Newly introduced defects

List of Defects

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
vlc-3.0.21-build/vlc-3.0.21/modules/lua/libs/net.c:316:21: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc((long unsigned int)i_fds * 8)’
#  314|       {
#  315|           luafds[i] = luaL_checkint( L, -2 );
#  316|->         p_fds[i].fd = vlclua_fd_get( L, luafds[i] );
#  317|           p_fds[i].events = luaL_checkinteger( L, -1 );
#  318|           p_fds[i].events &= POLLIN | POLLOUT | POLLPRI;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
vlc-3.0.21-build/vlc-3.0.21/modules/lua/libs/net.c:337:35: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc((long unsigned int)i_fds * 4)’
#  335|       for( int i = 0; i < i_fds; i++ )
#  336|       {
#  337|->         lua_pushinteger( L, luafds[i] );
#  338|           lua_pushinteger( L, (val >= 0) ? p_fds[i].revents : 0 );
#  339|           lua_settable( L, 1 );

Error: COMPILER_WARNING (CWE-563): [#def3]
vlc-3.0.21-build/vlc-3.0.21/modules/video_output/opengl/converter_vaapi.c: scope_hint: In function ‘vaegl_release_last_pic’
vlc-3.0.21-build/vlc-3.0.21/modules/video_output/opengl/converter_vaapi.c:113:19: warning[-Wunused-variable]: unused variable ‘o’
#  113 |     vlc_object_t *o = VLC_OBJECT(tc->gl);
#      |                   ^
#  111|   vaegl_release_last_pic(const opengl_tex_converter_t *tc, struct priv *priv)
#  112|   {
#  113|->     vlc_object_t *o = VLC_OBJECT(tc->gl);
#  114|   
#  115|       for (unsigned i = 0; i < priv->last.num_planes; ++i)

Error: CLANG_WARNING: [#def4]
vlc-3.0.21-build/vlc-3.0.21/modules/video_output/opengl/converter_vaapi.c:113:19: warning[deadcode.DeadStores]: Value stored to 'o' during its initialization is never read
#  111|   vaegl_release_last_pic(const opengl_tex_converter_t *tc, struct priv *priv)
#  112|   {
#  113|->     vlc_object_t *o = VLC_OBJECT(tc->gl);
#  114|   
#  115|       for (unsigned i = 0; i < priv->last.num_planes; ++i)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
vlc-3.0.21-build/vlc-3.0.21/src/config/core.c:443:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc(count * 8)’
vlc-3.0.21-build/vlc-3.0.21/src/config/core.c: scope_hint: In function ‘config_GetPszChoices’
#  441|           vals[i] = xstrdup ((cfg->list.psz[i] != NULL) ? cfg->list.psz[i] : "");
#  442|           /* FIXME: use module_gettext() instead */
#  443|->         txts[i] = xstrdup ((cfg->list_text[i] != NULL)
#  444|                                          ? vlc_gettext (cfg->list_text[i]) : "");
#  445|       }

Scan Properties

analyzer-version-clang18.1.7
analyzer-version-cppcheck2.14.2
analyzer-version-gcc14.1.1
analyzer-version-gcc-analyzer14.1.1
analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-clang18.1.7
diffbase-analyzer-version-cppcheck2.14.2
diffbase-analyzer-version-gcc14.1.1
diffbase-analyzer-version-gcc-analyzer14.1.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-enabled-pluginsclang, cppcheck, gcc, shellcheck
diffbase-exit-code0
diffbase-hostip-172-16-1-232.us-west-2.compute.internal
diffbase-mock-configfedora-41-x86_64
diffbase-project-namevlc-3.0.20-12.fc40
diffbase-store-results-to/tmp/tmpdp9xzcc0/vlc-3.0.20-12.fc40.tar.xz
diffbase-time-created2024-07-03 18:16:21
diffbase-time-finished2024-07-03 18:35:02
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpdp9xzcc0/vlc-3.0.20-12.fc40.tar.xz' '--gcc-analyze' '/tmp/tmpdp9xzcc0/vlc-3.0.20-12.fc40.src.rpm'
diffbase-tool-versioncsmock-3.5.3-1.el9
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-232.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namevlc-3.0.21-2.fc41
store-results-to/tmp/tmpu83cnguf/vlc-3.0.21-2.fc41.tar.xz
time-created2024-07-03 18:35:32
time-finished2024-07-03 18:53:36
titleNewly introduced defects
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpu83cnguf/vlc-3.0.21-2.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpu83cnguf/vlc-3.0.21-2.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9