diff --git a/tests/api.c b/tests/api.c
index 999122067..88b033206 100644
--- a/tests/api.c
+++ b/tests/api.c
@@ -55082,6 +55082,7 @@ static void test_wolfSSL_dtls12_fragments_spammer(WOLFSSL* ssl)
     /* frag length */
     c32to24(30, b + idx);
     idx += 3;
+    (void)idx; /* inhibit clang-analyzer-deadcode.DeadStores */
 
     for (i = 0; i < DTLS_POOL_SZ * 2 && ret > 0;
             seq_number++, msg_number++, i++) {
diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c
index ca3205cb1..abfa27ee1 100644
--- a/wolfcrypt/src/asn.c
+++ b/wolfcrypt/src/asn.c
@@ -35048,7 +35048,8 @@ static int ParseCRL_Extensions(DecodedCRL* dcrl, const byte* buf,
                         if (ret == 0) {
                             dcrl->crlNumber = 0;
                             for (i = 0; i < (*m).used; ++i) {
-                                if (i > (int)sizeof(word32)) {
+                                if (i > (CHAR_BIT *
+                                         (int)sizeof(word32) / DIGIT_BIT)) {
                                     break;
                                 }
                                 dcrl->crlNumber |= ((word32)(*m).dp[i]) <<
diff --git a/wolfcrypt/src/misc.c b/wolfcrypt/src/misc.c
index 57803ef71..598545697 100644
--- a/wolfcrypt/src/misc.c
+++ b/wolfcrypt/src/misc.c
@@ -552,7 +552,7 @@ WC_STATIC WC_INLINE void ctMaskCopy(byte mask, byte* dst, byte* src,
 {
     int i;
     for (i = 0; i < size; ++i) {
-        dst[i] ^= (dst[i] ^ src[i]) & mask;
+        *(dst + i) ^= (*(dst + i) ^ *(src + i)) & mask;
     }
 }