AntonMoryakov

logs.go: fixed logger creation

2

Previously, the done channel was not closed properly in case of an error returned by logPipe.Close(), potentially leading to a goroutine leak. This commit ensures that the done channel is...

False-positive overflow concern in `ctx->buf_len - ctx->buf_off` in `enc_ctrl()` (related to #23271)

1

Static analysis tools (e.g. SVACE) may report a potential integer overflow in this subtraction: ```c ret = ctx->buf_len - ctx->buf_off; ``` However, this concern was already raised and discussed in...

Fix potential NULL dereference and use-after-free in ossl_qtx_write_pkt

2

In the function ossl_qtx_write_pkt, qtx_reserve_txe was being called with a NULL pointer as the TXE_LIST argument. This could lead to a NULL pointer dereference inside qtx_resize_txe when manipulating the list....

update.go: fix nil pointer risk in Intel RDT initialization

5

Static analysis revealed potential nil dereference when applying RDT configurations. The intelRdtManager instance from NewManager() could be nil but was used without check in Apply() call. Added explicit nil check...

The function addRepeatedCallback can fail (e.g., due to OOM). Previously, its return value was ignored in UA_AsyncManager_start, which could lead to the timeout callback not being registered. This would prevent...

plugins: crypto: fix UNCHECKED_FUNC_RES.STAT in ua_securitypolicy_none.c

3

The function UA_OpenSSL_LoadLocalCertificate returns a UA_StatusCode that was previously ignored in the SecurityPolicy#None implementation. This could lead to undefined behavior if certificate loading failed, while the policy continued initialization as...

The return value of `_gcry_rngdrbg_cavs_test()` was immediately overwritten by `memcmp()` result, leading to potential loss of error information. This could cause the health check to succeed even if the internal...