These are the ones where I could easily make scan-build happy. They do seem to be potential holes where invalid data in one place could result in use of uninitialized values.