<div dir="ltr">This is like reading a book, not understanding some words and then complaining to the author to fix their spelling. Please don't rely on SAST analysis without understanding the code. I would expect the vast majority of these are false positives - provide evidence that these are real bugs if you want them to be taken seriously.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 7 Dec 2023 at 02:35, BILL <<a href="mailto:bill0119@gmail.com">bill0119@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>We have a coverity testing on nginx 1.20.0 and we got some errors.</div><div>Have any plan to resolve these errors?</div><div><br></div><div><br></div><div><table cellpadding="8" summary="summary" style="color:rgb(0,0,0);font-family:"Times New Roman";font-size:medium"><tbody><tr bgcolor="#4682B4"><td>Checker</td><td>Number</td></tr><tr bgcolor="#F8F8F2"><td>ARRAY_VS_SINGLETON</td><td>3</td></tr><tr bgcolor="#F8F8F2"><td>BAD_FREE</td><td>3</td></tr><tr bgcolor="#F8F8F2"><td>BUFFER_SIZE</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td>CHECKED_RETURN</td><td>10</td></tr><tr bgcolor="#F8F8F2"><td>COPY_PASTE_ERROR</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td>DC.WEAK_CRYPTO</td><td>18</td></tr><tr bgcolor="#F8F8F2"><td>DEADCODE</td><td>8</td></tr><tr bgcolor="#F8F8F2"><td>FORWARD_NULL</td><td>49</td></tr><tr bgcolor="#F8F8F2"><td>MISSING_RESTORE</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td>NO_EFFECT</td><td>8</td></tr><tr bgcolor="#F8F8F2"><td>NULL_RETURNS</td><td>8</td></tr><tr bgcolor="#F8F8F2"><td style="color:rgb(255,0,0)">OVERRUN</td><td>12</td></tr><tr bgcolor="#F8F8F2"><td>PW.INCLUDE_RECURSION</td><td>8</td></tr><tr bgcolor="#F8F8F2"><td style="color:rgb(255,0,0)">RESOURCE_LEAK</td><td>5</td></tr><tr bgcolor="#F8F8F2"><td>REVERSE_INULL</td><td>5</td></tr><tr bgcolor="#F8F8F2"><td>SIGN_EXTENSION</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td>SIZEOF_MISMATCH</td><td>8</td></tr><tr bgcolor="#F8F8F2"><td>STACK_USE</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td style="color:rgb(255,0,0)">STRING_NULL</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td>TAINTED_SCALAR</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td>TOCTOU</td><td>12</td></tr><tr bgcolor="#F8F8F2"><td>UNINIT</td><td>10</td></tr><tr bgcolor="#F8F8F2"><td>UNREACHABLE</td><td>63</td></tr><tr bgcolor="#F8F8F2"><td>UNUSED_VALUE</td><td>4</td></tr><tr bgcolor="#F8F8F2"><td style="color:rgb(255,0,0)">USE_AFTER_FREE</td><td>1</td></tr><tr bgcolor="#F8F8F2"><td>Total</td><td>242</td></tr></tbody></table></div></div>
_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org" target="_blank">nginx@nginx.org</a><br>
<a href="https://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer" target="_blank">https://mailman.nginx.org/mailman/listinfo/nginx</a><br>
</blockquote></div>