitwise operand,precision_audit,high
lua,lmathlib.c,431,INT14-C,FP,intentional 32-bit PRNG rotation; mixed bitwise/arithmetic by design,precision_audit,high
lua,lmathlib.c,431,INT34-C,FP,lua_assert(n>0 && n<32) at line 430 validates n; shift in bounds,precision_audit,high
lua,lmathlib.c,431,INT34-C,FP,32-n bounded by same assert; trim32 result is unsigned l_uint32,precision_audit,high
lua,lmathlib.c,431,INT13-C,FP,i.l is l_uint32 unsigned; n is shift count not the bitwise operand,precision_audit,high
lua,lmathlib.c,431,INT34-C,FP,same assert bounds n; i.l<<n is unsigned shift in range,precision_audit,high
lua,lmathlib.c,461,INT13-C,FP,rotl 32-bit: i.h is l_uint32; n is shift count not bitwise operand,precision_audit,high
lua,lmathlib.c,461,INT14-C,FP,intentional rotation; lua_assert(n>0 && n<32) at line 460,precision_audit,high
lua,lmathlib.c,461,INT34-C,FP,"assert bounds n in (0,32); i.h<<n is unsigned shift in range",precision_audit,high
lua,lmathlib.c,461,INT34-C,FP,32-n bounded by assert; trim32(i.l) is unsigned,precision_audit,high
lua,lmathlib.c,462,INT34-C,FP,32-n bounded by lua_assert at line 460; trim32(i.h) is unsigned,precision_audit,high
lua,lmathlib.c,462,INT13-C,FP,i.l is l_uint32 unsigned; n is shift amount not bitwise operand,precision_audit,high
lua,lmathlib.c,462,INT34-C,FP,i.l<<n: unsigned l_uint32; assert bounds n; shift in range,precision_audit,high
lua,lmathlib.c,468,INT14-C,FP,rotl1: n reassigned to 64-n; mixed bitwise/arithmetic by design,precision_audit,high
lua,lmathlib.c,469,INT13-C,FP,packI operands i.h/i.l are l_uint32 unsigned; n is shift count,precision_audit,high
lua,lmathlib.c,470,INT13-C,FP,same packI call; l_uint32 operands unsigned; n is shift amount,precision_audit,high
lua,lmathlib.c,507,DCL00-C,FP,const-qual advisory on local variable h; trivial style nit,precision_audit,high
lua,lmathlib.c,507,INT14-C,FP,FIGS is compile-time #define constant; not mixed runtime usage,precision_audit,high
lua,lmathlib.c,507,INT34-C,FP,FIGS<=32 in this branch; 32-FIGS>=0; shift always in bounds,precision_audit,high
lua,lmathlib.c,530,DCL00-C,FP,const-qual advisory on local variable h; used once as multiplicand,precision_audit,high
lua,lmathlib.c,530,INT14-C,FP,intentional PRNG float conversion; bitwise/arithmetic by design,precision_audit,high
lua,lmathlib.c,530,INT14-C,FP,trim32 is bitwise mask; mixed arithmetic intentional in PRNG,precision_audit,high
lua,lmathlib.c,540,EXP07-C,FP,constant 31 is algorithmic shift for I2UInt 64->32+32 split,precision_audit,high
lua,lmathlib.c,545,INT13-C,FP,n is lua_Unsigned (unsigned); >>31 on unsigned is defined,precision_audit,high
lua,lmathlib.c,545,EXP07-C,FP,31 is the algorithmic split point for high/low halves of lua_Unsigned,precision_audit,high
lua,lmathlib.c,570,DCL13-C,FP,state->s is written by nextrand; state IS modified indirectly,precision_audit,high
lua,lmathlib.c,574,INT14-C,FP,Mersenne-number loop: intentional mixed bitwise/arithmetic,precision_audit,high
lua,lmathlib.c,575,INT34-C,FP,sh starts at 1 doubles; lim all-ones before sh could overflow,precision_audit,high
lua,lmathlib.c,575,INT13-C,FP,lim is lua_Unsigned (unsigned); sh is positive shift amount int,precision_audit,high
lua,lmathlib.c,586,EXP34-C,FP,state from upvalue set by lua_newuserdatauv; guaranteed non-NULL,precision_audit,high
lua,lmathlib.c,595,EXP33-C,FP,low/up assigned in all switch branches; default longjmps before use,precision_audit,high
lua,lmathlib.c,636,EXP34-C,FP,state from upvalue lua_newuserdatauv; luaM raises on OOM; non-NULL,precision_audit,high
lua,lmathlib.c,647,ARR02-C,FP,sentinel-terminated luaL_Reg array; standard Lua API convention,precision_audit,high
lua,lmathlib.c,659,EXP34-C,FP,lua_newuserdatauv uses luaM_* which raises on OOM; never NULL,precision_audit,high
lua,lmathlib.c,706,ARR02-C,FP,sentinel-terminated mathlib[] array; standard Lua convention,precision_audit,high
lua,lmathlib.c,752,API00-C,FP,luaopen_* called by Lua runtime with valid state; L check absurd,precision_audit,high
lua,lmathlib.c,752,DCL15-C,FP,LUAMOD_API declares intentional external linkage for module opener,precision_audit,high
lua,lmathlib.c,755,STR30-C,FP,lua_setfield takes const char*; string literal not modified,precision_audit,high
lua,lmathlib.c,757,STR30-C,FP,lua_setfield takes const char*; string literal not modified,precision_audit,high
lua,lmathlib.c,759,STR30-C,FP,lua_setfield takes const char*; string literal not modified,precision_audit,high
lua,lmathlib.c,761,STR30-C,FP,lua_setfield takes const char*; string literal not modified,precision_audit,high
lua,loadlib.c,113,DCL30-C,FP,returns dlopen handle value stored in local var; not address of local,precision_audit,high
lua,loadlib.c,154,ENV01-C,FP,buff[MAX_PATH+1] is for GetModuleFileNameA not getenv; misfire,precision_audit,high
lua,loadlib.c,154,MEM05-C,FP,MAX_PATH+1 is compile-time constant; not a VLA,precision_audit,high
lua,loadlib.c,158,EXP33-C,FP,buff is output buffer to GetModuleFileNameA; written before use,precision_audit,high
lua,loadlib.c,161,EXP34-C,FP,lb==NULL check IS the if-condition; else only runs if non-NULL,precision_audit,high
lua,loadlib.c,161,STR34-C,FP,*lb='\0' is char-to-char assignment; no sign extension,precision_audit,high
lua,loadlib.c,216,DCL13-C,FP,void* signature must match other implementations; const would break API,precision_audit,high
lua,loadlib.c,228,DCL13-C,FP,same cross-platform API constraint for lsys_sym parameter,precision_audit,high
lua,loadlib.c,279,CON34-C,FP,Lua uses single-threaded state; threading advisory inapplicable,precision_audit,high
lua,loadlib.c,281,ENV34-C,FP,path used immediately after getenv; no intervening env-modifying call,precision_audit,high
lua,loadlib.c,281,CON34-C,FP,single-threaded Lua state; getenv thread-safety advisory irrelevant,precision_audit,high
lua,loadlib.c,287,STR34-C,FP,path < dftmark is pointer comparison; not char-to-int conversion,precision_audit,high
lua,loadlib.c,287,STR34-C,FP,same line second instance; pointer arithmetic misidentified,precision_audit,high
lua,loadlib.c,291,ENV30-C,FP,ct_diff2sz computes pointer difference; does not modify env string,precision_audit,high
lua,loadlib.c,297,ENV30-C,FP,ct_diff2sz takes ptrdiff_t result; does not modify env string,precision_audit,high
lua,loadlib.c,328,DCL30-C,FP,returns VALUE of plib (void*); not &plib; not a dangling pointer,precision_audit,high
lua,loadlib.c,336,API05-C,FP,structural-C99 conformant array syntax not used in Lua; FP,precision_audit,high
lua,loadlib.c,336,API05-C,FP,second API05-C same line; same rationale,precision_audit,high
lua,loadlib.c,336,DCL13-C,FP,ptr matches lua_Alloc typedef; const would break function pointer type,precision_audit,high
lua,loadlib.c,387,EXP33-C,FP,lsys_load is a function call not a static variable; misidentified,precision_audit,high
lua,loadlib.c,408,STR34-C,FP,path is char* pointer argument to lookforfunc; no char-to-int,precision_audit,high
lua,loadlib.c,408,STR34-C,FP,second instance same column; pointer not char sign extension,precision_audit,high
lua,loadlib.c,408,STR34-C,FP,init is char* pointer; no conversion to larger integer type,precision_audit,high
lua,loadlib.c,429,FIO05-C,FP,fopen probe for existence only; content not read; advisory FP,precision_audit,high
lua,loadlib.c,429,WIN03-C,FP,POSIX/generic section; Windows-specific handle inheritance advisory,precision_audit,high
lua,loadlib.c,431,ERR00-C,FP,fclose on read-probe handle; error irrelevant to probe purpose,precision_audit,high
lua,loadlib.c,441,DCL13-C,FP,end is boundary sentinel; const char* would be fine but advisory only,precision_audit,high
lua,loadlib.c,443,EXP40-C,FP,*name = *path is char-to-char assignment; no const pointer stripping,precision_audit,high
lua,loadlib.c,443,STR34-C,FP,*path dereference assigned to char; no larger-type conversion,precision_audit,high
lua,loadlib.c,443,STR34-C,FP,second instance same line; same char-to-char analysis,precision_audit,high
lua,loadlib.c,447,MEM33-C,FP,*name = *LUA_PATH_SEP is char assignment; no flexible array struct,precision_audit,high
lua,loadlib.c,447,STR34-C,FP,*name = *LUA_PATH_SEP is char-to-char; no sign extension,precision_audit,high
lua,loadlib.c,453,STR34-C,FP,*sep = '\0' is char assignment; no conversion to larger type,precision_audit,high
lua,loadlib.c,454,DCL30-C,FP,*path=sep writes pointer value into caller variable; not dangling,precision_audit,high
lua,loadlib.c,454,STR34-C,FP,char assignment *path=...; no conversion to larger integer type,precision_audit,high
lua,loadlib.c,454,STR34-C,FP,second instance same position; same char-to-char analysis,precision_audit,high
lua,loadlib.c,455,DCL30-C,FP,returns name pointing into luaL_Buffer valid in caller frame,precision_audit,high
lua,loadlib.c,503,EXP30-C,FP,luaL_checkstring reads independent stack positions; no hazard,precision_audit,high
lua,loadlib.c,534,EXP30-C,FP,single call luaL_loadfilex; result compared before checkload called,precision_audit,high
lua,loadlib.c,560,EXP34-C,FP,modname is luaL_gsub result; always returns non-NULL string,precision_audit,high
lua,loadlib.c,684,ARR02-C,FP,sentinel-terminated pk_funcs[]; standard Lua API convention,precision_audit,high
lua,loadlib.c,697,ARR02-C,FP,sentinel-terminated ll_funcs[]; standard Lua convention,precision_audit,high
lua,loadlib.c,704,ARR02-C,FP,searchers[] size computed by sizeof division correctly,precision_audit,high
lua,loadlib.c,720,STR30-C,FP,lua_setfield key is const char*; string literal not modified,precision_audit,high
lua,loadlib.c,724,API00-C,FP,luaopen_package called by Lua runtime with valid state; L check absurd,precision_audit,high
lua,loadlib.c,724,DCL15-C,FP,LUAMOD_API is intentional external linkage for package opener,precision_audit,high
lua,loadlib.c,730,STR30-C,FP,setpath fieldname param is const char*; string literal not modified,precision_audit,high
lua,loadlib.c,731,STR30-C,FP,setpath envname param is const char*; not modified,precision_audit,high
lua,loadlib.c,735,STR30-C,FP,lua_setfield key is const char*; string literal not modified,precision_audit,high
lua,loadlib.c,738,STR30-C,FP,lua_setfield key is const char*; string literal not modified,precision_audit,high
lua,loadlib.c,741,STR30-C,FP,lua_setfield key is const char*; string literal not modified,precision_audit,high
lua,luaconf.h,425,PRE05-C,FP,l_floatatt uses ## intentionally; n is always literal token like MANT_DIG,precision_audit,high
lua,luaconf.h,442,PRE05-C,FP,same macro long-double branch; ## paste intentional and correct,precision_audit,high
lua,luaconf.h,458,PRE05-C,FP,same macro double branch; ## paste correct; no expansion needed,precision_audit,high
lua,luaconf.h,466,PRE01-C,FP,op is always a function name token; parenthesizing advisory only,precision_audit,high
lua,luaconf.h,602,PRE00-C,FP,p appears exactly once in replacement; no multiple evaluation,precision_audit,high
lua,luaconf.h,602,PRE01-C,FP,p in argument position of l_sprintf; parenthesizing advisory,precision_audit,high
lua,luaconf.h,602,PRE12-C,FP,p evaluated once in replacement text; PRE12-C misfire,precision_audit,high
lua,luaconf.h,626,PRE01-C,FP,op in (lua_Number)op; always single function name token; advisory,precision_audit,high
lua,luaconf.h,745,PRE10-C,FP,LUAI_MAXALIGN is struct field declarations not statements; do-while invalid,precision_audit,high
lua,luaconf.h,748,PRE10-C,FP,same macro C89 branch; declaration list not a statement sequence,precision_audit,high
lua,lauxlib.h,52,API02-C,FP,"luaL_tolstring returns string+length; size_t *len is an output param, not array size",precision_audit,high
lua,lauxlib.h,55,API02-C,FP,"luaL_checklstring uses size_t *l as output param, not array size; standard Lua API pattern",precision_audit,high
lua,lauxlib.h,57,API02-C,FP,luaL_optlstring same output-param pattern; no array bound needed,precision_audit,high
lua,lauxlib.h,58,API05-C,FP,Lua is not structural-C99; conformant array syntax advisory not applicable,precision_audit,high
lua,lauxlib.h,60,DCL40-C,FP,LUALIB_API macro wrappers are single declarations; sqc misidentifies macro expansion as conflicting decls,precision_audit,high
lua,lauxlib.h,63,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_checkinteger,precision_audit,high
lua,lauxlib.h,66,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_checkstack,precision_audit,high
lua,lauxlib.h,67,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_checktype,precision_audit,high
lua,lauxlib.h,68,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_checkany,precision_audit,high
lua,lauxlib.h,70,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_newmetatable,precision_audit,high
lua,lauxlib.h,71,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_setmetatable,precision_audit,high
lua,lauxlib.h,75,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_where,precision_audit,high
lua,lauxlib.h,76,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_error,precision_audit,high
lua,lauxlib.h,76,EXP37-C,FP,luaL_error declared with proper '...' variadic syntax; no header needed for declaration,precision_audit,high
lua,lauxlib.h,78,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_checkoption,precision_audit,high
lua,lauxlib.h,79,ARR02-C,FP,const char *const lst[] is a function parameter; implicit bounds is correct C for pointer-to-array params,precision_audit,high
lua,lauxlib.h,82,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_fileresult,precision_audit,high
lua,lauxlib.h,84,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lauxlib.h,84,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lauxlib.h,92,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_ref,precision_audit,high
lua,lauxlib.h,93,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_unref,precision_audit,high
lua,lauxlib.h,95,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_loadfilex,precision_audit,high
lua,lauxlib.h,100,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_loadbufferx,precision_audit,high
lua,lauxlib.h,100,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lauxlib.h,101,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lauxlib.h,101,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lauxlib.h,102,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_loadstring,precision_audit,high
lua,lauxlib.h,110,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_addgsub,precision_audit,high
lua,lauxlib.h,115,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_setfuncs,precision_audit,high
lua,lauxlib.h,119,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_traceback,precision_audit,high
lua,lauxlib.h,122,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_requiref,precision_audit,high
lua,lauxlib.h,132,PRE00-C,FP,"luaL_newlibtable(L,l): 'l' is always a static const array literal; no side-effecting arg in any call site",precision_audit,high
lua,lauxlib.h,132,PRE02-C,FP,Macro used as function argument expression; operator precedence safe in all call patterns,precision_audit,high
lua,lauxlib.h,132,PRE12-C,FP,'l' is always passed as a static array identifier; no multiple-eval hazard in practice,precision_audit,high
lua,lauxlib.h,135,API03-C,FP,luaL_newlib expands two sub-macros in fixed order; not a parameter reordering,precision_audit,high
lua,lauxlib.h,135,PRE00-C,FP,"luaL_newlib(L,l): both args are simple identifiers at every call site; no side effects",precision_audit,high
lua,lauxlib.h,135,PRE12-C,FP,'L' simple variable at all call sites; no multiple-eval hazard,precision_audit,high
lua,lauxlib.h,147,PRE00-C,FP,"luaL_typename(L,i): simple args at all call sites",precision_audit,high
lua,lauxlib.h,147,PRE12-C,FP,'L' and 'i' simple variables at call sites; no side effects,precision_audit,high
lua,lauxlib.h,149,PRE00-C,FP,luaL_dofile: args evaluated once each in expansion,precision_audit,high
lua,lauxlib.h,149,PRE12-C,FP,'L' evaluated once in expansion; no multiple-eval hazard,precision_audit,high
lua,lauxlib.h,152,PRE00-C,FP,luaL_dostring: args evaluated once each,precision_audit,high
lua,lauxlib.h,152,PRE12-C,FP,'L' evaluated once in expansion; no multiple-eval hazard,precision_audit,high
lua,lauxlib.h,157,PRE00-C,FP,luaL_opt: ternary expression; 'f' and 'L' called once in each branch,precision_audit,high
lua,lauxlib.h,157,PRE01-C,FP,"'f' used as function call 'f(L,(n))'; parenthesizing 'f' would break syntax",precision_audit,high
lua,lauxlib.h,157,PRE12-C,FP,'L' used in ternary; only one branch executes; no multiple-eval,precision_audit,high
lua,lauxlib.h,166,PRE01-C,FP,"'op' is used as binary operator token (e.g., +); cannot be parenthesized in that context",precision_audit,high
lua,lauxlib.h,201,PRE00-C,FP,luaL_addchar: 'B' evaluated twice but both uses are safe member access on same buffer pointer,precision_audit,high
lua,lauxlib.h,201,PRE12-C,FP,'B' is always a simple buffer pointer variable; no side-effecting call site,precision_audit,high
lua,lauxlib.h,209,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_buffinit,precision_audit,high
lua,lauxlib.h,211,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_addlstring,precision_audit,high
lua,lauxlib.h,211,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lauxlib.h,212,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_addstring,precision_audit,high
lua,lauxlib.h,213,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_addvalue,precision_audit,high
lua,lauxlib.h,214,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_pushresult,precision_audit,high
lua,lauxlib.h,215,DCL40-C,FP,Same macro-expansion false positive; single declaration of luaL_pushresultsize,precision_audit,high
lua,lauxlib.h,258,API03-C,FP,luaL_checkint is a compat cast macro; parameter order consistent with luaL_checkinteger,precision_audit,high
lua,lcorolib.c,25,DCL30-C,FP,"getco returns lua_State* from lua_tothread (Lua stack slot), not address of local stack variable",precision_audit,high
lua,lcorolib.c,35,EXP20-C,FP,lua_checkstack returns int 0/1; !lua_checkstack() is standard Lua idiom per API docs,precision_audit,high
lua,lcorolib.c,42,EXP20-C,FP,Same idiomatic lua_checkstack usage; negation clearly tests for stack overflow failure,precision_audit,high
lua,lcorolib.c,76,DCL00-C,FP,"Advisory: 'r' is assigned once and used; const on int local is style, not a defect",precision_audit,high
lua,lcorolib.c,124,ARR02-C,FP,statname[] has implicit bounds from initializer; compiler computes size correctly,precision_audit,high
lua,lcorolib.c,128,DCL13-C,FP,Lua API functions cannot declare lua_State* const; this is advisory and inapplicable,precision_audit,high
lua,lcorolib.c,207,ARR02-C,FP,co_funcs[] has implicit bounds from initializer; explicit size would add maintenance burden,precision_audit,high
lua,lcorolib.c,221,API00-C,FP,luaopen_coroutine is called by Lua loader; L guaranteed non-NULL by VM,precision_audit,high
lua,lcorolib.c,221,DCL15-C,FP,luaopen_coroutine is LUAMOD_API; must have external linkage for dynamic loading,precision_audit,high
lua,ldump.c,42,PRE00-C,FP,"dumpVector(D,v,n): all three args are simple identifiers at call sites; no side effects",precision_audit,high
lua,ldump.c,42,PRE12-C,FP,"'v' evaluated twice (for sizeof and pointer); sizeof is compile-time, no runtime multiple-eval hazard",precision_audit,high
lua,ldump.c,44,PRE00-C,FP,"dumpLiteral(D,s): 's' is always a string literal at call sites; sizeof(s) is compile-time",precision_audit,high
lua,ldump.c,44,PRE02-C,FP,dumpLiteral expansion is a void function call statement; parenthesization advisory not applicable,precision_audit,high
lua,ldump.c,44,PRE12-C,FP,'s' is always a string literal; sizeof is compile-time; no runtime side-effect,precision_audit,high
lua,ldump.c,52,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,ldump.c,67,INT33-C,FP,"align is always sizeof(Instruction) or sizeof(int), guaranteed non-zero at all call sites",precision_audit,high
lua,ldump.c,69,CON03-C,FP,paddingContent is a static local used only as a zero-byte source; Lua is single-threaded,precision_audit,high
lua,ldump.c,73,INT33-C,FP,"align is sizeof(int) or sizeof(Instruction), guaranteed non-zero",precision_audit,high
lua,ldump.c,128,INT14-C,FP,"Mixing cast/arithmetic to encode signed integer as unsigned varint; stylistic, no defect",precision_audit,high
lua,ldump.c,128,INT14-C,FP,Same as above; l_castS2U cast in arithmetic context is intentional sign-to-unsigned coding,precision_audit,high
lua,ldump.c,144,MEM10-C,FP,Advisory: centralizing NULL checks is a style suggestion; not a defect,precision_audit,high
lua,ldump.c,159,EXP33-C,FP,"'size' is initialized by getlstr(ts, size) macro as out-parameter before use",precision_audit,high
lua,ldump.c,173,ARR01-C,FP,"sizeof(f->code[0]) where f->code is Instruction*; sizeof on deref gives sizeof(Instruction), correct",precision_audit,high
lua,ldump.c,207,MSC04-C,FP,dumpProtos/dumpFunction mutual recursion is bounded by finite proto tree depth; not an error,precision_audit,high
lua,ldump.c,254,MSC04-C,FP,Same bounded mutual recursion; Lua proto trees have no cycles,precision_audit,high
lua,ldump.c,269,PRE00-C,FP,"dumpNumInfo(D,tvar,value): all args simple at call sites; no side-effecting expansions",precision_audit,high
lua,ldump.c,269,PRE01-C,FP,"'tvar' is used as a type name (int, Instruction etc.); cannot parenthesize a type",precision_audit,high
lua,ldump.c,269,PRE01-C,FP,'value' used as initializer; safe in context since it's a simple constant expression,precision_audit,high
lua,ldump.c,269,PRE10-C,FP,dumpNumInfo is a brace-enclosed block; called only as standalone statement,precision_audit,high
lua,ldump.c,269,PRE12-C,FP,'D' appears multiple times but is always simple pointer variable; no side effects,precision_audit,high
lua,ldump.c,288,API00-C,FP,luaU_dump is internal API called from lapi.c with validated L from VM,precision_audit,high
lua,ldump.c,288,API00-C,FP,'f' (Proto*) is validated by caller before invoking luaU_dump,precision_audit,high
lua,ldump.c,288,DCL13-C,FP,Advisory: 'data' void* passed to writer callback; const not applicable for opaque user data,precision_audit,high
lua,ldump.c,291,MEM31-C,FP,"D.h is a GC-managed Table anchored on Lua stack (sethvalue2s); collected by GC, not freed manually",precision_audit,high
lua,ldump.c,305,MEM31-C,FP,Same: D.h is GC-anchored Table; the stack slot is popped at function end implicitly,precision_audit,high
lua,lfunc.c,27,API00-C,FP,"luaF_newCclosure is internal; L is always the live VM state, never NULL",precision_audit,high
lua,lfunc.c,29,DCL00-C,FP,Advisory: 'c' assigned once but it's a local intermediate; const on GC pointer adds no value,precision_audit,high
lua,lfunc.c,31,DCL30-C,FP,'c' is a GC-allocated CClosure* via gco2ccl; not a pointer to local stack frame,precision_audit,high
lua,lfunc.c,35,API00-C,FP,Internal function; L guaranteed non-NULL by VM,precision_audit,high
lua,lfunc.c,35,API00-C,FP,nupvals is bounded by MAXUPVAL check in lparser; overflow validation not needed here,precision_audit,high
lua,lfunc.c,37,DCL00-C,FP,Advisory: same as line 29; GC pointer local is idiomatic,precision_audit,high
lua,lfunc.c,41,DCL30-C,FP,'c' is GC-allocated LClosure* via gco2lcl; not local stack storage,precision_audit,high
lua,lfunc.c,48,API00-C,FP,Internal function; L non-NULL guaranteed,precision_audit,high
lua,lfunc.c,48,API00-C,FP,Internal function; cl non-NULL guaranteed by caller,precision_audit,high
lua,lfunc.c,74,DCL30-C,FP,'uv' is GC-allocated UpVal* via gco2upv; not returning address of local stack variable,precision_audit,high
lua,lfunc.c,79,DCL30-C,FP,"'uv' is GC-allocated; newupval returns heap object, not local-stack pointer",precision_audit,high
lua,lfunc.c,88,EXP40-C,FP,"**pp = &L->openupval is linked-list pointer update, not const circumvention",precision_audit,high
lua,lfunc.c,91,EXP30-C,FP,while ((p = *pp) != NULL && ...) - assignment in condition is sequenced before RHS of &&,precision_audit,high
lua,lfunc.c,91,EXP33-C,FP,'p' is set by while-condition assignment; guaranteed initialized before first loop body use,precision_audit,high
lua,lfunc.c,94,DCL30-C,FP,'p' is UpVal** pointer into linked list; not local stack address,precision_audit,high
lua,lfunc.c,95,EXP34-C,FP,'p' is non-NULL (returned early if found) when used at line 95; loop exits before first use,precision_audit,high
lua,lfunc.c,107,MSC04-C,FP,callclosemethod indirect recursion is intentional: Lua allows __close metamethods to call Lua code,precision_audit,high
lua,lfunc.c,127,MSC04-C,FP,checkclosemth indirect recursion bounded by Lua call depth limit,precision_audit,high
lua,lfunc.c,145,MSC04-C,FP,prepcallclosemth indirect recursion: same bounded call-stack mechanism,precision_audit,high
lua,lfunc.c,172,API00-C,FP,"luaF_newtbcupval internal; L from live VM, non-NULL",precision_audit,high
lua,lfunc.c,172,MSC04-C,FP,luaF_newtbcupval indirect recursion bounded by Lua call depth and tbc list depth,precision_audit,high
lua,lfunc.c,186,API00-C,FP,luaF_unlinkupval internal; uv guaranteed non-NULL by caller (GC traversal),precision_audit,high
lua,lfunc.c,197,API00-C,FP,luaF_closeupval internal; L from live VM,precision_audit,high
lua,lfunc.c,199,EXP30-C,FP,while ((uv = L->openupval) != NULL ...) - assignment sequenced before comparison,precision_audit,high
lua,lfunc.c,199,EXP33-C,FP,'uv' set in while-condition; initialized before every loop body access,precision_audit,high
lua,lfunc.c,200,EXP34-C,FP,'uv' is non-NULL by loop condition (checked before entering body),precision_audit,high
lua,lfunc.c,230,API00-C,FP,luaF_close internal; L from live VM,precision_audit,high
lua,lfunc.c,230,MSC04-C,FP,luaF_close indirect recursion bounded by Lua call depth and tbc list,precision_audit,high
lua,lfunc.c,243,API00-C,FP,luaF_newproto internal; L from live VM,precision_audit,high
lua,lfunc.c,266,DCL30-C,FP,'f' is GC-allocated Proto* via gco2p; not a local-stack pointer,precision_audit,high
lua,lfunc.c,270,API00-C,FP,luaF_protosize internal; p validated by GC traversal caller,precision_audit,high
lua,lfunc.c,270,DCL13-C,FP,Advisory: p not const because function could be called with non-const; stylistic,precision_audit,high
lua,lfunc.c,271,ARR39-C,FP,Expression is integer arithmetic to compute byte count; no pointer arithmetic involved,precision_audit,high
lua,lfunc.c,271,ARR39-C,FP,Same: lu_mem size computation via integer multiply; not scaled pointer offset,precision_audit,high
lua,lfunc.c,271,ARR39-C,FP,Same: computing total size in bytes as integer; sizeof() is correct here,precision_audit,high
lua,lfunc.c,271,INT14-C,FP,size computation uses only arithmetic; no bitwise ops; sqc misidentifies cast as bitwise,precision_audit,high
lua,lfunc.c,285,API00-C,FP,"luaF_freeproto internal; L from GC sweep, non-NULL",precision_audit,high
lua,lfunc.c,285,API00-C,FP,luaF_freeproto: f validated by GC before calling; never NULL,precision_audit,high
lua,lfunc.c,303,API00-C,FP,luaF_getlocalname: f is live Proto from VM; non-NULL guaranteed,precision_audit,high
lua,lgc.h,46,PRE00-C,FP,issweepphase(g): 'g' is always a simple global_State pointer; no side effects at call sites,precision_audit,high
lua,lgc.h,46,PRE12-C,FP,'g' evaluated twice but always a simple pointer variable; no multiple-eval hazard,precision_audit,high
lua,lgc.h,70,API03-C,FP,"resetbit(x,b) and resetbits(x,m) share consistent (object, bit) parameter convention",precision_audit,high
lua,lgc.h,71,API03-C,FP,"testbit(x,b) is consistent with testbits(x,m) in parameter order",precision_audit,high
lua,lgc.h,103,PRE00-C,FP,nw2black(x): 'x' is always a GC object pointer variable; no side effects,precision_audit,high
lua,lgc.h,103,PRE12-C,FP,'x' evaluated twice in check_exp and l_setbit; both uses are same simple pointer,precision_audit,high
lua,lgc.h,106,PRE02-C,FP,luaC_white(g) used only in comparisons; operator precedence safe in context,precision_audit,high
lua,lgc.h,121,PRE00-C,FP,"setage(o,a): 'o' is always a simple GC object pointer; no side effects",precision_audit,high
lua,lgc.h,121,PRE12-C,FP,'o' evaluated twice (marked read and write); both are same object; safe,precision_audit,high
lua,lgc.h,204,PRE01-C,FP,"setgcparam(g,p,v): 'g' is struct access base; token concat makes parenthesizing impossible",precision_audit,high
lua,lgc.h,204,PRE05-C,FP,"'p' is a literal suffix (PAUSE, MUL etc.), not a macro argument; ## is correct usage here",precision_audit,high
lua,lgc.h,205,PRE01-C,FP,applygcparam: same token-concat pattern; 'g' struct access base; FP,precision_audit,high
lua,lgc.h,205,PRE05-C,FP,Same as line 204; literal suffix concatenation is correct,precision_audit,high
lua,lgc.h,229,PRE00-C,FP,condchangemem: only active under HARDMEMTESTS; 'pre'/'pos' are statement args,precision_audit,high
lua,lgc.h,229,PRE01-C,FP,'pre' and 'pos' are statement-level macro arguments; cannot be parenthesized as expressions,precision_audit,high
lua,lgc.h,229,PRE01-C,FP,Same: 'pos' is a statement arg used in void context,precision_audit,high
lua,lgc.h,229,PRE10-C,FP,condchangemem is only used as a statement; brace-block is sufficient,precision_audit,high
lua,lgc.h,229,PRE12-C,FP,'L' in condchangemem is always simple state pointer; no side effects,precision_audit,high
lua,lgc.h,233,PRE00-C,FP,"luaC_condGC(L,pre,pos): statement args; L is always simple state pointer",precision_audit,high
lua,lgc.h,233,PRE01-C,FP,"'pre' is a statement expression (e.g., (void)0); cannot parenthesize statement",precision_audit,high
lua,lgc.h,233,PRE01-C,FP,'pos' same: statement expression used in void context,precision_audit,high
lua,lgc.h,233,PRE02-C,FP,luaC_condGC is used as a statement; outer parens on statement block not required,precision_audit,high
lua,lgc.h,233,PRE10-C,FP,luaC_condGC used only as statement; brace-block without do-while is accepted pattern,precision_audit,high
lua,lgc.h,233,PRE12-C,FP,'L' always simple state pointer; no side effects,precision_audit,high
lua,lgc.h,241,PRE00-C,FP,luaC_objbarrier: 'p' and 'o' are simple GC pointer args at all call sites,precision_audit,high
lua,lgc.h,241,PRE12-C,FP,'p' evaluated twice in isblack() and obj2gco(); both safe with simple pointer,precision_audit,high
lua,lgc.h,245,PRE00-C,FP,luaC_barrier: 'v' evaluated twice; always a simple TValue or slot argument,precision_audit,high
lua,lgc.h,245,PRE12-C,FP,'v' is iscollectable() and gcvalue() calls; both safe with simple TValue arg,precision_audit,high
lua,lgc.h,248,PRE00-C,FP,luaC_objbarrierback: same analysis as luaC_objbarrier,precision_audit,high
lua,lgc.h,248,PRE12-C,FP,'p' simple GC pointer at all call sites,precision_audit,high
lua,lgc.h,251,PRE00-C,FP,luaC_barrierback: 'v' always simple TValue arg,precision_audit,high
lua,lgc.h,251,PRE12-C,FP,'v' same analysis as luaC_barrier; safe,precision_audit,high
lua,lmem.c,47,PRE00-C,FP,"callfrealloc(g,block,os,ns): all args simple variables at call sites; no side effects",precision_audit,high
lua,lmem.c,47,PRE01-C,FP,'g' is struct member access base (g->frealloc); parenthesizing would break the dereference,precision_audit,high
lua,lmem.c,47,PRE12-C,FP,'g' evaluated twice in frealloc deref and ud member; same pointer; no side effect,precision_audit,high
lua,lmem.c,58,PRE00-C,FP,cantryagain(g): 'g' simple global_State pointer; no side effects,precision_audit,high
lua,lmem.c,58,PRE01-C,FP,'g' is struct base for member access; cannot parenthesize in member expression,precision_audit,high
lua,lmem.c,58,PRE12-C,FP,"'g' evaluated twice for completestate(g) and g->gcstopem; same pointer, no side effect",precision_audit,high
lua,lmem.c,69,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lmem.c,97,API00-C,FP,"luaM_growaux_ internal; L from VM, always non-NULL",precision_audit,high
lua,lmem.c,97,API00-C,FP,block can be NULL (for initial alloc); that's valid for realloc,precision_audit,high
lua,lmem.c,97,API00-C,FP,psize pointer validated by design; caller always provides valid int*,precision_audit,high
lua,lmem.c,97,API00-C,FP,nelems overflow checked by limit parameter; luaM_growaux_ verifies internally,precision_audit,high
lua,lmem.c,97,API00-C,FP,size_elems is sizeof(element_type); always small constant,precision_audit,high
lua,lmem.c,118,DCL30-C,FP,'newblock' is heap pointer from luaM_saferealloc_; not local-stack address,precision_audit,high
lua,lmem.c,128,API00-C,FP,luaM_shrinkvector_ internal; L non-NULL from VM,precision_audit,high
lua,lmem.c,128,API00-C,FP,block may be NULL for zero-size arrays; handled by realloc semantics,precision_audit,high
lua,lmem.c,128,API00-C,FP,size pointer always valid from parser shrink calls,precision_audit,high
lua,lmem.c,128,API00-C,FP,size_elem is sizeof(type); constant; no overflow,precision_audit,high
lua,lmem.c,136,DCL30-C,FP,'newblock' is heap pointer; not a local-stack address,precision_audit,high
lua,lmem.c,142,API00-C,FP,"luaM_toobig internal; L from VM, non-NULL",precision_audit,high
lua,lmem.c,142,MSC04-C,FP,"luaM_toobig->luaG_runerror path eventually reaches luaM_toobig only for string alloc OOM, which cantryagain prevents via gcstopem",precision_audit,high
lua,lmem.c,142,MSC37-C,FP,luaM_toobig is declared l_noret (noreturn); calls luaG_runerror which is also noreturn,precision_audit,high
lua,lmem.c,150,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lmem.c,151,DCL00-C,FP,Advisory: 'g' local intermediate; const on global_State* is style only,precision_audit,high
lua,lmem.c,162,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lmem.c,164,DCL00-C,FP,Advisory: 'g' local intermediate; const advisory,precision_audit,high
lua,lmem.c,176,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lmem.c,178,DCL00-C,FP,Advisory: 'g' local intermediate,precision_audit,high
lua,lmem.c,188,DCL30-C,FP,'newblock' is heap pointer from luaM_realloc_; not local-stack address,precision_audit,high
lua,lmem.c,192,API00-C,FP,luaM_saferealloc_ internal; L from VM,precision_audit,high
lua,lmem.c,192,API05-C,FP,Lua is not structural-C99; conformant array advisory not applicable,precision_audit,high
lua,lmem.c,196,MEM30-C,FP,"luaM_error(L) is called after newblock==NULL; L is not freed, it's the Lua state; sqc misidentifies",precision_audit,high
lua,lmem.c,205,DCL00-C,FP,Advisory: 'g' local intermediate for G(L),precision_audit,high
lua,lparser.h,74,PRE00-C,FP,vkisvar(k): 'k' always simple enum variable at call sites; no side effects,precision_audit,high
lua,lparser.h,74,PRE12-C,FP,'k' evaluated twice in range comparison; always simple enum variable,precision_audit,high
lua,lparser.h,75,PRE00-C,FP,vkisindexed(k): same as vkisvar; simple enum variable,precision_audit,high
lua,lparser.h,75,PRE12-C,FP,'k' evaluated twice in range comparison; safe with simple variable,precision_audit,high
lua,ltable.h,13,PRE01-C,FP,"gnode(t,i): 'i' used as array index; parenthesizing inside [] is not needed for precedence",precision_audit,high
lua,ltable.h,41,PRE00-C,FP,allocsizenode(t): 't' always simple table pointer; no side effects,precision_audit,high
lua,ltable.h,41,PRE12-C,FP,'t' evaluated twice (isdummy test and sizenode); always simple Table pointer,precision_audit,high
lua,ltable.h,49,PRE00-C,FP,luaH_fastgeti: all args simple variables at call sites,precision_audit,high
lua,ltable.h,49,PRE01-C,FP,'t' used as Table* init; parenthesizing 't' would not change semantics,precision_audit,high
lua,ltable.h,49,PRE01-C,FP,'tag' is output lvalue; parenthesizing would break assignment syntax,precision_audit,high
lua,ltable.h,49,PRE02-C,FP,luaH_fastgeti is a statement-block macro; outer parens not needed,precision_audit,high
lua,ltable.h,49,PRE10-C,FP,luaH_fastgeti used only as standalone statement; do-while not required,precision_audit,high
lua,ltable.h,49,PRE12-C,FP,'k' evaluated twice (cast and luaH_getint); always simple integer variable,precision_audit,high
lua,ltable.h,57,PRE00-C,FP,luaH_fastseti: all args simple variables at call sites,precision_audit,high
lua,ltable.h,57,PRE01-C,FP,'t' used as Table* init; parenthesizing does not change semantics,precision_audit,high
lua,ltable.h,57,PRE01-C,FP,'hres' is output lvalue; parenthesizing breaks assignment,precision_audit,high
lua,ltable.h,57,PRE02-C,FP,luaH_fastseti is statement-block macro; outer parens not needed,precision_audit,high
lua,ltable.h,57,PRE10-C,FP,luaH_fastseti used only as standalone statement,precision_audit,high
lua,ltable.h,57,PRE12-C,FP,'k' evaluated twice; always simple integer variable,precision_audit,high
lua,ltable.h,130,PRE00-C,FP,"arr2obj(h,k,val): all args simple variables at call sites",precision_audit,high
lua,ltable.h,130,PRE12-C,FP,'h' evaluated twice for tag and value; always simple Table pointer,precision_audit,high
lua,ltable.h,133,PRE00-C,FP,"obj2arr(h,k,val): all args simple at call sites",precision_audit,high
lua,ltable.h,133,PRE12-C,FP,'h' evaluated twice; always simple pointer,precision_audit,high
lua,ltable.h,142,PRE00-C,FP,farr2val: 'res' is output lvalue; no side-effecting arg at call sites,precision_audit,high
lua,ltable.h,142,PRE12-C,FP,'res' evaluated twice (tt_ and value_ writes); always simple TValue pointer,precision_audit,high
lua,ltable.h,145,PRE00-C,FP,fval2arr: all args simple at call sites,precision_audit,high
lua,ltable.h,145,PRE01-C,FP,'tag' is a pointer lvalue (lu_byte*); parenthesizing breaks dereference assignment,precision_audit,high
lua,ltable.h,145,PRE12-C,FP,'val' evaluated twice (tt_ and value_ reads); always simple TValue pointer,precision_audit,high
lua,lutf8lib.c,53,ARR02-C,FP,limits[] static const local array; implicit bounds from initializer is idiomatic C,precision_audit,high
lua,lutf8lib.c,55,DCL00-C,FP,Advisory: 'c' is modified (c <<= 1) in loop; const is not applicable here,precision_audit,high
lua,lutf8lib.c,70,INT14-C,FP,count used in 'count * 5' arithmetic before shift; mixing is intentional UTF-8 bit math,precision_audit,high
lua,lutf8lib.c,70,INT13-C,FP,"Shift is '(l_uint32)(...) << (count * 5)': shift applied to unsigned l_uint32, not to signed count",precision_audit,high
lua,lutf8lib.c,81,ARR00-C,FP,s+1 is pointer advance on const char*; not an array with size 1; no OOB,precision_audit,high
lua,lutf8lib.c,94,EXP33-C,FP,"'len' initialized by luaL_checklstring(L, 1, &len) as out-parameter before use",precision_audit,high
lua,lutf8lib.c,97,EXP30-C,FP,"luaL_argcheck macro: --posi is in first arg, not same expression as outer call; sequenced",precision_audit,high
lua,lutf8lib.c,97,EXP30-C,FP,posi decremented once in luaL_argcheck arg; separate from subsequent --posj call,precision_audit,high
lua,lutf8lib.c,123,EXP33-C,FP,"'len' initialized by luaL_checklstring(L, 1, &len) before use",precision_audit,high
lua,lutf8lib.c,142,EXP33-C,FP,"'code' initialized by utf8_decode(s, &code, !lax) as out-parameter before use",precision_audit,high
lua,lutf8lib.c,185,EXP33-C,FP,"'len' initialized by luaL_checklstring(L, 1, &len) before use",precision_audit,high
lua,lutf8lib.c,187,EXP30-C,FP,"Same pattern as line 97: --posi in luaL_argcheck arg, properly sequenced",precision_audit,high
lua,lutf8lib.c,187,EXP30-C,FP,posi decremented once in single macro argument; no sequencing issue,precision_audit,high
lua,lutf8lib.c,191,INT14-C,FP,Mixing bitwise iscontp() test with pointer arithmetic posi++ is intentional iteration,precision_audit,high
lua,lutf8lib.c,191,INT14-C,FP,'s + posi' is pointer arithmetic combined with bit test; intentional byte-scan pattern,precision_audit,high
lua,lutf8lib.c,219,EXP34-C,FP,'s' is non-NULL: returned from luaL_checklstring which raises on NULL string,precision_audit,high
lua,lutf8lib.c,219,STR00-C,FP,s[posi] & 0x80 uses bitwise AND; cast to unsigned char done implicitly; sign extension not possible with & 0x80 != 0 check,precision_audit,high
lua,lutf8lib.c,235,EXP33-C,FP,"'len' initialized by luaL_checklstring(L, 1, &len) before use",precision_audit,high
lua,lutf8lib.c,246,EXP33-C,FP,"'code' initialized by utf8_decode(s+n, &code, strict) as out-parameter before use",precision_audit,high
lua,lutf8lib.c,276,ARR02-C,FP,funcs[] static const array with implicit bounds from initializer; idiomatic luaL_Reg table,precision_audit,high
lua,lutf8lib.c,288,API00-C,FP,luaopen_utf8 called by Lua library loader; L guaranteed non-NULL by VM,precision_audit,high
lua,lutf8lib.c,288,DCL15-C,FP,luaopen_utf8 is LUAMOD_API; must have external linkage for dlopen/loadlib,precision_audit,high
lua,lutf8lib.c,291,STR30-C,FP,lua_setfield takes const char*; UTF8PATT string literal not modified; FP,precision_audit,high
lua,lparser.c,38,PRE00-C,FP,hasmultret evaluates k once; no multiple-eval side-effect possible,precision_audit,high
lua,lparser.c,38,PRE12-C,FP,k appears once in replacement text; no multiple evaluation,precision_audit,high
lua,lparser.c,68,MSC37-C,FP,error_expected declared l_noret; control never reaches end,precision_audit,high
lua,lparser.c,74,MSC37-C,FP,errorlimit declared l_noret; control never reaches end,precision_audit,high
lua,lparser.c,74,DCL13-C,FP,fs is internal cross-TU pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,122,PRE10-C,FP,"check_condition body is a single if statement, not multistatement",precision_audit,high
lua,lparser.c,135,EXP30-C,FP,luaX_token2str has no side effects; unsequenced evaluation is safe,precision_audit,high
lua,lparser.c,148,DCL30-C,FP,"str_checkname returns pointer value (GC-managed TString), not address of local",precision_audit,high
lua,lparser.c,159,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,175,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,194,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,194,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,199,EXP43-C,FP,luaM_growvector uses no restrict-qualified parameters; no overlap issue,precision_audit,high
lua,lparser.c,215,PRE00-C,FP,new_localvarliteral parameters each appear once; no multiple-eval,precision_audit,high
lua,lparser.c,215,PRE02-C,FP,"Macro is a statement (function call), not an expression needing outer parens",precision_audit,high
lua,lparser.c,215,PRE11-C,FP,Trailing semicolon is advisory; no double-semicolon breakage at call sites,precision_audit,med
lua,lparser.c,215,PRE12-C,FP,ls appears once in replacement text; no multiple evaluation,precision_audit,high
lua,lparser.c,226,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,250,API00-C,FP,Internal function always called with valid non-NULL fs from compiler state,precision_audit,high
lua,lparser.c,360,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,373,EXP43-C,FP,luaY_checklimit takes no restrict pointers; no overlap concern,precision_audit,high
lua,lparser.c,382,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,476,MEM05-C,FP,enterlevel/leavelevel enforce LUAI_MAXCCALLS hard limit; depth bounded,precision_audit,high
lua,lparser.c,476,MSC04-C,FP,Recursive-descent parser design; depth gated by luaE_incCstack limit,precision_audit,high
lua,lparser.c,547,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,570,PRE01-C,FP,"enterlevel: ls appears once, no precedence issue",precision_audit,high
lua,lparser.c,573,PRE00-C,FP,leavelevel: ls appears once; no multiple evaluation,precision_audit,high
lua,lparser.c,580,MSC37-C,FP,jumpscopeerror declared l_noret; control never falls through,precision_audit,high
lua,lparser.c,580,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,597,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,601,ARR00-C,FP,"g is a validated goto list index, not an untrusted function parameter",precision_audit,high
lua,lparser.c,611,MEM31-C,FP,"CREATE_ABCk creates an Instruction value (integer), not heap-allocated memory",precision_audit,high
lua,lparser.c,626,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,628,ARR00-C,FP,"ilb is initialized as bl->firstlabel loop variable, not uninitialized",precision_audit,high
lua,lparser.c,640,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,640,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,696,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,737,MSC37-C,FP,undefgoto declared l_noret; control never falls through,precision_audit,high
lua,lparser.c,737,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,768,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,781,DCL30-C,FP,"addprototype returns GC-heap pointer value stored in clp, not address of clp",precision_audit,high
lua,lparser.c,792,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,823,MEM31-C,FP,luaH_new result is GC-managed and anchored via luaD_anchorobj; not raw malloc,precision_audit,high
lua,lparser.c,866,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,877,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,900,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,938,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,985,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,992,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1019,MSC37-C,FP,maxtostore has explicit returns on all three conditional branches,precision_audit,high
lua,lparser.c,1019,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,1030,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1105,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1127,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1140,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1152,EXP33-C,FP,args initialized on every switch case that doesn't call syntaxerror+return,precision_audit,high
lua,lparser.c,1198,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1220,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1257,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1357,ARR02-C,FP,priority[] fully initialized by its literal; implicit bound advisory only,precision_audit,high
lua,lparser.c,1377,MEM05-C,FP,subexpr depth bounded by enterlevel/luaE_incCstack hard limit,precision_audit,high
lua,lparser.c,1377,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1407,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1422,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1448,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,1448,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,1501,MEM05-C,FP,restassign depth bounded by enterlevel/luaE_incCstack hard limit,precision_audit,high
lua,lparser.c,1501,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1531,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1558,EXP34-C,FP,"bl is non-NULL: goto ok only reached when isloop found, guaranteeing bl!=NULL",precision_audit,high
lua,lparser.c,1572,EXP34-C,FP,lb from findlabel; NULL check is on line 1570 before use on 1572,precision_audit,high
lua,lparser.c,1576,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1586,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1605,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1635,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1648,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,1649,ARR00-C,FP,pc is a validated PC index from luaK_jump; not an unvalidated parameter,precision_audit,high
lua,lparser.c,1649,ARR30-C,FP,pc is a validated PC index from luaK_jump; not an unvalidated parameter,precision_audit,high
lua,lparser.c,1662,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1670,ARR00-C,FP,isgen is 0 or 1 (boolean); forprep[2] has exactly 2 elements,precision_audit,high
lua,lparser.c,1682,ARR00-C,FP,isgen is 0 or 1 (boolean); forloop[2] has exactly 2 elements,precision_audit,high
lua,lparser.c,1697,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1719,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1746,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1764,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1779,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1793,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1830,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1844,MEM31-C,FP,"new_varkind returns integer index, not allocated memory; no free needed",precision_audit,high
lua,lparser.c,1906,MEM05-C,FP,initglobal depth bounded by enterlevel/luaE_incCstack hard limit,precision_audit,high
lua,lparser.c,1906,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1927,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1934,MEM31-C,FP,"new_varkind returns integer index, not allocated memory; no free needed",precision_audit,high
lua,lparser.c,1943,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1959,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1974,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,1998,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,2011,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,2015,EXP33-C,FP,"v.v initialized by suffixedexp(ls, &v.v) on same line before any use",precision_audit,high
lua,lparser.c,2029,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,2061,MSC04-C,FP,Recursive-descent parser design; all paths guarded by enterlevel depth limit,precision_audit,high
lua,lparser.c,2180,API00-C,FP,Internal entry point; all callers (ldo.c) pass non-NULL guaranteed pointers,precision_audit,high
lua,lparser.c,2180,API00-C,FP,Internal entry point; all callers (ldo.c) pass non-NULL guaranteed pointers,precision_audit,high
lua,lparser.c,2180,API00-C,FP,Internal entry point; all callers (ldo.c) pass non-NULL guaranteed pointers,precision_audit,high
lua,lparser.c,2180,API00-C,FP,Internal entry point; all callers (ldo.c) pass non-NULL guaranteed pointers,precision_audit,high
lua,lparser.c,2180,API00-C,FP,Internal entry point; all callers (ldo.c) pass non-NULL guaranteed pointers,precision_audit,high
lua,lparser.c,2180,API00-C,FP,Internal entry point; all callers (ldo.c) pass non-NULL guaranteed pointers,precision_audit,high
lua,lparser.c,2180,DCL13-C,FP,Internal API pointer; const advisory not adopted by Lua,precision_audit,high
lua,lparser.c,2188,EXP34-C,FP,cl from luaF_newLclosure raises on OOM via luaM_*; never returns NULL,precision_audit,high
lua,lparser.c,2190,MEM31-C,FP,luaS_new creates GC-managed TString; anchored via luaC_objbarrier; no free needed,precision_audit,high
lua,lparser.c,2200,DCL30-C,FP,luaY_parser returns cl heap pointer value; cl is not a local variable address,precision_audit,high
lua,lparser.c,2200,MEM31-C,FP,funcstate.f->source is GC-managed; anchored by GC barrier; not raw malloc,precision_audit,high
lua,lvm.c,68,INT34-C,FP,Structured multi-part right-shifts; each partial shift < type width; preprocessor-time arithmetic,precision_audit,high
lua,lvm.c,68,INT34-C,FP,Structured multi-part right-shifts; each partial shift < type width,precision_audit,high
lua,lvm.c,68,INT34-C,FP,Structured multi-part right-shifts; each partial shift < type width,precision_audit,high
lua,lvm.c,68,INT34-C,FP,Structured multi-part right-shifts; each partial shift < type width,precision_audit,high
lua,lvm.c,99,EXP33-C,FP,getlstr macro initializes stlen as output parameter before use,precision_audit,high
lua,lvm.c,126,API00-C,FP,Internal API; pointer guaranteed non-null by VM call protocol,precision_audit,high
lua,lvm.c,142,API00-C,FP,Internal API; pointer guaranteed non-null by VM call protocol,precision_audit,high
lua,lvm.c,157,API00-C,FP,Internal API; pointer guaranteed non-null by VM call protocol,precision_audit,high
lua,lvm.c,157,API00-C,FP,Internal API; pointer guaranteed non-null by VM call protocol,precision_audit,high
lua,lvm.c,181,MSC04-C,FP,Intentional indirect recursion via protected VM call boundary,precision_audit,high
lua,lvm.c,214,MSC04-C,FP,Intentional indirect recursion via protected VM call boundary,precision_audit,high
lua,lvm.c,229,EXP33-C,FP,limit set by forlimit() output param; used only when forlimit returns false,precision_audit,high
lua,lvm.c,231,INT33-C,FP,Divisor l_castS2U(step) != 0: step > 0 precondition at this branch,precision_audit,high
lua,lvm.c,236,INT33-C,FP,"Divisor non-zero: step<0 means -(step+1) >= 0, +1u makes it >= 1",precision_audit,high
lua,lvm.c,239,EXP30-C,FP,Arguments are independent reads of separate stack slots; no ordering issue,precision_audit,high
lua,lvm.c,252,EXP33-C,FP,tonumber sets step before use; luaG_forerror is noreturn on failure,precision_audit,high
lua,lvm.c,254,EXP33-C,FP,tonumber sets init before use; luaG_forerror is noreturn on failure,precision_audit,high
lua,lvm.c,291,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,291,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,291,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,291,MSC04-C,FP,Intentional mutual recursion through protected Lua call boundary,precision_audit,high
lua,lvm.c,334,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,334,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,334,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,334,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,334,MSC04-C,FP,Intentional mutual recursion through protected Lua call boundary,precision_audit,high
lua,lvm.c,340,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,391,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,397,STR34-C,FP,const char* used with strcoll/strlen; no sign-extension to larger int type here,precision_audit,high
lua,lvm.c,397,STR34-C,FP,const char* used with strcoll/strlen; no sign-extension to larger int type here,precision_audit,high
lua,lvm.c,401,STR34-C,FP,const char* used with strcoll/strlen; no sign-extension to larger int type here,precision_audit,high
lua,lvm.c,402,STR34-C,FP,const char* used with strcoll/strlen; no sign-extension to larger int type here,precision_audit,high
lua,lvm.c,403,EXP33-C,FP,Variable initialized by macro output-param or guaranteed-path before use,precision_audit,high
lua,lvm.c,404,EXP33-C,FP,Variable initialized by macro output-param or guaranteed-path before use,precision_audit,high
lua,lvm.c,426,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,426,DCL19-C,FP,l_sinline function; file-scope visibility intentional,precision_audit,high
lua,lvm.c,426,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,443,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,443,DCL19-C,FP,l_sinline function; file-scope visibility intentional,precision_audit,high
lua,lvm.c,443,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,460,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,460,DCL19-C,FP,l_sinline function; file-scope visibility intentional,precision_audit,high
lua,lvm.c,460,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,477,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,477,DCL19-C,FP,l_sinline function; file-scope visibility intentional,precision_audit,high
lua,lvm.c,477,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,493,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,493,DCL19-C,FP,l_sinline function; file-scope visibility intentional,precision_audit,high
lua,lvm.c,493,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,515,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,515,DCL19-C,FP,l_sinline function; file-scope visibility intentional,precision_audit,high
lua,lvm.c,515,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,540,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,562,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,582,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,582,MSC04-C,FP,Intentional mutual recursion through protected Lua call boundary,precision_audit,high
lua,lvm.c,604,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,622,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,624,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,627,MEM10-C,FP,Direct NULL check on metamethod result is idiomatic in Lua VM; no platform concern,precision_audit,high
lua,lvm.c,629,EXP33-C,FP,Variable initialized by macro output-param or guaranteed-path before use,precision_audit,high
lua,lvm.c,635,MEM10-C,FP,Direct NULL check on metamethod result is idiomatic in Lua VM; no platform concern,precision_audit,high
lua,lvm.c,657,API03-C,FP,tostring macro param order is consistent with Lua VM conventions; not a public API,precision_audit,high
lua,lvm.c,657,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,657,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,665,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,665,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,668,DCL13-C,FP,const-param advisory; function signature part of public ABI,precision_audit,high
lua,lvm.c,674,ARR38-C,FP,Buffer size tracked by tl; overflow checked before copy; buff sized to tl,precision_audit,high
lua,lvm.c,674,EXP33-C,FP,Variable initialized by macro output-param or guaranteed-path before use,precision_audit,high
lua,lvm.c,684,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,684,MSC04-C,FP,Intentional mutual recursion through protected Lua call boundary,precision_audit,high
lua,lvm.c,712,ENV01-C,FP,"Stack buffer declaration, not getenv usage; rule misfire",precision_audit,high
lua,lvm.c,731,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,731,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,731,MSC04-C,FP,Intentional mutual recursion through protected Lua call boundary,precision_audit,high
lua,lvm.c,735,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,737,EXP33-C,FP,Variable initialized by macro output-param or guaranteed-path before use,precision_audit,high
lua,lvm.c,738,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,746,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,766,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,767,INT14-C,FP,Mixed bitwise/arithmetic on same var is intentional floor-div algorithm,precision_audit,high
lua,lvm.c,773,INT14-C,FP,Mixed bitwise/arithmetic on same var is intentional floor-div algorithm,precision_audit,high
lua,lvm.c,773,INT33-C,FP,Division guarded by special-case check (l_castS2U(n)+1u<=1u catches 0 and -1),precision_audit,high
lua,lvm.c,774,INT13-C,FP,Bitwise op on signed integer for floor-div sign correction; deliberate C99 pattern,precision_audit,high
lua,lvm.c,774,INT33-C,FP,Division guarded by special-case check (l_castS2U(n)+1u<=1u catches 0 and -1),precision_audit,high
lua,lvm.c,774,INT10-C,FP,Signed modulo is intentional; result corrected explicitly for floor semantics,precision_audit,high
lua,lvm.c,786,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,787,INT14-C,FP,Mixed bitwise/arithmetic on same var is intentional floor-div algorithm,precision_audit,high
lua,lvm.c,793,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,793,INT33-C,FP,Division guarded by special-case check (l_castS2U(n)+1u<=1u catches 0 and -1),precision_audit,high
lua,lvm.c,793,INT10-C,FP,Signed modulo is intentional; result corrected explicitly for floor semantics,precision_audit,high
lua,lvm.c,794,INT14-C,FP,Mixed bitwise/arithmetic on same var is intentional floor-div algorithm,precision_audit,high
lua,lvm.c,794,INT13-C,FP,Bitwise op on signed integer for floor-div sign correction; deliberate C99 pattern,precision_audit,high
lua,lvm.c,804,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,804,DCL15-C,FP,l_sinline functions may need cross-TU visibility; static advisory inapplicable,precision_audit,high
lua,lvm.c,834,DCL13-C,FP,const-param advisory; function signature part of public ABI,precision_audit,high
lua,lvm.c,834,DCL13-C,FP,const-param advisory; function signature part of public ABI,precision_audit,high
lua,lvm.c,840,EXP34-C,FP,luaF_newLclosure uses luaM_* which longjmps on OOM; never returns NULL,precision_audit,high
lua,lvm.c,855,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,934,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,935,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,936,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,937,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,944,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,944,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,944,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,944,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,944,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,963,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,963,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,963,PRE02-C,FP,Macro body wrapped in braces or used as statement; operator precedence irrelevant,precision_audit,high
lua,lvm.c,963,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,974,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,983,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,992,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,992,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,992,PRE02-C,FP,Macro body wrapped in braces or used as statement; operator precedence irrelevant,precision_audit,high
lua,lvm.c,992,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,992,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,1004,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1013,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1022,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,1022,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1022,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1036,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,1036,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1036,PRE02-C,FP,Macro body wrapped in braces or used as statement; operator precedence irrelevant,precision_audit,high
lua,lvm.c,1036,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1051,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1051,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1051,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1051,PRE02-C,FP,Macro body wrapped in braces or used as statement; operator precedence irrelevant,precision_audit,high
lua,lvm.c,1051,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1071,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1071,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1071,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1110,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,1110,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,1114,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1116,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1119,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1127,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1127,PRE02-C,FP,Macro body wrapped in braces or used as statement; operator precedence irrelevant,precision_audit,high
lua,lvm.c,1127,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1131,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1138,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,1138,PRE02-C,FP,Macro body wrapped in braces or used as statement; operator precedence irrelevant,precision_audit,high
lua,lvm.c,1138,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1138,PRE11-C,FP,Trailing semicolon in docondjump macro is intentional style,precision_audit,high
lua,lvm.c,1144,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1151,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,1151,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1151,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1151,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,1174,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,1174,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1174,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,1178,PRE00-C,FP,VM dispatch macros use multi-eval intentionally; no side-effecting args in practice,precision_audit,high
lua,lvm.c,1178,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1178,PRE10-C,FP,VM dispatch macros always used as complete statements; do-while not needed,precision_audit,high
lua,lvm.c,1178,PRE12-C,FP,"VM macro params (L, ci) are simple variables; multiple-eval is safe",precision_audit,high
lua,lvm.c,1194,PRE01-C,FP,Macro params used only as function-call targets; precedence issue impossible,precision_audit,high
lua,lvm.c,1198,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,1198,API00-C,FP,Internal VM pointer guaranteed live by protocol; null check inappropriate,precision_audit,high
lua,lvm.c,1198,MSC04-C,FP,Intentional mutual recursion through protected Lua call boundary,precision_audit,high
lua,lvm.c,1232,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1233,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1238,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1244,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1247,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1250,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1256,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1263,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1268,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1274,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1279,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1287,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1293,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1300,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1311,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1317,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1325,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1328,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,1338,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1349,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1362,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1368,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1379,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1394,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1407,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1410,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,1413,INT14-C,FP,Mixed bitwise/arithmetic on same var is intentional floor-div algorithm,precision_audit,high
lua,lvm.c,1413,INT14-C,FP,Mixed bitwise/arithmetic on same var is intentional floor-div algorithm,precision_audit,high
lua,lvm.c,1413,INT14-C,FP,Mixed bitwise/arithmetic on same var is intentional floor-div algorithm,precision_audit,high
lua,lvm.c,1413,INT34-C,FP,Shift amount constrained by bytecode encoding (b<=30); within type width,precision_audit,high
lua,lvm.c,1413,INT13-C,FP,Bitwise op on signed integer for floor-div sign correction; deliberate C99 pattern,precision_audit,high
lua,lvm.c,1421,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1421,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1421,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1428,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1440,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1444,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1448,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1452,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1456,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1461,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1465,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1469,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1474,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1478,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1482,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1486,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1492,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1496,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1502,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1506,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1510,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1514,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1518,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1523,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1527,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1531,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1536,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1540,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1544,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1548,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1552,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1556,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1558,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,1566,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1568,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,1576,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1578,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,1586,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1592,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1595,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1601,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1606,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1612,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1621,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1626,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1634,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1640,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1646,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1650,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1658,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1662,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1666,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1674,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1681,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1687,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1691,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1695,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1699,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1703,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1709,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1720,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1733,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1733,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1737,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1760,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1760,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1763,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1783,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1783,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1785,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1800,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1800,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1802,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1828,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1828,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1831,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1838,EXP30-C,FP,Arguments are independent TValue reads from separate stack slots; no sequencing issue,precision_audit,high
lua,lvm.c,1849,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1856,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1873,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1873,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1875,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1886,EXP43-C,FP,setobjs2s copies between ra+3 and ra (non-overlapping distinct stack slots),precision_audit,high
lua,lvm.c,1892,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1892,MEM31-C,FP,luaH_new returns GC-managed object; free() would be wrong; GC handles reclaim,precision_audit,high
lua,lvm.c,1894,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1901,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1905,DCL00-C,FP,const advisory; modifying const local is intentional style in VM macros,precision_audit,high
lua,lvm.c,1929,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1936,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1943,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1949,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1955,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lvm.c,1964,MSC37-C,FP,Infinite dispatch loop; case labels never fall through to function end,precision_audit,high
lua,lcode.c,35,PRE00-C,FP,"hasjumps macro args are always simple pointer variables, never side-effecting expressions",precision_audit,high
lua,lcode.c,35,PRE12-C,FP,hasjumps args are always simple variables; no multiple-evaluation risk at any call site,precision_audit,high
lua,lcode.c,43,API00-C,FP,internal compiler API; ls/fmt are never NULL; l_noret function; not public API,precision_audit,high
lua,lcode.c,43,API00-C,FP,internal compiler API; ls/fmt are never NULL; l_noret function; not public API,precision_audit,high
lua,lcode.c,43,MSC37-C,FP,luaK_semerror is declared l_noret (__attribute__((noreturn))); control never reaches end,precision_audit,high
lua,lcode.c,46,EXP33-C,FP,argp is initialized by va_start inside pushvfstring macro before use; not uninitialized,precision_audit,high
lua,lcode.c,75,DCL13-C,FP,advisory const-param on internal struct; not a defect a reviewer would mandate changing,precision_audit,high
lua,lcode.c,85,API00-C,FP,internal compiler API; fs/v are never NULL; not public API,precision_audit,high
lua,lcode.c,85,API00-C,FP,internal compiler API; fs/v are never NULL; not public API,precision_audit,high
lua,lcode.c,117,DCL13-C,FP,advisory const-param on internal struct; not a mandatory fix,precision_audit,high
lua,lcode.c,132,API00-C,FP,internal compiler API; fs/n are never NULL/invalid at call sites,precision_audit,high
lua,lcode.c,132,API00-C,FP,internal compiler API; integer parameter overflow advisory only; not a defect,precision_audit,high
lua,lcode.c,135,EXP34-C,FP,"previousinstruction returns pointer to static or heap data, never NULL",precision_audit,high
lua,lcode.c,143,ARR36-C,FP,"pfrom and pl are integers (register indices), not pointers; no pointer subtraction",precision_audit,high
lua,lcode.c,155,DCL13-C,FP,advisory const-param on internal struct; not a mandatory fix,precision_audit,high
lua,lcode.c,156,ARR00-C,FP,pc is an internal PC index controlled by jump-list traversal; not untrusted input,precision_audit,high
lua,lcode.c,156,ARR30-C,FP,pc is an internal PC index controlled by jump-list traversal; not untrusted input,precision_audit,high
lua,lcode.c,160,ARR37-C,FP,fs->f->code is an array; offset arithmetic is valid pointer arithmetic on it,precision_audit,high
lua,lcode.c,168,DCL13-C,FP,advisory const-param on internal struct; not a mandatory fix,precision_audit,high
lua,lcode.c,169,ARR00-C,FP,pc is an internal PC index; not untrusted-input-driven,precision_audit,high
lua,lcode.c,169,ARR30-C,FP,pc is an internal PC index; not untrusted-input-driven,precision_audit,high
lua,lcode.c,170,ARR37-C,FP,fs->f->code is an array; pointer arithmetic valid,precision_audit,high
lua,lcode.c,182,API00-C,FP,internal compiler API; l1 is never NULL at call sites,precision_audit,high
lua,lcode.c,200,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,208,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,208,API00-C,FP,internal compiler API; integer param advisory; not a real defect,precision_audit,high
lua,lcode.c,234,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,245,DCL13-C,FP,advisory const-param on internal struct; not a mandatory fix,precision_audit,high
lua,lcode.c,246,DCL00-C,FP,pi is a local pointer used as a return value; const advisory only,precision_audit,high
lua,lcode.c,250,DCL30-C,FP,pi points into heap (fs->f->code array) or static invalidinstruction; not a dangling local,precision_audit,high
lua,lcode.c,263,EXP34-C,FP,getjumpcontrol returns pointer into code array or to static variable; never NULL,precision_audit,high
lua,lcode.c,270,EXP30-C,FP,GETARG_B(*i) and GETARG_k(*i) are pure reads; assignment to *i is after all argument evaluation,precision_audit,high
lua,lcode.c,308,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,314,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,384,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,399,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,402,INT13-C,FP,"k is constrained to {0,1}; (k & ~1)==0 is a bounds assertion, not a defect",precision_audit,high
lua,lcode.c,407,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,410,INT13-C,FP,"k is constrained to {0,1}; bitwise check is intentional and safe",precision_audit,high
lua,lcode.c,418,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,442,INT13-C,FP,"k is constrained to {0,1}; bitwise check is intentional and safe",precision_audit,high
lua,lcode.c,476,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,476,API00-C,FP,internal compiler API; integer param advisory only,precision_audit,high
lua,lcode.c,488,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,488,API00-C,FP,internal compiler API; integer param advisory only,precision_audit,high
lua,lcode.c,525,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,535,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,535,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,702,EXP33-C,FP,fi is set by luaV_flttointeger only when it returns true; read only in that path,precision_audit,high
lua,lcode.c,715,API00-C,FP,internal compiler API; fs/var are never NULL at call sites,precision_audit,high
lua,lcode.c,715,API00-C,FP,internal compiler API; fs/var are never NULL at call sites,precision_audit,high
lua,lcode.c,715,API00-C,FP,internal compiler API; integer param advisory only,precision_audit,high
lua,lcode.c,757,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,757,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,757,API00-C,FP,internal compiler API; integer param advisory only,precision_audit,high
lua,lcode.c,792,API00-C,FP,internal compiler API; e is never NULL at call sites,precision_audit,high
lua,lcode.c,808,API00-C,FP,internal compiler API; fs/var are never NULL at call sites,precision_audit,high
lua,lcode.c,808,API00-C,FP,internal compiler API; fs/var are never NULL at call sites,precision_audit,high
lua,lcode.c,808,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,819,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,819,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,846,MEM30-C,FP,"e->u.ind.t is a lu_byte register index (integer); freereg releases a slot, not heap memory",precision_audit,high
lua,lcode.c,851,MEM30-C,FP,"freereg/freeregs release register slots, not heap pointers; no double-free",precision_audit,high
lua,lcode.c,852,MEM30-C,FP,e->u.ind.t is a register index integer; sqc misidentifies slot-release as heap-free,precision_audit,high
lua,lcode.c,858,MEM30-C,FP,e->u.ind.t is an integer register index; no heap free involved,precision_audit,high
lua,lcode.c,858,MEM30-C,FP,e->u.ind.idx is a short register index; no heap free involved,precision_audit,high
lua,lcode.c,863,MEM30-C,FP,"freeregs releases register slots; e->u.ind.idx is an integer, not a heap pointer",precision_audit,high
lua,lcode.c,864,MEM30-C,FP,e->u.ind.t/idx are integer register indices; no heap free occurs,precision_audit,high
lua,lcode.c,864,MEM30-C,FP,e->u.ind.idx is a short integer register index; no heap free occurs,precision_audit,high
lua,lcode.c,999,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,999,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,1003,MEM30-C,FP,"freeexp releases a register slot; 'e' is stack-allocated expdesc, not heap-freed",precision_audit,high
lua,lcode.c,1011,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,1011,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,1043,API00-C,FP,internal compiler API; e is never NULL at call sites,precision_audit,high
lua,lcode.c,1105,API00-C,FP,internal compiler API; fs/var/ex are never NULL at call sites,precision_audit,high
lua,lcode.c,1105,API00-C,FP,internal compiler API; fs/var/ex are never NULL at call sites,precision_audit,high
lua,lcode.c,1105,API00-C,FP,internal compiler API; fs/var/ex are never NULL at call sites,precision_audit,high
lua,lcode.c,1105,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,1109,MEM30-C,FP,freeexp releases a register slot; 'ex' is not heap-allocated; no heap-free occurs,precision_audit,high
lua,lcode.c,1113,DCL00-C,FP,advisory const-qualifying local; not a defect,precision_audit,high
lua,lcode.c,1113,MEM30-C,FP,"freeexp releases register slots, not heap; 'ex' expdesc is stack-allocated",precision_audit,high
lua,lcode.c,1118,MEM30-C,FP,codeABRK calls freeexp/freeregs; no heap free; ex is not a heap pointer,precision_audit,high
lua,lcode.c,1122,MEM30-C,FP,codeABRK calls freeexp/freeregs; no heap free; ex is not a heap pointer,precision_audit,high
lua,lcode.c,1126,MEM30-C,FP,codeABRK calls freeexp/freeregs; no heap free; ex is not a heap pointer,precision_audit,high
lua,lcode.c,1134,MEM30-C,FP,codeABRK calls freeexp/freeregs; no heap free; ex is not a heap pointer,precision_audit,high
lua,lcode.c,1139,MEM30-C,FP,freeexp releases a register slot index; no heap free; no double-free,precision_audit,high
lua,lcode.c,1146,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,1148,EXP34-C,FP,getjumpcontrol returns pointer into code array or static variable; never NULL,precision_audit,high
lua,lcode.c,1171,MEM30-C,FP,discharge2anyreg/freeexp release register slots; 'e' is stack-allocated expdesc,precision_audit,high
lua,lcode.c,1171,MEM30-C,FP,e->u.info is an integer register number; reading it after freeexp is valid,precision_audit,high
lua,lcode.c,1171,MEM30-C,FP,e->u.info is an integer register number; reading it after freeexp is valid,precision_audit,high
lua,lcode.c,1178,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,1178,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,1249,MEM30-C,FP,discharge2anyreg/freeexp release register slots; 'e' is stack-allocated expdesc,precision_audit,high
lua,lcode.c,1249,MEM30-C,FP,freeexp releases a register slot; 'e' pointer is still valid stack memory,precision_audit,high
lua,lcode.c,1249,MEM30-C,FP,e->u.info is integer register index; valid to read after freeexp,precision_audit,high
lua,lcode.c,1249,MEM30-C,FP,e->u.info is integer register index; valid to read after freeexp,precision_audit,high
lua,lcode.c,1256,MEM30-C,FP,e->f and e->t are integer jump-list indices in the expdesc struct; no heap free,precision_audit,high
lua,lcode.c,1256,MEM30-C,FP,e->f and e->t are integer fields; no heap free involved,precision_audit,high
lua,lcode.c,1257,MEM30-C,FP,freeexp releases register slots; 'e' is stack-allocated; no heap-free,precision_audit,high
lua,lcode.c,1257,MEM30-C,FP,e->f is an integer jump-list index; valid to read after register-slot free,precision_audit,high
lua,lcode.c,1258,MEM30-C,FP,freeexp releases register slots; 'e' is stack-allocated; no heap-free,precision_audit,high
lua,lcode.c,1258,MEM30-C,FP,e->t is an integer jump-list index; valid to read after register-slot free,precision_audit,high
lua,lcode.c,1321,API00-C,FP,internal compiler API; fs/e/key are never NULL at call sites,precision_audit,high
lua,lcode.c,1321,API00-C,FP,internal compiler API; fs/e/key are never NULL at call sites,precision_audit,high
lua,lcode.c,1321,API00-C,FP,internal compiler API; fs/e/key are never NULL at call sites,precision_audit,high
lua,lcode.c,1326,MEM30-C,FP,freeexp releases a register slot; e->u.info is set next line; 'e' is still valid,precision_audit,high
lua,lcode.c,1357,API00-C,FP,internal compiler API; fs/t/k are never NULL at call sites,precision_audit,high
lua,lcode.c,1357,API00-C,FP,internal compiler API; fs/t/k are never NULL at call sites,precision_audit,high
lua,lcode.c,1357,API00-C,FP,internal compiler API; fs/t/k are never NULL at call sites,precision_audit,high
lua,lcode.c,1419,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,1443,DCL15-C,FP,binopr2op is declared l_sinline = static inline; already has static linkage,precision_audit,high
lua,lcode.c,1443,DCL19-C,FP,binopr2op is declared l_sinline = static inline; already file-scoped,precision_audit,high
lua,lcode.c,1454,DCL15-C,FP,unopr2op is declared l_sinline = static inline; already has static linkage,precision_audit,high
lua,lcode.c,1454,DCL19-C,FP,unopr2op is declared l_sinline = static inline; already file-scoped,precision_audit,high
lua,lcode.c,1463,DCL15-C,FP,binopr2TM is declared l_sinline = static inline; already has static linkage,precision_audit,high
lua,lcode.c,1463,DCL19-C,FP,binopr2TM is declared l_sinline = static inline; already file-scoped,precision_audit,high
lua,lcode.c,1475,DCL00-C,FP,advisory const-qualifying local r; not a defect,precision_audit,high
lua,lcode.c,1477,MEM30-C,FP,freeexp releases a register slot; e->u.info is an integer; no heap free,precision_audit,high
lua,lcode.c,1566,MEM33-C,FP,expdesc has no flexible array member; struct assignment is correct and intentional swap,precision_audit,high
lua,lcode.c,1643,EXP33-C,FP,im is set by isSCnumber; r2=im used only when isSCnumber returned true; provably initialized,precision_audit,high
lua,lcode.c,1679,EXP33-C,FP,im is set by isSCnumber; r2=im used only when isSCnumber returned true; provably initialized,precision_audit,high
lua,lcode.c,1698,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,1698,API00-C,FP,internal compiler API; fs/e are never NULL at call sites,precision_audit,high
lua,lcode.c,1719,API00-C,FP,internal compiler API; fs/v are never NULL at call sites,precision_audit,high
lua,lcode.c,1719,API00-C,FP,internal compiler API; fs/v are never NULL at call sites,precision_audit,high
lua,lcode.c,1768,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,1770,EXP34-C,FP,previousinstruction returns pointer to code array or static variable; never NULL,precision_audit,high
lua,lcode.c,1797,MEM33-C,FP,expdesc has no flexible array member; *e1=*e2 is correct struct assignment,precision_audit,high
lua,lcode.c,1803,MEM33-C,FP,expdesc has no flexible array member; *e1=*e2 is correct struct assignment,precision_audit,high
lua,lcode.c,1808,PRE30-C,FP,"codeconcat is a function call, not a token-pasting macro; no UCN creation risk",precision_audit,high
lua,lcode.c,1869,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,1875,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,1875,DCL13-C,FP,advisory const-param; not a mandatory fix,precision_audit,high
lua,lcode.c,1876,ARR00-C,FP,pc is an internal PC index passed from code generator; not untrusted input,precision_audit,high
lua,lcode.c,1876,ARR30-C,FP,pc is an internal PC index passed from code generator; not untrusted input,precision_audit,high
lua,lcode.c,1878,INT10-C,FP,asize is a table constructor element count; always non-negative; modulo result is non-negative,precision_audit,high
lua,lcode.c,1882,ARR37-C,FP,inst is a pointer into fs->f->code array; inst+1 is valid array pointer arithmetic,precision_audit,high
lua,lcode.c,1893,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,1893,API00-C,FP,internal compiler API; integer param advisory only,precision_audit,high
lua,lcode.c,1912,DCL13-C,FP,advisory const-param on internal function parameter; not a mandatory fix,precision_audit,high
lua,lcode.c,1914,ARR00-C,FP,count is initialized to 0 by the for-loop init expression; not uninitialized,precision_audit,high
lua,lcode.c,1930,API00-C,FP,internal compiler API; fs is never NULL at call sites,precision_audit,high
lua,lcode.c,1933,INT13-C,FP,p->flag is lu_byte; bitwise ops on byte flags are intentional Lua idiom; not a defect,precision_audit,high
lua,lcode.c,1933,INT14-C,FP,p is a Proto pointer; finding misidentifies pointer-deref chain as mixed bitwise/arith on same var,precision_audit,high
lua,lcode.c,1937,ARR37-C,FP,pc = &p->code[i]; pc-1 is valid arithmetic on array element pointer,precision_audit,high
lua,lcode.c,1938,CON43-C,FP,single-threaded code generator; no concurrency; dereferencing pc in switch is not a double-fetch,precision_audit,high
lua,lcode.c,1940,INT13-C,FP,p->flag is lu_byte; bitwise flag operations are intentional Lua idiom,precision_audit,high
lua,lcode.c,1948,INT13-C,FP,p->flag is lu_byte; bitwise flag operations are intentional Lua idiom,precision_audit,high
lua,lcode.c,1953,INT13-C,FP,p->flag is lu_byte; bitwise flag operations are intentional Lua idiom,precision_audit,high
lua,lcode.c,1958,INT13-C,FP,p->flag is lu_byte; bitwise flag operations are intentional Lua idiom,precision_audit,high
lua,lstrlib.c,88,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,101,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,103,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,103,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,114,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,116,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,116,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,116,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,127,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,129,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,129,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,129,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,144,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,144,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,144,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,144,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,154,ARR38-C,FP,memcpy sizes validated by overflow guard at line 146; buffer pre-allocated,precision_audit,high
lua,lstrlib.c,154,EXP05-C,FP,s/sep are source args to memcpy; no const is cast away from a write target,precision_audit,high
lua,lstrlib.c,154,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,154,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,156,ARR38-C,FP,memcpy sizes validated by overflow guard at line 146; buffer pre-allocated,precision_audit,high
lua,lstrlib.c,156,EXP05-C,FP,s/sep are source args to memcpy; no const is cast away from a write target,precision_audit,high
lua,lstrlib.c,156,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,159,ARR38-C,FP,memcpy sizes validated by overflow guard at line 146; buffer pre-allocated,precision_audit,high
lua,lstrlib.c,159,EXP05-C,FP,s/sep are source args to memcpy; no const is cast away from a write target,precision_audit,high
lua,lstrlib.c,169,DCL00-C,FP,const-qualify advisory; not a defect in this context,precision_audit,high
lua,lstrlib.c,170,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,176,INT00-C,FP,guarded: posi > pose check returns early; subtraction cannot underflow,precision_audit,high
lua,lstrlib.c,179,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,190,DCL00-C,FP,const-qualify advisory; not a defect in this context,precision_audit,high
lua,lstrlib.c,192,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,192,INT32-C,FP,"i starts at 1, minimum of i-1 is 0; no overflow possible",precision_audit,high
lua,lstrlib.c,211,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,211,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,217,MEM10-C,FP,advisory: centralize NULL checks; not a defect,precision_audit,high
lua,lstrlib.c,252,ARR02-C,FP,"implicit-size array with full initializer; common C idiom, not a defect",precision_audit,high
lua,lstrlib.c,267,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,283,EXP30-C,FP,function args to variadic luaL_error; luaL_typename has no stack side effects,precision_audit,high
lua,lstrlib.c,294,EXP43-C,FP,trymt params are not restrict-qualified; no restrict aliasing issue,precision_audit,high
lua,lstrlib.c,332,ARR02-C,FP,"implicit-size array with full initializer; common C idiom, not a defect",precision_audit,high
lua,lstrlib.c,388,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,397,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,405,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,406,CON43-C,FP,single-threaded interpreter; no concurrency; double-fetch pattern inapplicable,precision_audit,high
lua,lstrlib.c,417,EXP30-C,FP,p++ then p in && operands; sequence point at && makes this well-defined,precision_audit,high
lua,lstrlib.c,431,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,432,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,433,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,434,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,435,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,436,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,437,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,438,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,439,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,440,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,441,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,445,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,472,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,477,DCL00-C,FP,const-qualify advisory; not a defect in this context,precision_audit,high
lua,lstrlib.c,477,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,477,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,477,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,477,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,478,CON43-C,FP,single-threaded interpreter; no concurrency; double-fetch pattern inapplicable,precision_audit,high
lua,lstrlib.c,488,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,494,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,494,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,494,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,494,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,494,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,494,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,495,DCL00-C,FP,const-qualify advisory; not a defect in this context,precision_audit,high
lua,lstrlib.c,495,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,495,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,508,MSC04-C,FP,mutual recursion is intentional design of pattern-matching engine,precision_audit,high
lua,lstrlib.c,515,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,523,MSC04-C,FP,mutual recursion is intentional design of pattern-matching engine,precision_audit,high
lua,lstrlib.c,523,MSC37-C,FP,for(;;) loop with explicit return on all paths; compiler sees all returns,precision_audit,high
lua,lstrlib.c,526,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,536,MSC04-C,FP,mutual recursion is intentional design of pattern-matching engine,precision_audit,high
lua,lstrlib.c,544,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,546,DCL30-C,FP,"res stores pointer into original string buffer, not dangling local data",precision_audit,high
lua,lstrlib.c,550,MSC04-C,FP,mutual recursion is intentional design of pattern-matching engine,precision_audit,high
lua,lstrlib.c,555,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,557,DCL30-C,FP,"res stores pointer into original string buffer, not dangling local data",precision_audit,high
lua,lstrlib.c,572,MSC04-C,FP,mutual recursion is intentional design of pattern-matching engine,precision_audit,high
lua,lstrlib.c,577,CON43-C,FP,single-threaded interpreter; no concurrency; double-fetch pattern inapplicable,precision_audit,high
lua,lstrlib.c,596,CON43-C,FP,single-threaded interpreter; no concurrency; double-fetch pattern inapplicable,precision_audit,high
lua,lstrlib.c,642,CON43-C,FP,single-threaded interpreter; no concurrency; double-fetch pattern inapplicable,precision_audit,high
lua,lstrlib.c,645,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,675,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,676,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,685,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,704,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,709,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,710,ARR36-C,FP,both pointers are within same string buffer (src_init..src_end or capture range),precision_audit,high
lua,lstrlib.c,714,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,731,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,731,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,731,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,731,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,731,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,733,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,740,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,740,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,749,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,763,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,764,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,764,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,786,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,792,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,804,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,804,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,804,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,804,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,804,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,812,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,850,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,854,EXP30-C,FP,assignment in condition is well-defined; sequence point before &&,precision_audit,high
lua,lstrlib.c,854,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,854,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,867,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,873,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,873,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,886,ARR30-C,FP,memchr bounded by l; loop reduces l; no OOB possible,precision_audit,high
lua,lstrlib.c,886,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,889,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,892,ARR36-C,FP,both pointers are within same string buffer (src_init..src_end or capture range),precision_audit,high
lua,lstrlib.c,893,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,894,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,895,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,938,ARR36-C,FP,both pointers are within same string buffer (src_init..src_end or capture range),precision_audit,high
lua,lstrlib.c,958,EXP33-C,FP,variable filled by luaL_checklstring output param; sqc misses assignment,precision_audit,high
lua,lstrlib.c,959,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,959,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,959,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,959,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,959,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,971,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,975,EXP30-C,FP,assignment in condition is well-defined; sequence point before &&,precision_audit,high
lua,lstrlib.c,975,EXP33-C,FP,match() is a function call not a variable; forward declaration is fine,precision_audit,high
lua,lstrlib.c,975,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,1029,ARR30-C,FP,check_capture validates index before array access,precision_audit,high
lua,lstrlib.c,1051,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,1051,INT34-C,FP,L_NBFD is 1-4; shift of 1 << L_NBFD on int is within range,precision_audit,high
lua,lstrlib.c,1052,EXP33-C,FP,variable is initialized before use; sqc false-positive on output param pattern,precision_audit,high
lua,lstrlib.c,1059,ERR02-C,FP,sprintf return value IS used (added to n); no unchecked return,precision_audit,high
lua,lstrlib.c,1059,INT00-C,FP,subtraction is guard-protected by preceding bounds check,precision_audit,high
lua,lstrlib.c,1068,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1072,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,1132,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,1139,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,1141,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,1170,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1176,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1221,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,1223,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,1241,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,1242,INT07-C,FP,char used as printable character comparison; advisory not a defect,precision_audit,high
lua,lstrlib.c,1246,STR37-C,FP,argument already cast to unsigned char via cast_uchar macro at call site,precision_audit,high
lua,lstrlib.c,1258,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1263,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1264,ARR38-C,FP,size validated before memcpy; buffer pre-allocated to sufficient size,precision_audit,high
lua,lstrlib.c,1264,STR31-C,FP,len < MAX_FORMAT-10 guard ensures form[MAX_FORMAT] has enough space,precision_audit,high
lua,lstrlib.c,1274,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1275,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1277,STR31-C,FP,addlenmod writes to pre-sized MAX_FORMAT buffer with computed offsets,precision_audit,high
lua,lstrlib.c,1277,EXP05-C,FP,cast is on already-non-const form buffer; no real const violation,precision_audit,high
lua,lstrlib.c,1288,EXP33-C,FP,sfl filled by luaL_checklstring output param before use,precision_audit,high
lua,lstrlib.c,1293,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,1298,ENV01-C,FP,"form[] is a local format buffer, not related to environment variables",precision_audit,high
lua,lstrlib.c,1305,CON43-C,FP,single-threaded interpreter; no concurrency; double-fetch pattern inapplicable,precision_audit,high
lua,lstrlib.c,1365,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,1459,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,1476,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,1476,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,1477,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1488,DCL13-C,FP,const parameter advisory; function signature is part of internal API,precision_audit,high
lua,lstrlib.c,1498,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,1501,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1501,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1501,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1501,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1551,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,1552,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax not applicable,precision_audit,high
lua,lstrlib.c,1570,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,1571,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,1571,INT00-C,FP,szmoda = totalsize & (align-1) ensures szmoda < align; subtraction safe,precision_audit,high
lua,lstrlib.c,1588,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,1588,INT13-C,FP,bitwise ops on int for byte masking; MC=(1<<NB)-1 makes sign bits zero,precision_audit,high
lua,lstrlib.c,1591,INT13-C,FP,bitwise ops on int for byte masking; MC=(1<<NB)-1 makes sign bits zero,precision_audit,high
lua,lstrlib.c,1612,MEM33-C,FP,copywithendian does byte-by-byte copy; no flexible array member involved,precision_audit,high
lua,lstrlib.c,1612,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1612,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1612,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1630,EXP33-C,FP,size/ntoalign filled by getdetails call before use,precision_audit,high
lua,lstrlib.c,1630,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,1630,EXP33-C,FP,size/ntoalign filled by getdetails call before use,precision_audit,high
lua,lstrlib.c,1638,DCL02-C,FP,n and h are in different scopes; no real confusion risk,precision_audit,high
lua,lstrlib.c,1640,INT34-C,FP,shift amount guarded by size < SZINT check; max shift fits in 64-bit type,precision_audit,high
lua,lstrlib.c,1647,DCL02-C,FP,n and h are in different scopes; no real confusion risk,precision_audit,high
lua,lstrlib.c,1649,INT34-C,FP,shift amount guarded by size < SZINT check; max shift fits in 64-bit type,precision_audit,high
lua,lstrlib.c,1655,FLP34-C,FP,float/double conversion is intentional pack format behavior; Lua validates via API,precision_audit,high
lua,lstrlib.c,1671,FLP34-C,FP,float/double conversion is intentional pack format behavior; Lua validates via API,precision_audit,high
lua,lstrlib.c,1686,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,1695,INT34-C,FP,shift amount guarded by size < SZINT check; max shift fits in 64-bit type,precision_audit,high
lua,lstrlib.c,1706,EXP34-C,FP,pointer from luaL_checklstring/buffinitsize/prepbuffsize never NULL (OOM raises),precision_audit,high
lua,lstrlib.c,1734,EXP33-C,FP,size/ntoalign filled by getdetails call before use,precision_audit,high
lua,lstrlib.c,1734,EXP33-C,FP,size/ntoalign filled by getdetails call before use,precision_audit,high
lua,lstrlib.c,1758,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,1759,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,1763,INT34-C,FP,shift amount guarded by size < SZINT check; max shift fits in 64-bit type,precision_audit,high
lua,lstrlib.c,1764,INT14-C,FP,mixed bitwise/arithmetic is intentional packed-integer manipulation,precision_audit,high
lua,lstrlib.c,1764,INT13-C,FP,bitwise ops on int for byte masking; MC=(1<<NB)-1 makes sign bits zero,precision_audit,high
lua,lstrlib.c,1783,EXP33-C,FP,ld filled by luaL_checklstring output param,precision_audit,high
lua,lstrlib.c,1784,DCL02-C,FP,n and h are in different scopes; no real confusion risk,precision_audit,high
lua,lstrlib.c,1791,EXP33-C,FP,size/ntoalign filled by getdetails call before use,precision_audit,high
lua,lstrlib.c,1791,EXP33-C,FP,size/ntoalign filled by getdetails call before use,precision_audit,high
lua,lstrlib.c,1836,STR34-C,FP,char used intentionally as byte index; cast_uchar applied at all critical sites,precision_audit,high
lua,lstrlib.c,1856,ARR02-C,FP,"implicit-size array with full initializer; common C idiom, not a defect",precision_audit,high
lua,lstrlib.c,1887,STR30-C,FP,lua_setfield takes const char*; string literal is safe as key argument,precision_audit,high
lua,lstrlib.c,1895,API00-C,FP,L is internal VM state; always valid when Lua calls C functions,precision_audit,high
lua,lstrlib.c,1895,DCL15-C,FP,luaopen_string is LUAMOD_API public entry point declared in lualib.h,precision_audit,high
lua,lbaselib.c,33,EXP33-C,FP,l filled by luaL_tolstring output param; always initialized on non-NULL return,precision_audit,high
lua,lbaselib.c,67,STR37-C,FP,cast_uchar(*s) already wraps to unsigned char before isalnum call,precision_audit,high
lua,lbaselib.c,70,STR37-C,FP,cast_uchar(*s) already wraps to unsigned char before isdigit call,precision_audit,high
lua,lbaselib.c,72,STR37-C,FP,cast_uchar(*s) already wraps to unsigned char before toupper call,precision_audit,high
lua,lbaselib.c,76,STR37-C,FP,cast_uchar(*s) already wraps to unsigned char before isalnum call,precision_audit,high
lua,lbaselib.c,92,EXP33-C,FP,l filled by lua_tolstring output param; initialized when s is non-NULL,precision_audit,high
lua,lbaselib.c,163,DCL31-C,FP,lua_rawlen declared in lua.h which is included,precision_audit,high
lua,lbaselib.c,199,PRE01-C,FP,"checkvalres macro arg res is always a plain int variable, no precedence risk",precision_audit,high
lua,lbaselib.c,199,PRE02-C,FP,"checkvalres is an if-break control-flow macro, outer parens not required",precision_audit,high
lua,lbaselib.c,199,PRE10-C,FP,"checkvalres is used as a break-from-switch stmt in a switch body, do-while not needed",precision_audit,high
lua,lbaselib.c,202,ARR02-C,FP,implicit array bounds advisory; string-terminated tables are safe C idiom,precision_audit,high
lua,lbaselib.c,205,ARR02-C,FP,implicit array bounds advisory; parallel array indexed by luaL_checkoption result,precision_audit,high
lua,lbaselib.c,208,STR34-C,FP,opts is char array used as index into optsnum via luaL_checkoption; no sign-extension risk,precision_audit,high
lua,lbaselib.c,237,ARR02-C,FP,implicit array bounds advisory; string-terminated table,precision_audit,high
lua,lbaselib.c,240,ARR02-C,FP,implicit array bounds advisory; parallel array indexed by luaL_checkoption result,precision_audit,high
lua,lbaselib.c,243,STR34-C,FP,params is char array indexed by luaL_checkoption result; no sign-extension risk,precision_audit,high
lua,lbaselib.c,280,DCL13-C,FP,L is lua_State* internal API; const-param advisory not applicable,precision_audit,high
lua,lbaselib.c,348,DCL30-C,FP,"mode points to Lua stack string via luaL_optstring, not a local variable",precision_audit,high
lua,lbaselib.c,356,STR34-C,FP,"fname is const char*, sqc misidentifies pointer as char value; no sign-extension",precision_audit,high
lua,lbaselib.c,356,STR34-C,FP,"mode is const char*, sqc misidentifies pointer as char value; no sign-extension",precision_audit,high
lua,lbaselib.c,371,API05-C,FP,conformant-array-parameter advisory; Lua codebase does not use C99 VLA syntax,precision_audit,high
lua,lbaselib.c,371,DCL13-C,FP,ud is void* callback userdata; const-param advisory not applicable to API callback,precision_audit,high
lua,lbaselib.c,398,EXP33-C,FP,l filled by lua_tolstring output param; only used when s is non-NULL,precision_audit,high
lua,lbaselib.c,509,ARR02-C,FP,implicit array bounds on luaL_Reg table; null-terminated table is standard idiom,precision_audit,high
lua,lbaselib.c,540,API00-C,FP,luaopen_base is module opener; L is guaranteed non-NULL by Lua runtime,precision_audit,high
lua,lbaselib.c,540,DCL15-C,FP,luaopen_base marked LUAMOD_API requires external linkage; static inappropriate,precision_audit,high
lua,lbaselib.c,549,STR30-C,FP,"lua_setfield receives string literal as key only, never modifies it",precision_audit,high
lua,llex.c,32,PRE00-C,FP,"next macro: ls is always a plain variable at call sites, no multiple-eval side effect",precision_audit,high
lua,llex.c,32,PRE01-C,FP,"next macro: ls is a struct pointer variable, unparenthesized use in member access is safe",precision_audit,high
lua,llex.c,32,PRE12-C,FP,next macro: ls never passed with side effects at any call site in this file,precision_audit,high
lua,llex.c,41,PRE00-C,FP,"currIsNewline: ls always a plain variable, no multiple-eval risk",precision_audit,high
lua,llex.c,41,PRE01-C,FP,currIsNewline: member access on unparenthesized ls is safe,precision_audit,high
lua,llex.c,41,PRE12-C,FP,currIsNewline: ls never side-effecting at call sites,precision_audit,high
lua,llex.c,45,ARR02-C,FP,implicit bounds on static keyword-string table; advisory only,precision_audit,high
lua,llex.c,56,PRE00-C,FP,save_and_next: ls is a plain LexState* variable at all call sites,precision_audit,high
lua,llex.c,56,PRE01-C,FP,save_and_next: unparenthesized ls safe for member access in expansion,precision_audit,high
lua,llex.c,56,PRE12-C,FP,save_and_next: ls never side-effecting at call sites,precision_audit,high
lua,llex.c,62,MSC04-C,FP,"save/lexerror/txtToken cycle is phantom; lexerror calls luaD_throw (longjmp), never returns",precision_audit,high
lua,llex.c,68,INT14-C,FP,newsize >> 1 is arithmetic right-shift for 1.5x growth; advisory readability only,precision_audit,high
lua,llex.c,75,API00-C,FP,luaX_init is internal; L is always a valid lua_State* from runtime,precision_audit,high
lua,llex.c,77,DCL00-C,FP,e is a TString* used in luaC_fix immediately; const-qualify advisory,precision_audit,high
lua,llex.c,80,MEM31-C,FP,"luaS_new returns GC-managed Lua string; not libc heap, no free needed",precision_audit,high
lua,llex.c,82,EXP34-C,FP,luaS_new longjmps on OOM via luaM_*; ts is never NULL on return,precision_audit,high
lua,llex.c,87,API00-C,FP,luaX_token2str internal; ls always valid,precision_audit,high
lua,llex.c,87,MSC37-C,FP,all branches return a value or call luaO_pushfstring which always returns,precision_audit,high
lua,llex.c,87,DCL13-C,FP,ls is LexState* internal; const-param advisory,precision_audit,high
lua,llex.c,99,ARR00-C,FP,"s points to static luaX_tokens[] string literal, not a local array",precision_audit,high
lua,llex.c,104,MSC04-C,FP,indirect recursion cycle is phantom; lexerror always longjmps via luaD_throw,precision_audit,high
lua,llex.c,116,MSC04-C,FP,"lexerror is l_noret; always throws via luaD_throw, no actual recursion",precision_audit,high
lua,llex.c,116,MSC37-C,FP,lexerror is l_noret; correctly has no return stmt after luaD_throw,precision_audit,high
lua,llex.c,124,API00-C,FP,luaX_syntaxerror internal; ls always valid,precision_audit,high
lua,llex.c,124,API00-C,FP,luaX_syntaxerror internal; msg always valid from Lua error infrastructure,precision_audit,high
lua,llex.c,124,MSC37-C,FP,luaX_syntaxerror is l_noret; calls lexerror which always longjmps,precision_audit,high
lua,llex.c,135,DCL13-C,FP,ls is LexState* internal API; const-param advisory,precision_audit,high
lua,llex.c,156,API00-C,FP,luaX_newstring internal; ls always valid,precision_audit,high
lua,llex.c,156,API00-C,FP,"luaX_newstring internal; str is buffer pointer from lexer, always valid",precision_audit,high
lua,llex.c,156,API05-C,FP,conformant-array-parameter advisory; Lua does not use C99 VLA syntax,precision_audit,high
lua,llex.c,176,API00-C,FP,luaX_setinput internal; L always valid,precision_audit,high
lua,llex.c,176,API00-C,FP,luaX_setinput internal; ls always valid,precision_audit,high
lua,llex.c,176,API00-C,FP,luaX_setinput internal; z always valid,precision_audit,high
lua,llex.c,176,API00-C,FP,luaX_setinput internal; source is a TString* from Lua infrastructure,precision_audit,high
lua,llex.c,176,DCL13-C,FP,z is ZIO* internal; const-param advisory,precision_audit,high
lua,llex.c,176,DCL13-C,FP,source is TString* stored into ls->source; cannot be const,precision_audit,high
lua,llex.c,353,DCL00-C,FP,r in readhexaesc is modified on next line via r = (r<<4)+gethexa; sqc wrong,precision_audit,high
lua,llex.c,354,INT14-C,FP,r accumulates hex nibbles; mixed bitwise/arithmetic advisory only,precision_audit,high
lua,llex.c,354,INT13-C,FP,r is 0 or positive hex digit; shift on bounded non-negative signed int is safe,precision_audit,high
lua,llex.c,374,INT14-C,FP,r in readutf8esc bounded 0..0x7FFFFFFF; advisory only,precision_audit,high
lua,llex.c,374,INT13-C,FP,r is non-negative and bounded by esccheck guard; shift is safe,precision_audit,high
lua,llex.c,387,ARR00-C,FP,buff filled by luaO_utf8esc before read; buff[UTF8BUFFSZ-n] reads valid initialized bytes,precision_audit,high
lua,llex.c,387,EXP33-C,FP,buff initialized by luaO_utf8esc which fills buff[UTF8BUFFSZ-n..UTF8BUFFSZ-1],precision_audit,high
lua,llex.c,393,DCL00-C,FP,"r in readdecesc initialized to 0, modified in loop body",precision_audit,high
lua,llex.c,467,MSC37-C,FP,llex infinite for-loop with all branches returning or continuing; no fall-off,precision_audit,high
lua,llex.c,568,EXP30-C,FP,luaZ_buffer and luaZ_bufflen are pure struct-field macros; no side effects or sequencing issue,precision_audit,high
lua,llex.c,578,DCL00-C,FP,c is single-char token value; const-qualify advisory only,precision_audit,high
lua,llex.c,588,API00-C,FP,luaX_next internal; ls always valid,precision_audit,high
lua,llex.c,599,API00-C,FP,luaX_lookahead internal; ls always valid,precision_audit,high
lua,lobject.c,37,API00-C,FP,luaO_ceillog2 internal; x is bounded unsigned int from callers,precision_audit,high
lua,lobject.c,50,INT14-C,FP,int2fb encoding mixes bitwise/arithmetic by design; advisory readability only,precision_audit,high
lua,lobject.c,51,ARR00-C,FP,log_2[x] where x<256 enforced by while loop; bounds are safe,precision_audit,high
lua,lobject.c,63,INT14-C,FP,luaO_codeparam encoding; mixed bitwise/arithmetic advisory,precision_audit,high
lua,lobject.c,63,INT14-C,FP,cast macro usage; advisory readability only,precision_audit,high
lua,lobject.c,66,INT14-C,FP,luaO_codeparam bit-twiddling; advisory only,precision_audit,high
lua,lobject.c,74,INT14-C,FP,log computation; advisory only,precision_audit,high
lua,lobject.c,89,MSC37-C,FP,luaO_applyparam has explicit return on all branches including nested else,precision_audit,high
lua,lobject.c,91,DCL00-C,FP,m is modified (m += 0x10) in normalized branch; sqc wrong about never modified,precision_audit,high
lua,lobject.c,94,INT14-C,FP,m in applyparam; mixed bitwise/arithmetic advisory,precision_audit,high
lua,lobject.c,96,INT14-C,FP,e in applyparam; advisory only,precision_audit,high
lua,lobject.c,98,EXP00-C,FP,operator precedence is correct; >> has lower precedence than / by C standard,precision_audit,high
lua,lobject.c,98,INT14-C,FP,MAX_LMEM/0x1F >> e overflow check; advisory,precision_audit,high
lua,lobject.c,98,INT13-C,FP,"e = (p>>4) adjusted; range -7..7, non-negative when used here; safe shift",precision_audit,high
lua,lobject.c,99,INT14-C,FP,x*m << e; advisory only,precision_audit,high
lua,lobject.c,99,INT13-C,FP,e is non-negative in this branch (e>=0 guard); shift safe,precision_audit,high
lua,lobject.c,106,FIO50-C,FP,no file I/O here; sqc misidentifies arithmetic expression as stream operation,precision_audit,high
lua,lobject.c,106,FIO50-C,FP,no file I/O here; sqc misidentifies arithmetic expression as stream operation,precision_audit,high
lua,lobject.c,106,INT13-C,FP,e is negative here (negated); >>e is right-shift on non-negative l_mem value,precision_audit,high
lua,lobject.c,107,INT13-C,FP,x>>e where e>0 and x is l_mem (signed); in practice x>=0 as memory size,precision_audit,high
lua,lobject.c,108,INT13-C,FP,"x>>e; same as above, l_mem is a size-like signed value, non-negative in use",precision_audit,high
lua,lobject.c,175,EXP30-C,FP,&& sequences operands; tonumberns assigns to separate n1/n2 with no aliasing,precision_audit,high
lua,lobject.c,188,API00-C,FP,luaO_arith internal; op is a valid LUA_OP* constant,precision_audit,high
lua,lobject.c,197,API00-C,FP,luaO_hexavalue internal; c is always a valid hex digit (assert guards),precision_audit,high
lua,lobject.c,199,INT07-C,FP,c is int (from ls->current); arithmetic c-'0' and c-'a' on bounded digit values,precision_audit,high
lua,lobject.c,199,INT08-C,FP,"c-'0' on hex digit 0-9; result bounded 0-9, no narrow overflow",precision_audit,high
lua,lobject.c,200,INT08-C,FP,"(ltolower(c)-'a')+10 on hex a-f; result bounded 10-15, no overflow",precision_audit,high
lua,lobject.c,230,DCL00-C,FP,r is lua_Number modified in loop body; sqc wrong about never modified,precision_audit,high
lua,lobject.c,233,DCL00-C,FP,e is int modified in loop and exponent section; sqc wrong,precision_audit,high
lua,lobject.c,236,STR34-C,FP,"*endptr == '\0' comparison; NUL is 0, safe regardless of char signedness",precision_audit,high
lua,lobject.c,258,STR34-C,FP,*endptr comparison to '\0'; no sign-extension risk in equality test,precision_audit,high
lua,lobject.c,271,STR34-C,FP,*endptr comparison to '\0'; no sign-extension risk in equality test,precision_audit,high
lua,lobject.c,296,EXP34-C,FP,endptr set to cast_charp(s) at top of lua_strx2number; always valid non-NULL,precision_audit,high
lua,lobject.c,317,STR34-C,FP,pmode is const char*; ltolower(cast_uchar(*pmode)) uses proper unsigned cast,precision_audit,high
lua,lobject.c,317,STR34-C,FP,*pmode used via cast_uchar; no sign-extension risk,precision_audit,high
lua,lobject.c,317,STR34-C,FP,pmode is char*; no sign-extension in pointer comparison context,precision_audit,high
lua,lobject.c,322,ENV01-C,FP,"buff[L_MAXLENNUM+1] is for locale conversion, not getenv; no environment variable involved",precision_audit,high
lua,lobject.c,322,MEM05-C,FP,"L_MAXLENNUM is a compile-time constant 200; this is a fixed-size stack array, not a VLA",precision_audit,high
lua,lobject.c,326,EXP05-C,FP,"strcpy(buff, s) is correct const char* source; no cast-away of const",precision_audit,high
lua,lobject.c,330,ARR36-C,FP,"endptr points into buff (from l_str2dloc(buff,...)); subtraction valid within same array",precision_audit,high
lua,lobject.c,332,DCL30-C,FP,"endptr is adjusted to s+(endptr-buff) before return; points into caller's string s, not local buff",precision_audit,high
lua,lobject.c,336,PRE02-C,FP,MAXBY10 macro is used as a value in comparison; no precedence risk,precision_audit,high
lua,lobject.c,337,PRE02-C,FP,MAXLASTD macro is used as a value; no precedence risk,precision_audit,high
lua,lobject.c,355,STR34-C,FP,*s is char used as isspace argument; comparison is safe for ASCII,precision_audit,high
lua,lobject.c,355,STR34-C,FP,s pointer iteration; no sign-extension in pointer arithmetic,precision_audit,high
lua,lobject.c,375,EXP33-C,FP,i filled by l_str2int output param; only used when l_str2int returns non-NULL,precision_audit,high
lua,lobject.c,386,API00-C,FP,luaO_utf8esc internal; buff always valid stack buffer from caller,precision_audit,high
lua,lobject.c,386,DCL15-C,FP,luaO_utf8esc declared in lobject.h for cross-TU use; cannot be static,precision_audit,high
lua,lobject.c,386,DCL19-C,FP,luaO_utf8esc is declared in lobject.h; used by llex.c; scope is intentional,precision_audit,high
lua,lobject.c,395,INT14-C,FP,"x>>=6 in UTF-8 encoding loop on l_uint32; purely bitwise, advisory only",precision_audit,high
lua,lobject.c,429,STR34-C,FP,buff is char array used with l_sprintf (snprintf); no sign-extension risk,precision_audit,high
lua,lobject.c,449,API00-C,FP,luaO_tostringbuff internal; obj always a valid number TValue from runtime,precision_audit,high
lua,lobject.c,464,API00-C,FP,luaO_tostring internal; L and obj always valid from VM,precision_audit,high
lua,lobject.c,464,API00-C,FP,luaO_tostring internal; obj always valid,precision_audit,high
lua,lobject.c,484,PRE02-C,FP,BUFVFS macro used only to initialize array size; no operator precedence issue,precision_audit,high
lua,lobject.c,500,DCL13-C,FP,L is lua_State* assigned into buff->L; cannot be const,precision_audit,high
lua,lobject.c,503,ARR01-C,FP,"sizeof(buff->space) where space is a char array member; yields array size, not pointer size",precision_audit,high
lua,lobject.c,513,DCL13-C,FP,ud is void* callback userdata cast to BuffFS*; cannot be const void*,precision_audit,high
lua,lobject.c,521,STR31-C,FP,strcpy writes 4 bytes to b+blen-3; blen>3 invariant holds from addstr2buff logic,precision_audit,high
lua,lobject.c,523,STR31-C,FP,"strcpy writes 4 bytes to b+blen; buffer has buffsize-blen>=3 bytes but null may extend 1 past; however luaS_newlstr uses explicit blen length, not null termination",precision_audit,high
lua,lobject.c,545,DCL30-C,FP,"clearbuff returns getstr(tsvalue(...)) pointing to heap Lua string, not local variable",precision_audit,high
lua,lobject.c,549,API05-C,FP,conformant-array-parameter advisory; Lua does not use C99 VLA syntax,precision_audit,high
lua,lobject.c,596,API00-C,FP,luaO_pushvfstring internal; L always valid,precision_audit,high
lua,lobject.c,596,API00-C,FP,luaO_pushvfstring internal; fmt always valid string from Lua error infrastructure,precision_audit,high
lua,lobject.c,596,MSC39-C,FP,va_list passed by value is standard C; luaO_pushvfstring is the sole consumer,precision_audit,high
lua,lobject.c,602,CON43-C,FP,no concurrency; single-threaded event loop; double-fetch concern does not apply,precision_audit,high
lua,lobject.c,604,EXP47-C,FP,"va_arg(argp, char*) reads a pointer, not char; no promotion issue",precision_audit,high
lua,lobject.c,610,DCL00-C,FP,c stores single char read from va_arg; const-qualify advisory only,precision_audit,high
lua,lobject.c,662,API00-C,FP,luaO_pushfstring internal; L always valid,precision_audit,high
lua,lobject.c,662,API00-C,FP,luaO_pushfstring internal; fmt always valid,precision_audit,high
lua,lobject.c,670,DCL30-C,FP,"msg is return of luaO_pushvfstring which points to heap Lua string, not local var",precision_audit,high
lua,lobject.c,680,PRE00-C,FP,addstr macro: a and b are plain pointer variables at all call sites,precision_audit,high
lua,lobject.c,680,PRE01-C,FP,addstr macro: a and b are simple pointers; no precedence risk in member access,precision_audit,high
lua,lobject.c,680,PRE12-C,FP,addstr macro: args are never side-effecting expressions at call sites,precision_audit,high
lua,lobject.c,682,API00-C,FP,luaO_chunkid internal; out always valid buffer,precision_audit,high
lua,lobject.c,682,API00-C,FP,luaO_chunkid internal; source always valid from Lua string,precision_audit,high
lua,lobject.c,682,API05-C,FP,conformant-array-parameter advisory; Lua does not use C99 VLA syntax,precision_audit,high
lua,lobject.c,682,API05-C,FP,conformant-array-parameter advisory; Lua does not use C99 VLA syntax,precision_audit,high
lua,lobject.c,686,ARR38-C,FP,memcpy guarded by srclen<=bufflen check; size is valid,precision_audit,high
lua,lobject.c,689,STR34-C,FP,*out='\0' assigns NUL byte to char*; no sign-extension risk,precision_audit,high
lua,lobject.c,694,ARR38-C,FP,memcpy guarded by srclen<=bufflen check in @-branch; size is valid,precision_audit,high
lua,lobject.c,698,ARR38-C,FP,memcpy copies bufflen bytes after RETS prefix; remaining space calculated correctly,precision_audit,high
lua,lobject.c,715,ARR38-C,FP,"memcpy(out, POS, (LL(POS)+1)*sizeof(char)) copies 2 bytes; out has space (post-source content)",precision_audit,high
lua,lobject.c,715,INT32-C,FP,LL(POS)=1 so (1+1)*1=2; no overflow possible,precision_audit,high
lua,ldebug.c,34,PRE00-C,FP,LuaClosure macro: parameter 'f' appears once in expansion; no multiple-eval with side effects,precision_audit,high
lua,ldebug.c,34,PRE12-C,FP,LuaClosure(f): single parameter reference; no side-effecting call sites observed,precision_audit,high
lua,ldebug.c,85,API00-C,FP,luaG_getfuncline: internal API; callers guarantee valid proto/pc; null-L check inapplicable,precision_audit,high
lua,ldebug.c,133,API00-C,FP,lua_sethook: L is lua_State from Lua API; API contract requires non-NULL; null check is non-idiom,precision_audit,high
lua,ldebug.c,133,DCL15-C,FP,LUA_API functions are part of the public API exported via lua.h; must have external linkage,precision_audit,high
lua,ldebug.c,147,API00-C,FP,lua_gethook: public Lua API; L non-null by contract; internal null check not warranted,precision_audit,high
lua,ldebug.c,147,DCL15-C,FP,LUA_API public function; cannot be static,precision_audit,high
lua,ldebug.c,147,DCL13-C,FP,lua_gethook modifies L->hook indirectly via reading; const on lua_State* is not idiomatic Lua API,precision_audit,high
lua,ldebug.c,152,API00-C,FP,lua_gethookmask: public API; L non-null by contract,precision_audit,high
lua,ldebug.c,152,DCL15-C,FP,LUA_API public function; external linkage required,precision_audit,high
lua,ldebug.c,152,DCL13-C,FP,lua_gethookmask: L not const-qualifiable in Lua API convention,precision_audit,high
lua,ldebug.c,157,API00-C,FP,lua_gethookcount: public API; L non-null by contract,precision_audit,high
lua,ldebug.c,157,DCL15-C,FP,LUA_API public function; must have external linkage,precision_audit,high
lua,ldebug.c,157,DCL13-C,FP,L not const-qualifiable per Lua API convention,precision_audit,high
lua,ldebug.c,162,API00-C,FP,lua_getstack: public API; L/ar non-null by API contract,precision_audit,high
lua,ldebug.c,162,API00-C,FP,lua_getstack: ar non-null by API contract,precision_audit,high
lua,ldebug.c,162,DCL15-C,FP,LUA_API public function; external linkage required,precision_audit,high
lua,ldebug.c,186,DCL13-C,FP,findvararg: ci is modified via dereference; const qualifier inappropriate,precision_audit,high
lua,ldebug.c,198,API00-C,FP,luaG_findlocal: internal API; L/ci guaranteed non-null by internal callers,precision_audit,high
lua,ldebug.c,198,API00-C,FP,luaG_findlocal: ci guaranteed non-null by all callers,precision_audit,high
lua,ldebug.c,198,DCL13-C,FP,L not const-qualifiable in Lua internal API convention,precision_audit,high
lua,ldebug.c,222,API00-C,FP,lua_getlocal: public API; L non-null by contract,precision_audit,high
lua,ldebug.c,222,API00-C,FP,lua_getlocal: n is small integer; no overflow risk in usage,precision_audit,high
lua,ldebug.c,225,MEM10-C,FP,Standard null-check for optional parameter; MEM10-C advisory not applicable to Lua internal idiom,precision_audit,high
lua,ldebug.c,240,DCL30-C,FP,"Returns local pointer 'name' which points to string literals or GC strings, not stack-allocated char array",precision_audit,high
lua,ldebug.c,244,API00-C,FP,lua_setlocal: public API; L non-null by contract,precision_audit,high
lua,ldebug.c,244,API00-C,FP,lua_setlocal: ar non-null by public API contract,precision_audit,high
lua,ldebug.c,244,API00-C,FP,lua_setlocal: n is small integer; no overflow risk,precision_audit,high
lua,ldebug.c,255,DCL30-C,FP,"Returns 'name' pointer to GC string or literal, not address of stack-allocated buffer",precision_audit,high
lua,ldebug.c,285,ARR00-C,FP,nextline: pc is bounded by sizelineinfo; caller (collectvalidlines) iterates i < p->sizelineinfo,precision_audit,high
lua,ldebug.c,286,ARR00-C,FP,nextline: same as above; pc within sizelineinfo bounds at all call sites,precision_audit,high
lua,ldebug.c,300,MEM31-C,FP,"luaH_new result pushed onto Lua stack immediately (sethvalue2s); GC-managed, not heap-freed",precision_audit,high
lua,ldebug.c,323,DCL13-C,FP,getfuncname: ci parameter modified via ci->previous read; const not appropriate,precision_audit,high
lua,ldebug.c,326,EXP33-C,FP,funcnamefromcall is a forward-declared static function visible in same TU; not 'uninitialized',precision_audit,high
lua,ldebug.c,335,CON43-C,FP,auxgetinfo is single-threaded; switch on *what is sequential string iteration; no concurrency double-fetch,precision_audit,high
lua,ldebug.c,395,API00-C,FP,lua_getinfo: public API; L non-null by API contract,precision_audit,high
lua,ldebug.c,395,API00-C,FP,lua_getinfo: what is const string; non-null by API contract,precision_audit,high
lua,ldebug.c,395,API00-C,FP,lua_getinfo: ar non-null by API contract,precision_audit,high
lua,ldebug.c,395,DCL15-C,FP,LUA_API public function; external linkage required,precision_audit,high
lua,ldebug.c,447,ARR00-C,FP,findsetreg: lastpc bounded to valid code range by all callers; compiler-emitted bytecode,precision_audit,high
lua,ldebug.c,495,STR34-C,FP,"*name = getstr(...): assigning const char* pointer to pointer slot, not reading char into integer; no sign extension",precision_audit,high
lua,ldebug.c,495,STR34-C,FP,Duplicate of above; same false positive on pointer assignment misread as char read,precision_audit,high
lua,ldebug.c,499,STR34-C,FP,"*name = ""?"": assigning string literal pointer; not a char-to-integer conversion",precision_audit,high
lua,ldebug.c,499,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,508,STR34-C,FP,*name = luaF_getlocalname(...): assigning const char* pointer; no char sign-extension,precision_audit,high
lua,ldebug.c,508,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,512,EXP30-C,FP,*ppc = pc = findsetreg(...): chained assignment to different objects; well-defined in C99,precision_audit,high
lua,ldebug.c,524,STR34-C,FP,*name = upvalname(...): assigning const char* pointer; no char sign extension issue,precision_audit,high
lua,ldebug.c,524,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,542,STR34-C,FP,"*name = ""?"": pointer assignment, not char read into integer",precision_audit,high
lua,ldebug.c,542,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,562,EXP33-C,FP,name: initialized NULL at line 559; explicitly set before use or checked with 'name &&',precision_audit,high
lua,ldebug.c,573,DCL30-C,FP,"Returns 'kind' which is a string literal pointer, not address of stack-allocated buffer",precision_audit,high
lua,ldebug.c,589,STR34-C,FP,"*name = ""integer index"": pointer assignment to string literal; no char sign extension",precision_audit,high
lua,ldebug.c,589,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,624,STR34-C,FP,"*name = ""for iterator"": pointer assignment; no char sign extension",precision_audit,high
lua,ldebug.c,624,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,651,STR34-C,FP,*name = getshrstr(...)+2: const char* pointer assignment; no sign extension,precision_audit,high
lua,ldebug.c,651,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,662,STR34-C,FP,"*name = ""?"": pointer assignment to literal; no sign extension issue",precision_audit,high
lua,ldebug.c,662,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,666,STR34-C,FP,"*name = ""__gc"": pointer assignment to literal; no sign extension issue",precision_audit,high
lua,ldebug.c,666,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,685,DCL13-C,FP,instack: ci read for func.p and top.p; const on struct-with-pointers not practical in Lua,precision_audit,high
lua,ldebug.c,703,DCL00-C,FP,Variable c used in for-loop controlling execution; advisory only; Lua does not enforce const here,precision_audit,high
lua,ldebug.c,707,STR34-C,FP,*name = upvalname(...): const char* pointer assignment; no char sign extension,precision_audit,high
lua,ldebug.c,707,STR34-C,FP,Duplicate of above,precision_audit,high
lua,ldebug.c,717,MEM10-C,FP,Standard null-check idiom; MEM10-C advisory not applicable,precision_audit,high
lua,ldebug.c,739,EXP34-C,FP,"formatvarinfo checks kind==NULL first; if kind non-NULL, name set by caller before this call",precision_audit,high
lua,ldebug.c,746,MSC04-C,FP,Recursion through error handling is intentional Lua design; longjmp unwinds before actual cycle,precision_audit,high
lua,ldebug.c,746,MSC37-C,FP,typeerror declared l_noret (__attribute__((noreturn))); compiler knows it never returns,precision_audit,high
lua,ldebug.c,757,API00-C,FP,luaG_typeerror: internal API; L/o non-null by contract,precision_audit,high
lua,ldebug.c,757,API00-C,FP,luaG_typeerror: o non-null by internal contract,precision_audit,high
lua,ldebug.c,757,API00-C,FP,luaG_typeerror: op is string literal or internal string; non-null,precision_audit,high
lua,ldebug.c,757,MSC04-C,FP,Indirect recursion through error-handler is Lua's intentional error propagation design,precision_audit,high
lua,ldebug.c,757,MSC37-C,FP,luaG_typeerror declared l_noret; noreturn attribute; always terminates via longjmp,precision_audit,high
lua,ldebug.c,767,API00-C,FP,luaG_callerror: internal API; L/o non-null by contract,precision_audit,high
lua,ldebug.c,767,API00-C,FP,luaG_callerror: o non-null by internal contract,precision_audit,high
lua,ldebug.c,767,MSC04-C,FP,Error recursion is Lua's intentional design; longjmp prevents actual infinite recursion,precision_audit,high
lua,ldebug.c,767,MSC37-C,FP,luaG_callerror declared l_noret; always terminates,precision_audit,high
lua,ldebug.c,770,EXP33-C,FP,funcnamefromcall is a forward-declared static function defined earlier in same TU; not uninitialized,precision_audit,high
lua,ldebug.c,771,EXP34-C,FP,name set to NULL but kind checked first; formatvarinfo only called when kind!=NULL; at that point funcnamefromcall has set *name,precision_audit,high
lua,ldebug.c,776,API00-C,FP,luaG_forerror: internal API; L/o/what non-null by callers,precision_audit,high
lua,ldebug.c,776,API00-C,FP,luaG_forerror: o non-null by callers,precision_audit,high
lua,ldebug.c,776,API00-C,FP,luaG_forerror: what is string literal from VM; non-null,precision_audit,high
lua,ldebug.c,776,MSC04-C,FP,Error recursion is intentional Lua design; longjmp breaks cycles,precision_audit,high
lua,ldebug.c,776,MSC37-C,FP,luaG_forerror declared l_noret; always terminates via longjmp,precision_audit,high
lua,ldebug.c,782,API00-C,FP,luaG_concaterror: internal API; L/p1 non-null by callers,precision_audit,high
lua,ldebug.c,782,API00-C,FP,luaG_concaterror: p1 non-null by callers,precision_audit,high
lua,ldebug.c,782,MSC04-C,FP,Error recursion is intentional Lua design,precision_audit,high
lua,ldebug.c,782,MSC37-C,FP,luaG_concaterror declared l_noret; always terminates,precision_audit,high
lua,ldebug.c,788,API00-C,FP,luaG_opinterror: internal API; L/p2/msg non-null by callers,precision_audit,high
lua,ldebug.c,788,API00-C,FP,luaG_opinterror: p2 non-null by callers,precision_audit,high
lua,ldebug.c,788,API00-C,FP,luaG_opinterror: msg is string literal; non-null,precision_audit,high
lua,ldebug.c,788,MSC04-C,FP,Error recursion is intentional Lua design,precision_audit,high
lua,ldebug.c,788,MSC37-C,FP,luaG_opinterror declared l_noret; always terminates,precision_audit,high
lua,ldebug.c,799,API00-C,FP,luaG_tointerror: internal API; L/p2 non-null by callers,precision_audit,high
lua,ldebug.c,799,API00-C,FP,luaG_tointerror: p2 non-null by callers,precision_audit,high
lua,ldebug.c,799,MSC04-C,FP,Error recursion is intentional Lua design,precision_audit,high
lua,ldebug.c,799,MSC37-C,FP,luaG_tointerror declared l_noret; always terminates,precision_audit,high
lua,ldebug.c,807,API00-C,FP,luaG_ordererror: internal API; L/p1/p2 non-null by callers,precision_audit,high
lua,ldebug.c,807,API00-C,FP,luaG_ordererror: p1 non-null by callers,precision_audit,high
lua,ldebug.c,807,API00-C,FP,luaG_ordererror: p2 non-null by callers,precision_audit,high
lua,ldebug.c,807,MSC37-C,FP,luaG_ordererror declared l_noret; always terminates,precision_audit,high
lua,ldebug.c,810,EXP34-C,FP,t1/t2 from luaT_objtypename always returns non-NULL (falls back to ttypename); no null possible,precision_audit,high
lua,ldebug.c,810,EXP34-C,FP,t2 same: luaT_objtypename always returns a valid string pointer,precision_audit,high
lua,ldebug.c,817,API00-C,FP,luaG_errnnil: internal API; L/cl non-null by callers,precision_audit,high
lua,ldebug.c,817,API00-C,FP,luaG_errnnil: cl non-null by callers,precision_audit,high
lua,ldebug.c,817,MSC04-C,FP,Error recursion is intentional Lua design,precision_audit,high
lua,ldebug.c,817,MSC37-C,FP,luaG_errnnil declared l_noret; always terminates,precision_audit,high
lua,ldebug.c,817,DCL13-C,FP,cl parameter read for cl->p; const LClosure* not conventional in Lua API,precision_audit,high
lua,ldebug.c,828,MEM10-C,FP,Null-check on optional src parameter; standard idiom for optional debug info,precision_audit,high
lua,ldebug.c,834,EXP33-C,FP,idlen initialized by getlstr macro side effect on line 833; macro assigns len via cast_void,precision_audit,high
lua,ldebug.c,840,API00-C,FP,luaG_errormsg: internal API; L non-null by callers,precision_audit,high
lua,ldebug.c,840,MSC04-C,FP,Error recursion is intentional Lua design; longjmp breaks cycles,precision_audit,high
lua,ldebug.c,840,MSC37-C,FP,luaG_errormsg declared l_noret; terminates via luaD_throw,precision_audit,high
lua,ldebug.c,857,API00-C,FP,luaG_runerror: internal API; L/fmt non-null by all callers,precision_audit,high
lua,ldebug.c,857,API00-C,FP,luaG_runerror: fmt is always a string literal from callers,precision_audit,high
lua,ldebug.c,857,MSC04-C,FP,Error recursion is intentional Lua design,precision_audit,high
lua,ldebug.c,857,MSC37-C,FP,luaG_runerror declared l_noret; always terminates,precision_audit,high
lua,ldebug.c,862,EXP33-C,FP,argp initialized by va_start inside pushvfstring macro on same line 862; not uninitialized,precision_audit,high
lua,ldebug.c,910,API00-C,FP,luaG_tracecall: internal API; L non-null by callers in VM,precision_audit,high
lua,ldebug.c,936,API00-C,FP,luaG_traceexec: internal API; pc non-null pointer to current instruction; VM guarantees validity,precision_audit,high
lua,lobject.h,98,PRE00-C,FP,"righttt(obj): obj used in ttypetag(obj) and gcvalue(obj)->tt; both are struct member reads, no side effects at call sites",precision_audit,high
lua,lobject.h,98,PRE12-C,FP,righttt: no side-effecting argument ever passed; assertion-only macro,precision_audit,high
lua,lobject.h,106,PRE00-C,FP,checkliveness: L and obj used multiple times but only in assertion context; no side-effecting args,precision_audit,high
lua,lobject.h,106,PRE01-C,FP,L appears in boolean short-circuit (L == NULL || ...) where parenthesization is correct in context,precision_audit,high
lua,lobject.h,106,PRE12-C,FP,"checkliveness(L,obj): L/obj are never side-effecting expressions at call sites",precision_audit,high
lua,lobject.h,118,PRE10-C,FP,setobj uses {} not do-while; Lua's universal macro style; never used after bare if without braces,precision_audit,high
lua,lobject.h,221,PRE00-C,FP,isnonstrictnil: ttisnil(v) and ttisstrictnil(v) both read v->tt_; no side-effecting args at call sites,precision_audit,high
lua,lobject.h,221,PRE12-C,FP,isnonstrictnil: v always a simple pointer dereference at call sites; no side effects,precision_audit,high
lua,lobject.h,259,PRE00-C,FP,"l_isfalse: ttisfalse(o)||ttisnil(o); o is a TValue*; always simple pointer, no side effects",precision_audit,high
lua,lobject.h,259,PRE12-C,FP,l_isfalse: o evaluated twice but always a simple pointer expression,precision_audit,high
lua,lobject.h,260,PRE00-C,FP,"tagisfalse: t evaluated twice in boolean; always an integer expression, no side effects",precision_audit,high
lua,lobject.h,260,PRE12-C,FP,tagisfalse: t always a simple integer value; no side-effecting call sites,precision_audit,high
lua,lobject.h,280,PRE00-C,FP,thvalue: check_exp reads o twice; both struct member reads; no side effects,precision_audit,high
lua,lobject.h,280,PRE12-C,FP,thvalue: o always a simple pointer; no side effects,precision_audit,high
lua,lobject.h,282,PRE10-C,FP,setthvalue: {} style is Lua universal macro convention; not causing if-else dangling in practice,precision_audit,high
lua,lobject.h,302,PRE10-C,FP,"CommonHeader is a struct-member-sequence macro, not a statement macro; do-while wrapping invalid here",precision_audit,high
lua,lobject.h,319,PRE00-C,FP,gcvalue: check_exp reads o twice; struct member reads; no side effects,precision_audit,high
lua,lobject.h,319,PRE12-C,FP,gcvalue: o always a simple pointer expression; no side effects,precision_audit,high
lua,lobject.h,323,PRE10-C,FP,setgcovalue: {} style is Lua's universal macro convention,precision_audit,high
lua,lobject.h,344,PRE00-C,FP,nvalue: o evaluated multiple times; struct reads only; no side effects at call sites,precision_audit,high
lua,lobject.h,344,PRE12-C,FP,nvalue: o always simple pointer; no side-effecting expansions observed,precision_audit,high
lua,lobject.h,346,PRE00-C,FP,fltvalue: o used in check_exp and val_(); struct member reads; no side effects,precision_audit,high
lua,lobject.h,346,PRE12-C,FP,fltvalue: o always simple pointer; no side effects,precision_audit,high
lua,lobject.h,347,PRE00-C,FP,ivalue: o used in check_exp and val_(); struct reads; no side effects,precision_audit,high
lua,lobject.h,347,PRE12-C,FP,ivalue: o always simple pointer; no side effects,precision_audit,high
lua,lobject.h,352,PRE10-C,FP,setfltvalue: {} style is Lua universal macro convention; not a statement macro,precision_audit,high
lua,lobject.h,355,PRE10-C,FP,chgfltvalue: {} style is Lua universal macro convention,precision_audit,high
lua,lobject.h,358,PRE10-C,FP,setivalue: {} style is Lua universal macro convention,precision_audit,high
lua,lobject.h,361,PRE10-C,FP,chgivalue: {} style is Lua universal macro convention,precision_audit,high
lua,lobject.h,383,PRE00-C,FP,tsvalue: o used in check_exp and gco2ts(val_...); struct reads; no side effects,precision_audit,high
lua,lobject.h,383,PRE12-C,FP,tsvalue: o always simple pointer; no side effects,precision_audit,high
lua,lobject.h,385,PRE10-C,FP,setsvalue: {} style Lua macro convention,precision_audit,high
lua,lobject.h,398,PRE02-C,FP,LSTRREG -1 used as comparison value for ls_byte field; no operator-precedence risk from omitting parens,precision_audit,high
lua,lobject.h,399,PRE02-C,FP,LSTRFIX -2 same as above; negative integer constant used for comparison; no precedence issue,precision_audit,high
lua,lobject.h,400,PRE02-C,FP,LSTRMEM -3 same as above; integer constant; no precedence issue,precision_audit,high
lua,lobject.h,422,PRE00-C,FP,isextstr: ts evaluated twice; struct reads only; no side effects at call sites,precision_audit,high
lua,lobject.h,422,PRE12-C,FP,isextstr: ts always simple pointer; no side effects,precision_audit,high
lua,lobject.h,430,PRE00-C,FP,getshrstr: ts evaluated in check_exp and rawgetshrstr; struct reads; no side effects,precision_audit,high
lua,lobject.h,430,PRE12-C,FP,getshrstr: ts always simple pointer,precision_audit,high
lua,lobject.h,431,PRE00-C,FP,getlngstr: ts evaluated in check_exp and ts->contents; struct reads; no side effects,precision_audit,high
lua,lobject.h,431,PRE12-C,FP,getlngstr: ts always simple pointer,precision_audit,high
lua,lobject.h,432,PRE00-C,FP,getstr: ts evaluated in ternary condition and both branches; struct reads only,precision_audit,high
lua,lobject.h,432,PRE12-C,FP,getstr: ts always simple pointer at call sites,precision_audit,high
lua,lobject.h,436,PRE00-C,FP,tsslen: ts evaluated in ternary condition and both branches; struct reads only,precision_audit,high
lua,lobject.h,436,PRE12-C,FP,tsslen: ts always simple pointer at call sites,precision_audit,high
lua,lobject.h,441,PRE00-C,FP,getlstr: ts and len appear multiple times; struct reads and cast_void assignments; no side effects,precision_audit,high
lua,lobject.h,441,PRE12-C,FP,getlstr: ts always simple pointer; len is a plain variable,precision_audit,high
lua,lobject.h,467,PRE00-C,FP,pvalue: o evaluated in check_exp and val_(); struct reads; no side effects,precision_audit,high
lua,lobject.h,467,PRE12-C,FP,pvalue: o always simple pointer at call sites,precision_audit,high
lua,lobject.h,468,PRE00-C,FP,uvalue: o evaluated in check_exp and gco2u(val_...); struct reads; no side effects,precision_audit,high
lua,lobject.h,468,PRE12-C,FP,uvalue: o always simple pointer at call sites,precision_audit,high
lua,lobject.h,472,PRE10-C,FP,setpvalue: {} style Lua macro convention,precision_audit,high
lua,lobject.h,475,PRE10-C,FP,setuvalue: {} style Lua macro convention,precision_audit,high
lua,lobject.h,498,DCL38-C,FP,uv[1] is C89 flexible-array idiom; intentional for struct-hack; C99 [] unavailable for compatibility,precision_audit,high
lua,lobject.h,498,STR31-C,FP,uv[1] is UValue (not char array); STR31-C misidentified the member type; no string buffer issue,precision_audit,high
lua,lobject.h,521,PRE00-C,FP,udatamemoffset: nuv evaluated in ternary condition and offsetof; no side-effecting args,precision_audit,high
lua,lobject.h,521,PRE12-C,FP,udatamemoffset: nuv always simple integer expression at call sites,precision_audit,high
lua,lobject.h,526,PRE00-C,FP,getudatamem: u evaluated in cast_charp and udatamemoffset; struct reads; no side effects,precision_audit,high
lua,lobject.h,526,PRE12-C,FP,getudatamem: u always simple pointer at call sites,precision_audit,high
lua,lobject.h,649,PRE00-C,FP,ttisclosure: o evaluated twice in boolean; struct reads; no side effects,precision_audit,high
lua,lobject.h,649,PRE12-C,FP,ttisclosure: o always simple pointer at call sites,precision_audit,high
lua,lobject.h,654,PRE00-C,FP,clvalue: o in check_exp and gco2cl(val_...); struct reads; no side effects,precision_audit,high
lua,lobject.h,654,PRE12-C,FP,clvalue: o always simple pointer,precision_audit,high
lua,lobject.h,655,PRE00-C,FP,clLvalue: o in check_exp and gco2lcl(val_...); struct reads; no side effects,precision_audit,high
lua,lobject.h,655,PRE12-C,FP,clLvalue: o always simple pointer,precision_audit,high
lua,lobject.h,656,PRE00-C,FP,fvalue: o in check_exp and val_().f; struct reads; no side effects,precision_audit,high
lua,lobject.h,656,PRE12-C,FP,fvalue: o always simple pointer,precision_audit,high
lua,lobject.h,657,PRE00-C,FP,clCvalue: o in check_exp and gco2ccl(val_...); struct reads; no side effects,precision_audit,high
lua,lobject.h,657,PRE12-C,FP,clCvalue: o always simple pointer,precision_audit,high
lua,lobject.h,661,PRE10-C,FP,setclLvalue: {} style Lua macro convention,precision_audit,high
lua,lobject.h,668,PRE10-C,FP,setfvalue: {} style Lua macro convention,precision_audit,high
lua,lobject.h,671,PRE10-C,FP,setclCvalue: {} style Lua macro convention,precision_audit,high
lua,lobject.h,697,PRE10-C,FP,ClosureHeader: struct-member-sequence macro; do-while wrapping semantically invalid,precision_audit,high
lua,lobject.h,703,DCL38-C,FP,upvalue[1] struct-hack idiom for C89 compatibility; intentional,precision_audit,high
lua,lobject.h,703,STR31-C,FP,"upvalue[1] is TValue array, not char array; STR31-C rule mismatch",precision_audit,high
lua,lobject.h,710,DCL38-C,FP,upvals[1] struct-hack idiom for C89 compatibility; intentional,precision_audit,high
lua,lobject.h,710,STR31-C,FP,"upvals[1] is UpVal* array, not char array; STR31-C rule mismatch",precision_audit,high
lua,lobject.h,735,PRE00-C,FP,hvalue: o in check_exp and gco2t(val_...); struct reads; no side effects,precision_audit,high
lua,lobject.h,735,PRE12-C,FP,hvalue: o always simple pointer at call sites,precision_audit,high
lua,lobject.h,737,PRE10-C,FP,sethvalue: {} style Lua macro convention,precision_audit,high
lua,lobject.h,764,PRE10-C,FP,setnodekey: {} style Lua macro convention,precision_audit,high
lua,lobject.h,770,PRE10-C,FP,getnodekey: {} style Lua macro convention,precision_audit,high
lua,lobject.h,806,PRE00-C,FP,gckeyN: n evaluated in ternary condition and gckey(n); struct reads; no side effects,precision_audit,high
lua,lobject.h,806,PRE12-C,FP,gckeyN: n always simple pointer at call sites,precision_audit,high
lua,lobject.h,825,PRE00-C,FP,lmod: size evaluated in check_exp assertion (debug only) and (size)-1; release: once; no side effects,precision_audit,high
lua,lobject.h,825,PRE01-C,FP,lmod size appears in check_exp (size&(size-1)) and cast_uint((size)-1); already effectively parenthesized in context,precision_audit,high
lua,lobject.h,825,PRE12-C,FP,lmod: size always a simple integer expression (table size); no side effects,precision_audit,high
lua,lobject.h,838,PRE11-C,FP,"Line 838 is pushvfstring macro definition, not LUAI_FUNC; sqc misidentified the macro; no trailing semicolon",precision_audit,high
lua,lobject.h,855,API02-C,FP,luaO_tostringbuff: buffer size is a fixed internal constant (MAXNUMBER2STR); not a public API with arbitrary-size input,precision_audit,high
lua,lobject.h,860,EXP37-C,FP,luaO_pushfstring variadic declaration is correct; stdarg.h included; no rule violation,precision_audit,high
lua,lobject.h,861,API02-C,FP,luaO_chunkid: out buffer size is LUA_IDSIZE (fixed compile-time constant); no variable-size API concern,precision_audit,high
lua,lobject.h,861,API05-C,FP,Lua is portability-C99; conformant array parameter syntax (API05-C) is ~100% FP per categorical_patterns.md,precision_audit,high
lua,lobject.h,861,API05-C,FP,Same file/line second API05-C finding; Lua does not use conformant array syntax by design,precision_audit,high
lua,lgc.c,51,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,51,PRE01-C,FP,"Macro params are simple identifiers, no precedence hazard",precision_audit,high
lua,lgc.c,51,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,55,PRE01-C,FP,"Macro params are simple identifiers, no precedence hazard",precision_audit,high
lua,lgc.c,59,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,59,PRE01-C,FP,"Macro params are simple identifiers, no precedence hazard",precision_audit,high
lua,lgc.c,59,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,63,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,63,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,65,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,65,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,71,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,71,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,77,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,77,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,81,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,81,PRE10-C,FP,Multi-stmt macros used correctly in expression contexts,precision_audit,high
lua,lgc.c,81,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,84,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,84,PRE10-C,FP,Multi-stmt macros used correctly in expression contexts,precision_audit,high
lua,lgc.c,84,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,86,API03-C,FP,markobject macro is not a parameter-ordering bug,precision_audit,high
lua,lgc.c,86,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,86,PRE10-C,FP,Multi-stmt macros used correctly in expression contexts,precision_audit,high
lua,lgc.c,86,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,92,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,92,PRE10-C,FP,Multi-stmt macros used correctly in expression contexts,precision_audit,high
lua,lgc.c,92,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,110,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,110,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,184,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,184,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,188,MEM33-C,FP,"Pointer assignment, not struct copy; no flexible array member issue",precision_audit,high
lua,lgc.c,197,PRE00-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,197,PRE12-C,FP,"GC macros use local-variable args, no multiple-eval hazard",precision_audit,high
lua,lgc.c,224,MEM10-C,FP,Advisory wrapper pattern; not a CERT-C defect,precision_audit,high
lua,lgc.c,246,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,247,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,268,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,269,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,282,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,282,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,283,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,297,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,297,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,298,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,300,ARR39-C,FP,"p is char*; p+offset is byte arithmetic, no double-scaling",precision_audit,high
lua,lgc.c,305,DCL30-C,FP,"Returns heap pointer or pointer-into-list, not stack-local address",precision_audit,high
lua,lgc.c,312,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,408,EXP40-C,FP,No actual const violation; pointer-to-pointer list manipulation,precision_audit,high
lua,lgc.c,410,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,470,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,488,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,550,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,577,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,595,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,603,EXP00-C,FP,Bit-shift/OR precedence is standard; intent is clear mode integer,precision_audit,high
lua,lgc.c,603,EXP00-C,FP,Bit-shift/OR precedence is standard; intent is clear mode integer,precision_audit,high
lua,lgc.c,603,EXP46-C,FP,Intentional bit-packing: (weakkey<<1)|weakvalue builds 0-3 mode int,precision_audit,high
lua,lgc.c,603,EXP00-C,FP,Bit-shift/OR precedence is standard; intent is clear mode integer,precision_audit,high
lua,lgc.c,672,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,764,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,791,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,793,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,808,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,810,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,811,DCL02-C,FP,"h/n are conventional GC loop identifiers, visually distinct in context",precision_audit,high
lua,lgc.c,837,DCL31-C,FP,"assert_code macro; only active in debug builds, not real decl",precision_audit,high
lua,lgc.c,875,EXP43-C,FP,User allocator function pointer; no restrict qualification issue,precision_audit,high
lua,lgc.c,893,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,904,INT13-C,FP,cast_byte() clamps result; GC bit values always fit in unsigned byte,precision_audit,high
lua,lgc.c,908,MEM30-C,FP,"p is GCObject** pointing into live list, not a freed pointer",precision_audit,high
lua,lgc.c,920,DCL30-C,FP,"Returns heap pointer or pointer-into-list, not stack-local address",precision_audit,high
lua,lgc.c,935,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,937,FLP03-C,FP,Integer division on strt.size; no floating-point operation here,precision_audit,high
lua,lgc.c,938,FLP03-C,FP,Integer division on strt.size; no floating-point operation here,precision_audit,high
lua,lgc.c,958,DCL30-C,FP,"Returns heap pointer or pointer-into-list, not stack-local address",precision_audit,high
lua,lgc.c,969,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1000,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1009,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,1025,EXP40-C,FP,No actual const violation; pointer-to-pointer list manipulation,precision_audit,high
lua,lgc.c,1026,EXP40-C,FP,No actual const violation; pointer-to-pointer list manipulation,precision_audit,high
lua,lgc.c,1030,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1035,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1036,DCL30-C,FP,"Returns heap pointer or pointer-into-list, not stack-local address",precision_audit,high
lua,lgc.c,1046,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,1069,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1138,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1142,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1173,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,1175,ARR02-C,FP,nextage[] size matches age enum exactly; explicit bound advisory only,precision_audit,high
lua,lgc.c,1190,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1197,INT13-C,FP,cast_byte() clamps result; GC bit values always fit in unsigned byte,precision_audit,high
lua,lgc.c,1205,DCL30-C,FP,"Returns heap pointer or pointer-into-list, not stack-local address",precision_audit,high
lua,lgc.c,1229,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1239,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1250,MEM33-C,FP,"Pointer assignment, not struct copy; no flexible array member issue",precision_audit,high
lua,lgc.c,1250,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1251,MSC07-C,FP,"goto-label idiom; remain: label follows, not unreachable code",precision_audit,high
lua,lgc.c,1261,EXP40-C,FP,No actual const violation; pointer-to-pointer list manipulation,precision_audit,high
lua,lgc.c,1262,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1276,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,1276,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,1292,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1356,EXP34-C,FP,Pointers proven non-NULL by loop conditions or GC invariants,precision_audit,high
lua,lgc.c,1389,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1428,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1440,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,1441,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1458,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1471,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1505,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1516,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,1530,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1544,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1589,DCL13-C,FP,GC parameters modified through pointed-to structures; const inappropriate,precision_audit,high
lua,lgc.c,1612,PRE02-C,FP,Negative integer sentinels; no operator-precedence hazard,precision_audit,high
lua,lgc.c,1613,PRE02-C,FP,Negative integer sentinels; no operator-precedence hazard,precision_audit,high
lua,lgc.c,1614,PRE02-C,FP,Negative integer sentinels; no operator-precedence hazard,precision_audit,high
lua,lgc.c,1617,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1618,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1694,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,1694,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1695,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1712,INT33-C,FP,sizeof(void*) is always nonzero; no division-by-zero possible,precision_audit,high
lua,lgc.c,1740,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,1741,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lgc.c,1770,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1786,API00-C,FP,Internal GC functions; L is never NULL by Lua invariant,precision_audit,high
lua,lgc.c,1786,MSC04-C,FP,GC re-entrancy guarded by gcstopem flag and longjmp boundaries,precision_audit,high
lua,lgc.c,1787,DCL00-C,FP,g=G(L) is standard Lua pattern; advisory const not required,precision_audit,high
lua,lapi.h,25,PRE00-C,FP,"L is a lua_State* pointer, never a side-effecting expression at call sites",precision_audit,high
lua,lapi.h,25,PRE01-C,FP,L used as struct member access base; no operator precedence hazard in practice,precision_audit,high
lua,lapi.h,25,PRE12-C,FP,"L is always a simple variable, never a side-effecting arg at call sites",precision_audit,high
lua,lapi.h,45,PRE00-C,FP,L and nres are simple variables at all call sites; no multiple-eval hazard,precision_audit,high
lua,lapi.h,45,PRE01-C,FP,L used in struct member access; precedence issue not reachable in practice,precision_audit,high
lua,lapi.h,45,PRE02-C,FP,adjustresults is a statement macro used as a statement; outer parens not required,precision_audit,high
lua,lapi.h,45,PRE10-C,FP,"adjustresults used only as a standalone statement, never inside single-branch if without braces in Lua code",precision_audit,high
lua,lapi.h,45,PRE12-C,FP,L is always a simple variable; no real multiple-eval risk,precision_audit,high
lua,lapi.h,51,PRE00-C,FP,L and n are simple vars at all call sites; no multiple-eval hazard,precision_audit,high
lua,lapi.h,51,PRE01-C,FP,L used as base for struct member access; no precedence problem,precision_audit,high
lua,lapi.h,51,PRE02-C,FP,api_checknelems expansion is a single expression; outer parens not required,precision_audit,high
lua,lapi.h,51,PRE12-C,FP,L is always a simple variable at call sites,precision_audit,high
lua,lapi.h,60,PRE00-C,FP,L and n are simple variables; no multiple-eval hazard in practice,precision_audit,high
lua,lapi.h,60,PRE01-C,FP,L used as struct member access base; no precedence hazard,precision_audit,high
lua,lapi.h,60,PRE02-C,FP,api_checkpop is a single-expression macro; wrapping not required,precision_audit,high
lua,lapi.h,60,PRE12-C,FP,L is always a simple variable at call sites,precision_audit,high
lua,lcode.h,60,PRE00-C,FP,luaK_jumpto: fs is always a simple FuncState* variable at call sites,precision_audit,high
lua,lcode.h,60,PRE12-C,FP,fs is always a simple variable; no actual multiple-eval risk,precision_audit,high
lua,lcode.h,102,EXP37-C,FP,luaK_semerror is a proper variadic declaration with ...; no wrong type passed,precision_audit,high
lua,lctype.c,28,MEM05-C,FP,"luai_ctype_ is a fixed-size static array [UCHAR_MAX+2], not a VLA",precision_audit,high
lua,lctype.h,58,PRE02-C,FP,lislalnum expands to testprop(...) which is already a single expression; outer parens not needed,precision_audit,high
lua,lctype.h,71,PRE00-C,FP,ltolower(c): c is always a simple char/int variable at call sites,precision_audit,high
lua,lctype.h,71,PRE02-C,FP,ltolower expands to a single expression result; outer parens not required,precision_audit,high
lua,lctype.h,71,PRE12-C,FP,c is always a simple variable at call sites; no side-effecting arg found,precision_audit,high
lua,lctype.h,77,DCL31-C,FP,LUAI_DDEC macro wraps a complete declaration; explicit type present inside,precision_audit,high
lua,lctype.h,77,ENV01-C,FP,"This is an array declaration, not an environment variable buffer",precision_audit,high
lua,lctype.h,77,MEM05-C,FP,"LUAI_DDEC of luai_ctype_[UCHAR_MAX+2] is a fixed-size declaration, not a VLA",precision_audit,high
lua,lctype.h,89,PRE00-C,FP,lislalpha(c): c is always a simple variable; no multiple-eval hazard,precision_audit,high
lua,lctype.h,89,PRE12-C,FP,c is always a simple variable at call sites,precision_audit,high
lua,lctype.h,90,PRE00-C,FP,lislalnum(c): c is always a simple variable; no multiple-eval hazard,precision_audit,high
lua,lctype.h,90,PRE12-C,FP,c is always a simple variable at call sites,precision_audit,high
lua,ldebug.h,21,PRE00-C,FP,resethookcount(L): L is always a simple lua_State* at call sites,precision_audit,high
lua,ldebug.h,21,PRE01-C,FP,L used as struct member base; no operator precedence hazard,precision_audit,high
lua,ldebug.h,21,PRE12-C,FP,L is always a simple variable; no side-effecting arg,precision_audit,high
lua,ldebug.h,57,EXP37-C,FP,luaG_runerror has proper variadic declaration; no wrong-type call,precision_audit,high
lua,ldebug.h,59,DCL13-C,FP,src parameter in luaG_addinfo is passed to functions that may require non-const; const correct as-is,precision_audit,high
lua,ldo.h,31,PRE00-C,FP,condmovestack: L/pre/pos are always simple vars or empty expressions,precision_audit,high
lua,ldo.h,31,PRE01-C,FP,pre/pos are statement expressions; no operator precedence hazard,precision_audit,high
lua,ldo.h,31,PRE01-C,FP,pos is a statement expression; no operator precedence hazard,precision_audit,high
lua,ldo.h,31,PRE10-C,FP,condmovestack always used in compound statement context in Lua source,precision_audit,high
lua,ldo.h,31,PRE12-C,FP,L is always a simple variable; no multiple-eval risk,precision_audit,high
lua,ldo.h,35,PRE00-C,FP,luaD_checkstackaux: all params are simple vars or empty exprs at call sites,precision_audit,high
lua,ldo.h,35,PRE01-C,FP,L used as struct member base; no precedence hazard,precision_audit,high
lua,ldo.h,35,PRE01-C,FP,pre is always a void expression; no precedence issue,precision_audit,high
lua,ldo.h,35,PRE01-C,FP,pos is always a void expression; no precedence issue,precision_audit,high
lua,ldo.h,35,PRE02-C,FP,luaD_checkstackaux is a statement macro; outer parens not applicable,precision_audit,high
lua,ldo.h,35,PRE10-C,FP,luaD_checkstackaux always used as standalone statement in Lua code,precision_audit,high
lua,ldo.h,35,PRE12-C,FP,L is always a simple variable at call sites,precision_audit,high
lua,ldo.h,45,PRE01-C,FP,savestack macro: L used as struct base; no precedence hazard,precision_audit,high
lua,ldo.h,46,PRE01-C,FP,restorestack macro: L used as struct base; no precedence hazard,precision_audit,high
lua,ldo.h,46,PRE02-C,FP,restorestack is a cast expression; outer parens unnecessary,precision_audit,high
lua,lfunc.h,22,PRE00-C,FP,isintwups(L): L is always a simple lua_State* variable,precision_audit,high
lua,lfunc.h,22,PRE01-C,FP,L used as struct base in member access; no precedence issue,precision_audit,high
lua,lfunc.h,22,PRE12-C,FP,L is always a simple variable at call sites,precision_audit,high
lua,lfunc.h,32,PRE00-C,FP,upisopen(up): up is always a simple UpVal* variable,precision_audit,high
lua,lfunc.h,32,PRE12-C,FP,up is always a simple variable at call sites,precision_audit,high
lua,lfunc.h,35,PRE00-C,FP,uplevel(up): up is always a simple UpVal* variable,precision_audit,high
lua,lfunc.h,35,PRE12-C,FP,up is always a simple variable at call sites,precision_audit,high
lua,linit.c,28,ARR02-C,FP,stdlibs[] implicit size is intentional; size maintained by initializer list,precision_audit,high
lua,linit.c,46,API00-C,FP,L is a public Lua API parameter; internal Lua functions never validate L for NULL,precision_audit,high
lua,linit.c,46,DCL15-C,FP,luaL_openselectedlibs is declared in lualib.h as LUALIB_API; it is the public API,precision_audit,high
lua,linit.c,51,INT13-C,FP,"mask starts at 1 and shifts left 10 times max; well within int range, no UB",precision_audit,high
lua,linit.c,55,INT13-C,FP,mask & preload: both values well within positive int range; no UB,precision_audit,high
lua,linit.c,60,INT13-C,FP,mask >> 1 on positive int value; well-defined since mask never reaches sign bit,precision_audit,high
lua,ljumptab.h,1,PRE06-C,FP,ljumptab.h is intentionally designed for repeated inclusion with #undef guards,precision_audit,high
lua,ljumptab.h,12,PRE01-C,FP,vmdispatch(x): x is always an opcode expression; no precedence issue with goto,precision_audit,high
lua,ljumptab.h,12,PRE11-C,FP,vmdispatch ends in semicolon intentionally as dispatch point in threaded code,precision_audit,high
lua,ljumptab.h,14,PRE05-C,FP,vmcase ## concatenation is correct usage; labels are formed intentionally,precision_audit,high
lua,ljumptab.h,16,PRE10-C,FP,vmbreak used as a standalone statement in the VM loop; do-while not needed,precision_audit,high
lua,ljumptab.h,16,PRE11-C,FP,vmbreak semicolons intentional in threaded dispatch macro design,precision_audit,high
lua,llex.h,85,DCL13-C,FP,source TString* is an internal Lua string; const not applicable to TString* here,precision_audit,high
lua,llex.h,86,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,lmem.h,31,PRE00-C,FP,"luaM_testsize(n,e): n and e are always simple vars or constants at call sites",precision_audit,high
lua,lmem.h,31,PRE12-C,FP,n is always a simple variable; no side-effecting arg,precision_audit,high
lua,lmem.h,44,PRE00-C,FP,"luaM_limitN(n,t): n and t are always simple expressions",precision_audit,high
lua,lmem.h,44,PRE12-C,FP,n is always a simple variable at call sites,precision_audit,high
lua,lmem.h,56,PRE00-C,FP,"luaM_free(L,b): L and b are always simple vars",precision_audit,high
lua,lmem.h,56,PRE12-C,FP,b is always a simple variable at call sites,precision_audit,high
lua,lmem.h,57,PRE00-C,FP,"luaM_freearray(L,b,n): all params are simple vars at call sites",precision_audit,high
lua,lmem.h,57,PRE12-C,FP,b is always a simple variable; no side-effecting arg,precision_audit,high
lua,lmem.h,59,PRE00-C,FP,"luaM_new(L,t): t is always a type name (sizeof arg), never side-effecting",precision_audit,high
lua,lmem.h,59,PRE01-C,FP,t is a type used in sizeof; no operator precedence issue,precision_audit,high
lua,lmem.h,59,PRE12-C,FP,"t is a type name in sizeof, not a runtime expression",precision_audit,high
lua,lmem.h,60,PRE00-C,FP,"luaM_newvector: t is a type name, n is a simple variable",precision_audit,high
lua,lmem.h,60,PRE01-C,FP,t used in sizeof; no precedence issue,precision_audit,high
lua,lmem.h,60,PRE12-C,FP,t is a type name; n is a simple variable at call sites,precision_audit,high
lua,lmem.h,62,PRE00-C,FP,luaM_newvectorchecked: L is a simple var; t is a type; n is a simple var,precision_audit,high
lua,lmem.h,62,PRE12-C,FP,L is always a simple variable; no side-effecting arg,precision_audit,high
lua,lmem.h,69,PRE00-C,FP,luaM_growvector: all params are simple vars or constants at call sites,precision_audit,high
lua,lmem.h,69,PRE01-C,FP,t is a type name in sizeof; no precedence issue,precision_audit,high
lua,lmem.h,69,PRE12-C,FP,v is always a simple variable; no side-effecting arg,precision_audit,high
lua,lmem.h,73,PRE00-C,FP,luaM_reallocvector: all params simple vars or type names,precision_audit,high
lua,lmem.h,73,PRE01-C,FP,t is a type name; no precedence issue,precision_audit,high
lua,lmem.h,73,PRE12-C,FP,t is a type name; v and n are simple variables,precision_audit,high
lua,lmem.h,77,PRE00-C,FP,luaM_shrinkvector: all params simple vars or type names,precision_audit,high
lua,lmem.h,77,PRE01-C,FP,t is a type name; no precedence issue,precision_audit,high
lua,lmem.h,77,PRE12-C,FP,t is a type name; v is a simple variable at call sites,precision_audit,high
lua,lmem.h,83,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,lmem.h,85,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,lmem.h,87,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,lopcodes.c,22,DCL15-C,FP,luaP_opmodes declared LUAI_DDEF; used externally via lopcodes.h LUAI_DDEC,precision_audit,high
lua,lopcodes.c,22,DCL19-C,FP,luaP_opmodes is a module-level table intentionally at file scope,precision_audit,high
lua,lopcodes.c,112,PRE01-C,FP,testITMode(m): m is always a simple OpCode value; no precedence issue,precision_audit,high
lua,lopnames.h,1,PRE06-C,FP,lopnames.h has proper #ifndef/#define/#endif include guard,precision_audit,high
lua,lopnames.h,15,ARR02-C,FP,opnames[] NULL-terminated implicit-size array is intentional Lua pattern,precision_audit,high
lua,lprefix.h,17,DCL37-C,FP,_XOPEN_SOURCE is a POSIX feature-test macro; defining it before system headers is the prescribed way to enable POSIX APIs,precision_audit,high
lua,lprefix.h,26,DCL37-C,FP,_LARGEFILE_SOURCE is a POSIX feature-test macro; defining it is the prescribed way to enable large-file support,precision_audit,high
lua,lprefix.h,27,DCL37-C,FP,_FILE_OFFSET_BITS is a POSIX feature-test macro; defining it is the prescribed way to enable 64-bit off_t,precision_audit,high
lua,lprefix.h,39,DCL37-C,FP,_CRT_SECURE_NO_WARNINGS is a MSVC-specific define; intentional platform adaptation,precision_audit,high
lua,lstring.h,41,PRE00-C,FP,"luaS_newliteral(L,s): s is always a string literal; no side-effecting arg",precision_audit,high
lua,lstring.h,41,PRE12-C,FP,s is always a string literal at call sites; sizeof(s) is compile-time constant,precision_audit,high
lua,lstring.h,48,PRE00-C,FP,isreserved(s): s is always a simple TString* variable,precision_audit,high
lua,lstring.h,48,PRE12-C,FP,s is always a simple variable at call sites,precision_audit,high
lua,lstring.h,54,PRE00-C,FP,"eqshrstr(a,b): a and b are always simple TString* variables",precision_audit,high
lua,lstring.h,54,PRE02-C,FP,eqshrstr expands to a single comma-expression; no precedence issue,precision_audit,high
lua,lstring.h,54,PRE12-C,FP,a is always a simple variable; b is always a simple variable,precision_audit,high
lua,lstring.h,65,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,lstring.h,69,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,lstring.h,69,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,ltm.h,54,PRE02-C,FP,maskflags is a parenthesized cast expression; outer parens not needed,precision_audit,high
lua,ltm.h,63,PRE00-C,FP,"checknoTM(mt,e): both params are simple variables at call sites",precision_audit,high
lua,ltm.h,63,PRE12-C,FP,mt is always a simple pointer variable at call sites,precision_audit,high
lua,ltm.h,65,PRE00-C,FP,"gfasttm(g,mt,e): all params are simple vars at call sites",precision_audit,high
lua,ltm.h,65,PRE01-C,FP,e is a TMS enum value; no operator precedence hazard,precision_audit,high
lua,ltm.h,65,PRE12-C,FP,mt is always a simple variable; no side-effecting arg,precision_audit,high
lua,ltm.h,70,PRE02-C,FP,ttypename expands to array subscript; outer parens not needed,precision_audit,high
lua,ltm.h,72,DCL31-C,FP,LUAI_DDEC macro wraps a complete typed declaration; explicit type present inside,precision_audit,high
lua,lundump.h,20,PRE02-C,FP,LUAC_INT -0x5678 is a simple negative integer literal; outer parens not needed,precision_audit,high
lua,lvm.h,51,PRE00-C,FP,"tonumber(o,n): o and n are always simple variables at call sites",precision_audit,high
lua,lvm.h,51,PRE12-C,FP,o is always a simple variable; no side-effecting arg,precision_audit,high
lua,lvm.h,56,PRE00-C,FP,"tonumberns(o,n): o and n are always simple variables at call sites",precision_audit,high
lua,lvm.h,56,PRE12-C,FP,o is always a simple variable; no side-effecting arg,precision_audit,high
lua,lvm.h,62,API03-C,FP,tointeger is a conversion macro; parameter naming reflects output-pointer convention,precision_audit,high
lua,lvm.h,62,PRE00-C,FP,"tointeger(o,i): o and i are always simple variables at call sites",precision_audit,high
lua,lvm.h,62,PRE12-C,FP,o is always a simple variable; no side-effecting arg,precision_audit,high
lua,lvm.h,68,API03-C,FP,tointegerns follows same consistent output-pointer convention as tointeger,precision_audit,high
lua,lvm.h,68,PRE00-C,FP,"tointegerns(o,i): o and i are always simple variables at call sites",precision_audit,high
lua,lvm.h,68,PRE12-C,FP,o is always a simple variable; no side-effecting arg,precision_audit,high
lua,lvm.h,73,PRE01-C,FP,"intop(op,...): op is an operator token, not a runtime expression; no precedence issue",precision_audit,high
lua,lvm.h,81,PRE00-C,FP,"luaV_fastget: t, k, res, f, tag are always simple vars at call sites",precision_audit,high
lua,lvm.h,81,PRE01-C,FP,"f is a function pointer; used as function call, no precedence hazard",precision_audit,high
lua,lvm.h,81,PRE01-C,FP,tag is always a simple variable; no precedence hazard,precision_audit,high
lua,lvm.h,81,PRE12-C,FP,t is always a simple variable; no side-effecting arg,precision_audit,high
lua,lvm.h,89,PRE00-C,FP,"luaV_fastgeti: t, k, res, tag are always simple variables at call sites",precision_audit,high
lua,lvm.h,89,PRE01-C,FP,tag is always a simple variable; no precedence issue,precision_audit,high
lua,lvm.h,89,PRE10-C,FP,luaV_fastgeti used in compound-statement contexts in VM loop,precision_audit,high
lua,lvm.h,89,PRE12-C,FP,t is always a simple variable; no side-effecting arg,precision_audit,high
lua,lvm.h,94,PRE00-C,FP,luaV_fastset: all params are simple vars at call sites,precision_audit,high
lua,lvm.h,94,PRE01-C,FP,hres is a simple variable; no precedence hazard,precision_audit,high
lua,lvm.h,94,PRE01-C,FP,f is a function pointer used as call; no precedence issue,precision_audit,high
lua,lvm.h,94,PRE12-C,FP,t is always a simple variable; no side-effecting arg,precision_audit,high
lua,lvm.h,97,PRE00-C,FP,luaV_fastseti: all params are simple vars at call sites,precision_audit,high
lua,lvm.h,97,PRE01-C,FP,hres is a simple variable; no precedence hazard,precision_audit,high
lua,lvm.h,97,PRE10-C,FP,luaV_fastseti used in compound-statement contexts in VM loop,precision_audit,high
lua,lvm.h,97,PRE12-C,FP,t is always a simple variable; no side-effecting arg,precision_audit,high
lua,lzio.c,39,API00-C,FP,L is an internal Lua API parameter; Lua never validates L for NULL at API boundary,precision_audit,high
lua,lzio.c,39,API00-C,FP,z is an internal ZIO struct; always valid at call sites from Lua core,precision_audit,high
lua,lzio.c,39,DCL13-C,FP,L is lua_State*; const not applicable to lua_State in Lua API convention,precision_audit,high
lua,lzio.c,39,DCL13-C,FP,data is stored in z->data and may be used mutably later; const not applicable,precision_audit,high
lua,lzio.c,63,API00-C,FP,z and b are internal Lua core pointers; always valid at call sites,precision_audit,high
lua,lzio.c,63,API00-C,FP,b is an output buffer; always valid at call sites from Lua core,precision_audit,high
lua,lzio.c,63,API00-C,FP,n is size_t; overflow check on unsigned arithmetic is inapplicable,precision_audit,high
lua,lzio.c,63,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,lzio.c,66,EXP20-C,FP,checkbuffer returns 0 (fail) or 1 (success); boolean test is idiomatic C,precision_audit,high
lua,lzio.c,81,EXP20-C,FP,checkbuffer returns 0/1; boolean test is idiomatic and unambiguous,precision_audit,high
lua,lzio.c,88,DCL30-C,FP,"res holds z->p value (pointer into ZIO buffer), not address of local; no dangling pointer",precision_audit,high
lua,lzio.h,20,PRE00-C,FP,zgetc(z): z is always a simple ZIO* variable at call sites,precision_audit,high
lua,lzio.h,20,PRE12-C,FP,z is always a simple variable; no side-effecting arg at call sites,precision_audit,high
lua,lzio.h,29,PRE00-C,FP,"luaZ_initbuffer(L,buff): both params are simple vars at call sites",precision_audit,high
lua,lzio.h,29,PRE12-C,FP,buff is always a simple variable at call sites,precision_audit,high
lua,lzio.h,39,PRE00-C,FP,"luaZ_resizebuffer(L,buff,size): all params are simple vars at call sites",precision_audit,high
lua,lzio.h,39,PRE12-C,FP,buff is always a simple variable at call sites,precision_audit,high
lua,lzio.h,49,API05-C,FP,Lua does not use C99 conformant array parameter syntax; advisory inapplicable,precision_audit,high
lua,liolib.c,39,CON07-C,FP,"l_checkmode operates on local parameter, not a shared static variable",precision_audit,high
lua,liolib.c,40,EXP30-C,FP,*(mode++) is post-increment on local pointer; well-defined sequence point,precision_audit,high
lua,liolib.c,40,EXP30-C,FP,"Duplicate finding; same post-increment on local pointer, valid C",precision_audit,high
lua,liolib.c,40,EXP30-C,FP,"Duplicate finding; same post-increment on local pointer, valid C",precision_audit,high
lua,liolib.c,41,EXP30-C,FP,"++mode inside comma expression with cast, sequence-point safe",precision_audit,high
lua,liolib.c,68,PRE00-C,FP,l_checkmodep indexes m[0..2] without side-effecting argument; no multiple-eval issue,precision_audit,high
lua,liolib.c,68,PRE01-C,FP,"m used as array base, not in arithmetic expression; no precedence risk",precision_audit,high
lua,liolib.c,68,PRE12-C,FP,m[0]/m[1]/m[2] index access not a multiple-evaluation of a side-effecting argument,precision_audit,high
lua,liolib.c,88,PRE00-C,FP,"Default l_checkmodep same pattern; index access, no side-effecting argument",precision_audit,high
lua,liolib.c,88,PRE01-C,FP,No operator precedence hazard; m used as pointer base only,precision_audit,high
lua,liolib.c,88,PRE12-C,FP,No multiple-evaluation; m[0] and m[1] indexed once each,precision_audit,high
lua,liolib.c,202,EXP34-C,FP,lua_newuserdatauv raises on OOM; p is never NULL after call,precision_audit,high
lua,liolib.c,204,DCL30-C,FP,"p points to Lua GC userdata, not a stack-allocated local; safe to return",precision_audit,high
lua,liolib.c,254,EXP34-C,FP,newprefile calls lua_newuserdatauv which raises on OOM; p never NULL,precision_audit,high
lua,liolib.c,256,DCL30-C,FP,"p is Lua GC userdata, not stack storage; return is safe",precision_audit,high
lua,liolib.c,262,EXP34-C,FP,p from newfile (via newprefile/lua_newuserdatauv) is always non-NULL,precision_audit,high
lua,liolib.c,262,FIO42-C,FP,p->f is managed by io_fclose via Lua GC; file is closed via closef callback,precision_audit,high
lua,liolib.c,262,FIO42-C,FP,Duplicate FIO42-C; same LStream lifecycle analysis applies,precision_audit,high
lua,liolib.c,262,FIO51-C,FP,File closed via io_fclose registered in closef; Lua GC manages lifecycle,precision_audit,high
lua,liolib.c,264,CON33-C,FP,Lua io library is single-threaded by design; strerror thread safety not a concern,precision_audit,high
lua,liolib.c,264,CON34-C,FP,"Same rationale; Lua state is single-threaded, strerror static buffer not shared",precision_audit,high
lua,liolib.c,275,EXP34-C,FP,p from newfile always non-NULL; Lua raises on OOM before returning,precision_audit,high
lua,liolib.c,275,FIO42-C,FP,io_open assigns p->f and closef=io_fclose; lifecycle managed by Lua GC,precision_audit,high
lua,liolib.c,275,FIO42-C,FP,Duplicate FIO42-C; same lifecycle applies,precision_audit,high
lua,liolib.c,275,ERR00-C,FP,fopen return is checked at line 276: (p->f == NULL) ? luaL_fileresult...,precision_audit,high
lua,liolib.c,275,FIO51-C,FP,File closed by io_fclose via GC-managed closef; FP,precision_audit,high
lua,liolib.c,296,EXP34-C,FP,p from newprefile always non-NULL; Lua raises on allocation failure,precision_audit,high
lua,liolib.c,296,FIO42-C,FP,io_popen sets closef=io_pclose; FILE closed by pclose via Lua GC,precision_audit,high
lua,liolib.c,305,EXP34-C,FP,p from newfile always non-NULL,precision_audit,high
lua,liolib.c,305,FIO21-C,FP,tmpfile() is the standard C portable API; race-condition concern is theoretical advisory for this use case,precision_audit,high
lua,liolib.c,316,EXP34-C,FP,p from lua_touserdata on a known registry value; isclosed check guards p->f,precision_audit,high
lua,liolib.c,468,STR00-C,FP,rn->c is int (from getc/getc_unlocked); already unsigned-char-range safe,precision_audit,high
lua,liolib.c,468,STR37-C,FP,rn->c is int in [0..255] or EOF; no sign-extension issue with isxdigit,precision_audit,high
lua,liolib.c,468,STR00-C,FP,Same int c analysis; isdigit(rn->c) is safe,precision_audit,high
lua,liolib.c,468,STR37-C,FP,"Duplicate; rn->c declared int, already in valid range for ctype macros",precision_audit,high
lua,liolib.c,479,DCL13-C,FP,FILE* cannot be const FILE* per stdio semantics; const inapplicable,precision_audit,high
lua,liolib.c,488,STR00-C,FP,rn.c is int from getc(); no signed char issue,precision_audit,high
lua,liolib.c,488,STR37-C,FP,rn.c is int from l_getc (getc/getc_unlocked); safe for isspace,precision_audit,high
lua,liolib.c,501,ERR33-C,FP,"ungetc return on lookahead pushback; failure here is diagnostic-only advisory, not a defect",precision_audit,high
lua,liolib.c,514,DCL00-C,FP,"c is assigned by getc(f); advisory const style nit, not a defect",precision_audit,high
lua,liolib.c,515,ERR33-C,FP,ungetc pushback of EOF is documented no-op; return check advisory only,precision_audit,high
lua,liolib.c,525,FIO34-C,FP,"ferror(f) checked at g_read line 609 after read; standard idiom, not a defect",precision_audit,high
lua,liolib.c,529,FIO34-C,FP,Same; EOF detection loop with post-loop ferror check at g_read caller,precision_audit,high
lua,liolib.c,529,EXP30-C,FP,Assignment in while condition (c = l_getc(f)) has defined sequence point,precision_audit,high
lua,liolib.c,529,EXP33-C,FP,c declared at line 523; assigned in while condition before use in loop body,precision_audit,high
lua,liolib.c,538,DCL31-C,FP,lua_rawlen declared in lua.h which is included at top of file,precision_audit,high
lua,liolib.c,548,ERR33-C,FP,fread return stored in nr; loop condition (nr==LUAL_BUFFERSIZE) handles partial reads,precision_audit,high
lua,liolib.c,548,ERR00-C,FP,nr used to track bytes read; read_all loop exits on short read,precision_audit,high
lua,liolib.c,548,FIO17-C,FP,luaL_Buffer handles binary data; no null-terminator requirement here,precision_audit,high
lua,liolib.c,561,ERR00-C,FP,nr from fread used in luaL_addsize and as return value; return is checked,precision_audit,high
lua,liolib.c,561,FIO17-C,FP,luaL_Buffer is a binary buffer; null-terminator handling done by Lua string layer,precision_audit,high
lua,liolib.c,561,EXP34-C,FP,luaL_prepbuffsize raises on OOM; p is never NULL,precision_audit,high
lua,liolib.c,589,CON43-C,FP,switch on *p (local const char*) in single-threaded Lua; no double-fetch,precision_audit,high
lua,liolib.c,642,EXP34-C,FP,isclosed(p) checked at line 636 before p->f access; safe,precision_audit,high
lua,liolib.c,668,EXP33-C,FP,buff is declared at line 668 and filled by lua_numbertocstring at line 671; not uninitialized,precision_audit,high
lua,liolib.c,678,FIO18-C,FP,len from luaL_checklstring is the exact string length; fwrite count is correct,precision_audit,high
lua,liolib.c,678,EXP34-C,FP,luaL_checklstring raises on type error; s is never NULL when reached,precision_audit,high
lua,liolib.c,703,ARR02-C,FP,Implicit bounds on static const array with initializer is standard C idiom,precision_audit,high
lua,liolib.c,704,ARR02-C,FP,Implicit bounds on static const string-pointer array; style advisory only,precision_audit,high
lua,liolib.c,706,STR34-C,FP,"modenames is const char*[]; indexing yields const char*, not a char sign-extension",precision_audit,high
lua,liolib.c,723,ARR02-C,FP,Static const int array with implicit bounds; advisory style nit,precision_audit,high
lua,liolib.c,724,ARR02-C,FP,Static const char* array with implicit bounds; style advisory,precision_audit,high
lua,liolib.c,726,STR34-C,FP,Same as line 706; modenames yields pointer not char; no sign extension,precision_audit,high
lua,liolib.c,754,ARR02-C,FP,luaL_Reg iolib[] implicit bounds; standard Lua lib registration idiom,precision_audit,high
lua,liolib.c,773,ARR02-C,FP,luaL_Reg meth[] implicit bounds; standard Lua lib registration idiom,precision_audit,high
lua,liolib.c,788,ARR02-C,FP,luaL_Reg metameth[] implicit bounds; standard Lua lib registration idiom,precision_audit,high
lua,liolib.c,802,STR30-C,FP,lua_setfield takes const char* and does not modify the string literal,precision_audit,high
lua,liolib.c,819,DCL13-C,FP,FILE* parameter; const FILE* not meaningful for stdio FILE objects,precision_audit,high
lua,liolib.c,822,EXP34-C,FP,p from newprefile always non-NULL; Lua raises on allocation failure,precision_audit,high
lua,liolib.c,832,API00-C,FP,"L validation is internal Lua convention; asserting non-NULL is a lua_assert, not a runtime check",precision_audit,high
lua,liolib.c,832,DCL15-C,FP,LUAMOD_API marks public ABI entry point; external linkage is intentional,precision_audit,high
lua,lua.c,42,CON03-C,FP,"globalL is a signal-handler concern (SIG31-C), not a threading issue; wrong rule applied",precision_audit,med
lua,lua.c,57,SIG00-C,FP,sigemptyset(&sa.sa_mask) is called at line 56 before sigaction; sa_mask properly initialized,precision_audit,high
lua,lua.c,70,DCL13-C,FP,lua_Debug* signature fixed by Lua API (lua_Hook type); cannot add const,precision_audit,high
lua,lua.c,86,EXP34-C,FP,laction only fires during docall after globalL is set; globalL non-NULL when handler runs,precision_audit,high
lua,lua.c,152,EXP43-C,FP,"luaL_traceback(L, L, ...) is the standard Lua pattern; L is a state not a restrict buffer",precision_audit,high
lua,lua.c,191,DCL13-C,FP,char** argv matches main() convention; const char** would require incompatible cast,precision_audit,high
lua,lua.c,199,STR30-C,FP,lua_setglobal takes const char*; does not modify the string literal,precision_audit,high
lua,lua.c,233,STR34-C,FP,*modname compared via strchr; char used in pointer context not widened to int with sign extension,precision_audit,high
lua,lua.c,241,STR34-C,FP,"*suffix is char from argv string used as NUL; assigned '\0', no sign extension concern",precision_audit,high
lua,lua.c,255,DCL31-C,FP,luaL_len declared in lauxlib.h which is included,precision_audit,high
lua,lua.c,258,INT32-C,FP,n = (int)luaL_len on arg table; arg table cannot have INT_MAX entries in practice,precision_audit,high
lua,lua.c,264,DCL13-C,FP,char** argv is standard main convention; const not applicable without cascading casts,precision_audit,high
lua,lua.c,267,ARR00-C,FP,argv[-1] in handle_script intentional; caller ensures script>0 so argv-1 is valid,precision_audit,high
lua,lua.c,293,DCL13-C,FP,char** argv standard main convention,precision_audit,high
lua,lua.c,356,DCL13-C,FP,char** argv standard main convention,precision_audit,high
lua,lua.c,360,STR34-C,FP,argv[i][1] used as switch value on ASCII option char; no sign-extension hazard,precision_audit,high
lua,lua.c,394,DCL31-C,FP,l_getenv declared at line 383 before call at line 394,precision_audit,high
lua,lua.c,397,DCL31-C,FP,l_getenv declared at line 383; same declaration covers all call sites,precision_audit,high
lua,lua.c,478,CON03-C,FP,l_readline is a module-level function pointer set once at init; not shared across threads,precision_audit,high
lua,lua.c,482,CON03-C,FP,l_addhist is a module-level function pointer set once at init; not a threading concern,precision_audit,high
lua,lua.c,490,ERR33-C,FP,fflush return on stdout prompt is advisory; ignoring is standard REPL practice,precision_audit,high
lua,lua.c,491,FIO20-C,FP,fgets with LUA_MAXINPUT=512; truncation handled by multiline continuation logic,precision_audit,high
lua,lua.c,505,MEM00-C,FP,lua_freeline(line) at call site; allocation and free abstraction levels match readline pattern,precision_audit,high
lua,lua.c,520,FIO42-C,FP,lib is dlopen handle; intentionally not closed (process lifetime for readline library),precision_audit,high
lua,lua.c,520,ENV30-C,FP,dlopen does not modify the path string; ENV30-C inapplicable,precision_audit,high
lua,lua.c,524,STR30-C,FP,"*name = ""lua"" assigns the pointer rl_readline_name to point at literal; not modifying literal",precision_audit,high
lua,lua.c,524,STR34-C,FP,*name is const char** dereference; pointer assigned not char widened,precision_audit,high
lua,lua.c,524,STR34-C,FP,Duplicate finding; same analysis applies,precision_audit,high
lua,lua.c,578,EXP33-C,FP,lmsg passed as output pointer to lua_tolstring which initializes it; not uninitialized,precision_audit,high
lua,lua.c,589,ENV01-C,FP,handle_luainit uses l_getenv returning a pointer; no fixed-size copy buffer present at line 589,precision_audit,high
lua,lua.c,612,STR34-C,FP,retline is const char* from lua_pushfstring; no sign extension context,precision_audit,high
lua,lua.c,612,EXP34-C,FP,lua_pushfstring never returns NULL; raises on OOM,precision_audit,high
lua,lua.c,612,STR34-C,FP,Duplicate finding; same lua_pushfstring const char* analysis,precision_audit,high
lua,lua.c,638,MSC37-C,FP,multiline has for(;;) loop with return inside; control never falls off end,precision_audit,high
lua,lua.c,643,STR34-C,FP,line from lua_tolstring is const char*; no char sign-extension,precision_audit,high
lua,lua.c,643,EXP33-C,FP,len is output parameter to lua_tolstring on same line; initialized before use,precision_audit,high
lua,lua.c,673,EXP20-C,FP,loadline sets stack to exactly 1 result; == 1 test is intentional and correct,precision_audit,high
lua,lua.c,698,CON07-C,FP,progname is single-threaded; save/restore pattern for REPL is safe,precision_audit,high
lua,lua.c,711,DCL30-C,FP,oldprogname holds a pointer value (not stack array address); restoring progname is safe,precision_audit,high
lua,lua.c,711,MEM30-C,FP,"oldprogname is a pointer to string-literal or argv[0], not stack-allocated memory",precision_audit,high
lua,lua.c,735,STR34-C,FP,argv[i][0] used as switch char; ASCII option chars never negative,precision_audit,high
lua,lua.c,736,EXP33-C,FP,script is passed as &script to collectargs which initializes it; not uninitialized at use,precision_audit,high
lua,lua.c,739,EXP34-C,FP,argv is main argv from C runtime; non-NULL; collectargs validated it already,precision_audit,high
lua,lua.c,742,INT13-C,FP,args bitmask uses positive values < 32; bitwise & on small positive int is safe,precision_audit,high
lua,lua.c,744,INT13-C,FP,Same bitmask; values are defined positive constants,precision_audit,high
lua,lua.c,747,STR30-C,FP,lua_setfield takes const char*; string literal not modified,precision_audit,high
lua,lua.c,763,INT13-C,FP,args & has_e: positive bitmask values; safe bitwise operation,precision_audit,high
lua,lua.c,765,INT13-C,FP,"args & (has_e | has_v): positive bitmask, no sign-bit involvement",precision_audit,high
lua,lua.c,777,API00-C,FP,argv in main() is guaranteed non-NULL by C runtime; validation is unnecessary,precision_audit,high
lua,lua.c,42,SIG31-C,FN,globalL accessed in signal handler without volatile; non-volatile non-atomic object modified by main and read in laction,manual-audit-confirmed,med
lua,lapi.c,35,DCL15-C,FP,lua_ident is intentionally external; part of the public Lua version API,precision_audit,high
lua,lapi.c,35,DCL19-C,FP,File-scope version string intentionally global for embedder access,precision_audit,high
lua,lapi.c,109,API00-C,FP,Lua C API documented contract: L is always valid; checking for NULL is not required,precision_audit,high
lua,lapi.c,109,API00-C,FP,n is checked via api_check; overflow concern is advisory and api-contract-enforced,precision_audit,high
lua,lapi.c,109,DCL15-C,FP,LUA_API is the public exported symbol; adding static would break ABI,precision_audit,high
lua,lapi.c,126,DCL15-C,FP,LUA_API exported public C API function; static would break ABI,precision_audit,high
lua,lapi.c,142,API00-C,FP,lua_atpanic is public API; L-null check is documented caller responsibility,precision_audit,high
lua,lapi.c,152,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,167,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,167,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,167,DCL13-C,FP,"Advisory const-qualify; L is opaque state pointer, const is incompatible with API",precision_audit,high
lua,lapi.c,174,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,174,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,174,DCL13-C,FP,Advisory only; lua_State* cannot be const in practice,precision_audit,high
lua,lapi.c,179,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,179,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,206,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,206,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,207,DCL22-C,FP,level is StkId reassigned from luaF_close return; no longjmp recovery path here; volatile not needed,precision_audit,high
lua,lapi.c,238,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,238,API00-C,FP,n is api_check validated; advisory-only overflow concern for stack index math,precision_audit,high
lua,lapi.c,238,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,253,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,253,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,268,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,268,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,282,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,282,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,288,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,295,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,295,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,301,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,301,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,307,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,307,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,314,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,314,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,320,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,320,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,326,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,326,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,333,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,333,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,343,EXP30-C,FP,"luaO_arith arguments are s2v() macro reads, not side-effecting calls; no sequencing issue",precision_audit,high
lua,lapi.c,349,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,349,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,369,API00-C,FP,Lua C API documented contract; L/buff null check not required by design,precision_audit,high
lua,lapi.c,369,API00-C,FP,buff is output param; null check is caller responsibility per API contract,precision_audit,high
lua,lapi.c,381,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,381,API00-C,FP,s is passed to luaO_str2num which handles null/empty; not a safety issue,precision_audit,high
lua,lapi.c,381,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,382,STR34-C,FP,s passed as const char* to luaO_str2num; no sign-extension involved at this call site,precision_audit,high
lua,lapi.c,389,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,389,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,399,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,399,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,409,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,409,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,437,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,455,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,455,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,464,API00-C,FP,o is always a valid TValue* from index2value; not a public API pointer param,precision_audit,high
lua,lapi.c,464,DCL15-C,FP,touserdata is l_sinline (static inline); it already has internal linkage,precision_audit,high
lua,lapi.c,473,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,479,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,492,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,514,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,514,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,522,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,522,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,530,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,530,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,543,API00-C,FP,Lua C API documented contract; L/s null checks are caller responsibility,precision_audit,high
lua,lapi.c,543,API00-C,FP,s is checked for len==0 case before use; API contract governs nullity,precision_audit,high
lua,lapi.c,543,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax is not applicable,precision_audit,high
lua,lapi.c,555,API00-C,FP,Lua C API documented contract; L/s/ud null checks are caller responsibility,precision_audit,high
lua,lapi.c,555,API00-C,FP,s is external string with documented non-null contract,precision_audit,high
lua,lapi.c,555,API00-C,FP,ud is optional userdata for allocator; API allows null per design,precision_audit,high
lua,lapi.c,556,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax is not applicable,precision_audit,high
lua,lapi.c,556,API05-C,FP,Lua uses C89-style pointer params; conformant array syntax is not applicable,precision_audit,high
lua,lapi.c,570,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,572,MEM10-C,FP,Direct NULL check for s is correct and intentional; no need for indirection function,precision_audit,high
lua,lapi.c,576,MEM31-C,FP,luaS_new returns GC-managed TString; explicit free is wrong; GC owns it,precision_audit,high
lua,lapi.c,583,MEM31-C,FP,ts is GC-managed; setsvalue2s roots it on the stack; no free needed,precision_audit,high
lua,lapi.c,587,API00-C,FP,Lua C API documented contract; L/fmt null checks are caller responsibility,precision_audit,high
lua,lapi.c,587,API00-C,FP,fmt is required non-null format string; API contract enforces this,precision_audit,high
lua,lapi.c,594,DCL30-C,FP,ret holds pointer returned by luaO_pushvfstring pointing into GC string; not a local variable address,precision_audit,high
lua,lapi.c,598,API00-C,FP,Lua C API documented contract; L/fmt null checks are caller responsibility,precision_audit,high
lua,lapi.c,598,API00-C,FP,fmt is required non-null format string; API contract enforces this,precision_audit,high
lua,lapi.c,602,EXP33-C,FP,"pushvfstring macro calls va_start(argp,fmt) before use; sqc cannot trace macro expansion",precision_audit,high
lua,lapi.c,605,DCL30-C,FP,ret holds pointer into GC-managed Lua string; not a dangling local variable,precision_audit,high
lua,lapi.c,609,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,609,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,621,EXP34-C,FP,luaF_newCclosure calls luaM which longjmps on OOM; cl is never NULL on return,precision_audit,high
lua,lapi.c,636,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,636,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,647,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,647,API00-C,FP,p is light userdata pointer; null is a valid value in Lua (LUA_TLIGHTUSERDATA),precision_audit,high
lua,lapi.c,647,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,655,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,655,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,657,EXP43-C,FP,"setthvalue(L, s2v(L->top.p), L): obj is stack slot, x is thread pointer; different objects, no aliasing",precision_audit,high
lua,lapi.c,672,MEM31-C,FP,luaS_new returns GC-managed TString; setsvalue2s roots it; no free needed,precision_audit,high
lua,lapi.c,682,MEM31-C,FP,str is GC-managed; already pushed onto stack via auxgetstr; no free needed,precision_audit,high
lua,lapi.c,699,API00-C,FP,Lua C API documented contract; L/name null checks are caller responsibility,precision_audit,high
lua,lapi.c,699,API00-C,FP,name is required non-null global name string; API contract enforces this,precision_audit,high
lua,lapi.c,699,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,707,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,707,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,713,EXP30-C,FP,luaV_fastget expands to single parenthesized expression; no unsequenced side effects,precision_audit,high
lua,lapi.c,721,API00-C,FP,Lua C API documented contract; L/k null checks are caller responsibility,precision_audit,high
lua,lapi.c,721,API00-C,FP,k is required non-null field name; API contract enforces this,precision_audit,high
lua,lapi.c,721,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,727,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,727,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,753,API00-C,FP,gettable is l_sinline helper; L is validated at all call sites in this file,precision_audit,high
lua,lapi.c,753,DCL15-C,FP,gettable is l_sinline (static inline); already has internal linkage,precision_audit,high
lua,lapi.c,760,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,760,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,766,EXP30-C,FP,luaH_get is a function call with well-defined sequencing as a function argument,precision_audit,high
lua,lapi.c,772,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,772,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,782,API00-C,FP,Lua C API documented contract; L/p null checks are caller responsibility,precision_audit,high
lua,lapi.c,782,API00-C,FP,p is light userdata pointer key; null is valid as Lua table key,precision_audit,high
lua,lapi.c,782,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,792,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,792,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,795,MEM31-C,FP,luaH_new returns GC-managed Table; sethvalue2s roots it on stack; no free needed,precision_audit,high
lua,lapi.c,799,EXP30-C,FP,luaH_resize arguments evaluated in sequence as function call arguments; no UB,precision_audit,high
lua,lapi.c,805,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,805,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,832,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,832,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,861,MEM31-C,FP,luaS_new returns GC-managed TString; passed to luaV_fastset and rooted; no free needed,precision_audit,high
lua,lapi.c,871,EXP30-C,FP,luaV_finishset arguments are well-sequenced stack slot reads; no side effects in args,precision_audit,high
lua,lapi.c,878,API00-C,FP,Lua C API documented contract; L/name null checks are caller responsibility,precision_audit,high
lua,lapi.c,878,API00-C,FP,name is required non-null global name; API contract enforces this,precision_audit,high
lua,lapi.c,878,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,886,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,886,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,892,EXP30-C,FP,luaV_fastset macro expands to single parenthesized expression; no unsequenced side effects,precision_audit,high
lua,lapi.c,896,EXP30-C,FP,luaV_finishset arguments are well-sequenced stack slot reads; no unsequenced side effects,precision_audit,high
lua,lapi.c,902,API00-C,FP,Lua C API documented contract; L/k null checks are caller responsibility,precision_audit,high
lua,lapi.c,902,API00-C,FP,k is required non-null field name; API contract enforces this,precision_audit,high
lua,lapi.c,902,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,908,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,908,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,934,EXP30-C,FP,luaH_set arguments are well-sequenced function call arguments; no unsequenced side effects,precision_audit,high
lua,lapi.c,940,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,940,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,945,API00-C,FP,Lua C API documented contract; L/p null checks are caller responsibility,precision_audit,high
lua,lapi.c,945,API00-C,FP,p is light userdata pointer key; API allows null keys,precision_audit,high
lua,lapi.c,945,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,952,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,952,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,958,EXP30-C,FP,luaH_setint is a single function call; no unsequenced side effects in arguments,precision_audit,high
lua,lapi.c,964,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,964,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1004,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1004,API00-C,FP,n is validated via cast_uint range check at line 1011; not an overflow risk,precision_audit,high
lua,lapi.c,1004,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1015,EXP30-C,FP,setobj arguments are macro expansions of struct field reads; no unsequenced side effects,precision_audit,high
lua,lapi.c,1029,PRE00-C,FP,checkresults macro: L is evaluated multiple times but only for reads of L->ci and L->top; no side-effecting L argument at any call site,precision_audit,high
lua,lapi.c,1029,PRE01-C,FP,L in checkresults macro is always a simple lua_State* variable; no precedence risk,precision_audit,high
lua,lapi.c,1029,PRE12-C,FP,checkresults macro: L is a simple pointer variable; multiple evaluation is safe,precision_audit,high
lua,lapi.c,1037,API00-C,FP,nargs is api_checkpop validated; overflow concern is advisory only for stack index,precision_audit,high
lua,lapi.c,1037,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1069,DCL13-C,FP,Advisory const-qualify on ud void* parameter; standard pattern for user callback data,precision_audit,high
lua,lapi.c,1070,DCL00-C,FP,Advisory const-qualify on local; c is CallS struct initialized once and passed by address,precision_audit,high
lua,lapi.c,1076,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1076,API00-C,FP,nargs is api_checkpop validated; overflow concern is advisory only for stack index,precision_audit,high
lua,lapi.c,1076,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1120,API00-C,FP,Lua C API documented contract; L/reader/data/chunkname/mode null checks are caller responsibility,precision_audit,high
lua,lapi.c,1120,API00-C,FP,data is opaque reader userdata; API allows null,precision_audit,high
lua,lapi.c,1120,API00-C,FP,chunkname is guarded: if (!chunkname) chunkname = '?'; already safe,precision_audit,high
lua,lapi.c,1120,API00-C,FP,mode is passed to luaD_protectedparser; null handled downstream,precision_audit,high
lua,lapi.c,1120,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1149,API00-C,FP,Lua C API documented contract; L/writer/data null checks are caller responsibility,precision_audit,high
lua,lapi.c,1149,API00-C,FP,data is opaque writer userdata; API allows null,precision_audit,high
lua,lapi.c,1149,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1163,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1163,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1163,DCL13-C,FP,Advisory const-qualify; lua_State* cannot be const in this context,precision_audit,high
lua,lapi.c,1171,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1174,DCL00-C,FP,g is assigned once but accessed many times via members; const advisory has no safety value,precision_audit,high
lua,lapi.c,1175,INT14-C,FP,g->gcstp is deliberately a bitfield; mixed arithmetic/bitwise ops are intentional GC design,precision_audit,high
lua,lapi.c,1195,EXP07-C,FP,>> 10 is standard Kbytes conversion documented in Lua source comment; not an assumed constant,precision_audit,high
lua,lapi.c,1258,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1258,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1273,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1273,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1289,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1289,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1300,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1300,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1315,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1315,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1325,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1325,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1335,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1335,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1335,DCL13-C,FP,Advisory const-qualify on ud; standard allocator userdata pattern,precision_audit,high
lua,lapi.c,1343,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1343,DCL15-C,FP,lua_setwarnf is a public API function; static linkage would break ABI,precision_audit,high
lua,lapi.c,1343,DCL13-C,FP,Advisory const-qualify on ud; standard warn userdata pattern,precision_audit,high
lua,lapi.c,1351,API00-C,FP,Lua C API documented contract; L/msg null checks are caller responsibility,precision_audit,high
lua,lapi.c,1351,API00-C,FP,msg is required non-null warning message; API contract enforces this,precision_audit,high
lua,lapi.c,1351,DCL15-C,FP,lua_warning is a public API function; static linkage would break ABI,precision_audit,high
lua,lapi.c,1359,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1380,MEM33-C,FP,"*val = &f->upvalue[n-1] is pointer assignment to TValue slot, not struct copy; no flexible array member copy",precision_audit,high
lua,lapi.c,1400,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1400,API00-C,FP,n is range-checked in aux_upvalue via cast_uint idiom; no overflow risk,precision_audit,high
lua,lapi.c,1410,DCL30-C,FP,name holds pointer to string literal or GC-managed TString data; not a local variable address,precision_audit,high
lua,lapi.c,1414,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1414,API00-C,FP,n is range-checked in aux_upvalue via cast_uint idiom; no overflow risk,precision_audit,high
lua,lapi.c,1429,DCL30-C,FP,name holds pointer to string literal or GC-managed TString data; not a local variable address,precision_audit,high
lua,lapi.c,1439,DCL30-C,FP,*pf = f assigns heap LClosure* through output pointer parameter; not a dangling local assignment,precision_audit,high
lua,lapi.c,1447,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1447,API00-C,FP,n is range-checked inside getupvalref; no overflow risk,precision_audit,high
lua,lapi.c,1469,API00-C,FP,Lua C API documented contract; L null check not required,precision_audit,high
lua,lapi.c,1469,DCL15-C,FP,LUA_API exported public C API function,precision_audit,high
lua,lapi.c,1472,EXP40-C,FP,getupvalref returns UpVal** (non-const pointer); no const circumvention at this assignment,precision_audit,high
lua,lapi.c,1474,EXP34-C,FP,up1/up2 are always non-null UpVal** from getupvalref; api_check verifies *up1 and *up2 are non-null,precision_audit,high
lua,lapi.c,1474,EXP34-C,FP,up2 is always non-null pointer from getupvalref; dereference is safe,precision_audit,high
lua,lapi.c,1475,MEM33-C,FP,"*up1 = *up2 assigns UpVal* (pointer value), not a flexible array member struct copy",precision_audit,high
lua,lapi.c,1476,EXP33-C,FP,f1 is initialized by getupvalref(&f1) call on line 1472 before use on line 1476,precision_audit,high
lua,lapi.c,1475,EXP40-C,FN,"lua_upvaluejoin writes through (UpVal**)&nullup (cast from const) when n out-of-range; api_check guard is no-op in release, causing UB write to static const object",manual-audit-confirmed,low
lua,ltable.c,99,PRE02-C,FP,MAXHSIZE is a single macro call; no operator precedence hazard.,precision_audit,high
lua,ltable.c,106,PRE00-C,FP,All hashpow2 call sites pass non-side-effecting arguments.,precision_audit,high
lua,ltable.c,106,PRE12-C,FP,No call site passes side-effecting expression to hashpow2.,precision_audit,high
lua,ltable.c,112,PRE00-C,FP,All hashmod call sites pass non-side-effecting arguments.,precision_audit,high
lua,ltable.c,112,PRE12-C,FP,No call site passes side-effecting expression to hashmod.,precision_audit,high
lua,ltable.c,148,INT14-C,FP,Advisory readability nit; no actual defect in intentional hash idiom.,precision_audit,high
lua,ltable.c,148,INT14-C,FP,Advisory readability nit; same mixed-op idiom is intentional.,precision_audit,high
lua,ltable.c,148,INT33-C,FP,Divisor is (sizenode-1)|1 which is always >= 1; cannot be zero.,precision_audit,high
lua,ltable.c,148,INT10-C,FP,Operands are non-negative by guard (ui <= INT_MAX); no negative modulo.,precision_audit,high
lua,ltable.c,226,API00-C,FP,Internal API; t is VM-guaranteed non-null.,precision_audit,high
lua,ltable.c,226,API00-C,FP,Internal API; nd is VM-guaranteed non-null.,precision_audit,high
lua,ltable.c,226,DCL15-C,FP,mainpositionfromnode is l_sinline = static inline; already static.,precision_audit,high
lua,ltable.c,226,DCL13-C,FP,Advisory const-param; nd read-only but internal; not a defect.,precision_audit,high
lua,ltable.c,256,EXP30-C,FP,Single function call return statement; no unsequenced side effects.,precision_audit,high
lua,ltable.c,272,EXP30-C,FP,Simple equality comparison return; no unsequenced multiple calls.,precision_audit,high
lua,ltable.c,278,EXP30-C,FP,Single function call return; no sequencing issue.,precision_audit,high
lua,ltable.c,291,MSC37-C,FP,getgeneric uses for(;;) with guaranteed returns inside; no fall-through.,precision_audit,high
lua,ltable.c,326,PRE01-C,FP,Missing parens on t->asize; t->asize is safe member access; call sites use plain pointer.,precision_audit,high
lua,ltable.c,361,API00-C,FP,Internal VM function; L is always valid lua_State.,precision_audit,high
lua,ltable.c,361,API00-C,FP,Internal VM function; t is always a valid Table pointer.,precision_audit,high
lua,ltable.c,397,MEM30-C,FP,"freehash frees t->node memory, not t itself; t remains valid.",precision_audit,high
lua,ltable.c,479,API00-C,FP,Internal API; t is guaranteed valid by all callers.,precision_audit,high
lua,ltable.c,479,API00-C,FP,Advisory overflow check; key is bounded by array size already.,precision_audit,high
lua,ltable.c,479,DCL15-C,FP,arraykeyisempty is l_sinline = static inline; already static.,precision_audit,high
lua,ltable.c,479,DCL19-C,FP,arraykeyisempty is already static (l_sinline expands to static inline).,precision_audit,high
lua,ltable.c,544,MSC37-C,FP,luaH_Hgetshortstr uses for(;;) with guaranteed internal returns.,precision_audit,high
lua,ltable.c,548,ARR39-C,FP,Integer byte-count computation for malloc; no pointer arithmetic involved.,precision_audit,high
lua,ltable.c,563,DCL13-C,FP,"Advisory const-param; resizearray reads t->asize/array, minor advisory.",precision_audit,high
lua,ltable.c,602,MSC04-C,FP,"Error-path recursion through Lua longjmp; architectural, not a real cycle.",precision_audit,high
lua,ltable.c,611,INT34-C,FP,lsize is guarded by MAXHBITS check above; shift never overflows.,precision_audit,high
lua,ltable.c,611,INT13-C,FP,1<<lsize guarded; shift never sets sign bit; advisory only.,precision_audit,high
lua,ltable.c,617,ARR39-C,FP,size*sizeof(Node)+sizeof(Limbox) is byte-count for luaM_newblock; not pointer arithmetic.,precision_audit,high
lua,ltable.c,619,ARR39-C,FP,node+sizeof(Limbox) on char* is correct byte-offset arithmetic.,precision_audit,high
lua,ltable.c,620,MEM30-C,FP,No free has occurred before this line; t is still valid.,precision_audit,high
lua,ltable.c,623,MEM30-C,FP,No free in this function; sqc confuses variable named 'free' with freeing.,precision_audit,high
lua,ltable.c,625,MEM30-C,FP,No free has occurred; t is still valid; sqc false alarm.,precision_audit,high
lua,ltable.c,667,INT13-C,FP,Bitwise OR on flag byte field; no sign-bit hazard; advisory only.,precision_audit,high
lua,ltable.c,715,API00-C,FP,Internal API; L always valid lua_State from caller.,precision_audit,high
lua,ltable.c,715,API00-C,FP,Internal API; t always valid Table from caller.,precision_audit,high
lua,ltable.c,715,MSC04-C,FP,"Error-path recursion through Lua longjmp; architectural, not defect.",precision_audit,high
lua,ltable.c,750,API00-C,FP,Internal API; L always valid.,precision_audit,high
lua,ltable.c,750,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,750,MSC04-C,FP,Error-path recursion via longjmp; architectural.,precision_audit,high
lua,ltable.c,761,MSC04-C,FP,Error-path recursion via longjmp; architectural pattern in Lua.,precision_audit,high
lua,ltable.c,767,EXP33-C,FP,ct.nums fully initialized by the for-loop on this very line.,precision_audit,high
lua,ltable.c,787,INT14-C,FP,Advisory readability nit on intentional hash-sizing arithmetic.,precision_audit,high
lua,ltable.c,798,API00-C,FP,Internal API; L always valid lua_State.,precision_audit,high
lua,ltable.c,798,MSC04-C,FP,Error-path recursion via longjmp; architectural.,precision_audit,high
lua,ltable.c,806,DCL30-C,FP,"t points to GC-heap object (luaC_newobj), not a local; no dangling pointer.",precision_audit,high
lua,ltable.c,810,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,821,API00-C,FP,Internal API; L always valid.,precision_audit,high
lua,ltable.c,821,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,823,MEM30-C,FP,"luaH_free frees node and array in order before freeing t; sequential, correct.",precision_audit,high
lua,ltable.c,823,MEM30-C,FP,Same sequential free pattern; t->asize read before luaM_free(t).,precision_audit,high
lua,ltable.c,823,MEM30-C,FP,t->asize is read before luaM_free(t); no UAF.,precision_audit,high
lua,ltable.c,824,MEM30-C,FP,luaM_free(t) is the final free; no double-free; each sub-free targets different memory.,precision_audit,high
lua,ltable.c,831,MEM30-C,FP,getfreepos does not free anything; sqc confuses Node* var named 'free' with actual free.,precision_audit,high
lua,ltable.c,831,MEM30-C,FP,No free in getfreepos; t is never freed here.,precision_audit,high
lua,ltable.c,832,MEM30-C,FP,"Variable named 'free' is a Node pointer, not a freed allocation; sqc false alarm.",precision_audit,high
lua,ltable.c,838,MEM30-C,FP,No free operation in this function; t always valid.,precision_audit,high
lua,ltable.c,840,MEM30-C,FP,No free in getfreepos; sqc pattern-matches variable name 'free' incorrectly.,precision_audit,high
lua,ltable.c,858,DCL13-C,FP,Advisory const-param; value is source for table write; minor advisory.,precision_audit,high
lua,ltable.c,867,MEM30-C,FP,No free of t before this point in insertkey; t is valid throughout.,precision_audit,high
lua,ltable.c,868,MEM30-C,FP,No free of t; sqc false alarm on internal chaining logic.,precision_audit,high
lua,ltable.c,874,MEM33-C,FP,"Node is a plain struct, no flexible array member; struct assignment is correct.",precision_audit,high
lua,ltable.c,874,EXP34-C,FP,mp from mainpositionTV never returns NULL (dummynode guard prevents hash on dummy).,precision_audit,high
lua,ltable.c,913,MSC04-C,FP,Error-path recursion via longjmp; architectural Lua pattern.,precision_audit,high
lua,ltable.c,958,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,974,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,974,API00-C,FP,Internal API; key always valid TString pointer.,precision_audit,high
lua,ltable.c,974,MSC37-C,FP,luaH_Hgetshortstr uses for(;;) with guaranteed internal returns.,precision_audit,high
lua,ltable.c,990,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,990,API00-C,FP,Internal API; key always valid.,precision_audit,high
lua,ltable.c,990,API00-C,FP,Internal API; res always valid output pointer.,precision_audit,high
lua,ltable.c,1011,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,1011,API00-C,FP,Internal API; key always valid.,precision_audit,high
lua,ltable.c,1011,API00-C,FP,Internal API; res always valid output pointer.,precision_audit,high
lua,ltable.c,1019,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,1019,API00-C,FP,Internal API; key always valid.,precision_audit,high
lua,ltable.c,1019,API00-C,FP,Internal API; res always valid output pointer.,precision_audit,high
lua,ltable.c,1048,MSC37-C,FP,retpsetcode has if/else both returning; no fall-off-end possible.,precision_audit,high
lua,ltable.c,1048,DCL13-C,FP,Advisory const-param; minor style issue only.,precision_audit,high
lua,ltable.c,1076,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,1076,API00-C,FP,Internal API; val always valid output pointer.,precision_audit,high
lua,ltable.c,1097,API00-C,FP,Internal API; key always valid TString.,precision_audit,high
lua,ltable.c,1131,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,1131,API00-C,FP,Internal API; key always valid.,precision_audit,high
lua,ltable.c,1131,API00-C,FP,Internal API; val always valid output pointer.,precision_audit,high
lua,ltable.c,1153,API00-C,FP,Internal API; L always valid.,precision_audit,high
lua,ltable.c,1153,MSC04-C,FP,Error-path recursion via longjmp; architectural Lua pattern.,precision_audit,high
lua,ltable.c,1182,INT14-C,FP,Advisory readability nit on intentional bitwise encoding of result codes.,precision_audit,high
lua,ltable.c,1185,INT13-C,FP,~hres on signed int is intentional two's-complement index encoding idiom.,precision_audit,high
lua,ltable.c,1195,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,1195,API00-C,FP,Internal API; key always valid.,precision_audit,high
lua,ltable.c,1195,API00-C,FP,Internal API; value always valid.,precision_audit,high
lua,ltable.c,1195,MSC04-C,FP,Error-path recursion via longjmp; architectural Lua pattern.,precision_audit,high
lua,ltable.c,1206,API00-C,FP,Internal API; t always valid.,precision_audit,high
lua,ltable.c,1206,MSC04-C,FP,Error-path recursion via longjmp; architectural Lua pattern.,precision_audit,high
lua,ltable.c,1243,INT14-C,FP,Advisory readability nit on intentional random-walk hash search.,precision_audit,high
lua,ltable.c,1243,INT34-C,FP,1u<<n where n=ceillog2(asize)<=MAXABITS; cannot exceed type width.,precision_audit,high
lua,ltable.c,1243,INT13-C,FP,1u<<n is already on unsigned operand; INT13-C finding is incorrect.,precision_audit,high
lua,ltable.c,1244,INT14-C,FP,Advisory readability nit; intentional mask arithmetic.,precision_audit,high
lua,ltable.c,1244,INT14-C,FP,Advisory readability nit; rnd is intentional combined arithmetic/bitwise.,precision_audit,high
lua,ltable.c,1262,ARR00-C,FP,"j-i is integer subtraction on lua_Unsigned variables, not pointer subtraction.",precision_audit,high
lua,ltable.c,1301,DCL15-C,FP,luaH_getn is declared in ltable.h with LUAI_FUNC; needs external linkage.,precision_audit,high
lua,ltable.c,1301,MSC37-C,FP,luaH_getn all code paths return; final if/else both return values.,precision_audit,high
lua,ltable.c,1351,API00-C,FP,LUA_DEBUG-only export; t always valid in debug context.,precision_audit,high
lua,ltable.c,1351,API00-C,FP,LUA_DEBUG-only export; key always valid in debug context.,precision_audit,high