Newly introduced defects

List of Defects

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def1]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/io/forkfd_qt.c:15: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c: scope_hint: In function ‘notifyAndFreeInfo’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:313:21: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘*entry.deathPipe’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
/usr/include/signal.h:57: included_from: Included from here.
/usr/include/sys/wait.h:36: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.h:30: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/io/forkfd_qt.c:14: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  311|       ssize_t ret;
#  312|       EINTR_LOOP(ret, write(entry->deathPipe, payload, sizeof(*payload)));
#  313|->     EINTR_LOOP(ret, close(entry->deathPipe));
#  314|   
#  315|       freeInfo(header, entry);

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def2]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c: scope_hint: In function ‘forkfd_fork_fallback’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:661:29: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘efd’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd_c11.h:41: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd_atomic.h:31: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:102: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:661:13: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  659|               eventfd_t val64;
#  660|               EINTR_LOOP(ret, eventfd_read(efd, &val64));
#  661|->             EINTR_LOOP(ret, close(efd));
#  662|   #endif
#  663|           } else {

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def3]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:665:29: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘sync_pipe[1]’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c: scope_hint: In function ‘forkfd_fork_fallback’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:665:13: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  663|           } else {
#  664|               char c;
#  665|->             EINTR_LOOP(ret, close(sync_pipe[1]));
#  666|               EINTR_LOOP(ret, read(sync_pipe[0], &c, sizeof c));
#  667|               EINTR_LOOP(ret, close(sync_pipe[0]));

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def4]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:667:29: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘sync_pipe[0]’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c: scope_hint: In function ‘forkfd_fork_fallback’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:667:13: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  665|               EINTR_LOOP(ret, close(sync_pipe[1]));
#  666|               EINTR_LOOP(ret, read(sync_pipe[0], &c, sizeof c));
#  667|->             EINTR_LOOP(ret, close(sync_pipe[0]));
#  668|           }
#  669|   

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def5]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:672:25: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘death_pipe[1]’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:672:9: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  670|           /* now close the pipes and return to the caller */
#  671|           EINTR_LOOP(ret, close(death_pipe[0]));
#  672|->         EINTR_LOOP(ret, close(death_pipe[1]));
#  673|           fd = FFD_CHILD_PROCESS;
#  674|       } else {

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def6]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:685:29: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘efd’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:685:13: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  683|               eventfd_t val64 = 42;
#  684|               EINTR_LOOP(ret, eventfd_write(efd, val64));
#  685|->             EINTR_LOOP(ret, close(efd));
#  686|           } else
#  687|   #endif

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def7]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:705:25: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘efd’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:705:9: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  703|   #ifdef HAVE_EVENTFD
#  704|       if (efd != -1) {
#  705|->         EINTR_LOOP(ret, close(efd));
#  706|       } else
#  707|   #endif

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def8]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:709:25: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘sync_pipe[0]’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c: scope_hint: In function ‘forkfd_fork_fallback’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:709:9: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  707|   #endif
#  708|       {
#  709|->         EINTR_LOOP(ret, close(sync_pipe[0]));
#  710|           EINTR_LOOP(ret, close(sync_pipe[1]));
#  711|       }

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def9]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:710:25: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘sync_pipe[1]’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c: scope_hint: In function ‘forkfd_fork_fallback’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:710:9: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  708|       {
#  709|           EINTR_LOOP(ret, close(sync_pipe[0]));
#  710|->         EINTR_LOOP(ret, close(sync_pipe[1]));
#  711|       }
#  712|   err_close:

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def10]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:714:21: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘death_pipe[1]’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:179:17: note: in expansion of macro ‘ffd_atomic_compare_exchange’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c: scope_hint: In function ‘forkfd_fork_fallback’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:714:5: note: in expansion of macro ‘EINTR_LOOP’
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/3rdparty/forkfd/forkfd.c:124:15: note: in definition of macro ‘EINTR_LOOP’
#  712|   err_close:
#  713|       EINTR_LOOP(ret, close(death_pipe[0]));
#  714|->     EINTR_LOOP(ret, close(death_pipe[1]));
#  715|   err_free:
#  716|       /* free the info pointer */

Error: CLANG_WARNING: [#def11]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/io/qprocess_unix.cpp:313:42: warning[security.insecureAPI.vfork]: Call to function 'vfork' is insecure as it can lead to denial of service situations in the parent process. Replace calls to vfork with calls to the safer 'posix_spawn' function
#  311|           pid_t pid;
#  312|           if (isUsingVfork) {
#  313|->             QT_IGNORE_DEPRECATIONS(pid = vfork();)
#  314|           } else {
#  315|               pid = fork();

Error: CLANG_WARNING: [#def12]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/io/qprocess_unix.cpp:874:13: warning[deadcode.DeadStores]: Value stored to 'r' during its initialization is never read
#  872|       // EGID root, in which case we are allowed to do this.
#  873|       if (params.flags.testFlag(QProcess::UnixProcessFlag::ResetIds)) {
#  874|->         int r = setgid(getgid());
#  875|           r = setuid(getuid());
#  876|           (void) r;

Error: CLANG_WARNING: [#def13]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/kernel/qvariant.cpp:40: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/kernel/qmetatype_p.h:188:9: warning[core.NonNullParamChecker]: Null pointer passed to 2nd parameter expecting 'nonnull'
#  186|           iface->moveCtr(iface, where, copy);
#  187|       else
#  188|->         memcpy(where, copy, iface->size);
#  189|   }
#  190|   

Error: CLANG_WARNING: [#def14]
<built-in>:1: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/redhat-linux-build/src/corelib/CMakeFiles/Core.dir/cmake_pch.hxx:5: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/global/qt_pch.h:30: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/redhat-linux-build/include/QtCore/qcoreapplication.h:1: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/kernel/qcoreapplication.h:10: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/redhat-linux-build/include/QtCore/qcoreevent.h:1: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/kernel/qcoreevent.h:9: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/redhat-linux-build/include/QtCore/qobjectdefs.h:1: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/kernel/qobjectdefs.h:624:9: warning[cplusplus.NewDeleteLeaks]: Potential leak of memory pointed to by 'callable'
#  622|           auto callable = new QtPrivate::QCallableObject<std::decay_t<Func>, ActualArguments,
#  623|                   typename Callable::ReturnType>(std::forward<Func>(function));
#  624|->         return invokeMethodImpl(object, callable, type, h.parameterCount(), h.parameters.data(),
#  625|                   h.typeNames.data(), h.metaTypes.data());
#  626|       }

Error: CLANG_WARNING: [#def15]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/time/qtimezone.cpp:408:16: warning[cplusplus.NewDelete]: Attempt to delete released memory
#  406|   #if QT_CONFIG(timezone)
#  407|       if (!isShort() && d && !d->ref.deref())
#  408|->         delete d;
#  409|       d = nullptr;
#  410|   #endif

Error: CLANG_WARNING: [#def16]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/time/qtimezone.cpp:5: included_from: Included from here.
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/corelib/time/qtimezone.h:77:76: warning[cplusplus.NewDelete]: Use of memory after it is freed
#   75|           Data(QTimeZonePrivate *dptr) noexcept;
#   76|           Data &operator=(QTimeZonePrivate *dptr) noexcept;
#   77|->         const QTimeZonePrivate *operator->() const { Q_ASSERT(!isShort()); return d; }
#   78|           QTimeZonePrivate *operator->() { Q_ASSERT(!isShort()); return d; }
#   79|   

Error: CLANG_WARNING: [#def17]
qt6-qtbase-6.7.2-build/qtbase-everywhere-src-6.7.2/src/dbus/qdbuspendingcall.cpp:245:14: warning[deadcode.DeadStores]: Value stored to 'r' during its initialization is never read
#  243|   {
#  244|       if (dd) {
#  245|->         bool r = dd->ref.deref();
#  246|           Q_ASSERT(r);
#  247|       }

Scan Properties