libsecret-0.21.4-2.fc41

List of Defects

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
libsecret-0.21.4/egg/egg-secure-memory.c: scope_hint: In function ‘egg_secure_strndup_full’
libsecret-0.21.4/egg/egg-secure-memory.c:1359:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
<built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null
# 1357|   	len = length + 1;
# 1358|   	res = (char *)egg_secure_alloc_full (tag, len, options);
# 1359|-> 	memcpy (res, str, len);
# 1360|   	res[length] = '\0';
# 1361|   	return res;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
libsecret-0.21.4/libsecret/secret-attributes.c: scope_hint: In function ‘_secret_attributes_validate’
libsecret-0.21.4/libsecret/secret-attributes.c:318:42: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘error’
#  316|   	if (!secret_attributes_validate (schema, attributes, &error)) {
#  317|   		// if matching is false, an empty table is fine
#  318|-> 		if ((!matching) && (error->code == SECRET_ERROR_EMPTY_TABLE)) {
#  319|   			g_error_free (error);
#  320|   			return TRUE;

Error: CLANG_WARNING: [#def3]
libsecret-0.21.4/libsecret/secret-prompt.c:447:2: warning[deadcode.DeadStores]: Value stored to 'async_cancellable' is never read
#  445|   
#  446|   	task = g_task_new (self, cancellable, callback, user_data);
#  447|-> 	async_cancellable = g_task_get_cancellable (task);
#  448|   	g_task_set_source_tag (task, secret_prompt_perform);
#  449|   	closure = g_new0 (PerformClosure, 1);

Error: COMPILER_WARNING: [#def4]
libsecret-0.21.4/redhat-linux-build/libsecret/test-vala-unstable.p/test-vala-unstable.c:15: included_from: Included from here.
libsecret-0.21.4/libsecret/secret.h:40:2: warning[-Wcpp]: #warning "Some parts of the libsecret API are unstable. Define SECRET_API_SUBJECT_TO_CHANGE to acknowledge"
#   38|   
#   39|   #ifndef SECRET_API_SUBJECT_TO_CHANGE
#   40|-> #warning "Some parts of the libsecret API are unstable. Define SECRET_API_SUBJECT_TO_CHANGE to acknowledge"
#   41|   #endif
#   42|   

Error: COMPILER_WARNING (CWE-843): [#def5]
libsecret-0.21.4/libsecret/test-vala-lang.vala: scope_hint: In function ‘_vala_main’
libsecret-0.21.4/libsecret/test-vala-lang.vala:183:59: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  183 |   GLib.Test.add_data_func ("/vala/attributes/validate", test_attributes_validate);
#      |                                                           ^~~~~~~~~~~~~~~~~~~~~~~~                 
#      |                                                           |
#      |                                                           void (*)(void *)
/usr/include/glib-2.0/glib.h:89: included_from: Included from here.
libsecret-0.21.4/libsecret/secret.h:18: included_from: Included from here.
libsecret-0.21.4/redhat-linux-build/libsecret/test-vala-lang.p/test-vala-lang.c:15: included_from: Included from here.
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  181|     }
#  182|   
#  183|->   GLib.Test.add_data_func ("/vala/attributes/validate", test_attributes_validate);
#  184|     GLib.Test.add_data_func ("/vala/lookup/sync", test_lookup_sync);
#  185|     GLib.Test.add_data_func ("/vala/lookup/async", test_lookup_async);

Error: COMPILER_WARNING (CWE-843): [#def6]
libsecret-0.21.4/libsecret/test-vala-lang.vala:184:51: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  184 |   GLib.Test.add_data_func ("/vala/lookup/sync", test_lookup_sync);
#      |                                                   ^~~~~~~~~~~~~~~~                 
#      |                                                   |
#      |                                                   void (*)(void *)
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  182|   
#  183|     GLib.Test.add_data_func ("/vala/attributes/validate", test_attributes_validate);
#  184|->   GLib.Test.add_data_func ("/vala/lookup/sync", test_lookup_sync);
#  185|     GLib.Test.add_data_func ("/vala/lookup/async", test_lookup_async);
#  186|     GLib.Test.add_data_func ("/vala/lookup/no-name", test_lookup_no_name);

Error: COMPILER_WARNING (CWE-843): [#def7]
libsecret-0.21.4/libsecret/test-vala-lang.vala:185:52: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  185 |   GLib.Test.add_data_func ("/vala/lookup/async", test_lookup_async);
#      |                                                    ^~~~~~~~~~~~~~~~~                 
#      |                                                    |
#      |                                                    void (*)(void *)
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  183|     GLib.Test.add_data_func ("/vala/attributes/validate", test_attributes_validate);
#  184|     GLib.Test.add_data_func ("/vala/lookup/sync", test_lookup_sync);
#  185|->   GLib.Test.add_data_func ("/vala/lookup/async", test_lookup_async);
#  186|     GLib.Test.add_data_func ("/vala/lookup/no-name", test_lookup_no_name);
#  187|     GLib.Test.add_data_func ("/vala/store/sync", test_store_sync);

Error: COMPILER_WARNING (CWE-843): [#def8]
libsecret-0.21.4/libsecret/test-vala-lang.vala:186:54: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  186 |   GLib.Test.add_data_func ("/vala/lookup/no-name", test_lookup_no_name);
#      |                                                      ^~~~~~~~~~~~~~~~~~~                 
#      |                                                      |
#      |                                                      void (*)(void *)
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  184|     GLib.Test.add_data_func ("/vala/lookup/sync", test_lookup_sync);
#  185|     GLib.Test.add_data_func ("/vala/lookup/async", test_lookup_async);
#  186|->   GLib.Test.add_data_func ("/vala/lookup/no-name", test_lookup_no_name);
#  187|     GLib.Test.add_data_func ("/vala/store/sync", test_store_sync);
#  188|     GLib.Test.add_data_func ("/vala/store/async", test_store_async);

Error: COMPILER_WARNING (CWE-843): [#def9]
libsecret-0.21.4/libsecret/test-vala-lang.vala:187:50: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  187 |   GLib.Test.add_data_func ("/vala/store/sync", test_store_sync);
#      |                                                  ^~~~~~~~~~~~~~~                 
#      |                                                  |
#      |                                                  void (*)(void *)
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  185|     GLib.Test.add_data_func ("/vala/lookup/async", test_lookup_async);
#  186|     GLib.Test.add_data_func ("/vala/lookup/no-name", test_lookup_no_name);
#  187|->   GLib.Test.add_data_func ("/vala/store/sync", test_store_sync);
#  188|     GLib.Test.add_data_func ("/vala/store/async", test_store_async);
#  189|     GLib.Test.add_data_func ("/vala/clear/sync", test_clear_sync);

Error: COMPILER_WARNING (CWE-843): [#def10]
libsecret-0.21.4/libsecret/test-vala-lang.vala:188:51: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  188 |   GLib.Test.add_data_func ("/vala/store/async", test_store_async);
#      |                                                   ^~~~~~~~~~~~~~~~                 
#      |                                                   |
#      |                                                   void (*)(void *)
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  186|     GLib.Test.add_data_func ("/vala/lookup/no-name", test_lookup_no_name);
#  187|     GLib.Test.add_data_func ("/vala/store/sync", test_store_sync);
#  188|->   GLib.Test.add_data_func ("/vala/store/async", test_store_async);
#  189|     GLib.Test.add_data_func ("/vala/clear/sync", test_clear_sync);
#  190|     GLib.Test.add_data_func ("/vala/clear/async", test_clear_async);

Error: COMPILER_WARNING (CWE-843): [#def11]
libsecret-0.21.4/libsecret/test-vala-lang.vala:189:50: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  189 |   GLib.Test.add_data_func ("/vala/clear/sync", test_clear_sync);
#      |                                                  ^~~~~~~~~~~~~~~                 
#      |                                                  |
#      |                                                  void (*)(void *)
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  187|     GLib.Test.add_data_func ("/vala/store/sync", test_store_sync);
#  188|     GLib.Test.add_data_func ("/vala/store/async", test_store_async);
#  189|->   GLib.Test.add_data_func ("/vala/clear/sync", test_clear_sync);
#  190|     GLib.Test.add_data_func ("/vala/clear/async", test_clear_async);
#  191|   

Error: COMPILER_WARNING (CWE-843): [#def12]
libsecret-0.21.4/libsecret/test-vala-lang.vala:190:51: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
#  190 |   GLib.Test.add_data_func ("/vala/clear/async", test_clear_async);
#      |                                                   ^~~~~~~~~~~~~~~~                 
#      |                                                   |
#      |                                                   void (*)(void *)
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#  378 |                                          GTestDataFunc   test_func);
#      |                                          ~~~~~~~~~~~~~~~~^~~~~~~~~
#  188|     GLib.Test.add_data_func ("/vala/store/async", test_store_async);
#  189|     GLib.Test.add_data_func ("/vala/clear/sync", test_clear_sync);
#  190|->   GLib.Test.add_data_func ("/vala/clear/async", test_clear_async);
#  191|   
#  192|     var res = GLib.Test.run ();

Error: COMPILER_WARNING (CWE-843): [#def13]
libsecret-0.21.4/libsecret/test-vala-unstable.vala: scope_hint: In function ‘_vala_main’
libsecret-0.21.4/libsecret/test-vala-unstable.vala:31:66: warning[-Wincompatible-pointer-types]: passing argument 3 of ‘g_test_add_data_func’ from incompatible pointer type
/usr/include/glib-2.0/glib.h:89: included_from: Included from here.
libsecret-0.21.4/libsecret/secret.h:18: included_from: Included from here.
/usr/include/glib-2.0/glib/gtestutils.h:378:58: note: expected ‘GTestDataFunc’ {aka ‘void (*)(const void *)’} but argument is of type ‘void (*)(void *)’
#   29|   	}
#   30|   
#   31|-> 	GLib.Test.add_data_func ("/vala/unstable/read-alias", test_read_alias);
#   32|   
#   33|   	var res = GLib.Test.run ();

Error: CLANG_WARNING: [#def14]
libsecret-0.21.4/redhat-linux-build/tmp-introspectbi353k9i/Secret-1.c:799:27: warning[core.NullDereference]: Access to field 'message' results in a dereference of a null pointer (loaded from variable 'error')

Error: CLANG_WARNING: [#def15]
libsecret-0.21.4/redhat-linux-build/tmp-introspectcf1r8yxm/MockService-0.c:799:27: warning[core.NullDereference]: Access to field 'message' results in a dereference of a null pointer (loaded from variable 'error')

Error: COMPILER_WARNING (CWE-252): [#def16]
libsecret-0.21.4/tool/secret-tool.c: scope_hint: In function ‘write_password_stdout’
libsecret-0.21.4/tool/secret-tool.c:202:17: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  202 |                 write (1, "\n", 1);
#      |                 ^~~~~~~~~~~~~~~~~~
#  200|   	/* Add a new line if we're writing out to a tty */
#  201|   	if (isatty (1))
#  202|-> 		write (1, "\n", 1);
#  203|   }
#  204|   

Scan Properties

analyzer-version-clang18.1.3
analyzer-version-cppcheck2.13.0
analyzer-version-gcc14.0.1
analyzer-version-gcc-analyzer14.0.1
analyzer-version-shellcheck0.10.0
enabled-pluginsclang, cppcheck, gcc, shellcheck
exit-code0
hostip-172-16-1-81.us-west-2.compute.internal
mock-configfedora-41-x86_64
project-namelibsecret-0.21.4-2.fc41
store-results-to/tmp/tmp_jxukj73/libsecret-0.21.4-2.fc41.tar.xz
time-created2024-04-22 11:03:05
time-finished2024-04-22 11:04:47
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp_jxukj73/libsecret-0.21.4-2.fc41.tar.xz' '--gcc-analyze' '/tmp/tmp_jxukj73/libsecret-0.21.4-2.fc41.src.rpm'
tool-versioncsmock-3.5.3-1.el9