Newly introduced defects

List of Defects

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:2196: included_from: Included from here.
tcl-8.6.14-build/tcl8.6.14/generic/regc_lex.c: scope_hint: In function ‘chrnamed’
tcl-8.6.14-build/tcl8.6.14/generic/regc_lex.c:1181:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:2198: included_from: Included from here.
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1704:5: note: in expansion of macro ‘NOERR’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c: scope_hint: In function ‘chrnamed’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1711:5: note: in expansion of macro ‘NEXT’
tcl-8.6.14-build/tcl8.6.14/generic/regc_lex.c:775:5: note: in expansion of macro ‘NOTE’
tcl-8.6.14-build/tcl8.6.14/generic/regc_lex.c:42:61: note: in definition of macro ‘SETV’
tcl-8.6.14-build/tcl8.6.14/generic/regc_lex.c:778:9: note: in expansion of macro ‘RETV’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:2200: included_from: Included from here.
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:2199: included_from: Included from here.
tcl-8.6.14-build/tcl8.6.14/generic/regc_locale.c: scope_hint: In function ‘chrnamed’
tcl-8.6.14-build/tcl8.6.14/generic/regc_locale.c:904:9: note: in expansion of macro ‘NOERRN’
# 1179|   
# 1180|       cv = range(v, c, c, 0);
# 1181|->     if (cv->nchrs == 0) {
# 1182|   	return (chr)lastresort;
# 1183|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
tcl-8.6.14-build/tcl8.6.14/generic/regc_nfa.c: scope_hint: In function ‘newarc’
tcl-8.6.14-build/tcl8.6.14/generic/regc_nfa.c:283:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘to’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1704:5: note: in expansion of macro ‘NOERR’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c: scope_hint: In function ‘newarc’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1711:5: note: in expansion of macro ‘NEXT’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1711:5: note: in expansion of macro ‘NEXT’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1439:5: note: in expansion of macro ‘NEXT’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1439:5: note: in expansion of macro ‘NEXT’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1511:9: note: in expansion of macro ‘NEXT’
tcl-8.6.14-build/tcl8.6.14/generic/regcomp.c:1511:9: note: in expansion of macro ‘NEXT’
#  281|   
#  282|       /* check for duplicate arc, using whichever chain is shorter */
#  283|->     if (from->nouts <= to->nins) {
#  284|   	for (a = from->outs; a != NULL; a = a->outchain) {
#  285|   	    if (a->to == to && a->co == co && a->type == t) {

Error: CPPCHECK_WARNING: [#def3]
tcl-8.6.14-build/tcl8.6.14/libtommath/bn_mp_mul_2d.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def4]
tcl-8.6.14-build/tcl8.6.14/libtommath/bn_mp_pack.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CPPCHECK_WARNING: [#def5]
tcl-8.6.14-build/tcl8.6.14/libtommath/bn_s_mp_mul_digs.c: information[normalCheckLevelMaxBranches]: Limiting analysis of branches. Use --check-level=exhaustive to analyze all branches.

Error: CLANG_WARNING: [#def6]
tcl-8.6.14-build/tcl8.6.14/unix/tclUnixPipe.c:543:11: warning[security.insecureAPI.vfork]: Call to function 'vfork' is insecure as it can lead to denial of service situations in the parent process. Replace calls to vfork with calls to the safer 'posix_spawn' function
#  541|       }
#  542|   #else
#  543|->     pid = fork();
#  544|   #endif
#  545|       if (pid == 0) {

Error: CLANG_WARNING: [#def7]
tcl-8.6.14-build/tcl8.6.14/unix/tclUnixPipe.c:547:2: warning[unix.Vfork]: This assignment is prohibited after a successful vfork
#  545|       if (pid == 0) {
#  546|   	size_t len;
#  547|-> 	int joinThisError = errorFile && (errorFile == outputFile);
#  548|   
#  549|   	fd = GetFd(errPipeOut);

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-clang18.1.7
diffbase-analyzer-version-cppcheck2.14.2
diffbase-analyzer-version-gcc14.1.1
diffbase-analyzer-version-gcc-analyzer14.1.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-enabled-pluginsclang, cppcheck, gcc, shellcheck
diffbase-exit-code0
diffbase-hostip-172-16-1-133.us-west-2.compute.internal
diffbase-mock-configfedora-41-x86_64
diffbase-project-nametcl-8.6.13-2.fc40
diffbase-store-results-to/tmp/tmpl7l4nmba/tcl-8.6.13-2.fc40.tar.xz
diffbase-time-created2024-07-03 18:03:45
diffbase-time-finished2024-07-03 18:07:49
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpl7l4nmba/tcl-8.6.13-2.fc40.tar.xz' '--gcc-analyze' '/tmp/tmpl7l4nmba/tcl-8.6.13-2.fc40.src.rpm'
diffbase-tool-versioncsmock-3.5.3-1.el9
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-133.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-nametcl-8.6.14-1.fc41
store-results-to/tmp/tmp26s9kkai/tcl-8.6.14-1.fc41.tar.xz
time-created2024-07-03 18:08:12
time-finished2024-07-03 18:11:53
titleNewly introduced defects
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp26s9kkai/tcl-8.6.14-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmp26s9kkai/tcl-8.6.14-1.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9