Snippets for gnutls 3.8.13 from Alpine x86_64

Sourced from https://build.alpinelinux.org/buildlogs/build-edge-x86_64/main/gnutls/gnutls-3.8.13-r0.log.

• crypto-api.c:504:14: warning: no previous prototype for '_gnutls_pkcs7_unpad' [-Wmissing-prototypes]
    504 | unsigned int _gnutls_pkcs7_unpad(const uint8_t *block, unsigned int block_size)
        |              ^~~~~~~~~~~~~~~~~~~
  

• system/ktls.c:937:39: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
    937 |                 struct msghdr msg = { 0 };
        |                                       ^
  

• system/ktls.c:1020:31: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
   1020 |         struct msghdr msg = { 0 };
        |                               ^
  

• system/fastopen.c:176:16: warning: leak of file descriptor 'fd' [CWE-775] [-Wanalyzer-fd-leak]
    176 |         return ret;
        |                ^~~
  

• serv.c:1149:34: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
   1149 |                 int last_alert = gnutls_alert_get(session);
        |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~
  

• serv.c:1488:31: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
   1488 |                         ret = gnutls_alert_send_appropriate(j->tls_session, r);
        |                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• serv.c:1838:77: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
   1837 |                                                                 j->http_request
        |                                                                 ~~~~~~~~~~~~~~~
   1838 |                                                                         [0] = 0;
        |                                                                         ~~~~^~~
  

• serv.c:1844:60: warning: leak of file descriptor '((listener_item)*(const void *)((const void *)j)).fd' [CWE-775] [-Wanalyzer-fd-leak]
   1844 |                                         j->http_request[0] = 0;
        |                                         ~~~~~~~~~~~~~~~~~~~^~~
  

• ex-serv-dtls.c:125:9: warning: 'bind' on possibly invalid file descriptor 'listen_sd' [-Wanalyzer-fd-use-without-check]
    125 |         bind(listen_sd, (struct sockaddr *)&sa_serv, sizeof(sa_serv));
        |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• ex-serv-x509.c:142:36: warning: use of uninitialized value 'sa_cli.sin_port' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
    142 |                        ntohs(sa_cli.sin_port));
        |                              ~~~~~~^~~~~~~~~
  

• tcp.c:39:15: warning: 'connect' on possibly invalid file descriptor 'sd' [-Wanalyzer-fd-use-without-check]
     39 |         err = connect(sd, (struct sockaddr *)&sa, sizeof(sa));
        |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• udp.c:52:15: warning: 'connect' on possibly invalid file descriptor 'sd' [-Wanalyzer-fd-use-without-check]
     52 |         err = connect(sd, (struct sockaddr *)&sa, sizeof(sa));
        |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• ex-serv-anon.c:88:36: warning: use of uninitialized value 'sa_cli.sin_port' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
     88 |                        ntohs(sa_cli.sin_port));
        |                              ~~~~~~^~~~~~~~~
  

• ex-serv-psk.c:140:36: warning: use of uninitialized value 'sa_cli.sin_port' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
    140 |                        ntohs(sa_cli.sin_port));
        |                              ~~~~~~^~~~~~~~~
  

• tlsproxy/tlsproxy.c:232:41: warning: leak of file descriptor 'listenfd' [CWE-775] [-Wanalyzer-fd-leak]
    232 |                                         fprintf(stderr, "Accept failed\n");
        |                                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• tlsproxy/tlsproxy.c:241:28: warning: leak of file descriptor 'listenfd' [CWE-775] [-Wanalyzer-fd-leak]
    241 |                         if (ret < 0)
        |                            ^
  

• tlsproxy/tlsproxy.c:254:17: warning: leak of file descriptor 'fd' [CWE-775] [-Wanalyzer-fd-leak]
    254 |                 close(listenfd);
        |                 ^~~~~~~~~~~~~~~
  

• /usr/include/fortify/unistd.h:62:16: warning: argument 1 is null but the corresponding size argument 2 value is [1, 9223372036854775806] [-Wnonnull]
     62 |         return __orig_getcwd(__s, __l);
        |                ^~~~~~~~~~~~~~~~~~~~~~~
  

• /usr/include/fortify/unistd.h:62:16: warning: argument 1 is null but the corresponding size argument 2 value is [1, 9223372036854775805] [-Wnonnull]
     62 |         return __orig_getcwd(__s, __l);
        |                ^~~~~~~~~~~~~~~~~~~~~~~
  

• test-strnlen.c:45:11: warning: 'strnlen' specified bound 1048576 exceeds source size 1 [-Wstringop-overread]
     45 |   ASSERT (strnlen ("", 0x100000) == 0);
        |           ^~~~~~~~~~~~~~~~~~~~~~
  

• pkcs12_s2k.c:126:35: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
    126 |                         data.data = values[x];
        |                                   ^
  

• pkcs12_s2k.c:152:27: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
    152 |                 data.data = tv[i].key;
        |                           ^
  

• x509cert-tl.c:134:9: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (603 chars into 602 available) [-Wunterminated-string-initialization]
    134 |         "\x30\x82\x02\x56\x30\x82\x01\xc1\xa0\x03\x02\x01\x02\x02\x04\x46"
        |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• x509cert-ct.c:143:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
    143 |                           "\xdd\xeb\x1d\x2b\x7a\x0d\x4f\xa6\x20\x8b\x81\xad\x81\x68\x70\x7e"
        |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• x509cert-ct.c:154:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
    154 |                           "\xa4\xb9\x09\x90\xb4\x18\x58\x14\x87\xbb\x13\xa2\xcc\x67\x70\x0a"
        |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• x509cert-ct.c:165:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
    165 |                           "\xee\x4b\xbd\xb7\x75\xce\x60\xba\xe1\x42\x69\x1f\xab\xe1\x9e\x66"
        |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• x509cert-ct.c:176:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
    176 |                           "\xbc\x78\xe1\xdf\xc5\xf6\x3c\x68\x46\x49\x33\x4d\xa1\x0f\xa1\x5f"
        |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• client-fastopen.c:313:1: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
    313 | }
        | ^
  

• ktls_utils.h:106:12: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
    106 |         if (*server_fd < 0) {
        |            ^