diff --git a/lib/dns/master.c b/lib/dns/master.c
index b71bd36848..b85ecd68a3 100644
--- a/lib/dns/master.c
+++ b/lib/dns/master.c
@@ -3088,7 +3088,9 @@ resign_fromlist(dns_rdatalist_t *this, dns_loadctx_t *lctx) {
 	else
 		when = sig.timeexpire - lctx->resign;
 
+	/* cppcheck-suppress nullPointerRedundantCheck */
 	rdata = ISC_LIST_NEXT(rdata, link);
+	/* cppcheck-suppress nullPointerRedundantCheck */
 	while (rdata != NULL) {
 		(void)dns_rdata_tostruct(rdata, &sig, NULL);
 		if (isc_serial_gt(sig.timesigned, lctx->now))
diff --git a/lib/dns/tcpmsg.c b/lib/dns/tcpmsg.c
index 8f5a97b0bd..4627ca69d9 100644
--- a/lib/dns/tcpmsg.c
+++ b/lib/dns/tcpmsg.c
@@ -50,7 +50,9 @@ recv_length(isc_task_t *task, isc_event_t *ev_in) {
 	INSIST(VALID_TCPMSG(tcpmsg));
 
 	dev = &tcpmsg->event;
+	/* cppcheck-suppress nullPointerRedundantCheck */
 	tcpmsg->address = ev->address;
+	/* cppcheck-suppress nullPointerRedundantCheck */
 
 	if (ev->result != ISC_R_SUCCESS) {
 		tcpmsg->result = ev->result;
diff --git a/lib/isccc/alist.c b/lib/isccc/alist.c
index 22992d6984..80abd30e14 100644
--- a/lib/isccc/alist.c
+++ b/lib/isccc/alist.c
@@ -137,7 +137,9 @@ isccc_alist_delete(isccc_sexpr_t *alist, const char *key)
 		INSIST(rest->type == ISCCC_SEXPRTYPE_DOTTEDPAIR);
 		car = CAR(rest);
 		INSIST(car != NULL && car->type == ISCCC_SEXPRTYPE_DOTTEDPAIR);
+		/* cppcheck-suppress nullPointerRedundantCheck */
 		caar = CAR(car);
+		/* cppcheck-suppress nullPointerRedundantCheck */
 		if (caar->type == ISCCC_SEXPRTYPE_STRING &&
 		    strcmp(caar->value.as_string, key) == 0) {
 			CDR(prev) = CDR(rest);