On 2024-07-22 10:29, Wasser Mai wrote:
There's a following defect in diffutils-3.10 (gnulib) found by covscan. The memory dfa->eclosure points to is not initialized. It looks like a true positive.
It doesn't look like a true positive to me. The 'postorder' function initializes that memory, but covscan isn't smart enough to see that.
These days almost everything Coverity reports for core GNU utilities is a false positive, unfortunately.
