This is an archive of the discontinued LLVM Phabricator instance.

Differential D154838

[analyzer] Add check for null pointer passed to the %p of printf family
Needs RevisionPublic

Authored by CuriousGeorgiy on Jul 10 2023, 5:57 AM.

Details

Reviewers
NoQ
steakhal
xazax.hun
Summary

The result of passing a null pointer to the pointer conversion specifier of
printf family of functions is implementation defined — for instance, on
Windows zeros are printed, whilst on Linux '(nil)' is printed.

The problem described above is a minor portability issue, so we don't just
add a check for to the existing Unix API checker, since it would be
desirable to be able to disable it.

Instead, to collect such checks we add a new APIPortabilityMinor checker to
the alpha.unix package with a check for the problem described above.

The check assumes that a null pointer is only passed to a pointer
conversion specifier, otherwise it would be undefined behaviour. By making
this assumption we do not have to check the format string and match data
arguments to conversion specifiers.

Closes #43453

Diff Detail

Event Timeline

CuriousGeorgiy created this revision.Jul 10 2023, 5:57 AM
Herald added a reviewer: NoQ. · View Herald TranscriptJul 10 2023, 5:57 AM
Herald added a project: Restricted Project. · View Herald Transcript
Herald added subscribers: steakhal, manas, ASDenysPetrov and 9 others. · View Herald Transcript
CuriousGeorgiy requested review of this revision.Jul 10 2023, 5:57 AM
Herald added a project: Restricted Project. · View Herald TranscriptJul 10 2023, 5:57 AM
Herald added a subscriber: cfe-commits. · View Herald Transcript
CuriousGeorgiy added a comment.EditedJul 10 2023, 5:59 AM

Hi! This is my first time contributing to the LLVM project and particularly the clang static analyzer. This patch is based off https://reviews.llvm.org/D139604?id=481154. I have several questions regarding the reviewers comments (most of which I tried to address) and the patch itself:

  1. One should be able to disable your rule in case something goes wild. So, your checker should be registered at the end of the file by applying the REGISTER_CHECKER() macro.

This check is part of the UnixAPIPortability checker, which is already registered. Do you suggest creating a separate checker for this check?

  1. One should update the documentation and also mention the new check in the release docs to give visibility.

The current documentation for the UnixAPIPortability checker is quite generic (docs/analyazer/checkers.rst) and doesn’t mention specific checks. Should I mention this new check there? Also, I wasn't able to find the write place to add a changelog about the new check to.

  1. Add tests demonstrating all possible aspects of your change.

I added a number of tests for various aspects of the new check, but I’m not sure they are sufficient and I’m not sure what needs to be covered. For instance, should I add test that the warning is not issued for functions not located in the global namespace? Should I add a test case for nullptr?

A couple of questions regarding the patch itself:

  1. Should I cover non-standard (i.e., non ISO C standard) functions from the printf_s family? Should I cover non-standard functions like dprintf?
  2. What is the right way to emit a bug report? I have studied the code base and found several patterns: in some cases, an error node is simply generated, in others a new transition is also added based on the analyzed state. In some cases an expression value is also tracked.
  3. Should I try to report all possible bugs, or only report the first one found?
  4. What is the correct way to update expected plists for test inputs? I tried to simply replace the existing one (unix-fns.c.plist) with the output I get from executing the first command of unix-fns.c test, but I still get the following error:

georgiy.lebedev@georgiy-lebedev llvm-project % build-debug/bin/llvm-lit -sv clang/test/Analysis/unix-fns.c
llvm-lit: /Users/georgiy.lebedev/Work/llvm-project/llvm/utils/lit/lit/llvm/config.py:484: note: using clang: /Users/georgiy.lebedev/Work/llvm-project/build-debug/bin/clang
llvm-lit: /Users/georgiy.lebedev/Work/llvm-project/llvm/utils/lit/lit/util.py:439: note: using SDKROOT: '/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX13.3.sdk'
FAIL: Clang :: Analysis/unix-fns.c (1 of 1)
******************** TEST 'Clang :: Analysis/unix-fns.c' FAILED ********************
Script:
--
: 'RUN: at line 1';   /Users/georgiy.lebedev/Work/llvm-project/build-debug/bin/clang -cc1 -internal-isystem /Users/georgiy.lebedev/Work/llvm-project/build-debug/lib/clang/17/include -nostdsysteminc -analyze -analyzer-constraints=range -setup-static-analyzer -triple x86_64-apple-darwin10 -analyzer-checker=core,unix.API,osx.API,optin.portability /Users/georgiy.lebedev/Work/llvm-project/clang/test/Analysis/unix-fns.c -analyzer-output=plist -analyzer-config faux-bodies=true  -fblocks -verify -o /Users/georgiy.lebedev/Work/llvm-project/build-debug/tools/clang/test/Analysis/Output/unix-fns.c.tmp.plist
: 'RUN: at line 2';   grep -Ev '^[[:space:]]*<string>.* version .*</string>[[:space:]]*$|^[[:space:]]*<string>/.*</string>[[:space:]]*$|^[[:space:]]*<string>.:.*</string>[[:space:]]*$' </Users/georgiy.lebedev/Work/llvm-project/build-debug/tools/clang/test/Analysis/Output/unix-fns.c.tmp.plist | diff -ub /Users/georgiy.lebedev/Work/llvm-project/clang/test/Analysis/Inputs/expected-plists/unix-fns.c.plist -
: 'RUN: at line 3';   mkdir -p /Users/georgiy.lebedev/Work/llvm-project/build-debug/tools/clang/test/Analysis/Output/unix-fns.c.tmp.dir
: 'RUN: at line 4';   /Users/georgiy.lebedev/Work/llvm-project/build-debug/bin/clang -cc1 -internal-isystem /Users/georgiy.lebedev/Work/llvm-project/build-debug/lib/clang/17/include -nostdsysteminc -analyze -analyzer-constraints=range -setup-static-analyzer -analyzer-checker=core,unix.API,osx.API,optin.portability -analyzer-output=html -analyzer-config faux-bodies=true -fblocks -o /Users/georgiy.lebedev/Work/llvm-project/build-debug/tools/clang/test/Analysis/Output/unix-fns.c.tmp.dir /Users/georgiy.lebedev/Work/llvm-project/clang/test/Analysis/unix-fns.c
: 'RUN: at line 5';   rm -fR /Users/georgiy.lebedev/Work/llvm-project/build-debug/tools/clang/test/Analysis/Output/unix-fns.c.tmp.dir
--
Exit Code: 1

Command Output (stdout):
--
--- /Users/georgiy.lebedev/Work/llvm-project/clang/test/Analysis/Inputs/expected-plists/unix-fns.c.plist	2023-07-08 19:58:06
+++ -	2023-07-08 19:58:20
@@ -3,7 +3,6 @@
 <plist version="1.0">
 <dict>
  <key>clang_version</key>
-<string>clang version 17.0.0 (git@github.com:llvm/llvm-project.git 1882a4ee69b3cc2202d8d7d7b6465475f6d19886)</string>
  <key>diagnostics</key>
  <array>
   <dict>
@@ -4065,7 +4064,6 @@
  </array>
  <key>files</key>
  <array>
-  <string>/Users/georgiy.lebedev/Work/llvm-project/clang/test/Analysis/unix-fns.c</string>
  </array>
 </dict>
 </plist>

--

********************
********************
Failed Tests (1):
  Clang :: Analysis/unix-fns.c


Testing Time: 0.79s
  Failed: 1
CuriousGeorgiy added a reviewer: steakhal.Jul 10 2023, 6:00 AM
Harbormaster completed remote builds in B244114: Diff 538600.Jul 10 2023, 6:27 AM
steakhal added a comment.Jul 16 2023, 10:40 AM

Expect a review on around the next weekend due to vacations from me.

CuriousGeorgiy added a reviewer: xazax.hun.Jul 24 2023, 9:41 AM
MitalAshok added a subscriber: MitalAshok.Jul 25 2023, 12:05 PM

Instead of checking for hard-coded names, you can check functions with the format(printf, x, y) attribute:

if (auto *Format = FD->getAttr<FormatAttr>())
  CheckPrintfPointerConversionSpecifierNULL(C, CE, Format->getFormatIdx());

You also have to check for pointer types first. This currently warns on printf("%d", 0), since 0 is a null pointer constant (This warning should only be T* pointer types, C2x and C++ nullptr and GNU __null).

Also this only works for null pointer *constants*. printf("%p", (void*) 0) is pretty rare. You ideally want this to warn on the following too:

void f(void* p) {
    if (!p) printf("%p", p);
}
void g(void) {
    void* p = NULL;
    printf("%p", p);
}

Look into how the NonNullParamChecker works

NoQ added a comment.Jul 25 2023, 2:56 PM

Should I cover non-standard (i.e., non ISO C standard) functions from the printf_s family? Should I cover non-standard functions like dprintf?

The static analyzer, unlike the compiler proper, isn't required to treat all code fairly. It's ok to have different behavior depending solely on the function's name. So if you want to support non-standard functions, and you know that they have the same portability issues, totally go for it!

This check is part of the UnixAPIPortability checker, which is already registered. Do you suggest creating a separate checker for this check?

Probably a separate check would be better. The consequences of malloc(0) are likely to be much more dire than consequences of printf("%p", 0), so people may want to enable/disable them separately.

What is the correct way to update expected plists for test inputs?

The run-lines are mostly self-explanatory. Just run it through the grep command in the other run-line. It filters out all the non-transferable stuff. (You clearly don't want to have paths like /Users/georgiy.lebedev/Work/... in test files.)

Or, put your test in a separate file with a simpler run-line that doesn't additionally verify plist output. We already have enough tests for plist output.

In D154838#4532929, @MitalAshok wrote:

Instead of checking for hard-coded names, you can check functions with the format(printf, x, y) attribute:

if (auto *Format = FD->getAttr<FormatAttr>())
  CheckPrintfPointerConversionSpecifierNULL(C, CE, Format->getFormatIdx());

Is the behavior necessarily implementation-defined for all such functions? I'm pretty sure you can find this attribute on a project-local function that will never have more than one implementation.

clang/lib/StaticAnalyzer/Checkers/UnixAPIChecker.cpp
488–489

What is the right way to emit a bug report? I have studied the code base and found several patterns: in some cases, an error node is simply generated, in others a new transition is also added based on the analyzed state. In some cases an expression value is also tracked.

You always need to track the value when reporting things about values, it adds notes to the report explaining why do we think the variable has that value (eg., it was assigned null or compared to null).

Most checkers need this, though for some checkers it's more important than for other checkers.

Whether to generate a non-fatal error node and what state to put into it, this is indeed a very case-by-case decision. In your case the behavior is not undefined, the program doesn't crash when the bug happens, it continues to run normally, so analysis should probably also continue to find more defects. There are a few unknowns about the program's behavior (in particular, we don't know what it actually printed), but we never promised to figure this out in the first place. And even if there are unknowns that matter, well, unknowns are part of life and the rest of the static analyzer is already built under the assumption that not everything is known.

If it was an actual null pointer dereference, then you'd have to terminate the analysis by generating a fatal error node. The user won't be happy to learn about a "bug" that only occurs under the assumption that the program has already crashed with null dereference. And if it doesn't *only* occur under that assumption, then we'll probably find the same bug anyway while exploring a different execution path that doesn't crash.

A separate question is, do we want to assume that the pointer x is non-null after its first use in printf("%p", x)? We may or may not need to assume this regardless of whether we see a path on which it's definitely null. Eg., consider:

void foo(int *x) {
  // (1) We probably can't want to warn here, because there's no indication that 'x' can be null.
  printf("%p\n", x);

  // This is an indication that 'x' can be null.
  //
  // Technically it applies retroactively to the first line, but retroactive warnings are hard
  // because multiple different paths could reach this check, and it's not necessarily there
  // specifically for our current path.
  if (x == NULL) {
    printf("WARNING: null passed to foo()!");
  }

  // (2) Now, do we want to warn here? We probably do.
  //
  // But note that if we reached (2), we've already exhibited the same non-portable behavior
  // at (1) where no warning was emitted.
  printf("%p\n", x);

  // (3) Do we want to warn again here?
  printf("%p\n", x);

  // (4) What if it was a plain null dereference?
  printf("%d\n", *x);
}

If at (1), (2), (3) instead of printf("%p, x) we had a plain null dereference printf("%d\n", *x);, the null dereference checker will not emit any warnings. Indeed, the true-branch of the if-statement is dead code because the only way to reach it would be to go through undefined behavior at (1), but we also can't prove that there's any undefined behavior at (1). Yes we could separately warn about dead code, but that's a job for a different checker.

The null dereference checker accomplishes this by invoking addTransition(nonNullState) regardless of whether the warning is emitted (i.e. whenever notNullState is an actual state), and making the generateErrorNode(nullState) fatal. In particular, after (1) the pointer will continue to be unconditionally non-null.

In the example as written, you probably want a warning at (2). You also really want a null dereference warning at (4). So it's really counter-productive to transition to the notNullState at (1).

You probably don't care all that much about (3). Indeed, if you reach (3) in this analysis, you'll probably also reach it once (2) is addressed. The value of emitting all warnings at once is usually secondary to the nuisance of having too many warnings at once, so we'd probably still prefer it to warn only at (2).

But in order to have a warning at (4), you will also need to allow a warning at (3). This is because what has been assumed, cannot be unassumed. You can suppress the warning at (3) artificially by tracking a set of values or variables about which your checker has already warned, but that'd require a bit of work and I don't think it's necessary. It's probably ok to just warn at (3).

So I think your solution is correct.

517–521

This really doesn't accomplish anything, assume() already does a lot more than that. Just rely on assume(), or make it a completely path-insensitive check if you want to stick to literal constants.

CuriousGeorgiy updated this revision to Diff 548899.EditedAug 10 2023, 12:42 AM

Addressed review comments:

  • moved the checker to a separate UnixAPIPortabilityMinorChecker which can be enabled using optin.portabilityMinor.UnixAPI;
  • added expression value tracking for the pointer passed to the pointer conversion specifier;
  • removed the excessive NULL pointer constant check, which is covered by assume;
  • fixed the FP for 0 integer constants by checking that the argument's type is a pointer type, added a test case for this;
  • updated the expected plist for unix-fns.c correctly.
CuriousGeorgiy added a comment.EditedAug 10 2023, 1:00 AM

@MitalAshok thank you for the feedback!

Instead of checking for hard-coded names, you can check functions with the format(printf, x, y) attribute

@NoQ pointed out this is too generic, and we should go for a case-by-case approach.

You also have to check for pointer types first. This currently warns on printf("%d", 0), since 0 is a null pointer constant

Fixed, thanks for spotting!

Also this only works for null pointer *constants*.

No, it works for symbolic values too, please look at the test cases.

CuriousGeorgiy added a comment.Aug 10 2023, 1:06 AM

@NoQ thank you for the feedback too!

So if you want to support non-standard functions, and you know that they have the same portability issues, totally go for it!

AFAIC, the functions I listed are very exotic, so I would rather skip them.

Probably a separate check would be better. The consequences of malloc(0) are likely to be much more dire than consequences of printf("%p", 0), so people may want to enable/disable them separately.

I moved it to a separate checker, but I'm not sure about the naming, any suggestions? BTW, I guess it should be printf("%p", NULL), since as @MitalAshok pointed out, we should only consider pointer type values.

The run-lines are mostly self-explanatory. Just run it through the grep command in the other run-line. It filters out all the non-transferable stuff.

Sorry, my bad, I didn't notice this, updated the plist correctly now.

This really doesn't accomplish anything, assume() already does a lot more than that. Just rely on assume(), or make it a completely path-insensitive check if you want to stick to literal constants.

Dropped this check, thanks for point this out!

Harbormaster completed remote builds in B251592: Diff 548899.Aug 10 2023, 4:05 AM
steakhal added a comment.Aug 10 2023, 10:56 AM

Looks pretty good.

clang/docs/analyzer/checkers.rst
704

This line should be just as long, as the line above.

705

Our docs aren't great, but we should have a brief description what the checker detects, basically here it would be "Find null pointers being passed to printf-like functions. Usually, passing null pointers to such functions is implementation defined, thus non-portable. Printf-like functions are: x, y, z."
Illustrate one example for diagnosing a case. Also illustrate one case similar to the bad one, that is fixed (basically ensure that the pointer is not null there).
And that's it.

clang/include/clang/StaticAnalyzer/Checkers/Checkers.td
45–50

I don't think we should create a separate package. A separate checker should be enough in alpha.unix, or alpha.optin, or just optin.

1671

Usually, the user-facing checker name which is the <"..."> part there, matches the name of the checker's class name. It helps for maintenance.
I would strongly suggest keeping this naming convention.

1673

Docs are not really optional these days, but we can come back later once the checker is ironed out.

clang/lib/StaticAnalyzer/Checkers/UnixAPIChecker.cpp
88

Usually, we put separate checkers into their own file.

89

Prefer using the check::PreCall callback over the PreStmt.

94

Nowdays, if I'm not mistaken, we just inline initialize these eagerly.
That way you could also avoid marking it mutable.

102

Feel free to just call it reportBug.
Also, in the cpp file, usually we use the namespaces clang,llvm,ento already. You don't need to fully-qualify these names.

593–594

For matching names, we usually use CallDescriptions to do it for us.
If think you could use them while also checking if the Call is a CallEvent::isGlobalCFunction(). I suspect, you only wanna check those.
I think you should define a CallDescriptionMap, because you will also need your specific data_arg_index...
Look for uses of such maps and you will get inspired.

clang/test/Analysis/unix-fns.c
81–92

I'd highly recommend not touching this file to avoid the bulk change in the expected plist output. Please just introduce a new test file.

280–289

I would appreciate a test demonstrating that the pointer argument won't get constrained after the printf call. I think such case was already discussed.

We should also demonstrate that unknown pointers (which doesn't known to be neither null, nor non-null) won't raise issues.

In the checker-logic, we have the data_args_index for each printf-like function.
Can you demonstrate that each is handled as expected?

Also have a test when the formatstring itself is null.

CuriousGeorgiy updated this revision to Diff 554259.EditedAug 29 2023, 4:28 AM
CuriousGeorgiy marked 2 inline comments as done.

Addressed review comments:

  • moved the checker source code to a separate file;
  • moved the checker tests to a separate file;
  • moved the checker to the alpha.unix package;
  • refactored the checker implementation;
  • added additional checker tests;
  • fixed nullptr literals not being warned about.
Herald added a subscriber: ormris. · View Herald TranscriptAug 29 2023, 4:28 AM
CuriousGeorgiy retitled this revision from [analyzer] Add check for null pointer passed to %p of printf family to [analyzer] Add check for null pointer passed to the %p of printf family.Aug 29 2023, 4:31 AM
CuriousGeorgiy edited the summary of this revision. (Show Details)
Herald added a subscriber: wangpc. · View Herald TranscriptAug 29 2023, 4:31 AM
CuriousGeorgiy added a comment.Aug 29 2023, 5:30 AM

@steakhal

Thanks for the review comments!

This line should be just as long, as the line above.

Fixed.

Our docs aren't great, but we should have a brief description what the checker detects, basically here it would be "Find null pointers being passed to printf-like functions. Usually, passing null pointers to such functions is implementation defined, thus non-portable. Printf-like functions are: x, y, z."
Illustrate one example for diagnosing a case. Also illustrate one case similar to the bad one, that is fixed (basically ensure that the pointer is not null there).

Fixed. Added a generic comment about the checker collection, added a check list and described the printf pointer conversion specifier checker and provided TP and TN examples for it.

I don't think we should create a separate package. A separate checker should be enough in alpha.unix, or alpha.optin, or just optin.

Moved the checker to the alpha.unix package.

Usually, the user-facing checker name which is the <"..."> part there, matches the name of the checker's class name. It helps for maintenance.
I would strongly suggest keeping this naming convention.

Changed the checker name to APIPortabilityMinor, dropping the Unix prefix, which seems redundant as it is part of the checker path.

Usually, we put separate checkers into their own file.

Fixed.

Prefer using the check::PreCall callback over the PreStmt.

Fixed.

Nowdays, if I'm not mistaken, we just inline initialize these eagerly.
That way you could also avoid marking it mutable.

Fixed.

Feel free to just call it reportBug.

I cannot call it this way, since it is bug reporting function for the printf family pointer conversion specifier specific check.

Also, in the cpp file, usually we use the namespaces clang,llvm,ento already. You don't need to fully-qualify these names.

Fixed. Though, AFAIC, I still need to qualify the register and shouldRegister functions with the ento namespace, otherwise the ADL fails.

For matching names, we usually use CallDescriptions to do it for us.
If think you could use them while also checking if the Call is a CallEvent::isGlobalCFunction(). I suspect, you only wanna check those.
I think you should define a CallDescriptionMap, because you will also need your specific data_arg_index...
Look for uses of such maps and you will get inspired.

Thanks a lot for pointing this out, it looks very neat indeed, applied your suggestion, and the checker looks a lot cleaner now.

I'd highly recommend not touching this file to avoid the bulk change in the expected plist output. Please just introduce a new test file.

Fixed.

I would appreciate a test demonstrating that the pointer argument won't get constrained after the printf call. I think such case was already discussed.
We should also demonstrate that unknown pointers (which doesn't known to be neither null, nor non-null) won't raise issues.

Added these test cases to the printf_pointer_conversion_specifier_null_pointer_constraints test.

In the checker-logic, we have the data_args_index for each printf-like function.
Can you demonstrate that each is handled as expected?

AFAIC, I have already done this in the test_printf_pointer_conversion_specifier_null_various_arguments test.

Also have a test when the formatstring itself is null.

AFAIC, passing a null format string is already UB, so the check shouldn't handle this case specially. What test would you like to see?

Harbormaster completed remote builds in B255467: Diff 554259.Aug 29 2023, 5:40 AM
steakhal requested changes to this revision.Aug 31 2023, 2:47 AM

I'd suggest renaming the checker to alpha.unix.NullFormatSpecifier.
Maybe add tests where multiple format specifiers are null, and also one test where no variadic args are present.

I also tried to simplify your solution a bit, so that we don't need to specify manually which arguments are for the "variadic" part.
Check it out here:

simplified.patch166 KBDownload

We should think about a shorter diagnostic message because it seems unnecessarily long to me.
The rest looks good to me.

I could do a measurement to see how this would behave in the wild.

clang/lib/StaticAnalyzer/Checkers/UnixAPIPortabilityMinorChecker.cpp
70–71 ↗(On Diff #554259)

Is this an unfinished sentence? I guess you could remove the of suffix.

86 ↗(On Diff #554259)

You always pass this state.

clang/test/Analysis/unix-api-portability-minor.cpp
5–13 ↗(On Diff #554259)
30–35 ↗(On Diff #554259)

This format makes the pattern more apparent.

42–43 ↗(On Diff #554259)

If printf had assumed that pointer1 must be non-null to make the postcondition of the function pass, the dereference would succeed afterward anyway.

To test if printf didn't assume this, just have this afterward to make this observable:

if (pointer1) {
  *pointer1 = 777;
} else {
  // We should have a warning here, as 'printf' didn't assume that the specifier is non-null.
  *pointer1 = 888; // expect-warning {{deref}}
}

If the pointer was constrained, then the else branch should be proven dead-code, and we should not have a warning

This revision now requires changes to proceed.Aug 31 2023, 2:47 AM

Revision Contents

PathSize
clang/
docs/
analyzer/
7 lines
include/
clang/
StaticAnalyzer/
Checkers/
14 lines
lib/
StaticAnalyzer/
Checkers/
108 lines
test/
Analysis/
Inputs/
expected-plists/
1689 lines
43 lines

Diff 548899

clang/docs/analyzer/checkers.rst

Show First 20 Lines • Show All 692 Lines • ▼ Show 20 Lines
.. _optin-portability-UnixAPI: .. _optin-portability-UnixAPI:
optin.portability.UnixAPI optin.portability.UnixAPI
""""""""""""""""""""""""" """""""""""""""""""""""""
Finds implementation-defined behavior in UNIX/Posix functions. Finds implementation-defined behavior in UNIX/Posix functions.
.. _optin-portabilityMinor-UnixAPI:
optin.portabilityMinor.UnixAPI
"""""""""""""""""""""""""
steakhalUnsubmitted
Not Done
ReplyInline Actions

This line should be just as long, as the line above.

steakhal: This line should be just as long, as the line above.
Finds non-severe implementation-defined behavior in UNIX/Posix functions.
steakhalUnsubmitted
Not Done
ReplyInline Actions

Our docs aren't great, but we should have a brief description what the checker detects, basically here it would be "Find null pointers being passed to printf-like functions. Usually, passing null pointers to such functions is implementation defined, thus non-portable. Printf-like functions are: x, y, z."
Illustrate one example for diagnosing a case. Also illustrate one case similar to the bad one, that is fixed (basically ensure that the pointer is not null there).
And that's it.

steakhal: Our docs aren't great, but we should have a brief description what the checker detects…
.. _security-checkers: .. _security-checkers:
security security
^^^^^^^^ ^^^^^^^^
Security related checkers. Security related checkers.
.. _security-FloatLoopCounter: .. _security-FloatLoopCounter:
▲ Show 20 Lines • Show All 2,367 Lines • Show Last 20 Lines

clang/include/clang/StaticAnalyzer/Checkers/Checkers.td

Show All 36 Lines
// default. Such checkers belong in the alpha package. // default. Such checkers belong in the alpha package.
def OptIn : Package<"optin">; def OptIn : Package<"optin">;
// In the Portability package reside checkers for finding code that relies on // In the Portability package reside checkers for finding code that relies on
// implementation-defined behavior. Such checks are wanted for cross-platform // implementation-defined behavior. Such checks are wanted for cross-platform
// development, but unwanted for developers who target only a single platform. // development, but unwanted for developers who target only a single platform.
def PortabilityOptIn : Package<"portability">, ParentPackage<OptIn>; def PortabilityOptIn : Package<"portability">, ParentPackage<OptIn>;
// The PortabilityMinor package is for checkers that find non-severe portability
// issues (see also the Portability package). Such checks may be unwanted for
// developers who want to ignore minor portability issues, hence they are put in
// a separate package.
def PortabilityMinorOptIn : Package<"portabilityMinor">, ParentPackage<OptIn>;
steakhalUnsubmitted
Not Done
ReplyInline Actions

I don't think we should create a separate package. A separate checker should be enough in alpha.unix, or alpha.optin, or just optin.

steakhal: I don't think we should create a separate package. A separate checker should be enough in…
def Nullability : Package<"nullability">, def Nullability : Package<"nullability">,
PackageOptions<[ PackageOptions<[
CmdLineOption<Boolean, CmdLineOption<Boolean,
"NoDiagnoseCallsToSystemHeaders", "NoDiagnoseCallsToSystemHeaders",
"Suppresses warnings for violating nullability annotations " "Suppresses warnings for violating nullability annotations "
"of system header functions. This is useful if you are " "of system header functions. This is useful if you are "
"concerned with your custom nullability annotations more " "concerned with your custom nullability annotations more "
"than with following nullability specifications of system " "than with following nullability specifications of system "
▲ Show 20 Lines • Show All 1,602 Lines • ▼ Show 20 Lines
let ParentPackage = PortabilityOptIn in { let ParentPackage = PortabilityOptIn in {
def UnixAPIPortabilityChecker : Checker<"UnixAPI">, def UnixAPIPortabilityChecker : Checker<"UnixAPI">,
HelpText<"Finds implementation-defined behavior in UNIX/Posix functions">, HelpText<"Finds implementation-defined behavior in UNIX/Posix functions">,
Documentation<NotDocumented>; Documentation<NotDocumented>;
} // end optin.portability } // end optin.portability
let ParentPackage = PortabilityMinorOptIn in {
def UnixAPIPortabilityMinorChecker : Checker<"UnixAPI">,
steakhalUnsubmitted
Not Done
ReplyInline Actions

Usually, the user-facing checker name which is the <"..."> part there, matches the name of the checker's class name. It helps for maintenance.
I would strongly suggest keeping this naming convention.

steakhal: Usually, the user-facing checker name which is the `<"...">` part there, matches the name of…
HelpText<"Finds non-severe implementation-defined behavior in UNIX/Posix functions">,
Documentation<NotDocumented>;
steakhalUnsubmitted
Not Done
ReplyInline Actions

Docs are not really optional these days, but we can come back later once the checker is ironed out.

steakhal: Docs are not really optional these days, but we can come back later once the checker is ironed…
} // end optin.portabilityMinor
//===----------------------------------------------------------------------===// //===----------------------------------------------------------------------===//
// NonDeterminism checkers. // NonDeterminism checkers.
//===----------------------------------------------------------------------===// //===----------------------------------------------------------------------===//
let ParentPackage = NonDeterminismAlpha in { let ParentPackage = NonDeterminismAlpha in {
def PointerIterationChecker : Checker<"PointerIteration">, def PointerIterationChecker : Checker<"PointerIteration">,
HelpText<"Checks for non-determinism caused by iteration of unordered containers of pointers">, HelpText<"Checks for non-determinism caused by iteration of unordered containers of pointers">,
▲ Show 20 Lines • Show All 60 Lines • Show Last 20 Lines

clang/lib/StaticAnalyzer/Checkers/UnixAPIChecker.cpp

Show First 20 Lines • Show All 79 Lines • ▼ Show 20 Lines bool ReportZeroByteAllocation(CheckerContext &C,
const char *fn_name) const; const char *fn_name) const;
void BasicAllocationCheck(CheckerContext &C, void BasicAllocationCheck(CheckerContext &C,
const CallExpr *CE, const CallExpr *CE,
const unsigned numArgs, const unsigned numArgs,
const unsigned sizeArg, const unsigned sizeArg,
const char *fn) const; const char *fn) const;
}; };
class UnixAPIPortabilityMinorChecker
steakhalUnsubmitted
Not Done
ReplyInline Actions

Usually, we put separate checkers into their own file.

steakhal: Usually, we put separate checkers into their own file.
: public Checker<check::PreStmt<CallExpr>> {
steakhalUnsubmitted
Not Done
ReplyInline Actions

Prefer using the check::PreCall callback over the PreStmt.

steakhal: Prefer using the `check::PreCall` callback over the `PreStmt`.
public:
void checkPreStmt(const CallExpr *CE, CheckerContext &C) const;
private:
mutable std::unique_ptr<BugType> BT_printfPointerConversionSpecifierNULL;
steakhalUnsubmitted
Not Done
ReplyInline Actions

Nowdays, if I'm not mistaken, we just inline initialize these eagerly.
That way you could also avoid marking it mutable.

steakhal: Nowdays, if I'm not mistaken, we just inline initialize these eagerly. That way you could also…
void
CheckPrintfPointerConversionSpecifierNULL(CheckerContext &C,
const CallExpr *CE,
unsigned int data_args_index) const;
void
ReportPrintfPointerConversionSpecifierNULL(clang::ento::CheckerContext &C,
steakhalUnsubmitted
Not Done
ReplyInline Actions

Feel free to just call it reportBug.
Also, in the cpp file, usually we use the namespaces clang,llvm,ento already. You don't need to fully-qualify these names.

steakhal: Feel free to just call it `reportBug`. Also, in the cpp file, usually we use the namespaces…
ProgramStateRef nullState,
const clang::Expr *arg) const;
};
} //end anonymous namespace } //end anonymous namespace
static void LazyInitialize(const CheckerBase *Checker, static void LazyInitialize(const CheckerBase *Checker,
std::unique_ptr<BugType> &BT, std::unique_ptr<BugType> &BT,
const char *name) { const char *name) {
if (BT) if (BT)
return; return;
BT.reset(new BugType(Checker, name, categories::UnixAPI)); BT.reset(new BugType(Checker, name, categories::UnixAPI));
▲ Show 20 Lines • Show All 365 Lines • ▼ Show 20 Linesvoid UnixAPIPortabilityChecker::checkPreStmt(const CallExpr *CE,
if (!FD || FD->getKind() != Decl::Function) if (!FD || FD->getKind() != Decl::Function)
return; return;
// Don't treat functions in namespaces with the same name a Unix function // Don't treat functions in namespaces with the same name a Unix function
// as a call to the Unix function. // as a call to the Unix function.
const DeclContext *NamespaceCtx = FD->getEnclosingNamespaceContext(); const DeclContext *NamespaceCtx = FD->getEnclosingNamespaceContext();
if (isa_and_nonnull<NamespaceDecl>(NamespaceCtx)) if (isa_and_nonnull<NamespaceDecl>(NamespaceCtx))
return; return;
StringRef FName = C.getCalleeName(FD); StringRef FName = C.getCalleeName(FD);
NoQUnsubmitted
Done
ReplyInline Actions

What is the right way to emit a bug report? I have studied the code base and found several patterns: in some cases, an error node is simply generated, in others a new transition is also added based on the analyzed state. In some cases an expression value is also tracked.

You always need to track the value when reporting things about values, it adds notes to the report explaining why do we think the variable has that value (eg., it was assigned null or compared to null).

Most checkers need this, though for some checkers it's more important than for other checkers.

Whether to generate a non-fatal error node and what state to put into it, this is indeed a very case-by-case decision. In your case the behavior is not undefined, the program doesn't crash when the bug happens, it continues to run normally, so analysis should probably also continue to find more defects. There are a few unknowns about the program's behavior (in particular, we don't know what it actually printed), but we never promised to figure this out in the first place. And even if there are unknowns that matter, well, unknowns are part of life and the rest of the static analyzer is already built under the assumption that not everything is known.

If it was an actual null pointer dereference, then you'd have to terminate the analysis by generating a fatal error node. The user won't be happy to learn about a "bug" that only occurs under the assumption that the program has already crashed with null dereference. And if it doesn't *only* occur under that assumption, then we'll probably find the same bug anyway while exploring a different execution path that doesn't crash.

A separate question is, do we want to assume that the pointer x is non-null after its first use in printf("%p", x)? We may or may not need to assume this regardless of whether we see a path on which it's definitely null. Eg., consider:

void foo(int *x) {
  // (1) We probably can't want to warn here, because there's no indication that 'x' can be null.
  printf("%p\n", x);

  // This is an indication that 'x' can be null.
  //
  // Technically it applies retroactively to the first line, but retroactive warnings are hard
  // because multiple different paths could reach this check, and it's not necessarily there
  // specifically for our current path.
  if (x == NULL) {
    printf("WARNING: null passed to foo()!");
  }

  // (2) Now, do we want to warn here? We probably do.
  //
  // But note that if we reached (2), we've already exhibited the same non-portable behavior
  // at (1) where no warning was emitted.
  printf("%p\n", x);

  // (3) Do we want to warn again here?
  printf("%p\n", x);

  // (4) What if it was a plain null dereference?
  printf("%d\n", *x);
}

If at (1), (2), (3) instead of printf("%p, x) we had a plain null dereference printf("%d\n", *x);, the null dereference checker will not emit any warnings. Indeed, the true-branch of the if-statement is dead code because the only way to reach it would be to go through undefined behavior at (1), but we also can't prove that there's any undefined behavior at (1). Yes we could separately warn about dead code, but that's a job for a different checker.

The null dereference checker accomplishes this by invoking addTransition(nonNullState) regardless of whether the warning is emitted (i.e. whenever notNullState is an actual state), and making the generateErrorNode(nullState) fatal. In particular, after (1) the pointer will continue to be unconditionally non-null.

In the example as written, you probably want a warning at (2). You also really want a null dereference warning at (4). So it's really counter-productive to transition to the notNullState at (1).

You probably don't care all that much about (3). Indeed, if you reach (3) in this analysis, you'll probably also reach it once (2) is addressed. The value of emitting all warnings at once is usually secondary to the nuisance of having too many warnings at once, so we'd probably still prefer it to warn only at (2).

But in order to have a warning at (4), you will also need to allow a warning at (3). This is because what has been assumed, cannot be unassumed. You can suppress the warning at (3) artificially by tracking a set of values or variables about which your checker has already warned, but that'd require a bit of work and I don't think it's necessary. It's probably ok to just warn at (3).

So I think your solution is correct.

NoQ: > What is the right way to emit a bug report? I have studied the code base and found several…
if (FName.empty()) if (FName.empty())
return; return;
if (FName == "calloc") if (FName == "calloc")
CheckCallocZero(C, CE); CheckCallocZero(C, CE);
else if (FName == "malloc") else if (FName == "malloc")
CheckMallocZero(C, CE); CheckMallocZero(C, CE);
Show All 10 Linesvoid UnixAPIPortabilityChecker::checkPreStmt(const CallExpr *CE,
else if (FName == "__builtin_alloca_with_align") else if (FName == "__builtin_alloca_with_align")
CheckAllocaWithAlignZero(C, CE); CheckAllocaWithAlignZero(C, CE);
else if (FName == "valloc") else if (FName == "valloc")
CheckVallocZero(C, CE); CheckVallocZero(C, CE);
} }
//===----------------------------------------------------------------------===// //===----------------------------------------------------------------------===//
// printf family of functions with null pointer passed to pointer
// conversion specifier
//===----------------------------------------------------------------------===//
// Generates an error report, indicating that the result of passing a null
// pointer to pointer conversion specifier of printf family of functions is
NoQUnsubmitted
Done
ReplyInline Actions

This really doesn't accomplish anything, assume() already does a lot more than that. Just rely on assume(), or make it a completely path-insensitive check if you want to stick to literal constants.

NoQ: This really doesn't accomplish anything, `assume()` already does a lot more than that. Just…
// implementation defined.
void UnixAPIPortabilityMinorChecker::ReportPrintfPointerConversionSpecifierNULL(
clang::ento::CheckerContext &C, ProgramStateRef nullState,
const clang::Expr *arg) const {
ExplodedNode *N =
C.generateNonFatalErrorNode(nullState ? nullState : C.getState());
if (!N)
return;
LazyInitialize(
this, BT_printfPointerConversionSpecifierNULL,
"Passing a null pointer to the pointer conversion specifier of "
"the printf family of functions");
auto report = std::make_unique<PathSensitiveBugReport>(
*BT_printfPointerConversionSpecifierNULL,
"The result of passing a null pointer to the pointer conversion "
"specifier of "
"the printf family of functions is implementation defined",
N);
report->addRange(arg->getSourceRange());
bugreporter::trackExpressionValue(N, arg, *report);
C.emitReport(std::move(report));
}
// Checks data arguments of printf family of functions for a null pointer,
// assuming it is passed to a pointer conversion specifier (%p), i.e. without
// checking the format string.
void UnixAPIPortabilityMinorChecker::CheckPrintfPointerConversionSpecifierNULL(
CheckerContext &C, const CallExpr *CE, unsigned int data_args_index) const {
ProgramStateRef state = C.getState();
ConstraintManager &CM = state->getConstraintManager();
for (unsigned int i = data_args_index; i < CE->getNumArgs(); i++) {
const Expr *arg = CE->getArg(i);
if (!arg)
continue;
if (!arg->getType()->isPointerType())
continue;
SVal argVal = C.getSVal(arg);
if (argVal.isUnknownOrUndef())
continue;
auto argDefinedVal = argVal.getAs<DefinedSVal>();
ProgramStateRef notNullState, nullState;
std::tie(notNullState, nullState) =
CM.assumeDual(C.getState(), *argDefinedVal);
if (!notNullState && nullState) {
ReportPrintfPointerConversionSpecifierNULL(C, nullState, arg);
return;
}
}
}
void UnixAPIPortabilityMinorChecker::checkPreStmt(const CallExpr *CE,
CheckerContext &C) const {
const FunctionDecl *FD = C.getCalleeDecl(CE);
if (!FD || FD->getKind() != Decl::Function)
return;
// Don't treat functions in namespaces with the same name a Unix function
// as a call to the Unix function.
const DeclContext *NamespaceCtx = FD->getEnclosingNamespaceContext();
if (isa_and_nonnull<NamespaceDecl>(NamespaceCtx))
return;
StringRef FName = C.getCalleeName(FD);
if (FName.empty())
return;
if (FName == "printf")
CheckPrintfPointerConversionSpecifierNULL(C, CE, 1);
steakhalUnsubmitted
Not Done
ReplyInline Actions

For matching names, we usually use CallDescriptions to do it for us.
If think you could use them while also checking if the Call is a CallEvent::isGlobalCFunction(). I suspect, you only wanna check those.
I think you should define a CallDescriptionMap, because you will also need your specific data_arg_index...
Look for uses of such maps and you will get inspired.

steakhal: For matching names, we usually use `CallDescriptions` to do it for us. If think you could use…
else if (FName == "fprintf" || FName == "sprintf")
CheckPrintfPointerConversionSpecifierNULL(C, CE, 2);
else if (FName == "snprintf")
CheckPrintfPointerConversionSpecifierNULL(C, CE, 3);
}
//===----------------------------------------------------------------------===//
// Registration. // Registration.
//===----------------------------------------------------------------------===// //===----------------------------------------------------------------------===//
#define REGISTER_CHECKER(CHECKERNAME) \ #define REGISTER_CHECKER(CHECKERNAME) \
void ento::register##CHECKERNAME(CheckerManager &mgr) { \ void ento::register##CHECKERNAME(CheckerManager &mgr) { \
mgr.registerChecker<CHECKERNAME>(); \ mgr.registerChecker<CHECKERNAME>(); \
} \ } \
\ \
bool ento::shouldRegister##CHECKERNAME(const CheckerManager &mgr) { \ bool ento::shouldRegister##CHECKERNAME(const CheckerManager &mgr) { \
return true; \ return true; \
} }
REGISTER_CHECKER(UnixAPIMisuseChecker) REGISTER_CHECKER(UnixAPIMisuseChecker)
REGISTER_CHECKER(UnixAPIPortabilityChecker) REGISTER_CHECKER(UnixAPIPortabilityChecker)
REGISTER_CHECKER(UnixAPIPortabilityMinorChecker)

clang/test/Analysis/Inputs/expected-plists/unix-fns.c.plist

Show All 10 Lines <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>82</integer> <key>line</key><integer>94</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>82</integer> <key>line</key><integer>94</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>9</integer> <key>col</key><integer>9</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Assuming &apos;fd&apos; is not equal to 0</string> <string>Assuming &apos;fd&apos; is not equal to 0</string>
<key>message</key> <key>message</key>
<string>Assuming &apos;fd&apos; is not equal to 0</string> <string>Assuming &apos;fd&apos; is not equal to 0</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>84</integer> <key>line</key><integer>96</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>11</integer> <key>col</key><integer>11</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>19</integer> <key>col</key><integer>19</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>25</integer> <key>col</key><integer>25</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;open&apos; requires a 3rd argument when the &apos;O_CREAT&apos; flag is set</string> <string>Call to &apos;open&apos; requires a 3rd argument when the &apos;O_CREAT&apos; flag is set</string>
<key>message</key> <key>message</key>
<string>Call to &apos;open&apos; requires a 3rd argument when the &apos;O_CREAT&apos; flag is set</string> <string>Call to &apos;open&apos; requires a 3rd argument when the &apos;O_CREAT&apos; flag is set</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;open&apos; requires a 3rd argument when the &apos;O_CREAT&apos; flag is set</string> <key>description</key><string>Call to &apos;open&apos; requires a 3rd argument when the &apos;O_CREAT&apos; flag is set</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Improper use of &apos;open&apos;</string> <key>type</key><string>Improper use of &apos;open&apos;</string>
<key>check_name</key><string>unix.API</string> <key>check_name</key><string>unix.API</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>5ef25c5c47db3dbfb329901d426452e7</string> <key>issue_hash_content_of_line_in_context</key><string>5ef25c5c47db3dbfb329901d426452e7</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_open</string> <key>issue_context</key><string>test_open</string>
<key>issue_hash_function_offset</key><string>6</string> <key>issue_hash_function_offset</key><string>6</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>87</integer> <key>line</key><integer>99</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>81</integer> <integer>93</integer>
<integer>82</integer> <integer>94</integer>
<integer>83</integer> <integer>95</integer>
<integer>84</integer> <integer>96</integer>
<integer>87</integer> <integer>99</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>93</integer> <key>line</key><integer>105</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>93</integer> <key>line</key><integer>105</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>9</integer> <key>col</key><integer>9</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Assuming &apos;fd&apos; is not equal to 0</string> <string>Assuming &apos;fd&apos; is not equal to 0</string>
<key>message</key> <key>message</key>
<string>Assuming &apos;fd&apos; is not equal to 0</string> <string>Assuming &apos;fd&apos; is not equal to 0</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>95</integer> <key>line</key><integer>107</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>13</integer> <key>col</key><integer>13</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>44</integer> <key>col</key><integer>44</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>50</integer> <key>col</key><integer>50</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;openat&apos; requires a 4th argument when the &apos;O_CREAT&apos; flag is set</string> <string>Call to &apos;openat&apos; requires a 4th argument when the &apos;O_CREAT&apos; flag is set</string>
<key>message</key> <key>message</key>
<string>Call to &apos;openat&apos; requires a 4th argument when the &apos;O_CREAT&apos; flag is set</string> <string>Call to &apos;openat&apos; requires a 4th argument when the &apos;O_CREAT&apos; flag is set</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;openat&apos; requires a 4th argument when the &apos;O_CREAT&apos; flag is set</string> <key>description</key><string>Call to &apos;openat&apos; requires a 4th argument when the &apos;O_CREAT&apos; flag is set</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Improper use of &apos;open&apos;</string> <key>type</key><string>Improper use of &apos;open&apos;</string>
<key>check_name</key><string>unix.API</string> <key>check_name</key><string>unix.API</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>433b17840bb989e7a13dc6337c1ed220</string> <key>issue_hash_content_of_line_in_context</key><string>433b17840bb989e7a13dc6337c1ed220</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_open_at</string> <key>issue_context</key><string>test_open_at</string>
<key>issue_hash_function_offset</key><string>6</string> <key>issue_hash_function_offset</key><string>6</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>98</integer> <key>line</key><integer>110</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>92</integer> <integer>104</integer>
<integer>93</integer> <integer>105</integer>
<integer>94</integer> <integer>106</integer>
<integer>95</integer> <integer>107</integer>
<integer>98</integer> <integer>110</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>104</integer> <key>line</key><integer>116</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>104</integer> <key>line</key><integer>116</integer>
<key>col</key><integer>17</integer> <key>col</key><integer>17</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>9</integer> <key>col</key><integer>9</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>9</integer> <key>col</key><integer>9</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>52</integer> <key>col</key><integer>52</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>64</integer> <key>col</key><integer>64</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>52</integer> <key>col</key><integer>52</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>66</integer> <key>col</key><integer>66</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>72</integer> <key>col</key><integer>72</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
<key>message</key> <key>message</key>
<string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <key>description</key><string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
<key>category</key><string>API Misuse (Apple)</string> <key>category</key><string>API Misuse (Apple)</string>
<key>type</key><string>Improper use of &apos;dispatch_once&apos;</string> <key>type</key><string>Improper use of &apos;dispatch_once&apos;</string>
<key>check_name</key><string>osx.API</string> <key>check_name</key><string>osx.API</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>3c7c4524233ba46b615e7c4c2ce7c20d</string> <key>issue_hash_content_of_line_in_context</key><string>3c7c4524233ba46b615e7c4c2ce7c20d</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_dispatch_once</string> <key>issue_context</key><string>test_dispatch_once</string>
<key>issue_hash_function_offset</key><string>2</string> <key>issue_hash_function_offset</key><string>2</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>105</integer> <key>line</key><integer>117</integer>
<key>col</key><integer>52</integer> <key>col</key><integer>52</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>103</integer> <integer>115</integer>
<integer>104</integer> <integer>116</integer>
<integer>105</integer> <integer>117</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>115</integer> <key>line</key><integer>127</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>115</integer> <key>line</key><integer>127</integer>
<key>col</key><integer>16</integer> <key>col</key><integer>16</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>116</integer> <key>line</key><integer>128</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>116</integer> <key>line</key><integer>128</integer>
<key>col</key><integer>14</integer> <key>col</key><integer>14</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>116</integer> <key>line</key><integer>128</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>116</integer> <key>line</key><integer>128</integer>
<key>col</key><integer>16</integer> <key>col</key><integer>16</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>116</integer> <key>line</key><integer>128</integer>
<key>col</key><integer>20</integer> <key>col</key><integer>20</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;pthread_once&apos; uses the local variable &apos;pred&apos; for the &quot;control&quot; value. Using such transient memory for the control value is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <string>Call to &apos;pthread_once&apos; uses the local variable &apos;pred&apos; for the &quot;control&quot; value. Using such transient memory for the control value is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
<key>message</key> <key>message</key>
<string>Call to &apos;pthread_once&apos; uses the local variable &apos;pred&apos; for the &quot;control&quot; value. Using such transient memory for the control value is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <string>Call to &apos;pthread_once&apos; uses the local variable &apos;pred&apos; for the &quot;control&quot; value. Using such transient memory for the control value is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;pthread_once&apos; uses the local variable &apos;pred&apos; for the &quot;control&quot; value. Using such transient memory for the control value is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <key>description</key><string>Call to &apos;pthread_once&apos; uses the local variable &apos;pred&apos; for the &quot;control&quot; value. Using such transient memory for the control value is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Improper use of &apos;pthread_once&apos;</string> <key>type</key><string>Improper use of &apos;pthread_once&apos;</string>
<key>check_name</key><string>unix.API</string> <key>check_name</key><string>unix.API</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>1e2f657a65cf8ee3c3ac2227de05ade4</string> <key>issue_hash_content_of_line_in_context</key><string>1e2f657a65cf8ee3c3ac2227de05ade4</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_pthread_once</string> <key>issue_context</key><string>test_pthread_once</string>
<key>issue_hash_function_offset</key><string>2</string> <key>issue_hash_function_offset</key><string>2</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>116</integer> <key>line</key><integer>128</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>114</integer> <integer>126</integer>
<integer>115</integer> <integer>127</integer>
<integer>116</integer> <integer>128</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>20</integer> <key>col</key><integer>20</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;malloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;malloc&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;malloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;malloc&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;malloc&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;malloc&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>4ddbefeb3fa802a0636dc63d679bdc89</string> <key>issue_hash_content_of_line_in_context</key><string>4ddbefeb3fa802a0636dc63d679bdc89</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>pr2899</string> <key>issue_context</key><string>pr2899</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>125</integer> <key>line</key><integer>137</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>124</integer> <integer>136</integer>
<integer>125</integer> <integer>137</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>20</integer> <key>col</key><integer>20</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>9f12ad2f0a645cb7e4485fed526f536e</string> <key>issue_hash_content_of_line_in_context</key><string>9f12ad2f0a645cb7e4485fed526f536e</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_calloc</string> <key>issue_context</key><string>test_calloc</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>137</integer> <key>line</key><integer>149</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>136</integer> <integer>148</integer>
<integer>137</integer> <integer>149</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>20</integer> <key>col</key><integer>20</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>26</integer> <key>col</key><integer>26</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>26</integer> <key>col</key><integer>26</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;calloc&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>835b2375daee5b05ac48f24ac578de4c</string> <key>issue_hash_content_of_line_in_context</key><string>835b2375daee5b05ac48f24ac578de4c</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_calloc2</string> <key>issue_context</key><string>test_calloc2</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>143</integer> <key>line</key><integer>155</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>142</integer> <integer>154</integer>
<integer>143</integer> <integer>155</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>21</integer> <key>col</key><integer>21</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>28</integer> <key>col</key><integer>28</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>28</integer> <key>col</key><integer>28</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;realloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;realloc&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;realloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;realloc&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;realloc&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;realloc&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>bbdabcb6c5a3783012ae34bfea2a10fb</string> <key>issue_hash_content_of_line_in_context</key><string>bbdabcb6c5a3783012ae34bfea2a10fb</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_realloc</string> <key>issue_context</key><string>test_realloc</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>155</integer> <key>line</key><integer>167</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>154</integer> <integer>166</integer>
<integer>155</integer> <integer>167</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>29</integer> <key>col</key><integer>29</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>29</integer> <key>col</key><integer>29</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;reallocf&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;reallocf&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;reallocf&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;reallocf&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;reallocf&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;reallocf&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>5d222055bbf58b08ec345f0ebfd7b9d1</string> <key>issue_hash_content_of_line_in_context</key><string>5d222055bbf58b08ec345f0ebfd7b9d1</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_reallocf</string> <key>issue_context</key><string>test_reallocf</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>161</integer> <key>line</key><integer>173</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>160</integer> <integer>172</integer>
<integer>161</integer> <integer>173</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>20</integer> <key>col</key><integer>20</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>f7bdefde93c0a58ec236918fb0c3a54e</string> <key>issue_hash_content_of_line_in_context</key><string>f7bdefde93c0a58ec236918fb0c3a54e</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_alloca</string> <key>issue_context</key><string>test_alloca</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>179</integer> <key>line</key><integer>191</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>178</integer> <integer>190</integer>
<integer>179</integer> <integer>191</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>16</integer> <key>col</key><integer>16</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>31</integer> <key>col</key><integer>31</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>16</integer> <key>col</key><integer>16</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>33</integer> <key>col</key><integer>33</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>33</integer> <key>col</key><integer>33</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;alloca&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>4247526f8da82479508f2d364c2992d5</string> <key>issue_hash_content_of_line_in_context</key><string>4247526f8da82479508f2d364c2992d5</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_builtin_alloca</string> <key>issue_context</key><string>test_builtin_alloca</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>191</integer> <key>line</key><integer>203</integer>
<key>col</key><integer>16</integer> <key>col</key><integer>16</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>190</integer> <integer>202</integer>
<integer>191</integer> <integer>203</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>20</integer> <key>col</key><integer>20</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>22</integer> <key>col</key><integer>22</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;valloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;valloc&apos; has an allocation size of 0 bytes</string>
<key>message</key> <key>message</key>
<string>Call to &apos;valloc&apos; has an allocation size of 0 bytes</string> <string>Call to &apos;valloc&apos; has an allocation size of 0 bytes</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;valloc&apos; has an allocation size of 0 bytes</string> <key>description</key><string>Call to &apos;valloc&apos; has an allocation size of 0 bytes</string>
<key>category</key><string>Unix API</string> <key>category</key><string>Unix API</string>
<key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string> <key>type</key><string>Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131)</string>
<key>check_name</key><string>optin.portability.UnixAPI</string> <key>check_name</key><string>optin.portability.UnixAPI</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>e16dfa9598fd2fafe6dc5563990c1dd3</string> <key>issue_hash_content_of_line_in_context</key><string>e16dfa9598fd2fafe6dc5563990c1dd3</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_valloc</string> <key>issue_context</key><string>test_valloc</string>
<key>issue_hash_function_offset</key><string>1</string> <key>issue_hash_function_offset</key><string>1</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>203</integer> <key>line</key><integer>215</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>202</integer> <integer>214</integer>
<integer>203</integer> <integer>215</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>216</integer> <key>line</key><integer>228</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>216</integer> <key>line</key><integer>228</integer>
<key>col</key><integer>17</integer> <key>col</key><integer>17</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>217</integer> <key>line</key><integer>229</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>217</integer> <key>line</key><integer>229</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>217</integer> <key>line</key><integer>229</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>217</integer> <key>line</key><integer>229</integer>
<key>col</key><integer>17</integer> <key>col</key><integer>17</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>217</integer> <key>line</key><integer>229</integer>
<key>col</key><integer>21</integer> <key>col</key><integer>21</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
<key>message</key> <key>message</key>
<string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string> <key>description</key><string>Call to &apos;dispatch_once&apos; uses the local variable &apos;pred&apos; for the predicate value. Using such transient memory for the predicate is potentially dangerous. Perhaps you intended to declare the variable as &apos;static&apos;?</string>
<key>category</key><string>API Misuse (Apple)</string> <key>category</key><string>API Misuse (Apple)</string>
<key>type</key><string>Improper use of &apos;dispatch_once&apos;</string> <key>type</key><string>Improper use of &apos;dispatch_once&apos;</string>
<key>check_name</key><string>osx.API</string> <key>check_name</key><string>osx.API</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>6fec229f3dde6d311481c6a64eeffefa</string> <key>issue_hash_content_of_line_in_context</key><string>6fec229f3dde6d311481c6a64eeffefa</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_dispatch_once_in_macro</string> <key>issue_context</key><string>test_dispatch_once_in_macro</string>
<key>issue_hash_function_offset</key><string>2</string> <key>issue_hash_function_offset</key><string>2</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>217</integer> <key>line</key><integer>229</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>215</integer> <integer>227</integer>
<integer>216</integer> <integer>228</integer>
<integer>217</integer> <integer>229</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>222</integer> <key>line</key><integer>234</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>222</integer> <key>line</key><integer>234</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>222</integer> <key>line</key><integer>234</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>&apos;p&apos; initialized to a null pointer value</string> <string>&apos;p&apos; initialized to a null pointer value</string>
<key>message</key> <key>message</key>
<string>&apos;p&apos; initialized to a null pointer value</string> <string>&apos;p&apos; initialized to a null pointer value</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>222</integer> <key>line</key><integer>234</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>222</integer> <key>line</key><integer>234</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>227</integer> <key>line</key><integer>239</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>&apos;p&apos; captured by block as a null pointer value</string> <string>&apos;p&apos; captured by block as a null pointer value</string>
<key>message</key> <key>message</key>
<string>&apos;p&apos; captured by block as a null pointer value</string> <string>&apos;p&apos; captured by block as a null pointer value</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>227</integer> <key>line</key><integer>239</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Calling &apos;dispatch_sync&apos;</string> <string>Calling &apos;dispatch_sync&apos;</string>
<key>message</key> <key>message</key>
<string>Calling &apos;dispatch_sync&apos;</string> <string>Calling &apos;dispatch_sync&apos;</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>227</integer> <key>line</key><integer>239</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>1</integer> <key>depth</key><integer>1</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Calling anonymous block</string> <string>Calling anonymous block</string>
<key>message</key> <key>message</key>
<string>Calling anonymous block</string> <string>Calling anonymous block</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>depth</key><integer>2</integer> <key>depth</key><integer>2</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Entered call from &apos;dispatch_sync&apos;</string> <string>Entered call from &apos;dispatch_sync&apos;</string>
<key>message</key> <key>message</key>
<string>Entered call from &apos;dispatch_sync&apos;</string> <string>Entered call from &apos;dispatch_sync&apos;</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>223</integer> <key>line</key><integer>235</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>2</integer> <key>depth</key><integer>2</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Assuming &apos;q&apos; is non-null</string> <string>Assuming &apos;q&apos; is non-null</string>
<key>message</key> <key>message</key>
<string>Assuming &apos;q&apos; is non-null</string> <string>Assuming &apos;q&apos; is non-null</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>224</integer> <key>line</key><integer>236</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>2</integer> <key>depth</key><integer>2</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
<key>message</key> <key>message</key>
<string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <key>description</key><string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
<key>category</key><string>Logic error</string> <key>category</key><string>Logic error</string>
<key>type</key><string>Dereference of null pointer</string> <key>type</key><string>Dereference of null pointer</string>
<key>check_name</key><string>core.NullDereference</string> <key>check_name</key><string>core.NullDereference</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>5d3f4c433004c7a6d4a06aa30cc3ea85</string> <key>issue_hash_content_of_line_in_context</key><string>5d3f4c433004c7a6d4a06aa30cc3ea85</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>225</integer> <key>line</key><integer>237</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>40</integer> <integer>40</integer>
<integer>221</integer> <integer>233</integer>
<integer>222</integer> <integer>234</integer>
<integer>223</integer> <integer>235</integer>
<integer>224</integer> <integer>236</integer>
<integer>225</integer> <integer>237</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>232</integer> <key>line</key><integer>244</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>232</integer> <key>line</key><integer>244</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>233</integer> <key>line</key><integer>245</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>233</integer> <key>line</key><integer>245</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>233</integer> <key>line</key><integer>245</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>233</integer> <key>line</key><integer>245</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>233</integer> <key>line</key><integer>245</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>&apos;p&apos; initialized to a null pointer value</string> <string>&apos;p&apos; initialized to a null pointer value</string>
<key>message</key> <key>message</key>
<string>&apos;p&apos; initialized to a null pointer value</string> <string>&apos;p&apos; initialized to a null pointer value</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>233</integer> <key>line</key><integer>245</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>233</integer> <key>line</key><integer>245</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>236</integer> <key>line</key><integer>248</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>&apos;p&apos; captured by block as a null pointer value</string> <string>&apos;p&apos; captured by block as a null pointer value</string>
<key>message</key> <key>message</key>
<string>&apos;p&apos; captured by block as a null pointer value</string> <string>&apos;p&apos; captured by block as a null pointer value</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>236</integer> <key>line</key><integer>248</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Calling &apos;_dispatch_once&apos;</string> <string>Calling &apos;_dispatch_once&apos;</string>
▲ Show 20 Lines • Show All 139 Lines • ▼ Show 20 Lines <array>
<string>Calling anonymous block</string> <string>Calling anonymous block</string>
<key>message</key> <key>message</key>
<string>Calling anonymous block</string> <string>Calling anonymous block</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>depth</key><integer>3</integer> <key>depth</key><integer>3</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Entered call from &apos;dispatch_once&apos;</string> <string>Entered call from &apos;dispatch_once&apos;</string>
<key>message</key> <key>message</key>
<string>Entered call from &apos;dispatch_once&apos;</string> <string>Entered call from &apos;dispatch_once&apos;</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>234</integer> <key>line</key><integer>246</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>5</integer> <key>col</key><integer>5</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>3</integer> <key>depth</key><integer>3</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
<key>message</key> <key>message</key>
<string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <key>description</key><string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
<key>category</key><string>Logic error</string> <key>category</key><string>Logic error</string>
<key>type</key><string>Dereference of null pointer</string> <key>type</key><string>Dereference of null pointer</string>
<key>check_name</key><string>core.NullDereference</string> <key>check_name</key><string>core.NullDereference</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>265c4fd608dafee211bfa93d21c28866</string> <key>issue_hash_content_of_line_in_context</key><string>265c4fd608dafee211bfa93d21c28866</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>235</integer> <key>line</key><integer>247</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>44</integer> <integer>44</integer>
<integer>45</integer> <integer>45</integer>
<integer>46</integer> <integer>46</integer>
<integer>47</integer> <integer>47</integer>
<integer>48</integer> <integer>48</integer>
<integer>52</integer> <integer>52</integer>
<integer>53</integer> <integer>53</integer>
<integer>54</integer> <integer>54</integer>
<integer>55</integer> <integer>55</integer>
<integer>56</integer> <integer>56</integer>
<integer>57</integer> <integer>57</integer>
<integer>58</integer> <integer>58</integer>
<integer>59</integer> <integer>59</integer>
<integer>60</integer> <integer>60</integer>
<integer>61</integer> <integer>61</integer>
<integer>231</integer> <integer>243</integer>
<integer>232</integer> <integer>244</integer>
<integer>233</integer> <integer>245</integer>
<integer>234</integer> <integer>246</integer>
<integer>235</integer> <integer>247</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
<dict> <dict>
<key>path</key> <key>path</key>
<array> <array>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>241</integer> <key>line</key><integer>253</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>241</integer> <key>line</key><integer>253</integer>
<key>col</key><integer>8</integer> <key>col</key><integer>8</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>245</integer> <key>line</key><integer>257</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Calling &apos;_dispatch_once&apos;</string> <string>Calling &apos;_dispatch_once&apos;</string>
▲ Show 20 Lines • Show All 139 Lines • ▼ Show 20 Lines <array>
<string>Calling anonymous block</string> <string>Calling anonymous block</string>
<key>message</key> <key>message</key>
<string>Calling anonymous block</string> <string>Calling anonymous block</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>depth</key><integer>3</integer> <key>depth</key><integer>3</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Entered call from &apos;dispatch_once&apos;</string> <string>Entered call from &apos;dispatch_once&apos;</string>
<key>message</key> <key>message</key>
<string>Entered call from &apos;dispatch_once&apos;</string> <string>Entered call from &apos;dispatch_once&apos;</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>24</integer> <key>col</key><integer>24</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>244</integer> <key>line</key><integer>256</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>244</integer> <key>line</key><integer>256</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>244</integer> <key>line</key><integer>256</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>244</integer> <key>line</key><integer>256</integer>
<key>col</key><integer>7</integer> <key>col</key><integer>7</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>244</integer> <key>line</key><integer>256</integer>
<key>col</key><integer>11</integer> <key>col</key><integer>11</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>3</integer> <key>depth</key><integer>3</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Null pointer value stored to &apos;p&apos;</string> <string>Null pointer value stored to &apos;p&apos;</string>
▲ Show 20 Lines • Show All 91 Lines • ▼ Show 20 Lines <key>edges</key>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>245</integer> <key>line</key><integer>257</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Returning from &apos;_dispatch_once&apos;</string> <string>Returning from &apos;_dispatch_once&apos;</string>
<key>message</key> <key>message</key>
<string>Returning from &apos;_dispatch_once&apos;</string> <string>Returning from &apos;_dispatch_once&apos;</string>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>243</integer> <key>line</key><integer>255</integer>
<key>col</key><integer>15</integer> <key>col</key><integer>15</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>control</string> <key>kind</key><string>control</string>
<key>edges</key> <key>edges</key>
<array> <array>
<dict> <dict>
<key>start</key> <key>start</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>3</integer> <key>col</key><integer>3</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
<key>end</key> <key>end</key>
<array> <array>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</dict> </dict>
</array> </array>
</dict> </dict>
<dict> <dict>
<key>kind</key><string>event</string> <key>kind</key><string>event</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ranges</key> <key>ranges</key>
<array> <array>
<array> <array>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>4</integer> <key>col</key><integer>4</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
</array> </array>
</array> </array>
<key>depth</key><integer>0</integer> <key>depth</key><integer>0</integer>
<key>extended_message</key> <key>extended_message</key>
<string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
<key>message</key> <key>message</key>
<string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
</dict> </dict>
</array> </array>
<key>description</key><string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string> <key>description</key><string>Dereference of null pointer (loaded from variable &apos;p&apos;)</string>
<key>category</key><string>Logic error</string> <key>category</key><string>Logic error</string>
<key>type</key><string>Dereference of null pointer</string> <key>type</key><string>Dereference of null pointer</string>
<key>check_name</key><string>core.NullDereference</string> <key>check_name</key><string>core.NullDereference</string>
<!-- This hash is experimental and going to change! --> <!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>1e83bd4361a2351df0b4e77eb3a9109b</string> <key>issue_hash_content_of_line_in_context</key><string>1e83bd4361a2351df0b4e77eb3a9109b</string>
<key>issue_context_kind</key><string>function</string> <key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_inline_dispatch_once_reachable</string> <key>issue_context</key><string>test_inline_dispatch_once_reachable</string>
<key>issue_hash_function_offset</key><string>7</string> <key>issue_hash_function_offset</key><string>7</string>
<key>location</key> <key>location</key>
<dict> <dict>
<key>line</key><integer>247</integer> <key>line</key><integer>259</integer>
<key>col</key><integer>6</integer> <key>col</key><integer>6</integer>
<key>file</key><integer>0</integer> <key>file</key><integer>0</integer>
</dict> </dict>
<key>ExecutedLines</key> <key>ExecutedLines</key>
<dict> <dict>
<key>0</key> <key>0</key>
<array> <array>
<integer>44</integer> <integer>44</integer>
<integer>45</integer> <integer>45</integer>
<integer>46</integer> <integer>46</integer>
<integer>47</integer> <integer>47</integer>
<integer>48</integer> <integer>48</integer>
<integer>52</integer> <integer>52</integer>
<integer>53</integer> <integer>53</integer>
<integer>54</integer> <integer>54</integer>
<integer>55</integer> <integer>55</integer>
<integer>56</integer> <integer>56</integer>
<integer>57</integer> <integer>57</integer>
<integer>58</integer> <integer>58</integer>
<integer>59</integer> <integer>59</integer>
<integer>60</integer> <integer>60</integer>
<integer>61</integer> <integer>61</integer>
<integer>65</integer> <integer>65</integer>
<integer>240</integer> <integer>252</integer>
<integer>241</integer> <integer>253</integer>
<integer>242</integer> <integer>254</integer>
<integer>243</integer> <integer>255</integer>
<integer>244</integer> <integer>256</integer>
<integer>247</integer> <integer>259</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>18</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>21</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>db94ddef9279d52c58cc50cec30cd2af</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_family_pointer_conversion_specifier_null</string>
<key>issue_hash_function_offset</key><string>1</string>
<key>location</key>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>263</integer>
<integer>264</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>265</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>265</integer>
<key>col</key><integer>9</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>265</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>265</integer>
<key>col</key><integer>25</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>265</integer>
<key>col</key><integer>28</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>576efe98089160335d4a3bcd10b1b181</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_family_pointer_conversion_specifier_null</string>
<key>issue_hash_function_offset</key><string>2</string>
<key>location</key>
<dict>
<key>line</key><integer>265</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>263</integer>
<integer>264</integer>
<integer>265</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>266</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>266</integer>
<key>col</key><integer>9</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>266</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>266</integer>
<key>col</key><integer>24</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>266</integer>
<key>col</key><integer>27</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>ad6749525605b28b32e53acc8b1e18b9</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_family_pointer_conversion_specifier_null</string>
<key>issue_hash_function_offset</key><string>3</string>
<key>location</key>
<dict>
<key>line</key><integer>266</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>263</integer>
<integer>264</integer>
<integer>265</integer>
<integer>266</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>264</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>267</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>267</integer>
<key>col</key><integer>10</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>267</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>267</integer>
<key>col</key><integer>35</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>267</integer>
<key>col</key><integer>38</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>54fb0a45df1429bd887168e981f3e75f</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_family_pointer_conversion_specifier_null</string>
<key>issue_hash_function_offset</key><string>4</string>
<key>location</key>
<dict>
<key>line</key><integer>267</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>263</integer>
<integer>264</integer>
<integer>265</integer>
<integer>266</integer>
<integer>267</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>18</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>21</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>f48edcbad59cb35eb96d9f91e45b5ee2</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_pointer_conversion_specifier_null_various_arguments</string>
<key>issue_hash_function_offset</key><string>1</string>
<key>location</key>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>271</integer>
<integer>272</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>273</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>273</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>273</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>273</integer>
<key>col</key><integer>21</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>273</integer>
<key>col</key><integer>24</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>2c8f205bfd645b95e654822583484bbc</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_pointer_conversion_specifier_null_various_arguments</string>
<key>issue_hash_function_offset</key><string>2</string>
<key>location</key>
<dict>
<key>line</key><integer>273</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>271</integer>
<integer>272</integer>
<integer>273</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>274</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>274</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>274</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>274</integer>
<key>col</key><integer>21</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>274</integer>
<key>col</key><integer>24</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>b30cf691d57223d55a8659a6d0f15ea4</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_pointer_conversion_specifier_null_various_arguments</string>
<key>issue_hash_function_offset</key><string>3</string>
<key>location</key>
<dict>
<key>line</key><integer>274</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>271</integer>
<integer>272</integer>
<integer>273</integer>
<integer>274</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>275</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>275</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>275</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>275</integer>
<key>col</key><integer>18</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>275</integer>
<key>col</key><integer>21</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>16c983c9812d1806a931464062665c99</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_pointer_conversion_specifier_null_various_arguments</string>
<key>issue_hash_function_offset</key><string>4</string>
<key>location</key>
<dict>
<key>line</key><integer>275</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>271</integer>
<integer>272</integer>
<integer>273</integer>
<integer>274</integer>
<integer>275</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>272</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>276</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>276</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>276</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>276</integer>
<key>col</key><integer>18</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>276</integer>
<key>col</key><integer>21</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>7ee86631018956410c3010d7d3583032</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>test_printf_pointer_conversion_specifier_null_various_arguments</string>
<key>issue_hash_function_offset</key><string>5</string>
<key>location</key>
<dict>
<key>line</key><integer>276</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>271</integer>
<integer>272</integer>
<integer>273</integer>
<integer>274</integer>
<integer>275</integer>
<integer>276</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>282</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>282</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>282</integer>
<key>col</key><integer>16</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>&apos;pointer2&apos; initialized to a null pointer value</string>
<key>message</key>
<string>&apos;pointer2&apos; initialized to a null pointer value</string>
</dict>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>282</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>282</integer>
<key>col</key><integer>6</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>283</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>283</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>283</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>283</integer>
<key>col</key><integer>18</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>283</integer>
<key>col</key><integer>25</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>980fc6a365f71e954883763d651b1879</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>printf_pointer_conversion_specifier_null_pointer_constraint</string>
<key>issue_hash_function_offset</key><string>2</string>
<key>location</key>
<dict>
<key>line</key><integer>283</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>281</integer>
<integer>282</integer>
<integer>283</integer>
</array>
</dict>
</dict>
<dict>
<key>path</key>
<array>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>282</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>282</integer>
<key>col</key><integer>6</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>4</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>4</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>7</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>14</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>7</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>7</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>22</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>Assuming &apos;pointer1&apos; is equal to NULL</string>
<key>message</key>
<string>Assuming &apos;pointer1&apos; is equal to NULL</string>
</dict>
<dict>
<key>kind</key><string>control</string>
<key>edges</key>
<array>
<dict>
<key>start</key>
<array>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>7</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>284</integer>
<key>col</key><integer>14</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
<key>end</key>
<array>
<dict>
<key>line</key><integer>288</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>288</integer>
<key>col</key><integer>8</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</dict>
</array>
</dict>
<dict>
<key>kind</key><string>event</string>
<key>location</key>
<dict>
<key>line</key><integer>288</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ranges</key>
<array>
<array>
<dict>
<key>line</key><integer>288</integer>
<key>col</key><integer>18</integer>
<key>file</key><integer>0</integer>
</dict>
<dict>
<key>line</key><integer>288</integer>
<key>col</key><integer>25</integer>
<key>file</key><integer>0</integer>
</dict>
</array>
</array>
<key>depth</key><integer>0</integer>
<key>extended_message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>message</key>
<string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
</dict>
</array>
<key>description</key><string>The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined</string>
<key>category</key><string>Unix API</string>
<key>type</key><string>Passing a null pointer to the pointer conversion specifier of the printf family of functions</string>
<key>check_name</key><string>optin.portabilityMinor.UnixAPI</string>
<!-- This hash is experimental and going to change! -->
<key>issue_hash_content_of_line_in_context</key><string>bf97b4481244b16eb8e34e9ce629c3a6</string>
<key>issue_context_kind</key><string>function</string>
<key>issue_context</key><string>printf_pointer_conversion_specifier_null_pointer_constraint</string>
<key>issue_hash_function_offset</key><string>7</string>
<key>location</key>
<dict>
<key>line</key><integer>288</integer>
<key>col</key><integer>3</integer>
<key>file</key><integer>0</integer>
</dict>
<key>ExecutedLines</key>
<dict>
<key>0</key>
<array>
<integer>281</integer>
<integer>282</integer>
<integer>283</integer>
<integer>284</integer>
<integer>288</integer>
</array> </array>
</dict> </dict>
</dict> </dict>
</array> </array>
<key>files</key> <key>files</key>
<array> <array>
</array> </array>
</dict> </dict>
</plist> </plist>

clang/test/Analysis/unix-fns.c

// RUN: %clang_analyze_cc1 -triple x86_64-apple-darwin10 -analyzer-checker=core,unix.API,osx.API,optin.portability %s -analyzer-output=plist -analyzer-config faux-bodies=true -fblocks -verify -o %t.plist // RUN: %clang_analyze_cc1 -triple x86_64-apple-darwin10 -analyzer-checker=core,unix.API,osx.API,optin.portability,optin.portabilityMinor %s -analyzer-output=plist -analyzer-config faux-bodies=true -fblocks -verify -o %t.plist
// RUN: %normalize_plist <%t.plist | diff -ub %S/Inputs/expected-plists/unix-fns.c.plist - // RUN: %normalize_plist <%t.plist | diff -ub %S/Inputs/expected-plists/unix-fns.c.plist -
// RUN: mkdir -p %t.dir // RUN: mkdir -p %t.dir
// RUN: %clang_analyze_cc1 -analyzer-checker=core,unix.API,osx.API,optin.portability -analyzer-output=html -analyzer-config faux-bodies=true -fblocks -o %t.dir %s // RUN: %clang_analyze_cc1 -analyzer-checker=core,unix.API,osx.API,optin.portability -analyzer-output=html -analyzer-config faux-bodies=true -fblocks -o %t.dir %s
// RUN: rm -fR %t.dir // RUN: rm -fR %t.dir
struct _opaque_pthread_once_t { struct _opaque_pthread_once_t {
long __sig; long __sig;
▲ Show 20 Lines • Show All 63 Lines • ▼ Show 20 Lines
#ifndef O_CREAT #ifndef O_CREAT
#define O_CREAT 0x0200 #define O_CREAT 0x0200
#define O_RDONLY 0x0000 #define O_RDONLY 0x0000
#endif #endif
int open(const char *, int, ...); int open(const char *, int, ...);
int openat(int, const char *, int, ...); int openat(int, const char *, int, ...);
int close(int fildes); int close(int fildes);
#ifndef NULL
#define NULL ((void*) 0)
#endif
struct FILE_t;
typedef struct FILE_t FILE;
int printf( const char *, ... );
int fprintf(FILE *, const char *, ...);
int sprintf(char *, const char *, ...);
int snprintf(char *, size_t, const char *, ...);
steakhalUnsubmitted
Not Done
ReplyInline Actions

I'd highly recommend not touching this file to avoid the bulk change in the expected plist output. Please just introduce a new test file.

steakhal: I'd highly recommend not touching this file to avoid the bulk change in the expected plist…
void test_open(const char *path) { void test_open(const char *path) {
int fd; int fd;
fd = open(path, O_RDONLY); // no-warning fd = open(path, O_RDONLY); // no-warning
if (!fd) if (!fd)
close(fd); close(fd);
fd = open(path, O_CREAT); // expected-warning{{Call to 'open' requires a 3rd argument when the 'O_CREAT' flag is set}} fd = open(path, O_CREAT); // expected-warning{{Call to 'open' requires a 3rd argument when the 'O_CREAT' flag is set}}
if (!fd) if (!fd)
▲ Show 20 Lines • Show All 152 Lines • ▼ Show 20 Linesvoid test_inline_dispatch_once_reachable(void) {
static dispatch_once_t pred; static dispatch_once_t pred;
__block int *p; __block int *p;
dispatch_once(&pred, ^(void) { dispatch_once(&pred, ^(void) {
p = 0; p = 0;
}); });
*p = 7; // expected-warning {{Dereference of null pointer (loaded from variable 'p')}} *p = 7; // expected-warning {{Dereference of null pointer (loaded from variable 'p')}}
} }
// Test basic case for the whole print family.
void test_printf_family_pointer_conversion_specifier_null(FILE *file, char *buf, size_t buf_size, char *format) {
printf(format, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
fprintf(file, format, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
sprintf(buf, format, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
snprintf(buf, buf_size, format, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
}
// Test various arguments.
void test_printf_pointer_conversion_specifier_null_various_arguments(char *format) {
printf(format, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
printf(format, 1, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
printf(format, 1, NULL, 2); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
printf(format, NULL, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
printf(format, NULL, 1, NULL); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
printf(format, 0); // no-warning
}
// Test pointer constraint.
void printf_pointer_conversion_specifier_null_pointer_constraint(char *format, void *pointer1) {
void *pointer2 = NULL;
printf(format, pointer2); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
if (pointer1 != NULL) {
printf(format, pointer1); // no-warning
return;
}
printf(format, pointer1); // expected-warning{{The result of passing a null pointer to the pointer conversion specifier of the printf family of functions is implementation defined}}
}
steakhalUnsubmitted
Not Done
ReplyInline Actions

I would appreciate a test demonstrating that the pointer argument won't get constrained after the printf call. I think such case was already discussed.

We should also demonstrate that unknown pointers (which doesn't known to be neither null, nor non-null) won't raise issues.

In the checker-logic, we have the data_args_index for each printf-like function.
Can you demonstrate that each is handled as expected?

Also have a test when the formatstring itself is null.

steakhal: I would appreciate a test demonstrating that the pointer argument won't get constrained after…