| Logic error | Assigned value is garbage or undefined | backend /cgcod.c | 890 | 9 | View Report |
| Logic error | Assigned value is garbage or undefined | interpret.c | 6786 | 104 | View Report |
| Logic error | Assigned value is garbage or undefined | template.c | 1767 | 26 | View Report |
| Logic error | Assigned value is garbage or undefined | interpret.c | 6789 | 104 | View Report |
| Logic error | Assigned value is garbage or undefined | template.c | 805 | 15 | View Report |
| Logic error | Branch condition evaluates to a garbage value | template.c | 3868 | 17 | View Report |
| Dead store | Dead assignment | cast.c | 1098 | 1 | View Report |
| Dead store | Dead assignment | typinf.c | 799 | 1 | View Report |
| Dead store | Dead assignment | template.c | 2192 | 1 | View Report |
| Dead store | Dead assignment | mars.c | 1550 | 1 | View Report |
| Dead store | Dead assignment | backend /cod2.c | 856 | 1 | View Report |
| Dead store | Dead assignment | expression.c | 11627 | 1 | View Report |
| Dead store | Dead assignment | cast.c | 1077 | 1 | View Report |
| Dead store | Dead assignment | e2ir.c | 2845 | 1 | View Report |
| Dead store | Dead assignment | backend /gloop.c | 2810 | 1 | View Report |
| Dead store | Dead assignment | backend /gloop.c | 2799 | 1 | View Report |
| Dead store | Dead assignment | opover.c | 1089 | 1 | View Report |
| Dead store | Dead assignment | expression.c | 11660 | 1 | View Report |
| Dead store | Dead assignment | glue.c | 685 | 1 | View Report |
| Dead store | Dead assignment | backend /cgsched.c | 2095 | 1 | View Report |
| Dead store | Dead assignment | todt.c | 263 | 1 | View Report |
| Dead store | Dead assignment | backend /cg87.c | 2963 | 1 | View Report |
| Dead store | Dead assignment | cppmangle.c | 428 | 1 | View Report |
| Dead store | Dead assignment | mars.c | 1541 | 1 | View Report |
| Dead store | Dead assignment | mtype.c | 4431 | 1 | View Report |
| Dead store | Dead assignment | backend /gloop.c | 2800 | 1 | View Report |
| Dead store | Dead assignment | backend /cgxmm.c | 178 | 1 | View Report |
| Dead store | Dead assignment | backend /cgelem.c | 2498 | 1 | View Report |
| Dead store | Dead assignment | backend /cg87.c | 2969 | 1 | View Report |
| Dead store | Dead assignment | backend /cgsched.c | 804 | 1 | View Report |
| Dead store | Dead assignment | backend /cgsched.c | 1208 | 1 | View Report |
| Dead store | Dead assignment | optimize.c | 955 | 1 | View Report |
| Dead store | Dead assignment | expression.c | 11594 | 1 | View Report |
| Dead store | Dead assignment | backend /cod4.c | 2662 | 1 | View Report |
| Dead store | Dead assignment | mtype.c | 4430 | 1 | View Report |
| Dead store | Dead assignment | backend /cgelem.c | 643 | 1 | View Report |
| Dead store | Dead assignment | attrib.c | 798 | 1 | View Report |
| Dead store | Dead assignment | func.c | 2511 | 1 | View Report |
| Dead store | Dead assignment | backend /evalu8.c | 576 | 1 | View Report |
| Dead store | Dead assignment | backend /cg87.c | 2955 | 1 | View Report |
| Dead store | Dead assignment | typinf.c | 797 | 1 | View Report |
| Dead store | Dead assignment | backend /cod2.c | 1857 | 1 | View Report |
| Dead store | Dead assignment | import.c | 318 | 1 | View Report |
| Dead store | Dead assignment | backend /cod1.c | 2774 | 1 | View Report |
| Dead store | Dead assignment | backend /cgsched.c | 2309 | 1 | View Report |
| Dead store | Dead assignment | cast.c | 1105 | 1 | View Report |
| Dead store | Dead assignment | idgen.c | 391 | 1 | View Report |
| Dead store | Dead assignment | expression.c | 7834 | 1 | View Report |
| Dead store | Dead assignment | expression.c | 7680 | 1 | View Report |
| Dead store | Dead assignment | backend /cod2.c | 4358 | 1 | View Report |
| Dead store | Dead assignment | backend /cgsched.c | 1704 | 1 | View Report |
| Dead store | Dead increment | toobj.c | 1077 | 1 | View Report |
| Dead store | Dead increment | typinf.c | 531 | 1 | View Report |
| Dead store | Dead initialization | clone.c | 524 | 1 | View Report |
| Dead store | Dead initialization | parse.c | 2955 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 7540 | 1 | View Report |
| Dead store | Dead initialization | template.c | 3037 | 1 | View Report |
| Dead store | Dead initialization | template.c | 5936 | 1 | View Report |
| Dead store | Dead initialization | statement.c | 2399 | 1 | View Report |
| Dead store | Dead initialization | backend /elfobj.c | 2578 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 10028 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 2604 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 1841 | 1 | View Report |
| Dead store | Dead initialization | backend /cgxmm.c | 395 | 1 | View Report |
| Dead store | Dead initialization | mtype.c | 3862 | 1 | View Report |
| Dead store | Dead initialization | func.c | 3769 | 1 | View Report |
| Dead store | Dead initialization | parse.c | 5689 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 9736 | 1 | View Report |
| Dead store | Dead initialization | declaration.c | 2041 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 2617 | 1 | View Report |
| Dead store | Dead initialization | func.c | 2500 | 1 | View Report |
| Dead store | Dead initialization | template.c | 3036 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 6530 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 1871 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 2880 | 1 | View Report |
| Dead store | Dead initialization | statement.c | 2038 | 1 | View Report |
| Dead store | Dead initialization | cast.c | 41 | 1 | View Report |
| Dead store | Dead initialization | clone.c | 232 | 1 | View Report |
| Dead store | Dead initialization | cast.c | 1528 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 1869 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 11927 | 1 | View Report |
| Dead store | Dead initialization | template.c | 964 | 1 | View Report |
| Dead store | Dead initialization | cast.c | 40 | 1 | View Report |
| Dead store | Dead initialization | mtype.c | 4134 | 1 | View Report |
| Dead store | Dead initialization | clone.c | 55 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 5729 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 6529 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 3725 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 2745 | 1 | View Report |
| Dead store | Dead initialization | class.c | 663 | 1 | View Report |
| Dead store | Dead initialization | statement.c | 2439 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 8352 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 551 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 1840 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 5409 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 5560 | 1 | View Report |
| Dead store | Dead initialization | module.c | 1067 | 1 | View Report |
| Dead store | Dead initialization | declaration.c | 525 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 9851 | 1 | View Report |
| Dead store | Dead initialization | mtype.c | 4120 | 1 | View Report |
| Dead store | Dead initialization | template.c | 5031 | 1 | View Report |
| Dead store | Dead initialization | optimize.c | 156 | 1 | View Report |
| Dead store | Dead initialization | toobj.c | 51 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 1787 | 1 | View Report |
| Dead store | Dead initialization | glue.c | 308 | 1 | View Report |
| Dead store | Dead initialization | clone.c | 636 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 10120 | 1 | View Report |
| Dead store | Dead initialization | interpret.c | 4417 | 1 | View Report |
| Dead store | Dead initialization | expression.c | 11928 | 1 | View Report |
| Dead store | Dead initialization | e2ir.c | 2184 | 1 | View Report |
| Dead store | Dead initialization | arrayop.c | 126 | 1 | View Report |
| Dead store | Dead initialization | backend /cgxmm.c | 159 | 1 | View Report |
| Dead store | Dead initialization | template.c | 5937 | 1 | View Report |
| Logic error | Dereference of null pointer | backend /evalu8.c | 1689 | 6 | View Report |
| Logic error | Dereference of null pointer | iasm.c | 1443 | 10 | View Report |
| Logic error | Dereference of null pointer | iasm.c | 4806 | 10 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5148 | 31 | View Report |
| Logic error | Dereference of null pointer | backend /cg87.c | 334 | 15 | View Report |
| Logic error | Dereference of null pointer | expression.c | 628 | 3 | View Report |
| Logic error | Dereference of null pointer | expression.c | 3959 | 3 | View Report |
| Logic error | Dereference of null pointer | backend /el.c | 3049 | 58 | View Report |
| Logic error | Dereference of null pointer | iasm.c | 1576 | 10 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5877 | 7 | View Report |
| Logic error | Dereference of null pointer | mtype.c | 6035 | 2 | View Report |
| Logic error | Dereference of null pointer | backend /evalu8.c | 1379 | 7 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6707 | 37 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5330 | 24 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5854 | 10 | View Report |
| Logic error | Dereference of null pointer | mars.c | 297 | 1 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6292 | 15 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5847 | 8 | View Report |
| Logic error | Dereference of null pointer | backend /cgcod.c | 890 | 4 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 3211 | 11 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6454 | 8 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 881 | 3 | View Report |
| Logic error | Dereference of null pointer | template.c | 4108 | 4 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5435 | 8 | View Report |
| Logic error | Dereference of null pointer | expression.c | 3864 | 2 | View Report |
| Logic error | Dereference of null pointer | statement.c | 3799 | 15 | View Report |
| Logic error | Dereference of null pointer | mtype.c | 5669 | 4 | View Report |
| Logic error | Dereference of null pointer | mtype.c | 5517 | 14 | View Report |
| Logic error | Dereference of null pointer | mtype.c | 9086 | 4 | View Report |
| Logic error | Dereference of null pointer | mtype.c | 6020 | 2 | View Report |
| Logic error | Dereference of null pointer | backend /cg87.c | 350 | 23 | View Report |
| Logic error | Dereference of null pointer | template.c | 5356 | 5 | View Report |
| Logic error | Dereference of null pointer | e2ir.c | 119 | 11 | View Report |
| Logic error | Dereference of null pointer | iasm.c | 1609 | 10 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 1642 | 7 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6914 | 7 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6861 | 8 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6804 | 72 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 3541 | 16 | View Report |
| Logic error | Dereference of null pointer | libelf.c | 162 | 15 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5815 | 19 | View Report |
| Logic error | Dereference of null pointer | iasm.c | 1487 | 10 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 1970 | 10 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6471 | 9 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6493 | 10 | View Report |
| Logic error | Dereference of null pointer | backend /evalu8.c | 1383 | 7 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5659 | 18 | View Report |
| Logic error | Dereference of null pointer | mangle.c | 78 | 9 | View Report |
| Logic error | Dereference of null pointer | iasm.c | 1473 | 10 | View Report |
| Logic error | Dereference of null pointer | backend /evalu8.c | 1705 | 6 | View Report |
| Logic error | Dereference of null pointer | statement.c | 3916 | 21 | View Report |
| Logic error | Dereference of null pointer | mtype.c | 5792 | 7 | View Report |
| Logic error | Dereference of null pointer | backend /blockopt.c | 253 | 3 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 6551 | 15 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5884 | 9 | View Report |
| Logic error | Dereference of null pointer | backend /evalu8.c | 1697 | 6 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5816 | 19 | View Report |
| Logic error | Dereference of null pointer | statement.c | 3956 | 22 | View Report |
| Logic error | Dereference of null pointer | interpret.c | 5284 | 24 | View Report |
| Logic error | Dereference of undefined pointer value | backend /gother.c | 999 | 25 | View Report |
| Logic error | Dereference of undefined pointer value | backend /gflow.c | 1039 | 13 | View Report |
| Logic error | Dereference of undefined pointer value | backend /gflow.c | 1083 | 14 | View Report |
| Logic error | Dereference of undefined pointer value | backend /gdag.c | 690 | 32 | View Report |
| Logic error | Dereference of undefined pointer value | backend /gflow.c | 1116 | 16 | View Report |
| Logic error | Dereference of undefined pointer value | backend /gdag.c | 726 | 34 | View Report |
| Logic error | Division by zero | backend /evalu8.c | 1354 | 7 | View Report |
| Logic error | Division by zero | backend /evalu8.c | 1191 | 6 | View Report |
| Logic error | Division by zero | backend /evalu8.c | 1448 | 6 | View Report |
| Logic error | Division by zero | backend /evalu8.c | 1371 | 6 | View Report |
| Logic error | Division by zero | backend /evalu8.c | 1453 | 6 | View Report |
| Logic error | Division by zero | backend /evalu8.c | 1435 | 7 | View Report |
| Logic error | Function call argument is an uninitialized value | expression.c | 5901 | 11 | View Report |
| Logic error | Function call argument is an uninitialized value | backend /cod3.c | 1106 | 6 | View Report |
| Logic error | Garbage return value | interpret.c | 2934 | 7 | View Report |
| Logic error | Result of operation is garbage or undefined | backend /gother.c | 595 | 13 | View Report |
| Logic error | Result of operation is garbage or undefined | backend /cod2.c | 2488 | 16 | View Report |
| Logic error | Result of operation is garbage or undefined | backend /cod2.c | 2252 | 25 | View Report |
| Logic error | Result of operation is garbage or undefined | backend /cod2.c | 3455 | 6 | View Report |
| Logic error | Result of operation is garbage or undefined | backend /cgelem.c | 2686 | 17 | View Report |
| Logic error | Stack address stored into global variable | backend /glocal.c | 88 | 1 | View Report |
| Unix API | Undefined allocation of 0 bytes (CERT MEM04-C; CWE-131) | backend /cod1.c | 2444 | 1 | View Report |