Report from Cppcheck 2.4.1 was:
lib/xmlparse.c:729:26: warning: The address of local variable 'entropy' might be accessed at non-zero index. [objectIndex]
((uint8_t *)target)[bytesWrittenTotal] = random8;
^
lib/xmlparse.c:820:39: note: Address of variable taken here.
writeRandomBytes_arc4random((void *)&entropy, sizeof(entropy));
^
lib/xmlparse.c:820:31: note: Calling function 'writeRandomBytes_arc4random', 1st argument '(void*)&entropy' value is lifetime=entropy
writeRandomBytes_arc4random((void *)&entropy, sizeof(entropy));
^
lib/xmlparse.c:729:26: note: The address of local variable 'entropy' might be accessed at non-zero index.
((uint8_t *)target)[bytesWrittenTotal] = random8;
^
lib/xmltok.c:318:54: error: The address of local variable 'fromLim' is accessed at non-zero index. [objectIndex]
const unsigned char prev = (unsigned char)fromLim[-1];
^
lib/xmltok.c:369:56: note: Address of variable taken here.
_INTERNAL_trim_to_complete_utf8_characters(*fromP, &fromLim);
^
lib/xmltok.c:369:56: note: Calling function '_INTERNAL_trim_to_complete_utf8_characters', 2nd argument '&fromLim' value is lifetime=fromLim
_INTERNAL_trim_to_complete_utf8_characters(*fromP, &fromLim);
^
lib/xmltok.c:318:54: note: The address of local variable 'fromLim' is accessed at non-zero index.
const unsigned char prev = (unsigned char)fromLim[-1];
^