libgpg-error-1.50-1.fc41

List of Defects

Error: CPPCHECK_WARNING: [#def1]
libgpg-error-1.50-build/libgpg-error-1.50/doc/yat2m.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def2]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def3]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1124:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1122|       }
# 1123|     else if (!strcmp (op, "="))
# 1124|->     result = !strcmp (str1, str2);
# 1125|     else if (!strcmp (op, "<>"))
# 1126|       result = !!strcmp (str1, str2);

Error: CLANG_WARNING: [#def4]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1126:16: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1124|       result = !strcmp (str1, str2);
# 1125|     else if (!strcmp (op, "<>"))
# 1126|->     result = !!strcmp (str1, str2);
# 1127|     else if (!strcmp (op, "=~"))
# 1128|       result = !!strstr (str1, str2);

Error: CLANG_WARNING: [#def5]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1128:16: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1126|       result = !!strcmp (str1, str2);
# 1127|     else if (!strcmp (op, "=~"))
# 1128|->     result = !!strstr (str1, str2);
# 1129|     else if (!strcmp (op, "!~"))
# 1130|       result = !strstr (str1, str2);

Error: CLANG_WARNING: [#def6]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1130:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1128|       result = !!strstr (str1, str2);
# 1129|     else if (!strcmp (op, "!~"))
# 1130|->     result = !strstr (str1, str2);
# 1131|     else if (!strcmp (op, "-le"))
# 1132|       result = (strcmp (str1, str2) <= 0);

Error: CLANG_WARNING: [#def7]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1132:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1130|       result = !strstr (str1, str2);
# 1131|     else if (!strcmp (op, "-le"))
# 1132|->     result = (strcmp (str1, str2) <= 0);
# 1133|     else if (!strcmp (op, "-lt"))
# 1134|       result = (strcmp (str1, str2) < 0);

Error: CLANG_WARNING: [#def8]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1134:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1132|       result = (strcmp (str1, str2) <= 0);
# 1133|     else if (!strcmp (op, "-lt"))
# 1134|->     result = (strcmp (str1, str2) < 0);
# 1135|     else if (!strcmp (op, "-gt"))
# 1136|       result = (strcmp (str1, str2) > 0);

Error: CLANG_WARNING: [#def9]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1136:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1134|       result = (strcmp (str1, str2) < 0);
# 1135|     else if (!strcmp (op, "-gt"))
# 1136|->     result = (strcmp (str1, str2) > 0);
# 1137|     else if (!strcmp (op, "-ge"))
# 1138|       result = (strcmp (str1, str2) >= 0);

Error: CLANG_WARNING: [#def10]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1138:15: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
# 1136|       result = (strcmp (str1, str2) > 0);
# 1137|     else if (!strcmp (op, "-ge"))
# 1138|->     result = (strcmp (str1, str2) >= 0);
# 1139|     else if (!strncmp (op, "-v3", 3) || !strncmp (op, "-v2", 3))
# 1140|       {

Error: CLANG_WARNING: [#def11]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1163:14: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 1161|   
# 1162|         num1 = strtol (str1, NULL, 0);
# 1163|->       num2 = strtol (str2, NULL, 0);
# 1164|   
# 1165|         if (!strcmp (op, "=="))

Error: CLANG_WARNING: [#def12]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1588:24: warning[core.NullDereference]: Access to field 'r_opt' results in a dereference of a null pointer (loaded from variable 'arg')
# 1586|   
# 1587|     if (initialize (arg, opts_orig, fp))
# 1588|->     return (arg->r_opt = ARGPARSE_OUT_OF_CORE);
# 1589|   
# 1590|     opts = arg->internal->opts;

Error: CLANG_WARNING: [#def13]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1590:10: warning[core.NullDereference]: Access to field 'internal' results in a dereference of a null pointer (loaded from variable 'arg')
# 1588|       return (arg->r_opt = ARGPARSE_OUT_OF_CORE);
# 1589|   
# 1590|->   opts = arg->internal->opts;
# 1591|     nopts = arg->internal->nopts;
# 1592|   

Error: CPPCHECK_WARNING (CWE-457): [#def14]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1628: error[legacyUninitvar]: Uninitialized variable: keyword
# 1626|             for (idx=0; idx < nopts; idx++ )
# 1627|               {
# 1628|->               if (opts[idx].long_opt && !strcmp (opts[idx].long_opt, keyword))
# 1629|                   break;
# 1630|               }

Error: CLANG_WARNING: [#def15]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1765:19: warning[deadcode.DeadStores]: Value stored to 'set_ignore' is never read
# 1763|                   {
# 1764|                     prepare_arg_return (arg, opts, idx, 0, set_ignore);
# 1765|->                   set_ignore = 0;
# 1766|                     goto leave;
# 1767|                   }

Error: CLANG_WARNING: [#def16]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:1825:15: warning[deadcode.DeadStores]: Value stored to 'set_ignore' is never read
# 1823|                 /* No argument found at the end of the line.  */
# 1824|                 prepare_arg_return (arg, opts, idx, in_alias, set_ignore);
# 1825|->               set_ignore = 0;
# 1826|                 goto leave;
# 1827|   	    }

Error: CLANG_WARNING: [#def17]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:2230:24: warning[core.NullDereference]: Access to field 'r_opt' results in a dereference of a null pointer (loaded from variable 'arg')
# 2228|      * warnings or errors from the last iteration.  */
# 2229|     if (initialize (arg, opts, NULL))
# 2230|->     return (arg->r_opt = ARGPARSE_OUT_OF_CORE);
# 2231|   
# 2232|    next_state:

Error: CLANG_WARNING: [#def18]
libgpg-error-1.50-build/libgpg-error-1.50/src/argparse.c:2233:11: warning[core.NullDereference]: Access to field 'internal' results in a dereference of a null pointer (loaded from variable 'arg')
# 2231|   
# 2232|    next_state:
# 2233|->   switch (arg->internal->state)
# 2234|       {
# 2235|       case STATE_init:

Error: CPPCHECK_WARNING: [#def19]
libgpg-error-1.50-build/libgpg-error-1.50/src/b64dec.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def20]
libgpg-error-1.50-build/libgpg-error-1.50/src/estream-printf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def21]
libgpg-error-1.50-build/libgpg-error-1.50/src/estream.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def22]
libgpg-error-1.50-build/libgpg-error-1.50/src/estream.c:1747:22: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 1745|     else
# 1746|       bytes_read = 0;
# 1747|->   if (!bytes_read && ferror (file_cookie->fp))
# 1748|       return -1;
# 1749|     return bytes_read;

Error: CPPCHECK_WARNING: [#def23]
libgpg-error-1.50-build/libgpg-error-1.50/src/gen-posix-lock-obj.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def24]
libgpg-error-1.50-build/libgpg-error-1.50/src/gpg-error.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def25]
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING (CWE-476): [#def26]
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c:272: error[nullPointer]: Null pointer dereference: (struct sockaddr_un*)0
#  270|                     srvr_addr_un.sun_path[sizeof (srvr_addr_un.sun_path)-1] = 0;
#  271|                     srvr_addr = (struct sockaddr *)&srvr_addr_un;
#  272|->                   addrlen = SUN_LEN (&srvr_addr_un);
#  273|                     name_for_err = srvr_addr_un.sun_path;
#  274|                   }

Error: CPPCHECK_WARNING (CWE-476): [#def27]
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c:284: error[nullPointer]: Null pointer dereference: (struct sockaddr_un*)0
#  282|                     srvr_addr_un.sun_path[sizeof (srvr_addr_un.sun_path)-1] = 0;
#  283|                     srvr_addr = (struct sockaddr *)&srvr_addr_un;
#  284|->                   addrlen = SUN_LEN (&srvr_addr_un);
#  285|                   }
#  286|               }

Error: GCC_ANALYZER_WARNING (CWE-126): [#def28]
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c: scope_hint: In function 'set_file_fd'
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c:488:56: warning[-Wanalyzer-out-of-bounds]: buffer over-read
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c:488:56: note: read of 1 byte from after the end of '"-"'
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c:488:56: note: valid subscripts for '"-"' are '[0]' to '[1]'
#                                           └─────────────────────────────┘
#                                                          ^
#  486|         goto leave;
#  487|       }
#  488|->   else if (name && !strncmp (name, "tcp://", 6) && name[6])
#  489|       want_socket = 1;
#  490|   #ifndef HAVE_W32_SYSTEM

Error: CPPCHECK_WARNING (CWE-664): [#def29]
libgpg-error-1.50-build/libgpg-error-1.50/src/logging.c:1324: error[va_list_usedBeforeStarted]: va_list 'dummy_argptr' used before va_start() was called.
# 1322|         static va_list dummy_argptr;
# 1323|   
# 1324|->       _gpgrt_logv_printhex (buffer, length, NULL, dummy_argptr);
# 1325|       }
# 1326|   }

Error: CPPCHECK_WARNING: [#def30]
libgpg-error-1.50-build/libgpg-error-1.50/src/mkheader.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def31]
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: GCC_ANALYZER_WARNING (CWE-775): [#def32]
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c: scope_hint: In function 'my_exec'
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:331:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dup2(*act.fd[i], i)'
#  329|       if (act->fd[i] != i)
#  330|         {
#  331|->         if (dup2 (act->fd[i], i) == -1)
#  332|             _gpgrt_log_fatal ("dup2 std%s failed: %s\n",
#  333|                               i==0?"in":i==1?"out":"err", strerror (errno));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def33]
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:511:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd_in[0]'
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:550:13: note: in expansion of macro 'xtrycalloc'
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:604:15: note: in expansion of macro 'xfree'
#  509|     argv = xtrycalloc (i+2, sizeof *argv);
#  510|     if (!argv)
#  511|->     return _gpg_err_code_from_syserror ();
#  512|     if (pgmname)
#  513|       argv[0] = strrchr (pgmname, '/');

Error: GCC_ANALYZER_WARNING (CWE-775): [#def34]
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c: scope_hint: In function '_gpgrt_process_spawn'
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:511:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd_in[1]'
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:58: included_from: Included from here.
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:550:13: note: in expansion of macro 'xtrycalloc'
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:604:15: note: in expansion of macro 'xfree'
#  509|     argv = xtrycalloc (i+2, sizeof *argv);
#  510|     if (!argv)
#  511|->     return _gpg_err_code_from_syserror ();
#  512|     if (pgmname)
#  513|       argv[0] = strrchr (pgmname, '/');

Error: GCC_ANALYZER_WARNING (CWE-775): [#def35]
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:511:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'fd_out[1]'
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:550:13: note: in expansion of macro 'xtrycalloc'
#  509|     argv = xtrycalloc (i+2, sizeof *argv);
#  510|     if (!argv)
#  511|->     return _gpg_err_code_from_syserror ();
#  512|     if (pgmname)
#  513|       argv[0] = strrchr (pgmname, '/');

Error: CLANG_WARNING: [#def36]
libgpg-error-1.50-build/libgpg-error-1.50/src/spawn-posix.c:695:22: warning[core.NullDereference]: Dereference of null pointer (loaded from variable 'r_process')
#  693|             xfree (process);
#  694|             xfree (argv);
#  695|->           *r_process = NULL;
#  696|             return 0;
#  697|           }

Error: CPPCHECK_WARNING: [#def37]
libgpg-error-1.50-build/libgpg-error-1.50/src/stringutils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def38]
libgpg-error-1.50-build/libgpg-error-1.50/src/sysutils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def39]
libgpg-error-1.50-build/libgpg-error-1.50/src/version.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def40]
libgpg-error-1.50-build/libgpg-error-1.50/tests/t-argparse.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def41]
libgpg-error-1.50-build/libgpg-error-1.50/tests/t-b64.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def42]
libgpg-error-1.50-build/libgpg-error-1.50/tests/t-lock.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def43]
libgpg-error-1.50-build/libgpg-error-1.50/tests/t-malloc.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def44]
libgpg-error-1.50-build/libgpg-error-1.50/tests/t-poll.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def45]
libgpg-error-1.50-build/libgpg-error-1.50/tests/t-stringutils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-231.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namelibgpg-error-1.50-1.fc41
store-results-to/tmp/tmpkc9tahrl/libgpg-error-1.50-1.fc41.tar.xz
time-created2024-07-03 14:42:43
time-finished2024-07-03 14:44:14
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpkc9tahrl/libgpg-error-1.50-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpkc9tahrl/libgpg-error-1.50-1.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9