Newly introduced defects

List of Defects

Error: CLANG_WARNING: [#def1]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:1620:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'data'
# 1618|       unlock_status = psa_unlock_key_slot(slot);
# 1619|   
# 1620|->     LOCAL_OUTPUT_FREE(data_external, data);
# 1621|       return (status == PSA_SUCCESS) ? unlock_status : status;
# 1622|   }

Error: CLANG_WARNING: [#def2]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:2368:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'hash'
# 2366|   exit:
# 2367|   #endif
# 2368|->     LOCAL_OUTPUT_FREE(hash_external, hash);
# 2369|       return status;
# 2370|   }

Error: CLANG_WARNING: [#def3]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:2859:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'mac'
# 2857|   #endif
# 2858|       LOCAL_INPUT_FREE(input_external, input);
# 2859|->     LOCAL_OUTPUT_FREE(mac_external, mac);
# 2860|   
# 2861|       return status;

Error: CLANG_WARNING: [#def4]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:3117:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'signature'
# 3115|   #endif
# 3116|       LOCAL_INPUT_FREE(input_external, input);
# 3117|->     LOCAL_OUTPUT_FREE(signature_external, signature);
# 3118|       return status;
# 3119|   }

Error: CLANG_WARNING: [#def5]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:3249:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'signature'
# 3247|   #endif
# 3248|       LOCAL_INPUT_FREE(hash_external, hash);
# 3249|->     LOCAL_OUTPUT_FREE(signature_external, signature);
# 3250|   
# 3251|       return status;

Error: CLANG_WARNING: [#def6]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:3450:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'output'
# 3448|       LOCAL_INPUT_FREE(input_external, input);
# 3449|       LOCAL_INPUT_FREE(salt_external, salt);
# 3450|->     LOCAL_OUTPUT_FREE(output_external, output);
# 3451|   
# 3452|       return (status == PSA_SUCCESS) ? unlock_status : status;

Error: CLANG_WARNING: [#def7]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:3566:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'output'
# 3564|       LOCAL_INPUT_FREE(input_external, input);
# 3565|       LOCAL_INPUT_FREE(salt_external, salt);
# 3566|->     LOCAL_OUTPUT_FREE(output_external, output);
# 3567|   
# 3568|       return (status == PSA_SUCCESS) ? unlock_status : status;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def8]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c: scope_hint: In function ‘psa_tls12_prf_psk_to_ms_set_key’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5111:5: warning[-Wanalyzer-null-argument]: use of NULL ‘data’ where non-null expected
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5228:5: note: in expansion of macro ‘LOCAL_INPUT_DECLARE’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5230:5: note: in expansion of macro ‘LOCAL_INPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5230:5: note: in expansion of macro ‘LOCAL_INPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5230:5: note: in expansion of macro ‘LOCAL_INPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5230:5: note: in expansion of macro ‘LOCAL_INPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5230:5: note: in expansion of macro ‘LOCAL_INPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/include/psa/crypto.h:56: included_from: Included from here.
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:17: included_from: Included from here.
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5154:24: note: in expansion of macro ‘PSA_SUCCESS’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5188:9: note: in expansion of macro ‘PSA_ALG_IS_HKDF’
<built-in>: note: argument 2 of ‘__builtin_memcpy’ must be non-null
# 5109|       *cur++ = pms[0];
# 5110|       *cur++ = pms[1];
# 5111|->     memcpy(cur, data, data_length);
# 5112|       cur += data_length;
# 5113|   

Error: CLANG_WARNING: [#def9]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5628:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'output'
# 5626|   exit:
# 5627|   #endif
# 5628|->     LOCAL_OUTPUT_FREE(output_external, output);
# 5629|       return status;
# 5630|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c: scope_hint: In function ‘psa_generate_random’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5629:12: warning[-Wanalyzer-malloc-leak]: leak of ‘output’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5621:5: note: in expansion of macro ‘LOCAL_OUTPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:40: included_from: Included from here.
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:6112:28: note: in expansion of macro ‘mbedtls_calloc’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:6112:28: note: in expansion of macro ‘mbedtls_calloc’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5621:5: note: in expansion of macro ‘LOCAL_OUTPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5621:5: note: in expansion of macro ‘LOCAL_OUTPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5621:5: note: in expansion of macro ‘LOCAL_OUTPUT_ALLOC’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:3574:5: note: in expansion of macro ‘GUARD_MODULE_INITIALIZED’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5628:5: note: in expansion of macro ‘LOCAL_OUTPUT_FREE’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5628:5: note: in expansion of macro ‘LOCAL_OUTPUT_FREE’
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto.c:5628:5: note: in expansion of macro ‘LOCAL_OUTPUT_FREE’
# 5627|   #endif
# 5628|       LOCAL_OUTPUT_FREE(output_external, output);
# 5629|->     return status;
# 5630|   }
# 5631|   

Error: CPPCHECK_WARNING: [#def11]
mbedtls-2.28.8-build/mbedtls-2.28.8/library/psa_crypto_cipher.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Scan Properties