Newly introduced defects

List of Defects

Error: CPPCHECK_WARNING: [#def1]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/ecc-ecdh.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def2]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/kem-ecc.c:229:3: warning[deadcode.DeadStores]: Value stored to 'p' is never read
#  227|     p += ecc_len;
#  228|     memcpy (p, pubkey, ecc_len);
#  229|->   p += ecc_len;
#  230|   
#  231|     err = _gcry_kdf_open (&hd, GCRY_KDF_HKDF, macalgo, param, 1,

Error: CPPCHECK_WARNING: [#def3]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/kem.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def4]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/kyber.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def5]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/mceliece6688128f.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING (CWE-758): [#def6]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/mceliece6688128f.c:193: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
#  191|   static crypto_int64 crypto_int64_negative_mask(crypto_int64 crypto_int64_x)
#  192|   {
#  193|->   return crypto_int64_x >> (64-1);
#  194|   }
#  195|   

Error: CPPCHECK_WARNING (CWE-758): [#def7]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/mceliece6688128f.c:377: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  375|   static crypto_int32 crypto_int32_negative_mask(crypto_int32 crypto_int32_x)
#  376|   {
#  377|->   return crypto_int32_x >> (32-1);
#  378|   }
#  379|   

Error: CPPCHECK_WARNING (CWE-758): [#def8]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/mceliece6688128f.c:470: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
#  468|   static crypto_uint64_signed crypto_uint64_signed_negative_mask(crypto_uint64_signed crypto_uint64_signed_x)
#  469|   {
#  470|->   return crypto_uint64_signed_x >> (64-1);
#  471|   }
#  472|   

Error: CPPCHECK_WARNING (CWE-758): [#def9]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/mceliece6688128f.c:640: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  638|   static crypto_uint32_signed crypto_uint32_signed_negative_mask(crypto_uint32_signed crypto_uint32_signed_x)
#  639|   {
#  640|->   return crypto_uint32_signed_x >> (32-1);
#  641|   }
#  642|   

Error: CLANG_WARNING: [#def10]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/mceliece6688128f.c:1887:18: warning[core.BitwiseShift]: Left shift overflows the capacity of 'int'
# 1885|   {
# 1886|     int i, j;
# 1887|->   int stride = 1 << s;
# 1888|     int index = 0;
# 1889|     int16_t d, m;

Error: CLANG_WARNING: [#def11]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/mceliece6688128f.c:1895:20: warning[core.UndefinedBinaryOperatorResult]: The right operand of '^' is a garbage value due to array index out of bounds
# 1893|       for (j = 0; j < stride; j++)
# 1894|       {
# 1895|->       d = p[ i+j ] ^ p[ i+j+stride ];
# 1896|         m = (cb[ index >> 3 ] >> (index & 7)) & 1;
# 1897|         m = -m;

Error: COMPILER_WARNING: [#def12]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/serpent-avx512-x86.c: scope_hint: In function 'ocb_input'
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/serpent-avx512-x86.c:695:1: warning[-Wpsabi]: AVX512F vector return without AVX512F enabled changes the ABI
#  693|   ocb_input(__m512i *vchecksum, __m128i *voffset, const unsigned char *input,
#  694|   	  unsigned char *output, const ocb_L_uintptr_t L[4])
#  695|-> {
#  696|     __m128i L0 = _mm_loadu_si128((const void *)(uintptr_t)L[0]);
#  697|     __m128i L1 = _mm_loadu_si128((const void *)(uintptr_t)L[1]);

Error: CPPCHECK_WARNING: [#def13]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/cipher/sntrup761.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def14]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/tests/keygen.c:653:3: warning[deadcode.DeadStores]: Value stored to 'n' is never read
#  651|     /* Simple hack to check nbits.  */
#  652|     nbits = gcry_pk_get_nbits (key);
#  653|->   n = 0;
#  654|     for (s=algoname; !isdigit (*s); s++)
#  655|       ;

Error: CPPCHECK_WARNING: [#def15]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/tests/t-kem.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def16]
libgcrypt-1.11.0-build/libgcrypt-1.11.0/tests/t-mlkem.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-clang18.1.7
diffbase-analyzer-version-cppcheck2.14.2
diffbase-analyzer-version-gcc14.1.1
diffbase-analyzer-version-gcc-analyzer14.1.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-enabled-pluginsclang, cppcheck, gcc, shellcheck
diffbase-exit-code0
diffbase-hostip-172-16-1-124.us-west-2.compute.internal
diffbase-mock-configfedora-41-x86_64
diffbase-project-namelibgcrypt-1.10.3-3.fc40
diffbase-store-results-to/tmp/tmpi6mo1noz/libgcrypt-1.10.3-3.fc40.tar.xz
diffbase-time-created2024-07-03 14:39:29
diffbase-time-finished2024-07-03 14:42:41
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpi6mo1noz/libgcrypt-1.10.3-3.fc40.tar.xz' '--gcc-analyze' '/tmp/tmpi6mo1noz/libgcrypt-1.10.3-3.fc40.src.rpm'
diffbase-tool-versioncsmock-3.5.3-1.el9
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-124.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namelibgcrypt-1.11.0-1.fc41
store-results-to/tmp/tmp_al6t2g8/libgcrypt-1.11.0-1.fc41.tar.xz
time-created2024-07-03 14:42:54
time-finished2024-07-03 14:46:14
titleNewly introduced defects
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp_al6t2g8/libgcrypt-1.11.0-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmp_al6t2g8/libgcrypt-1.11.0-1.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9