{
"MEM30-C": [
{
"column": 19,
"file": "/home/brandon/toolchain/curl/lib/doh.c",
"line": 1334,
"message": "Use-after-free: accessing freed pointer 'data->state'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "curl"
},
{
"column": 11,
"file": "/home/brandon/toolchain/curl/lib/ftp.c",
"line": 3119,
"message": "Use-after-free: accessing freed pointer 'data->state'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "curl"
},
{
"column": 17,
"file": "/home/brandon/toolchain/curl/lib/url.c",
"line": 537,
"message": "Use-after-free: accessing freed pointer 'conn->socks_proxy'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "curl"
},
{
"column": 19,
"file": "/home/brandon/toolchain/curl/src/tool_operate.c",
"line": 776,
"message": "Use-after-free: accessing freed pointer 'per->etag_save'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "curl"
},
{
"column": 13,
"file": "/home/brandon/toolchain/hostap/hostapd/config_file.c",
"line": 2772,
"message": "Use-after-free: accessing member of freed pointer 'bss'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "hostap"
},
{
"column": 3,
"file": "/home/brandon/toolchain/hostap/hostapd/config_file.c",
"line": 3620,
"message": "Use-after-free: accessing freed array 'conf'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access memory after freeing it.",
"project": "hostap"
},
{
"column": 8,
"file": "/home/brandon/toolchain/hostap/src/ap/eap_user_db.c",
"line": 209,
"message": "Use-after-free: accessing freed pointer 'hapd->conf'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 6,
"file": "/home/brandon/toolchain/hostap/src/ap/hostapd.c",
"line": 2711,
"message": "Use-after-free: passing freed pointer 'hapd' to function",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not pass freed memory to functions.",
"project": "hostap"
},
{
"column": 17,
"file": "/home/brandon/toolchain/hostap/src/ap/hostapd.c",
"line": 3009,
"message": "Use-after-free: accessing member of freed pointer 'hapd'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "hostap"
},
{
"column": 7,
"file": "/home/brandon/toolchain/hostap/src/ap/ieee802_1x.c",
"line": 1623,
"message": "Use-after-free: accessing freed pointer 'sm->eap_if'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 6,
"file": "/home/brandon/toolchain/hostap/src/ap/sta_info.c",
"line": 394,
"message": "Use-after-free: accessing member of freed pointer 'hapd'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "hostap"
},
{
"column": 9,
"file": "/home/brandon/toolchain/hostap/src/ap/wps_hostapd.c",
"line": 1062,
"message": "Use-after-free: accessing freed pointer 'wps->dev.application_ext'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 2,
"file": "/home/brandon/toolchain/hostap/src/drivers/driver_ndis.c",
"line": 563,
"message": "Use-after-free: passing freed pointer 'oid' to function",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not pass freed memory to functions.",
"project": "hostap"
},
{
"column": 6,
"file": "/home/brandon/toolchain/hostap/src/drivers/driver_wext.c",
"line": 358,
"message": "Use-after-free: accessing freed pointer 'drv->assoc_req_ies'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 7,
"file": "/home/brandon/toolchain/hostap/src/eap_peer/eap_fast.c",
"line": 822,
"message": "Use-after-free: accessing freed pointer 'data->session_id'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 7,
"file": "/home/brandon/toolchain/hostap/src/eap_server/eap_server_ttls.c",
"line": 1246,
"message": "Use-after-free: accessing freed pointer 'sm->identity'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 3,
"file": "/home/brandon/toolchain/hostap/src/p2p/p2p.c",
"line": 2268,
"message": "Use-after-free: accessing freed pointer 'dev->info'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 5,
"file": "/home/brandon/toolchain/hostap/src/p2p/p2p_pd.c",
"line": 1983,
"message": "Use-after-free: accessing member of freed pointer 'p2p'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "hostap"
},
{
"column": 20,
"file": "/home/brandon/toolchain/hostap/src/tls/tlsv1_client_read.c",
"line": 509,
"message": "Use-after-free: accessing freed pointer 'conn->cred'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 7,
"file": "/home/brandon/toolchain/hostap/src/tls/tlsv1_client_read.c",
"line": 701,
"message": "Use-after-free: accessing member of freed pointer 'conn'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "hostap"
},
{
"column": 16,
"file": "/home/brandon/toolchain/hostap/src/tls/tlsv1_client_read.c",
"line": 726,
"message": "Use-after-free: passing freed pointer 'pos' to function",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not pass freed memory to functions.",
"project": "hostap"
},
{
"column": 10,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/ap.c",
"line": 1419,
"message": "Use-after-free: accessing freed pointer 'hapd->conf'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 38,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/config.c",
"line": 1795,
"message": "Use-after-free: accessing freed pointer 'ssid->eap'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 18,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/config.c",
"line": 3069,
"message": "Use-after-free: accessing freed pointer 'cred->num_domain'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 39,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/wpa_supplicant.c",
"line": 8111,
"message": "Use-after-free: accessing freed pointer 'wpa_s->conf->non_pref_chan'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "hostap"
},
{
"column": 3,
"file": "/home/brandon/toolchain/mosquitto/lib/net_ws.c",
"line": 336,
"message": "Use-after-free: accessing freed pointer 'mosq->wsd'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "mosquitto"
},
{
"column": 73,
"file": "/home/brandon/toolchain/mosquitto/lib/will_mosq.c",
"line": 98,
"message": "Use-after-free: accessing freed pointer 'mosq->will->msg.payloadlen'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "mosquitto"
},
{
"column": 66,
"file": "/home/brandon/toolchain/mosquitto/plugins/dynamic-security/roles.c",
"line": 332,
"message": "Use-after-free: accessing freed pointer 'role->acls.unsubscribe_literal'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "mosquitto"
},
{
"column": 50,
"file": "/home/brandon/toolchain/mosquitto/src/handle_publish.c",
"line": 123,
"message": "Use-after-free: accessing member of freed pointer 'base_msg'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "mosquitto"
},
{
"column": 17,
"file": "/home/brandon/toolchain/mosquitto/src/persist_read.c",
"line": 333,
"message": "Use-after-free: accessing freed pointer 'chunk.source'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "mosquitto"
},
{
"column": 60,
"file": "/home/brandon/toolchain/mosquitto/test/lib/c/09-util-topic-tokenise.c",
"line": 95,
"message": "Use-after-free: dereferencing freed pointer 'topic_count'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access memory after freeing it.",
"project": "mosquitto"
},
{
"column": 32,
"file": "/home/brandon/toolchain/sqlite/autosetup/jimsh0.c",
"line": 11565,
"message": "Use-after-free: accessing member of freed pointer 'objPtr'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "sqlite"
},
{
"column": 17,
"file": "/home/brandon/toolchain/sqlite/ext/expert/sqlite3expert.c",
"line": 1004,
"message": "Use-after-free: passing freed pointer 'zName' to function",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not pass freed memory to functions.",
"project": "sqlite"
},
{
"column": 14,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_main.c",
"line": 1592,
"message": "Use-after-free: passing freed pointer 'pCsr' to function",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not pass freed memory to functions.",
"project": "sqlite"
},
{
"column": 17,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_main.c",
"line": 1610,
"message": "Use-after-free: accessing member of freed pointer 'pCsr'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access members of freed memory.",
"project": "sqlite"
},
{
"column": 11,
"file": "/home/brandon/toolchain/sqlite/ext/rbu/sqlite3rbu.c",
"line": 3581,
"message": "Use-after-free: accessing freed pointer 'p->zStateDb'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 11,
"file": "/home/brandon/toolchain/sqlite/ext/session/changeset.c",
"line": 425,
"message": "Use-after-free: passing freed pointer 'zSQLTabName' to function",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not pass freed memory to functions.",
"project": "sqlite"
},
{
"column": 18,
"file": "/home/brandon/toolchain/sqlite/src/main.c",
"line": 851,
"message": "Use-after-free: accessing freed pointer 'db->lookaside'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 24,
"file": "/home/brandon/toolchain/sqlite/src/os_unix.c",
"line": 6217,
"message": "Use-after-free: accessing freed pointer 'pNew->pInode'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 9,
"file": "/home/brandon/toolchain/sqlite/src/tclsqlite.c",
"line": 634,
"message": "Use-after-free: accessing freed pointer 'pDb->zTraceV2'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 18,
"file": "/home/brandon/toolchain/sqlite/src/test6.c",
"line": 325,
"message": "Use-after-free: passing freed pointer 'pWrite' to function",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not pass freed memory to functions.",
"project": "sqlite"
},
{
"column": 13,
"file": "/home/brandon/toolchain/sqlite/src/vdbe.c",
"line": 1468,
"message": "Use-after-free: accessing freed pointer 'pOp->p3'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 33,
"file": "/home/brandon/toolchain/sqlite/src/vdbe.c",
"line": 4189,
"message": "Use-after-free: accessing freed pointer 'pOp->p1'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 50,
"file": "/home/brandon/toolchain/sqlite/src/vdbe.c",
"line": 4261,
"message": "Use-after-free: accessing freed pointer 'pOp->p3'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 33,
"file": "/home/brandon/toolchain/sqlite/src/vdbe.c",
"line": 5910,
"message": "Use-after-free: accessing freed pointer 'p->nCursor'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 25,
"file": "/home/brandon/toolchain/sqlite/src/vdbe.c",
"line": 6511,
"message": "Use-after-free: accessing freed pointer 'pOp->p1'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 15,
"file": "/home/brandon/toolchain/sqlite/src/vdbe.c",
"line": 9131,
"message": "Use-after-free: accessing freed pointer 'pOp->p3'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 7,
"file": "/home/brandon/toolchain/sqlite/src/vdbemem.c",
"line": 277,
"message": "Use-after-free: accessing freed pointer 'pMem->zMalloc'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access freed memory.",
"project": "sqlite"
},
{
"column": 44,
"file": "/home/brandon/toolchain/sqlite/test/optfuzz.c",
"line": 260,
"message": "Use-after-free: accessing freed array 'azIn'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access memory after freeing it.",
"project": "sqlite"
},
{
"column": 32,
"file": "/home/brandon/toolchain/sqlite/tool/sqldiff.c",
"line": 1724,
"message": "Use-after-free: accessing freed array 'azCol'",
"rule_id": "MEM30-C",
"severity": "Critical",
"suggestion": "Do not access memory after freeing it.",
"project": "sqlite"
}
],
"DCL13-C": [
{
"column": 51,
"file": "/home/brandon/toolchain/curl/lib/cf-h1-proxy.c",
"line": 83,
"message": "Pointer parameter 'cf' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *cf'",
"project": "curl"
},
{
"column": 32,
"file": "/home/brandon/toolchain/curl/lib/ftp.c",
"line": 4342,
"message": "Pointer parameter 'key' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *key'",
"project": "curl"
},
{
"column": 35,
"file": "/home/brandon/toolchain/curl/lib/hash.c",
"line": 342,
"message": "Pointer parameter 'k2' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *k2'",
"project": "curl"
},
{
"column": 59,
"file": "/home/brandon/toolchain/curl/lib/http2.c",
"line": 2981,
"message": "Pointer parameter 'user_data' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *user_data'",
"project": "curl"
},
{
"column": 57,
"file": "/home/brandon/toolchain/curl/lib/multi_ev.c",
"line": 137,
"message": "Pointer parameter 'e' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *e'",
"project": "curl"
},
{
"column": 42,
"file": "/home/brandon/toolchain/curl/lib/pingpong.c",
"line": 351,
"message": "Pointer parameter 'pp' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pp'",
"project": "curl"
},
{
"column": 47,
"file": "/home/brandon/toolchain/curl/lib/vtls/vtls.c",
"line": 1633,
"message": "Pointer parameter 'data' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *data'",
"project": "curl"
},
{
"column": 49,
"file": "/home/brandon/toolchain/curl/lib/vtls/vtls.c",
"line": 1656,
"message": "Pointer parameter 'cf' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *cf'",
"project": "curl"
},
{
"column": 34,
"file": "/home/brandon/toolchain/curl/tests/libtest/lib1555.c",
"line": 32,
"message": "Pointer parameter 'arg' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *arg'",
"project": "curl"
},
{
"column": 44,
"file": "/home/brandon/toolchain/hostap/src/ap/acs.c",
"line": 646,
"message": "Pointer parameter 'mode' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *mode'",
"project": "hostap"
},
{
"column": 63,
"file": "/home/brandon/toolchain/hostap/src/ap/hostapd.c",
"line": 2070,
"message": "Pointer parameter 'timeout_ctx' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *timeout_ctx'",
"project": "hostap"
},
{
"column": 59,
"file": "/home/brandon/toolchain/hostap/src/ap/hw_features.c",
"line": 1244,
"message": "Pointer parameter 'iface' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *iface'",
"project": "hostap"
},
{
"column": 57,
"file": "/home/brandon/toolchain/hostap/src/ap/ieee802_11_shared.c",
"line": 619,
"message": "Pointer parameter 'hapd' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *hapd'",
"project": "hostap"
},
{
"column": 34,
"file": "/home/brandon/toolchain/hostap/src/ap/wps_hostapd.h",
"line": 50,
"message": "Pointer parameter 'conf' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *conf'",
"project": "hostap"
},
{
"column": 43,
"file": "/home/brandon/toolchain/hostap/src/ap/x_snoop.h",
"line": 35,
"message": "Pointer parameter 'hapd' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *hapd'",
"project": "hostap"
},
{
"column": 14,
"file": "/home/brandon/toolchain/hostap/src/common/dpp_tcp.c",
"line": 1916,
"message": "Pointer parameter 'msg_ctx' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *msg_ctx'",
"project": "hostap"
},
{
"column": 40,
"file": "/home/brandon/toolchain/hostap/src/crypto/dh_group5.c",
"line": 32,
"message": "Pointer parameter 'ctx' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *ctx'",
"project": "hostap"
},
{
"column": 43,
"file": "/home/brandon/toolchain/hostap/src/drivers/driver_ndis.c",
"line": 789,
"message": "Pointer parameter 'ssid' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *ssid'",
"project": "hostap"
},
{
"column": 47,
"file": "/home/brandon/toolchain/hostap/src/eap_peer/eap_mschapv2.c",
"line": 141,
"message": "Pointer parameter 'sm' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *sm'",
"project": "hostap"
},
{
"column": 48,
"file": "/home/brandon/toolchain/hostap/src/eap_server/tncs.c",
"line": 511,
"message": "Pointer parameter 'tncs' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *tncs'",
"project": "hostap"
},
{
"column": 51,
"file": "/home/brandon/toolchain/hostap/tests/fuzzing/ap-mgmt/ap-mgmt.c",
"line": 38,
"message": "Pointer parameter 'user_ctx' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *user_ctx'",
"project": "hostap"
},
{
"column": 34,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/bgscan.h",
"line": 64,
"message": "Pointer parameter 'scan_res' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *scan_res'",
"project": "hostap"
},
{
"column": 32,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/ctrl_iface.c",
"line": 4506,
"message": "Pointer parameter 'capa' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *capa'",
"project": "hostap"
},
{
"column": 61,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/ctrl_iface.c",
"line": 12616,
"message": "Pointer parameter 'wpa_s' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *wpa_s'",
"project": "hostap"
},
{
"column": 22,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/p2p_supplicant.c",
"line": 6207,
"message": "Pointer parameter 'ssid' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *ssid'",
"project": "hostap"
},
{
"column": 70,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/wpa_cli.c",
"line": 2111,
"message": "Pointer parameter 'argv' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *argv'",
"project": "hostap"
},
{
"column": 29,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/wpa_supplicant.c",
"line": 8303,
"message": "Pointer parameter 'iface' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *iface'",
"project": "hostap"
},
{
"column": 25,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/wps_supplicant.h",
"line": 123,
"message": "Pointer parameter 'bss' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *bss'",
"project": "hostap"
},
{
"column": 55,
"file": "/home/brandon/toolchain/mosquitto/plugins/persist-sqlite/restore.c",
"line": 359,
"message": "Pointer parameter 'ms' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *ms'",
"project": "mosquitto"
},
{
"column": 76,
"file": "/home/brandon/toolchain/mosquitto/test/broker/c/bad_v2_1.c",
"line": 23,
"message": "Pointer parameter 'auth_opts' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *auth_opts'",
"project": "mosquitto"
},
{
"column": 53,
"file": "/home/brandon/toolchain/mosquitto/test/lib/c/03-publish-c2b-qos1-receive-maximum.c",
"line": 10,
"message": "Pointer parameter 'obj' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *obj'",
"project": "mosquitto"
},
{
"column": 56,
"file": "/home/brandon/toolchain/mosquitto/test/lib/c/03-publish-c2b-qos2-disconnect.c",
"line": 35,
"message": "Pointer parameter 'obj' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *obj'",
"project": "mosquitto"
},
{
"column": 28,
"file": "/home/brandon/toolchain/sqlite/autosetup/jimsh0.c",
"line": 2271,
"message": "Pointer parameter 'af' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *af'",
"project": "sqlite"
},
{
"column": 16,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_expr.c",
"line": 1075,
"message": "Pointer parameter 'p1' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *p1'",
"project": "sqlite"
},
{
"column": 42,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_main.c",
"line": 2206,
"message": "Pointer parameter 'pCtx' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pCtx'",
"project": "sqlite"
},
{
"column": 8,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_tcl.c",
"line": 1613,
"message": "Pointer parameter 'clientData' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *clientData'",
"project": "sqlite"
},
{
"column": 34,
"file": "/home/brandon/toolchain/sqlite/ext/jni/src/c/sqlite3-jni.c",
"line": 1395,
"message": "Pointer parameter 'env' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *env'",
"project": "sqlite"
},
{
"column": 16,
"file": "/home/brandon/toolchain/sqlite/ext/rtree/geopoly.c",
"line": 1740,
"message": "Pointer parameter 'pVtab' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pVtab'",
"project": "sqlite"
},
{
"column": 66,
"file": "/home/brandon/toolchain/sqlite/ext/wasm/c-pp-lite.c",
"line": 1820,
"message": "Pointer parameter 't' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *t'",
"project": "sqlite"
},
{
"column": 37,
"file": "/home/brandon/toolchain/sqlite/src/btree.c",
"line": 4870,
"message": "Pointer parameter 'a' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *a'",
"project": "sqlite"
},
{
"column": 35,
"file": "/home/brandon/toolchain/sqlite/src/build.c",
"line": 3748,
"message": "Pointer parameter 'pParse' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pParse'",
"project": "sqlite"
},
{
"column": 46,
"file": "/home/brandon/toolchain/sqlite/src/expr.c",
"line": 4730,
"message": "Pointer parameter 'pParse' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pParse'",
"project": "sqlite"
},
{
"column": 47,
"file": "/home/brandon/toolchain/sqlite/src/os_unix.c",
"line": 8113,
"message": "Pointer parameter 'pFile' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pFile'",
"project": "sqlite"
},
{
"column": 56,
"file": "/home/brandon/toolchain/sqlite/src/os_win.c",
"line": 4881,
"message": "Pointer parameter 'p' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *p'",
"project": "sqlite"
},
{
"column": 32,
"file": "/home/brandon/toolchain/sqlite/src/resolve.c",
"line": 35,
"message": "Pointer parameter 'pWalker' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pWalker'",
"project": "sqlite"
},
{
"column": 11,
"file": "/home/brandon/toolchain/sqlite/src/test1.c",
"line": 89,
"message": "Pointer parameter 'CONST' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *CONST'",
"project": "sqlite"
},
{
"column": 11,
"file": "/home/brandon/toolchain/sqlite/src/test1.c",
"line": 3176,
"message": "Pointer parameter 'CONST' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *CONST'",
"project": "sqlite"
},
{
"column": 14,
"file": "/home/brandon/toolchain/sqlite/src/test1.c",
"line": 6783,
"message": "Pointer parameter 'interp' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *interp'",
"project": "sqlite"
},
{
"column": 8,
"file": "/home/brandon/toolchain/sqlite/src/test1.c",
"line": 8962,
"message": "Pointer parameter 'clientData' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *clientData'",
"project": "sqlite"
},
{
"column": 49,
"file": "/home/brandon/toolchain/sqlite/src/test_journal.c",
"line": 688,
"message": "Pointer parameter 'pFile' is not modified and should be declared const",
"rule_id": "DCL13-C",
"severity": "Low",
"suggestion": "Declare parameter as 'const <type> *pFile'",
"project": "sqlite"
}
],
"INT32-C": [
{
"column": 6,
"file": "/home/brandon/toolchain/curl/lib/easy.c",
"line": 264,
"message": "Signed integer decrement '--initialized' may overflow at INT_MIN",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "curl"
},
{
"column": 5,
"file": "/home/brandon/toolchain/curl/lib/hostip.c",
"line": 487,
"message": "Signed integer increment 'i++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "curl"
},
{
"column": 42,
"file": "/home/brandon/toolchain/curl/tests/libtest/lib530.c",
"line": 81,
"message": "Signed integer subtraction 'sockets->count - (i + 1)' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "curl"
},
{
"column": 3,
"file": "/home/brandon/toolchain/curl/tests/libtest/lib557.c",
"line": 481,
"message": "Signed integer increment 'i++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "curl"
},
{
"column": 3,
"file": "/home/brandon/toolchain/curl/tests/libtest/lib557.c",
"line": 484,
"message": "Signed integer increment 'i++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "curl"
},
{
"column": 7,
"file": "/home/brandon/toolchain/curl/tests/server/dnsd.c",
"line": 440,
"message": "Signed integer increment 'arg++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "curl"
},
{
"column": 7,
"file": "/home/brandon/toolchain/curl/tests/server/rtspd.c",
"line": 1072,
"message": "Signed integer increment 'arg++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "curl"
},
{
"column": 15,
"file": "/home/brandon/toolchain/hostap/hs20/client/osu_client.c",
"line": 834,
"message": "Signed integer addition 'len * 2 + 1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "hostap"
},
{
"column": 15,
"file": "/home/brandon/toolchain/hostap/src/common/ieee802_11_common.c",
"line": 1695,
"message": "Signed integer addition '(freq - 56160) / 2160 + 24' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "hostap"
},
{
"column": 2,
"file": "/home/brandon/toolchain/hostap/src/drivers/driver_macsec_qca.c",
"line": 899,
"message": "Signed integer compound addition 'ret += nss_macsec_secy_tx_sc_protect_set(drv->secy_id, channel,\n\t\t\t\t\t\t drv->protect_frames)' may overflow without checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check before compound assignment",
"project": "hostap"
},
{
"column": 25,
"file": "/home/brandon/toolchain/hostap/src/eap_common/eap_sim_common.c",
"line": 610,
"message": "Signed integer multiplication 'apos[0] * 256' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check using complex multiplication overflow detection",
"project": "hostap"
},
{
"column": 16,
"file": "/home/brandon/toolchain/hostap/src/eap_server/eap_server_eke.c",
"line": 777,
"message": "Signed integer multiplication '2 * data->sess.nonce_len' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check using complex multiplication overflow detection",
"project": "hostap"
},
{
"column": 3,
"file": "/home/brandon/toolchain/hostap/src/p2p/p2p.c",
"line": 3569,
"message": "Signed integer decrement 'p2p->sd_peer->sd_pending_bcast_queries--' may overflow at INT_MIN",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "hostap"
},
{
"column": 22,
"file": "/home/brandon/toolchain/hostap/src/utils/common.c",
"line": 1032,
"message": "Signed integer multiplication '(int_array_len(a) + 1) * sizeof(int)' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check using complex multiplication overflow detection",
"project": "hostap"
},
{
"column": 18,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/wpa_cli.c",
"line": 4349,
"message": "Signed integer addition 'pos + 1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "hostap"
},
{
"column": 45,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/wpa_supplicant.c",
"line": 4621,
"message": "Signed integer addition '2 + ie[1]' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "hostap"
},
{
"column": 16,
"file": "/home/brandon/toolchain/mosquitto/client/client_shared.c",
"line": 1639,
"message": "malloc() argument 1 contains arithmetic that may overflow: 'len + 1'",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Validate arithmetic operations before passing to allocation functions",
"project": "mosquitto"
},
{
"column": 14,
"file": "/home/brandon/toolchain/mosquitto/src/keepalive.c",
"line": 189,
"message": "Signed integer addition 'last_keepalive_check + 5' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "mosquitto"
},
{
"column": 44,
"file": "/home/brandon/toolchain/sqlite/autosetup/jimsh0.c",
"line": 20249,
"message": "Signed integer subtraction 'argc - 1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 44,
"file": "/home/brandon/toolchain/sqlite/autosetup/jimsh0.c",
"line": 20292,
"message": "Signed integer subtraction 'argc - 2' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 45,
"file": "/home/brandon/toolchain/sqlite/ext/fts3/fts3_write.c",
"line": 2753,
"message": "Signed integer addition '(i64)nList+1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 7,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_index.c",
"line": 4900,
"message": "Signed integer decrement 'pStruct->nSegment--' may overflow at INT_MIN",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 15,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_index.c",
"line": 5443,
"message": "Signed integer subtraction 'pSeg->iLeafPgno-1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 63,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_index.c",
"line": 7143,
"message": "Signed integer addition 'nByte+nHit*10' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 24,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_tokenize.c",
"line": 1049,
"message": "Signed integer subtraction 'nBuf-6' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 10,
"file": "/home/brandon/toolchain/sqlite/ext/misc/base64.c",
"line": 242,
"message": "Signed integer multiplication '3*((nv+3)/4)' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check using complex multiplication overflow detection",
"project": "sqlite"
},
{
"column": 3,
"file": "/home/brandon/toolchain/sqlite/ext/misc/dbdump.c",
"line": 274,
"message": "Signed integer increment 'p->nErr++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 46,
"file": "/home/brandon/toolchain/sqlite/ext/misc/spellfix.c",
"line": 1288,
"message": "Signed integer subtraction 'nIn-i' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 13,
"file": "/home/brandon/toolchain/sqlite/ext/recover/dbdata.c",
"line": 643,
"message": "Signed integer compound addition 'iOff += dbdataGetVarintU32(&pCsr->aPage[iOff], &nPayload)' may overflow without checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check before compound assignment",
"project": "sqlite"
},
{
"column": 7,
"file": "/home/brandon/toolchain/sqlite/ext/rtree/rtree.c",
"line": 2179,
"message": "Signed integer compound addition 'ii += 2' may overflow without checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check before compound assignment",
"project": "sqlite"
},
{
"column": 5,
"file": "/home/brandon/toolchain/sqlite/ext/session/session_speed_test.c",
"line": 98,
"message": "Signed integer increment 'i++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 6,
"file": "/home/brandon/toolchain/sqlite/ext/wasm/api/sqlite3-wasm.c",
"line": 1340,
"message": "Signed integer modulo 'nSize % nBuf' may overflow (INT_MIN % -1)",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add check: if (dividend == INT_MIN && divisor == -1) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 5,
"file": "/home/brandon/toolchain/sqlite/src/btmutex.c",
"line": 147,
"message": "Signed integer decrement 'p->wantToLock--' may overflow at INT_MIN",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 20,
"file": "/home/brandon/toolchain/sqlite/src/btree.c",
"line": 7291,
"message": "Signed integer addition 'hdr+3' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 27,
"file": "/home/brandon/toolchain/sqlite/src/btree.c",
"line": 7374,
"message": "Signed integer addition '2 + sz' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 5,
"file": "/home/brandon/toolchain/sqlite/src/dbstat.c",
"line": 654,
"message": "Signed integer increment 'pCsr->iPage++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 36,
"file": "/home/brandon/toolchain/sqlite/src/expr.c",
"line": 5022,
"message": "Signed integer subtraction 'aff-'B'' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 18,
"file": "/home/brandon/toolchain/sqlite/src/expr.c",
"line": 5074,
"message": "Signed integer subtraction 'pParse->iSelfTab - 1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 5,
"file": "/home/brandon/toolchain/sqlite/src/os_win.c",
"line": 2834,
"message": "memset() size argument contains arithmetic that may overflow: 'amt-nRead'",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Validate size calculations before passing to memory functions",
"project": "sqlite"
},
{
"column": 13,
"file": "/home/brandon/toolchain/sqlite/src/pager.c",
"line": 1074,
"message": "Signed integer addition 'i+1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 9,
"file": "/home/brandon/toolchain/sqlite/src/select.c",
"line": 1756,
"message": "Signed integer addition 'nKey+1+nColumn+nRefKey' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 37,
"file": "/home/brandon/toolchain/sqlite/src/test1.c",
"line": 6281,
"message": "Signed integer increment 'nDigit++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 16,
"file": "/home/brandon/toolchain/sqlite/src/wal.c",
"line": 1337,
"message": "Signed integer subtraction 'idx-1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 52,
"file": "/home/brandon/toolchain/sqlite/src/where.c",
"line": 1363,
"message": "Signed integer addition 'addrTop+1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 11,
"file": "/home/brandon/toolchain/sqlite/src/where.c",
"line": 7787,
"message": "Signed integer addition 'pLevel->addrBody + 1' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b > 0 && a > INT_MAX - b) || (b < 0 && a < INT_MIN - b)) { /* handle error */ }",
"project": "sqlite"
},
{
"column": 12,
"file": "/home/brandon/toolchain/sqlite/test/speedtest1.c",
"line": 282,
"message": "Signed integer left shift 'v<<4' may overflow or exhibit undefined behavior",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Validate shift amount and check for overflow before shifting",
"project": "sqlite"
},
{
"column": 3,
"file": "/home/brandon/toolchain/sqlite/tool/fuzzershell.c",
"line": 465,
"message": "Signed integer increment 'pCur->iRowid++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 8,
"file": "/home/brandon/toolchain/sqlite/tool/lemon.c",
"line": 4692,
"message": "Signed integer multiplication 'i*2' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check using complex multiplication overflow detection",
"project": "sqlite"
},
{
"column": 61,
"file": "/home/brandon/toolchain/sqlite/tool/lemon.c",
"line": 4888,
"message": "Signed integer increment 'lineno++' may overflow at INT_MAX",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add bounds checking before increment/decrement",
"project": "sqlite"
},
{
"column": 45,
"file": "/home/brandon/toolchain/sqlite/tool/sqldiff.c",
"line": 388,
"message": "Signed integer subtraction 'i-j' may overflow without proper checking",
"rule_id": "INT32-C",
"severity": "High",
"suggestion": "Add overflow check: if ((b < 0 && a > INT_MAX + b) || (b > 0 && a < INT_MIN + b)) { /* handle error */ }",
"project": "sqlite"
}
],
"EXP34-C": [
{
"column": 8,
"file": "/home/brandon/toolchain/curl/docs/examples/hiperfifo.c",
"line": 178,
"message": "Potential null pointer dereference in member access of variable 'msg'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'msg' is not NULL before member access",
"project": "curl"
},
{
"column": 3,
"file": "/home/brandon/toolchain/curl/lib/cf-socket.c",
"line": 994,
"message": "Potential null pointer dereference in member access of variable 'ctx'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'ctx' is not NULL before member access",
"project": "curl"
},
{
"column": 16,
"file": "/home/brandon/toolchain/curl/lib/cf-socket.c",
"line": 2178,
"message": "Passing null pointer 'cf' to 'set_local_ip' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'cf' is not NULL before passing to 'set_local_ip'",
"project": "curl"
},
{
"column": 12,
"file": "/home/brandon/toolchain/curl/lib/curl_fnmatch.c",
"line": 261,
"message": "Potential null pointer dereference of variable 'p'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'p' is not NULL before dereferencing",
"project": "curl"
},
{
"column": 59,
"file": "/home/brandon/toolchain/curl/lib/ftp.c",
"line": 1379,
"message": "Passing null pointer 'ai' to 'ftp_port_send_command' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'ai' is not NULL before passing to 'ftp_port_send_command'",
"project": "curl"
},
{
"column": 9,
"file": "/home/brandon/toolchain/curl/lib/vssh/libssh.c",
"line": 2064,
"message": "Potential null pointer dereference of variable 'sshc->slash_pos'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'sshc->slash_pos' is not NULL before dereferencing",
"project": "curl"
},
{
"column": 21,
"file": "/home/brandon/toolchain/curl/tests/libtest/lib2402.c",
"line": 95,
"message": "Passing null pointer 'multi' to 'multi_perform' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'multi' is not NULL before passing to 'multi_perform'",
"project": "curl"
},
{
"column": 13,
"file": "/home/brandon/toolchain/curl/tests/server/getpart.c",
"line": 383,
"message": "Potential null pointer dereference of variable 'end'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'end' is not NULL before dereferencing",
"project": "curl"
},
{
"column": 36,
"file": "/home/brandon/toolchain/hostap/hs20/client/osu_client.c",
"line": 94,
"message": "Passing null pointer 'url' to 'xml_node_get_text_free' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'url' is not NULL before passing to 'xml_node_get_text_free'",
"project": "hostap"
},
{
"column": 24,
"file": "/home/brandon/toolchain/hostap/src/ap/ieee802_11.c",
"line": 2481,
"message": "Passing null pointer 'pub' to 'wpabuf_put_buf' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pub' is not NULL before passing to 'wpabuf_put_buf'",
"project": "hostap"
},
{
"column": 10,
"file": "/home/brandon/toolchain/hostap/src/ap/ieee802_11_shared.c",
"line": 246,
"message": "Passing null pointer 'oci_ie' to 'os_free' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'oci_ie' is not NULL before passing to 'os_free'",
"project": "hostap"
},
{
"column": 31,
"file": "/home/brandon/toolchain/hostap/src/ap/wpa_auth_ft.c",
"line": 1551,
"message": "Potential null pointer dereference of variable 'r0kh->seq'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'r0kh->seq' is not NULL before dereferencing",
"project": "hostap"
},
{
"column": 31,
"file": "/home/brandon/toolchain/hostap/src/common/dpp_pkex.c",
"line": 450,
"message": "Passing null pointer 'ec' to 'crypto_ec_point_from_bin' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'ec' is not NULL before passing to 'crypto_ec_point_from_bin'",
"project": "hostap"
},
{
"column": 11,
"file": "/home/brandon/toolchain/hostap/src/common/hw_features_common.c",
"line": 993,
"message": "Potential null pointer dereference in member access of variable 'chan'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'chan' is not NULL before member access",
"project": "hostap"
},
{
"column": 7,
"file": "/home/brandon/toolchain/hostap/src/common/proc_coord.c",
"line": 733,
"message": "Potential null pointer dereference in member access of variable 'handler'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'handler' is not NULL before member access",
"project": "hostap"
},
{
"column": 36,
"file": "/home/brandon/toolchain/hostap/src/drivers/driver_nl80211.c",
"line": 15119,
"message": "Potential null pointer dereference of variable 'drv->first_bss'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'drv->first_bss' is not NULL before dereferencing",
"project": "hostap"
},
{
"column": 29,
"file": "/home/brandon/toolchain/hostap/src/drivers/netlink.c",
"line": 96,
"message": "Potential null pointer dereference of variable 'netlink'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'netlink' is not NULL before dereferencing",
"project": "hostap"
},
{
"column": 39,
"file": "/home/brandon/toolchain/hostap/src/eap_common/eap_pwd_common.c",
"line": 225,
"message": "Passing null pointer 'prfbuf' to 'const_time_select_bin' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'prfbuf' is not NULL before passing to 'const_time_select_bin'",
"project": "hostap"
},
{
"column": 7,
"file": "/home/brandon/toolchain/hostap/src/eap_peer/eap_md5.c",
"line": 49,
"message": "Passing null pointer 'pos' to 'wpa_printf' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pos' is not NULL before passing to 'wpa_printf'",
"project": "hostap"
},
{
"column": 26,
"file": "/home/brandon/toolchain/hostap/src/pae/ieee802_1x_kay.c",
"line": 596,
"message": "Potential null pointer dereference of variable 'peer'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'peer' is not NULL before dereferencing",
"project": "hostap"
},
{
"column": 5,
"file": "/home/brandon/toolchain/hostap/src/rsn_supp/wpa.c",
"line": 6113,
"message": "Passing null pointer 'pub' to 'wpa_hexdump_buf' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pub' is not NULL before passing to 'wpa_hexdump_buf'",
"project": "hostap"
},
{
"column": 49,
"file": "/home/brandon/toolchain/hostap/src/tls/tlsv1_cred.c",
"line": 235,
"message": "Passing null pointer 'cert' to 'tlsv1_set_cert_chain' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'cert' is not NULL before passing to 'tlsv1_set_cert_chain'",
"project": "hostap"
},
{
"column": 43,
"file": "/home/brandon/toolchain/hostap/src/utils/edit.c",
"line": 305,
"message": "Potential null pointer dereference in member access of variable 'h'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'h' is not NULL before member access",
"project": "hostap"
},
{
"column": 28,
"file": "/home/brandon/toolchain/hostap/wpa_supplicant/eapol_test.c",
"line": 843,
"message": "Potential null pointer dereference of variable 'dot1x'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'dot1x' is not NULL before dereferencing",
"project": "hostap"
},
{
"column": 51,
"file": "/home/brandon/toolchain/mosquitto/plugins/dynamic-security/groups.c",
"line": 681,
"message": "Passing potentially null pointer 'username' to function",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'username' is not NULL before passing to function",
"project": "mosquitto"
},
{
"column": 8,
"file": "/home/brandon/toolchain/mosquitto/src/plugin_acl_check.c",
"line": 131,
"message": "Potential null pointer dereference in member access of variable 'cb_base'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'cb_base' is not NULL before member access",
"project": "mosquitto"
},
{
"column": 20,
"file": "/home/brandon/toolchain/mosquitto/test/unit/lib/property_user_read.c",
"line": 454,
"message": "Passing null pointer 'proplist_copy' to 'read_int16_helper' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'proplist_copy' is not NULL before passing to 'read_int16_helper'",
"project": "mosquitto"
},
{
"column": 12,
"file": "/home/brandon/toolchain/sqlite/autosetup/jimsh0.c",
"line": 21437,
"message": "Potential null pointer dereference in member access of variable 'objPtr'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'objPtr' is not NULL before member access",
"project": "sqlite"
},
{
"column": 28,
"file": "/home/brandon/toolchain/sqlite/ext/expert/sqlite3expert.c",
"line": 1737,
"message": "Potential null pointer dereference in array access of variable 'aStat'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'aStat' is not NULL before array access",
"project": "sqlite"
},
{
"column": 3,
"file": "/home/brandon/toolchain/sqlite/ext/fts3/fts3_tokenizer.c",
"line": 316,
"message": "Potential null pointer dereference in member access of variable 'pTokenizer'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pTokenizer' is not NULL before member access",
"project": "sqlite"
},
{
"column": 18,
"file": "/home/brandon/toolchain/sqlite/ext/fts3/fts3_write.c",
"line": 4844,
"message": "Passing null pointer 'pReplace' to 'sqlite3_step' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pReplace' is not NULL before passing to 'sqlite3_step'",
"project": "sqlite"
},
{
"column": 17,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_main.c",
"line": 2514,
"message": "Passing null pointer 'z' to 'sqlite3Fts5Tokenize' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'z' is not NULL before passing to 'sqlite3Fts5Tokenize'",
"project": "sqlite"
},
{
"column": 40,
"file": "/home/brandon/toolchain/sqlite/ext/fts5/fts5_tcl.c",
"line": 1633,
"message": "Passing null pointer 'db' to 'sqlite3_fts5_drop_corrupt_table' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'db' is not NULL before passing to 'sqlite3_fts5_drop_corrupt_table'",
"project": "sqlite"
},
{
"column": 7,
"file": "/home/brandon/toolchain/sqlite/ext/intck/sqlite3intck.c",
"line": 834,
"message": "Potential null pointer dereference in member access of variable 'p'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'p' is not NULL before member access",
"project": "sqlite"
},
{
"column": 37,
"file": "/home/brandon/toolchain/sqlite/ext/misc/sha1.c",
"line": 328,
"message": "Passing null pointer 'pStmt' to 'sqlite3_step' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pStmt' is not NULL before passing to 'sqlite3_step'",
"project": "sqlite"
},
{
"column": 31,
"file": "/home/brandon/toolchain/sqlite/ext/misc/zipfile.c",
"line": 1637,
"message": "Passing potentially null pointer 'zDelete' to function",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'zDelete' is not NULL before passing to function",
"project": "sqlite"
},
{
"column": 35,
"file": "/home/brandon/toolchain/sqlite/ext/qrf/qrf.c",
"line": 1820,
"message": "Potential null pointer dereference in array access of variable 'aw'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'aw' is not NULL before array access",
"project": "sqlite"
},
{
"column": 52,
"file": "/home/brandon/toolchain/sqlite/ext/rbu/sqlite3rbu.c",
"line": 2728,
"message": "Passing null pointer 'pStmt' to 'sqlite3_step' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pStmt' is not NULL before passing to 'sqlite3_step'",
"project": "sqlite"
},
{
"column": 20,
"file": "/home/brandon/toolchain/sqlite/ext/rbu/sqlite3rbu.c",
"line": 3633,
"message": "Passing null pointer 'pPragma' to 'rbuFinalize' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pPragma' is not NULL before passing to 'rbuFinalize'",
"project": "sqlite"
},
{
"column": 23,
"file": "/home/brandon/toolchain/sqlite/ext/rtree/rtree.c",
"line": 1997,
"message": "Passing null pointer 'pRoot' to 'nodeRelease' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pRoot' is not NULL before passing to 'nodeRelease'",
"project": "sqlite"
},
{
"column": 61,
"file": "/home/brandon/toolchain/sqlite/ext/session/sqlite3session.c",
"line": 6104,
"message": "Passing null pointer 'pTab' to 'sessionGrowHash' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pTab' is not NULL before passing to 'sessionGrowHash'",
"project": "sqlite"
},
{
"column": 61,
"file": "/home/brandon/toolchain/sqlite/src/build.c",
"line": 4504,
"message": "Potential null pointer dereference in member access of variable 'pThis'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pThis' is not NULL before member access",
"project": "sqlite"
},
{
"column": 29,
"file": "/home/brandon/toolchain/sqlite/src/expr.c",
"line": 749,
"message": "Passing null pointer 'pR' to 'codeCompare' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pR' is not NULL before passing to 'codeCompare'",
"project": "sqlite"
},
{
"column": 11,
"file": "/home/brandon/toolchain/sqlite/src/expr.c",
"line": 1854,
"message": "Potential null pointer dereference in member access of variable 'pNewExpr'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pNewExpr' is not NULL before member access",
"project": "sqlite"
},
{
"column": 11,
"file": "/home/brandon/toolchain/sqlite/src/pager.c",
"line": 6056,
"message": "Potential null pointer dereference in member access of variable 'pPager'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pPager' is not NULL before member access",
"project": "sqlite"
},
{
"column": 13,
"file": "/home/brandon/toolchain/sqlite/src/pcache1.c",
"line": 626,
"message": "Potential null pointer dereference in member access of variable 'p'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'p' is not NULL before member access",
"project": "sqlite"
},
{
"column": 30,
"file": "/home/brandon/toolchain/sqlite/src/prepare.c",
"line": 897,
"message": "Potential null pointer dereference in member access of variable 'db'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'db' is not NULL before member access",
"project": "sqlite"
},
{
"column": 27,
"file": "/home/brandon/toolchain/sqlite/src/treeview.c",
"line": 1137,
"message": "Passing null pointer 'pView' to 'sqlite3TreeViewSelect' which does not check for NULL",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pView' is not NULL before passing to 'sqlite3TreeViewSelect'",
"project": "sqlite"
},
{
"column": 29,
"file": "/home/brandon/toolchain/sqlite/src/trigger.c",
"line": 1069,
"message": "Potential null pointer dereference in member access of variable 'pNew'",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'pNew' is not NULL before member access",
"project": "sqlite"
},
{
"column": 24,
"file": "/home/brandon/toolchain/sqlite/src/vdbe.c",
"line": 3213,
"message": "Passing potentially null pointer 'zData' to function",
"rule_id": "EXP34-C",
"severity": "High",
"suggestion": "Check if 'zData' is not NULL before passing to function",
"project": "sqlite"
}
]
}