Hello,

Building Octave with the CodeQL analyzer on GitHub gives the following alert in
a header from gnulib:

Returning stack-allocated memory

libgnu/gettext.h:254
May return stack-allocated memory from msg_ctxt_id.


If I'm reading that file correctly, "translation" got assigned with
"msg_ctxt_id".  The latter is either a VLA which is out of scope when the
function returns, or it was freed.  Either way, the returned pointer might be
invalid.

I might very well miss something though.
Is this actually an issue? Or is it a false positive?

Thank you for your help.

Markus


Reply via email to