Summary of the reports
I checked the errors it raised - most of them look legitimate.
For example, NULL_DEREFERENCE error is the following:
which is a legimitate bug, since alertpool is initialized above:
alertpool = am_pop_alertpool(mediatype);
and am_pop_alertpool() function can return NULL which never gets checked.
It is very easy to install infer (check https://fbinfer.com/docs/analyzing-apps-or-projects/)
in the zabbix directory produces the report (attached to this ticket).