I ran the new version of scan-build and checked the SSSD. There's a big
number of false positives, anything that follows this construct:
struct foostruct *f = NULL;
get_foo_vals(mem_ctxm &f);
process(f->foomember);
Triggers a warning that f->foomember is dereferencing NULL.
That said, clang also uncovered some real bugs. Attached are fixes for
bugs that are obvious, I will follow up with some others with people who
have more knowledge about the code in question.