Snippets for gnutls 3.8.13 from Alpine aarch64

Sourced from https://build.alpinelinux.org/buildlogs/build-edge-aarch64/main/gnutls/gnutls-3.8.13-r0.log.

aarch64-common.c:78:9: warning: macro 'HWCAP_SHA3' is not used [-Wunused-macros]
   78 | #define HWCAP_SHA3 (1 << 17)
      |         ^~~~~~~~~~

crypto-api.c:504:14: warning: no previous prototype for '_gnutls_pkcs7_unpad' [-Wmissing-prototypes]
  504 | unsigned int _gnutls_pkcs7_unpad(const uint8_t *block, unsigned int block_size)
      |              ^~~~~~~~~~~~~~~~~~~

system/ktls.c:937:39: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  937 |                 struct msghdr msg = { 0 };
      |                                       ^

system/ktls.c:1020:31: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
 1020 |         struct msghdr msg = { 0 };
      |                               ^

system/fastopen.c:176:16: warning: leak of file descriptor 'fd' [CWE-775] [-Wanalyzer-fd-leak]
  176 |         return ret;
      |                ^~~

serv.c:1149:34: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
 1149 |                 int last_alert = gnutls_alert_get(session);
      |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~

serv.c:1488:31: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
 1488 |                         ret = gnutls_alert_send_appropriate(j->tls_session, r);
      |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

serv.c:1838:77: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
 1837 |                                                                 j->http_request
      |                                                                 ~~~~~~~~~~~~~~~
 1838 |                                                                         [0] = 0;
      |                                                                         ~~~~^~~

serv.c:1844:60: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
 1844 |                                         j->http_request[0] = 0;
      |                                         ~~~~~~~~~~~~~~~~~~~^~~

ex-serv-anon.c:88:36: warning: use of uninitialized value 'sa_cli.sin_port' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
   88 |                        ntohs(sa_cli.sin_port));
      |                              ~~~~~~^~~~~~~~~

tcp.c:39:15: warning: 'connect' on possibly invalid file descriptor 'sd' [-Wanalyzer-fd-use-without-check]
   39 |         err = connect(sd, (struct sockaddr *)&sa, sizeof(sa));
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

udp.c:52:15: warning: 'connect' on possibly invalid file descriptor 'sd' [-Wanalyzer-fd-use-without-check]
   52 |         err = connect(sd, (struct sockaddr *)&sa, sizeof(sa));
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ex-serv-psk.c:140:36: warning: use of uninitialized value 'sa_cli.sin_port' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
  140 |                        ntohs(sa_cli.sin_port));
      |                              ~~~~~~^~~~~~~~~

ex-serv-x509.c:142:36: warning: use of uninitialized value 'sa_cli.sin_port' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
  142 |                        ntohs(sa_cli.sin_port));
      |                              ~~~~~~^~~~~~~~~

ex-serv-dtls.c:125:9: warning: 'bind' on possibly invalid file descriptor 'listen_sd' [-Wanalyzer-fd-use-without-check]
  125 |         bind(listen_sd, (struct sockaddr *)&sa_serv, sizeof(sa_serv));
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

tlsproxy/tlsproxy.c:232:41: warning: leak of file descriptor 'listenfd' [CWE-775] [-Wanalyzer-fd-leak]
  232 |                                         fprintf(stderr, "Accept failed\n");
      |                                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

tlsproxy/tlsproxy.c:241:28: warning: leak of file descriptor 'listenfd' [CWE-775] [-Wanalyzer-fd-leak]
  241 |                         if (ret < 0)
      |                            ^

tlsproxy/tlsproxy.c:254:17: warning: leak of file descriptor 'fd' [CWE-775] [-Wanalyzer-fd-leak]
  254 |                 close(listenfd);
      |                 ^~~~~~~~~~~~~~~

/usr/include/fortify/unistd.h:62:16: warning: argument 1 is null but the corresponding size argument 2 value is [1, 9223372036854775806] [-Wnonnull]
   62 |         return __orig_getcwd(__s, __l);
      |                ^~~~~~~~~~~~~~~~~~~~~~~

/usr/include/fortify/unistd.h:62:16: warning: argument 1 is null but the corresponding size argument 2 value is [1, 9223372036854775805] [-Wnonnull]
   62 |         return __orig_getcwd(__s, __l);
      |                ^~~~~~~~~~~~~~~~~~~~~~~

test-strnlen.c:45:11: warning: 'strnlen' specified bound 1048576 exceeds source size 1 [-Wstringop-overread]
   45 |   ASSERT (strnlen ("", 0x100000) == 0);
      |           ^~~~~~~~~~~~~~~~~~~~~~

pkcs12_s2k.c:126:35: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  126 |                         data.data = values[x];
      |                                   ^

pkcs12_s2k.c:152:27: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  152 |                 data.data = tv[i].key;
      |                           ^

x509cert-tl.c:134:9: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (603 chars into 602 available) [-Wunterminated-string-initialization]
  134 |         "\x30\x82\x02\x56\x30\x82\x01\xc1\xa0\x03\x02\x01\x02\x02\x04\x46"
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

x509cert-ct.c:143:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  143 |                           "\xdd\xeb\x1d\x2b\x7a\x0d\x4f\xa6\x20\x8b\x81\xad\x81\x68\x70\x7e"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

x509cert-ct.c:154:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  154 |                           "\xa4\xb9\x09\x90\xb4\x18\x58\x14\x87\xbb\x13\xa2\xcc\x67\x70\x0a"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

x509cert-ct.c:165:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  165 |                           "\xee\x4b\xbd\xb7\x75\xce\x60\xba\xe1\x42\x69\x1f\xab\xe1\x9e\x66"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

x509cert-ct.c:176:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  176 |                           "\xbc\x78\xe1\xdf\xc5\xf6\x3c\x68\x46\x49\x33\x4d\xa1\x0f\xa1\x5f"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

client-fastopen.c:313:1: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
  313 | }
      | ^

ktls_utils.h:106:12: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
  106 |         if (*server_fd < 0) {
      |            ^