ABV.GENERAL: Array 'options' of size 68 may use index value(s) 68..USHRT_MAX : C and C++ : dhcp.c : Critical (1) : Analyze : Local ABV.GENERAL: Array 'options' of size 68 may use index value(s) 68..USHRT_MAX. Also there are 2 similar errors on line(s) 1299, 1300. : C and C++ : dhcp.c : Critical (1) : Analyze : Local ABV.GENERAL: Array 'hwaddr' of size 6 may use index value(s) 6..15 : C and C++ : dhcp.c : Critical (1) : Analyze : Local INFINITE_LOOP.LOCAL: Infinite loop : C and C++ : tcpip.c : Error (2) : Analyze : Local NPD.CHECK.CALL.MIGHT: Pointer 'netif' checked for NULL at line 885 may be passed to function and may be dereferenced there by passing argument 2 to function 'ip4_addr_isbroadcast' at line 902. : C and C++ : etharp.c : Critical (1) : Analyze : Local NPD.CHECK.CALL.MUST: Pointer 'prev' checked for NULL at line 166 will be passed to function and may be dereferenced there by passing argument 2 to function 'ip_reass_dequeue_datagram' at line 203. : C and C++ : ip_frag.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'pcb' checked for NULL at line 222 may be dereferenced at line 233. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'to' checked for NULL at line 820 may be dereferenced at line 822. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'netif' checked for NULL at line 321 may be dereferenced at line 342. : C and C++ : ethernetif.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'eth_ret' checked for NULL at line 608 may be dereferenced at line 615. : C and C++ : etharp.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'ip_ret' checked for NULL at line 608 may be dereferenced at line 616. : C and C++ : etharp.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'ipaddr' checked for NULL at line 887 may be dereferenced at line 902. : C and C++ : etharp.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'netif' checked for NULL at line 885 may be dereferenced at line 921. Also there is one similar error on line 979. : C and C++ : etharp.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'q' checked for NULL at line 886 may be dereferenced at line 954. Also there are 2 similar errors on line(s) 968, 979. : C and C++ : etharp.c : Critical (1) : Analyze : Local NPD.CHECK.MIGHT: Pointer 'netif' checked for NULL at line 1189 may be dereferenced at line 1209. : C and C++ : etharp.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'inseg.p' checked for NULL at line 1174 will be dereferenced at line 1176. : C and C++ : tcp_in.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn' checked for NULL at line 156 will be dereferenced at line 158. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn' checked for NULL at line 223 will be dereferenced at line 225. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn' checked for NULL at line 282 will be dereferenced at line 284. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn' checked for NULL at line 318 will be dereferenced at line 320. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn' checked for NULL at line 354 will be dereferenced at line 356. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn->current_msg' checked for NULL at line 395 will be dereferenced at line 396. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn' checked for NULL at line 752 will be dereferenced at line 753. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn->current_msg' checked for NULL at line 756 will be dereferenced at line 758. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn->pcb.tcp' checked for NULL at line 755 will be dereferenced at line 766. Also there is one similar error on line 768. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn' checked for NULL at line 1219 will be dereferenced at line 1220. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn->current_msg' checked for NULL at line 1221 will be dereferenced at line 1224. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'conn->pcb.tcp' checked for NULL at line 1222 will be dereferenced at line 1253. : C and C++ : api_msg.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'newconn' checked for NULL at line 346 will be dereferenced at line 348. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'addrlen' checked for NULL at line 363 will be dereferenced at line 370. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'buf' checked for NULL at line 625 will be dereferenced at line 632. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'p' checked for NULL at line 625 will be dereferenced at line 634. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'sock' checked for NULL at line 1157 will be dereferenced at line 1159. Also there is one similar error on line 1191. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'data' checked for NULL at line 1665 will be dereferenced at line 1668. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'data' checked for NULL at line 2082 will be dereferenced at line 2085. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'prev' checked for NULL at line 313 will be dereferenced at line 314. : C and C++ : ip_frag.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'ipr->p' checked for NULL at line 444 will be dereferenced at line 446. : C and C++ : ip_frag.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'pcr' checked for NULL at line 643 will be dereferenced at line 645. : C and C++ : ip_frag.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'netif' checked for NULL at line 589 will be dereferenced at line 591. : C and C++ : dhcp.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'dhcp' checked for NULL at line 590 will be dereferenced at line 594. : C and C++ : dhcp.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'netif' checked for NULL at line 608 will be dereferenced at line 610. : C and C++ : dhcp.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'dhcp->msg_out' checked for NULL at line 1759 will be dereferenced at line 1761. : C and C++ : dhcp.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'init' checked for NULL at line 143 will be dereferenced at line 184. : C and C++ : netif.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'buf' checked for NULL at line 409 will be dereferenced at line 410. : C and C++ : api_lib.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'p' checked for NULL at line 436 will be dereferenced at line 437. : C and C++ : pbuf.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'q' checked for NULL at line 464 will be dereferenced at line 456. Also there is one similar error on line 477. : C and C++ : pbuf.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'pc->custom_free_function' checked for NULL at line 664 will be dereferenced at line 665. : C and C++ : pbuf.c : Critical (1) : Analyze : Local NPD.CHECK.MUST: Pointer 'p' checked for NULL at line 982 will be dereferenced at line 984. : C and C++ : pbuf.c : Critical (1) : Analyze : Local NPD.FUNC.MIGHT: Pointer 'buf' returned from call to function 'sys_arch_mbox_fetch' at line 371 may be NULL and may be dereferenced at line 410. : C and C++ : api_lib.c : Critical (1) : Analyze : Local NPD.FUNC.MUST: Pointer 'sock' returned from call to function 'tryget_socket' at line 1156 may be NULL and will be dereferenced at line 1159. Also there is one similar error on line 1191. : C and C++ : sockets.c : Critical (1) : Analyze : Local NPD.FUNC.MUST: Pointer 'msg' returned from call to function 'sys_timeouts_mbox_fetch' at line 91 may be NULL and will be dereferenced at line 93. : C and C++ : tcpip.c : Critical (1) : Analyze : Local NPD.FUNC.MUST: Pointer 'frame.descriptor' returned from call to function 'ETH_RxPkt_ChainMode' at line 236 may be NULL and will be dereferenced at line 257. : C and C++ : ethernetif.c : Critical (1) : Analyze : Local NPD.FUNC.MUST: Pointer 'q' returned from call to function 'mem_trim' at line 473 may be NULL and will be dereferenced at line 477. : C and C++ : pbuf.c : Critical (1) : Analyze : Local NPD.GEN.CALL.MIGHT: Null pointer 'prev' that comes from line 124 may be passed to function and can be dereferenced there by passing argument 2 to function 'ip_reass_free_complete_datagram' at line 143. : C and C++ : ip_frag.c : Critical (1) : Analyze : Local NPD.GEN.CALL.MIGHT: Null pointer 'prev' that comes from line 234 may be passed to function and can be dereferenced there by passing argument 2 to function 'ip_reass_free_complete_datagram' at line 254. : C and C++ : ip_frag.c : Critical (1) : Analyze : Local NPD.GEN.CALL.MIGHT: Null pointer 'ipr_prev' that comes from line 484 may be passed to function and can be dereferenced there by passing argument 2 to function 'ip_reass_dequeue_datagram' at line 596. : C and C++ : ip_frag.c : Critical (1) : Analyze : Local RNPD.DEREF: Suspicious dereference of pointer 'conn' before NULL check at line 165 : C and C++ : api_msg.c : Critical (1) : Analyze : Local RNPD.DEREF: Suspicious dereference of pointer 'conn' before NULL check at line 227 : C and C++ : api_msg.c : Critical (1) : Analyze : Local RNPD.DEREF: Suspicious dereference of pointer 'conn' before NULL check at line 326 : C and C++ : api_msg.c : Critical (1) : Analyze : Local RNPD.DEREF: Suspicious dereference of pointer 'conn->current_msg' before NULL check at line 1221 : C and C++ : api_msg.c : Critical (1) : Analyze : Local RNPD.DEREF: Suspicious dereference of pointer 'ipr->p' before NULL check at line 444 : C and C++ : ip_frag.c : Critical (1) : Analyze : Local UNINIT.STACK.ARRAY.MIGHT: 'parts' array elements might be used uninitialized in this function. Also there are 2 similar errors on line(s) 233, 240. : C and C++ : ip_addr.c : Critical (1) : Analyze : Local