diff -up sblim-wbemcli-1.6.3/CimCurl.cpp.orig sblim-wbemcli-1.6.3/CimCurl.cpp

--- sblim-wbemcli-1.6.3/CimCurl.cpp.orig	2019-08-27 14:18:53.329846123 +0200

+++ sblim-wbemcli-1.6.3/CimCurl.cpp	2019-08-27 14:18:53.332846130 +0200

@@ -369,6 +369,7 @@ void CimomCurl::setClientCertificates(co

    } else if (cacert) {

      FILE *fp;

      if ((fp = fopen(cacert, "r"))) {

+       fclose(fp);

        if ((rv=curl_easy_setopt(mHandle,CURLOPT_SSL_VERIFYPEER,1))) {

          cerr << getErrorMessage(rv) << endl;

          throw HttpException("Could not enable peer verification.");

@@ -377,7 +378,6 @@ void CimomCurl::setClientCertificates(co

          cerr << getErrorMessage(rv) << endl;

          throw HttpException("Could not load CA certificate.");

        }

-       fclose(fp);

      } else {

        throw HttpException(

            string("Could not open CA certificate file: ") + string(cacert)

diff -up sblim-wbemcli-1.6.3/CimXml.cpp.orig sblim-wbemcli-1.6.3/CimXml.cpp

--- sblim-wbemcli-1.6.3/CimXml.cpp.orig	2014-10-13 18:05:30.000000000 +0200

+++ sblim-wbemcli-1.6.3/CimXml.cpp	2019-08-27 14:32:20.068589450 +0200

@@ -159,7 +159,7 @@ int XmlBuffer::skipElement(const char *t

       cerr<<"--- XmlBuffer::skipElement(\""<<t<<"\")"<<endl;

 #endif

    char eTag[256]="</";

-   strcat(eTag,t);

+   strncat(eTag,t,252);

    strcat(eTag,">");

    char *e=strstr(cur,eTag);

    if (e) {

@@ -451,7 +451,7 @@ AVPs::AVPs(char *s, PropertyArray &prop)

 AVPs::AVPs(char *s, ParameterArray &param)

 {

-   char *n, *t, *u, *v, *w;

+   char *n, *t, *u, *v;

    int i,k,j,l;

    bool name = false;

    bool addAValue = false;

@@ -856,8 +856,6 @@ IMethodresponseXml::IMethodresponseXml(X

 	   if (irv->getReturnData() == NULL) {

 	       /* OpenWBEM support */

 	       throw NoReturnValue();

-	       delete irv;

-	       irv=NULL;

 	   }

            if (xb.endTag("IMETHODRESPONSE")) return;

            else throw ParseException("Expecting </IMETHODRESPONSE> tag(2)");

@@ -877,8 +875,6 @@ IMethodresponseXml::IMethodresponseXml(X

 	}

 */	else if (xb.endTag("IMETHODRESPONSE")) {

            throw NoReturnValue();

-           irv=NULL;

-           return;

         }

 /*        else throw ParseException("Expecting </IMETHODRESPONSE> tag(1)");

 	}

@@ -934,8 +930,6 @@ MethodresponseXml::MethodresponseXml(Xml

 	}

 */	else if (xb.endTag("METHODRESPONSE")) {

            throw NoReturnValue();

-           rvl=NULL;

-           return;

         }

 /*        else throw ParseException("Expecting </METHODRESPONSE> tag(1)");

 	}

@@ -2950,7 +2944,7 @@ char *strndup(char *f, int n) {

 URL::URL(const char *U)

 {

-   int pint,indir=0;

+   int indir=0;

    char *p,*q,*phelp,*np,*last,*un,*b,*h,*z;

    char *origu, *u;

    u = origu = strdup(U);

@@ -3061,7 +3055,7 @@ URL::URL(const char *U)

      zone_id = -1;

    }

-   pint=strtol(port.c_str(),&np,10);

+   (void) strtol(port.c_str(),&np,10);

    if (*np) throw URLException("Invalid port number");

    if (!phelp || strlen(phelp+1) == 0) {

@@ -3168,9 +3162,11 @@ int URL::getNetDeviceNum(string devName)

   while (2 == fscanf(fp, scnfmt.c_str(), &dev_num, dev_name)) {

     if (strcmp(devName.c_str(), dev_name) == 0) {  /* match */

+      fclose(fp);

       return dev_num;

     }

   }

+  fclose(fp);

   return -1;  // zone id not found in interfaces table

 #endif

 }