On Thu, Jul 03, 2014 at 07:51:28PM +0200, Toralf Förster via RT wrote:
> I think cppcheck is right here in void DES_ofb64_encrypt(), line 84, 85
> and 96, or ?:
> 
The line before that:

        dp=d;
>         l2c(v0,dp);<--- Uninitialized variable: d
>         l2c(v1,dp);<--- Uninitialized variable: d
>         while (l--)
>                 {
>                 if (n == 0)
>                         {
>                         DES_encrypt1(ti,schedule,DES_ENCRYPT);
>                         dp=d;
>                         t=ti[0]; l2c(t,dp);
>                         t=ti[1]; l2c(t,dp);
>                         save++;
>                         }
>                 *(out++)= *(in++)^d[n];<--- Uninitialized variable: d
>                 n=(n+1)&0x07;
>                 }

d is uninitialized, but it's being written to, not read from,
so I don't see a problem with this.


Kurt


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to