Newly introduced defects

List of Defects

Error: CPPCHECK_WARNING: [#def1]
nettle-3.10-build/nettle-3.10/drbg-ctr-aes256.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
nettle-3.10-build/nettle-3.10/gosthash94.c: scope_hint: In function ‘gost_block_compress’
nettle-3.10-build/nettle-3.10/gosthash94.c:76:40: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘v[1]’
nettle-3.10-build/nettle-3.10/gosthash94.c:41: included_from: Included from here.
nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’
nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’
nettle-3.10-build/nettle-3.10/macros.h:207:9: note: in expansion of macro ‘COMPRESS’
nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’
nettle-3.10-build/nettle-3.10/macros.h:207:9: note: in expansion of macro ‘COMPRESS’
nettle-3.10-build/nettle-3.10/gosthash94.c:301:5: note: in expansion of macro ‘MD_UPDATE’
nettle-3.10-build/nettle-3.10/gosthash94.c:275:25: note: in expansion of macro ‘LE_READ_UINT32’
#   74|   
#   75|       /* w := u xor v */
#   76|->     w[0] = u[0] ^ v[0], w[1] = u[1] ^ v[1];
#   77|       w[2] = u[2] ^ v[2], w[3] = u[3] ^ v[3];
#   78|       w[4] = u[4] ^ v[4], w[5] = u[5] ^ v[5];

Error: COMPILER_WARNING (CWE-563): [#def3]
nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘mark_bytes_undefined’
nettle-3.10-build/nettle-3.10/testsuite/testutils.c:144:30: warning[-Wunused-parameter]: unused parameter ‘size’
#  144 | mark_bytes_undefined (size_t size, const void *p) {}
#      |                       ~~~~~~~^~~~
#  142|   #else
#  143|   void
#  144|-> mark_bytes_undefined (size_t size, const void *p) {}
#  145|   void
#  146|   mark_bytes_defined (size_t size, const void *p) {}

Error: COMPILER_WARNING (CWE-563): [#def4]
nettle-3.10-build/nettle-3.10/testsuite/testutils.c:144:48: warning[-Wunused-parameter]: unused parameter ‘p’
#  144 | mark_bytes_undefined (size_t size, const void *p) {}
#      |                                    ~~~~~~~~~~~~^
#  142|   #else
#  143|   void
#  144|-> mark_bytes_undefined (size_t size, const void *p) {}
#  145|   void
#  146|   mark_bytes_defined (size_t size, const void *p) {}

Error: COMPILER_WARNING (CWE-563): [#def5]
nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘mark_bytes_defined’
nettle-3.10-build/nettle-3.10/testsuite/testutils.c:146:28: warning[-Wunused-parameter]: unused parameter ‘size’
#  146 | mark_bytes_defined (size_t size, const void *p) {}
#      |                     ~~~~~~~^~~~
#  144|   mark_bytes_undefined (size_t size, const void *p) {}
#  145|   void
#  146|-> mark_bytes_defined (size_t size, const void *p) {}
#  147|   #endif
#  148|   

Error: COMPILER_WARNING (CWE-563): [#def6]
nettle-3.10-build/nettle-3.10/testsuite/testutils.c:146:46: warning[-Wunused-parameter]: unused parameter ‘p’
#  146 | mark_bytes_defined (size_t size, const void *p) {}
#      |                                  ~~~~~~~~~~~~^
#  144|   mark_bytes_undefined (size_t size, const void *p) {}
#  145|   void
#  146|-> mark_bytes_defined (size_t size, const void *p) {}
#  147|   #endif
#  148|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def7]
nettle-3.10-build/nettle-3.10/testsuite/testutils.c: scope_hint: In function ‘test_hash’
nettle-3.10-build/nettle-3.10/testsuite/testutils.c:1129:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘xalloc(*digest.length)’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null
# 1127|       }
# 1128|   
# 1129|->   memset(buffer, 0, digest->length);
# 1130|   
# 1131|     hash->update(ctx, msg->length, msg->data);

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-clang18.1.7
diffbase-analyzer-version-cppcheck2.14.2
diffbase-analyzer-version-gcc14.1.1
diffbase-analyzer-version-gcc-analyzer14.1.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-enabled-pluginsclang, cppcheck, gcc, shellcheck
diffbase-exit-code0
diffbase-hostip-172-16-1-40.us-west-2.compute.internal
diffbase-mock-configfedora-41-x86_64
diffbase-project-namenettle-3.9.1-6.fc40
diffbase-store-results-to/tmp/tmp9aryo7k4/nettle-3.9.1-6.fc40.tar.xz
diffbase-time-created2024-07-03 16:17:53
diffbase-time-finished2024-07-03 16:20:30
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp9aryo7k4/nettle-3.9.1-6.fc40.tar.xz' '--gcc-analyze' '/tmp/tmp9aryo7k4/nettle-3.9.1-6.fc40.src.rpm'
diffbase-tool-versioncsmock-3.5.3-1.el9
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-40.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namenettle-3.10-2.fc41
store-results-to/tmp/tmpl3w0o4ts/nettle-3.10-2.fc41.tar.xz
time-created2024-07-03 16:20:57
time-finished2024-07-03 16:22:58
titleNewly introduced defects
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpl3w0o4ts/nettle-3.10-2.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpl3w0o4ts/nettle-3.10-2.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9