[doc] add coverity badge
[js] flags field is not initialized by tstr_cat
[js] eval: avoid NULL pointer dereference
Merge branch 'master' into coverity_scan