OpenScanHub and a related AI analysis think they found a scandalous NULL pointer reference in checkInstDeps() because they don't understand the big picture in which this executes. This is an alleged can't happen situation and checking for NULL would only make it seem otherwise. Add an assert() to hopefully document this situation to the scanners which only obsess here because think strlen() can be passed NULL. You can view, comment on, or merge this pull request online at:
https://github.com/rpm-software-management/rpm/pull/4274 -- Commit Summary -- * Hopefully silence scanners about a can't happen situation -- File Changes -- M lib/depends.cc (3) -- Patch Links -- https://github.com/rpm-software-management/rpm/pull/4274.patch https://github.com/rpm-software-management/rpm/pull/4274.diff -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/4274 You are receiving this because you are subscribed to this thread. Message ID: <rpm-software-management/rpm/pull/[email protected]>
_______________________________________________ Rpm-maint mailing list [email protected] https://lists.rpm.org/mailman/listinfo/rpm-maint
