Newly introduced defects

List of Defects

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
coreutils-9.5/lib/exclude.c: scope_hint: In function 'add_exclude_fp'
coreutils-9.5/lib/exclude.c:604:24: warning[-Wanalyzer-null-dereference]: dereference of NULL 'buf'
coreutils-9.5/lib/exclude.c:30: included_from: Included from here.
coreutils-9.5/lib/exclude.c:47: included_from: Included from here.
coreutils-9.5/lib/exclude.c:600:20: note: in expansion of macro 'getc'
coreutils-9.5/lib/exclude.c: scope_hint: In function 'add_exclude_fp'
#  602|         if (buf_count == buf_alloc)
#  603|           buf = xpalloc (buf, &buf_alloc, 1, -1, 1);
#  604|->       buf[buf_count++] = c;
#  605|       }
#  606|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
coreutils-9.5/src/env.c: scope_hint: In function 'parse_signal_action_params.part.0'
coreutils-9.5/src/env.c:567:10: warning[-Wanalyzer-malloc-leak]: leak of 'xstrdup(arg)'
#  565|         if (signum == 0)
#  566|           error (0, 0, _("%s: invalid signal"), quote (opt_sig));
#  567|->       if (signum <= 0)
#  568|           usage (exit_failure);
#  569|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
coreutils-9.5/src/env.c:570:14: warning[-Wanalyzer-malloc-leak]: leak of 'xstrdup(arg)'
#  568|           usage (exit_failure);
#  569|   
#  570|->       signals[signum] = set_default ? DEFAULT : IGNORE;
#  571|   
#  572|         opt_sig = strtok (nullptr, ",");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
coreutils-9.5/src/env.c: scope_hint: In function 'parse_block_signal_params.part.0'
coreutils-9.5/src/env.c:656:10: warning[-Wanalyzer-malloc-leak]: leak of 'xstrdup(arg)'
#  654|         if (signum == 0)
#  655|           error (0, 0, _("%s: invalid signal"), quote (opt_sig));
#  656|->       if (signum <= 0)
#  657|           usage (exit_failure);
#  658|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
coreutils-9.5/src/env.c:661:14: warning[-Wanalyzer-malloc-leak]: leak of 'xstrdup(arg)'
#  659|         if (sigaddset (block ? &block_signals : &unblock_signals, signum) == -1)
#  660|           {
#  661|->           if (block)
#  662|               error (EXIT_CANCELED, errno,
#  663|                      _("failed to block signal %d"), signum);

Scan Properties

analyzer-version-clang18.1.3
analyzer-version-cppcheck2.13.0
analyzer-version-gcc14.0.1
analyzer-version-gcc-analyzer14.0.1
analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-clang18.1.3
diffbase-analyzer-version-cppcheck2.13.0
diffbase-analyzer-version-gcc14.0.1
diffbase-analyzer-version-gcc-analyzer14.0.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-enabled-pluginsclang, cppcheck, gcc, shellcheck
diffbase-exit-code0
diffbase-hostip-172-16-1-254.us-west-2.compute.internal
diffbase-mock-configfedora-41-x86_64
diffbase-project-namecoreutils-9.4-6.fc40
diffbase-store-results-to/tmp/tmp8v4o7ywh/coreutils-9.4-6.fc40.tar.xz
diffbase-time-created2024-04-22 10:43:26
diffbase-time-finished2024-04-22 10:51:06
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp8v4o7ywh/coreutils-9.4-6.fc40.tar.xz' '--gcc-analyze' '/tmp/tmp8v4o7ywh/coreutils-9.4-6.fc40.src.rpm'
diffbase-tool-versioncsmock-3.5.3-1.el9
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-254.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namecoreutils-9.5-1.fc41
store-results-to/tmp/tmpzr0hps4v/coreutils-9.5-1.fc41.tar.xz
time-created2024-04-22 10:51:23
time-finished2024-04-22 10:58:41
titleNewly introduced defects
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpzr0hps4v/coreutils-9.5-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpzr0hps4v/coreutils-9.5-1.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9