On going static code analysis warnings (mbedtls-2.9.0)

Mbed-TLS / mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.

https://www.trustedfirmware.org/projects/mbed-tls/

Other

5.08k stars 2.52k forks source link

On going static code analysis warnings (mbedtls-2.9.0) #1631

Open mu578 opened 6 years ago

mu578 commented 6 years ago

Description

Type: Bug | Enhancement
Priority: Minor

GrammaTech CodeSonar is also showing interesting things, but as it's a licensed product I can't post here (covering many logged issues here)

ci-joint: clang analyzer html graph dumps. (PS. I added the extension TXT else can't attach those, please rename and visualize them in a web browser.)

clang-mbedtls-2.9.0.pem.c.html.txt clang-mbedtls-2.9.0-.rsa.c.html.txt

RonEld commented 6 years ago

@moe123 Thank you for your report! We will have a look at it

ciarmcom commented 6 years ago

ARM Internal Ref: IOTSSL-2319