policycoreutils-3.7-1.fc41
List of Defects
Error: CPPCHECK_WARNING: [#def1]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/load_policy/load_policy.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def2]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/newrole/newrole.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING: [#def3]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/newrole/newrole.c:1368:2: warning[unix.Malloc]: Potential leak of memory pointed to by 'new_context'
# 1366| freecon(old_context);
# 1367| freecon(new_context);
# 1368|-> free(pw.pw_name);
# 1369| free(pw.pw_dir);
# 1370| free(pw.pw_shell);
Error: CPPCHECK_WARNING: [#def4]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/run_init/open_init_pty.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def5]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/run_init/run_init.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def6]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/secon/secon.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING: [#def7]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/secon/secon.c:538:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'con_tmp'
# 536| }
# 537|
# 538|-> return (con);
# 539| }
# 540|
Error: CLANG_WARNING: [#def8]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/semodule/semodule.c:446:7: warning[deadcode.DeadStores]: Although the value stored to 'result' is used in the enclosing expression, the value is never actually read from 'result'
# 444| semanage_set_create_store(sh, 1);
# 445|
# 446|-> if ((result = semanage_connect(sh)) < 0) {
# 447| fprintf(stderr, "%s: Could not connect to policy handler\n",
# 448| argv[0]);
Error: CLANG_WARNING: [#def9]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/semodule/semodule.c:453:8: warning[deadcode.DeadStores]: Although the value stored to 'result' is used in the enclosing expression, the value is never actually read from 'result'
# 451|
# 452| if (reload) {
# 453|-> if ((result = semanage_reload_policy(sh)) < 0) {
# 454| fprintf(stderr, "%s: Could not reload policy\n",
# 455| argv[0]);
Error: CLANG_WARNING: [#def10]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/semodule/semodule.c:461:8: warning[deadcode.DeadStores]: Although the value stored to 'result' is used in the enclosing expression, the value is never actually read from 'result'
# 459|
# 460| if (build || check_ext_changes) {
# 461|-> if ((result = semanage_begin_transaction(sh)) < 0) {
# 462| fprintf(stderr, "%s: Could not begin transaction: %s\n",
# 463| argv[0], errno ? strerror(errno) : "");
Error: CPPCHECK_WARNING: [#def11]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/sestatus/sestatus.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def12]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/setfiles/restorecon_xattr.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def13]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/setfiles/setfiles.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: GCC_ANALYZER_WARNING (CWE-476): [#def14]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/setsebool/setsebool.c: scope_hint: In function ‘setbool’
policycoreutils-3.7-build/selinux-3.7/policycoreutils/setsebool/setsebool.c:283:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘value_ptr’
# 281| name = list[i];
# 282| value_ptr = strchr(name, '=');
# 283|-> *value_ptr = '\0';
# 284| value_ptr++;
# 285| if (pwd && pwd->pw_name)
Error: GCC_ANALYZER_WARNING (CWE-401): [#def15]
policycoreutils-3.7-build/selinux-3.7/policycoreutils/setsebool/setsebool.c:308:17: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 306| for (i = 0; i < boolcnt; i++)
# 307| free(vallist[i].name);
# 308|-> free(vallist);
# 309| }
# 310| return -1;
Error: CPPCHECK_WARNING: [#def16]
policycoreutils-3.7-build/selinux-3.7/python/audit2allow/sepolgen-ifgen-attr-helper.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def17]
policycoreutils-3.7-build/selinux-3.7/restorecond/restorecond.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def18]
policycoreutils-3.7-build/selinux-3.7/restorecond/utmpwatcher.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def19]
policycoreutils-3.7-build/selinux-3.7/restorecond/watch.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CPPCHECK_WARNING: [#def20]
policycoreutils-3.7-build/selinux-3.7/sandbox/seunshare.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING: [#def21]
policycoreutils-3.7-build/selinux-3.7/sandbox/seunshare.c:793:23: warning[deadcode.DeadStores]: Although the value stored to 'runuserdir_r' is used in the enclosing expression, the value is never actually read from 'runuserdir_r'
# 791| }
# 792| /* create runtime runuserdir */
# 793|-> if (runuserdir_s && (runuserdir_r = create_tmpdir(runuserdir_s, &st_runuserdir_s,
# 794| &st_runuserdir_r, pwd, execcon)) == NULL) {
# 795| fprintf(stderr, _("Failed to create runtime $XDG_RUNTIME_DIR directory\n"));
Error: CPPCHECK_WARNING: [#def22]
policycoreutils-3.7-build/selinux-3.7/semodule-utils/semodule_package/semodule_package.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.
Error: CLANG_WARNING: [#def23]
policycoreutils-3.7-build/selinux-3.7/semodule-utils/semodule_package/semodule_package.c:174:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'file_contexts'
# 172| break;
# 173| default:
# 174|-> usage(argv[0]);
# 175| return EXIT_FAILURE;
# 176| }
Error: CLANG_WARNING: [#def24]
policycoreutils-3.7-build/selinux-3.7/semodule-utils/semodule_package/semodule_package.c:174:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'module'
# 172| break;
# 173| default:
# 174|-> usage(argv[0]);
# 175| return EXIT_FAILURE;
# 176| }
Error: CLANG_WARNING: [#def25]
policycoreutils-3.7-build/selinux-3.7/semodule-utils/semodule_package/semodule_package.c:174:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'netfilter_contexts'
# 172| break;
# 173| default:
# 174|-> usage(argv[0]);
# 175| return EXIT_FAILURE;
# 176| }
Error: CLANG_WARNING: [#def26]
policycoreutils-3.7-build/selinux-3.7/semodule-utils/semodule_package/semodule_package.c:174:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'outfile'
# 172| break;
# 173| default:
# 174|-> usage(argv[0]);
# 175| return EXIT_FAILURE;
# 176| }
Error: CLANG_WARNING: [#def27]
policycoreutils-3.7-build/selinux-3.7/semodule-utils/semodule_package/semodule_package.c:174:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'seusers'
# 172| break;
# 173| default:
# 174|-> usage(argv[0]);
# 175| return EXIT_FAILURE;
# 176| }
Error: CLANG_WARNING: [#def28]
policycoreutils-3.7-build/selinux-3.7/semodule-utils/semodule_package/semodule_package.c:174:4: warning[unix.Malloc]: Potential leak of memory pointed to by 'user_extra'
# 172| break;
# 173| default:
# 174|-> usage(argv[0]);
# 175| return EXIT_FAILURE;
# 176| }
Scan Properties
analyzer-version-clang | 18.1.7 |
analyzer-version-cppcheck | 2.14.2 |
analyzer-version-gcc | 14.1.1 |
analyzer-version-gcc-analyzer | 14.1.1 |
analyzer-version-shellcheck | 0.10.0 |
enabled-plugins | clang, cppcheck, gcc, shellcheck |
exit-code | 0 |
host | ip-172-16-1-19.us-west-2.compute.internal |
mock-config | fedora-41-x86_64 |
project-name | policycoreutils-3.7-1.fc41 |
store-results-to | /tmp/tmpdv3u7rrz/policycoreutils-3.7-1.fc41.tar.xz |
time-created | 2024-07-03 17:04:08 |
time-finished | 2024-07-03 17:05:24 |
tool | csmock |
tool-args | '/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpdv3u7rrz/policycoreutils-3.7-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpdv3u7rrz/policycoreutils-3.7-1.fc41.src.rpm' |
tool-version | csmock-3.5.3-1.el9 |