Repository Analysis

OpenVPN/openvpn

OpenVPN is an open source VPN daemon

1.4 Likely human-written View on GitHub
1.4
Adjusted Score
1.4
Raw Score
100%
Time Factor
2026-05-30
Last Push
14,029
Stars
C
Language
160,056
Lines of Code
367
Files
202
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 0HIGH 0MEDIUM 7LOW 195

Pattern Findings

202 matches across 7 categories. Click a row to expand file-level details.

Over-Commented Block184 hits · 184 pts
SeverityFileLineSnippet
LOWdistro/dns-scripts/haikuos_file-dns-updown.sh1#!/bin/sh
LOWdistro/dns-scripts/macos-dns-updown.sh1#!/bin/bash
LOWdistro/dns-scripts/openresolv-dns-updown.sh1#!/bin/sh
LOWdistro/dns-scripts/resolvconf_file-dns-updown.sh1#!/bin/sh
LOWdistro/dns-scripts/systemd-dns-updown.sh1#!/bin/bash
LOWdistro/dns-scripts/systemd-dns-updown.sh21#
LOWtests/t_lpback.sh1#! /bin/sh
LOWtests/null_client_up.sh1#!/bin/sh
LOWtests/t_cltsrv.sh1#! /bin/sh
LOWtests/unit_tests/openvpn/test_pkt.c21 */
LOWtests/unit_tests/openvpn/test_packet_id.c21 * distribution); if not, see <https://www.gnu.org/licenses/>.
LOWtests/unit_tests/openvpn/test_provider.c21 * with this program; if not, see <https://www.gnu.org/licenses/>.
LOWtests/unit_tests/openvpn/test_pkcs11.c21 * with this program; if not, see <https://www.gnu.org/licenses/>.
LOWtests/unit_tests/openvpn/test_ssl.c21 */
LOWtests/unit_tests/openvpn/test_ssl.c41
LOWtests/unit_tests/openvpn/test_ncp.c21 */
LOWtests/unit_tests/openvpn/test_dhcp.c21 */
LOWtests/unit_tests/openvpn/test_crypto.c21 */
LOWtests/unit_tests/openvpn/mock_msg.c21 */
LOWtests/unit_tests/openvpn/test_auth_token.c21 */
LOWtests/unit_tests/openvpn/test_argv.c1#include "config.h"
LOWtests/unit_tests/openvpn/test_cryptoapi.c21 * with this program; if not, see <https://www.gnu.org/licenses/>.
LOWtests/unit_tests/openvpn/test_misc.c21 */
LOWtests/unit_tests/openvpn/test_options_parse.c21 */
LOWtests/unit_tests/openvpn/test_push_update_msg.c1#ifdef HAVE_CONFIG_H
LOWtests/unit_tests/openvpn/test_tls_crypt.c21 */
LOWtests/unit_tests/openvpn/test_user_pass.c21 * with this program; if not, see <https://www.gnu.org/licenses/>.
LOWtests/unit_tests/openvpn/test_socket.c21 */
LOWcontrib/cmake/parse-version.m4.py1#
LOWcontrib/cmake/git-version.py1#
LOWcontrib/OCSP_check/OCSP_check.sh1#!/bin/sh
LOWcontrib/OCSP_check/OCSP_check.sh81 # redirections) manually against your or your CA's OCSP server to see how
LOWsample/sample-plugins/defer/multi-auth.c41 *
LOWsample/sample-scripts/totpauth.py1#! /usr/bin/python3
LOWsample/sample-scripts/totpauth.py21# SOFTWARE.
LOWsample/sample-scripts/auth-pam.pl1#!/usr/bin/perl -t
LOWsample/sample-config-files/firewall.sh61
LOWsample/sample-config-files/openvpn-startup.sh21# the command line and add "daemon"
LOWdev-tools/git-pre-commit-format.sh1#!/bin/sh
LOWdev-tools/git-pre-commit-format.sh21# DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
LOWdev-tools/git-pre-commit-format.sh121# sed to remove quotes around the filename, if inserted by the system
LOWdev-tools/gerrit-send-mail.py1#!/usr/bin/env python3
LOWdev-tools/update-copyright.sh1#!/bin/sh
LOWdev-tools/gen-release-tarballs.sh1#!/bin/sh
LOWsrc/compat/compat-daemon.c21 */
LOWsrc/compat/compat.h21 */
LOWsrc/openvpnmsica/dllmain.c21#include <config.h>
LOWsrc/openvpnmsica/msiex.c21#include <config.h>
LOWsrc/openvpnmsica/openvpnmsica.c21#include <config.h>
LOWsrc/openvpnmsica/openvpnmsica.c41#include <stdlib.h>
LOWsrc/tapctl/error.h41#define M_WARN (1 << 6) /* call syslog with LOG_WARNING */
LOWsrc/tapctl/tap.c21#include <config.h>
LOWsrc/tapctl/basic.h21#ifndef BASIC_H
LOWsrc/tapctl/basic.h41#define _In_
LOWsrc/tapctl/basic.h61#ifndef _Out_z_cap_
LOWsrc/tapctl/main.c21#ifdef HAVE_CONFIG_H
LOWsrc/plugins/down-root/down-root.c21 * with this program; if not, see <https://www.gnu.org/licenses/>.
LOWsrc/plugins/down-root/down-root.c41#include <syslog.h>
LOWsrc/plugins/auth-pam/auth-pam.c41#include <unistd.h>
LOWsrc/openvpn/tls_crypt.h81
124 more matches not shown…
Self-Referential Comments5 hits · 15 pts
SeverityFileLineSnippet
MEDIUMtests/t_server_null_server.sh52# Create a list of server pid files so that servers can be killed at the end of
MEDIUMsample/sample-scripts/auth-pam.pl79# Initialize PAM object
MEDIUMsample/sample-keys/gen-sample-keys.sh56# Create a client cert, revoke it, generate CRL
MEDIUMdev-tools/gen-release-tarballs.sh143# Create the destination directory, using a sub-dir with the tag-name
MEDIUMdev-tools/gen-release-tarballs.sh234# Create a tar-bundle with everything
Decorative Section Separators2 hits · 6 pts
SeverityFileLineSnippet
MEDIUMtests/t_lpback.sh31# ----------------------------------------------------------
MEDIUMtests/t_lpback.sh33# ----------------------------------------------------------
Fake / Example Data6 hits · 6 pts
SeverityFileLineSnippet
LOWtests/unit_tests/openvpn/test_provider.c77static const char *test_msg = "Lorem ipsum dolor sit amet, consectetur "
LOWtests/unit_tests/openvpn/test_provider.c77static const char *test_msg = "Lorem ipsum dolor sit amet, consectetur "
LOWtests/unit_tests/openvpn/test_crypto.c146static const char *ipsumlorem = "Lorem ipsum dolor sit amet, consectetur "
LOWtests/unit_tests/openvpn/test_crypto.c146static const char *ipsumlorem = "Lorem ipsum dolor sit amet, consectetur "
LOWtests/unit_tests/openvpn/pkey_test_utils.c42static const char *test_msg = "Lorem ipsum dolor sit amet, consectetur "
LOWtests/unit_tests/openvpn/pkey_test_utils.c42static const char *test_msg = "Lorem ipsum dolor sit amet, consectetur "
Redundant / Tautological Comments3 hits · 4 pts
SeverityFileLineSnippet
LOWtests/t_net.sh103 # Check if we have a valid kerberos ticket
LOWtests/t_server_null.sh30 # Check if we have a valid kerberos ticket
LOWsample/sample-scripts/totpauth.py90 # Check if the code is valid (and also allow code +/-1)
Verbosity Indicators1 hit · 2 pts
SeverityFileLineSnippet
LOWsrc/openvpn/dco.c367 /* if the device name is fixed, we need to check if an interface with this
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippet
LOW…e-plugins/keying-material-exporter-demo/http-server.py5class ExampleHTTPRequestHandler(BaseHTTPRequestHandler):