For the likely error I spot, you don't even need To know C. Anything remotely algol-like Will do.
I wonder whether the software from the guys at viva64.com would spot that.
I wonder whether the software from the guys at viva64.com would spot that.
However I can't see a valid case for this pattern so static analyser rule to knock it on the head would be a good idea.
clientRandom.data = ctx->clientRandom;
clientRandom.length = SSL_CLIENT_SRVR_RAND_SIZE;
serverRandom.data = ctx->serverRandom;
serverRandom.length = SSL_CLIENT_SRVR_RAND_SIZE;
That is something that I think static analysis tools could signal. It would be a red herring, though.