I've run clang's static analyser on GnuTLS 3.0.12, and put the report online: https://www.gnu.org/software/gnutls/clang/ It is simple to re-generate (rules in cfg.mk) so I hope to run this regulary from now on. /Simon