LV_UNUSED.GEN

Unused local variable

The LV_UNUSED.GEN checker finds local variables that have been declared but never used.

Vulnerability and risk

Unused variables use up stack memory and should be deleted from the function code for that reason. It's also possible that the unused variable points out a logic problem with the code.

Vulnerable code example

1
2
3
4
5
6
7
8
9
10
  class A{
     void foo();
  };
  void A::foo()
  {
    for(;;){
    int i;
    break;
    }
 }

Klocwork flags line 7 because variable 'i' is declared but never used.

External guidance

• CERT MSC13-C: Detect and remove unused values
• CWE-563: Assignment to Variable without Use