False positive - Unused static function
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
In a project using CodeQL scanning, all 4 "Unused static function" complaints look like false positives.
The easier two are:
https://github.com/andyhhp/xtf/security/code-scanning/51
https://github.com/andyhhp/xtf/security/code-scanning/52
Where the caller is the subsequent function.
Two others are also false positives, but the analysis might be suffering from weak functions.
https://github.com/andyhhp/xtf/security/code-scanning/47
https://github.com/andyhhp/xtf/security/code-scanning/48
In these two examples, there is a weak form of `arch_fmt_pointer()` which doesn't call `x86_decode_exinfo()` that could be interfering with analysis.
In reality, compilers are fairly hot on warnings about unused static functions,and this project is -Wall/-Werror on both GCC and Clang
Contributor guide
Assessment
This issue has not been assessed yet.