bubblewrap-0.9.0-1.fc41

List of Defects

Error: CPPCHECK_WARNING: [#def1]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/bind-mount.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: GCC_ANALYZER_WARNING (CWE-775): [#def2]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/bind-mount.c: scope_hint: In function ‘bind_mount’
bubblewrap-0.9.0-build/bubblewrap-0.9.0/bind-mount.c:408:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(realpath(dest, 0), 2621440)’
#  406|       return BIND_MOUNT_ERROR_REALPATH_DEST;
#  407|   
#  408|->   dest_fd = open (resolved_dest, O_PATH | O_CLOEXEC);
#  409|     if (dest_fd < 0)
#  410|       {

Error: CPPCHECK_WARNING: [#def3]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/bubblewrap.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def4]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/bubblewrap.c:1470:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1468|           case SETUP_MAKE_SYMLINK:
# 1469|             assert (op->source != NULL);  /* guaranteed by the constructor */
# 1470|->           if (symlink (op->source, dest) != 0)
# 1471|               {
# 1472|                 if (errno == EEXIST)

Error: CPPCHECK_WARNING: [#def5]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/network.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def6]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/tests/try-syscall.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: GCC_ANALYZER_WARNING: [#def7]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/tests/try-syscall.c: scope_hint: In function ‘main’
bubblewrap-0.9.0-build/bubblewrap-0.9.0/tests/try-syscall.c:157:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘-1’
#  155|           {
#  156|             /* If not blocked by seccomp, this will fail with EBADF */
#  157|->           if (listen (-1, 42) != 0)
#  158|               {
#  159|                 errsv = errno;

Error: CPPCHECK_WARNING: [#def8]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c: scope_hint: In function ‘load_file_data’
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c:168:10: warning[-Wanalyzer-malloc-leak]: leak of ‘xrealloc(data, (long unsigned int)data_len)’
#  166|     if (res == NULL)
#  167|       die_oom ();
#  168|->   return res;
#  169|   }
#  170|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c: scope_hint: In function ‘readlink_malloc’
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c:168:10: warning[-Wanalyzer-malloc-leak]: leak of ‘xrealloc(value,  size)’
#  166|     if (res == NULL)
#  167|       die_oom ();
#  168|->   return res;
#  169|   }
#  170|   

Error: CLANG_WARNING: [#def11]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c:741:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'p'
#  739|     while (p);
#  740|   
#  741|->   return 0;
#  742|   }
#  743|   

Error: CLANG_WARNING: [#def12]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c:841:16: warning[unix.Malloc]: Potential leak of memory pointed to by 'value'
#  839|         n = readlink (pathname, value, size - 1);
#  840|         if (n < 0)
#  841|->         return NULL;
#  842|       }
#  843|     while (size - 2 < (size_t)n);

Error: CPPCHECK_WARNING (CWE-476): [#def13]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c:845: warning[nullPointer]: Possible null pointer dereference: value
#  843|     while (size - 2 < (size_t)n);
#  844|   
#  845|->   value[n] = 0;
#  846|     return steal_pointer (&value);
#  847|   }

Error: GCC_ANALYZER_WARNING (CWE-415): [#def14]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.h:147:5: warning[-Wanalyzer-double-free]: double-‘free’ of ‘data’
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c: scope_hint: In function ‘load_file_data’
#  145|   
#  146|     if (*pp)
#  147|->     free (*pp);
#  148|   }
#  149|   

Error: GCC_ANALYZER_WARNING (CWE-415): [#def15]
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.h:147:5: warning[-Wanalyzer-double-free]: double-‘free’ of ‘value’
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.c: scope_hint: In function ‘readlink_malloc’
bubblewrap-0.9.0-build/bubblewrap-0.9.0/utils.h:22: included_from: Included from here.
#  145|   
#  146|     if (*pp)
#  147|->     free (*pp);
#  148|   }
#  149|   

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-222.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namebubblewrap-0.9.0-1.fc41
store-results-to/tmp/tmpxfzqf02r/bubblewrap-0.9.0-1.fc41.tar.xz
time-created2024-07-03 12:07:14
time-finished2024-07-03 12:08:15
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpxfzqf02r/bubblewrap-0.9.0-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpxfzqf02r/bubblewrap-0.9.0-1.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9