[BUG] CWE: 664
Ionescu-Ioan opened this issue · comments
Ionescu-Ioan commented
Description of the bug:
After I used Cppcheck to perform static analysis of the source code of Redis I discoverd the following error:
CWE 664 : "va_list ‘_cpy’ used before va_start() was called" in deps/hiredis/hiredis.c
I'm not sure yet if it's a false positive or not, but if it's really a bug, it might affect the good functionality of the project.
debing.sun commented
i think it is a false positive.
the code copies ap
to _cpy
via va_copy()
, so it doesnt need a va_start().