Snippets for gnutls 3.8.13 from Fedora x86_64

Sourced from https://kojipkgs.fedoraproject.org/packages/gnutls/3.8.13/1.fc45/data/logs/x86_64/build.log.

../asn1/src/asn1_compiler.c:459:37: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
  459 |                                 dir = bsearch(&tokens[tix], directives,
      |                                     ^

../asn1/src/asn1_compiler.c:664:11: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
  664 |         p = strchr(grammar_name, '.');
      |           ^

../../../lib/auth/cert.c:390:69: warning: parameter 'data_size' set but not used [-Wunused-but-set-parameter=]
  390 |                        int issuers_len, const uint8_t *data, size_t data_size)
      |                                                              ~~~~~~~^~~~~~~~~

../../../lib/nettle/mpi.c:78:13: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
   78 |         r = gnutls_malloc(SIZEOF_MPZT);
      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/../errors.h:146:25: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  146 |                         _gnutls_log(l, __VA_ARGS__);  \
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/../errors.h:146:25: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  146 |                         _gnutls_log(l, __VA_ARGS__);  \
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~

./../includes/gnutls/gnutls.h:2312:24: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
 2312 | #define gnutls_free(a) gnutls_free((void *)(a)), a = NULL
      |                        ^~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/int/drbg-aes.c:106:59: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  106 |                 ret = drbg_aes_generate(ctx, p_len, p, 0, 0);
      |                                                           ^

../../lib/str-unicode.c:290:9: warning: double-'free' of 'nrm' [CWE-415] [-Wanalyzer-double-free]
  290 |         free(nrm);
      |         ^~~~~~~~~

../../lib/system/ktls.c:937:39: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  937 |                 struct msghdr msg = { 0 };
      |                                       ^

../../lib/system/ktls.c:1020:31: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
 1020 |         struct msghdr msg = { 0 };
      |                               ^

../../lib/verify-tofu.c:436:49: warning: leak of FILE 'fopen(db_name, "abe+")' [CWE-775] [-Wanalyzer-file-leak]
  436 |                 _gnutls_bin2hex(hash->data, hash->size, buffer, sizeof(buffer),
      |                                             ~~~~^~~~~~

../../lib/fips.c:287:11: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  287 |         p = strrchr(gnutls_path, '/');
      |           ^

../../lib/fips.c:114:23: warning: leak of FILE 'fopen("/proc/sys/crypto/fips_enabled", "re")' [CWE-775] [-Wanalyzer-file-leak]
  114 |                 f1p = fgetc(fd);
      |                       ^~~~~~~~~

../../lib/fips.c:339:9: warning: leak of FILE 'fopen(hmac_path, "r")' [CWE-775] [-Wanalyzer-file-leak]
  339 |         gnutls_memset(hmac_file, 0, sizeof(*hmac_file));
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../lib/fips.c:340:15: warning: leak of FILE 'fopen(hmac_path, "r")' [CWE-775] [-Wanalyzer-file-leak]
  340 |         ret = ini_parse_file(stream, handler, hmac_file);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../lib/crypto-api.c:504:14: warning: no previous prototype for '_gnutls_pkcs7_unpad' [-Wmissing-prototypes]
  504 | unsigned int _gnutls_pkcs7_unpad(const uint8_t *block, unsigned int block_size)
      |              ^~~~~~~~~~~~~~~~~~~

../../lib/priority.c:1121:9: warning: leak of FILE 'fopen(system_priority_file, "re")' [CWE-775] [-Wanalyzer-file-leak]
 1121 |         cfg_init(&ctx->cfg);
      |         ^~~~~~~~~~~~~~~~~~~

../../lib/pkcs11.c:284:26: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  284 |         if (params && (p = strstr(params, "p11-kit:")) != NULL) {
      |                          ^

parse-datetime.c:1604:9: warning: variable 'yynerrs' set but not used [-Wunused-but-set-variable=]

../../src/systemkey-tool-options.c:166:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  166 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/systemkey-tool-options.c:166:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  166 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/systemkey-tool-options.c:172:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  172 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/systemkey-tool-options.c:172:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  172 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/systemkey-tool-options.c:174:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  174 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/systemkey-tool-options.c:183:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  183 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/systemkey-tool-options.c:183:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  183 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/systemkey-tool-options.c:185:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  185 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:172:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  172 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:172:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  172 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:178:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  178 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:178:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  178 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:180:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  180 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:189:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  189 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:189:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  189 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-debug-options.c:191:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  191 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:172:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  172 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:172:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  172 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:178:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  178 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:178:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  178 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:180:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  180 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:189:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  189 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:189:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  189 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/psktool-options.c:191:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  191 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:282:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  282 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:282:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  282 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:288:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  288 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:288:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  288 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:290:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  290 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:299:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  299 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:299:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  299 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-options.c:301:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  301 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:291:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  291 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:291:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  291 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:297:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  297 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:297:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  297 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:299:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  299 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:308:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  308 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:308:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  308 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/danetool-options.c:310:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  310 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/ocsptool-common.c:60:16: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
   60 |         if ((p = strstr(url, "http://")) != NULL) {
      |                ^

../../src/certtool-options.c:656:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  656 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/certtool-options.c:656:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  656 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/certtool-options.c:662:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  662 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/certtool-options.c:662:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  662 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/certtool-options.c:664:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  664 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/certtool-options.c:673:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  673 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/certtool-options.c:673:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  673 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/certtool-options.c:675:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  675 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:626:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  626 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:626:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  626 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:632:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  632 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:632:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  632 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:634:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  634 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:643:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  643 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:643:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  643 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/p11tool-options.c:645:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  645 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(passwd_file, "w")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(&tmpname, "r")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(passwd_file, "w")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(passwd_file, "w")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(&tmpname, "r")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(&tmpname, "r")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(passwd_file, "w")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:220:26: warning: leak of FILE 'fopen(&tmpname, "r")' [CWE-775] [-Wanalyzer-file-leak]
  220 |                 tmp.size = strlen(username);
      |                 ~~~~~~~~~^~~~~~~~~~~~~~~~~~

../../src/psk.c:246:42: warning: leak of FILE 'fopen(passwd_file, "w")' [CWE-775] [-Wanalyzer-file-leak]
  246 |                 _username.data = (void *)gnutls_strdup(username);
      |                                          ^~~~~~~~~~~~~~~~~~~~~~~

../../src/psk.c:246:42: warning: leak of FILE 'fopen(&tmpname, "r")' [CWE-775] [-Wanalyzer-file-leak]
  246 |                 _username.data = (void *)gnutls_strdup(username);
      |                                          ^~~~~~~~~~~~~~~~~~~~~~~

../../src/psk.c:246:42: warning: leak of FILE 'fopen(passwd_file, "w")' [CWE-775] [-Wanalyzer-file-leak]
  246 |                 _username.data = (void *)gnutls_strdup(username);
      |                                          ^~~~~~~~~~~~~~~~~~~~~~~

../../src/psk.c:246:42: warning: leak of FILE 'fopen(&tmpname, "r")' [CWE-775] [-Wanalyzer-file-leak]
  246 |                 _username.data = (void *)gnutls_strdup(username);
      |                                          ^~~~~~~~~~~~~~~~~~~~~~~

../../src/psk.c:246:42: warning: leak of FILE 'fopen(passwd_file, "w")' [CWE-775] [-Wanalyzer-file-leak]
  246 |                 _username.data = (void *)gnutls_strdup(username);
      |                                          ^~~~~~~~~~~~~~~~~~~~~~~

../../src/psk.c:246:42: warning: leak of FILE 'fopen(&tmpname, "r")' [CWE-775] [-Wanalyzer-file-leak]
  246 |                 _username.data = (void *)gnutls_strdup(username);
      |                                          ^~~~~~~~~~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:661:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  661 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:661:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  661 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:667:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  667 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:667:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  667 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:669:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  669 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:678:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  678 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:678:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  678 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-cli-options.c:680:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  680 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:504:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  504 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:504:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  504 |           perror ("fork");
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:510:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  510 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:510:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  510 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:512:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  512 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:521:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  521 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:521:11: warning: leak of file descriptor 'pfds[1]' [CWE-775] [-Wanalyzer-fd-leak]
  521 |           close (pfds[1]);
      |           ^~~~~~~~~~~~~~~

../../src/gnutls-serv-options.c:523:11: warning: leak of file descriptor 'pfds[0]' [CWE-775] [-Wanalyzer-fd-leak]
  523 |           close (pfds[0]);
      |           ^~~~~~~~~~~~~~~

../../src/danetool.c:598:17: warning: ignoring return value of 'write' declared with attribute 'warn_unused_result' [-Wunused-result]
  598 |                 write(priv->fd, t.data, t.size);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:575:52: warning: leak of FILE 'fopen("debug-dh.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
  575 |                 print = raw_to_string(gen.data, gen.size);
      |                                                 ~~~^~~~~

../../src/tests.c:1717:54: warning: leak of FILE 'fopen("debug-cas.out", "w")' [CWE-775] [-Wanalyzer-file-leak]
 1717 |                 ret = gnutls_x509_rdn_get(&req_ca_rdn[i], issuer_dn, &len);
      |                                                      ^

../../src/serv.c:1141:9: warning: ignoring return value of 'write' declared with attribute 'warn_unused_result' [-Wunused-result]
 1141 |         write(STDERR_FILENO, buf, p - buf);
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../src/gl/gl_list.h:777:11: warning: leak of file descriptor 'news' [CWE-775] [-Wanalyzer-fd-leak]
  777 |   return ((const struct gl_list_impl_base *) list)->vtable
      |          ~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  778 |          ->nx_add_last (list, elt);
      |          ~~~~~~~~~~~~~~~~~~~~~~~~~

../../src/gl/gl_xlist.h:163:5: warning: leak of file descriptor 'news' [CWE-775] [-Wanalyzer-fd-leak]
  163 |     xalloc_die ();
      |     ^~~~~~~~~~~~~

../../src/serv.c:1017:33: warning: leak of file descriptor 'news' [CWE-775] [-Wanalyzer-fd-leak]
 1017 |                                 perror("listen() failed");
      |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~

../../src/serv.c:1023:21: warning: leak of file descriptor 'news' [CWE-775] [-Wanalyzer-fd-leak]
 1023 |                 j = xzalloc(sizeof(*j));
      |                     ^~~~~~~~~~~~~~~~~~~

../../src/cli.c:2226:16: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
 2226 |         if ((p = strstr(url, "http://")) != NULL) {
      |                ^

../../src/cli.c:347:23: warning: leak of FILE 'fopen(gnutls_cli_options.arg.save_cert, "w")' [CWE-775] [-Wanalyzer-file-leak]
  347 |         for (i = 0; i < cert_list_size; i++) {
      |                     ~~^~~~~~~~~~~~~~~~

../../src/cli.c:347:23: warning: leak of FILE 'fopen(gnutls_cli_options.arg.save_cert, "w")' [CWE-775] [-Wanalyzer-file-leak]

../../src/cli.c:347:23: warning: leak of FILE 'fopen(gnutls_cli_options.arg.save_cert, "w")' [CWE-775] [-Wanalyzer-file-leak]
  347 |         for (i = 0; i < cert_list_size; i++) {
      |                     ~~^~~~~~~~~~~~~~~~

../../src/cli.c:398:27: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  398 |                 int ret = gnutls_ocsp_status_request_get2(session, i, &oresp);
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../src/cli.c:400:25: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  400 |                         fprintf(stderr, "no OCSP response for certificate %u\n",
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  401 |                                 i);
      |                                 ~~

../../src/cli.c:403:27: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  403 |                 } else if (ret < 0) {
      |                           ^

../../src/cli.c:412:53: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  412 |                         if (fwrite(oresp.data, oresp.size, 1, fp) != 1) {
      |                                                ~~~~~^~~~~

./../lib/includes/gnutls/gnutls.h:2855:40: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
 2855 | #define gnutls_pem_base64_encode_alloc gnutls_pem_base64_encode2

../../src/cli.c:422:20: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  422 |                 if (ret < 0) {
      |                    ^

../../src/cli.c:431:37: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  431 |                 if (fwrite(t.data, t.size, 1, fp) != 1) {
      |                                    ~^~~~~

../../src/cli.c:431:37: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  431 |                 if (fwrite(t.data, t.size, 1, fp) != 1) {
      |                                    ~^~~~~

../../src/cli.c:431:37: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  431 |                 if (fwrite(t.data, t.size, 1, fp) != 1) {
      |                                    ~^~~~~

../../src/cli.c:431:37: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]

../../src/cli.c:431:37: warning: leak of FILE 'fopen(path, "w")' [CWE-775] [-Wanalyzer-file-leak]
  431 |                 if (fwrite(t.data, t.size, 1, fp) != 1) {
      |                                    ~^~~~~

../config.h:3702:20: warning: leak of FILE 'fopen(gnutls_cli_options.arg.earlydata, "r")' [CWE-775] [-Wanalyzer-file-leak]
 3702 | #define fread_file _gnutls_fread_file

../config.h:3702:20: warning: leak of FILE 'fopen(*cinfo.data_file, "r")' [CWE-775] [-Wanalyzer-file-leak]
 3702 | #define fread_file _gnutls_fread_file

../../tests/utils.c:96:9: warning: ignoring return value of 'vasprintf' declared with attribute 'warn_unused_result' [-Wunused-result]
   96 |         vasprintf(&str, format, arg_ptr);
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/utils.c:341:17: warning: leak of file descriptor 'sock' [CWE-775] [-Wanalyzer-fd-leak]
  341 |                 close(sock);
      |                 ^~~~~~~~~~~

../../tests/utils.c:344:13: warning: leak of file descriptor 'sock' [CWE-775] [-Wanalyzer-fd-leak]
  344 |         if (connect(sock, (struct sockaddr *)&sa, sizeof(sa)) != 0) {
      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-client-resume.c:74:60: warning: use of uninitialized value 'sdata.size' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
   74 |                                                       sdata.size));
      |                                                       ~~~~~^~~~~

../../../doc/examples/ex-serv-anon.c:23:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
   23 |                 perror(s);  \
      |                 ^~~~~~~~~

../../../doc/examples/ex-serv-anon.c:78:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
   78 |                 gnutls_init(&session, GNUTLS_SERVER);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-anon.c:79:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
   79 |                 gnutls_priority_set_direct(session,
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   80 |                                            "NORMAL:+ANON-ECDH:+ANON-DH", NULL);
      |                                            ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-anon.c:81:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
   81 |                 gnutls_credentials_set(session, GNUTLS_CRD_ANON, anoncred);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-anon.c:83:22: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
   83 |                 sd = accept(listen_sd, (struct sockaddr *)&sa_cli, &client_len);
      |                      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/tcp.c:39:15: warning: leak of file descriptor 'sd' [CWE-775] [-Wanalyzer-fd-leak]
   39 |         err = connect(sd, (struct sockaddr *)&sa, sizeof(sa));
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-x509.c:122:23: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  122 |                 CHECK(gnutls_init(&session, GNUTLS_SERVER));
      |                       ^

../../../doc/examples/ex-serv-x509.c:123:23: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  123 |                 CHECK(gnutls_priority_set(session, priority_cache));
      |                       ^

../../../doc/examples/ex-serv-x509.c:124:23: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  124 |                 CHECK(gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
      |                       ^

../../../doc/examples/ex-serv-x509.c:132:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  132 |                 gnutls_certificate_server_set_request(session,
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  133 |                                                       GNUTLS_CERT_IGNORE);
      |                                                       ~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-x509.c:134:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  134 |                 gnutls_handshake_set_timeout(session,
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  135 |                                              GNUTLS_DEFAULT_HANDSHAKE_TIMEOUT);
      |                                              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-x509.c:137:22: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  137 |                 sd = accept(listen_sd, (struct sockaddr *)&sa_cli, &client_len);
      |                      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-psk.c:34:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
   34 |                 perror(s);  \
      |                 ^~~~~~~~~

../../../doc/examples/ex-serv-psk.c:124:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  124 |                 gnutls_init(&session, GNUTLS_SERVER);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-psk.c:125:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  125 |                 gnutls_priority_set(session, priority_cache);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-psk.c:126:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  126 |                 gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  127 |                                        x509_cred);
      |                                        ~~~~~~~~~~

../../../doc/examples/ex-serv-psk.c:128:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  128 |                 gnutls_credentials_set(session, GNUTLS_CRD_PSK, psk_cred);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-psk.c:132:17: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  132 |                 gnutls_certificate_server_set_request(session,
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  133 |                                                       GNUTLS_CERT_REQUEST);
      |                                                       ~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/ex-serv-psk.c:135:22: warning: leak of file descriptor 'listen_sd' [CWE-775] [-Wanalyzer-fd-leak]
  135 |                 sd = accept(listen_sd, (struct sockaddr *)&sa_cli, &client_len);
      |                      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/tlsproxy/tlsproxy.c:113:17: warning: leak of file descriptor 'fd' [CWE-775] [-Wanalyzer-fd-leak]
  113 |                 close(fd);
      |                 ^~~~~~~~~

../../../doc/examples/tlsproxy/tlsproxy.c:156:29: warning: leak of file descriptor 'fd' [CWE-775] [-Wanalyzer-fd-leak]
  156 |                         if (connect(fd, rp->ai_addr, rp->ai_addrlen) == 0)
      |                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/tlsproxy/crypto-gnutls.c:89:15: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
   89 |         ret = s->erroutfn(s->opaque, format, ap);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../doc/examples/tlsproxy/crypto-gnutls.c:100:23: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  100 |                 ret = s->erroutfn(s->opaque, format, ap);
      |                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../gl/canonicalize-lgpl.c:345:33: warning: 'end_idx' may be used uninitialized [-Wmaybe-uninitialized]
  345 |                 end = extra_buf + end_idx;
      |                       ~~~~~~~~~~^~~~~~~~~

../../gl/gettimeofday.c:101:42: warning: the comparison will always evaluate as 'true' for the address of 'GetSystemTimePreciseAsFileTime' will never be NULL [-Waddress]
  101 |   if (GetSystemTimePreciseAsFileTimeFunc != NULL)
      |                                          ^~

../../../lib/x509/privkey_openssl.c:176:37: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  176 |                 if (pem_header_size > l &&
      |                                     ^

../../../lib/x509/verify-high2.c:450:26: warning: cast increases required alignment of target type [-Wcast-align]
  450 |         dirp = _topendir((_TCHAR *)utf16.data);
      |                          ^

../../../lib/x509/verify-high2.c:479:68: warning: pointer targets in passing argument 2 of '_gnutls_pathbuf_append' differ in signedness [-Wpointer-sign]
  479 |                         ret = _gnutls_pathbuf_append(&pathbuf, utf8.data);
      |                                                                ~~~~^~~~~
      |                                                                    |
      |                                                                    unsigned char *

../../../lib/auth/vko_gost.c:107:26: warning: unknown conversion type character 'z' in format [-Wformat=]
  107 |         _gnutls_hard_log("INT: VKO PRIVATE KEY[%zd]: %s\n", bytes,
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/auth/vko_gost.c:107:26: warning: format '%s' expects argument of type 'char *', but argument 3 has type 'size_t' {aka 'unsigned int'} [-Wformat=]
  107 |         _gnutls_hard_log("INT: VKO PRIVATE KEY[%zd]: %s\n", bytes,
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  ~~~~~
      |                                                             |
      |                                                             size_t {aka unsigned int}

../../../lib/auth/vko_gost.c:107:26: warning: too many arguments for format [-Wformat-extra-args]
  107 |         _gnutls_hard_log("INT: VKO PRIVATE KEY[%zd]: %s\n", bytes,
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/cert.c:390:69: warning: parameter 'data_size' set but not used [-Wunused-but-set-parameter=]
  390 |                        int issuers_len, const uint8_t *data, size_t data_size)
      |                                                              ~~~~~~~^~~~~~~~~

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../lib/auth/../gnutls_int.h:263:25: warning: comparison of integer expressions of different signedness: 'ssize_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
  263 |                 if (len < x) {           \
      |                         ^

../../../../lib/accelerated/x86/x86-common.c:323:12: warning: 'check_fast_pclmul' defined but not used [-Wunused-function]
  323 | static int check_fast_pclmul(void)
      |            ^~~~~~~~~~~~~~~~~

../../../../lib/accelerated/x86/x86-common.c:1119:1: warning: visibility attribute not supported in this configuration; ignored [-Wattributes]
 1119 | }
      | ^

../../../lib/nettle/../../gl/hash-pjw-bare.h:20:3: warning: #warning "The include file hash-pjw-bare.h is deprecated. Use hashcode-mem.h instead." [-Wcpp]
   20 | # warning "The include file hash-pjw-bare.h is deprecated. Use hashcode-mem.h instead."
      |   ^~~~~~~

../../../lib/nettle/sysrng-bcrypt.c:53:38: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
   53 | static BCRYPT_ALG_HANDLE device_fd = 0;
      |                                      ^

../../../lib/nettle/pk.c:2038:33: warning: unknown conversion type character 'z' in format [-Wformat=]
 2038 |                                 "Security level of algorithm requires hash %s(%zd)\n",
      |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/pk.c:2038:33: warning: too many arguments for format [-Wformat-extra-args]
 2038 |                                 "Security level of algorithm requires hash %s(%zd)\n",
      |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/mpi.c:78:13: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
   78 |         r = gnutls_malloc(SIZEOF_MPZT);
      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/../errors.h:146:25: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  146 |                         _gnutls_log(l, __VA_ARGS__);  \
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/../errors.h:146:25: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  146 |                         _gnutls_log(l, __VA_ARGS__);  \
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~

./../includes/gnutls/gnutls.h:2312:24: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
 2312 | #define gnutls_free(a) gnutls_free((void *)(a)), a = NULL
      |                        ^~~~~~~~~~~~~~~~~~~~~~~~

../../lib/inih/ini.c:69:9: warning: '__builtin_strncpy' output may be truncated copying 49 bytes from a string of length 2047 [-Wstringop-truncation]
   69 |         strncpy(dest, src, size - 1);
      |         ^

../../lib/crypto-api.c:504:14: warning: no previous prototype for '_gnutls_pkcs7_unpad' [-Wmissing-prototypes]
  504 | unsigned int _gnutls_pkcs7_unpad(const uint8_t *block, unsigned int block_size)
      |              ^~~~~~~~~~~~~~~~~~~

../../lib/errors.c:644:9: warning: function '_gnutls_log' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  644 |         ret = vasprintf(&str, fmt, args);
      |         ^~~

../../lib/errors.c:663:9: warning: function '_gnutls_audit_log' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  663 |         ret = vasprintf(&str, fmt, args);
      |         ^~~

../../lib/str.c:326:9: warning: function '_gnutls_buffer_append_printf' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  326 |         len = vasprintf(&str, fmt, args);
      |         ^~~

../../lib/priority.c:3228:45: warning: comparison of integer expressions of different signedness: 'ptrdiff_t' {aka 'int'} and 'unsigned int' [-Wsign-compare]
 3228 |                         if (err_pos && diff > hlen) {
      |                                             ^

../../lib/system/keys-win.c:211:18: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  211 |         tmp.data = p;
      |                  ^

../../lib/system/keys-win.c:450:43: warning: cast increases required alignment of target type [-Wcast-align]
  450 |                 PROV_ENUMALGS_EX *pAlgo = (PROV_ENUMALGS_EX *)buf;
      |                                           ^

../../lib/system/keys-win.c:850:21: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  850 |         if (cert != 0)
      |                     ^

../../lib/system/keys-win.c:912:21: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  912 |         if (cert != 0)
      |                     ^

../../lib/system/keys-win.c:996:62: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  996 |         if (_gnutls_bin2hex(name, tl_size, hex, sizeof(hex), 0) == NULL) {
      |                                                              ^

../../lib/system/keys-win.c:1407:13: warning: unused variable 'ret' [-Wunused-variable]
 1407 |         int ret;
      |             ^~~

../../lib/compress.c:44:9: warning: macro 'BROTLIDEC_LIBRARY_SONAME' is not used [-Wunused-macros]
   44 | #define BROTLIDEC_LIBRARY_SONAME "none"
      |         ^~~~~~~~~~~~~~~~~~~~~~~~

../../lib/compress.c:48:9: warning: macro 'ZSTD_LIBRARY_SONAME' is not used [-Wunused-macros]
   48 | #define ZSTD_LIBRARY_SONAME "none"
      |         ^~~~~~~~~~~~~~~~~~~

../../lib/compress.c:40:9: warning: macro 'BROTLIENC_LIBRARY_SONAME' is not used [-Wunused-macros]
   40 | #define BROTLIENC_LIBRARY_SONAME "none"
      |         ^~~~~~~~~~~~~~~~~~~~~~~~

../../lib/system/fastopen.c:68:23: warning: leak of file descriptor '((tfo_st)*(void *)ptr).fd' [CWE-775] [-Wanalyzer-fd-leak]
   68 |                 ret = connect(fd, (struct sockaddr *)&p->connect_addr,
      |                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   69 |                               p->connect_addrlen);
      |                               ~~~~~~~~~~~~~~~~~~~

../../lib/errors.c:644:15: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  644 |         ret = vasprintf(&str, fmt, args);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~

../../lib/errors.c:663:15: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  663 |         ret = vasprintf(&str, fmt, args);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~

../../lib/str.c:326:15: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  326 |         len = vasprintf(&str, fmt, args);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~

parse-datetime.c:1604:9: warning: variable 'yynerrs' set but not used [-Wunused-but-set-variable=]

../../../src/gl/canonicalize-lgpl.c:345:33: warning: 'end_idx' may be used uninitialized [-Wmaybe-uninitialized]
  345 |                 end = extra_buf + end_idx;
      |                       ~~~~~~~~~~^~~~~~~~~

../../../src/gl/gettimeofday.c:101:42: warning: the comparison will always evaluate as 'true' for the address of 'GetSystemTimePreciseAsFileTime' will never be NULL [-Waddress]
  101 |   if (GetSystemTimePreciseAsFileTimeFunc != NULL)
      |                                          ^~

../../../src/gl/select.c:449:10: warning: 'tend' may be used uninitialized [-Wmaybe-uninitialized]
  449 |       if (tend >= tnow)
      |          ^

../../../../src/gl/tests/setlocale.c:895:12: warning: return discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  895 |     return setlocale_messages (locale);
      |            ^~~~~~~~~~~~~~~~~~~~~~~~~~~

../../src/benchmark.c:87:62: warning: format '%u' expects argument of type 'unsigned int', but argument 3 has type 'DWORD' {aka 'long unsigned int'} [-Wformat=]
   87 |                 fprintf(stderr, "error: CreateWaitableTimer %u\n",
      |                                                             ~^
      |                                                              |
      |                                                              unsigned int
      |                                                             %lu
   88 |                         GetLastError());
      |                         ~~~~~~~~~~~~~~                        
      |                         |
      |                         DWORD {aka long unsigned int}

../../src/benchmark.c:94:55: warning: format '%u' expects argument of type 'unsigned int', but argument 3 has type 'DWORD' {aka 'long unsigned int'} [-Wformat=]
   94 |                 fprintf(stderr, "error: CreateThread %u\n", GetLastError());
      |                                                      ~^     ~~~~~~~~~~~~~~
      |                                                       |     |
      |                                                       |     DWORD {aka long unsigned int}
      |                                                       unsigned int
      |                                                      %lu

../../src/benchmark.c:100:59: warning: format '%u' expects argument of type 'unsigned int', but argument 3 has type 'DWORD' {aka 'long unsigned int'} [-Wformat=]
  100 |                 fprintf(stderr, "error: SetWaitableTimer %u\n", GetLastError());
      |                                                          ~^     ~~~~~~~~~~~~~~
      |                                                           |     |
      |                                                           |     DWORD {aka long unsigned int}
      |                                                           unsigned int
      |                                                          %lu

../../src/tests.c:738:20: warning: cast from function call of type 'gnutls_transport_ptr_t' {aka 'void *'} to non-matching type 'int' [-Wbad-function-cast]
  738 |         setsockopt((int)gnutls_transport_get_ptr(session), SOL_SOCKET,
      |                    ^

../../src/common.c:1354:9: warning: function 'log_msg' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
 1354 |         rv = vfprintf(logfile ? logfile : file, message, args);
      |         ^~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/tests.c:700:13: warning: 'got_alarm' defined but not used [-Wunused-function]
  700 | static void got_alarm(int k)
      |             ^~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/serv.c:1128:13: warning: 'terminate' defined but not used [-Wunused-function]
 1128 | static void terminate(int sig)
      |             ^~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../tests/utils.c:96:9: warning: function '_fail' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
   96 |         vasprintf(&str, format, arg_ptr);
      |         ^~~~~~~~~

../../tests/utils.c:119:9: warning: function 'fail_ignore' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  119 |         vsnprintf(str, sizeof(str), format, arg_ptr);
      |         ^~~~~~~~~

../../tests/utils.c:152:9: warning: function 'success' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  152 |         vsnprintf(str, sizeof(str), format, arg_ptr);
      |         ^~~~~~~~~

../../tests/utils.c:96:9: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
   96 |         vasprintf(&str, format, arg_ptr);
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../gl/canonicalize-lgpl.c:345:33: warning: 'end_idx' may be used uninitialized [-Wmaybe-uninitialized]
  345 |                 end = extra_buf + end_idx;
      |                       ~~~~~~~~~~^~~~~~~~~

../../gl/gettimeofday.c:101:42: warning: the comparison will always evaluate as 'true' for the address of 'GetSystemTimePreciseAsFileTime' will never be NULL [-Waddress]
  101 |   if (GetSystemTimePreciseAsFileTimeFunc != NULL)
      |                                          ^~

../../../lib/x509/output.c:486:47: warning: format '%lu' expects argument of type 'long unsigned int', but argument 3 has type 'time_t' {aka 'long long int'} [-Wformat=]
  486 |                 addf(str, "error: gmtime_r (%lu)\n", timestamp);
      |                                             ~~^      ~~~~~~~~~
      |                                               |      |
      |                                               |      time_t {aka long long int}
      |                                               long unsigned int
      |                                             %llu

../../../lib/x509/output.c:491:47: warning: format '%lu' expects argument of type 'long unsigned int', but argument 3 has type 'time_t' {aka 'long long int'} [-Wformat=]
  491 |                 addf(str, "error: strftime (%lu)\n", timestamp);
      |                                             ~~^      ~~~~~~~~~
      |                                               |      |
      |                                               |      time_t {aka long long int}
      |                                               long unsigned int
      |                                             %llu

../../../lib/x509/verify-high2.c:450:26: warning: cast increases required alignment of target type [-Wcast-align]
  450 |         dirp = _topendir((_TCHAR *)utf16.data);
      |                          ^

../../../lib/x509/verify-high2.c:479:68: warning: pointer targets in passing argument 2 of '_gnutls_pathbuf_append' differ in signedness [-Wpointer-sign]
  479 |                         ret = _gnutls_pathbuf_append(&pathbuf, utf8.data);
      |                                                                ~~~~^~~~~
      |                                                                    |
      |                                                                    unsigned char *

../../../lib/auth/vko_gost.c:107:26: warning: unknown conversion type character 'z' in format [-Wformat=]
  107 |         _gnutls_hard_log("INT: VKO PRIVATE KEY[%zd]: %s\n", bytes,
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/auth/vko_gost.c:107:26: warning: format '%s' expects argument of type 'char *', but argument 3 has type 'size_t' {aka 'long long unsigned int'} [-Wformat=]
  107 |         _gnutls_hard_log("INT: VKO PRIVATE KEY[%zd]: %s\n", bytes,
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  ~~~~~
      |                                                             |
      |                                                             size_t {aka long long unsigned int}

../../../lib/auth/vko_gost.c:107:26: warning: too many arguments for format [-Wformat-extra-args]
  107 |         _gnutls_hard_log("INT: VKO PRIVATE KEY[%zd]: %s\n", bytes,
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/auth/cert.c:390:69: warning: parameter 'data_size' set but not used [-Wunused-but-set-parameter=]
  390 |                        int issuers_len, const uint8_t *data, size_t data_size)
      |                                                              ~~~~~~~^~~~~~~~~

../../../../lib/accelerated/x86/x86-common.c:1119:1: warning: visibility attribute not supported in this configuration; ignored [-Wattributes]
 1119 | }
      | ^

../../../lib/nettle/../../gl/hash-pjw-bare.h:20:3: warning: #warning "The include file hash-pjw-bare.h is deprecated. Use hashcode-mem.h instead." [-Wcpp]
   20 | # warning "The include file hash-pjw-bare.h is deprecated. Use hashcode-mem.h instead."
      |   ^~~~~~~

../../../lib/nettle/sysrng-bcrypt.c:53:38: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
   53 | static BCRYPT_ALG_HANDLE device_fd = 0;
      |                                      ^

../../../lib/nettle/pk.c:2038:33: warning: unknown conversion type character 'z' in format [-Wformat=]
 2038 |                                 "Security level of algorithm requires hash %s(%zd)\n",
      |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/pk.c:2038:33: warning: too many arguments for format [-Wformat-extra-args]
 2038 |                                 "Security level of algorithm requires hash %s(%zd)\n",
      |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/mpi.c:78:13: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
   78 |         r = gnutls_malloc(SIZEOF_MPZT);
      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/../errors.h:146:25: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  146 |                         _gnutls_log(l, __VA_ARGS__);  \
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~

../../../lib/nettle/../errors.h:146:25: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  146 |                         _gnutls_log(l, __VA_ARGS__);  \
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~

./../includes/gnutls/gnutls.h:2312:24: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
 2312 | #define gnutls_free(a) gnutls_free((void *)(a)), a = NULL
      |                        ^~~~~~~~~~~~~~~~~~~~~~~~

../../lib/inih/ini.c:69:9: warning: '__builtin_strncpy' output may be truncated copying 49 bytes from a string of length 2047 [-Wstringop-truncation]
   69 |         strncpy(dest, src, size - 1);
      |         ^

../../lib/system/keys-win.c:211:18: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  211 |         tmp.data = p;
      |                  ^

../../lib/system/keys-win.c:450:43: warning: cast increases required alignment of target type [-Wcast-align]
  450 |                 PROV_ENUMALGS_EX *pAlgo = (PROV_ENUMALGS_EX *)buf;
      |                                           ^

../../lib/system/keys-win.c:850:21: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  850 |         if (cert != 0)
      |                     ^

../../lib/system/keys-win.c:912:21: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  912 |         if (cert != 0)
      |                     ^

../../lib/system/keys-win.c:996:62: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  996 |         if (_gnutls_bin2hex(name, tl_size, hex, sizeof(hex), 0) == NULL) {
      |                                                              ^

../../lib/system/keys-win.c:1407:13: warning: unused variable 'ret' [-Wunused-variable]
 1407 |         int ret;
      |             ^~~

../../lib/errors.c:644:9: warning: function '_gnutls_log' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  644 |         ret = vasprintf(&str, fmt, args);
      |         ^~~

../../lib/errors.c:663:9: warning: function '_gnutls_audit_log' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  663 |         ret = vasprintf(&str, fmt, args);
      |         ^~~

../../lib/str.c:326:9: warning: function '_gnutls_buffer_append_printf' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  326 |         len = vasprintf(&str, fmt, args);
      |         ^~~

../../lib/crypto-api.c:504:14: warning: no previous prototype for '_gnutls_pkcs7_unpad' [-Wmissing-prototypes]
  504 | unsigned int _gnutls_pkcs7_unpad(const uint8_t *block, unsigned int block_size)
      |              ^~~~~~~~~~~~~~~~~~~

../../lib/record.c:148:17: warning: cast to pointer from integer of different size [-Wint-to-pointer-cast]
  148 |                 (gnutls_transport_ptr_t)(long)send_fd;
      |                 ^

../../lib/record.c:150:17: warning: cast to pointer from integer of different size [-Wint-to-pointer-cast]
  150 |                 (gnutls_transport_ptr_t)(long)recv_fd;
      |                 ^

../../lib/record.c:227:21: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast]
  227 |         *recv_int = (long)session->internals.transport_recv_ptr;
      |                     ^

../../lib/record.c:228:21: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast]
  228 |         *send_int = (long)session->internals.transport_send_ptr;
      |                     ^

../../lib/record.c:245:16: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast]
  245 |         return (long)session->internals.transport_recv_ptr;
      |                ^

../../lib/system/fastopen.c:184:43: warning: cast to pointer from integer of different size [-Wint-to-pointer-cast]
  184 |         return gnutls_system_recv_timeout((gnutls_transport_ptr_t)(long)p->fd,
      |                                           ^

../../lib/compress.c:48:9: warning: macro 'ZSTD_LIBRARY_SONAME' is not used [-Wunused-macros]
   48 | #define ZSTD_LIBRARY_SONAME "none"
      |         ^~~~~~~~~~~~~~~~~~~

../../lib/compress.c:44:9: warning: macro 'BROTLIDEC_LIBRARY_SONAME' is not used [-Wunused-macros]
   44 | #define BROTLIDEC_LIBRARY_SONAME "none"
      |         ^~~~~~~~~~~~~~~~~~~~~~~~

../../lib/compress.c:40:9: warning: macro 'BROTLIENC_LIBRARY_SONAME' is not used [-Wunused-macros]
   40 | #define BROTLIENC_LIBRARY_SONAME "none"
      |         ^~~~~~~~~~~~~~~~~~~~~~~~

../../lib/system/fastopen.c:68:23: warning: leak of file descriptor '((tfo_st)*(void *)ptr).fd' [CWE-775] [-Wanalyzer-fd-leak]
   68 |                 ret = connect(fd, (struct sockaddr *)&p->connect_addr,
      |                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   69 |                               p->connect_addrlen);
      |                               ~~~~~~~~~~~~~~~~~~~

../../lib/errors.c:644:15: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  644 |         ret = vasprintf(&str, fmt, args);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~

../../lib/errors.c:663:15: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  663 |         ret = vasprintf(&str, fmt, args);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~

../../lib/str.c:326:15: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
  326 |         len = vasprintf(&str, fmt, args);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~

parse-datetime.c:1604:9: warning: variable 'yynerrs' set but not used [-Wunused-but-set-variable=]

../../../src/gl/canonicalize-lgpl.c:345:33: warning: 'end_idx' may be used uninitialized [-Wmaybe-uninitialized]
  345 |                 end = extra_buf + end_idx;
      |                       ~~~~~~~~~~^~~~~~~~~

../../../src/gl/gettimeofday.c:101:42: warning: the comparison will always evaluate as 'true' for the address of 'GetSystemTimePreciseAsFileTime' will never be NULL [-Waddress]
  101 |   if (GetSystemTimePreciseAsFileTimeFunc != NULL)
      |                                          ^~

../../../src/gl/select.c:449:10: warning: 'tend' may be used uninitialized [-Wmaybe-uninitialized]
  449 |       if (tend >= tnow)
      |          ^

../../../../src/gl/tests/setlocale.c:895:12: warning: return discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  895 |     return setlocale_messages (locale);
      |            ^~~~~~~~~~~~~~~~~~~~~~~~~~~

../../src/benchmark.c:87:62: warning: format '%u' expects argument of type 'unsigned int', but argument 3 has type 'DWORD' {aka 'long unsigned int'} [-Wformat=]
   87 |                 fprintf(stderr, "error: CreateWaitableTimer %u\n",
      |                                                             ~^
      |                                                              |
      |                                                              unsigned int
      |                                                             %lu
   88 |                         GetLastError());
      |                         ~~~~~~~~~~~~~~                        
      |                         |
      |                         DWORD {aka long unsigned int}

../../src/benchmark.c:94:55: warning: format '%u' expects argument of type 'unsigned int', but argument 3 has type 'DWORD' {aka 'long unsigned int'} [-Wformat=]
   94 |                 fprintf(stderr, "error: CreateThread %u\n", GetLastError());
      |                                                      ~^     ~~~~~~~~~~~~~~
      |                                                       |     |
      |                                                       |     DWORD {aka long unsigned int}
      |                                                       unsigned int
      |                                                      %lu

../../src/benchmark.c:100:59: warning: format '%u' expects argument of type 'unsigned int', but argument 3 has type 'DWORD' {aka 'long unsigned int'} [-Wformat=]
  100 |                 fprintf(stderr, "error: SetWaitableTimer %u\n", GetLastError());
      |                                                          ~^     ~~~~~~~~~~~~~~
      |                                                           |     |
      |                                                           |     DWORD {aka long unsigned int}
      |                                                           unsigned int
      |                                                          %lu

../../src/common.c:1354:9: warning: function 'log_msg' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
 1354 |         rv = vfprintf(logfile ? logfile : file, message, args);
      |         ^~

../../src/socket.c:457:43: warning: cast to pointer from integer of different size [-Wint-to-pointer-cast]
  457 |         return gnutls_system_recv_timeout((gnutls_transport_ptr_t)(long)hd->fd,
      |                                           ^

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/tests.c:738:20: warning: cast from pointer to integer of different size [-Wpointer-to-int-cast]
  738 |         setsockopt((int)gnutls_transport_get_ptr(session), SOL_SOCKET,
      |                    ^

../../src/tests.c:738:20: warning: cast from function call of type 'gnutls_transport_ptr_t' {aka 'void *'} to non-matching type 'int' [-Wbad-function-cast]

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/tests.c:700:13: warning: 'got_alarm' defined but not used [-Wunused-function]
  700 | static void got_alarm(int k)
      |             ^~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/serv.c:1128:13: warning: 'terminate' defined but not used [-Wunused-function]
 1128 | static void terminate(int sig)
      |             ^~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../src/common.h:143:13: warning: 'set_read_funcs' defined but not used [-Wunused-function]
  143 | static void set_read_funcs(gnutls_session_t session)
      |             ^~~~~~~~~~~~~~

../../tests/utils.c:96:9: warning: function '_fail' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
   96 |         vasprintf(&str, format, arg_ptr);
      |         ^~~~~~~~~

../../tests/utils.c:119:9: warning: function 'fail_ignore' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  119 |         vsnprintf(str, sizeof(str), format, arg_ptr);
      |         ^~~~~~~~~

../../tests/utils.c:152:9: warning: function 'success' might be a candidate for 'gnu_printf' format attribute [-Wsuggest-attribute=format]
  152 |         vsnprintf(str, sizeof(str), format, arg_ptr);
      |         ^~~~~~~~~

../../tests/utils.c:96:9: warning: missing call to 'va_end' [-Wanalyzer-va-list-leak]
   96 |         vasprintf(&str, format, arg_ptr);
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/dn2.c:66:20: warning: 'info' defined but not used [-Wunused-variable]
   66 | static const char *info =
      |                    ^~~~

../../tests/x509cert-ct.c:143:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  143 |                           "\xdd\xeb\x1d\x2b\x7a\x0d\x4f\xa6\x20\x8b\x81\xad\x81\x68\x70\x7e"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/x509cert-ct.c:154:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  154 |                           "\xa4\xb9\x09\x90\xb4\x18\x58\x14\x87\xbb\x13\xa2\xcc\x67\x70\x0a"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/x509cert-ct.c:165:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  165 |                           "\xee\x4b\xbd\xb7\x75\xce\x60\xba\xe1\x42\x69\x1f\xab\xe1\x9e\x66"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/x509cert-ct.c:176:27: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (33 chars into 32 available) [-Wunterminated-string-initialization]
  176 |                           "\xbc\x78\xe1\xdf\xc5\xf6\x3c\x68\x46\x49\x33\x4d\xa1\x0f\xa1\x5f"
      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/rng-fork.c:70:32: warning: leak of FILE 'fopen("./rng-test", "w")' [CWE-775] [-Wanalyzer-file-leak]
   70 |                         assert(gnutls_rnd(i, buf1, sizeof(buf1)) >= 0);
      |                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/x509cert-tl.c:134:9: warning: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (603 chars into 602 available) [-Wunterminated-string-initialization]
  134 |         "\x30\x82\x02\x56\x30\x82\x01\xc1\xa0\x03\x02\x01\x02\x02\x04\x46"
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/gnutls_ext_raw_parse.c:75:34: warning: parameter 'size' set but not used [-Wunused-but-set-parameter=]
   75 |                         unsigned size)
      |                         ~~~~~~~~~^~~~

../../tests/pkcs12_s2k.c:126:35: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  126 |                         data.data = values[x];
      |                                   ^

../../tests/pkcs12_s2k.c:152:27: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  152 |                 data.data = tv[i].key;
      |                           ^

../../tests/keylog-env.c:174:9: warning: ignoring return value of 'truncate' declared with attribute 'warn_unused_result' [-Wunused-result]
  174 |         truncate(filename, 0);
      |         ^~~~~~~~~~~~~~~~~~~~~

../../tests/keylog-env.c:146:28: warning: buffer over-read [CWE-126] [-Wanalyzer-out-of-bounds]
  146 |         for (p = excluded; *p; p++)
      |                            ^~

../../tests/utils.h:83:9: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
   83 |         _fail("%s:%d: " format, __func__, __LINE__, ##__VA_ARGS__)
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/client-fastopen.c:298:22: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
  298 |                 fd = accept(listener, NULL, NULL);
      |                      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/gnutls_ext_raw_parse_dtls.c:74:34: warning: parameter 'size' set but not used [-Wunused-but-set-parameter=]
   74 |                         unsigned size)
      |                         ~~~~~~~~~^~~~

../../tests/client-fastopen.c:309:17: warning: leak of file descriptor 'fd' [CWE-775] [-Wanalyzer-fd-leak]
  309 |                 usleep(1000000);
      |                 ^~~~~~~~~~~~~~~

../../tests/dh-compute.c:77:30: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
   77 |         gnutls_datum_t Z = { 0 };
      |                              ^

../../tests/ecdh-compute.c:61:30: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
   61 |         gnutls_datum_t Z = { 0 };
      |                              ^

../../tests/ecdh-compute.c:98:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
   98 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:99:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
   99 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:100:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  100 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:111:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  111 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:112:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  112 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:113:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  113 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:126:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  126 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:127:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  127 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:128:27: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  128 |                         { 0 },
      |                           ^

../../tests/ecdh-compute.c:203:19: warning: zero as null pointer constant [-Wzero-as-null-pointer-constant]
  203 |                 { 0 }
      |                   ^

../../tests/pkcs11/pkcs11-is-known.c:383:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  383 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-privkey.c:156:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  156 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-chainverify.c:111:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  111 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-get-issuer.c:133:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  133 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-pubkey-import.c:99:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
   99 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-combo.c:250:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  250 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-pubkey-import.c:99:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
   99 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-ec-privkey-test.c:108:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  108 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-import-with-pin.c:108:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  108 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-obj-import.c:99:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
   99 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-rsa-pss-privkey-test.c:124:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  124 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/tls-neg-pkcs11-key.c:454:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  454 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-privkey-generate.c:159:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  159 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/gnutls_pcert_list_import_x509_file.c:179:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  179 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/gnutls_x509_crt_list_import_url.c:159:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  159 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/pkcs11-eddsa-privkey-test.c:264:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  264 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/os-locking-ok.c:147:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  147 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/os-locking-ok.c:161:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  161 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/resume-with-stek-expiration.c:279:13: warning: use of uninitialized value 'serverx509cred' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
  279 |         if (serverx509cred)
      |             ^~~~~~~~~~~~~~

../../tests/resume-with-stek-expiration.c:279:13: warning: use of uninitialized value 'serverx509cred' [CWE-457] [-Wanalyzer-use-of-uninitialized-value]
  279 |         if (serverx509cred)
      |             ^~~~~~~~~~~~~~

../../tests/pkcs11/distrust-after.c:242:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  242 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/distrust-after.c:251:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  251 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/distrust-after.c:265:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  265 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/distrust-after.c:274:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  274 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/long-label.c:147:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  147 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/long-label.c:161:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  161 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/trust-list-fault.c:110:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  110 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/tls13/post-handshake-with-cert-pkcs11.c:460:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  460 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/tls-neg-pkcs11-no-key.c:345:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  345 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: ignoring return value of 'system' declared with attribute 'warn_unused_result' [-Wunused-result]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/protocol-set-allowlist.c:228:17: warning: ignoring return value of 'fgets' declared with attribute 'warn_unused_result' [-Wunused-result]
  228 |                 fgets(cmd_buf, MAX_CMD_LEN, stdin);
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/eagain-common.h:265:16: warning: 'server_push' defined but not used [-Wunused-function]
  265 | static ssize_t server_push(gnutls_transport_ptr_t tr, const void *data,
      |                ^~~~~~~~~~~

../../tests/eagain-common.h:236:16: warning: 'server_pull' defined but not used [-Wunused-function]
  236 | static ssize_t server_pull(gnutls_transport_ptr_t tr, void *data, size_t len)
      |                ^~~~~~~~~~~

../../tests/eagain-common.h:209:16: warning: 'client_pull' defined but not used [-Wunused-function]
  209 | static ssize_t client_pull(gnutls_transport_ptr_t tr, void *data, size_t len)
      |                ^~~~~~~~~~~

../../tests/eagain-common.h:189:16: warning: 'client_push' defined but not used [-Wunused-function]
  189 | static ssize_t client_push(gnutls_transport_ptr_t tr, const void *data,
      |                ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/utils.h:83:9: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
   83 |         _fail("%s:%d: " format, __func__, __LINE__, ##__VA_ARGS__)
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/utils.h:83:9: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
   83 |         _fail("%s:%d: " format, __func__, __LINE__, ##__VA_ARGS__)
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~

../../tests/ktls_utils.h:97:15: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
   97 |         ret = connect(*client_fd, (struct sockaddr *)&saddr, addrlen);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/ktls_utils.h:97:15: warning: leak of file descriptor 'client_fd' [CWE-775] [-Wanalyzer-fd-leak]
   97 |         ret = connect(*client_fd, (struct sockaddr *)&saddr, addrlen);
      |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/utils.h:83:9: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
   83 |         _fail("%s:%d: " format, __func__, __LINE__, ##__VA_ARGS__)
      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/ktls_utils.h:105:22: warning: leak of file descriptor 'listener' [CWE-775] [-Wanalyzer-fd-leak]
  105 |         *server_fd = accept(listener, NULL, NULL);
      |                      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~

../../tests/pkcs11/softhsm.h:112:12: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  112 |         if (strlen(db_dir) < 6) {
      |            ^

../../tests/pkcs11/softhsm.h:117:9: warning: leak of FILE 'fopen(config, "w")' [CWE-775] [-Wanalyzer-file-leak]
  117 |         system(buf);
      |         ^~~~~~~~~~~