Hello David,
Have a look at the link Markus posted:
Open index.html: https://db.tt/3Nj4vpmG

libuemf causes a lot of the potential bugs listed, and they are not all false positives.
For example, one pattern pops up a lot:

U_PSEUDO_OBJ *functionname(const U_PSEUDO_OBJ *Clc){
    if(Clc && (Clc->Type != blah)) return(NULL);
   // use of *Clc afterwards, will crash on Clc==NULL

The way you should write the check is:
    if(!Clc || (Clc->Type != blah)) return NULL;

Have a look at the other errors too. memleaks and all.

Thanks,
Johan

On 23-3-2014 21:17, Markus Engel wrote:

Hi,

here’s the results of running scan-build on a part of the sources. I interrupted it, this takes quite a while… Anyway, you’ve got 263 possible bugs to check. Either there are many false positives or… inkscape shouldn’t even start :) .

Open index.html: https://db.tt/3Nj4vpmG

Regards,

Markus