diff --git a/src/daemon/entry/connect/grpc/grpc_containers_service.cc b/src/daemon/entry/connect/grpc/grpc_containers_service.cc
index 7340c3ed13ef49e9f1b80e460113b8f12c48494d..76f597b5f9fc83d1bb01b90a531f6528e7726df8 100644
--- a/src/daemon/entry/connect/grpc/grpc_containers_service.cc
+++ b/src/daemon/entry/connect/grpc/grpc_containers_service.cc
@@ -18,14 +18,15 @@
 #include <string>
 #include <thread>
 #include <unistd.h>
-#include "isula_libutils/log.h"
+#include <isula_libutils/log.h>
+#include <isula_libutils/logger_json_file.h>
+
 #include "utils.h"
 #include "error.h"
 #include "cxxutils.h"
 #include "stoppable_thread.h"
 #include "grpc_server_tls_auth.h"
 #include "container_api.h"
-#include "isula_libutils/logger_json_file.h"
 #include "service_base.h"
 #include "create_service.h"
 #include "start_service.h"
diff --git a/src/daemon/entry/connect/grpc/grpc_containers_service_private.cc b/src/daemon/entry/connect/grpc/grpc_containers_service_private.cc
index 6d33354edf1de02a3f7f5729c3ed192ce6db6f78..2cdbe5688bb701e7dc089535742cd87fd6e84685 100644
--- a/src/daemon/entry/connect/grpc/grpc_containers_service_private.cc
+++ b/src/daemon/entry/connect/grpc/grpc_containers_service_private.cc
@@ -13,7 +13,7 @@
  * Description: provide grpc container service private functions
  ******************************************************************************/
 #include "grpc_containers_service.h"
-#include "isula_libutils/log.h"
+#include <isula_libutils/log.h>
 #include "utils.h"
 #include "error.h"
 
diff --git a/src/daemon/entry/connect/grpc/grpc_server_tls_auth.cc b/src/daemon/entry/connect/grpc/grpc_server_tls_auth.cc
index 737bb129d3b98e65e826d386ec389299e7d54512..968a6dfe5d6556efb0ae7e3caca1d369ff77315a 100644
--- a/src/daemon/entry/connect/grpc/grpc_server_tls_auth.cc
+++ b/src/daemon/entry/connect/grpc/grpc_server_tls_auth.cc
@@ -24,7 +24,7 @@ std::string auth_plugin = "";
 } // namespace AuthorizationPluginConfig
 
 namespace GrpcServerTlsAuth {
-Status auth(ServerContext *context, std::string action)
+Status auth(ServerContext *context, const std::string &action)
 {
 #ifdef ENABLE_GRPC_REMOTE_CONNECT
     const std::multimap<grpc::string_ref, grpc::string_ref> &init_metadata = context->client_metadata();
diff --git a/src/daemon/entry/connect/grpc/grpc_server_tls_auth.h b/src/daemon/entry/connect/grpc/grpc_server_tls_auth.h
index ee66529f1b37015ed0011db7f2e08c940c63ff1c..f429a02d8a58863f1a75b9fe3d95c6a86ef218b8 100644
--- a/src/daemon/entry/connect/grpc/grpc_server_tls_auth.h
+++ b/src/daemon/entry/connect/grpc/grpc_server_tls_auth.h
@@ -27,7 +27,7 @@ extern std::string auth_plugin;
 }; // namespace AuthorizationPluginConfig
 
 namespace GrpcServerTlsAuth {
-Status auth(ServerContext *context, std::string action);
+Status auth(ServerContext *context, const std::string &action);
 }; // namespace GrpcServerTlsAuth
 
 #endif // DAEMON_ENTRY_CONNECT_GRPC_GRPC_SERVER_TLS_AUTH_H
diff --git a/src/daemon/entry/connect/rest/rest_containers_service.c b/src/daemon/entry/connect/rest/rest_containers_service.c
index 397660e2cb284f37b4799a3dbc01affe168c1b05..73eda50808dbd865013bccec39e0f0b20f858fb7 100644
--- a/src/daemon/entry/connect/rest/rest_containers_service.c
+++ b/src/daemon/entry/connect/rest/rest_containers_service.c
@@ -15,8 +15,8 @@
 #include "rest_containers_service.h"
 #include <unistd.h>
 #include <string.h>
+#include <isula_libutils/log.h>
 
-#include "isula_libutils/log.h"
 #include "utils.h"
 #include "error.h"
 #include "callback.h"
diff --git a/src/daemon/entry/cri/cni_network_plugin.h b/src/daemon/entry/cri/cni_network_plugin.h
index 49acbb33bbd24d30e9233020903442e0ced28a41..b98b00d0140fb84cde63caf77ec627ff4f87233b 100644
--- a/src/daemon/entry/cri/cni_network_plugin.h
+++ b/src/daemon/entry/cri/cni_network_plugin.h
@@ -33,9 +33,9 @@
 
 namespace Network {
 #define UNUSED(x) ((void)(x))
-static const std::string CNI_PLUGIN_NAME { "cni" };
-static const std::string DEFAULT_NET_DIR { "/etc/cni/net.d" };
-static const std::string DEFAULT_CNI_DIR { "/opt/cni/bin" };
+const std::string CNI_PLUGIN_NAME { "cni" };
+const std::string DEFAULT_NET_DIR { "/etc/cni/net.d" };
+const std::string DEFAULT_CNI_DIR { "/opt/cni/bin" };
 
 class CniNetworkPlugin : public NetworkPlugin {
 public:
diff --git a/src/daemon/entry/cri/streams/session.cc b/src/daemon/entry/cri/streams/session.cc
index 289b5a0cee7c813815fbf5213b3db884ebb14ffb..064d82fc541a5cfc075e79b666802df5e4629ca8 100644
--- a/src/daemon/entry/cri/streams/session.cc
+++ b/src/daemon/entry/cri/streams/session.cc
@@ -155,6 +155,11 @@ void DoWriteToClient(SessionData *session, const void *data, size_t len, Websock
         ERROR("Out of memory");
         return;
     }
+    if (len > MAX_BUFFER_SIZE) {
+        ERROR("Message exceeds maximum length %d, len = %zu", MAX_BUFFER_SIZE, len);
+        free(buf);
+        return;
+    }
     // Determine if it is standard output channel or error channel
     buf[LWS_PRE] = static_cast<int>(channel);
 
diff --git a/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.cc b/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.cc
index 69573a704e09a084eeb0759f62d5e061473835bd..ad9e8ef186cc9d795536e96d66cfb8e9e6c70cbc 100644
--- a/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.cc
+++ b/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.cc
@@ -1,5 +1,5 @@
 /******************************************************************************
- * Copyright (c) Huawei Technologies Co., Ltd. 2020. All rights reserved.
+ * Copyright (c) Huawei Technologies Co., Ltd. 2017-2020. All rights reserved.
  * iSulad licensed under the Mulan PSL v2.
  * You can use this software according to the terms and conditions of the Mulan PSL v2.
  * You may obtain a copy of Mulan PSL v2 at:
diff --git a/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.h b/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.h
index 4c317c1fc02a73c359dc2044ce428551733cdc42..b94f89086efeb7e6634e31fc34a48aea18cd113c 100644
--- a/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.h
+++ b/src/daemon/entry/cri/v1alpha/cri_image_manager_service_impl.h
@@ -1,5 +1,5 @@
 /******************************************************************************
- * Copyright (c) Huawei Technologies Co., Ltd. 2020. All rights reserved.
+ * Copyright (c) Huawei Technologies Co., Ltd. 2017-2020. All rights reserved.
  * iSulad licensed under the Mulan PSL v2.
  * You can use this software according to the terms and conditions of the Mulan PSL v2.
  * You may obtain a copy of Mulan PSL v2 at:
@@ -19,7 +19,7 @@
 #include <string>
 #include <vector>
 #include <memory>
-// #include "cri_services.h"
+
 #include "image_api.h"
 #include "cri_image_manager_service.h"
 
diff --git a/src/daemon/modules/runtime/shim/shim_rt_ops.c b/src/daemon/modules/runtime/shim/shim_rt_ops.c
index fbb4dccce45b5292a9c1c7ba9e60ee97d94e4d2c..73d5de1c1299ab3273133af84d741b5757472439 100644
--- a/src/daemon/modules/runtime/shim/shim_rt_ops.c
+++ b/src/daemon/modules/runtime/shim/shim_rt_ops.c
@@ -571,6 +571,12 @@ static int file_read_address(const char *fname, char *addr)
         goto out;
     }
 
+    if (strlen(buf) >= PATH_MAX) {
+        ERROR("address in file %s is too long", fname);
+        ret = -1;
+        goto out;
+    }
+
     (void)stpcpy(addr, buf);
 
 out:
diff --git a/src/daemon/modules/service/service_container.c b/src/daemon/modules/service/service_container.c
index 97ee106a7b4cb7d1daa1902c32a0d461a04117d9..a9da669a14784f6bb8a2d9067bc8e2f962a62e97 100644
--- a/src/daemon/modules/service/service_container.c
+++ b/src/daemon/modules/service/service_container.c
@@ -1487,7 +1487,7 @@ static int force_kill(container_t *cont)
 {
     int ret = 0;
     const char *id = cont->common_config->id;
-    int stop_signal = container_stop_signal(cont);
+    uint32_t stop_signal = container_stop_signal(cont);
 
     ret = kill_with_signal(cont, SIGKILL);
     if (ret != 0) {
@@ -1514,7 +1514,7 @@ int stop_container(container_t *cont, int timeout, bool force, bool restart)
 {
     int ret = 0;
     char *id = NULL;
-    int stop_signal = 0;
+    uint32_t stop_signal = 0;
 
     if (cont == NULL) {
         ERROR("Invalid input arguments");
diff --git a/src/daemon/modules/spec/parse_volume.c b/src/daemon/modules/spec/parse_volume.c
index 3f0af1ae112d4ff4d3a63e04105bb9a0b571c607..0b63f0c9a5e5ba7c83c55e7a1d037dd550fe00f9 100644
--- a/src/daemon/modules/spec/parse_volume.c
+++ b/src/daemon/modules/spec/parse_volume.c
@@ -111,6 +111,11 @@ static int check_mount_source(const defs_mount *m)
 
 int append_default_tmpfs_options(defs_mount *m)
 {
+
+    if (m == NULL) {
+        return -1;
+    }
+
     if (util_array_append(&m->options, "noexec") != 0) {
         ERROR("append default tmpfs options noexec failed");
         return -1;
diff --git a/src/daemon/modules/spec/specs_extend.c b/src/daemon/modules/spec/specs_extend.c
index c8faa102f6f9a8aa72bc99dd56dd8d39fc57475d..5ede7936a8837a1599816769dedf096b285f8af1 100644
--- a/src/daemon/modules/spec/specs_extend.c
+++ b/src/daemon/modules/spec/specs_extend.c
@@ -384,6 +384,10 @@ int merge_env_target_file(oci_runtime_spec *oci_spec, const char *env_target_fil
     char *env_path = NULL;
     json_map_string_string *env_map = NULL;
 
+    if (oci_spec == NULL) {
+        return -1;
+    }
+
     if (env_target_file == NULL) {
         return 0;
     }
@@ -484,6 +488,10 @@ char *oci_container_get_env(const oci_runtime_spec *oci_spec, const char *key)
 
 int make_sure_oci_spec_linux(oci_runtime_spec *oci_spec)
 {
+    if (oci_spec == NULL) {
+        return -1;
+    }
+
     if (oci_spec->linux == NULL) {
         oci_spec->linux = util_common_calloc_s(sizeof(oci_runtime_config_linux));
         if (oci_spec->linux == NULL) {
@@ -495,6 +503,10 @@ int make_sure_oci_spec_linux(oci_runtime_spec *oci_spec)
 
 int make_sure_oci_spec_process(oci_runtime_spec *oci_spec)
 {
+    if (oci_spec == NULL) {
+        return -1;
+    }
+
     if (oci_spec->process == NULL) {
         oci_spec->process = util_common_calloc_s(sizeof(defs_process));
         if (oci_spec->process == NULL) {
diff --git a/src/daemon/modules/spec/specs_mount.c b/src/daemon/modules/spec/specs_mount.c
index 7a9da4d931afe8d2a8f05bc6b9c835243fcb60a7..dc1ca1f16268cdb82c6c860948ec3079ac7f385f 100644
--- a/src/daemon/modules/spec/specs_mount.c
+++ b/src/daemon/modules/spec/specs_mount.c
@@ -144,7 +144,7 @@ int adapt_settings_for_mounts(oci_runtime_spec *oci_spec, container_config *cont
     int ret = 0;
     char **array_str = NULL;
 
-    if (container_spec == NULL) {
+    if (oci_spec == NULL || container_spec == NULL) {
         return -1;
     }
 
@@ -1235,6 +1235,10 @@ int merge_all_devices_and_all_permission(oci_runtime_spec *oci_spec)
     defs_resources *ptr = NULL;
     defs_device_cgroup *spec_dev_cgroup = NULL;
 
+    if (oci_spec == NULL) {
+        return -1;
+    }
+
     ret = merge_all_devices_in_dir("/dev", NULL, NULL, oci_spec);
     if (ret != 0) {
         ERROR("Failed to merge all devices in /dev");
@@ -2212,6 +2216,11 @@ int merge_conf_device(oci_runtime_spec *oci_spec, host_config *host_spec)
 {
     int ret = 0;
 
+    if (oci_spec == NULL || host_spec == NULL) {
+        ERROR("Invalid input arguments");
+        return -1;
+    }
+
     /* blkio weight devices */
     if (host_spec->blkio_weight_device != NULL && host_spec->blkio_weight_device_len != 0) {
         ret = merge_blkio_weight_device(oci_spec, host_spec->blkio_weight_device, host_spec->blkio_weight_device_len);
@@ -2879,7 +2888,7 @@ static int calc_volumes_from_len(host_config *host_spec, size_t *len)
     char *mode = NULL;
     container_t *cont = NULL;
     int ret = 0;
-    int i = 0;
+    size_t i = 0;
 
     *len = 0;
     for (i = 0; i < host_spec->volumes_from_len; i++) {
@@ -3317,11 +3326,18 @@ out:
 int merge_conf_mounts(oci_runtime_spec *oci_spec, host_config *host_spec, container_config_v2_common_config *v2_spec)
 {
     int ret = 0;
-    container_config *container_spec = v2_spec->config;
+    container_config *container_spec = NULL;
     defs_mount **all_fs_mounts = NULL;
     size_t all_fs_mounts_len = 0;
     bool mounted = false;
 
+    if (oci_spec == NULL || host_spec == NULL || v2_spec == NULL) {
+        ERROR("Invalid arguments");
+        return -1;
+    }
+
+    container_spec = v2_spec->config;
+
     ret = im_mount_container_rootfs(v2_spec->image_type, v2_spec->image, v2_spec->id);
     if (ret != 0) {
         ERROR("Mount container %s failed when merge mounts", v2_spec->id);
@@ -3349,6 +3365,7 @@ int merge_conf_mounts(oci_runtime_spec *oci_spec, host_config *host_spec, contai
     if (host_spec->host_channel != NULL) {
         if (!add_host_channel_mount(&all_fs_mounts, &all_fs_mounts_len, host_spec->host_channel)) {
             ERROR("Failed to merge host channel mount");
+            ret = -1;
             goto out;
         }
     }
@@ -3372,7 +3389,11 @@ int merge_conf_mounts(oci_runtime_spec *oci_spec, host_config *host_spec, contai
     /* add ipc mount */
     if (v2_spec->shm_path != NULL) {
         // check whether duplication
-        add_shm_mount(&all_fs_mounts, &all_fs_mounts_len, v2_spec->shm_path);
+        if (!add_shm_mount(&all_fs_mounts, &all_fs_mounts_len, v2_spec->shm_path)) {
+            ERROR("Failed to add shm mount");
+            ret = -1;
+            goto out;
+        }
     }
 
     if (!host_spec->system_container) {
@@ -3418,6 +3439,11 @@ int add_rootfs_mount(const container_config *container_spec)
     int ret = 0;
     char *mntparent = NULL;
 
+    if (container_spec == NULL) {
+        ERROR("Invalid arguments");
+        return -1;
+    }
+
     mntparent = conf_get_isulad_mount_rootfs();
     if (mntparent == NULL) {
         ERROR("Failed to get mount parent directory");
diff --git a/src/daemon/modules/spec/specs_mount.h b/src/daemon/modules/spec/specs_mount.h
index 3283d92b47288327356b48588fc97685ee3284b0..8a28f0e2611b6d5523d505d773f3d97b706c7b7b 100644
--- a/src/daemon/modules/spec/specs_mount.h
+++ b/src/daemon/modules/spec/specs_mount.h
@@ -41,8 +41,6 @@ int set_mounts_readwrite_option(const oci_runtime_spec *oci_spec);
 
 int merge_all_devices_and_all_permission(oci_runtime_spec *oci_spec);
 
-bool mount_run_tmpfs(oci_runtime_spec *container, const host_config *host_spec, const char *path);
-
 int merge_conf_device(oci_runtime_spec *oci_spec, host_config *host_spec);
 
 int setup_ipc_dirs(host_config *host_spec, container_config_v2_common_config *v2_spec);
diff --git a/src/daemon/modules/spec/specs_namespace.c b/src/daemon/modules/spec/specs_namespace.c
index 72d5907974c5e2c281b04369066d0578bdaeb8ba..da555705ee835ad444c959c55a848f51fa20b3ad 100644
--- a/src/daemon/modules/spec/specs_namespace.c
+++ b/src/daemon/modules/spec/specs_namespace.c
@@ -235,13 +235,15 @@ int get_network_namespace_path(const host_config *host_spec,
 #endif
     };
     size_t jump_table_size = sizeof(handler_jump_table) / sizeof(handler_jump_table[0]);
-    const char *network_mode = host_spec->network_mode;
+    const char *network_mode = NULL;
 
-    if (network_mode == NULL) {
-        ERROR("network mode does not exist");
+    if (host_spec == NULL || host_spec->network_mode == NULL || dest_path == NULL) {
+        ERROR("Invalid input");
         return -1;
     }
 
+    network_mode = host_spec->network_mode;
+
     for (index = 0; index < jump_table_size; ++index) {
         if (strncmp(network_mode, handler_jump_table[index].mode, strlen(handler_jump_table[index].mode)) == 0) {
             ret = handler_jump_table[index].handle(host_spec, network_settings, type, dest_path);
diff --git a/src/daemon/modules/spec/specs_security.c b/src/daemon/modules/spec/specs_security.c
index d212356de3a874096b671d43f1381411cc4a4f5f..08db8d0dd945ede6cd35bbdad5d76493592a7f48 100644
--- a/src/daemon/modules/spec/specs_security.c
+++ b/src/daemon/modules/spec/specs_security.c
@@ -502,11 +502,6 @@ static size_t docker_seccomp_arches_count(const char *seccomp_architecture, cons
     size_t count = 0;
     size_t i = 0;
 
-    if (seccomp_architecture == NULL) {
-        ERROR("Invalid input seccomp architecture");
-        return -1;
-    }
-
     for (i = 0; i < docker_seccomp_spec->arch_map_len; ++i) {
         if (docker_seccomp_spec->arch_map[i] == NULL || docker_seccomp_spec->arch_map[i]->architecture == NULL) {
             continue;
@@ -533,10 +528,6 @@ static int dup_architectures_to_oci_spec(const char *seccomp_architecture, const
     }
 
     arch_size = docker_seccomp_arches_count(seccomp_architecture, docker_seccomp_spec);
-    if (arch_size < 0) {
-        ERROR("Failed to get arches count from docker seccomp spec");
-        return -1;
-    }
 
     if (arch_size == 0) {
         WARN("arch map is not provided in specified seccomp profile");
@@ -744,7 +735,7 @@ int merge_default_seccomp_spec(oci_runtime_spec *oci_spec, const defs_process_ca
     oci_runtime_config_linux_seccomp *oci_seccomp_spec = NULL;
     docker_seccomp *docker_seccomp_spec = NULL;
 
-    if (oci_spec->process == NULL || oci_spec->process->capabilities == NULL) {
+    if (oci_spec == NULL || oci_spec->process == NULL || oci_spec->process->capabilities == NULL) {
         return 0;
     }
 
diff --git a/src/daemon/modules/volume/local.c b/src/daemon/modules/volume/local.c
index 6bc900615c5b11755a4170e6238ea02368576da7..994ed96a2a0cdd51ad1f277555df6639648b8da5 100644
--- a/src/daemon/modules/volume/local.c
+++ b/src/daemon/modules/volume/local.c
@@ -403,6 +403,7 @@ static struct volume *volume_create_nolock(char *name)
 
     if (!map_insert(g_volumes->vols_by_name, v->name, v)) {
         ERROR("failed to insert volume %s", v->name);
+        ret = -1;
         goto out;
     }
 
@@ -630,7 +631,7 @@ int register_local_volume(const char *root_dir)
     }
 
     local_volume_root_dir = util_path_join(root_dir, LOCAL_VOLUME_ROOT_DIR_NAME);
-    if (root_dir == NULL) {
+    if (local_volume_root_dir == NULL) {
         ERROR("out of memory");
         ret = -1;
         goto out;
diff --git a/src/daemon/modules/volume/volume.c b/src/daemon/modules/volume/volume.c
index d9044bd1b50af0cc4412afd0ad7b20fd979c0edd..b71267c5a28ec015a3c8db9a907d96deb1a894a0 100644
--- a/src/daemon/modules/volume/volume.c
+++ b/src/daemon/modules/volume/volume.c
@@ -130,7 +130,7 @@ static int insert_driver(char *name, volume_driver *driver)
     }
 
     if (!map_insert(g_vs.drivers, name, d)) {
-        ERROR("out of memory");
+        ERROR("Failed to insert volume driver %s", name);
         ret = -1;
         goto out;
     }