Newly introduced defects

List of Defects

Error: GCC_ANALYZER_WARNING (CWE-126): [#def1]
bluez-5.75/emulator/bthost.c: scope_hint: In function ‘queue_command’
bluez-5.75/emulator/bthost.c:571:52: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
bluez-5.75/emulator/bthost.c:571:52: note: read of 8 bytes from after the end of ‘iov’
bluez-5.75/emulator/bthost.c:571:52: note: valid subscripts for ‘iov’ are ‘[0]’ to ‘[2]’
#                                              └──────────────────────────┘
#                                                           ^
#  569|   
#  570|   	for (i = 0; i < iovlen; i++) {
#  571|-> 		memcpy(cmd->data + cmd->len, iov[i].iov_base, iov[i].iov_len);
#  572|   		cmd->len += iov[i].iov_len;
#  573|   	}

Error: GCC_ANALYZER_WARNING (CWE-126): [#def2]
bluez-5.75/emulator/bthost.c:571:69: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
bluez-5.75/emulator/bthost.c:571:69: note: read of 8 bytes from after the end of ‘iov’
bluez-5.75/emulator/bthost.c:571:69: note: valid subscripts for ‘iov’ are ‘[0]’ to ‘[2]’
#                                              └──────────────────────────┘
#                                                           ^
#  569|   
#  570|   	for (i = 0; i < iovlen; i++) {
#  571|-> 		memcpy(cmd->data + cmd->len, iov[i].iov_base, iov[i].iov_len);
#  572|   		cmd->len += iov[i].iov_len;
#  573|   	}

Error: CLANG_WARNING: [#def3]
bluez-5.75/profiles/audio/media.c:1046:7: warning[unix.Malloc]: Use of memory after it is freed
# 1044|   		struct pac_select_data *data;
# 1045|   
# 1046|-> 		if (req->cb != pac_select_cb) {
# 1047|   			l = g_slist_next(l);
# 1048|   			continue;

Scan Properties