SOURCE_ROOT\sys\amd64\amd64\db_trace.c	457	err	V629 Consider inspecting the '(0x02) << (watchnum) * 2' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\amd64\db_trace.c	457	err	V629 Consider inspecting the '(len) << 2' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\amd64\db_trace.c	451	err	V629 Consider inspecting the '0x3 << (watchnum) * 2' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\amd64\fpu.c	645	err	V567 Unspecified behavior. The order of argument evaluation is not defined for 'panic' function. Consider inspecting the '__res' variable.
SOURCE_ROOT\sys\amd64\amd64\genassym.c	105	err	V547 Expression '(sizeof (pt_entry_t)) < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\amd64\amd64\genassym.c	155	err	V547 Expression '(sizeof (struct pcb)) < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\amd64\amd64\genassym.c	190	err	V547 Expression '(sizeof (struct trapframe)) < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\amd64\amd64\genassym.c	104	err	V547 Expression '(sizeof (pd_entry_t)) < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\amd64\amd64\genassym.c	201	err	V547 Expression '(sizeof (struct pcpu)) < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\amd64\amd64\machdep.c	904	err	V629 Consider inspecting the 'sd->sd_hilimit << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\amd64\machdep.c	903	err	V629 Consider inspecting the 'sd->sd_hibase << 24' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\amd64\pmap.c	1192	err	V629 Consider inspecting the 'i << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\amd64\pmap.c	914	err	V629 Consider inspecting the 'i << 21' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\pci\pci_cfgreg.c	105	err	V629 Consider inspecting the 'pci_cfgregread(0, 0, 0, 0xce, 2) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\vmm\amd\svm.c	2017	err	V567 Unspecified behavior. The order of argument evaluation is not defined for 'atomic_clear_long' function. Consider inspecting the '__res' variable.
SOURCE_ROOT\sys\amd64\vmm\amd\svm.c	2001	err	V567 Unspecified behavior. The order of argument evaluation is not defined for 'atomic_set_barr_long' function. Consider inspecting the '__res' variable.
SOURCE_ROOT\sys\amd64\vmm\amd\svm.c	902	err	V629 Consider inspecting the 'intr_type << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\vmm\amd\svm_genassym.c	50	err	V547 Expression '(0xc0000101) < 0' is always false.
SOURCE_ROOT\sys\amd64\vmm\intel\vtd.c	390	err	V629 Consider inspecting the 'dom->id << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\vmm\intel\vtd.c	195	err	V654 The condition '(vtdmap->ccr & (1UL << 63)) != 0' of loop is always true.
SOURCE_ROOT\sys\amd64\vmm\io\vhpet.c	464	err	V629 Consider inspecting the '1 << n' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\vmm\io\vhpet.c	245	err	V629 Consider inspecting the '1 << n' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\vmm\io\vhpet.c	182	err	V629 Consider inspecting the '1 << n' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cam\ctl\ctl.c	9389	err	V512 A call of the 'memset' function will lead to underflow of the buffer 'sn_ptr->serial_num'.
SOURCE_ROOT\sys\cam\scsi\scsi_all.c	3948	err	V765 A compound assignment expression 'x -= x - ...' is suspicious. Consider inspecting it for a possible error.
SOURCE_ROOT\sys\cam\scsi\scsi_da.c	4201	err	V595 The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 4201, 4212.
SOURCE_ROOT\sys\cam\scsi\scsi_enc.c	599	err	V595 The 'dptr' pointer was utilized before it was verified against nullptr. Check lines: 599, 611.
SOURCE_ROOT\sys\cam\scsi\scsi_sa.c	4488	err	V568 It's odd that the argument of sizeof() operator is the 'softc->flags & SA_FLAG_FIXED ? 1 : 0' expression.
SOURCE_ROOT\sys\cam\scsi\scsi_sa.c	5290	err	V568 It's odd that the argument of sizeof() operator is the 'dens_data->byte2 & ~0x01' expression.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	860	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	880	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	884	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	849	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	600	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	541	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	538	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	864	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cam\scsi\scsi_target.c	871	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'user_ccb' class object.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\avl\avl.c	689	err	V595 The 'tree' pointer was utilized before it was verified against nullptr. Check lines: 689, 691.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\avl\avl.c	489	err	V595 The 'tree' pointer was utilized before it was verified against nullptr. Check lines: 489, 491.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\nvpair\opensolaris_nvpair.c	2913	err	V501 There are identical sub-expressions '!xdr_int(xdr, & zero)' to the left and to the right of the '||' operator.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\nvpair\opensolaris_nvpair.c	2929	err	V595 The 'nvp' pointer was utilized before it was verified against nullptr. Check lines: 2929, 2935.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\zfs\zfs_fletcher.c	250	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\zfs\zfs_fletcher.c	204	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\zfs\zfs_ioctl_compat.c	336	err	V614 Uninitialized pointer 'resume_c' used.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\common\zfs\zfs_ioctl_compat.c	620	err	V614 Uninitialized pointer 'resume_c' used.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	12768	err	V547 Expression 'strlen(match->dtpd_name) < 64' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	2347	err	V547 Expression '(i) < ((sizeof (uint64_t) * 8) - 1)' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	2354	err	V547 Expression '(i) < ((sizeof (uint64_t) * 8) - 1)' is always false.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	12765	err	V547 Expression 'strlen(match->dtpd_provider) < 64' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	12766	err	V547 Expression 'strlen(match->dtpd_mod) < 64' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	12767	err	V547 Expression 'strlen(match->dtpd_func) < 192' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	5480	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	3322	err	V595 The 'mstate->dtms_probe' pointer was utilized before it was verified against nullptr. Check lines: 3322, 3343.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	12674	err	V595 The 'enab->dten_desc' pointer was utilized before it was verified against nullptr. Check lines: 12674, 12687.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	15423	err	V595 The 'spec' pointer was utilized before it was verified against nullptr. Check lines: 15423, 15425.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	1978	err	V590 Consider inspecting this expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\fasttrap.c	2513	err	V629 Consider inspecting the '1 << fasttrap_highbit(nent)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\arc.c	4744	err	V595 The 'hash_lock' pointer was utilized before it was verified against nullptr. Check lines: 4744, 4757.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\arc.c	2178	err	V522 Dereferencing of the null pointer '(hash_lock)' might take place. The null pointer is passed into 'remove_reference' function. Inspect the second argument. Check lines: 'arc.c:3086'.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c	3007	err	V629 Consider inspecting the '1 << dn->dn_phys->dn_indblkshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c	3412	err	V629 Consider inspecting the '1 << dn->dn_phys->dn_indblkshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c	3258	err	V629 Consider inspecting the '1 << dn->dn_phys->dn_indblkshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c	296	err	V595 The 'dbf' pointer was utilized before it was verified against nullptr. Check lines: 296, 297.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c	1046	err	V595 The 'dn' pointer was utilized before it was verified against nullptr. Check lines: 1046, 1049.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c	783	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dbuf.c	988	err	V629 Consider inspecting the '1 << dn->dn_indblkshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dmu.c	686	err	V629 Consider inspecting the '1 << (dn->dn_indblkshift - 7)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dmu_send.c	604	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dmu_tx.c	415	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dmu_zfetch.c	326	err	V629 Consider inspecting the '1 << epbs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode.c	251	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode.c	256	err	V629 Consider inspecting the '1 << dn->dn_datablkshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode_sync.c	169	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode_sync.c	171	err	V629 Consider inspecting the '1 << dn->dn_phys->dn_indblkshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dnode_sync.c	168	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dsl_dir.c	1042	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\metaslab.c	2129	err	V629 Consider inspecting the '1 << msp->ms_group->mg_vd->vdev_ashift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\refcount.c	140	err	V547 Expression 'rc->rc_count >= 0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\sa.c	1795	err	V595 The 'hdl' pointer was utilized before it was verified against nullptr. Check lines: 1795, 1800.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c	1353	err	V595 The 'spa->spa_spares.sav_vdevs' pointer was utilized before it was verified against nullptr. Check lines: 1353, 1354.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c	1367	err	V595 The 'spa->spa_l2cache.sav_vdevs' pointer was utilized before it was verified against nullptr. Check lines: 1367, 1369.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c	4309	err	V614 Potentially uninitialized pointer 'pname' used. Consider checking the third actual argument of the 'cmn_err' function.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c	1410	err	V595 The 'spa->spa_spares.sav_vdevs' pointer was utilized before it was verified against nullptr. Check lines: 1410, 1420.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\spa.c	1595	err	V595 The 'oldvdevs' pointer was utilized before it was verified against nullptr. Check lines: 1595, 1607.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\sys\dmu.h	222	err	V616 The '(DMU_BSWAP_UINT8)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\sys\dmu.h	221	err	V616 The '(DMU_BSWAP_UINT8)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev.c	314	err	V595 The 'pvd->vdev_child' pointer was utilized before it was verified against nullptr. Check lines: 314, 321.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev.c	1842	err	V781 The value of the 't' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 1842, 1844.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev.c	721	err	V595 The 'vd->vdev_child' pointer was utilized before it was verified against nullptr. Check lines: 721, 723.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev.c	1857	err	V781 The value of the 't' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 1857, 1860.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_cache.c	348	err	V629 Consider inspecting the '1 << zfs_vdev_cache_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_cache.c	347	err	V629 Consider inspecting the '1 << zfs_vdev_cache_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_cache.c	269	err	V629 Consider inspecting the '1 << zfs_vdev_cache_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_cache.c	268	err	V629 Consider inspecting the '1 << zfs_vdev_cache_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_cache.c	206	err	V629 Consider inspecting the '1 << zfs_vdev_cache_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_cache.c	171	err	V629 Consider inspecting the '1 << zfs_vdev_cache_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_cache.c	363	err	V629 Consider inspecting the '1 << zfs_vdev_cache_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_geom.c	362	err	V609 Divide by zero. Denominator range [0..131072].
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_geom.c	493	err	V595 The '* configs' pointer was utilized before it was verified against nullptr. Check lines: 493, 494.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_mirror.c	191	err	V547 Expression '(lastoffset - zio_offset) < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap.c	495	err	V629 Consider inspecting the '1 << ((l)->l_bs - 5)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap.c	495	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap.c	280	err	V629 Consider inspecting the '1 << (bs - 3)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap.c	246	err	V629 Consider inspecting the '1 << (bs - 3)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap.c	528	err	V629 Consider inspecting the '1 << bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap.c	235	err	V629 Consider inspecting the '1 << (bs - 3)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	471	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	209	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	385	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	324	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	194	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	210	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	757	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	758	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_leaf.c	412	err	V629 Consider inspecting the '1 << (l)->l_bs' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zap_micro.c	517	err	V502 Perhaps the '?:' operator works in a different way than it was expected. The '?:' operator has a lower priority than the '==' operator.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_acl.c	2422	err	V614 Uninitialized pointer 'xzp' used. Consider checking the first actual argument of the 'ZTOV' function.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_fuid.c	590	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_ioctl.c	5809	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_ioctl.c	5785	err	V547 Expression '__left >= __right' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_log.c	586	err	V595 The 'fuidp' pointer was utilized before it was verified against nullptr. Check lines: 586, 608.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_log.c	297	err	V595 The 'fuidp' pointer was utilized before it was verified against nullptr. Check lines: 297, 324.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_replay.c	499	err	V614 Potentially uninitialized pointer 'start' used.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vfsops.c	499	err	V593 Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vfsops.c	1883	err	V547 Expression 'ZTOV(zp)->v_usecount >= 0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	5368	err	V595 The 'zp' pointer was utilized before it was verified against nullptr. Check lines: 5368, 5370.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	1093	err	V629 Consider inspecting the '1 << highbit64(zp->z_blksz)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_znode.c	1552	err	V629 Consider inspecting the '1 << highbit64(zp->z_blksz)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_znode.c	1910	err	V614 Uninitialized pointer 'zp' used. Consider checking the sixth actual argument of the 'zfs_mknode' function.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zio.c	3467	err	V595 The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 3467, 3474.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zio_checksum.c	303	err	V781 The value of the 'checksum' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 303, 307.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\os\fm.c	1177	err	V629 Consider inspecting the 'cpuid << 10' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\os\fm.c	1171	err	V629 Consider inspecting the 'cpuid << 10' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\os\list.c	79	err	V595 The 'list' pointer was utilized before it was verified against nullptr. Check lines: 79, 81.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\zmod\adler32.c	71	err	V595 The 'buf' pointer was utilized before it was verified against nullptr. Check lines: 71, 81.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\zmod\inffast.c	293	err	V629 Consider inspecting the '1U << bits' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\zmod\inflate.c	146	err	V629 Consider inspecting the 'value << state->bits' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\cddl\dev\profile\profile.c	628	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'pcpu' class object.
SOURCE_ROOT\sys\cddl\dev\profile\profile.c	599	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'pcpu' class object.
SOURCE_ROOT\sys\compat\linux\linux_futex.c	972	err	V595 The 'f2' pointer was utilized before it was verified against nullptr. Check lines: 972, 986.
SOURCE_ROOT\sys\compat\linuxkpi\common\include\linux\scatterlist.h	415	err	V629 Consider inspecting the 'spi->sg_pgoffset << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\compat\linuxkpi\common\include\linux\scatterlist.h	315	err	V629 Consider inspecting the '(j - cur) << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\compat\linuxkpi\common\src\linux_idr.c	477	err	V629 Consider inspecting the '1 << idx' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\compat\linuxkpi\common\src\linux_idr.c	359	err	V629 Consider inspecting the '1 << idx' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\compat\linuxkpi\common\src\linux_page.c	232	err	V629 Consider inspecting the '((size_t) nr_pages) << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\compat\ndis\subr_ntoskrnl.c	2710	err	V595 The 'children' pointer was utilized before it was verified against nullptr. Check lines: 2710, 2720.
SOURCE_ROOT\sys\compat\x86bios\x86bios.c	631	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& x86bios_emu.x86'.
SOURCE_ROOT\sys\compat\x86bios\x86bios.c	589	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& x86bios_emu.x86'.
SOURCE_ROOT\sys\contrib\dev\acpica\components\dispatcher\dscontrol.c	306	err	V724 Converting type 'UINT16' to type 'BOOLEAN' can lead to a loss of high-order bits. Non-zero value can become 'FALSE'.
SOURCE_ROOT\sys\contrib\dev\acpica\components\dispatcher\dswexec.c	361	err	V595 The 'OutOp' pointer was utilized before it was verified against nullptr. Check lines: 361, 382.
SOURCE_ROOT\sys\contrib\dev\acpica\components\dispatcher\dswload.c	608	err	V595 The 'Op->Common.Value.Arg' pointer was utilized before it was verified against nullptr. Check lines: 608, 631.
SOURCE_ROOT\sys\contrib\dev\acpica\components\events\evglock.c	464	err	V724 Converting type 'int' to type 'BOOLEAN' can lead to a loss of high-order bits. Non-zero value can become 'FALSE'.
SOURCE_ROOT\sys\contrib\dev\acpica\components\events\evglock.c	390	err	V724 Converting type 'int' to type 'BOOLEAN' can lead to a loss of high-order bits. Non-zero value can become 'FALSE'.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c	3063	err	V610 Undefined behavior. Check the shift operator '<<'. The right operand ('i' = [0..35]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_mci.c	222	err	V616 The '(MCI_GPM_COEX_VERSION_QUERY)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_misc.c	3897	err	V512 A call of the 'memcpy' function will lead to overflow of the buffer 'ctl_index + 12'.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_misc.c	3906	err	V512 A call of the 'memcpy' function will lead to overflow of the buffer 'ctl_index + 9'.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	366	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(- 15)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	1758	err	V610 Unspecified behavior. Check the shift operator '>>'. The left operand '(beta * tmp - 64)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	303	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(- 3)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	305	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(- 15)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	355	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(- 3)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	358	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(- 6)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	363	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(- 10)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	371	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(- 10)' is negative.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_reset.c	2710	err	V595 The 'chan' pointer was utilized before it was verified against nullptr. Check lines: 2710, 2712.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_reset.c	965	err	V501 There are identical sub-expressions 'HAL_FREQ_BAND_2GHZ' to the left and to the right of the '==' operator.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_xmit.c	450	err	V547 Expression 'value < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\fil.c	5243	err	V595 The 'f->fr_pnext' pointer was utilized before it was verified against nullptr. Check lines: 5243, 5244.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_auth.c	1235	err	V654 The condition 'fra->fra_index == - 1' of loop is always true.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_lookup.c	711	err	V547 Expression is always false.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_nat.c	2166	err	V594 The 'ipnn->ipn_data + sizeof (* aps)' pointer steps out of array's bounds.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_pool.c	331	err	V763 Parameter 'softc' is always rewritten in function body before being used.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	879	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	893	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	435	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	551	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	440	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	875	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'rx' class object.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	438	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	996	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	897	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	439	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_rpcb_pxy.c	914	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_state.c	3043	err	V763 Parameter 'tcp' is always rewritten in function body before being used.
SOURCE_ROOT\sys\contrib\ngatm\netnatm\sig\sig_call.c	2855	err	V595 The 'p' pointer was utilized before it was verified against nullptr. Check lines: 2855, 2858.
SOURCE_ROOT\sys\contrib\ngatm\netnatm\sig\sig_call.c	2955	err	V595 The 'p' pointer was utilized before it was verified against nullptr. Check lines: 2955, 2958.
SOURCE_ROOT\sys\contrib\ngatm\netnatm\sig\sig_verify.c	94	err	V590 Consider inspecting this expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\crypto\aesni\aesni.c	634	err	V595 The 'authcrd' pointer was utilized before it was verified against nullptr. Check lines: 634, 645.
SOURCE_ROOT\sys\crypto\aesni\aesni_wrap.c	173	err	V594 The 'from += 16 * 8' pointer steps out of array's bounds.
SOURCE_ROOT\sys\crypto\aesni\aesni_wrap.c	174	err	V594 The 'to += 16 * 8' pointer steps out of array's bounds.
SOURCE_ROOT\sys\crypto\sha2\sha256c.c	257	err	V629 Consider inspecting the 'len << 3' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\crypto\via\padlock_hash.c	106	err	V567 Undefined behavior. The 'src' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\ddb\db_command.c	781	err	V763 Parameter 'hastid' is always rewritten in function body before being used.
SOURCE_ROOT\sys\ddb\db_thread.c	64	err	V763 Parameter 'hastid' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\aacraid\aacraid.c	2861	err	V593 Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'.
SOURCE_ROOT\sys\dev\aacraid\aacraid.c	2854	err	V593 Consider reviewing the expression of the 'A = B != C' kind. The expression is calculated as following: 'A = (B != C)'.
SOURCE_ROOT\sys\dev\advansys\advansys.c	484	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\advansys\adw_pci.c	154	err	V629 Consider inspecting the 'subdevice << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ae\if_ae.c	1699	err	V621 Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all.
SOURCE_ROOT\sys\dev\agp\agp_i810.c	1681	err	V629 Consider inspecting the '(pte & 0xf0) << 28' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\aic7xxx\aic79xx.c	7173	err	V616 The 'AHD_REMOVABLE' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\aic7xxx\aic79xx.c	2412	err	V595 The 'scb' pointer was utilized before it was verified against nullptr. Check lines: 2412, 2427.
SOURCE_ROOT\sys\dev\aic7xxx\aic79xx_inline.h	963	err	V616 The 'AHD_REMOVABLE' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\aic7xxx\aic79xx_pci.c	60	err	V629 Consider inspecting the 'subdevice << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\aic7xxx\aic7xxx.c	541	err	V569 Truncation of constant value 2147483900. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\aic7xxx\aic7xxx_osm.c	549	err	V614 Uninitialized pointer 'lstate' used.
SOURCE_ROOT\sys\dev\aic7xxx\aic7xxx_pci.c	63	err	V629 Consider inspecting the 'subdevice << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\arcmsr\arcmsr.c	4182	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\arcmsr\arcmsr.c	662	err	V512 A call of the 'memcpy' function will lead to the 'srb->arcmsr_cdb.SenseData' buffer becoming out of range.
SOURCE_ROOT\sys\dev\ata\chipsets\ata-highpoint.c	102	err	V541 It is dangerous to print the string 'buffer' into itself.
SOURCE_ROOT\sys\dev\ata\chipsets\ata-promise.c	208	err	V541 It is dangerous to print the string 'buffer' into itself.
SOURCE_ROOT\sys\dev\ata\chipsets\ata-promise.c	796	err	V617 Consider inspecting the condition. The '1' argument of the '|' bitwise operation contains a non-zero value.
SOURCE_ROOT\sys\dev\ata\chipsets\ata-siliconimage.c	133	err	V595 The 'ctlr->r_res2' pointer was utilized before it was verified against nullptr. Check lines: 133, 144.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5210\ar5210_reset.c	504	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5210\ar5210_reset.c	502	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5210\ar5210_reset.c	504	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '-127' is negative.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5212\ar5212_reset.c	1969	err	V629 Consider inspecting the '1 << (24 - coef_exp - 1)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5416\ar5416_cal.c	461	err	V763 Parameter 'rxchainmask' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\ath\if_ath.c	4788	err	V781 The value of the 'bf->bf_state.bfs_tx_queue' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 4788, 4796.
SOURCE_ROOT\sys\dev\ath\if_ath.c	6860	err	V595 The 'ni' pointer was utilized before it was verified against nullptr. Check lines: 6860, 6865.
SOURCE_ROOT\sys\dev\ath\if_ath_tx_edma.c	1001	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& bf->bf_status'.
SOURCE_ROOT\sys\dev\bce\if_bce.c	6828	err	V595 The 'm0' pointer was utilized before it was verified against nullptr. Check lines: 6828, 6839.
SOURCE_ROOT\sys\dev\bhnd\bcma\bcma.c	672	err	V610 Undefined behavior. Check the shift operator '>>'. The right operand ('((intr % 8) * 8)' = [0..56]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\dev\bhnd\bcma\bcma_erom.c	973	err	V629 Consider inspecting the '0x1000 << size_type' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\bhnd\cores\chipc\pwrctl\bhnd_pwrctl_subr.c	270	err	V609 Divide by zero. Denominator range [0..49].
SOURCE_ROOT\sys\dev\bhnd\cores\chipc\pwrctl\bhnd_pwrctl_subr.c	264	err	V609 Divide by zero. Denominator range [0..7].
SOURCE_ROOT\sys\dev\bhnd\cores\pmu\bhnd_pmu.c	428	err	V501 There are identical sub-expressions to the left and to the right of the '&' operator: (req) & (req)
SOURCE_ROOT\sys\dev\bhnd\cores\pmu\bhnd_pmu_subr.c	793	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '~0' is negative.
SOURCE_ROOT\sys\dev\bhnd\cores\pmu\bhnd_pmu_subr.c	1986	err	V547 Expression 'FVCO >= 1600' is always false.
SOURCE_ROOT\sys\dev\bhnd\cores\pmu\bhnd_pmu_subr.c	1954	err	V547 Expression 'FVCO < 1600' is always true.
SOURCE_ROOT\sys\dev\bhnd\cores\pmu\bhnd_pmu_subr.c	890	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '~0' is negative.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_bcm.c	451	err	V595 The 'outp' pointer was utilized before it was verified against nullptr. Check lines: 451, 461.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_tlv.c	784	err	V654 The condition 'tag != 0x00' of loop is always true.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_subr.c	976	err	V530 The return value of function 'strtoul' is required to be utilized.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_subr.c	637	err	V530 The return value of function 'strtoul' is required to be utilized.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_value.c	754	err	V595 The 'outp' pointer was utilized before it was verified against nullptr. Check lines: 754, 776.
SOURCE_ROOT\sys\dev\bktr\bktr_audio.c	397	err	V629 Consider inspecting the 'val << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\bktr\bktr_tuner.c	1164	err	V654 The condition 'xok != 1' of loop is always true.
SOURCE_ROOT\sys\dev\bnxt\bnxt_hwrm.c	80	err	V614 Uninitialized variable 'rc' used.
SOURCE_ROOT\sys\dev\bwi\if_bwi.c	1367	err	V595 The 'ni' pointer was utilized before it was verified against nullptr. Check lines: 1367, 1375.
SOURCE_ROOT\sys\dev\bwn\if_bwn_phy_g.c	188	err	V547 Expression '16 * pab0 + i * pab1 < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\dev\bwn\if_bwn_phy_g.c	189	err	V547 Expression '32768 + i * pab2 < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\dev\bwn\if_bwn_phy_lp.c	514	err	V502 Perhaps the '?:' operator works in a different way than it was expected. The '?:' operator has a lower priority than the '&' operator.
SOURCE_ROOT\sys\dev\bxe\bxe.c	3812	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\bxe\bxe.c	2805	err	V629 Consider inspecting the '1 << queue' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\bxe\bxe.c	3371	err	V595 The 'm' pointer was utilized before it was verified against nullptr. Check lines: 3371, 3396.
SOURCE_ROOT\sys\dev\bxe\bxe.c	10180	err	V512 A call of the 'memset' function will lead to underflow of the buffer '& sc->cmng'.
SOURCE_ROOT\sys\dev\bxe\bxe.c	1736	err	V616 The '(ETH_CONNECTION_TYPE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\bxe\bxe.c	1732	err	V616 The '(ETH_CONNECTION_TYPE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\bxe\bxe.c	3113	err	V629 Consider inspecting the '1 << queue' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\bxe\bxe_elink.c	5156	err	V763 Parameter 'lane' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\bxe\bxe_elink.c	11099	err	V573 Uninitialized variable 'other_shmem_base_addr' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\bxe\bxe_elink.c	1441	err	V705 It is possible that 'else' block was forgotten or commented out, thus altering the program's operation logics.
SOURCE_ROOT\sys\dev\bxe\bxe_stats.c	908	err	V512 A call of the 'memcpy' function will lead to overflow of the buffer '& (estats->rx_stat_ifhcinbadoctets_hi)'.
SOURCE_ROOT\sys\dev\bxe\bxe_stats.c	1066	err	V547 Expression is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\dev\bxe\bxe_stats.c	1064	err	V547 Expression is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\dev\bxe\bxe_stats.c	1063	err	V547 Expression is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\dev\bxe\bxe_stats.c	1633	err	V512 A call of the 'memcpy' function will lead to a buffer overflow.
SOURCE_ROOT\sys\dev\bxe\bxe_stats.c	1631	err	V512 A call of the 'memcpy' function will lead to a buffer overflow.
SOURCE_ROOT\sys\dev\bxe\ecore_init_ops.h	667	err	V595 The 'ilt' pointer was utilized before it was verified against nullptr. Check lines: 667, 669.
SOURCE_ROOT\sys\dev\cas\if_cas.c	1222	err	V629 Consider inspecting the 'offset << 15' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_t3_hw.c	3586	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_t3_hw.c	3583	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_t3_hw.c	3584	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_t3_hw.c	3585	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_t3_hw.c	3587	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgb\cxgb_sge.c	1145	err	V547 Expression is always false.
SOURCE_ROOT\sys\dev\cxgbe\common\t4_hw.c	6784	err	V567 Undefined behavior. The 'params' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgbe\common\t4_hw.c	6837	err	V567 Undefined behavior. The 'params' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgbe\common\t4_hw.c	6838	err	V567 Undefined behavior. The 'val' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\cxgbe\t4_main.c	3034	err	V595 The 'kld_fw' pointer was utilized before it was verified against nullptr. Check lines: 3034, 3044.
SOURCE_ROOT\sys\dev\cxgbe\t4_main.c	9787	err	V614 Potentially uninitialized pointer 'dev' used.
SOURCE_ROOT\sys\dev\cxgbe\t4_main.c	8010	err	V629 Consider inspecting the 'cclk_ps << tre' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\cxgbe\t4_main.c	9820	err	V614 Potentially uninitialized pointer 'dev' used.
SOURCE_ROOT\sys\dev\cxgbe\tom\t4_listen.c	1572	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'toep' class object.
SOURCE_ROOT\sys\dev\cxgbe\tom\t4_tom.c	553	err	V629 Consider inspecting the '(ulp_mode) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\cyapa\cyapa.c	1148	err	V547 Expression is always false.
SOURCE_ROOT\sys\dev\dpt\dpt_scsi.c	496	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'dpt->sp' class object.
SOURCE_ROOT\sys\dev\drm\drm_agpsupport.c	298	err	V629 Consider inspecting the 'page << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm\drm_bufs.c	680	err	V629 Consider inspecting the 'entry->seg_count << page_order' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm\drm_hashtab.c	125	err	V629 Consider inspecting the '1 << bits' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm\mach64_state.c	694	err	V629 Consider inspecting the 'dwords << 2' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm\via_verifier.c	325	err	V629 Consider inspecting the '* height ++ << * pitch ++' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\drm_agpsupport.c	335	err	V629 Consider inspecting the 'page << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\drm_bufs.c	1040	err	V629 Consider inspecting the 'entry->seg_count << page_order' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1351	err	V568 It's odd that the argument of sizeof() operator is the '* connector_id + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1319	err	V568 It's odd that the argument of sizeof() operator is the '* encoder_id + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1298	err	V568 It's odd that the argument of sizeof() operator is the '* crtc_id + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1290	err	V568 It's odd that the argument of sizeof() operator is the '* crtc_id + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1362	err	V568 It's odd that the argument of sizeof() operator is the '* connector_id + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1273	err	V568 It's odd that the argument of sizeof() operator is the '* fb_id + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1569	err	V568 It's odd that the argument of sizeof() operator is the '* encoder_ptr + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1328	err	V568 It's odd that the argument of sizeof() operator is the '* encoder_id + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	3077	err	V568 It's odd that the argument of sizeof() operator is the '* blob_id_ptr + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1554	err	V568 It's odd that the argument of sizeof() operator is the '* prop_values + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1548	err	V568 It's odd that the argument of sizeof() operator is the '* prop_ptr + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	3082	err	V568 It's odd that the argument of sizeof() operator is the '* blob_length_ptr + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	3327	err	V568 It's odd that the argument of sizeof() operator is the '* props_ptr + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	3332	err	V568 It's odd that the argument of sizeof() operator is the '* prop_values_ptr + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_crtc.c	1654	err	V568 It's odd that the argument of sizeof() operator is the '* plane_ptr + copied' expression.
SOURCE_ROOT\sys\dev\drm2\drm_fb_helper.c	1378	err	V595 The 'fb_crtc' pointer was utilized before it was verified against nullptr. Check lines: 1378, 1380.
SOURCE_ROOT\sys\dev\drm2\drm_hashtab.c	127	err	V629 Consider inspecting the '1 << bits' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\i915\i915_gem.c	4305	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\i915\i915_gem.c	4306	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\i915\i915_gem.c	2831	err	V629 Consider inspecting the '((obj->stride / 128) - 1) << 2' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	943	err	V609 Mod by zero. Denominator range [0..4].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	957	err	V609 Mod by zero. Denominator range [-22..4].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	992	err	V609 Divide by zero. Denominator range [-22..4].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	999	err	V609 Divide by zero. Denominator range [-22..2].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	758	err	V609 Divide by zero. Denominator range [-22..4].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	756	err	V609 Divide by zero. Denominator range [-22..4].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	573	err	V609 Divide by zero. Denominator range [-22..4].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	574	err	V609 Divide by zero. Denominator range [-22..2].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	760	err	V609 Divide by zero. Denominator range [-22..4].
SOURCE_ROOT\sys\dev\drm2\i915\intel_overlay.c	762	err	V609 Divide by zero. Denominator range [-22..2].
SOURCE_ROOT\sys\dev\drm2\i915\intel_pm.c	2850	err	V629 Consider inspecting the '1 << post' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\i915\intel_sdvo.c	959	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'sdvo_data'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_sprite.c	725	err	V629 Consider inspecting the '1 << pipe' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen.c	1656	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen.c	1662	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	637	err	V629 Consider inspecting the 'track->db_s_write_offset << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	465	err	V629 Consider inspecting the 'track->cb_color_bo_offset[id] << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	443	err	V629 Consider inspecting the 'track->cb_color_bo_offset[id] << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	732	err	V629 Consider inspecting the 'track->db_z_write_offset << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	795	err	V629 Consider inspecting the 'texdw[2] << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	796	err	V629 Consider inspecting the 'texdw[3] << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	716	err	V629 Consider inspecting the 'track->db_z_read_offset << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen_cs.c	618	err	V629 Consider inspecting the 'track->db_s_read_offset << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\ni.c	270	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\ni.c	1013	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\ni.c	1007	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r100.c	2900	err	V629 Consider inspecting the '((tom >> 16) - (tom & 0xffff) + 1) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\r600.c	2185	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600.c	3374	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600.c	2191	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600.c	3379	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600.c	3384	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600.c	3389	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600.c	3394	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cp.c	315	err	V753 The '&=' operation always sets a value of 'vm_c0' variable to zero.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cp.c	486	err	V753 The '&=' operation always sets a value of 'vm_c0' variable to zero.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cp.c	432	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cp.c	438	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cp.c	525	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cp.c	531	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cs.c	1413	err	V629 Consider inspecting the 'radeon_get_ib_value(p, idx) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cs.c	1440	err	V629 Consider inspecting the 'radeon_get_ib_value(p, idx) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_cs.c	2236	err	V629 Consider inspecting the 'radeon_get_ib_value(p, idx + 1) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_bios.c	250	err	V614 Potentially uninitialized pointer 'atrm_handle' used. Consider checking the first actual argument of the 'radeon_atrm_call' function.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_display.c	434	err	V629 Consider inspecting the 'crtc->x << byteshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_legacy_crtc.c	939	err	V501 There are identical sub-expressions '(rdev->family == CHIP_RS480)' to the left and to the right of the '||' operator.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_legacy_crtc.c	482	err	V629 Consider inspecting the 'x << byteshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_legacy_crtc.c	939	err	V501 There are identical sub-expressions '(rdev->family == CHIP_RS400)' to the left and to the right of the '||' operator.
SOURCE_ROOT\sys\dev\drm2\radeon\rv770.c	349	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\rv770.c	355	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	1915	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	1929	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	257	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	3267	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	1922	err	V567 Undefined behavior. The 'fw_data' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\drm2\ttm\ttm_bo.c	1422	err	V781 The value of the 'mem_type' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 1422, 1424.
SOURCE_ROOT\sys\dev\drm2\ttm\ttm_memory.c	278	err	V530 The return value of function 'ttm_dma_page_alloc_init' is required to be utilized.
SOURCE_ROOT\sys\dev\drm2\ttm\ttm_object.c	245	err	V614 Potentially uninitialized pointer 'base' used.
SOURCE_ROOT\sys\dev\e1000\e1000_82575.c	2164	err	V547 Expression '(i) < 4' is always true.
SOURCE_ROOT\sys\dev\e1000\e1000_82575.c	2202	err	V547 Expression '(i) < 4' is always true.
SOURCE_ROOT\sys\dev\e1000\e1000_82575.c	2163	err	V547 Expression '(i) < 4' is always true.
SOURCE_ROOT\sys\dev\e1000\e1000_ich8lan.c	1093	err	V629 Consider inspecting the '1 << (scale * 5)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\e1000\e1000_ich8lan.c	2215	err	V654 The condition 'blocked && (i ++ < 30)' of loop is always false.
SOURCE_ROOT\sys\dev\esp\ncr53c9x.c	1354	err	V512 A call of the 'memset' function will lead to underflow of the buffer 'ss'.
SOURCE_ROOT\sys\dev\evdev\evdev_utils.c	311	err	V595 The 'kbd' pointer was utilized before it was verified against nullptr. Check lines: 311, 319.
SOURCE_ROOT\sys\dev\evdev\evdev_utils.c	329	err	V595 The 'kbd' pointer was utilized before it was verified against nullptr. Check lines: 329, 331.
SOURCE_ROOT\sys\dev\evdev\evdev_utils.c	326	err	V595 The 'kbd' pointer was utilized before it was verified against nullptr. Check lines: 326, 327.
SOURCE_ROOT\sys\dev\fb\splash.c	133	err	V595 The 'decoder_set' pointer was utilized before it was verified against nullptr. Check lines: 133, 141.
SOURCE_ROOT\sys\dev\fb\vesa.c	1056	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'buf' class object.
SOURCE_ROOT\sys\dev\fdc\fdc.c	781	err	V595 The 'fd' pointer was utilized before it was verified against nullptr. Check lines: 781, 788.
SOURCE_ROOT\sys\dev\firewire\firewire.c	1369	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\firewire\firewire.c	1367	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\firewire\firewire.c	1370	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\firewire\fwcrom.c	464	err	V567 Undefined behavior. The 'p' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\firewire\sbp.c	2337	err	V522 Dereferencing of the null pointer 'sbp' might take place.
SOURCE_ROOT\sys\dev\firewire\sbp_targ.c	1617	err	V781 The value of the 'lun' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 1617, 1619.
SOURCE_ROOT\sys\dev\fxp\if_fxp.c	1626	err	V557 Array underrun is possible. The '-1' index is pointing beyond array bound.
SOURCE_ROOT\sys\dev\gem\if_gem.c	762	err	V629 Consider inspecting the '(__m->m_ext.ext_size) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\gem\if_gem.c	891	err	V629 Consider inspecting the '(__m->m_ext.ext_size) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\gem\if_gem.c	1138	err	V629 Consider inspecting the 'offset << 15' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\gem\if_gem.c	1585	err	V629 Consider inspecting the '(__m->m_ext.ext_size) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\gem\if_gem.c	1610	err	V629 Consider inspecting the '(__m->m_ext.ext_size) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\gem\if_gem.c	1700	err	V629 Consider inspecting the '(__m->m_ext.ext_size) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\hatm\if_hatm.c	1086	err	V629 Consider inspecting the '1 << expt' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\hptiop\hptiop.c	2616	err	V629 Consider inspecting the 'srb->index << 4' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\hptiop\hptiop.c	236	err	V573 Uninitialized variable 'outbound_head' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\hptiop\hptiop.c	257	err	V573 Uninitialized variable 'inbound_head' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\hptiop\hptiop.c	235	err	V573 Uninitialized variable 'outbound_tail' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\hptmv\gui_lib.c	586	err	V763 Parameter '_vbus_p' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\hwpmc\hwpmc_core.c	273	err	V629 Consider inspecting the 'flags << (ri * 4)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\hwpmc\hwpmc_mod.c	1998	err	V567 Unspecified behavior. The order of argument evaluation is not defined for 'atomic_clear_long' function. Consider inspecting the '__res' variable.
SOURCE_ROOT\sys\dev\hwpmc\hwpmc_piv.c	812	err	V547 Expression 'cfgflags >= 0 || cfgflags <= 3' is always true.
SOURCE_ROOT\sys\dev\hwpmc\hwpmc_piv.c	838	err	V547 Expression 'cfgflags >= 0 || cfgflags <= 3' is always true.
SOURCE_ROOT\sys\dev\hwpmc\hwpmc_uncore.c	213	err	V629 Consider inspecting the 'flags << (ri * 4)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\hyperv\input\hv_kbdc.c	301	err	V763 Parameter 'channel' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\hyperv\storvsc\hv_storvsc_drv_freebsd.c	1774	err	V629 Consider inspecting the '1 << i' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ida\ida.c	91	err	V595 The 'ida->qcbs' pointer was utilized before it was verified against nullptr. Check lines: 91, 104.
SOURCE_ROOT\sys\dev\ioat\ioat.c	719	err	V629 Consider inspecting the '1 << (ioat)->ring_size_order' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ioat\ioat.c	518	err	V629 Consider inspecting the '1 << (ioat)->ring_size_order' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ipw\if_ipw.c	1862	err	V590 Consider inspecting the 'error == 0 || error != 35' expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\dev\isci\scil\scic_sds_smp_request.c	438	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& task_context->type.smp'.
SOURCE_ROOT\sys\dev\iscsi\iscsi.c	1238	err	V567 Undefined behavior. The 'io->io_datasn' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\iscsi\iscsi.c	2091	err	V522 Dereferencing of the null pointer 'ccb' might take place. The null pointer is passed into 'iscsi_outstanding_add' function. Inspect the third argument. Check lines: 'iscsi.c:2157'.
SOURCE_ROOT\sys\dev\iscsi_initiator\isc_cam.c	177	err	V595 The 'sp' pointer was utilized before it was verified against nullptr. Check lines: 177, 181.
SOURCE_ROOT\sys\dev\iscsi_initiator\iscsi_subr.c	569	err	V595 The 'pq->mp' pointer was utilized before it was verified against nullptr. Check lines: 569, 575.
SOURCE_ROOT\sys\dev\iscsi_initiator\iscsi_subr.c	540	err	V595 The 'ccb' pointer was utilized before it was verified against nullptr. Check lines: 540, 547.
SOURCE_ROOT\sys\dev\isp\isp.c	5222	err	V501 There are identical sub-expressions '((xs)->ccb_h.status & CAM_STATUS_MASK) == CAM_REQ_INPROG' to the left and to the right of the '||' operator.
SOURCE_ROOT\sys\dev\isp\isp_library.c	946	err	V567 Undefined behavior. The 'a' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\isp\isp_library.c	974	err	V567 Undefined behavior. The 'a' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\isp\isp_library.c	1063	err	V567 Undefined behavior. The 'a' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\isp\isp_library.c	937	err	V567 Undefined behavior. The 'a' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\iwm\if_iwm.c	3827	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\iwn\if_iwn.c	6838	err	V763 Parameter 'c' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\iwn\if_iwn.c	6663	err	V512 A call of the 'memset' function will lead to underflow of the buffer 'sc->rxon'.
SOURCE_ROOT\sys\dev\iwn\if_iwn.c	5665	err	V547 Expression '(rssi) > (phy->rssi[0])' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\dev\ixgb\if_ixgb.c	2165	err	V595 The 'adapter->fmp' pointer was utilized before it was verified against nullptr. Check lines: 2165, 2169.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	1417	err	V629 Consider inspecting the '1 << vector' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	4465	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'txr' class object.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	1437	err	V629 Consider inspecting the '1 << vector' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	4503	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'rxr' class object.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	4469	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'txr' class object.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	2522	err	V629 Consider inspecting the '1 << que->msix' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	4507	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'rxr' class object.
SOURCE_ROOT\sys\dev\ixgbe\if_ixv.c	1300	err	V629 Consider inspecting the '1 << que->msix' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ixgbe\if_ixv.c	791	err	V629 Consider inspecting the '1 << vector' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_dcb_82598.c	333	err	V547 Expression '(i) <= 7' is always true.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_dcb_82598.c	331	err	V547 Expression '(i) <= 7' is always true.
SOURCE_ROOT\sys\dev\ixl\i40e_adminq_cmd.h	2514	err	V609 Divide by zero. Denominator range [0..1].
SOURCE_ROOT\sys\dev\ixl\i40e_adminq_cmd.h	2525	err	V609 Divide by zero. Denominator range [0..1].
SOURCE_ROOT\sys\dev\ixl\i40e_hmc.c	368	err	V501 There are identical sub-expressions 'I40E_SD_TYPE_PAGED' to the left and to the right of the '==' operator.
SOURCE_ROOT\sys\dev\kbd\kbd.c	741	err	V595 The 'kbd' pointer was utilized before it was verified against nullptr. Check lines: 741, 753.
SOURCE_ROOT\sys\dev\md\md.c	886	err	V609 Divide by zero. Denominator range [0..2097152].
SOURCE_ROOT\sys\dev\mfi\mfi.c	3361	err	V595 The 'cm' pointer was utilized before it was verified against nullptr. Check lines: 3361, 3381.
SOURCE_ROOT\sys\dev\mfi\mfi_tbolt.c	1110	err	V547 Expression 'cdb[0] != 0x28 || cdb[0] != 0x2A' is always true. Probably the '&&' operator should be used here.
SOURCE_ROOT\sys\dev\mfi\mfi_tbolt.c	779	err	V512 A call of the 'memset' function will lead to overflow of the buffer 'cmd->io_request'.
SOURCE_ROOT\sys\dev\mfi\mfi_tbolt.c	183	err	V535 The variable 'i' is being used for this loop and for the outer loop. Check lines: 182, 183.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_eq.c	108	err	V629 Consider inspecting the 'MLX4_EQ_ENTRY_SIZE << eqe_factor' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_eq.c	1370	err	V629 Consider inspecting the '1 << i' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_eq.c	88	err	V616 The 'MLX4_DEV_CAP_FLAG_PORT_MNG_CHG_EV' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	839	err	V616 The 'MLX4_DEV_CAP_FLAG_COUNTERS' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	1138	err	V629 Consider inspecting the 'i << lg' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	1519	err	V616 The 'MLX4_DEV_CAP_FLAG_64B_CQE' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	1134	err	V629 Consider inspecting the '1 << lg' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	391	err	V569 Truncation of constant value 2147483648. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	1481	err	V568 It's odd that the argument of sizeof() operator is the '1 << 7' expression.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	1510	err	V616 The 'MLX4_DEV_CAP_FLAG_64B_EQE' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	1506	err	V616 The 'MLX4_DEV_CAP_FLAG_COUNTERS' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_fw.c	844	err	V616 The 'MLX4_DEV_CAP_FLAG_COUNTERS_EXT' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1999	err	V616 The 'MLX4_DEV_CAP_FLAG_VEP_MC_STEER' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	2004	err	V616 The 'MLX4_DEV_CAP_FLAG_VEP_UC_STEER' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	2005	err	V616 The 'MLX4_DEV_CAP_FLAG_VEP_MC_STEER' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	2219	err	V616 The 'MLX4_DEV_CAP_FLAG_COUNTERS' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	2313	err	V616 The 'MLX4_DEV_CAP_FLAG_COUNTERS' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	270	err	V629 Consider inspecting the 'domain << 20' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1782	err	V629 Consider inspecting the 'dev->caps.num_uars << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1998	err	V616 The 'MLX4_DEV_CAP_FLAG_VEP_UC_STEER' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1780	err	V629 Consider inspecting the 'dev->caps.num_uars << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	811	err	V616 The 'MLX4_DEV_CAP_FLAG_COUNTERS_EXT' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	774	err	V616 The 'MLX4_DEV_CAP_FLAG_SENSE_SUPPORT' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	729	err	V616 The 'MLX4_DEV_CAP_FLAG_FAST_DROP' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	2387	err	V616 The 'MLX4_DEV_CAP_FLAG_COUNTERS' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1266	err	V616 The 'MLX4_DEV_CAP_FLAG_SENSE_SUPPORT' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_mcg.c	1173	err	V567 Undefined behavior. The 'members_count' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_mcg.c	680	err	V616 The 'MLX4_DEV_CAP_FLAG_VEP_MC_STEER' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_mcg.c	632	err	V567 Undefined behavior. The 'members_count' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_mr.c	642	err	V629 Consider inspecting the 'i << buf->page_shift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_port.c	840	err	V616 The 'MLX4_DEV_CAP_FLAG_VEP_MC_STEER' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_profile.c	116	err	V629 Consider inspecting the '1 << log_mtts_per_seg' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_resource_tracker.c	3024	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'eqe'.
SOURCE_ROOT\sys\dev\mlx4\mlx4_en\mlx4_en_main.c	82	err	V616 The 'MLX4_DEV_CAP_FLAG_UDP_RSS' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx4\mlx4_en\mlx4_en_resources.c	57	err	V627 Consider inspecting the expression. The argument of sizeof() is the macro which expands to a number.
SOURCE_ROOT\sys\dev\mlx4\mlx4_en\mlx4_en_rx.c	764	err	V616 The 'MLX4_DEV_CAP_FLAG_FCS_KEEP' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\device.h	598	err	V512 A call of the 'memcpy' function will lead to the '& cqe->rss_hash_type' buffer becoming out of range.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_cmd.c	1247	err	V512 A call of the 'memset' function will lead to overflow of the buffer 'block'.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_cmd.c	1654	err	V629 Consider inspecting the '1 << cmd->max_reg_cmds' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_cmd.c	1371	err	V629 Consider inspecting the '1 << dev->cmd.log_sz' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_diagnostics.c	227	err	V616 The '(MLX5_PCIE_PERFORMANCE_COUNTERS_GROUP)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_diagnostics.c	116	err	V573 Uninitialized variable 'counter_id' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_diagnostics.c	189	err	V573 Uninitialized variable 'counter_id' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_main.c	366	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'dev->hca_caps_cur[MLX5_CAP_GENERAL]'.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_qp.c	159	err	V597 The compiler could delete the 'memset' function call, which is used to flush 'dout' object. The memset_s() function should be used to erase the private data.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_qp.c	323	err	V597 The compiler could delete the 'memset' function call, which is used to flush 'dout' object. The memset_s() function should be used to erase the private data.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_srq.c	62	err	V573 Uninitialized variable 'wq' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_srq.c	89	err	V616 The '(MLX5_SRQC_STATE_GOOD)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_srq.c	132	err	V573 Uninitialized variable 'page_offset' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_srq.c	131	err	V573 Uninitialized variable 'log_rq_stride' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_srq.c	130	err	V573 Uninitialized variable 'log_srq_size' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_srq.c	129	err	V573 Uninitialized variable 'log_page_size' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_vport.c	448	err	V616 The '(MLX5_NIC_VPORT_LIST_TYPE_UC)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_ethtool.c	237	err	V629 Consider inspecting the '1 << priv->params.log_rq_size' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_ethtool.c	695	err	V629 Consider inspecting the '1 << priv->params.log_rq_size' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_ethtool.c	208	err	V629 Consider inspecting the '1 << priv->params.log_sq_size' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_ethtool.c	694	err	V629 Consider inspecting the '1 << priv->params.log_sq_size' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1642	err	V573 Uninitialized variable 'wq' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2065	err	V616 The '(MLX5_TIRC_DISP_TYPE_DIRECT)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2120	err	V616 The '(MLX5_L4_PROT_TYPE_TCP)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2105	err	V616 The '(MLX5_L4_PROT_TYPE_TCP)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2103	err	V616 The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2177	err	V616 The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1733	err	V616 The '(MLX5_CQ_PERIOD_MODE_START_FROM_EQE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1727	err	V616 The '(MLX5_CQ_PERIOD_MODE_START_FROM_EQE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2191	err	V616 The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1708	err	V616 The '(MLX5_CQ_PERIOD_MODE_START_FROM_EQE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2133	err	V616 The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1702	err	V616 The '(MLX5_CQ_PERIOD_MODE_START_FROM_EQE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1095	err	V616 The '(MLX5_SQC_STATE_RST)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	777	err	V616 The '(MLX5_RQC_STATE_RST)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	622	err	V616 The '(MLX5E_STATE_ASYNC_EVENTS_ENABLE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	615	err	V616 The '(MLX5E_STATE_ASYNC_EVENTS_ENABLE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1660	err	V573 Uninitialized variable 'wq' was used. The variable was used to initialize itself.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	607	err	V616 The '(MLX5E_STATE_ASYNC_EVENTS_ENABLE)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	343	err	V616 The '(MLX5_IEEE_802_3_COUNTERS_GROUP)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	1644	err	V616 The '(MLX5_WQ_TYPE_LINKED_LIST)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mlx5\mlx5_en\mlx5_en_main.c	2163	err	V616 The '(MLX5_L3_PROT_TYPE_IPV4)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\mly\mly.c	2954	err	V595 The 'mc' pointer was utilized before it was verified against nullptr. Check lines: 2954, 2955.
SOURCE_ROOT\sys\dev\mly\mly.c	1511	err	V557 Array overrun is possible. The '3' index is pointing beyond array bound.
SOURCE_ROOT\sys\dev\mly\mly.c	1511	err	V557 Array overrun is possible. The '2' index is pointing beyond array bound.
SOURCE_ROOT\sys\dev\mly\mly.c	1511	err	V594 The '(u_int32_t *) & mc->mc_packetphys + 3' pointer steps out of array's bounds.
SOURCE_ROOT\sys\dev\mmc\mmc.c	1136	err	V629 Consider inspecting the '(1 + m) << (e + 2)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mmc\mmc.c	1073	err	V629 Consider inspecting the '(1 + m) << (e + 2)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\mpr\mpr_sas_lsi.c	1383	err	V595 The 'cm' pointer was utilized before it was verified against nullptr. Check lines: 1383, 1394.
SOURCE_ROOT\sys\dev\mps\mps_sas_lsi.c	1258	err	V595 The 'cm' pointer was utilized before it was verified against nullptr. Check lines: 1258, 1269.
SOURCE_ROOT\sys\dev\mpt\mpt_cam.c	3379	err	V547 Expression 'MPT_PRT_ALWAYS <= (mpt)->verbose' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\mpt\mpt_cam.c	2889	err	V547 Expression 'MPT_PRT_ALWAYS <= (mpt)->verbose' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\mpt\mpt_raid.c	573	err	V512 A call of the 'memcpy' function will lead to the '& reply->ActionData' buffer becoming out of range.
SOURCE_ROOT\sys\dev\mrsas\mrsas_cam.c	695	err	V512 A call of the 'memset' function will lead to overflow of the buffer 'cmd->io_request'.
SOURCE_ROOT\sys\dev\mrsas\mrsas_fp.c	336	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'pDrvRaidMap->arMapInfo'.
SOURCE_ROOT\sys\dev\mwl\mwlhal.c	2205	err	V575 The 'memcpy' function processes '0' elements. Inspect the third argument.
SOURCE_ROOT\sys\dev\mxge\if_mxge.c	1427	err	V763 Parameter 'arg2' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\ntb\ntb_hw\ntb_hw.c	1631	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\ntb\ntb_transport.c	595	err	V629 Consider inspecting the '1 << qp->qp_num' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\ntb\ntb_transport.c	626	err	V629 Consider inspecting the '1 << qp->qp_num' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\nvme\nvme_ns.c	568	err	V595 The 'ns->cdev' pointer was utilized before it was verified against nullptr. Check lines: 568, 571.
SOURCE_ROOT\sys\dev\nxge\if_nxge.c	511	err	V512 A call of the 'sprintf' function will lead to overflow of the buffer 'lldev->mtx_name_tx[qindex]'.
SOURCE_ROOT\sys\dev\nxge\if_nxge.c	1987	err	V621 Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all.
SOURCE_ROOT\sys\dev\nxge\if_nxge.c	2073	err	V621 Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all.
SOURCE_ROOT\sys\dev\nxge\if_nxge.c	1498	err	V579 The copyout function receives the pointer and its size as arguments. It is possibly a mistake. Inspect the third argument.
SOURCE_ROOT\sys\dev\nxge\xgehal\xgehal-mm.c	383	err	V595 The 'mempool->shadow_items_arr' pointer was utilized before it was verified against nullptr. Check lines: 383, 406.
SOURCE_ROOT\sys\dev\nxge\xgehal\xgehal-mm.c	393	err	V595 The 'mempool->memblocks_priv_arr' pointer was utilized before it was verified against nullptr. Check lines: 393, 417.
SOURCE_ROOT\sys\dev\nxge\xgehal\xgehal-mm.c	396	err	V595 The 'mempool->memblocks_arr' pointer was utilized before it was verified against nullptr. Check lines: 396, 422.
SOURCE_ROOT\sys\dev\oce\oce_if.c	800	err	V781 The value of the 'vector' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 800, 803.
SOURCE_ROOT\sys\dev\oce\oce_queue.c	780	err	V595 The 'mq' pointer was utilized before it was verified against nullptr. Check lines: 780, 784.
SOURCE_ROOT\sys\dev\patm\if_patm_tx.c	826	err	V654 The condition '!done' of loop is always true.
SOURCE_ROOT\sys\dev\patm\if_patm_tx.c	927	err	V629 Consider inspecting the 'vcc->vcc.tparam.scr << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pccard\pccard.c	900	err	V595 The 'devi' pointer was utilized before it was verified against nullptr. Check lines: 900, 906.
SOURCE_ROOT\sys\dev\pci\pci_iov.c	994	err	V629 Consider inspecting the '1 << map->pm_size' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_iov.c	345	err	V629 Consider inspecting the '1 << bar_shift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	543	err	V629 Consider inspecting the '(pci_read_config(dev, 0x26, 2)) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	542	err	V629 Consider inspecting the '(val) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	537	err	V629 Consider inspecting the '(pci_read_config(dev, 0x26, 2)) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	535	err	V629 Consider inspecting the '(val) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	486	err	V629 Consider inspecting the '(pci_read_config(dev, 0x30, 2)) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	509	err	V629 Consider inspecting the '(pci_read_config(dev, 0x22, 2)) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	488	err	V629 Consider inspecting the '(pci_read_config(dev, 0x32, 2)) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	507	err	V629 Consider inspecting the '(pci_read_config(dev, 0x20, 2)) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	493	err	V629 Consider inspecting the '(val) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pci\pci_pci.c	494	err	V629 Consider inspecting the '(pci_read_config(dev, 0x1d, 1)) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	4776	err	V512 A call of the 'memset' function will lead to underflow of the buffer '& pccb->tiSuperScsiRequest'.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	3960	err	V547 Expression 'pccb->targetId >= 0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	4606	err	V512 A call of the 'memset' function will lead to underflow of the buffer '& pccb->tiSuperScsiRequest'.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	3102	err	V595 The 'pmcsc' pointer was utilized before it was verified against nullptr. Check lines: 3102, 3108.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	3108	err	V547 Expression 'pccb->targetId >= 0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\osapi.c	767	err	V561 It's probably better to assign value to 'pCard' variable than to declare it anew. Previous declaration: lxencrypt.h, line 80.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\sahw.c	1949	err	V571 Recurring check. This condition was already verified in line 1946.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\saint.c	2023	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\saioctlcmd.c	2321	err	V547 Expression '(value & ((1 << 10) | (1 << 11))) == 0x2' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\saioctlcmd.c	2322	err	V547 Expression '(value & ((1 << 12) | (1 << 13))) == 0x2' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\sampirsp.c	7224	err	V560 A part of conditional expression is always true: 0x2002.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	2848	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	12652	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	11412	err	V547 Expression '(scsiCmnd->cdb[2] & 0x20) == 0x01' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	1996	err	V570 The 'satNewIOContext->interruptContext' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	1584	err	V763 Parameter 'satIntIo' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	13706	err	V595 The 'agFirstDword' pointer was utilized before it was verified against nullptr. Check lines: 13706, 13729.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	11498	err	V595 The 'satOrgIOContext' pointer was utilized before it was verified against nullptr. Check lines: 11498, 11501.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	11341	err	V595 The 'satOrgIOContext' pointer was utilized before it was verified against nullptr. Check lines: 11341, 11344.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	5793	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	4319	err	V570 The 'satNewIOContext->interruptContext' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	5828	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	6074	err	V595 The 'agDevHandle' pointer was utilized before it was verified against nullptr. Check lines: 6074, 6099.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	6491	err	V595 The 'onePortContext' pointer was utilized before it was verified against nullptr. Check lines: 6491, 6497.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3457	err	V570 The 'key' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3389	err	V570 The 'key' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3388	err	V570 The 'subkey1' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3387	err	V570 The 'subkey2' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3386	err	V570 The 'lenRecv' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3456	err	V570 The 'subkey1' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3454	err	V570 The 'lenRecv' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdinit.c	3455	err	V570 The 'subkey2' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	1939	err	V595 The 'agIOCTLPayload' pointer was utilized before it was verified against nullptr. Check lines: 1939, 1942.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	1340	err	V595 The 'tiRoot' pointer was utilized before it was verified against nullptr. Check lines: 1340, 1352.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	3396	err	V614 Uninitialized variable 'status' used.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	1344	err	V595 The 'agIOCTLPayload' pointer was utilized before it was verified against nullptr. Check lines: 1344, 1352.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	1885	err	V512 A call of the 'memcpy' function will lead to overflow of the buffer '& pIoErrorPayload->IoError'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	1065	err	V512 A call of the 'sprintf' function will lead to overflow of the buffer 'agIOCTLPayload->FunctionSpecificArea'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	1918	err	V512 A call of the 'memcpy' function will lead to overflow of the buffer '& pIoEventPayload->IoEvent'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	2522	err	V712 Be advised that compiler may delete this cycle or make it infinity. Use volatile variable(s) or synchronization primitives to avoid this.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c	278	err	V621 Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c	851	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& SN_id_limit'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c	539	err	V621 Consider inspecting the 'for' operator. It's possible that the loop will be executed incorrectly or won't be executed at all.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c	7403	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'tdSMPRequestBody->smpPayload'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c	7272	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'tdSMPRequestBody->smpPayload'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdinit.c	273	err	V570 The 'subkey1' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdinit.c	272	err	V570 The 'subkey2' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdinit.c	271	err	V570 The 'lenRecv' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdinit.c	274	err	V570 The 'key' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c	8320	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c	6404	err	V570 The 'satNewIOContext->interruptContext' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c	8355	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	11709	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& AllLogPages'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	11699	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& AllLogPages'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	8827	err	V547 Expression '(scsiCmnd->cdb[2] & 0x20) == 0x01' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	18591	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	11719	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& AllLogPages'.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	17030	err	V570 The 'satNewIOContext->interruptContext' variable is assigned to itself.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	18992	err	V763 Parameter 'satIntIo' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_cxt.c	1476	err	V610 Unspecified behavior. Check the shift operator '>>'. The left operand '(0xff << 24)' is negative.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_cxt.c	1465	err	V610 Unspecified behavior. Check the shift operator '>>'. The left operand '(0xff << 24)' is negative.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_cxt.c	1488	err	V610 Unspecified behavior. Check the shift operator '>>'. The left operand '(0xff << 24)' is negative.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dbg_fw_funcs.c	5232	err	V781 The value of the 'storm_id' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 5232, 5236.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dbg_fw_funcs.c	5208	err	V781 The value of the 'storm_id' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 5208, 5212.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dbg_fw_funcs.c	5181	err	V781 The value of the 'storm_id' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 5181, 5185.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	812	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'params->lldp_remote.peer_chassis_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	799	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'params->lldp_local.local_port_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	799	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'p_local->local_port_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	1472	err	V512 A call of the 'memcpy' function will lead to the '& dcbx_info->operational.params' buffer becoming out of range.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	812	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'p_remote->peer_chassis_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	1472	err	V512 A call of the 'memcpy' function will lead to overflow of the buffer '& p_hwfn->p_dcbx_info->set.config.params'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	796	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'p_local->local_chassis_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	799	err	V575 Buffer's size in bytes should be passed to the 'memcpy' function as the third argument instead of the number of processed elements.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	815	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'params->lldp_remote.peer_port_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	815	err	V575 Buffer's size in bytes should be passed to the 'memcpy' function as the third argument instead of the number of processed elements.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	812	err	V575 Buffer's size in bytes should be passed to the 'memcpy' function as the third argument instead of the number of processed elements.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	815	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'p_remote->peer_port_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	796	err	V575 Buffer's size in bytes should be passed to the 'memcpy' function as the third argument instead of the number of processed elements.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dcbx.c	796	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'params->lldp_local.local_chassis_id'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_init_fw_funcs.c	818	err	V547 Expression 'vport_id >= max_qm_global_rls' is always false. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_init_fw_funcs.c	407	err	V547 Expression is always false. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_init_fw_funcs.c	391	err	V547 Expression is always true. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_int.c	981	err	V629 Consider inspecting the '((1 << bit_len) - 1) << bit' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_int.c	1341	err	V501 There are identical sub-expressions to the left and to the right of the '&' operator: ((uint64_t) 0x7F) & (uint64_t) 0x7F
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_int.c	1342	err	V501 There are identical sub-expressions to the left and to the right of the '&' operator: ((uint64_t) 0x7F) & (uint64_t) 0x7F
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_l2.c	1428	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'p_second_filter'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\qlnx_os.c	1967	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'mcast->mac'.
SOURCE_ROOT\sys\dev\qlxgb\qla_os.c	227	err	V567 Undefined behavior. The 'ha->watchdog_ticks' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\qlxgbe\ql_isr.c	790	err	V522 Dereferencing of the null pointer 'ha' might take place.
SOURCE_ROOT\sys\dev\qlxgbe\ql_os.c	279	err	V567 Undefined behavior. The 'ha->watchdog_ticks' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\qlxge\qls_dump.c	589	err	V610 Unspecified behavior. Check the shift operator '>>'. The left operand '(0x1 << 31)' is negative.
SOURCE_ROOT\sys\dev\qlxge\qls_dump.c	1615	err	V512 A call of the 'memcpy' function will lead to the '"MPI Coredump"' buffer becoming out of range.
SOURCE_ROOT\sys\dev\qlxge\qls_os.c	322	err	V567 Undefined behavior. The 'ha->watchdog_ticks' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\re\if_re.c	1791	err	V595 The 'ifp' pointer was utilized before it was verified against nullptr. Check lines: 1791, 1807.
SOURCE_ROOT\sys\dev\rtwn\if_rtwn.c	760	err	V616 The 'tid' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\dev\rtwn\if_rtwn_rx.c	307	err	V569 Truncation of constant value -95. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\safe\safe.c	1608	err	V547 Expression 'j >= 0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\safe\safe.c	1596	err	V547 Expression 'j >= 0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\scc\scc_core.c	124	err	V629 Consider inspecting the 'abs(cl->cl_range) << sc->sc_bas.regshft' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\scc\scc_core.c	371	err	V629 Consider inspecting the 'abs(cl->cl_range) << regshft' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\sfxge\common\ef10_phy.c	559	err	V595 The 'valuesp' pointer was utilized before it was verified against nullptr. Check lines: 559, 566.
SOURCE_ROOT\sys\dev\sfxge\common\efx_filter.c	665	err	V547 Expression '__x >= __y' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\sfxge\common\siena_phy.c	474	err	V595 The 'esmp' pointer was utilized before it was verified against nullptr. Check lines: 474, 484.
SOURCE_ROOT\sys\dev\sfxge\common\siena_phy.c	674	err	V595 The 'valuesp' pointer was utilized before it was verified against nullptr. Check lines: 674, 687.
SOURCE_ROOT\sys\dev\sk\if_sk.c	3149	err	V595 The 'ifp1' pointer was utilized before it was verified against nullptr. Check lines: 3149, 3160.
SOURCE_ROOT\sys\dev\sk\if_sk.c	3141	err	V595 The 'ifp0' pointer was utilized before it was verified against nullptr. Check lines: 3141, 3157.
SOURCE_ROOT\sys\dev\sound\midi\midi.c	1153	err	V595 The 'm' pointer was utilized before it was verified against nullptr. Check lines: 1153, 1157.
SOURCE_ROOT\sys\dev\sound\midi\sequencer.c	944	err	V595 The 'scp' pointer was utilized before it was verified against nullptr. Check lines: 944, 947.
SOURCE_ROOT\sys\dev\sound\pci\cmi.c	1007	err	V595 The 'sc' pointer was utilized before it was verified against nullptr. Check lines: 1007, 1016.
SOURCE_ROOT\sys\dev\sound\pci\ds1.c	538	err	V763 Parameter 'blocksize' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\sound\pci\ds1.c	666	err	V763 Parameter 'blocksize' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\sound\pci\es137x.c	1882	err	V595 The 'es' pointer was utilized before it was verified against nullptr. Check lines: 1882, 1893.
SOURCE_ROOT\sys\dev\sound\pci\hda\hdaa.c	7080	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'as' class object.
SOURCE_ROOT\sys\dev\sound\pci\hda\hdaa.c	7069	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'as' class object.
SOURCE_ROOT\sys\dev\sound\pci\maestro.c	1337	err	V629 Consider inspecting the 'k ++ << (16 + 2 + 1)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\sound\pci\maestro3.c	999	err	V547 Expression is always false.
SOURCE_ROOT\sys\dev\sound\pci\maestro3.c	642	err	V547 Expression is always false.
SOURCE_ROOT\sys\dev\sound\pci\via8233.c	1375	err	V595 The 'via' pointer was utilized before it was verified against nullptr. Check lines: 1375, 1392.
SOURCE_ROOT\sys\dev\sound\pci\via82c686.c	604	err	V595 The 'via' pointer was utilized before it was verified against nullptr. Check lines: 604, 613.
SOURCE_ROOT\sys\dev\sound\pcm\ac97.c	918	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'codec' class object.
SOURCE_ROOT\sys\dev\sound\pcm\channel.c	676	err	V595 The 'c' pointer was utilized before it was verified against nullptr. Check lines: 676, 695.
SOURCE_ROOT\sys\dev\sound\pcm\channel.c	779	err	V595 The 'c' pointer was utilized before it was verified against nullptr. Check lines: 779, 786.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	830	err	V595 The 'i_dev' pointer was utilized before it was verified against nullptr. Check lines: 830, 831.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	1075	err	V595 The 'i_dev' pointer was utilized before it was verified against nullptr. Check lines: 1075, 1076.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	2561	err	V595 The 'i_dev' pointer was utilized before it was verified against nullptr. Check lines: 2561, 2589.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	2243	err	V595 The 'i_dev' pointer was utilized before it was verified against nullptr. Check lines: 2243, 2244.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	706	err	V595 The 'i_dev' pointer was utilized before it was verified against nullptr. Check lines: 706, 707.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	2170	err	V595 The 'i_dev' pointer was utilized before it was verified against nullptr. Check lines: 2170, 2171.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	2729	err	V535 The variable 'i' is being used for this loop and for the outer loop. Check lines: 2573, 2729.
SOURCE_ROOT\sys\dev\sound\pcm\feeder_eq.c	695	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'd' class object.
SOURCE_ROOT\sys\dev\sound\pcm\feeder_eq.c	683	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'd' class object.
SOURCE_ROOT\sys\dev\sound\pcm\sound.c	1023	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'd' class object.
SOURCE_ROOT\sys\dev\spibus\spigen.c	384	err	V595 The '* object' pointer was utilized before it was verified against nullptr. Check lines: 384, 390.
SOURCE_ROOT\sys\dev\stge\if_stge.c	1124	err	V629 Consider inspecting the '(nsegs) << 24' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\sym\sym_hipd.c	619	err	V595 The 'vbp' pointer was utilized before it was verified against nullptr. Check lines: 619, 622.
SOURCE_ROOT\sys\dev\sym\sym_hipd.c	4404	err	V595 The 'cp' pointer was utilized before it was verified against nullptr. Check lines: 4404, 4426.
SOURCE_ROOT\sys\dev\syscons\scvidctl.c	551	err	V595 The 'adp' pointer was utilized before it was verified against nullptr. Check lines: 551, 554.
SOURCE_ROOT\sys\dev\syscons\syscons.c	579	err	V595 The 'sc_console' pointer was utilized before it was verified against nullptr. Check lines: 579, 591.
SOURCE_ROOT\sys\dev\syscons\syscons.c	1820	err	V595 The 'sc->kbd' pointer was utilized before it was verified against nullptr. Check lines: 1820, 1824.
SOURCE_ROOT\sys\dev\syscons\syscons.c	1859	err	V595 The 'sc->kbd' pointer was utilized before it was verified against nullptr. Check lines: 1859, 1861.
SOURCE_ROOT\sys\dev\ti\if_ti.c	3826	err	V547 Expression 'mem_param->tgAddr >= 0x0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\dev\twe\twe.c	1679	err	V595 The 'p[0]' pointer was utilized before it was verified against nullptr. Check lines: 1679, 1690.
SOURCE_ROOT\sys\dev\twe\twe_freebsd.c	731	err	V595 The 'sc' pointer was utilized before it was verified against nullptr. Check lines: 731, 735.
SOURCE_ROOT\sys\dev\tws\tws_cam.c	1066	err	V522 Dereferencing of the null pointer 'sc' might take place.
SOURCE_ROOT\sys\dev\tws\tws_hdm.c	156	err	V595 The 'req' pointer was utilized before it was verified against nullptr. Check lines: 156, 169.
SOURCE_ROOT\sys\dev\txp\if_txp.c	401	err	V595 The 'rsp' pointer was utilized before it was verified against nullptr. Check lines: 401, 403.
SOURCE_ROOT\sys\dev\usb\controller\xhci.c	609	err	V570 The 'sc->sc_noport' variable is assigned to itself.
SOURCE_ROOT\sys\dev\usb\misc\uled.c	214	err	V579 The uled_ctrl_msg function receives the pointer and its size as arguments. It is possibly a mistake. Inspect the seventh argument.
SOURCE_ROOT\sys\dev\usb\storage\umass.c	2826	err	V512 A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_transfer.cmd_data'.
SOURCE_ROOT\sys\dev\usb\storage\umass.c	2748	err	V512 A call of the 'memset' function will lead to underflow of the buffer 'sc->sc_transfer.cmd_data'.
SOURCE_ROOT\sys\dev\usb\usb_debug.c	294	err	V547 Expression 'val < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\dev\usb\wlan\if_rsu.c	2460	err	V569 Truncation of constant value -96. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\usb\wlan\if_rsu.c	2089	err	V569 Truncation of constant value -96. The value range of unsigned char type: [0, 255].
SOURCE_ROOT\sys\dev\usb\wlan\if_run.c	5519	err	V590 Consider inspecting this expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\dev\virtio\scsi\virtio_scsi.c	611	err	V595 The 'sc->vtscsi_sim' pointer was utilized before it was verified against nullptr. Check lines: 611, 614.
SOURCE_ROOT\sys\dev\vmware\vmxnet3\if_vmx.c	2758	err	V590 Consider inspecting the 'error == 0 || error != 27' expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-blockpool.c	225	err	V595 The 'blockpool' pointer was utilized before it was verified against nullptr. Check lines: 225, 233.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-doorbells.c	113	err	V629 Consider inspecting the '1 << (16 - vp->vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-doorbells.c	255	err	V629 Consider inspecting the '1 << (16 - vp->vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-mm.c	448	err	V595 The 'mempool->shadow_items_arr' pointer was utilized before it was verified against nullptr. Check lines: 448, 471.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-mm.c	454	err	V595 The 'mempool->memblocks_priv_arr' pointer was utilized before it was verified against nullptr. Check lines: 454, 484.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-mrpcim.c	2494	err	V629 Consider inspecting the '1 << (16 - hldev->first_vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-mrpcim.c	2383	err	V629 Consider inspecting the '1 << (16 - hldev->first_vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	7933	err	V629 Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	10402	err	V629 Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	9321	err	V595 The 'vp' pointer was utilized before it was verified against nullptr. Check lines: 9321, 9329.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	9275	err	V595 The 'vp' pointer was utilized before it was verified against nullptr. Check lines: 9275, 9283.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	5363	err	V595 The 'vpath' pointer was utilized before it was verified against nullptr. Check lines: 5363, 5371.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	5305	err	V595 The 'vpath' pointer was utilized before it was verified against nullptr. Check lines: 5305, 5313.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	5205	err	V595 The 'vp' pointer was utilized before it was verified against nullptr. Check lines: 5205, 5213.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	10346	err	V629 Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	7835	err	V629 Consider inspecting the '1 << (16 - vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	7800	err	V629 Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	6122	err	V629 Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	5014	err	V629 Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	10285	err	V629 Consider inspecting the '1 << (16 - vpath->vp_id)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-virtualpath.c	2935	err	V567 Undefined behavior. The 'Key' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\dev\xen\gntdev\gntdev.c	612	err	V595 The 'gmap->map' pointer was utilized before it was verified against nullptr. Check lines: 612, 625.
SOURCE_ROOT\sys\dev\xen\xenstore\xenstore.c	1662	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'watch' class object.
SOURCE_ROOT\sys\dev\xen\xenstore\xenstore.c	1629	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'watch' class object.
SOURCE_ROOT\sys\dev\xen\xenstore\xenstore.c	1265	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'watch' class object.
SOURCE_ROOT\sys\fs\cd9660\cd9660_node.c	140	err	V629 Consider inspecting the 'off << imp->im_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\fs\cd9660\cd9660_node.c	192	err	V629 Consider inspecting the 'off << imp->im_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\fs\cd9660\cd9660_rrip.c	319	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\fs\cd9660\cd9660_vfsops.c	599	err	V512 A call of the 'memcpy' function will lead to the 'fhp' buffer becoming out of range.
SOURCE_ROOT\sys\fs\cd9660\cd9660_vfsops.c	465	err	V595 The 'supbp' pointer was utilized before it was verified against nullptr. Check lines: 465, 468.
SOURCE_ROOT\sys\fs\cd9660\cd9660_vfsops.c	812	err	V629 Consider inspecting the 'off << imp->im_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\fs\cd9660\cd9660_vfsops.c	260	err	V627 Consider inspecting the expression. The argument of sizeof() is the macro which expands to a number.
SOURCE_ROOT\sys\fs\cd9660\cd9660_vnops.c	834	err	V512 A call of the 'memcpy' function will lead to overflow of the buffer 'ap->a_fhp'.
SOURCE_ROOT\sys\fs\ext2fs\ext2_bmap.c	195	err	V629 Consider inspecting the '(ip->i_db[bn]) << (ump)->um_bptrtodb' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\fs\ext2fs\ext2_vnops.c	1055	err	V595 The 'xp' pointer was utilized before it was verified against nullptr. Check lines: 1055, 1059.
SOURCE_ROOT\sys\fs\fuse\fuse_node.c	247	err	V595 The 'cnp' pointer was utilized before it was verified against nullptr. Check lines: 247, 250.
SOURCE_ROOT\sys\fs\msdosfs\msdosfs_vnops.c	283	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\fs\nfs\nfs_commonacl.c	59	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonacl.c	58	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonacl.c	57	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonkrpc.c	857	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonkrpc.c	832	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonkrpc.c	831	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonkrpc.c	1014	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonkrpc.c	879	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonkrpc.c	863	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonkrpc.c	858	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonsubs.c	1373	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonsubs.c	1592	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonsubs.c	3235	err	V595 The 'nfsuserhash' pointer was utilized before it was verified against nullptr. Check lines: 3235, 3254.
SOURCE_ROOT\sys\fs\nfs\nfs_commonsubs.c	780	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfs\nfs_commonsubs.c	1388	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clbio.c	712	err	V595 The 'bp' pointer was utilized before it was verified against nullptr. Check lines: 712, 716.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4795	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	1712	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	1724	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	2100	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	2107	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	2970	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	3377	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	3906	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4674	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4137	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4138	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	478	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4139	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4194	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4195	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4196	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4198	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4200	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4230	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4231	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4232	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4233	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4234	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4235	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4140	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	232	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	485	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4841	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4976	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	5176	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	5817	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	5829	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4672	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4661	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4567	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4236	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4851	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4849	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4943	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4941	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clrpcops.c	4836	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	1010	err	V614 Potentially uninitialized pointer 'clp' used. Consider checking the first actual argument of the 'nfscl_finddeleg' function.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	4730	err	V595 The 'lyp' pointer was utilized before it was verified against nullptr. Check lines: 4730, 4736.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3470	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3264	err	V595 The 'nfhp' pointer was utilized before it was verified against nullptr. Check lines: 3264, 3294.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3208	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3211	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3341	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3342	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3361	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3468	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clstate.c	3469	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clvnops.c	2890	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdport.c	1587	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdport.c	1844	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdport.c	3309	err	V595 The 'procp' pointer was utilized before it was verified against nullptr. Check lines: 3309, 3314.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	4081	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3525	err	V595 The 'clp' pointer was utilized before it was verified against nullptr. Check lines: 3525, 3533.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3972	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2457	err	V595 The 'stp' pointer was utilized before it was verified against nullptr. Check lines: 2457, 2462.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3970	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	834	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	678	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	818	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3178	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3117	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3036	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3032	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2769	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2664	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2617	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2616	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3971	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2517	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2498	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2389	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2258	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2235	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2231	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2230	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2195	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	1870	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	1226	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	1190	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	852	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	2516	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	655	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	825	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3779	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3898	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3897	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3884	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3883	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3882	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3881	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3880	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3900	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3872	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3236	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3232	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3237	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3899	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	327	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	3901	err	V567 Undefined behavior. The 'tl' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdstate.c	519	err	V595 The 'nd' pointer was utilized before it was verified against nullptr. Check lines: 519, 529.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdstate.c	953	err	V614 Potentially uninitialized pointer 'lfp' used.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdstate.c	3629	err	V522 Dereferencing of the null pointer 'new_lfpp' might take place. The null pointer is passed into 'nfsrv_getlockfile' function. Inspect the second argument. Check lines: 'nfs_nfsdstate.c:5301'.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdstate.c	3629	err	V522 Dereferencing of the null pointer 'new_lfpp' might take place. The null pointer is passed into 'nfsrv_getlockfile' function. Inspect the second argument. Check lines: 'nfs_nfsdstate.c:5030'.
SOURCE_ROOT\sys\fs\unionfs\union_subr.c	281	err	V595 The 'lowervp' pointer was utilized before it was verified against nullptr. Check lines: 281, 293.
SOURCE_ROOT\sys\fs\unionfs\union_vnops.c	499	err	V595 The 'lvp' pointer was utilized before it was verified against nullptr. Check lines: 499, 514.
SOURCE_ROOT\sys\gdb\gdb_main.c	263	err	V501 There are identical sub-expressions 'gdb_rx_char() != ';'' to the left and to the right of the '||' operator.
SOURCE_ROOT\sys\geom\geom_disk.c	346	err	V629 Consider inspecting the 'seg_pages << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\geom\geom_slice.c	320	err	V595 The 'pp' pointer was utilized before it was verified against nullptr. Check lines: 320, 323.
SOURCE_ROOT\sys\geom\label\g_label_ufs.c	128	err	V590 Consider inspecting this expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\geom\raid\md_nvidia.c	531	err	V523 The 'then' statement is equivalent to the 'else' statement.
SOURCE_ROOT\sys\geom\vinum\geom_vinum_plex.c	173	err	V503 This is a nonsensical comparison: pointer >= 0.
SOURCE_ROOT\sys\geom\vinum\geom_vinum_raid5.c	610	err	V503 This is a nonsensical comparison: pointer >= 0.
SOURCE_ROOT\sys\geom\vinum\geom_vinum_raid5.c	602	err	V503 This is a nonsensical comparison: pointer >= 0.
SOURCE_ROOT\sys\kern\imgact_elf.c	2312	err	V614 Uninitialized variable 'structsize' used. Consider checking the second actual argument of the 'sbuf_bcat' function.
SOURCE_ROOT\sys\kern\kern_clocksource.c	570	err	V629 Consider inspecting the '1 << (flsl(div + div / 2) - 1)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\kern\kern_cpuset.c	1138	err	V595 The 'p' pointer was utilized before it was verified against nullptr. Check lines: 1138, 1165.
SOURCE_ROOT\sys\kern\kern_cpuset.c	1295	err	V610 Undefined behavior. Check the shift operator '<<'. The right operand ('....' = [0..255]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\kern\kern_descrip.c	192	err	V610 Undefined behavior. Check the shift operator '>>'. The right operand ('....' = [1..64]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\kern\kern_intr.c	375	err	V610 Undefined behavior. Check the shift operator '<<'. The right operand ('....' = [0..255]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\kern\kern_malloc.c	335	err	V629 Consider inspecting the '1 << zindx' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\kern\kern_module.c	162	err	V595 The 'container' pointer was utilized before it was verified against nullptr. Check lines: 162, 176.
SOURCE_ROOT\sys\kern\kern_ntptime.c	730	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(int64_t)(- 500000L)' is negative.
SOURCE_ROOT\sys\kern\kern_ntptime.c	419	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '(int64_t)(- 500000L)' is negative.
SOURCE_ROOT\sys\kern\kern_numa.c	153	err	V595 The 'p' pointer was utilized before it was verified against nullptr. Check lines: 153, 159.
SOURCE_ROOT\sys\kern\sched_ule.c	2829	err	V610 Undefined behavior. Check the shift operator '<<'. The right operand ('....' = [0..255]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\kern\subr_sleepqueue.c	1207	err	V535 The variable 'i' is being used for this loop and for the outer loop. Check lines: 1149, 1207.
SOURCE_ROOT\sys\kern\vfs_bio.c	3345	err	V629 Consider inspecting the '(i + 1) << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\kern\vfs_bio.c	3338	err	V629 Consider inspecting the 'i << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\kern\vfs_bio.c	2351	err	V595 The 'bp->b_vp' pointer was utilized before it was verified against nullptr. Check lines: 2351, 2361.
SOURCE_ROOT\sys\libkern\iconv.c	418	err	V547 Expression 'strlen(din.ia_converter) >= 31' is always false.
SOURCE_ROOT\sys\libkern\iconv.c	416	err	V547 Expression 'strlen(din.ia_to) >= 31' is always false.
SOURCE_ROOT\sys\libkern\iconv.c	414	err	V547 Expression 'strlen(din.ia_from) >= 31' is always false.
SOURCE_ROOT\sys\net\if.c	3651	err	V595 The 'ifp' pointer was utilized before it was verified against nullptr. Check lines: 3651, 3655.
SOURCE_ROOT\sys\net\if_enc.c	285	err	V595 The '* ctx->mp' pointer was utilized before it was verified against nullptr. Check lines: 285, 288.
SOURCE_ROOT\sys\net\if_spppsubr.c	4348	err	V557 Array overrun is possible. The '2' index is pointing beyond array bound.
SOURCE_ROOT\sys\net\if_spppsubr.c	4349	err	V557 Array overrun is possible. The '3' index is pointing beyond array bound.
SOURCE_ROOT\sys\net\iflib.c	1040	err	V781 The value of the 'i' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 1040, 1049.
SOURCE_ROOT\sys\net\iflib.c	1178	err	V781 The value of the 'j' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 1178, 1185.
SOURCE_ROOT\sys\net\mppcc.c	232	err	V547 Expression 'off < 8192' is always true.
SOURCE_ROOT\sys\net\mppcc.c	163	err	V753 The '&=' operation always sets a value of 'rtn' variable to zero.
SOURCE_ROOT\sys\net\route.c	1840	err	V595 The 'rt->rt_ifa' pointer was utilized before it was verified against nullptr. Check lines: 1840, 1852.
SOURCE_ROOT\sys\net\rtsock.c	979	err	V595 The 'sa' pointer was utilized before it was verified against nullptr. Check lines: 979, 990.
SOURCE_ROOT\sys\net\slcompress.c	571	err	V567 Undefined behavior. The 'cp' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\net\slcompress.c	567	err	V567 Undefined behavior. The 'cp' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\net\slcompress.c	559	err	V567 Undefined behavior. The 'cp' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\net\slcompress.c	563	err	V567 Undefined behavior. The 'cp' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\net\slcompress.c	565	err	V567 Undefined behavior. The 'cp' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\net80211\ieee80211_crypto_ccmp.c	379	err	V512 A call of the 'memcpy' function will lead to the 'wh->i_addr1' buffer becoming out of range.
SOURCE_ROOT\sys\net80211\ieee80211_hwmp.c	1925	err	V522 Dereferencing of the null pointer 'ni' might take place.
SOURCE_ROOT\sys\net80211\ieee80211_mesh.c	3250	err	V616 The '(IEEE80211_MPPID_MPM)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\net80211\ieee80211_mesh.c	3256	err	V616 The '(IEEE80211_MPPID_MPM)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\net80211\ieee80211_mesh.c	3265	err	V616 The '(IEEE80211_MPPID_MPM)' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\net80211\ieee80211_output.c	779	err	V557 Array overrun is possible. The 'ieee80211_send_setup' function processes value '16'. Inspect the fourth argument. Check lines: 'ieee80211_output.c:2266'.
SOURCE_ROOT\sys\net80211\ieee80211_output.c	779	err	V557 Array overrun is possible. The 'ieee80211_send_setup' function processes value '16'. Inspect the fourth argument. Check lines: 'ieee80211_output.c:961'.
SOURCE_ROOT\sys\net80211\ieee80211_output.c	956	err	V616 The 'tid' named constant with the value of 0 is used in the bitwise operation.
SOURCE_ROOT\sys\net80211\ieee80211_output.c	779	err	V557 Array overrun is possible. The 'ieee80211_send_setup' function processes value '16'. Inspect the fourth argument. Check lines: 'ieee80211_output.c:2924'.
SOURCE_ROOT\sys\net80211\ieee80211_output.c	779	err	V557 Array overrun is possible. The 'ieee80211_send_setup' function processes value '16'. Inspect the fourth argument. Check lines: 'ieee80211_output.c:845'.
SOURCE_ROOT\sys\netgraph\atm\ngatmbase.c	161	err	V595 The 'msg' pointer was utilized before it was verified against nullptr. Check lines: 161, 167.
SOURCE_ROOT\sys\netgraph\bluetooth\l2cap\ng_l2cap_evnt.c	1422	err	V590 Consider inspecting the 'len < 0 || len < sizeof (* hdr)' expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\netgraph\bluetooth\l2cap\ng_l2cap_ulpi.c	1536	err	V694 The condition (ptr+value) is only false if there is pointer overflow which is undefined behaviour anyway.
SOURCE_ROOT\sys\netgraph\ng_nat.c	374	err	V547 Expression is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\netgraph\ng_pppoe.c	1442	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'sp' class object.
SOURCE_ROOT\sys\netgraph\ng_pppoe.c	1609	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'sp' class object.
SOURCE_ROOT\sys\netgraph\ng_pppoe.c	1265	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'sp' class object.
SOURCE_ROOT\sys\netgraph\ng_pppoe.c	1528	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'sp' class object.
SOURCE_ROOT\sys\netgraph\ng_tty.c	387	err	V547 Expression 'sc->outqlen >= 0' is always true. Unsigned type value is always >= 0.
SOURCE_ROOT\sys\netgraph\ng_vjc.c	361	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'cs->cs_next' class object.
SOURCE_ROOT\sys\netgraph\ng_vjc.c	354	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'sl->last_cs' class object.
SOURCE_ROOT\sys\netinet\cc\cc_cubic.h	174	err	V629 Consider inspecting the 'ticks_since_cong << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netinet\cc\cc_cubic.h	208	err	V629 Consider inspecting the '(ticks_since_cong * smss) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netinet\cc\cc_cubic.h	225	err	V629 Consider inspecting the '(153 * ticks_since_cong * smss) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netinet\igmp.c	1935	err	V547 Expression is always true. Probably the '&&' operator should be used here.
SOURCE_ROOT\sys\netinet\ip_fastfwd.c	233	err	V713 The pointer m was utilized in the logical expression before it was verified against nullptr in the same logical expression.
SOURCE_ROOT\sys\netinet\ip_options.c	458	err	V512 A call of the 'memcpy' function will lead to the '& (opts->ip_srcrt.nop)' buffer becoming out of range.
SOURCE_ROOT\sys\netinet\libalias\alias_sctp.c	424	err	V547 Expression 'level < 0' is always false. Unsigned type value is never < 0.
SOURCE_ROOT\sys\netinet\libalias\alias_sctp.c	2132	err	V501 There are identical sub-expressions 'G_Addr->g_addr.s_addr' to the left and to the right of the '==' operator.
SOURCE_ROOT\sys\netinet\sctp_asconf.c	840	err	V512 A call of the 'memcmp' function will lead to underflow of the buffer '& aa->ap.addrp.addr'.
SOURCE_ROOT\sys\netinet\sctp_asconf.c	1273	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& aa->ap.addrp.addr'.
SOURCE_ROOT\sys\netinet\sctp_asconf.c	1486	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& aa->ap.addrp.addr'.
SOURCE_ROOT\sys\netinet\sctp_indata.c	1647	err	V595 The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 1647, 1658.
SOURCE_ROOT\sys\netinet\sctp_input.c	3027	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'cp'.
SOURCE_ROOT\sys\netinet\sctp_input.c	3027	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& bkup'.
SOURCE_ROOT\sys\netinet\sctp_input.c	5708	err	V595 The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 5708, 5723.
SOURCE_ROOT\sys\netinet\sctp_output.c	2790	err	V512 A call of the 'memcpy' function will lead to the '& ro->ro_dst' buffer becoming out of range.
SOURCE_ROOT\sys\netinet\sctp_output.c	6861	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& ca->sndrcv'.
SOURCE_ROOT\sys\netinet\sctp_output.c	6861	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'srcv'.
SOURCE_ROOT\sys\netinet\sctp_output.c	11408	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'hb->heartbeat.hb_info.address'.
SOURCE_ROOT\sys\netinet\sctp_pcb.c	4075	err	V654 The condition 'netlook != ((void *) 0)' of loop is always true.
SOURCE_ROOT\sys\netinet\sctp_pcb.c	4758	err	V595 The 'inp' pointer was utilized before it was verified against nullptr. Check lines: 4758, 4771.
SOURCE_ROOT\sys\netinet\sctp_pcb.c	4762	err	V595 The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 4762, 4771.
SOURCE_ROOT\sys\netinet\sctp_pcb.c	3877	err	V595 The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 3877, 3905.
SOURCE_ROOT\sys\netinet\sctp_pcb.c	3135	err	V512 A call of the 'memcpy' function will lead to the 'addr' buffer becoming out of range.
SOURCE_ROOT\sys\netinet\sctp_pcb.c	4757	err	V595 The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 4757, 4771.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	2779	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 's_info'.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	2841	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& ssp->ssp_addr'.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	2832	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& ssp->ssp_addr'.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	2786	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 's_info'.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	1133	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'sas'.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	1187	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'sas'.
SOURCE_ROOT\sys\netinet\sctputil.c	3316	err	V595 The 'stcb' pointer was utilized before it was verified against nullptr. Check lines: 3316, 3321.
SOURCE_ROOT\sys\netinet\sctputil.c	2856	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& spc->spc_aaddr'.
SOURCE_ROOT\sys\netinet\sctputil.c	2868	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& spc->spc_aaddr'.
SOURCE_ROOT\sys\netinet\sctputil.c	2868	err	V512 A call of the 'memcpy' function will lead to the 'sa' buffer becoming out of range.
SOURCE_ROOT\sys\netinet\sctputil.c	3300	err	V595 The 'stcb->sctp_ep' pointer was utilized before it was verified against nullptr. Check lines: 3300, 3321.
SOURCE_ROOT\sys\netinet\sctputil.c	3259	err	V595 The 'stcb->sctp_ep' pointer was utilized before it was verified against nullptr. Check lines: 3259, 3261.
SOURCE_ROOT\sys\netinet\tcp_subr.c	2124	err	V614 Potentially uninitialized pointer 'icmp6' used.
SOURCE_ROOT\sys\netinet6\icmp6.c	1587	err	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\netinet6\in6_mcast.c	1781	err	V595 The 'in6p' pointer was utilized before it was verified against nullptr. Check lines: 1781, 1787.
SOURCE_ROOT\sys\netinet6\in6_src.c	257	err	V595 The 'inp' pointer was utilized before it was verified against nullptr. Check lines: 257, 278.
SOURCE_ROOT\sys\netinet6\ip6_input.c	590	err	V595 The 'm' pointer was utilized before it was verified against nullptr. Check lines: 590, 609.
SOURCE_ROOT\sys\netinet6\ip6_input.c	1273	err	V595 The 'm' pointer was utilized before it was verified against nullptr. Check lines: 1273, 1287.
SOURCE_ROOT\sys\netinet6\nd6.c	2225	err	V590 Consider inspecting the 'error == 0 || error != - 1' expression. The expression is excessive or contains a misprint.
SOURCE_ROOT\sys\netipsec\ipsec_pcb.c	374	err	V753 The '&=' operation always sets a value of 'flags' variable to zero.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_prio.c	174	err	V629 Consider inspecting the '1 << (prio)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_prio.c	133	err	V629 Consider inspecting the '1 << (prio)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_prio.c	89	err	V629 Consider inspecting the '1 << (prio)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_prio.c	200	err	V629 Consider inspecting the '1 << (prio)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_qfq.c	699	err	V629 Consider inspecting the '1 << (grp->index)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_qfq.c	692	err	V629 Consider inspecting the '1 << (grp->index)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_qfq.c	440	err	V629 Consider inspecting the '1 << (slot)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_qfq.c	579	err	V629 Consider inspecting the '1 << (grp->index)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_qfq.c	590	err	V629 Consider inspecting the '1 << (grp->index)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_qfq.c	592	err	V629 Consider inspecting the '1 << (grp->index)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_qfq.c	691	err	V629 Consider inspecting the '1 << (grp->index)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\ip_dummynet.c	711	err	V595 The 'fs->aqmfp' pointer was utilized before it was verified against nullptr. Check lines: 711, 715.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_dynamic.c	1817	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'last' class object.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_dynamic.c	1715	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& (dst->rule)'.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_pfil.c	242	err	V595 The '* m0' pointer was utilized before it was verified against nullptr. Check lines: 242, 253.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_sockopt.c	2852	err	V763 Parameter 'op3' is always rewritten in function body before being used.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_sockopt.c	3212	err	V595 The 'ctl3_rewriters' pointer was utilized before it was verified against nullptr. Check lines: 3212, 3216.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_sockopt.c	3447	err	V595 The 'ctl3_handlers' pointer was utilized before it was verified against nullptr. Check lines: 3447, 3451.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_sockopt.c	1043	err	V595 The 'map' pointer was utilized before it was verified against nullptr. Check lines: 1043, 1052.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	1724	err	V629 Consider inspecting the '(cfg->size4 * 2) << 16' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	1309	err	V629 Consider inspecting the '(32 - cfg->mask4) << 24' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	1313	err	V629 Consider inspecting the '(32 - cfg->mask4) << 24' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	1318	err	V629 Consider inspecting the '(32 - cfg->mask4) << 24' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	529	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& tent->k'.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	1384	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& tent->k'.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	1845	err	V629 Consider inspecting the 'ta_log2(cfg->size4) << 8' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	3987	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& tent->k'.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_value.c	102	err	V512 A call of the 'memcmp' function will lead to underflow of the buffer '((struct table_val_link *) no)->pval'.
SOURCE_ROOT\sys\netpfil\ipfw\nat64\nat64lsn_control.c	173	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& cfg->prefix6'.
SOURCE_ROOT\sys\netpfil\ipfw\nat64\nat64lsn_control.c	173	err	V512 A call of the 'memcpy' function will lead to underflow of the buffer '& uc->prefix6'.
SOURCE_ROOT\sys\netpfil\ipfw\nat64\nat64stl.c	78	err	V567 Undefined behavior. The 'pktid' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\netpfil\pf\if_pfsync.c	1686	err	V595 The 'sc' pointer was utilized before it was verified against nullptr. Check lines: 1686, 1688.
SOURCE_ROOT\sys\netpfil\pf\pf_ioctl.c	2432	err	V595 The 'newpa' pointer was utilized before it was verified against nullptr. Check lines: 2432, 2434.
SOURCE_ROOT\sys\netpfil\pf\pf_ioctl.c	1546	err	V595 The 'newrule' pointer was utilized before it was verified against nullptr. Check lines: 1546, 1562.
SOURCE_ROOT\sys\netpfil\pf\pf_ioctl.c	3604	err	V595 The '* m' pointer was utilized before it was verified against nullptr. Check lines: 3604, 3606.
SOURCE_ROOT\sys\netpfil\pf\pf_table.c	464	err	V595 The 'size2' pointer was utilized before it was verified against nullptr. Check lines: 464, 488.
SOURCE_ROOT\sys\netpfil\pf\pf_table.c	911	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative.
SOURCE_ROOT\sys\netpfil\pf\pf_table.c	918	err	V610 Undefined behavior. Check the shift operator '<<'. The left operand '-1' is negative.
SOURCE_ROOT\sys\netsmb\smb_trantcp.c	177	err	V547 Expression is always false. Consider reviewing this expression.
SOURCE_ROOT\sys\nlm\nlm_advlock.c	319	err	V595 The 'ns' pointer was utilized before it was verified against nullptr. Check lines: 319, 334.
SOURCE_ROOT\sys\rpc\authunix_prot.c	77	err	V547 Expression 'namelen > 255' is always false.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	107	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	108	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	112	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	117	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	118	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	116	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	121	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	155	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	156	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_callmsg.c	120	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_prot.c	187	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_prot.c	188	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\rpc_prot.c	193	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\svc_auth_unix.c	98	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\svc_auth_unix.c	81	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\svc_auth_unix.c	91	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\svc_auth_unix.c	90	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\svc_auth_unix.c	89	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\svc_auth_unix.c	82	err	V567 Undefined behavior. The 'buf' variable is modified while being used twice between sequence points.
SOURCE_ROOT\sys\rpc\svc_dg.c	274	err	V595 The 'xprt->xp_socket' pointer was utilized before it was verified against nullptr. Check lines: 274, 279.
SOURCE_ROOT\sys\rpc\svc_vc.c	456	err	V595 The 'xprt->xp_socket' pointer was utilized before it was verified against nullptr. Check lines: 456, 463.
SOURCE_ROOT\sys\security\audit\audit_pipe.c	759	err	V547 Expression is always true.
SOURCE_ROOT\sys\security\mac\mac_process.c	352	err	V646 Consider inspecting the application's logic. It's possible that 'else' keyword is missing.
SOURCE_ROOT\sys\security\mac_bsdextended\mac_bsdextended.c	128	err	V617 Consider inspecting the condition. The '0x00000080' argument of the '|' bitwise operation contains a non-zero value.
SOURCE_ROOT\sys\ufs\ffs\ffs_alloc.c	1945	err	V629 Consider inspecting the '(got - run + 1) << (fs)->fs_fragshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\ufs\ffs\ffs_balloc.c	151	err	V629 Consider inspecting the '(nb + 1) << (fs)->fs_bshift' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\ufs\ffs\ffs_inode.c	150	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'ip->dinode_u.din1' class object.
SOURCE_ROOT\sys\ufs\ffs\ffs_inode.c	275	err	V547 Expression '(i) >= 12' is always false.
SOURCE_ROOT\sys\ufs\ffs\ffs_inode.c	155	err	V568 It's odd that 'sizeof()' operator evaluates the size of a pointer to a class, but not the size of the 'ip->dinode_u.din2' class object.
SOURCE_ROOT\sys\ufs\ffs\ffs_snapshot.c	1295	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\ufs\ffs\ffs_snapshot.c	1011	err	V629 Consider inspecting the expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\ufs\ffs\ffs_softdep.c	6600	err	V781 The value of the 'lastlbn' variable is checked after it was used. Perhaps there is a mistake in program logic. Check lines: 6600, 6618.
SOURCE_ROOT\sys\vm\vm_phys.c	1285	err	V629 Consider inspecting the '1 << (12 + order)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\vm\vm_phys.c	1440	err	V629 Consider inspecting the '1 << imin(oind, order)' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\x86\acpica\srat.c	495	err	V610 Undefined behavior. Check the shift operator '<<'. The right operand ('....' = [0..255]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\x86\acpica\srat.c	504	err	V610 Undefined behavior. Check the shift operator '<<'. The right operand ('....' = [0..255]) is greater than or equal to the length in bits of the promoted left operand.
SOURCE_ROOT\sys\x86\cpufreq\p4tcc.c	288	err	V629 Consider inspecting the 'val << 1' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\x86\cpufreq\powernow.c	733	err	V711 It is dangerous to create a local variable within a loop with a same name as a variable controlling this loop.
SOURCE_ROOT\sys\x86\x86\msi.c	600	err	V629 Consider inspecting the '(msi)->msi_cpu << 12' expression. Bit shifting of the 32-bit value with a subsequent expansion to the 64-bit type.
SOURCE_ROOT\sys\amd64\amd64\pmap.c	542	warn	V776 Potentially infinite loop. The variable in the loop exit condition '* m_gen > pmap_invl_gen' does not change its value between iterations.
SOURCE_ROOT\sys\amd64\amd64\pmap.c	2136	warn	V751 Parameter 'end' is not used inside function body.
SOURCE_ROOT\sys\amd64\ia32\ia32_reg.c	202	warn	V557 Array overrun is possible. The value of 'i' index could reach 15.
SOURCE_ROOT\sys\amd64\linux32\linux32_machdep.c	532	warn	V519 The 'act.lsa_mask.__mask' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 531, 532.
SOURCE_ROOT\sys\amd64\linux32\linux32_sysvec.c	595	warn	V519 The 'lmask.__mask' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 594, 595.
SOURCE_ROOT\sys\cam\ctl\ctl.c	8569	warn	V640 The code's operational logic does not correspond with its formatting. The statement is indented to the right, but it is always executed. It is possible that curly brackets are missing.
SOURCE_ROOT\sys\cam\ctl\ctl.c	1980	warn	V547 Expression 'softc->thresh_thread != ((void *) 0)' is always true. Pointer 'softc->thresh_thread' != NULL.
SOURCE_ROOT\sys\cam\ctl\ctl.c	6121	warn	V756 The 'j' counter is not used inside a nested loop. Consider inspecting usage of 'i' counter.
SOURCE_ROOT\sys\cam\ctl\ctl.c	1975	warn	V547 Expression 'softc->lun_thread != ((void *) 0)' is always true. Pointer 'softc->lun_thread' != NULL.
SOURCE_ROOT\sys\cam\ctl\ctl_frontend_iscsi.c	1443	warn	V560 A part of conditional expression is always true: ct->ct_online == 0.
SOURCE_ROOT\sys\cam\ctl\ctl_tpc.c	2456	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'token->token'.
SOURCE_ROOT\sys\cam\ctl\scsi_ctl.c	833	warn	V560 A part of conditional expression is always true.
SOURCE_ROOT\sys\cam\scsi\scsi_da.c	5843	warn	V684 A value of the variable 'ata_flags' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\cam\scsi\scsi_da.c	5823	warn	V684 A value of the variable 'ata_flags' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\cddl\compat\opensolaris\kern\opensolaris_uio.c	65	warn	V719 The switch statement does not cover all values of the 'uio_seg' enum: UIO_NOCOPY.
SOURCE_ROOT\sys\cddl\compat\opensolaris\kern\opensolaris_vfs.c	59	warn	V547 Expression 'vfsp->mnt_opt == ((void *) 0)' is always true. Pointer 'vfsp->mnt_opt' == NULL.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	1681	warn	V560 A part of conditional expression is always false: (proc->p_flag & 0).
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	1529	warn	V560 A part of conditional expression is always true: !(proc->p_flag & 0).
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\dtrace\dtrace.c	7506	warn	V560 A part of conditional expression is always true: !onintr.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\dmu_tx.c	115	warn	V560 A part of conditional expression is always true: err == 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\metaslab.c	1166	warn	V547 Expression 't == ((void *) 0)' is always false.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_file.c	86	warn	V547 Expression 'vd->vdev_path != ((void *) 0)' is always true. Pointer 'vd->vdev_path' != NULL.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_geom.c	1023	warn	V719 The switch statement does not cover all values of the 'zio_type' enum: ZIO_TYPES, ZIO_TYPE_CLAIM, ZIO_TYPE_NULL.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_label.c	594	warn	V719 The switch statement does not cover all values of the enum: VDEV_LABEL_REMOVE, VDEV_LABEL_SPLIT.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_raidz.c	722	warn	V760 Two identical blocks of text were found. The second block begins from line 722.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\vdev_raidz.c	732	warn	V760 Two identical blocks of text were found. The second block begins from line 732.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_acl.c	355	warn	V560 A part of conditional expression is always false: zp->z_is_sa.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_acl.c	428	warn	V560 A part of conditional expression is always false: zp->z_is_sa.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_fuid.c	512	warn	V547 Expression 'ksid == ((void *) 0)' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_ioctl.c	6527	warn	V560 A part of conditional expression is always false: rc != 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_ioctl.c	4529	warn	V560 A part of conditional expression is always true: !drc.drc_newfs.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_ioctl.c	6516	warn	V560 A part of conditional expression is always false: rc != 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_replay.c	404	warn	V547 Expression 'vp != ((void *) 0)' is always false.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	1782	warn	V547 Expression 'ksid' is always false.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	1007	warn	V547 Expression 'abuf != ((void *) 0)' is always false.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	882	warn	V560 A part of conditional expression is always false: limit == 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	882	warn	V560 A part of conditional expression is always false: limit > 0x7fffffffffffffff.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	931	warn	V560 A part of conditional expression is always false: (error = (0)) != 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	1686	warn	V614 Potentially uninitialized variable 'parent' used.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	1013	warn	V547 Expression 'abuf == ((void *) 0)' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	4316	warn	V560 A part of conditional expression is always true: zp->z_unlinked == 0.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	2075	warn	V547 Expression 'ksid' is always false.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zfs_vnops.c	1024	warn	V547 Expression 'abuf == ((void *) 0)' is always true.
SOURCE_ROOT\sys\cddl\contrib\opensolaris\uts\common\fs\zfs\zvol.c	1676	warn	V560 A part of conditional expression is always true: !is_dumpified.
SOURCE_ROOT\sys\compat\freebsd32\freebsd32_ioctl.c	132	warn	V557 Array overrun is possible. The value of 'i' index could reach 96.
SOURCE_ROOT\sys\compat\linux\linux_event.c	600	warn	V560 A part of conditional expression is always false: coargs.error != 0.
SOURCE_ROOT\sys\compat\linux\linux_futex.c	1306	warn	V512 A call of the 'fetch_robust_entry' function will lead to overflow of the buffer '& head->pending_list'.
SOURCE_ROOT\sys\compat\linux\linux_futex.c	1293	warn	V512 A call of the 'fetch_robust_entry' function will lead to overflow of the buffer '& head->list.next'.
SOURCE_ROOT\sys\compat\linux\linux_futex.c	1312	warn	V512 A call of the 'fetch_robust_entry' function will lead to overflow of the buffer '& entry->next'.
SOURCE_ROOT\sys\compat\linux\linux_ioctl.c	293	warn	V614 Potentially uninitialized variable 'mediasize' used.
SOURCE_ROOT\sys\compat\linux\linux_ioctl.c	231	warn	V614 Potentially uninitialized variable 'fwsectors' used.
SOURCE_ROOT\sys\compat\linux\linux_ioctl.c	231	warn	V614 Potentially uninitialized variable 'fwheads' used.
SOURCE_ROOT\sys\compat\linux\linux_ioctl.c	231	warn	V614 Potentially uninitialized variable 'sectorsize' used.
SOURCE_ROOT\sys\compat\linux\linux_signal.c	252	warn	V519 The 'set.__mask' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 251, 252.
SOURCE_ROOT\sys\compat\linux\linux_signal.c	336	warn	V519 The 'lset.__mask' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 335, 336.
SOURCE_ROOT\sys\compat\ndis\subr_ndis.c	2073	warn	V512 A call of the 'atomic_add_long' function will lead to overflow of the buffer 'addend'.
SOURCE_ROOT\sys\compat\ndis\subr_ndis.c	2081	warn	V512 A call of the 'atomic_subtract_long' function will lead to overflow of the buffer 'addend'.
SOURCE_ROOT\sys\compat\ndis\subr_ntoskrnl.c	1141	warn	V512 A call of the 'InterlockedExchange' function will lead to overflow of the buffer '& (ip)->irp_cancel'.
SOURCE_ROOT\sys\compat\ndis\subr_ntoskrnl.c	2376	warn	V512 A call of the 'atomic_subtract_long' function will lead to overflow of the buffer 'addend'.
SOURCE_ROOT\sys\compat\ndis\subr_ntoskrnl.c	2368	warn	V512 A call of the 'atomic_add_long' function will lead to overflow of the buffer 'addend'.
SOURCE_ROOT\sys\contrib\dev\acpica\components\events\evmisc.c	404	warn	V519 The 'Status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 402, 404.
SOURCE_ROOT\sys\contrib\dev\acpica\components\events\evregion.c	1020	warn	V519 The 'Status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1015, 1020.
SOURCE_ROOT\sys\contrib\dev\acpica\components\hardware\hwgpe.c	661	warn	V519 The 'Status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 660, 661.
SOURCE_ROOT\sys\contrib\dev\acpica\components\namespace\nsarguments.c	265	warn	V560 A part of conditional expression is always true: !RequiredParamCount.
SOURCE_ROOT\sys\contrib\dev\acpica\components\namespace\nsnames.c	327	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 318, 327.
SOURCE_ROOT\sys\contrib\dev\acpica\components\parser\psobject.c	779	warn	V763 Parameter 'Status' is always rewritten in function body before being used.
SOURCE_ROOT\sys\contrib\dev\acpica\components\resources\rsutils.c	644	warn	V666 Consider inspecting third argument of the function 'AcpiUtEvaluateObject'. It is possible that the value does not correspond with the length of a string which was passed with the second argument.
SOURCE_ROOT\sys\contrib\dev\acpica\components\tables\tbdata.c	1026	warn	V519 The 'Status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1012, 1026.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c	2736	warn	V560 A part of conditional expression is always false: !ah->ah_config.ath_hal_ht_enable.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_attach.c	2729	warn	V560 A part of conditional expression is always false: !ah->ah_config.ath_hal_ht_enable.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c	745	warn	V556 The values of different enum types are compared: (is_2ghz) == HAL_FREQ_BAND_2GHZ.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c	781	warn	V556 The values of different enum types are compared: (is_2ghz) == HAL_FREQ_BAND_2GHZ.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c	4183	warn	V560 A part of conditional expression is always true: nptr < 0.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_eeprom.c	709	warn	V556 The values of different enum types are compared: (is_2ghz) == HAL_FREQ_BAND_2GHZ.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_gpio.c	214	warn	V560 A part of conditional expression is always false: smart_ant.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_gpio.c	320	warn	V560 A part of conditional expression is always false: smart_ant.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_gpio.c	320	warn	V560 A part of conditional expression is always false: 0.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_misc.c	3292	warn	V560 A part of conditional expression is always false: 0.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_paprd.c	339	warn	V560 A part of conditional expression is always true: !is_2g.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_reset.c	2719	warn	V547 Expression 'chan == ((void *) 0)' is always false.
SOURCE_ROOT\sys\contrib\dev\ath\ath_hal\ar9300\ar9300_reset.c	5358	warn	V560 A part of conditional expression is always false: 0.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\fil.c	3454	warn	V519 The 'sum' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 3452, 3454.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_ftp_pxy.c	1933	warn	V666 Consider inspecting third argument of the function 'strncmp'. It is possible that the value does not correspond with the length of a string which was passed with the second argument.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_ftp_pxy.c	891	warn	V519 The 'inc' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 886, 891.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_ftp_pxy.c	400	warn	V519 The 'a1' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 397, 400.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_htable.c	655	warn	V547 Expression 'ipe->ipe_un.ipeu_char != ((void *) 0)' is always true. Pointer 'ipe->ipe_un.ipeu_char' != NULL.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_irc_pxy.c	290	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 286, 290.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_irc_pxy.c	140	warn	V666 Consider inspecting third argument of the function 'strncmp'. It is possible that the value does not correspond with the length of a string which was passed with the second argument.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_nat.c	7094	warn	V560 A part of conditional expression is always true: changed == - 1.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_nat6.c	3477	warn	V560 A part of conditional expression is always true: changed == - 1.
SOURCE_ROOT\sys\contrib\ipfilter\netinet\ip_nat6.c	1748	warn	V519 The 'sumd2' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1622, 1748.
SOURCE_ROOT\sys\contrib\libnv\nvpair.c	1699	warn	V547 Expression 'value == ((void *) 0)' is always false.
SOURCE_ROOT\sys\contrib\ngatm\netnatm\saal\saal_sscop.c	1468	warn	V592 The expression was enclosed by parentheses twice: '((n * 4 + 8))'. One pair of parentheses is unnecessary or misprint is present.
SOURCE_ROOT\sys\contrib\ngatm\netnatm\saal\saal_sscop.c	3993	warn	V592 The expression was enclosed by parentheses twice: '((sscop->maxstat * 4 + 12))'. One pair of parentheses is unnecessary or misprint is present.
SOURCE_ROOT\sys\contrib\ngatm\netnatm\saal\saal_sscop.c	4019	warn	V592 The expression was enclosed by parentheses twice: '((sscop->maxstat * 4 + 12))'. One pair of parentheses is unnecessary or misprint is present.
SOURCE_ROOT\sys\contrib\x86emu\x86emu.c	8321	warn	V612 An unconditional 'break' within a loop.
SOURCE_ROOT\sys\contrib\x86emu\x86emu.c	8253	warn	V612 An unconditional 'break' within a loop.
SOURCE_ROOT\sys\contrib\xz-embedded\linux\lib\xz\xz_dec_lzma2.c	789	warn	V557 Array overrun is possible. The value of 'i' index could reach 14133.
SOURCE_ROOT\sys\crypto\aesni\aesni_ghash.c	633	warn	V557 Array overrun is possible. The value of 'j' index could reach 14.
SOURCE_ROOT\sys\crypto\aesni\aesni_ghash.c	665	warn	V557 Array overrun is possible. The value of 'j' index could reach 14.
SOURCE_ROOT\sys\crypto\aesni\aesni_ghash.c	587	warn	V557 Array overrun is possible. The value of 'j' index could reach 14.
SOURCE_ROOT\sys\crypto\aesni\aesni_ghash.c	801	warn	V557 Array overrun is possible. The value of 'j' index could reach 14.
SOURCE_ROOT\sys\crypto\aesni\aesni_ghash.c	509	warn	V557 Array overrun is possible. The value of 'j' index could reach 14.
SOURCE_ROOT\sys\crypto\aesni\aesni_ghash.c	374	warn	V557 Array overrun is possible. The value of 'j' index could reach 14.
SOURCE_ROOT\sys\crypto\aesni\aesni_ghash.c	329	warn	V557 Array overrun is possible. The value of 'j' index could reach 14.
SOURCE_ROOT\sys\crypto\aesni\aesni_wrap.c	281	warn	V512 A call of the 'memcpy' function will lead to the '& tot' buffer becoming out of range.
SOURCE_ROOT\sys\crypto\camellia\camellia.c	931	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'kk'.
SOURCE_ROOT\sys\crypto\rijndael\rijndael-api-fst.c	156	warn	V756 The 'i' counter is not used inside a nested loop. Consider inspecting usage of 'k' counter.
SOURCE_ROOT\sys\crypto\rijndael\rijndael-api-fst.c	327	warn	V756 The 'i' counter is not used inside a nested loop. Consider inspecting usage of 'k' counter.
SOURCE_ROOT\sys\dev\aac\aac_disk.c	187	warn	V547 Expression 'sg != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\aac\aac_disk.c	214	warn	V547 Expression 'sg != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\aacraid\aacraid.c	521	warn	V560 A part of conditional expression is always false: ccfg->Command == ST_OK.
SOURCE_ROOT\sys\dev\aacraid\aacraid.c	2002	warn	V560 A part of conditional expression is always false: ccfg->Command == ST_OK.
SOURCE_ROOT\sys\dev\aacraid\aacraid.c	539	warn	V560 A part of conditional expression is always false: ccfg->Command == ST_OK.
SOURCE_ROOT\sys\dev\acpica\acpi.c	2901	warn	V519 The 'slp_state' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 2895, 2901.
SOURCE_ROOT\sys\dev\acpica\acpi.c	3263	warn	V547 Expression '(res) != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\acpica\acpi_pci_link.c	869	warn	V519 The 'status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 864, 869.
SOURCE_ROOT\sys\dev\advansys\advlib.c	1834	warn	V512 A call of the 'adv_put_scsiq' function will lead to overflow of the buffer '& scsiq->q1.cntl'.
SOURCE_ROOT\sys\dev\advansys\adw_pci.c	217	warn	V547 Expression 'regs == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\age\if_age.c	2197	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\age\if_age.c	1659	warn	V555 The expression 'm->m_len - hdrlen > 0' will work as 'm->m_len != hdrlen'.
SOURCE_ROOT\sys\dev\aic7xxx\ahc_isa.c	203	warn	V547 Expression 'regs != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\aic7xxx\aic79xx.c	5798	warn	V547 Expression 'scb_data == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\aic7xxx\aic79xx_inline.h	963	warn	V560 A part of conditional expression is always false: (ahd->features & AHD_REMOVABLE) != 0.
SOURCE_ROOT\sys\dev\alc\if_alc.c	2860	warn	V555 The expression 'm->m_len - hdrlen > 0' will work as 'm->m_len != hdrlen'.
SOURCE_ROOT\sys\dev\ale\if_ale.c	1829	warn	V555 The expression 'm->m_len - hdrlen > 0' will work as 'm->m_len != hdrlen'.
SOURCE_ROOT\sys\dev\ata\ata-lowlevel.c	228	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\dev\ata\ata-lowlevel.c	466	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_9287.c	262	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_9287.c	263	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_9287.c	254	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_9287.c	260	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_v4k.c	243	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_v4k.c	249	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_v4k.c	251	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ah_eeprom_v4k.c	252	warn	V557 Array overrun is possible. The value of 'j' index could reach 7.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5211\ar5211_misc.c	221	warn	V684 A value of the variable 'reg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5416\ar5416_cal.c	625	warn	V547 Expression 'h' is always true.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5416\ar5416_cal.c	829	warn	V519 The 'retval' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 814, 829.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5416\ar5416_reset.c	2555	warn	V592 The expression was enclosed by parentheses twice: ((expression)). One pair of parentheses is unnecessary or misprint is present.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5416\ar5416_spectral.c	201	warn	V519 The 'val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 200, 201.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar5416\ar5416_spectral.c	216	warn	V519 The 'val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 215, 216.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar9002\ar9285_btcoex.c	57	warn	V556 The values of different enum types are compared.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar9002\ar9285_diversity.c	151	warn	V684 A value of the variable 'regVal' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar9002\ar9285_diversity.c	123	warn	V519 The 'regVal' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 122, 123.
SOURCE_ROOT\sys\dev\ath\ath_hal\ar9002\ar9285_reset.c	782	warn	V592 The expression was enclosed by parentheses twice: ((expression)). One pair of parentheses is unnecessary or misprint is present.
SOURCE_ROOT\sys\dev\ath\ath_rate\sample\sample.h	169	warn	V519 The 't_sifs' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 164, 169.
SOURCE_ROOT\sys\dev\ath\ath_rate\sample\sample.h	168	warn	V519 The 't_slot' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 163, 168.
SOURCE_ROOT\sys\dev\ath\ath_rate\sample\sample.h	170	warn	V519 The 't_difs' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 165, 170.
SOURCE_ROOT\sys\dev\ath\if_ath.c	6830	warn	V560 A part of conditional expression is always true: an->an_swq_depth == 0.
SOURCE_ROOT\sys\dev\ath\if_ath_rx_edma.c	987	warn	V556 The values of different enum types are compared.
SOURCE_ROOT\sys\dev\atkbdc\psm.c	3300	warn	V614 Potentially uninitialized variable 'dxp' used. Consider checking the fifth actual argument of the 'log' function.
SOURCE_ROOT\sys\dev\atkbdc\psm.c	3300	warn	V614 Potentially uninitialized variable 'dyp' used. Consider checking the sixth actual argument of the 'log' function.
SOURCE_ROOT\sys\dev\atkbdc\psm.c	4365	warn	V560 A part of conditional expression is always true: sc->idlepacket.inputbytes == 0.
SOURCE_ROOT\sys\dev\atkbdc\psm.c	4050	warn	V751 Parameter 'z' is not used inside function body.
SOURCE_ROOT\sys\dev\bce\if_bce.c	713	warn	V681 The language standard does not define an order in which the 'pci_read_config' functions will be called during evaluation of arguments.
SOURCE_ROOT\sys\dev\bce\if_bce.c	1198	warn	V681 The language standard does not define an order in which the 'pci_read_config' functions will be called during evaluation of arguments.
SOURCE_ROOT\sys\dev\bce\if_bce.c	1137	warn	V560 A part of conditional expression is always true: (count == 0).
SOURCE_ROOT\sys\dev\bce\if_bce.c	8089	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\bce\if_bce.c	5159	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\bhnd\cores\chipc\pwrctl\bhnd_pwrctl_subr.c	476	warn	V519 The 'fpdelay' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 469, 476.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_bcm.c	325	warn	V547 Expression 'p == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_bcm.c	319	warn	V547 Expression 'p == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_bcm.c	272	warn	V555 The expression 'buflen - bufpos > 0' will work as 'buflen != bufpos'.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_bcm.c	234	warn	V555 The expression 'buflen - bufpos > 0' will work as 'buflen != bufpos'.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_btxt.c	291	warn	V547 Expression 'p == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\bhnd\nvram\bhnd_nvram_data_btxt.c	297	warn	V547 Expression 'p == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\bnxt\bnxt_txrx.c	110	warn	V519 The 'need_hi' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 107, 110.
SOURCE_ROOT\sys\dev\buslogic\bt_isa.c	84	warn	V547 Expression 'port' is always true.
SOURCE_ROOT\sys\dev\buslogic\bt_isa.c	72	warn	V547 Expression 'port' is always true.
SOURCE_ROOT\sys\dev\bwn\if_bwn.c	888	warn	V547 Expression 'ni != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\bwn\if_bwn_phy_g.c	459	warn	V547 Expression 'lo == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\bwn\if_bwn_phy_g.c	756	warn	V547 Expression 'lo == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\bwn\if_bwn_phy_g.c	929	warn	V560 A part of conditional expression is always false: 0.
SOURCE_ROOT\sys\dev\bxe\bxe.c	13302	warn	V578 An odd bitwise operation detected: (sc->pfunc_rel & 1) & 1. Consider verifying it.
SOURCE_ROOT\sys\dev\bxe\bxe.c	9467	warn	V684 A value of the variable 'index_data[1].flags' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\bxe\bxe.c	5408	warn	V547 Expression 'tx_total_pkt_size_bd == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\bxe\bxe.c	2515	warn	V681 The language standard does not define an order in which the 'pci_read_config' functions will be called during evaluation of arguments.
SOURCE_ROOT\sys\dev\bxe\bxe_elink.c	2356	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\bxe\bxe_elink.c	12016	warn	V673 The '(uint32_t)(~(1 << 1)) << 16' expression evaluates to 281474976514048. 48 bits are required to store the value, but the expression evaluates to the 'unsigned' type which can only hold '32' bits.
SOURCE_ROOT\sys\dev\bxe\ecore_init_ops.h	699	warn	V560 A part of conditional expression is always false: 0.
SOURCE_ROOT\sys\dev\bxe\ecore_sp.c	3914	warn	V684 A value of the variable 'data->config_table[i].flags' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\bxe\ecore_sp.c	6328	warn	V519 The 'rdata->sd_vlan_force_pri_flg' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 6327, 6328.
SOURCE_ROOT\sys\dev\bxe\ecore_sp.c	1107	warn	V684 A value of the variable 'cfg_entry->flags' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_ael1002.c	2176	warn	V614 Potentially uninitialized variable 'stat2' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_ael1002.c	2176	warn	V614 Potentially uninitialized variable 'stat1' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_ael1002.c	302	warn	V614 Potentially uninitialized variable 'stat2' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_aq100x.c	407	warn	V614 Potentially uninitialized variable 'adv' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_t3_hw.c	1536	warn	V519 The 'link_ok' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1529, 1536.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_tn1010.c	157	warn	V614 Potentially uninitialized variable 'adv' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_vsc8211.c	244	warn	V614 Potentially uninitialized variable 'adv' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_vsc8211.c	222	warn	V614 Potentially uninitialized variable 'status' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_vsc8211.c	185	warn	V614 Potentially uninitialized variable 'adv' used.
SOURCE_ROOT\sys\dev\cxgb\common\cxgb_vsc8211.c	149	warn	V614 Potentially uninitialized variable 'status' used.
SOURCE_ROOT\sys\dev\cxgb\ulp\tom\cxgb_cpl_io.c	1606	warn	V519 The 'tp->snd_una' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1605, 1606.
SOURCE_ROOT\sys\dev\cxgbe\t4_main.c	9824	warn	V614 Potentially uninitialized variable 'tid' used.
SOURCE_ROOT\sys\dev\cxgbe\t4_netmap.c	187	warn	V519 The 'param' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 184, 187.
SOURCE_ROOT\sys\dev\cxgbe\t4_sge.c	4784	warn	V763 Parameter 'n' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\cxgbe\tom\t4_cpl_io.c	339	warn	V519 The 'tp->snd_una' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 338, 339.
SOURCE_ROOT\sys\dev\cyapa\cyapa.c	1458	warn	V778 Two similar code fragments were found. Perhaps, this is a typo and 'cap_resy' variable should be used instead of 'cap_resx'.
SOURCE_ROOT\sys\dev\drm\drm_drawable.c	122	warn	V547 Expression 'info == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\drm\drm_drawable.c	100	warn	V547 Expression 'info != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\drm\drm_scatter.c	68	warn	V547 Expression 'dev->sg' is always false.
SOURCE_ROOT\sys\dev\drm\savage_state.c	150	warn	V571 Recurring check. The 'start <= 0x1C' condition was already verified in line 147.
SOURCE_ROOT\sys\dev\drm\savage_state.c	182	warn	V571 Recurring check. The 'start <= 0x27' condition was already verified in line 179.
SOURCE_ROOT\sys\dev\drm2\drm_bufs.c	175	warn	V560 A part of conditional expression is always false: ((1 << 12) > (1 << 12)).
SOURCE_ROOT\sys\dev\drm2\drm_context.c	274	warn	V512 A call of the 'atomic_clear_long' function will lead to a buffer overflow.
SOURCE_ROOT\sys\dev\drm2\drm_context.c	305	warn	V512 A call of the 'atomic_clear_long' function will lead to a buffer overflow.
SOURCE_ROOT\sys\dev\drm2\drm_crtc_helper.c	648	warn	V547 Expression 'set->fb == ((void *) 0)' is always false. Pointer 'set->fb' != NULL.
SOURCE_ROOT\sys\dev\drm2\drm_modes.c	1062	warn	V519 The 'was_digit' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1058, 1062.
SOURCE_ROOT\sys\dev\drm2\i915\dvo_ch7017.c	290	warn	V519 The 'lvds_pll_feedback_div' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 287, 290.
SOURCE_ROOT\sys\dev\drm2\i915\i915_debug.c	1737	warn	V519 The 'oid' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1734, 1737.
SOURCE_ROOT\sys\dev\drm2\i915\i915_debug.c	323	warn	V547 Expression 'obj' is always true.
SOURCE_ROOT\sys\dev\drm2\i915\i915_debug.c	328	warn	V547 Expression 'obj' is always true.
SOURCE_ROOT\sys\dev\drm2\i915\i915_gem.c	3811	warn	V547 Expression 'obj->gtt_space == ((void *) 0)' is always true. Pointer 'obj->gtt_space' == NULL.
SOURCE_ROOT\sys\dev\drm2\i915\i915_gem.c	2737	warn	V547 Expression 'obj->pages == ((void *) 0)' is always true. Pointer 'obj->pages' == NULL.
SOURCE_ROOT\sys\dev\drm2\i915\i915_gem_execbuffer.c	119	warn	V547 Expression 'target_obj == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	934	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	1382	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	975	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	1059	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	692	warn	V684 A value of the variable 'intel_dp->DP' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	262	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	1278	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	1030	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_ddi.c	1014	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2646	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2920	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2923	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2723	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4526	warn	V684 A value of the variable 'dpll' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	3177	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4510	warn	V684 A value of the variable 'dpll' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4219	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	5226	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	1705	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2601	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	1736	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2490	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2591	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	5251	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	5568	warn	V684 A value of the variable 'dpll' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	5581	warn	V684 A value of the variable 'dpll' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2725	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	5205	warn	V684 A value of the variable 'val' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4603	warn	V684 A value of the variable 'dpll' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2496	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2773	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2913	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4840	warn	V684 A value of the variable 'pipeconf' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2588	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4963	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4971	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	4952	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2604	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_display.c	2736	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_dp.c	1737	warn	V684 A value of the variable 'dp_reg_value' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_dp.c	1756	warn	V684 A value of the variable 'dp_reg_value' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_dp.c	890	warn	V684 A value of the variable 'intel_dp->DP' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_dp.c	1717	warn	V684 A value of the variable 'temp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_lvds.c	381	warn	V684 A value of the variable 'pfit_control' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_pm.c	3731	warn	V684 A value of the variable 'reg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_pm.c	3730	warn	V684 A value of the variable 'reg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_pm.c	3732	warn	V684 A value of the variable 'reg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\i915\intel_tv.c	958	warn	V684 A value of the variable 'tv_ctl' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\atom.c	927	warn	V519 The 'dst' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 925, 927.
SOURCE_ROOT\sys\dev\drm2\radeon\atom.c	946	warn	V519 The 'dst' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 944, 946.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen.c	2110	warn	V684 A value of the variable 'rdev->config.evergreen.tile_config' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen.c	2121	warn	V684 A value of the variable 'rdev->config.evergreen.tile_config' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\evergreen.c	2092	warn	V684 A value of the variable 'rdev->config.evergreen.tile_config' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\ni.c	617	warn	V684 A value of the variable 'rdev->config.cayman.tile_config' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\ni.c	636	warn	V684 A value of the variable 'rdev->config.cayman.tile_config' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\r100.c	3208	warn	V684 A value of the variable 'flags' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\r600_hdmi.c	308	warn	V560 A part of conditional expression is always true: !hdmi_audio_workaround.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_combios.c	1308	warn	V684 A value of the variable 'lvds->lvds_gen_cntl' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_cp.c	461	warn	V592 The expression was enclosed by parentheses twice: '((1 | ((gb_pipe_sel >> 8) & 0xf) << 4))'. One pair of parentheses is unnecessary or misprint is present.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_cp.c	2151	warn	V650 Type casting operation is utilized 2 times in succession. Next, the '+' operation is executed. Probably meant: (T1)((T2)a + b).
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_i2c.c	174	warn	V519 The 'temp' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 172, 174.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_i2c.c	726	warn	V684 A value of the variable 'reg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_i2c.c	155	warn	V519 The 'temp' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 153, 155.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_legacy_encoders.c	1200	warn	V684 A value of the variable 'tv_dac_cntl' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_legacy_tv.c	612	warn	V684 A value of the variable 'tv_rgb_cntl' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_legacy_tv.c	691	warn	V684 A value of the variable 'tv_dac_cntl' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_test.c	493	warn	V764 Possible incorrect order of arguments passed to 'radeon_test_ring_sync2' function: 'ringC' and 'ringB'.
SOURCE_ROOT\sys\dev\drm2\radeon\radeon_ttm.c	270	warn	V519 The 'r' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 266, 270.
SOURCE_ROOT\sys\dev\drm2\radeon\rv770.c	289	warn	V519 The 'tmp' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 259, 289.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	1681	warn	V684 A value of the variable 'rdev->config.si.tile_config' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	1546	warn	V684 A value of the variable 'data' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\drm2\radeon\si.c	1697	warn	V684 A value of the variable 'rdev->config.si.tile_config' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\e1000\e1000_82541.c	649	warn	V519 The 'ret_val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 634, 649.
SOURCE_ROOT\sys\dev\e1000\e1000_82543.c	1244	warn	V519 The 'ret_val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1238, 1244.
SOURCE_ROOT\sys\dev\e1000\e1000_82575.c	1217	warn	V519 The 'ret_val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1202, 1217.
SOURCE_ROOT\sys\dev\e1000\e1000_82575.c	836	warn	V519 The 'ret_val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 833, 836.
SOURCE_ROOT\sys\dev\e1000\e1000_ich8lan.c	4132	warn	V519 The 'act_offset' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 4127, 4132.
SOURCE_ROOT\sys\dev\e1000\e1000_ich8lan.c	489	warn	V560 A part of conditional expression is always false: (phy->id != 0).
SOURCE_ROOT\sys\dev\e1000\e1000_ich8lan.c	489	warn	V560 A part of conditional expression is always true: (phy->id != 0xFFFFFFF0).
SOURCE_ROOT\sys\dev\e1000\e1000_ich8lan.c	2661	warn	V519 The 'ret_val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 2655, 2661.
SOURCE_ROOT\sys\dev\e1000\e1000_ich8lan.c	4175	warn	V519 The 'act_offset' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 4172, 4175.
SOURCE_ROOT\sys\dev\e1000\e1000_vf.c	426	warn	V519 The 'msgbuf[0]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 422, 426.
SOURCE_ROOT\sys\dev\e1000\e1000_vf.c	333	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'msg_addr'.
SOURCE_ROOT\sys\dev\en\if_en_pci.c	148	warn	V519 The 'dummy' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 145, 148.
SOURCE_ROOT\sys\dev\fatm\if_fatm.c	2321	warn	V684 A value of the variable 'cmd' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\fdc\fdc_acpi.c	239	warn	V547 Expression 'obj == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\firewire\fwdev.c	360	warn	V547 Expression 'ir->stproc != ((void *) 0)' is always true. Pointer 'ir->stproc' != NULL.
SOURCE_ROOT\sys\dev\fxp\if_fxp.c	2215	warn	V547 Expression 'txp != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\hatm\if_hatm_tx.c	705	warn	V684 A value of the variable 'tsr0' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\hptmv\entry.c	1002	warn	V547 Expression 'pVBus' is always true.
SOURCE_ROOT\sys\dev\hyperv\utilities\hv_kvp.c	519	warn	V560 A part of conditional expression is always false: (hkey_len < 0).
SOURCE_ROOT\sys\dev\hyperv\utilities\unicode.h	158	warn	V763 Parameter 'dst' is always rewritten in function body before being used.
SOURCE_ROOT\sys\dev\iir\iir.c	376	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\dev\intel\spi.c	338	warn	V684 A value of the variable 'reg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\intpm\intpm.c	188	warn	V547 Expression 'res == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\ipmi\ipmi_kcs.c	159	warn	V519 The 'status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 147, 159.
SOURCE_ROOT\sys\dev\ipmi\ipmi_kcs.c	126	warn	V519 The 'status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 120, 126.
SOURCE_ROOT\sys\dev\isci\scil\sati_mode_sense_10.c	167	warn	V764 Possible incorrect order of arguments passed to 'sati_ata_identify_device_get_sector_info' function: 'lba_low' and 'lba_high'.
SOURCE_ROOT\sys\dev\isci\scil\sati_util.c	621	warn	V764 Possible incorrect order of arguments passed to 'sati_scsi_fixed_sense_data_construct' function: 'scsi_status' and 'response_code'.
SOURCE_ROOT\sys\dev\isci\scil\sati_util.c	626	warn	V764 Possible incorrect order of arguments passed to 'sati_scsi_descriptor_sense_data_construct' function: 'scsi_status' and 'response_code'.
SOURCE_ROOT\sys\dev\isci\scil\scic_sds_stp_request.c	1549	warn	V519 The 'status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1543, 1549.
SOURCE_ROOT\sys\dev\isci\scil\scif_sas_controller.c	679	warn	V512 A call of the 'scic_controller_get_interrupt_coalescence' function will lead to a buffer overflow.
SOURCE_ROOT\sys\dev\isci\scil\scif_sas_smp_remote_device.c	197	warn	V556 The values of different enum types are compared. Types: _SCI_IO_STATUS, _SCI_STATUS.
SOURCE_ROOT\sys\dev\iscsi_initiator\isc_cam.c	204	warn	V547 Expression 'sp == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\iscsi_initiator\isc_subr.c	231	warn	V519 The 'sp->opt.maxluns' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 230, 231.
SOURCE_ROOT\sys\dev\iscsi_initiator\iscsi.c	425	warn	V555 The expression '(pq->len - sizeof (union ipdu_u)) > 0' will work as 'pq->len != sizeof (union ipdu_u)'.
SOURCE_ROOT\sys\dev\isp\isp_freebsd.c	424	warn	V519 The 'retval' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 422, 424.
SOURCE_ROOT\sys\dev\isp\isp_freebsd.c	266	warn	V776 Potentially infinite loop. The variable in the loop exit condition '* num_threads != 0' does not change its value between iterations.
SOURCE_ROOT\sys\dev\isp\isp_pci.c	883	warn	V547 Expression 'isp->isp_osinfo.fw == ((void *) 0)' is always true. Pointer 'isp->isp_osinfo.fw' == NULL.
SOURCE_ROOT\sys\dev\iwn\if_iwn.c	5122	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'dst'.
SOURCE_ROOT\sys\dev\iwn\if_iwn.c	6099	warn	V560 A part of conditional expression is always true: calib->cck_state != 0.
SOURCE_ROOT\sys\dev\ixgb\if_ixgb.c	1581	warn	V519 The 'reg_tctl' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1580, 1581.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	4501	warn	V519 The 'queue_list' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 4494, 4501.
SOURCE_ROOT\sys\dev\ixgbe\if_ix.c	2660	warn	V560 A part of conditional expression is always true: (ixgbe_num_queues == 0).
SOURCE_ROOT\sys\dev\ixgbe\ix_txrx.c	705	warn	V547 Expression 'txr->tx_buffers != ((void *) 0)' is always true. Pointer 'txr->tx_buffers' != NULL.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_82598.c	128	warn	V519 The 'ret_val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 127, 128.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_82599.c	956	warn	V684 A value of the variable 'autoc' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_vf.c	354	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'msg_addr'.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_vf.c	502	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'msg_addr'.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_x540.c	69	warn	V519 The 'ret_val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 68, 69.
SOURCE_ROOT\sys\dev\ixgbe\ixgbe_x550.c	1338	warn	V519 The 'status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1335, 1338.
SOURCE_ROOT\sys\dev\ixl\if_ixlv.c	1077	warn	V552 A bool type variable is being incremented: send_api_ver_retried ++. Perhaps another variable should be incremented instead.
SOURCE_ROOT\sys\dev\ixl\if_ixlv.c	1896	warn	V519 The 'reg' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1893, 1896.
SOURCE_ROOT\sys\dev\ixl\ixl_txrx.c	1013	warn	V519 The 'mh->m_len' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1012, 1013.
SOURCE_ROOT\sys\dev\jme\if_jme.c	588	warn	V519 The 'map[((11) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 586, 588.
SOURCE_ROOT\sys\dev\jme\if_jme.c	592	warn	V519 The 'map[((13) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 590, 592.
SOURCE_ROOT\sys\dev\jme\if_jme.c	590	warn	V519 The 'map[((12) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 588, 590.
SOURCE_ROOT\sys\dev\jme\if_jme.c	584	warn	V519 The 'map[((9) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 582, 584.
SOURCE_ROOT\sys\dev\jme\if_jme.c	600	warn	V519 The 'map[((19) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 598, 600.
SOURCE_ROOT\sys\dev\jme\if_jme.c	608	warn	V519 The 'map[((24) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 606, 608.
SOURCE_ROOT\sys\dev\jme\if_jme.c	612	warn	V519 The 'map[((22) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 610, 612.
SOURCE_ROOT\sys\dev\jme\if_jme.c	586	warn	V519 The 'map[((10) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 584, 586.
SOURCE_ROOT\sys\dev\jme\if_jme.c	594	warn	V519 The 'map[((14) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 592, 594.
SOURCE_ROOT\sys\dev\jme\if_jme.c	1074	warn	V560 A part of conditional expression is always false: sc->jme_rx_coal_pkt > 255.
SOURCE_ROOT\sys\dev\jme\if_jme.c	596	warn	V519 The 'map[((15) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 594, 596.
SOURCE_ROOT\sys\dev\jme\if_jme.c	1073	warn	V560 A part of conditional expression is always false: sc->jme_rx_coal_pkt < 1.
SOURCE_ROOT\sys\dev\jme\if_jme.c	602	warn	V519 The 'map[((18) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 600, 602.
SOURCE_ROOT\sys\dev\jme\if_jme.c	604	warn	V519 The 'map[((17) / 8)]' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 602, 604.
SOURCE_ROOT\sys\dev\jme\if_jme.c	1047	warn	V560 A part of conditional expression is always false: sc->jme_tx_coal_pkt < 1.
SOURCE_ROOT\sys\dev\jme\if_jme.c	1048	warn	V560 A part of conditional expression is always false: sc->jme_tx_coal_pkt > 255.
SOURCE_ROOT\sys\dev\le\if_le_pci.c	225	warn	V684 A value of the variable 'reg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\lmc\if_lmc.c	4049	warn	V547 Expression 'meta == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\lmc\if_lmc.c	1869	warn	V681 The language standard does not define an order in which the 'read_framer' functions will be called during evaluation of arguments.
SOURCE_ROOT\sys\dev\malo\if_malo.c	1259	warn	V547 Expression 'bf != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\mfi\mfi_disk.c	120	warn	V612 An unconditional 'break' within a loop.
SOURCE_ROOT\sys\dev\mfi\mfi_syspd.c	122	warn	V612 An unconditional 'break' within a loop.
SOURCE_ROOT\sys\dev\mii\icsphy.c	181	warn	V519 The 'qpr' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 180, 181.
SOURCE_ROOT\sys\dev\mii\xmphy.c	228	warn	V519 The 'bmcr' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 226, 228.
SOURCE_ROOT\sys\dev\mlx\mlx.c	1796	warn	V560 A part of conditional expression is always true: (count < 30).
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_icm.c	136	warn	V560 A part of conditional expression is always false: (gfp_mask & 0).
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	844	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1266	warn	V560 A part of conditional expression is always true.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1998	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	1999	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	774	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	2005	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_main.c	2004	warn	V560 A part of conditional expression is always false.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_pd.c	219	warn	V519 The 'bf->uar' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 216, 219.
SOURCE_ROOT\sys\dev\mlx4\mlx4_core\mlx4_port.c	1043	warn	V592 The expression was enclosed by parentheses twice: '((vf_gids / dev->num_vfs + 1))'. One pair of parentheses is unnecessary or misprint is present.
SOURCE_ROOT\sys\dev\mlx4\mlx4_en\mlx4_en_main.c	81	warn	V560 A part of conditional expression is always true.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_diagnostics.c	120	warn	V560 A part of conditional expression is always true: index < 0.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_eswitch_vacl.c	786	warn	V728 An excessive check can be simplified. The '||' operator is surrounded by opposite expressions '!spoofchk' and 'spoofchk'. 
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_fw.c	58	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'dev->board_id'.
SOURCE_ROOT\sys\dev\mlx5\mlx5_core\mlx5_uar.c	75	warn	V560 A part of conditional expression is always true: tot_uuars - NUM_LOW_LAT_UUARS.
SOURCE_ROOT\sys\dev\mpr\mpr_sas_lsi.c	362	warn	V547 Expression 'cm' is always true.
SOURCE_ROOT\sys\dev\mpr\mpr_user.c	1906	warn	V560 A part of conditional expression is always true: (status == 0).
SOURCE_ROOT\sys\dev\mpr\mpr_user.c	1409	warn	V560 A part of conditional expression is always true: (pBuffer->unique_id == (0x00000000)).
SOURCE_ROOT\sys\dev\mps\mps.c	2376	warn	V519 The 'sge->FlagsLength' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 2349, 2376.
SOURCE_ROOT\sys\dev\mps\mps_user.c	1881	warn	V560 A part of conditional expression is always true: (status == 0).
SOURCE_ROOT\sys\dev\mps\mps_user.c	1384	warn	V560 A part of conditional expression is always true: (pBuffer->unique_id == (0x00000000)).
SOURCE_ROOT\sys\dev\mrsas\mrsas.c	2266	warn	V519 The 'tmp_sectors' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 2262, 2266.
SOURCE_ROOT\sys\dev\mrsas\mrsas.c	304	warn	V519 The 'status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 301, 304.
SOURCE_ROOT\sys\dev\mrsas\mrsas.c	1708	warn	V547 Expression 'sense_data' is always true.
SOURCE_ROOT\sys\dev\mrsas\mrsas.c	1710	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'sense_data'.
SOURCE_ROOT\sys\dev\msk\if_msk.c	789	warn	V760 Two identical blocks of text were found. The second block begins from line 798.
SOURCE_ROOT\sys\dev\msk\if_msk.c	721	warn	V760 Two identical blocks of text were found. The second block begins from line 730.
SOURCE_ROOT\sys\dev\msk\if_msk.c	4499	warn	V519 The 'child' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 4496, 4499.
SOURCE_ROOT\sys\dev\mxge\if_mxge.c	4002	warn	V560 A part of conditional expression is always true: (err == 0).
SOURCE_ROOT\sys\dev\mxge\if_mxge.c	2878	warn	V571 Recurring check. The 'tx->req == tx->done' condition was already verified in line 2875.
SOURCE_ROOT\sys\dev\mxge\if_mxge.c	2940	warn	V547 Expression 'ptr == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\nxge\if_nxge.c	280	warn	V581 The conditional expressions of the 'if' operators situated alongside each other are identical. Check lines: 277, 280.
SOURCE_ROOT\sys\dev\nxge\xgehal\xgehal-config.c	282	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 277, 282.
SOURCE_ROOT\sys\dev\nxge\xgehal\xgehal-mgmt.c	1315	warn	V519 The 'val64' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1313, 1315.
SOURCE_ROOT\sys\dev\oce\oce_if.c	2442	warn	V581 The conditional expressions of the 'if' operators situated alongside each other are identical. Check lines: 2437, 2442.
SOURCE_ROOT\sys\dev\oce\oce_if.c	1881	warn	V547 Expression 'lro' is always true.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	3504	warn	V560 A part of conditional expression is always true: (csmpio->smp_response_sglist_cnt == 0).
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	425	warn	V547 Expression 'devList' is always true.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	1878	warn	V547 Expression 'pmcsc != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	3147	warn	V547 Expression '!pccb->devHandle' is always false.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	2156	warn	V547 Expression 'csio == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\freebsd\driver\ini\src\agtiapi.c	3147	warn	V560 A part of conditional expression is always false: !pccb->devHandle.
SOURCE_ROOT\sys\dev\pms\RefTisa\discovery\dm\dmport.c	212	warn	V547 Expression 'dmAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\discovery\dm\dmport.c	106	warn	V547 Expression 'dmAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\discovery\dm\dmsmp.c	2018	warn	V547 Expression 'ReturningExpander != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\discovery\dm\dmsmp.c	1834	warn	V547 Expression 'ReturningExpander != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\sainit.c	2556	warn	V547 Expression 'context' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\sainit.c	3220	warn	V519 The 'ret' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 3219, 3220.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\saint.c	248	warn	V547 Expression '((void *) 0) != saRoot' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\saint.c	224	warn	V560 A part of conditional expression is always true: !(fatal_error.errorInfo2 & 0x00).
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\sampirsp.c	6143	warn	V547 Expression 'agDevHandle == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\sasmp.c	398	warn	V684 A value of the variable 'IR_IP_OV_res_phyId_DPdLen_res' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\pms\RefTisa\sallsdk\spc\sasmp.c	311	warn	V684 A value of the variable 'IR_IP_OV_res_phyId_DPdLen_res' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	12601	warn	V560 A part of conditional expression is always false: pSatDevData->sat48BitSupport != 1.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	9745	warn	V560 A part of conditional expression is always true: page == 0x08.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsat.c	9245	warn	V547 Expression 'satIntIo == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	8199	warn	V547 Expression 'oneDeviceData != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	8103	warn	V547 Expression 'oneDeviceData == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	7980	warn	V547 Expression 'oneDeviceData == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	152	warn	V547 Expression 'oneDeviceData == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	106	warn	V547 Expression 'satIOContext == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	12021	warn	V547 Expression 'satIOContext == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	8581	warn	V547 Expression 'oneDeviceData == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	8553	warn	V547 Expression 'oneDeviceData == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	8075	warn	V547 Expression 'oneDeviceData == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\sat\src\smsatcb.c	8444	warn	V547 Expression 'oneDeviceData == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	1575	warn	V547 Expression 'onePortContext == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	1293	warn	V547 Expression 'agDevHandle == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	858	warn	V547 Expression 'agDevHandle == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	906	warn	V547 Expression 'IDframe == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	944	warn	V547 Expression 'IDframe == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	1149	warn	V547 Expression 'onePortContext == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	8589	warn	V547 Expression 'smDeviceHandle == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	5747	warn	V547 Expression 'PhyBlob != ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\ossacmnapi.c	2481	warn	V547 Expression 'onePortContext == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tddmcmnapi.c	1247	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tddmcmnapi.c	830	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tddmcmnapi.c	231	warn	V547 Expression 'agRoot == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tddmcmnapi.c	178	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tddmcmnapi.c	88	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tddmcmnapi.c	1208	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tddmcmnapi.c	1083	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	3203	warn	V519 The 'ostiMemoryStatus' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 3182, 3203.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	3162	warn	V547 Expression 'reqBuffer == ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	906	warn	V547 Expression 'BufferParms.pTraceMask != ((void *) 0)' is always false. Pointer 'BufferParms.pTraceMask' == NULL.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	3162	warn	V560 A part of conditional expression is always false: (ostiMemoryStatus != tiSuccess).
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdioctl.c	1708	warn	V547 Expression 'PhyBlob' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdmisc.c	1991	warn	V547 Expression 'onePortContext == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdmisc.c	219	warn	V547 Expression 'taskTag != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdsmcmnapi.c	1021	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdsmcmnapi.c	1062	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdsmcmnapi.c	1225	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdsmcmnapi.c	1280	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\common\tdsmcmnapi.c	1362	warn	V547 Expression 'tdsaAllShared == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdcb.c	593	warn	V547 Expression 'agTaskedIORequest == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdcb.c	341	warn	V547 Expression 'agTaskedIORequest == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdcb.c	605	warn	V560 A part of conditional expression is always true: agIOStatus == 0x00.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdcb.c	898	warn	V547 Expression 'tdIORequestBody' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdcb.c	2346	warn	V547 Expression 'tdIORequestBody != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdcb.c	245	warn	V560 A part of conditional expression is always true: agIOStatus == 0x00.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itddisc.c	2435	warn	V560 A part of conditional expression is always true: (oneDeviceData->registered == 1).
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdinit.c	287	warn	V519 The 'lenRecv' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 271, 287.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdio.c	1884	warn	V519 The 'status' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1864, 1884.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sas\ini\itdio.c	1824	warn	V547 Expression 'tdIORequestBody == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c	867	warn	V547 Expression 'onePortContext != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\ossasat.c	165	warn	V547 Expression 'satIOContext == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	6724	warn	V560 A part of conditional expression is always true: page == 0x08.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	10438	warn	V560 A part of conditional expression is always false: pSatDevData->sat48BitSupport != 1.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	22803	warn	V547 Expression 'onePortContext != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	5574	warn	V547 Expression 'satIntIo == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\pms\RefTisa\tisa\sassata\sata\host\sat.c	23157	warn	V547 Expression 'onePortContext != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\ppc\ppc.c	1831	warn	V547 Expression 'ppc->res_irq != 0' is always true. Pointer 'ppc->res_irq' != NULL.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dbg_fw_funcs.c	2360	warn	V560 A part of conditional expression is always true: polling_count < 20.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dbg_fw_funcs.c	3679	warn	V684 A value of the variable 'ram_addr[(int)(0 / 32)]' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_dev.c	469	warn	V512 A call of the 'bitmap_weight' function will lead to overflow of the buffer '& pq_flags'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_init_fw_funcs.c	1414	warn	V684 A value of the variable 'rfs_cm_hdr_event_id' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_int.c	1168	warn	V560 A part of conditional expression is always false: !sb_attn.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_int.c	1168	warn	V547 Expression '!sb_attn' is always false.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\ecore_int.c	1138	warn	V547 Expression '!sb_info' is always false.
SOURCE_ROOT\sys\dev\qlnx\qlnxe\qlnx_os.c	2526	warn	V519 The 'ret' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 2520, 2526.
SOURCE_ROOT\sys\dev\qlxgbe\ql_hw.c	3644	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\dev\qlxgbe\ql_hw.c	241	warn	V684 A value of the variable 'cfg_bits' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\qlxgbe\ql_hw.c	252	warn	V684 A value of the variable 'cfg_bits' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\qlxgbe\ql_os.c	1461	warn	V519 The 'ret' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1455, 1461.
SOURCE_ROOT\sys\dev\ral\rt2860.c	1921	warn	V778 Two similar code fragments were found. Perhaps, this is a typo and 'data' variable should be used instead of 'sc'.
SOURCE_ROOT\sys\dev\ral\rt2860.c	1676	warn	V778 Two similar code fragments were found. Perhaps, this is a typo and 'data' variable should be used instead of 'sc'.
SOURCE_ROOT\sys\dev\ral\rt2860.c	3512	warn	V557 Array overrun is possible. The value of '14 + i' index could reach 53.
SOURCE_ROOT\sys\dev\rtwn\if_rtwn.c	880	warn	V547 Expression 'vap != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\rtwn\if_rtwn_rx.c	318	warn	V569 Transformation of constant value 161. The value range of signed char type: [-128, 127].
SOURCE_ROOT\sys\dev\rtwn\rtl8188e\r88e_chan.c	115	warn	V557 Array overrun is possible. The value of 'ridx' index could reach 27.
SOURCE_ROOT\sys\dev\rtwn\rtl8188e\r88e_chan.c	118	warn	V557 Array overrun is possible. The value of 'ridx' index could reach 27.
SOURCE_ROOT\sys\dev\rtwn\rtl8188e\r88e_chan.c	120	warn	V557 Array overrun is possible. The value of 'ridx' index could reach 27.
SOURCE_ROOT\sys\dev\rtwn\rtl8192e\r92e_rom.c	121	warn	V569 Transformation of constant value 254. The value range of signed char type: [-128, 127].
SOURCE_ROOT\sys\dev\rtwn\rtl8192e\r92e_rom.c	135	warn	V569 Transformation of constant value 254. The value range of signed char type: [-128, 127].
SOURCE_ROOT\sys\dev\sdhci\sdhci.c	301	warn	V684 A value of the variable 'clk_sel' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\sfxge\common\ef10_filter.c	432	warn	V512 A call of the 'efx_hash_dwords' function will lead to overflow of the buffer '& spec->efs_outer_vid'.
SOURCE_ROOT\sys\dev\sfxge\common\ef10_nvram.c	1618	warn	V519 The 'trailer->checksum' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1613, 1618.
SOURCE_ROOT\sys\dev\sfxge\common\ef10_nvram.c	1490	warn	V519 The 'rc' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1489, 1490.
SOURCE_ROOT\sys\dev\sfxge\common\ef10_tx.c	505	warn	V560 A part of conditional expression is always false: ((63 + 1 - 1) < (0)).
SOURCE_ROOT\sys\dev\sfxge\common\ef10_tx.c	505	warn	V560 A part of conditional expression is always false: (63 > (63)).
SOURCE_ROOT\sys\dev\sfxge\common\efx_intr.c	519	warn	V560 A part of conditional expression is always false: (0 > (63)).
SOURCE_ROOT\sys\dev\sfxge\common\efx_intr.c	519	warn	V560 A part of conditional expression is always false: ((0 + 1 - 1) < (0)).
SOURCE_ROOT\sys\dev\sfxge\common\efx_intr.c	519	warn	V560 A part of conditional expression is always false: (0 > (127)).
SOURCE_ROOT\sys\dev\sfxge\common\efx_intr.c	519	warn	V560 A part of conditional expression is always true: ((0 + 1 - 1) < (64)).
SOURCE_ROOT\sys\dev\sfxge\common\efx_mon.c	109	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\dev\sfxge\common\efx_tx.c	926	warn	V547 Expression '(encp) == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\sound\isa\sb8.c	422	warn	V751 Parameter 'right' is not used inside function body.
SOURCE_ROOT\sys\dev\sound\isa\sbc.c	681	warn	V560 A part of conditional expression is always true: i == 0.
SOURCE_ROOT\sys\dev\sound\midi\mpu401.c	227	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\dev\sound\pci\atiixp.c	306	warn	V519 The 'value' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 302, 306.
SOURCE_ROOT\sys\dev\sound\pci\atiixp.c	284	warn	V519 The 'value' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 280, 284.
SOURCE_ROOT\sys\dev\sound\pci\emu10kx.c	2512	warn	V519 The 'tmp' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 2511, 2512.
SOURCE_ROOT\sys\dev\sound\pci\emu10kx.c	745	warn	V519 The 'val' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 743, 745.
SOURCE_ROOT\sys\dev\sound\pci\emu10kx-pcm.c	486	warn	V657 It's odd that this function always returns one and the same value of 0.
SOURCE_ROOT\sys\dev\sound\pci\es137x.c	592	warn	V684 A value of the variable 'es->ctrl' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	2589	warn	V547 Expression '(d) != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	2382	warn	V547 Expression '(d->clones) != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\sound\pcm\dsp.c	258	warn	V612 An unconditional 'return' within a loop.
SOURCE_ROOT\sys\dev\spibus\spibusvar.h	67	warn	V512 A call of the 'BUS_READ_IVAR' function will lead to overflow of the buffer 't'.
SOURCE_ROOT\sys\dev\spibus\spibusvar.h	65	warn	V512 A call of the 'BUS_READ_IVAR' function will lead to overflow of the buffer 't'.
SOURCE_ROOT\sys\dev\spibus\spibusvar.h	66	warn	V512 A call of the 'BUS_READ_IVAR' function will lead to overflow of the buffer 't'.
SOURCE_ROOT\sys\dev\sym\sym_hipd.c	3561	warn	V547 Expression '!ccb' is always false.
SOURCE_ROOT\sys\dev\sym\sym_hipd.c	3558	warn	V547 Expression '!cp' is always false.
SOURCE_ROOT\sys\dev\sym\sym_hipd.c	749	warn	V547 Expression 'vp' is always true.
SOURCE_ROOT\sys\dev\syscons\syscons.c	2058	warn	V512 A call of the '(* kbdsw[(scp->sc->kbd)->kb_index]->get_fkeystr)' function will lead to overflow of the buffer '& fkeycp'.
SOURCE_ROOT\sys\dev\syscons\syscons.c	2644	warn	V547 Expression 'p' is always true.
SOURCE_ROOT\sys\dev\tpm\tpm.c	1255	warn	V560 A part of conditional expression is always true: !rv.
SOURCE_ROOT\sys\dev\trm\trm.c	2484	warn	V571 Recurring check. The 'pDCB->DevMode & 0x00000010' condition was already verified in line 2479.
SOURCE_ROOT\sys\dev\twe\twe.c	281	warn	V547 Expression 'drives != ((void *) 0)' is always true.
SOURCE_ROOT\sys\dev\tws\tws.c	531	warn	V560 A part of conditional expression is always true: sc->is64bit.
SOURCE_ROOT\sys\dev\tws\tws_cam.c	552	warn	V547 Expression 'sense_data' is always true.
SOURCE_ROOT\sys\dev\tws\tws_cam.c	1162	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 1157, 1162.
SOURCE_ROOT\sys\dev\uart\uart_cpu_x86.c	56	warn	V547 Expression 'class == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\usb\controller\ehci.c	1954	warn	V684 A value of the variable 'qh_endp' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\usb\net\if_smsc.c	1307	warn	V560 A part of conditional expression is always false: (bmcr & 0x00).
SOURCE_ROOT\sys\dev\usb\net\if_ure.c	901	warn	V560 A part of conditional expression is always false: reinit > 0.
SOURCE_ROOT\sys\dev\usb\serial\uftdi.c	1585	warn	V684 A value of the variable 'cfg->lcr' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\usb\storage\umass.c	2326	warn	V547 Expression 'sc == ((void *) 0)' is always false.
SOURCE_ROOT\sys\dev\usb\wlan\if_uath.c	1567	warn	V519 The 'chunk->flags' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1566, 1567.
SOURCE_ROOT\sys\dev\usb\wlan\if_urtw.c	1985	warn	V684 A value of the variable 'data' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\usb\wlan\if_urtw.c	3864	warn	V684 A value of the variable 'data' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\dev\videomode\edid.c	451	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'edid->edid_serial'.
SOURCE_ROOT\sys\dev\videomode\edid.c	457	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'edid->edid_comment'.
SOURCE_ROOT\sys\dev\videomode\edid.c	482	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'edid->edid_productname'.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-config.c	712	warn	V581 The conditional expressions of the 'if' operators situated alongside each other are identical. Check lines: 704, 712.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-config.c	806	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 798, 806.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-config.c	712	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 704, 712.
SOURCE_ROOT\sys\dev\vxge\vxgehal\vxgehal-config.c	806	warn	V581 The conditional expressions of the 'if' operators situated alongside each other are identical. Check lines: 798, 806.
SOURCE_ROOT\sys\dev\wi\if_wi.c	1069	warn	V728 An excessive check can be simplified. The '||' operator is surrounded by opposite expressions '!params' and 'params'. 
SOURCE_ROOT\sys\dev\xen\console\xen_console.c	160	warn	V560 A part of conditional expression is always false: (c = '\0').
SOURCE_ROOT\sys\dev\xen\netback\netback.c	556	warn	V560 A part of conditional expression is always false: !rxb.
SOURCE_ROOT\sys\dev\xen\netback\netback.c	556	warn	V560 A part of conditional expression is always false: !txb.
SOURCE_ROOT\sys\dev\xen\netback\netback.c	556	warn	V547 Expression '!txb' is always false.
SOURCE_ROOT\sys\dev\xl\if_xl.c	759	warn	V684 A value of the variable 'icfg' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\fs\devfs\devfs_vnops.c	1002	warn	V612 An unconditional 'break' within a loop.
SOURCE_ROOT\sys\fs\devfs\devfs_vnops.c	998	warn	V547 Expression 'dde != ((void *) 0)' is always true.
SOURCE_ROOT\sys\fs\ext2fs\ext2_alloc.c	914	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 903, 914.
SOURCE_ROOT\sys\fs\ext2fs\ext2_alloc.c	670	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 659, 670.
SOURCE_ROOT\sys\fs\ext2fs\ext2_lookup.c	431	warn	V560 A part of conditional expression is always true.
SOURCE_ROOT\sys\fs\fuse\fuse_vfsops.c	452	warn	V547 Expression 'data->vroot == ((void *) 0)' is always true. Pointer 'data->vroot' == NULL.
SOURCE_ROOT\sys\fs\fuse\fuse_vfsops.c	453	warn	V547 Expression 'data->vroot == ((void *) 0)' is always true. Pointer 'data->vroot' == NULL.
SOURCE_ROOT\sys\fs\msdosfs\msdosfs_conv.c	433	warn	V557 Array underrun is possible. The value of 'j - 1' index could reach -1.
SOURCE_ROOT\sys\fs\msdosfs\msdosfs_fat.c	856	warn	V684 A value of the variable 'readcn' is not modified. Consider inspecting the expression. It is possible that '1' should be present instead of '0'.
SOURCE_ROOT\sys\fs\msdosfs\msdosfs_vnops.c	805	warn	V560 A part of conditional expression is always true: error == 0.
SOURCE_ROOT\sys\fs\nfs\nfs_commonsubs.c	4010	warn	V557 Array underrun is possible. The value of 'i - 1' index could reach -1.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clbio.c	1518	warn	V612 An unconditional 'goto' within a loop.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clkrpc.c	136	warn	V547 Expression 'nd.nd_mreq != ((void *) 0)' is always true. Pointer 'nd.nd_mreq' != NULL.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clport.c	186	warn	V560 A part of conditional expression is always true: nvp->v_type == VREG.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clport.c	186	warn	V547 Expression 'np->n_v4 != ((void *) 0)' is always true. Pointer 'np->n_v4' != NULL.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clvnops.c	1153	warn	V547 Expression 'newvp != ((struct vnode *)((void *) 0))' is always false.
SOURCE_ROOT\sys\fs\nfsclient\nfs_clvnops.c	900	warn	V560 A part of conditional expression is always false: vap->va_flags != (- 1).
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdkrpc.c	302	warn	V547 Expression '(((void *) 0)) == ((void *) 0)' is always true.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdport.c	3211	warn	V560 A part of conditional expression is always true: suspend_nfsd == 0.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdport.c	2639	warn	V560 A part of conditional expression is always false: ((exp)->nes_exflag & 0x0).
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	899	warn	V560 A part of conditional expression is always false: ((exp)->nes_exflag & 0x0).
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	372	warn	V560 A part of conditional expression is always false: ((exp)->nes_exflag & 0x0).
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdserv.c	715	warn	V560 A part of conditional expression is always false: ((exp)->nes_exflag & 0x0).
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdstate.c	3143	warn	V560 A part of conditional expression is always true: (new_stp->ls_flags & 0x40000000) == 0.
SOURCE_ROOT\sys\fs\nfsserver\nfs_nfsdstate.c	3158	warn	V560 A part of conditional expression is always true: (new_stp->ls_flags & 0x20000000) == 0.
SOURCE_ROOT\sys\fs\smbfs\smbfs_smb.c	1281	warn	V519 The 'fxsz' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1265, 1281.
SOURCE_ROOT\sys\fs\smbfs\smbfs_smb.c	793	warn	V614 Potentially uninitialized variable 'fid' used. Consider checking the second actual argument of the 'smbfs_smb_close' function.
SOURCE_ROOT\sys\fs\smbfs\smbfs_vfsops.c	284	warn	V560 A part of conditional expression is always false: smp->sm_didrele != 0.
SOURCE_ROOT\sys\fs\tmpfs\tmpfs_vfsops.c	202	warn	V560 A part of conditional expression is always false: 0xffffffffffffffff < 0x7fffffffffffffff.
SOURCE_ROOT\sys\geom\eli\g_eli.c	576	warn	V612 An unconditional 'goto' within a loop.
SOURCE_ROOT\sys\geom\eli\g_eli_ctl.c	1105	warn	V612 An unconditional 'return' within a loop.
SOURCE_ROOT\sys\geom\vinum\geom_vinum_drive.c	149	warn	V519 The 'off' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 148, 149.
SOURCE_ROOT\sys\isa\isa_common.c	961	warn	V547 Expression '!rl' is always false.
SOURCE_ROOT\sys\kern\imgact_binmisc.c	191	warn	V547 Expression 'ibe' is always true.
SOURCE_ROOT\sys\kern\kern_acct.c	286	warn	V614 Potentially uninitialized variable 'flags' used.
SOURCE_ROOT\sys\kern\kern_conf.c	624	warn	V649 There are two 'if' statements with identical conditional expressions. The first 'if' statement contains function return. This means that the second 'if' statement is senseless. Check lines: 613, 624.
SOURCE_ROOT\sys\kern\kern_event.c	948	warn	V519 The 'ktriov.iov_len' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 947, 948.
SOURCE_ROOT\sys\kern\kern_exit.c	389	warn	V547 Expression 'p->p_leader->p_peers != ((void *) 0)' is always true. Pointer 'p->p_leader->p_peers' != NULL.
SOURCE_ROOT\sys\kern\kern_fail.c	1102	warn	V557 Array overrun is possible. The value of 'type' index could reach 8.
SOURCE_ROOT\sys\kern\kern_fail.c	1103	warn	V557 Array overrun is possible. The value of 'type' index could reach 8.
SOURCE_ROOT\sys\kern\kern_jail.c	2979	warn	V557 Array overrun is possible. The value of 'len' index could reach 1023.
SOURCE_ROOT\sys\kern\kern_shutdown.c	249	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\kern\kern_shutdown.c	643	warn	V614 Potentially uninitialized variable 'i' used. Consider checking the second actual argument of the 'kassert_panic' function.
SOURCE_ROOT\sys\kern\kern_switch.c	446	warn	V612 An unconditional 'return' within a loop.
SOURCE_ROOT\sys\kern\kern_switch.c	469	warn	V612 An unconditional 'return' within a loop.
SOURCE_ROOT\sys\kern\kern_umtx.c	1684	warn	V547 Expression 'pi->pi_owner == ((void *) 0)' is always true. Pointer 'pi->pi_owner' == NULL.
SOURCE_ROOT\sys\kern\link_elf.c	423	warn	V547 Expression 'dp != ((void *) 0)' is always true.
SOURCE_ROOT\sys\kern\subr_witness.c	2886	warn	V547 Expression 'w->w_name != ((void *) 0)' is always true. Pointer 'w->w_name' != NULL.
SOURCE_ROOT\sys\kern\sys_generic.c	1691	warn	V547 Expression 'sfp->sf_si != ((void *) 0)' is always true. Pointer 'sfp->sf_si' != NULL.
SOURCE_ROOT\sys\kern\tty.c	1673	warn	V560 A part of conditional expression is always true: ('S') <= 'z'.
SOURCE_ROOT\sys\kern\tty.c	1673	warn	V560 A part of conditional expression is always false: ('S') >= 'a'.
SOURCE_ROOT\sys\kern\tty_ttydisc.c	630	warn	V560 A part of conditional expression is always true: ('H') <= 'z'.
SOURCE_ROOT\sys\kern\tty_ttydisc.c	630	warn	V560 A part of conditional expression is always false: ('H') >= 'a'.
SOURCE_ROOT\sys\kern\uipc_mqueue.c	671	warn	V666 Consider inspecting seventh argument of the function 'uma_zcreate'. It is possible that the value does not correspond with the length of a string which was passed with the first argument.
SOURCE_ROOT\sys\kern\uipc_sem.c	280	warn	V547 Expression 'ks->ks_path != ((void *) 0)' is always true. Pointer 'ks->ks_path' != NULL.
SOURCE_ROOT\sys\kern\uipc_shm.c	1109	warn	V547 Expression 'shmfd->shm_path != ((void *) 0)' is always true. Pointer 'shmfd->shm_path' != NULL.
SOURCE_ROOT\sys\kern\uipc_sockbuf.c	1184	warn	V699 Consider inspecting the 'm = ret = sb->sb_sndptr ? sb->sb_sndptr : sb->sb_mb' expression. It is possible that 'm = ret == sb->sb_sndptr ? sb->sb_sndptr : sb->sb_mb' should be used here instead.
SOURCE_ROOT\sys\kern\uipc_syscalls.c	293	warn	V560 A part of conditional expression is always true: error == 0.
SOURCE_ROOT\sys\kern\uipc_syscalls.c	293	warn	V547 Expression 'uname != ((void *) 0)' is always true.
SOURCE_ROOT\sys\kern\vfs_cache.c	1490	warn	V764 Possible incorrect order of arguments passed to 'cache_lock_vnodes_cel' function: 'dvp' and 'vp'.
SOURCE_ROOT\sys\kern\vfs_cache.c	1449	warn	V764 Possible incorrect order of arguments passed to 'cache_lock_vnodes_cel' function: 'dvp' and 'vp'.
SOURCE_ROOT\sys\kern\vfs_default.c	527	warn	V547 Expression 'ilk != ((void *) 0)' is always true.
SOURCE_ROOT\sys\kern\vfs_default.c	543	warn	V547 Expression 'ilk != ((void *) 0)' is always true.
SOURCE_ROOT\sys\kern\vfs_vnops.c	1112	warn	V519 The 'cnt' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1106, 1112.
SOURCE_ROOT\sys\kern\vfs_vnops.c	389	warn	V612 An unconditional 'break' within a loop.
SOURCE_ROOT\sys\net\if.c	2846	warn	V547 Expression 'ifp != ((void *) 0)' is always true.
SOURCE_ROOT\sys\net\if_spppfr.c	338	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\net\if_spppsubr.c	3099	warn	V560 A part of conditional expression is always true: !gotmyaddr.
SOURCE_ROOT\sys\net\if_vlan.c	1270	warn	V547 Expression 'p->if_vlantrunk != ((void *) 0)' is always false. Pointer 'p->if_vlantrunk' == NULL.
SOURCE_ROOT\sys\net\iflib.c	3013	warn	V519 The 'segs' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 3009, 3013.
SOURCE_ROOT\sys\net\mppcc.c	272	warn	V555 The expression '* srcCnt - i > 0' will work as '* srcCnt != i'.
SOURCE_ROOT\sys\net\netisr.c	1420	warn	V547 Expression 'nwsp->nws_intr_event != ((void *) 0)' is always true. Pointer 'nwsp->nws_intr_event' != NULL.
SOURCE_ROOT\sys\net\pfil.c	280	warn	V778 Two similar code fragments were found. Perhaps, this is a typo and 'pfh2' variable should be used instead of 'pfh1'.
SOURCE_ROOT\sys\net\slcompress.c	597	warn	V519 The 'cs->slcs_u.csu_ip.ip_sum' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 592, 597.
SOURCE_ROOT\sys\net80211\ieee80211_ioctl.c	1334	warn	V557 Array overrun is possible. The value of 'op' index could reach 6.
SOURCE_ROOT\sys\net80211\ieee80211_ioctl.c	1331	warn	V557 Array overrun is possible. The value of 'op' index could reach 6.
SOURCE_ROOT\sys\net80211\ieee80211_ioctl.c	2019	warn	V640 The code's operational logic does not correspond with its formatting. The statement is indented to the right, but it is always executed. It is possible that curly brackets are missing.
SOURCE_ROOT\sys\net80211\ieee80211_output.c	2019	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'ic->ic_chan_avail'.
SOURCE_ROOT\sys\net80211\ieee80211_output.c	1609	warn	V519 The 'seqno' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1593, 1609.
SOURCE_ROOT\sys\net80211\ieee80211_vht.c	810	warn	V547 Expression 'c == ((void *) 0)' is always true.
SOURCE_ROOT\sys\netgraph\ng_base.c	1833	warn	V547 Expression 'hook != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\cc\cc_cubic.h	153	warn	V519 The 'K' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 136, 153.
SOURCE_ROOT\sys\netinet\cc\cc_cubic.h	140	warn	V519 The 's' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 136, 140.
SOURCE_ROOT\sys\netinet\in.c	1204	warn	V512 A call of the 'memcmp' function will lead to underflow of the buffer 'rt_gateway.sa_data'.
SOURCE_ROOT\sys\netinet\in.c	1204	warn	V512 A call of the 'memcmp' function will lead to underflow of the buffer 'l3addr->sa_data'.
SOURCE_ROOT\sys\netinet\in_mcast.c	1052	warn	V640 The code's operational logic does not correspond with its formatting. The statement is indented to the right, but it is always executed. It is possible that curly brackets are missing.
SOURCE_ROOT\sys\netinet\ip_carp.c	654	warn	V571 Recurring check. The 'ifa->ifa_carp != ((void *) 0)' condition was already verified in line 653.
SOURCE_ROOT\sys\netinet\ip_carp.c	654	warn	V547 Expression 'ifa->ifa_carp != ((void *) 0)' is always true. Pointer 'ifa->ifa_carp' != NULL.
SOURCE_ROOT\sys\netinet\ip_icmp.c	344	warn	V519 The 'nip' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 331, 344.
SOURCE_ROOT\sys\netinet\libalias\alias.c	1085	warn	V547 Expression 'lnk != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\libalias\alias.c	1113	warn	V519 The 'tc' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 1106, 1113.
SOURCE_ROOT\sys\netinet\libalias\alias_nbt.c	702	warn	V547 Expression 'q == ((void *) 0)' is always false.
SOURCE_ROOT\sys\netinet\libalias\alias_sctp.c	424	warn	V519 The 'sysctl_log_level' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 423, 424.
SOURCE_ROOT\sys\netinet\sctp_asconf.c	3029	warn	V547 Expression 'laddr->ifa == ((void *) 0)' is always false. Pointer 'laddr->ifa' != NULL.
SOURCE_ROOT\sys\netinet\sctp_auth.c	1768	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctp_cc_functions.c	2262	warn	V778 Two similar code fragments were found. Perhaps, this is a typo and 'net' variable should be used instead of 'asoc'.
SOURCE_ROOT\sys\netinet\sctp_cc_functions.c	1730	warn	V778 Two similar code fragments were found. Perhaps, this is a typo and 'net' variable should be used instead of 'asoc'.
SOURCE_ROOT\sys\netinet\sctp_cc_functions.c	223	warn	V778 Two similar code fragments were found. Perhaps, this is a typo and 'net' variable should be used instead of 'asoc'.
SOURCE_ROOT\sys\netinet\sctp_crc32.c	99	warn	V555 The expression '((at->m_len) - offset) > 0' will work as 'at->m_len != offset'.
SOURCE_ROOT\sys\netinet\sctp_indata.c	3387	warn	V560 A part of conditional expression is always false: (asoc->sctp_cmt_on_off > 0).
SOURCE_ROOT\sys\netinet\sctp_input.c	5367	warn	V547 Expression 'stcb' is always true.
SOURCE_ROOT\sys\netinet\sctp_input.c	5339	warn	V547 Expression 'stcb' is always true.
SOURCE_ROOT\sys\netinet\sctp_input.c	5297	warn	V547 Expression 'stcb' is always true.
SOURCE_ROOT\sys\netinet\sctp_output.c	7514	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\netinet\sctp_output.c	13767	warn	V547 Expression 'auth_ret != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctp_output.c	9401	warn	V547 Expression 'm_ack' is always true.
SOURCE_ROOT\sys\netinet\sctp_output.c	10118	warn	V560 A part of conditional expression is always true: (ret == 0).
SOURCE_ROOT\sys\netinet\sctp_output.c	11421	warn	V547 Expression 'chk->data' is always true.
SOURCE_ROOT\sys\netinet\sctp_pcb.c	4075	warn	V547 Expression 'netlook != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	2461	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	2456	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	3830	warn	V547 Expression 'optval' is always true.
SOURCE_ROOT\sys\netinet\sctp_usrreq.c	7308	warn	V547 Expression 'sin_a == ((void *) 0)' is always false.
SOURCE_ROOT\sys\netinet\sctputil.c	3067	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctputil.c	2970	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctputil.c	2936	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctputil.c	2690	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\sctputil.c	5055	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\netinet\sctputil.c	4955	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\netinet\sctputil.c	5964	warn	V547 Expression 'control->data == ((void *) 0)' is always true. Pointer 'control->data' == NULL.
SOURCE_ROOT\sys\netinet\sctputil.c	3078	warn	V547 Expression 'stcb != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\siftr.c	653	warn	V555 The expression '(m->m_len - offset) > 0' will work as 'm->m_len != offset'.
SOURCE_ROOT\sys\netinet\tcp_syncache.c	2159	warn	V547 Expression 's != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet\tcp_usrreq.c	234	warn	V779 Unreachable code detected. It is possible that an error is present.
SOURCE_ROOT\sys\netinet6\in6.c	1771	warn	V557 Array overrun is possible. The value of 'bytelen' index could reach 16.
SOURCE_ROOT\sys\netinet6\in6.c	1745	warn	V557 Array overrun is possible. The value of 'bytelen' index could reach 16.
SOURCE_ROOT\sys\netinet6\in6.c	1746	warn	V557 Array overrun is possible. The value of 'bytelen' index could reach 16.
SOURCE_ROOT\sys\netinet6\in6_mcast.c	1004	warn	V640 The code's operational logic does not correspond with its formatting. The statement is indented to the right, but it is always executed. It is possible that curly brackets are missing.
SOURCE_ROOT\sys\netinet6\nd6.c	2346	warn	V547 Expression 'lle == ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet6\nd6_nbr.c	820	warn	V728 An excessive check can be simplified. The '||' operator is surrounded by opposite expressions 'is_override' and '!is_override'. 
SOURCE_ROOT\sys\netinet6\nd6_rtr.c	1924	warn	V547 Expression 'ifa != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netinet6\sctp6_usrreq.c	976	warn	V547 Expression 'sin_a6 == ((void *) 0)' is always false.
SOURCE_ROOT\sys\netipsec\ipsec_input.c	201	warn	V614 Potentially uninitialized variable 'spi' used. Consider checking the third actual argument of the 'key_allocsa' function.
SOURCE_ROOT\sys\netipsec\key.c	4379	warn	V547 Expression 'sav->lft_h == ((void *) 0)' is always false. Pointer 'sav->lft_h' != NULL.
SOURCE_ROOT\sys\netipsec\key.c	2294	warn	V547 Expression 'sp->req == ((void *) 0)' is always false. Pointer 'sp->req' != NULL.
SOURCE_ROOT\sys\netipsec\key.c	4623	warn	V519 The 'n' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 4622, 4623.
SOURCE_ROOT\sys\netipsec\xform_ah.c	422	warn	V555 The expression 'skip - sizeof (struct ip6_hdr) > 0' will work as 'skip != sizeof (struct ip6_hdr)'.
SOURCE_ROOT\sys\netipsec\xform_esp.c	413	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'ivp'.
SOURCE_ROOT\sys\netipsec\xform_esp.c	819	warn	V512 A call of the 'memcpy' function will lead to underflow of the buffer 'ivp'.
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_fq_codel.h	110	warn	V728 An excessive check can be simplified. The '||' operator is surrounded by opposite expressions '!drop' and 'drop'. 
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_fq_pie.c	305	warn	V728 An excessive check can be simplified. The '||' operator is surrounded by opposite expressions '!drop' and 'drop'. 
SOURCE_ROOT\sys\netpfil\ipfw\dn_sched_fq_pie.c	483	warn	V519 The 'pprms' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 481, 483.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_dynamic.c	983	warn	V519 The 'last_log' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 981, 983.
SOURCE_ROOT\sys\netpfil\ipfw\ip_fw_table_algo.c	2324	warn	V519 The 'ife' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 2322, 2324.
SOURCE_ROOT\sys\netpfil\pf\pf.c	3345	warn	V547 Expression '(((void *) 0)) != ((void *) 0)' is always false.
SOURCE_ROOT\sys\netpfil\pf\pf.c	3825	warn	V547 Expression '(((void *) 0)) != ((void *) 0)' is always false.
SOURCE_ROOT\sys\netpfil\pf\pf_ioctl.c	3369	warn	V612 An unconditional 'goto' within a loop.
SOURCE_ROOT\sys\netpfil\pf\pf_lb.c	169	warn	V547 Expression '(((void *) 0)) != ((void *) 0)' is always false.
SOURCE_ROOT\sys\netpfil\pf\pf_lb.c	172	warn	V547 Expression '(((void *) 0)) != ((void *) 0)' is always false.
SOURCE_ROOT\sys\netpfil\pf\pf_norm.c	981	warn	V547 Expression '(((void *) 0)) != ((void *) 0)' is always false.
SOURCE_ROOT\sys\netpfil\pf\pf_norm.c	1159	warn	V547 Expression '(((void *) 0)) != ((void *) 0)' is always false.
SOURCE_ROOT\sys\netpfil\pf\pf_norm.c	835	warn	V547 Expression '(((void *) 0)) != ((void *) 0)' is always false.
SOURCE_ROOT\sys\netpfil\pf\pf_norm.c	1242	warn	V547 Expression 'rm != ((void *) 0)' is always true.
SOURCE_ROOT\sys\netsmb\smb_crypt.c	237	warn	V547 Expression 'rqp->sr_t2 == ((void *) 0)' is always false. Pointer 'rqp->sr_t2' != NULL.
SOURCE_ROOT\sys\netsmb\smb_trantcp.c	570	warn	V547 Expression '(so = nbp->nbp_tso) != ((void *) 0)' is always true. Pointer 'so = nbp->nbp_tso' != NULL.
SOURCE_ROOT\sys\netsmb\smb_trantcp.c	177	warn	V560 A part of conditional expression is always true: so->so_error == 0.
SOURCE_ROOT\sys\nlm\nlm_advlock.c	903	warn	V556 The values of different enum types are compared: switch(ENUM_TYPE_A) { case ENUM_TYPE_B: ... }. Types: nlm4_stats, nlm_stats.
SOURCE_ROOT\sys\nlm\nlm_prot_impl.c	1029	warn	V547 Expression 'client' is always true.
SOURCE_ROOT\sys\nlm\nlm_prot_impl.c	1291	warn	V547 Expression 'rpc->nr_client' is always false.
SOURCE_ROOT\sys\nlm\nlm_prot_xdr.c	316	warn	V556 The values of different enum types are compared: switch(ENUM_TYPE_A) { case ENUM_TYPE_B: ... }. Types: nlm4_stats, nlm_stats.
SOURCE_ROOT\sys\rpc\clnt_dg.c	293	warn	V547 Expression 'sb->sb_upcall' is always false.
SOURCE_ROOT\sys\rpc\svc.c	1204	warn	V728 An excessive check can be simplified. The '||' operator is surrounded by opposite expressions 'ismaster' and '!ismaster'. 
SOURCE_ROOT\sys\rpc\svc_vc.c	711	warn	V560 A part of conditional expression is always false: cd->resid != 0.
SOURCE_ROOT\sys\rpc\svc_vc.c	711	warn	V547 Expression 'cd->mreq == ((void *) 0)' is always true. Pointer 'cd->mreq' == NULL.
SOURCE_ROOT\sys\ufs\ffs\ffs_softdep.c	13801	warn	V547 Expression is always true. Pointer 'wk = ((wkhd)->lh_first)' != NULL.
SOURCE_ROOT\sys\ufs\ffs\ffs_softdep.c	7189	warn	V612 An unconditional 'return' within a loop.
SOURCE_ROOT\sys\ufs\ffs\ffs_softdep.c	7197	warn	V612 An unconditional 'return' within a loop.
SOURCE_ROOT\sys\vm\swap_pager.c	1370	warn	V656 Variables 'bp->b_rcred', 'bp->b_wcred' are initialized through the call to the same function. It's probably an error or un-optimized code. Check lines: 1369, 1370.
SOURCE_ROOT\sys\vm\swap_pager.c	1175	warn	V656 Variables 'bp->b_rcred', 'bp->b_wcred' are initialized through the call to the same function. It's probably an error or un-optimized code. Check lines: 1174, 1175.
SOURCE_ROOT\sys\vm\vm_fault.c	1307	warn	V560 A part of conditional expression is always true: 3 > 1.
SOURCE_ROOT\sys\vm\vnode_pager.c	563	warn	V656 Variables 'bp->b_rcred', 'bp->b_wcred' are initialized through the call to the same function. It's probably an error or un-optimized code. Consider inspecting the 'crhold((__curthread())->td_ucred)' expression. Check lines: 562, 563.
SOURCE_ROOT\sys\vm\vnode_pager.c	1417	warn	V764 Possible incorrect order of arguments passed to 'vnode_pager_update_writecount' function: 'end' and 'start'.
SOURCE_ROOT\sys\vm\vnode_pager.c	1019	warn	V656 Variables 'bp->b_rcred', 'bp->b_wcred' are initialized through the call to the same function. It's probably an error or un-optimized code. Consider inspecting the 'crhold((__curthread())->td_ucred)' expression. Check lines: 1018, 1019.
SOURCE_ROOT\sys\x86\iommu\intel_drv.c	1188	warn	V614 Potentially uninitialized variable 'function' used.
SOURCE_ROOT\sys\x86\iommu\intel_gas.c	201	warn	V519 The 'v' variable is assigned values twice successively. Perhaps this is a mistake. Check lines: 200, 201.