Subject: Re: [bug-diffutils] bug#72251: defect found by covscan in diffutils-3.10 (gnulibs)

From: Paul Eggert <[email-masked]>
Date: Wed, 24 Jul 2024 22:37:38 -0700

On 2024-07-22 10:29, Wasser Mai wrote:
> There's a following defect in diffutils-3.10 (gnulib) found by
> covscan. The memory dfa->eclosure points to is not initialized. It
> looks like a true positive.

It doesn't look like a true positive to me. The 'postorder' function 
initializes that memory, but covscan isn't smart enough to see that.

These days almost everything Coverity reports for core GNU utilities is 
a false positive, unfortunately.