Skip to content

Instantly share code, notes, and snippets.

@flatcap
Last active May 14, 2024 13:59
Show Gist options
  • Save flatcap/fccc96ce693e06621a35d2dafa8ed2c5 to your computer and use it in GitHub Desktop.
Save flatcap/fccc96ce693e06621a35d2dafa8ed2c5 to your computer and use it in GitHub Desktop.
code scanning
Issues:
https://github.com/neomutt/neomutt/security/code-scanning
How to use gh api:
https://docs.github.com/en/rest/code-scanning/code-scanning?apiVersion=2022-11-28#list-code-scanning-alerts-for-a-repository
# Download 4 pages of 100 issues
gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" "/repos/neomutt/neomutt/code-scanning/alerts?state=open&per_page=100&page=1" | json_reformat > s1.json
gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" "/repos/neomutt/neomutt/code-scanning/alerts?state=open&per_page=100&page=2" | json_reformat > s2.json
gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" "/repos/neomutt/neomutt/code-scanning/alerts?state=open&per_page=100&page=3" | json_reformat > s3.json
gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" "/repos/neomutt/neomutt/code-scanning/alerts?state=open&per_page=100&page=4" | json_reformat > s4.json
# Export some fields
jq '.[] | .number,.url,.rule.description,.most_recent_instance.location.path,.most_recent_instance.location.start_line,.most_recent_instance.location.start_column' s1.json > l1
jq '.[] | .number,.url,.rule.description,.most_recent_instance.location.path,.most_recent_instance.location.start_line,.most_recent_instance.location.start_column' s2.json > l2
jq '.[] | .number,.url,.rule.description,.most_recent_instance.location.path,.most_recent_instance.location.start_line,.most_recent_instance.location.start_column' s3.json > l3
jq '.[] | .number,.url,.rule.description,.most_recent_instance.location.path,.most_recent_instance.location.start_line,.most_recent_instance.location.start_column' s4.json > l4
# vim quickfix list
v1
# 324 Issues
194 Uncontrolled data used in path expression
44 For loop variable changed in body
28 Poorly documented large function
26 Local variable address stored in non-local memory
11 Long switch case
9 Year field changed using an arithmetic operation without checking for leap year
3 Nested loops with same variable
2 Unused static variable
2 File created without restricting permissions
2 Cleartext transmission of sensitive information
1 Uncontrolled process operation
1 Uncontrolled data used in OS command
1 Time-of-check time-of-use filesystem race condition
ncrypt/smime.c:886:11: 2 Cleartext transmission of sensitive information
ncrypt/smime.c:921:13: 3 Cleartext transmission of sensitive information
maildir/message.c:568:10: 1103 File created without restricting permissions
mh/shared.c:86:10: 691 File created without restricting permissions
compose/functions.c:654:9: 187 For loop variable changed in body
compose/functions.c:666:9: 188 For loop variable changed in body
docs/makedoc.c:241:24: 205 For loop variable changed in body
docs/makedoc.c:263:7: 419 For loop variable changed in body
docs/makedoc.c:572:17: 415 For loop variable changed in body
docs/makedoc.c:577:17: 416 For loop variable changed in body
docs/makedoc.c:761:19: 417 For loop variable changed in body
docs/makedoc.c:766:19: 418 For loop variable changed in body
docs/makedoc.c:917:7: 189 For loop variable changed in body
docs/makedoc.c:922:7: 190 For loop variable changed in body
docs/makedoc.c:928:7: 191 For loop variable changed in body
docs/makedoc.c:934:7: 192 For loop variable changed in body
docs/makedoc.c:940:7: 193 For loop variable changed in body
docs/makedoc.c:946:7: 194 For loop variable changed in body
docs/makedoc.c:957:7: 195 For loop variable changed in body
docs/makedoc.c:968:7: 196 For loop variable changed in body
docs/makedoc.c:975:7: 197 For loop variable changed in body
docs/makedoc.c:979:9: 198 For loop variable changed in body
docs/makedoc.c:989:11: 199 For loop variable changed in body
docs/makedoc.c:996:9: 414 For loop variable changed in body
email/parse.c:227:17: 507 For loop variable changed in body
email/parse.c:640:5: 208 For loop variable changed in body
email/parse.c:645:5: 209 For loop variable changed in body
email/rfc2047.c:385:9: 1063 For loop variable changed in body
email/rfc2231.c:119:7: 571 For loop variable changed in body
email/url.c:205:9: 572 For loop variable changed in body
imap/utf7.c:119:7: 213 For loop variable changed in body
imap/utf7.c:129:27: 214 For loop variable changed in body
mutt/buffer.c:446:20: 932 For loop variable changed in body
mutt/file.c:1488:28: 508 For loop variable changed in body
mutt/file.c:1493:11: 509 For loop variable changed in body
mutt/path.c:80:13: 217 For loop variable changed in body
mutt/slist.c:199:7: 218 For loop variable changed in body
mutt_header.c:331:13: 510 For loop variable changed in body
ncrypt/gnupgparse.c:282:13: 223 For loop variable changed in body
ncrypt/gnupgparse.c:288:13: 224 For loop variable changed in body
ncrypt/gnupgparse.c:294:13: 225 For loop variable changed in body
ncrypt/gnupgparse.c:361:20: 226 For loop variable changed in body
ncrypt/gpgme_functions.c:199:7: 227 For loop variable changed in body
ncrypt/gpgme_functions.c:216:9: 228 For loop variable changed in body
ncrypt/gpgme_functions.c:224:11: 573 For loop variable changed in body
ncrypt/smime.c:444:20: 231 For loop variable changed in body
nntp/complete.c:66:9: 230 For loop variable changed in body
pattern/pattern.c:120:7: 483 For loop variable changed in body
alias/dlg_alias.c:343:3: 325 Local variable address stored in non-local memory
alias/dlg_query.c:390:3: 326 Local variable address stored in non-local memory
browser/dlg_browser.c:1301:3: 605 Local variable address stored in non-local memory
browser/dlg_browser.c:1302:3: 606 Local variable address stored in non-local memory
conn/dlg_verifycert.c:191:3: 331 Local variable address stored in non-local memory
editor/window.c:299:3: 667 Local variable address stored in non-local memory
email/parse.c:258:9: 334 Local variable address stored in non-local memory
email/rfc2231.c:234:5: 336 Local variable address stored in non-local memory
email/thread.c:112:3: 527 Local variable address stored in non-local memory
history/dlg_history.c:156:3: 666 Local variable address stored in non-local memory
imap/browse.c:165:3: 341 Local variable address stored in non-local memory
imap/browse.c:277:5: 1100 Local variable address stored in non-local memory
imap/command.c:687:3: 343 Local variable address stored in non-local memory
imap/imap.c:1304:3: 344 Local variable address stored in non-local memory
imap/imap.c:2369:3: 588 Local variable address stored in non-local memory
mixmaster/dlg_mixmaster.c:148:3: 345 Local variable address stored in non-local memory
mixmaster/win_chain.c:213:3: 346 Local variable address stored in non-local memory
mixmaster/win_hosts.c:195:3: 347 Local variable address stored in non-local memory
mutt/notify.c:210:3: 348 Local variable address stored in non-local memory
mutt_thread.c:1064:5: 349 Local variable address stored in non-local memory
ncrypt/dlg_gpgme.c:711:3: 609 Local variable address stored in non-local memory
ncrypt/dlg_pgp.c:705:3: 608 Local variable address stored in non-local memory
ncrypt/dlg_smime.c:228:3: 352 Local variable address stored in non-local memory
pager/dlg_pager.c:350:3: 353 Local variable address stored in non-local memory
pattern/dlg_pattern.c:348:3: 610 Local variable address stored in non-local memory
postpone/dlg_postpone.c:222:3: 611 Local variable address stored in non-local memory
docs/makedoc.c:324:3: 12 Long switch case
docs/makedoc.c:446:7: 413 Long switch case
docs/makedoc.c:1194:3: 412 Long switch case
email/parse.c:687:3: 521 Long switch case
flags.c:72:3: 575 Long switch case
muttlib.c:138:5: 513 Long switch case
ncrypt/gnupgparse.c:174:5: 19 Long switch case
ncrypt/smime.c:2188:5: 20 Long switch case
notmuch/notmuch.c:1367:3: 21 Long switch case
pattern/compile.c:373:5: 23 Long switch case
pattern/compile.c:936:5: 692 Long switch case
postpone/postpone.c:226:24: 356 Nested loops with same variable
postpone/postpone.c:261:22: 357 Nested loops with same variable
postpone/postpone.c:298:16: 358 Nested loops with same variable
address/address.c:480:5: 577 Poorly documented large function
attach/recvattach.c:433:6: 693 Poorly documented large function
browser/dlg_browser.c:838:5: 602 Poorly documented large function
convert/content_info.c:49:6: 285 Poorly documented large function
docs/makedoc.c:318:12: 287 Poorly documented large function
docs/makedoc.c:886:12: 286 Poorly documented large function
enriched.c:121:13: 478 Poorly documented large function
envelope/window.c:543:12: 427 Poorly documented large function
handler.c:1129:12: 697 Poorly documented large function
history/history.c:205:13: 1115 Poorly documented large function
index/functions.c:1347:12: 292 Poorly documented large function
index/functions.c:1465:12: 291 Poorly documented large function
mbox/mbox.c:184:27: 293 Poorly documented large function
mutt/filter.c:62:7: 659 Poorly documented large function
mutt_thread.c:236:13: 294 Poorly documented large function
ncrypt/crypt.c:1117:5: 1104 Poorly documented large function
ncrypt/crypt.c:1238:5: 695 Poorly documented large function
ncrypt/crypt_gpgme.c:3534:14: 296 Poorly documented large function
ncrypt/pgp.c:1463:7: 295 Poorly documented large function
notmuch/notmuch.c:2231:22: 298 Poorly documented large function
pager/pager.c:131:12: 526 Poorly documented large function
pattern/exec.c:822:13: 299 Poorly documented large function
pop/auth.c:523:5: 300 Poorly documented large function
recvcmd.c:949:6: 694 Poorly documented large function
send/send.c:237:12: 301 Poorly documented large function
send/send.c:1223:12: 574 Poorly documented large function
send/sendlib.c:454:14: 284 Poorly documented large function
send/smtp.c:623:12: 303 Poorly documented large function
mutt/file.c:245:3: 6 Time-of-check time-of-use filesystem race condition
mutt/filter.c:151:36: 1098 Uncontrolled data used in OS command
alias/alias.c:524:30: 894 Uncontrolled data used in path expression
attach/cid.c:127:35: 727 Uncontrolled data used in path expression
attach/cid.c:186:33: 725 Uncontrolled data used in path expression
attach/cid.c:197:28: 726 Uncontrolled data used in path expression
attach/mutt_attach.c:89:33: 774 Uncontrolled data used in path expression
attach/mutt_attach.c:170:41: 1105 Uncontrolled data used in path expression
attach/mutt_attach.c:209:44: 772 Uncontrolled data used in path expression
attach/mutt_attach.c:219:33: 1106 Uncontrolled data used in path expression
attach/mutt_attach.c:220:34: 773 Uncontrolled data used in path expression
attach/mutt_attach.c:220:58: 1107 Uncontrolled data used in path expression
attach/mutt_attach.c:490:37: 763 Uncontrolled data used in path expression
attach/mutt_attach.c:494:46: 764 Uncontrolled data used in path expression
attach/mutt_attach.c:547:39: 1095 Uncontrolled data used in path expression
attach/mutt_attach.c:555:40: 766 Uncontrolled data used in path expression
attach/mutt_attach.c:630:40: 767 Uncontrolled data used in path expression
attach/mutt_attach.c:648:41: 768 Uncontrolled data used in path expression
attach/mutt_attach.c:652:48: 769 Uncontrolled data used in path expression
attach/mutt_attach.c:662:46: 770 Uncontrolled data used in path expression
attach/mutt_attach.c:720:22: 771 Uncontrolled data used in path expression
attach/mutt_attach.c:787:36: 756 Uncontrolled data used in path expression
attach/mutt_attach.c:800:48: 757 Uncontrolled data used in path expression
attach/mutt_attach.c:802:36: 758 Uncontrolled data used in path expression
attach/mutt_attach.c:825:39: 759 Uncontrolled data used in path expression
attach/mutt_attach.c:831:48: 760 Uncontrolled data used in path expression
attach/mutt_attach.c:839:29: 902 Uncontrolled data used in path expression
attach/mutt_attach.c:868:22: 762 Uncontrolled data used in path expression
attach/mutt_attach.c:998:39: 901 Uncontrolled data used in path expression
attach/mutt_attach.c:1074:38: 1092 Uncontrolled data used in path expression
attach/mutt_attach.c:1168:37: 748 Uncontrolled data used in path expression
attach/mutt_attach.c:1174:46: 749 Uncontrolled data used in path expression
attach/mutt_attach.c:1186:31: 899 Uncontrolled data used in path expression
attach/mutt_attach.c:1222:24: 751 Uncontrolled data used in path expression
attach/mutt_attach.c:1242:44: 752 Uncontrolled data used in path expression
attach/mutt_attach.c:1249:31: 900 Uncontrolled data used in path expression
attach/mutt_attach.c:1282:24: 754 Uncontrolled data used in path expression
attach/recvattach.c:249:46: 746 Uncontrolled data used in path expression
attach/recvattach.c:257:22: 747 Uncontrolled data used in path expression
attach/recvattach.c:353:46: 745 Uncontrolled data used in path expression
attach/recvattach.c:415:45: 744 Uncontrolled data used in path expression
attach/recvattach.c:506:51: 897 Uncontrolled data used in path expression
attach/recvattach.c:507:68: 898 Uncontrolled data used in path expression
attach/recvattach.c:568:44: 739 Uncontrolled data used in path expression
attach/recvattach.c:573:24: 740 Uncontrolled data used in path expression
attach/recvattach.c:581:24: 741 Uncontrolled data used in path expression
attach/recvattach.c:615:36: 733 Uncontrolled data used in path expression
attach/recvattach.c:629:36: 734 Uncontrolled data used in path expression
attach/recvattach.c:649:39: 735 Uncontrolled data used in path expression
attach/recvattach.c:652:48: 736 Uncontrolled data used in path expression
attach/recvattach.c:660:29: 896 Uncontrolled data used in path expression
attach/recvattach.c:679:22: 738 Uncontrolled data used in path expression
attach/recvattach.c:849:50: 730 Uncontrolled data used in path expression
attach/recvattach.c:858:37: 895 Uncontrolled data used in path expression
attach/recvattach.c:867:28: 732 Uncontrolled data used in path expression
bcache/bcache.c:196:30: 729 Uncontrolled data used in path expression
bcache/bcache.c:242:30: 728 Uncontrolled data used in path expression
color/dump.c:455:30: 775 Uncontrolled data used in path expression
commands.c:252:29: 781 Uncontrolled data used in path expression
commands.c:879:34: 780 Uncontrolled data used in path expression
commands.c:938:36: 779 Uncontrolled data used in path expression
commands.c:1624:34: 778 Uncontrolled data used in path expression
compose/functions.c:1491:30: 777 Uncontrolled data used in path expression
compose/functions.c:1917:51: 776 Uncontrolled data used in path expression
convert/content_info.c:218:24: 903 Uncontrolled data used in path expression
docs/makedoc.c:1433:16: 363 Uncontrolled data used in path expression
editmsg.c:188:24: 904 Uncontrolled data used in path expression
gui/global.c:105:30: 783 Uncontrolled data used in path expression
handler.c:567:29: 786 Uncontrolled data used in path expression
handler.c:661:24: 787 Uncontrolled data used in path expression
handler.c:1374:39: 784 Uncontrolled data used in path expression
handler.c:1429:38: 905 Uncontrolled data used in path expression
help.c:489:26: 1064 Uncontrolled data used in path expression
imap/imap.c:2172:29: 788 Uncontrolled data used in path expression
imap/message.c:1151:24: 790 Uncontrolled data used in path expression
imap/message.c:2016:31: 789 Uncontrolled data used in path expression
key/dump.c:227:28: 791 Uncontrolled data used in path expression
mailcap.c:523:38: 792 Uncontrolled data used in path expression
maildir/mailbox.c:361:33: 931 Uncontrolled data used in path expression
maildir/message.c:142:28: 929 Uncontrolled data used in path expression
main.c:1092:35: 1065 Uncontrolled data used in path expression
main.c:1115:34: 1066 Uncontrolled data used in path expression
main.c:1137:33: 1067 Uncontrolled data used in path expression
main.c:1247:42: 1068 Uncontrolled data used in path expression
main.c:1263:34: 1069 Uncontrolled data used in path expression
mbox/mbox.c:1127:17: 795 Uncontrolled data used in path expression
mbox/mbox.c:1261:24: 907 Uncontrolled data used in path expression
mutt_body.c:69:39: 797 Uncontrolled data used in path expression
ncrypt/crypt.c:865:34: 800 Uncontrolled data used in path expression
ncrypt/crypt.c:938:20: 801 Uncontrolled data used in path expression
ncrypt/crypt.c:1309:46: 798 Uncontrolled data used in path expression
ncrypt/crypt.c:1339:24: 799 Uncontrolled data used in path expression
ncrypt/crypt_gpgme.c:426:34: 805 Uncontrolled data used in path expression
ncrypt/crypt_gpgme.c:571:30: 804 Uncontrolled data used in path expression
ncrypt/crypt_gpgme.c:2226:42: 802 Uncontrolled data used in path expression
ncrypt/crypt_gpgme.c:2233:34: 908 Uncontrolled data used in path expression
ncrypt/gpgme_functions.c:642:30: 1070 Uncontrolled data used in path expression
ncrypt/pgp.c:544:32: 833 Uncontrolled data used in path expression
ncrypt/pgp.c:722:24: 843 Uncontrolled data used in path expression
ncrypt/pgp.c:776:22: 854 Uncontrolled data used in path expression
ncrypt/pgp.c:816:42: 823 Uncontrolled data used in path expression
ncrypt/pgp.c:823:34: 909 Uncontrolled data used in path expression
ncrypt/pgp.c:907:34: 821 Uncontrolled data used in path expression
ncrypt/pgp.c:957:20: 822 Uncontrolled data used in path expression
ncrypt/pgp.c:977:34: 819 Uncontrolled data used in path expression
ncrypt/pgp.c:994:20: 820 Uncontrolled data used in path expression
ncrypt/pgp.c:1047:32: 817 Uncontrolled data used in path expression
ncrypt/pgp.c:1104:20: 818 Uncontrolled data used in path expression
ncrypt/pgp.c:1346:34: 814 Uncontrolled data used in path expression
ncrypt/pgp.c:1353:31: 815 Uncontrolled data used in path expression
ncrypt/pgp.c:1439:58: 816 Uncontrolled data used in path expression
ncrypt/pgp.c:1600:34: 812 Uncontrolled data used in path expression
ncrypt/pgp.c:1617:28: 813 Uncontrolled data used in path expression
ncrypt/pgp.c:1747:37: 807 Uncontrolled data used in path expression
ncrypt/pgp.c:1792:38: 809 Uncontrolled data used in path expression
ncrypt/pgp.c:1814:22: 810 Uncontrolled data used in path expression
ncrypt/pgp.c:1829:20: 811 Uncontrolled data used in path expression
ncrypt/pgp_functions.c:129:34: 806 Uncontrolled data used in path expression
ncrypt/pgpkey.c:280:34: 808 Uncontrolled data used in path expression
ncrypt/smime.c:497:30: 859 Uncontrolled data used in path expression
ncrypt/smime.c:967:28: 851 Uncontrolled data used in path expression
ncrypt/smime.c:1001:29: 852 Uncontrolled data used in path expression
ncrypt/smime.c:1005:22: 853 Uncontrolled data used in path expression
ncrypt/smime.c:1017:22: 855 Uncontrolled data used in path expression
ncrypt/smime.c:1023:20: 856 Uncontrolled data used in path expression
ncrypt/smime.c:1045:22: 857 Uncontrolled data used in path expression
ncrypt/smime.c:1050:22: 858 Uncontrolled data used in path expression
ncrypt/smime.c:1078:34: 849 Uncontrolled data used in path expression
ncrypt/smime.c:1121:22: 850 Uncontrolled data used in path expression
ncrypt/smime.c:1185:22: 848 Uncontrolled data used in path expression
ncrypt/smime.c:1213:34: 844 Uncontrolled data used in path expression
ncrypt/smime.c:1244:24: 845 Uncontrolled data used in path expression
ncrypt/smime.c:1254:24: 846 Uncontrolled data used in path expression
ncrypt/smime.c:1267:20: 847 Uncontrolled data used in path expression
ncrypt/smime.c:1347:28: 836 Uncontrolled data used in path expression
ncrypt/smime.c:1362:28: 837 Uncontrolled data used in path expression
ncrypt/smime.c:1396:22: 838 Uncontrolled data used in path expression
ncrypt/smime.c:1403:20: 839 Uncontrolled data used in path expression
ncrypt/smime.c:1428:22: 840 Uncontrolled data used in path expression
ncrypt/smime.c:1450:22: 841 Uncontrolled data used in path expression
ncrypt/smime.c:1456:22: 842 Uncontrolled data used in path expression
ncrypt/smime.c:1524:29: 828 Uncontrolled data used in path expression
ncrypt/smime.c:1532:34: 829 Uncontrolled data used in path expression
ncrypt/smime.c:1564:22: 830 Uncontrolled data used in path expression
ncrypt/smime.c:1589:20: 831 Uncontrolled data used in path expression
ncrypt/smime.c:1597:22: 832 Uncontrolled data used in path expression
ncrypt/smime.c:1635:22: 834 Uncontrolled data used in path expression
ncrypt/smime.c:1640:22: 835 Uncontrolled data used in path expression
ncrypt/smime.c:1722:35: 825 Uncontrolled data used in path expression
ncrypt/smime.c:1747:34: 910 Uncontrolled data used in path expression
ncrypt/smime.c:1797:20: 827 Uncontrolled data used in path expression
ncrypt/smime.c:1848:28: 1071 Uncontrolled data used in path expression
ncrypt/smime.c:1869:22: 1072 Uncontrolled data used in path expression
ncrypt/smime.c:1881:22: 1073 Uncontrolled data used in path expression
ncrypt/smime.c:1900:20: 1074 Uncontrolled data used in path expression
ncrypt/smime.c:2016:22: 1075 Uncontrolled data used in path expression
nntp/newsrc.c:182:47: 371 Uncontrolled data used in path expression
nntp/newsrc.c:187:45: 580 Uncontrolled data used in path expression
nntp/newsrc.c:404:26: 579 Uncontrolled data used in path expression
nntp/newsrc.c:623:30: 860 Uncontrolled data used in path expression
nntp/nntp.c:2692:41: 861 Uncontrolled data used in path expression
pager/functions.c:1027:29: 862 Uncontrolled data used in path expression
pager/message.c:219:34: 863 Uncontrolled data used in path expression
pager/message.c:265:22: 864 Uncontrolled data used in path expression
pattern/exec.c:716:26: 865 Uncontrolled data used in path expression
pop/pop.c:1035:33: 867 Uncontrolled data used in path expression
postpone/postpone.c:411:38: 868 Uncontrolled data used in path expression
recvcmd.c:510:34: 875 Uncontrolled data used in path expression
recvcmd.c:629:43: 876 Uncontrolled data used in path expression
recvcmd.c:640:22: 956 Uncontrolled data used in path expression
recvcmd.c:701:30: 872 Uncontrolled data used in path expression
recvcmd.c:775:35: 874 Uncontrolled data used in path expression
recvcmd.c:1012:28: 869 Uncontrolled data used in path expression
recvcmd.c:1104:39: 870 Uncontrolled data used in path expression
recvcmd.c:1114:22: 955 Uncontrolled data used in path expression
rfc3676.c:492:34: 375 Uncontrolled data used in path expression
rfc3676.c:505:34: 873 Uncontrolled data used in path expression
send/body.c:339:30: 911 Uncontrolled data used in path expression
send/send.c:1502:34: 888 Uncontrolled data used in path expression
send/send.c:1548:25: 889 Uncontrolled data used in path expression
send/send.c:1554:29: 890 Uncontrolled data used in path expression
send/send.c:2079:45: 380 Uncontrolled data used in path expression
send/send.c:2087:49: 381 Uncontrolled data used in path expression
send/send.c:2509:40: 1076 Uncontrolled data used in path expression
send/send.c:2518:32: 884 Uncontrolled data used in path expression
send/send.c:2999:32: 880 Uncontrolled data used in path expression
send/sendlib.c:114:26: 913 Uncontrolled data used in path expression
send/sendlib.c:222:38: 887 Uncontrolled data used in path expression
send/sendlib.c:270:57: 912 Uncontrolled data used in path expression
send/sendlib.c:289:28: 1077 Uncontrolled data used in path expression
send/sendlib.c:339:22: 1078 Uncontrolled data used in path expression
send/sendlib.c:475:31: 1094 Uncontrolled data used in path expression
send/sendlib.c:856:34: 881 Uncontrolled data used in path expression
send/sendlib.c:893:53: 882 Uncontrolled data used in path expression
send/sendlib.c:898:62: 883 Uncontrolled data used in path expression
send/sendlib.c:1089:30: 879 Uncontrolled data used in path expression
send/sendmail.c:174:14: 384 Uncontrolled process operation
mutt_config.c:357:46: 1079 Unused static variable
send/config.c:51:46: 1080 Unused static variable
expando/node_conddate.c:94:10: 1043 Year field changed using an arithmetic operation without checking for leap year
mutt/date.c:354:9: 319 Year field changed using an arithmetic operation without checking for leap year
mutt/date.c:359:9: 486 Year field changed using an arithmetic operation without checking for leap year
mutt/date.c:370:11: 321 Year field changed using an arithmetic operation without checking for leap year
mutt/date.c:384:11: 322 Year field changed using an arithmetic operation without checking for leap year
mutt/date.c:592:8: 522 Year field changed using an arithmetic operation without checking for leap year
mutt/date.c:757:8: 1114 Year field changed using an arithmetic operation without checking for leap year
pattern/compile.c:234:11: 324 Year field changed using an arithmetic operation without checking for leap year
pattern/compile.c:348:8: 323 Year field changed using an arithmetic operation without checking for leap year
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment