api: fix coverity warnings