libgsf-1.14.52-1.fc41

List of Defects

Error: CPPCHECK_WARNING: [#def1]
libgsf-1.14.52-build/libgsf-1.14.52/build/gsf/tmp-introspectr84p5mgj/Gsf-1.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: COMPILER_WARNING: [#def2]
libgsf-1.14.52-build/libgsf-1.14.52/build/gsf/tmp-introspectr84p5mgj/Gsf-1.c: scope_hint: In function ‘dump_properties’
libgsf-1.14.52-build/libgsf-1.14.52/build/gsf/tmp-introspectr84p5mgj/Gsf-1.c:287:7: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  287 |       const GValue *v = g_param_spec_get_default_value (prop);
#      |       ^~~~~

Error: COMPILER_WARNING: [#def3]
libgsf-1.14.52-build/libgsf-1.14.52/build/gsf/tmp-introspectr84p5mgj/Gsf-1.c: scope_hint: In function ‘dump_irepository’
libgsf-1.14.52-build/libgsf-1.14.52/build/gsf/tmp-introspectr84p5mgj/Gsf-1.c:641:3: warning[-Wdeclaration-after-statement]: ISO C90 forbids mixed declarations and code
#  641 |   const char *input_filename = args[0];
#      |   ^~~~~

Error: CLANG_WARNING: [#def4]
libgsf-1.14.52-build/libgsf-1.14.52/build/gsf/tmp-introspectr84p5mgj/Gsf-1.c:799:27: warning[core.NullDereference]: Access to field 'message' results in a dereference of a null pointer (loaded from variable 'error')

Error: CLANG_WARNING: [#def5]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-docprop-vector.c:139:3: warning[unix.Malloc]: Potential leak of memory pointed to by 'rstring'
#  137|   		str = g_strdup_value_contents (v);
#  138|   		rstring = g_strconcat (rstring, str, ",", NULL);
#  139|-> 		g_free (str);
#  140|   	}
#  141|   

Error: CPPCHECK_WARNING: [#def6]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-msole.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def7]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-msole.c:404:2: warning[unix.Malloc]: Potential memory leak
#  402|   	/* NOTE : These links are a tree, not a linked list */
#  403|   	ole_dirent_new (ole, prev, parent, seen_before);
#  404|-> 	ole_dirent_new (ole, next, parent, seen_before);
#  405|   
#  406|   	if (dirent->is_directory)

Error: CLANG_WARNING: [#def8]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-msole.c:407:3: warning[unix.Malloc]: Potential memory leak
#  405|   
#  406|   	if (dirent->is_directory)
#  407|-> 		ole_dirent_new (ole, child, dirent, seen_before);
#  408|   	else if (child != DIRENT_MAGIC_END)
#  409|   		g_warning ("A non directory stream with children ?");

Error: CPPCHECK_WARNING: [#def9]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-msvba.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def10]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-tar.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def11]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-zip.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def12]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-zip.c:224:10: warning[core.NullDereference]: Array access (from variable 'extra') results in a null pointer dereference
#  222|   			goto bad;
#  223|   
#  224|-> 		ftyp = GSF_LE_GET_GUINT16 (extra);
#  225|   		flen = GSF_LE_GET_GUINT16 (extra + 2);
#  226|   		if (flen > elen - 4)

Error: CLANG_WARNING: [#def13]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-zip.c:306:3: warning[deadcode.DeadStores]: Value stored to 'disk_start' is never read
#  304|   	}
#  305|   	if (disk_start == 0xffffu && elen >= 4) {
#  306|-> 		disk_start = GSF_LE_GET_GUINT32 (extra);
#  307|   		extra += 4;
#  308|   		elen -= 4;

Error: CLANG_WARNING: [#def14]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-zip.c:306:16: warning[core.NullDereference]: Array access (from variable 'extra') results in a null pointer dereference
#  304|   	}
#  305|   	if (disk_start == 0xffffu && elen >= 4) {
#  306|-> 		disk_start = GSF_LE_GET_GUINT32 (extra);
#  307|   		extra += 4;
#  308|   		elen -= 4;

Error: CLANG_WARNING: [#def15]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-zip.c:307:3: warning[deadcode.DeadStores]: Value stored to 'extra' is never read
#  305|   	if (disk_start == 0xffffu && elen >= 4) {
#  306|   		disk_start = GSF_LE_GET_GUINT32 (extra);
#  307|-> 		extra += 4;
#  308|   		elen -= 4;
#  309|   	}

Error: CLANG_WARNING: [#def16]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-infile-zip.c:312:2: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
#  310|   
#  311|   	name = g_new (gchar, name_len + 1);
#  312|-> 	memcpy (name, variable, name_len);
#  313|   	name[name_len] = '\0';
#  314|   

Error: CPPCHECK_WARNING: [#def17]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-input-bzip.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def18]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-input-gzip.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def19]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-input-gzip.c:145:16: warning[deadcode.DeadStores]: Although the value stored to 'data' is used in the enclosing expression, the value is never actually read from 'data'
#  143|   
#  144|   		if (flags & GZIP_HEADER_CRC &&
#  145|-> 		    NULL == (data = gsf_input_read (input->source, 2, NULL)))
#  146|   			return TRUE;
#  147|   

Error: CPPCHECK_WARNING: [#def20]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-input-proxy.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def21]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-input-textline.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def22]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-libxml.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def23]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-libxml.c:1139:33: warning[unix.Malloc]: Use of memory after it is freed
# 1137|   	if (NULL == doc->root_node) {
# 1138|   		gsf_xml_in_doc_free (doc);
# 1139|-> 		g_return_val_if_fail (NULL != doc->root_node, NULL);
# 1140|   	}
# 1141|   	doc->ref_count = 1;

Error: CPPCHECK_WARNING: [#def24]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-msole-utils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: GCC_ANALYZER_WARNING (CWE-457): [#def25]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-msole-utils.c: scope_hint: In function ‘gsf_msole_inflate’
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-msole-utils.c:2641:48: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘buffer[srcpos]’
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf.h:96: included_from: Included from here.
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-msole-utils.c:26: included_from: Included from here.
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-msole-utils.c:2627:41: note: in expansion of macro ‘GSF_LE_GET_GUINT16’
# 2639|   				for (i = 0; i < len; i++) {
# 2640|   					unsigned srcpos = (pos - distance - 1) % VBA_COMPRESSION_WINDOW;
# 2641|-> 					guint8 c = buffer [srcpos];
# 2642|   					buffer [pos++ % VBA_COMPRESSION_WINDOW] = c;
# 2643|   				}

Error: CPPCHECK_WARNING: [#def26]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-open-pkg-utils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def27]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-opendoc-utils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def28]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-outfile-msole.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def29]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-outfile-zip.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def30]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-outfile-zip.c:348:12: warning[deadcode.DeadStores]: Value stored to 'dirpos' during its initialization is never read
#  346|   {
#  347|   	GsfOutfileZip *zip = GSF_OUTFILE_ZIP (output);
#  348|-> 	gsf_off_t dirpos = gsf_output_tell (zip->sink), dirend;
#  349|   	GPtrArray *elem = zip->root_order;
#  350|   	unsigned entries = elem->len;

Error: CPPCHECK_WARNING: [#def31]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-output-bzip.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def32]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-output-stdio.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def33]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-priv.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def34]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-structured-blob.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: GCC_ANALYZER_WARNING (CWE-835): [#def35]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-structured-blob.c: scope_hint: In function ‘blob_child_by_name’
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-structured-blob.c:153:38: warning[-Wanalyzer-infinite-loop]: infinite loop
/usr/include/glib-2.0/glib.h:33: included_from: Included from here.
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-fwd.h:25: included_from: Included from here.
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-structured-blob.h:25: included_from: Included from here.
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-structured-blob.c:23: included_from: Included from here.
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-structured-blob.c:154:43: note: in expansion of macro ‘g_ptr_array_index’
#  151|   		unsigned i;
#  152|   
#  153|-> 		for (i = 0 ; i < blob->children->len ;) {
#  154|   			GsfInput *child = g_ptr_array_index (blob->children, i);
#  155|   			if (child && !strcmp (gsf_input_name (child), name))

Error: CPPCHECK_WARNING: [#def36]
libgsf-1.14.52-build/libgsf-1.14.52/gsf/gsf-utils.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def37]
libgsf-1.14.52-build/libgsf-1.14.52/thumbnailer/main.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def38]
libgsf-1.14.52-build/libgsf-1.14.52/tools/gsf.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-87.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namelibgsf-1.14.52-1.fc41
store-results-to/tmp/tmpxzht7zy3/libgsf-1.14.52-1.fc41.tar.xz
time-created2024-07-03 14:43:18
time-finished2024-07-03 14:45:40
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpxzht7zy3/libgsf-1.14.52-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpxzht7zy3/libgsf-1.14.52-1.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9