Re: [sqlite] Possible NULL DEREFERENCES and DEAD STORES found by static analysis tools

2018-08-21 Thread Wout Mertens
I was curious so I looked it up, the 2015 one is here http://sqlite.1065341.n5.nabble.com/Security-issues-in-SQLite-td81339.html but the 2014 one didn't get any replies. The gist of it is that these static analysis tools generate a lot of false positives, so unless you can come up with a test

Re: [sqlite] Possible NULL DEREFERENCES and DEAD STORES found by static analysis tools

2018-08-21 Thread Niall O'Reilly
On 21 Aug 2018, at 10:14, Patricia Monteiro wrote: > I have been analyzing the latest version of SQLite (3.24.0) with several > static analysis tools (Infer, Clang Static Analyzer, Cppcheck and Predator) > and after manually reviewing the code I have identified the following > errors: Variants

[sqlite] Possible NULL DEREFERENCES and DEAD STORES found by static analysis tools

2018-08-21 Thread Patricia Monteiro
I have been analyzing the latest version of SQLite (3.24.0) with several static analysis tools (Infer, Clang Static Analyzer, Cppcheck and Predator) and after manually reviewing the code I have identified the following errors: 1) Location: sqlite3.c: 91920 Error: NULL DEREFERENCE Found by: Clang