xmlrpc-c-1.59.03-1.fc41
List of Defects
Error: SHELLCHECK_WARNING (CWE-563): [#def1]
/usr/bin/xmlrpc-c-config:9:1: warning[SC2034]: ENABLE_ABYSS_THREADS appears unused. Verify use (or export if used externally).
# 7| # From 'shell_config'
# 8| #######################################################
# 9|-> ENABLE_ABYSS_THREADS="yes"
# 10| THREAD_LIBS=""
# 11| ENABLE_LIBXML2_BACKEND="no"
Error: SHELLCHECK_WARNING (CWE-563): [#def2]
/usr/bin/xmlrpc-c-config:10:1: warning[SC2034]: THREAD_LIBS appears unused. Verify use (or export if used externally).
# 8| #######################################################
# 9| ENABLE_ABYSS_THREADS="yes"
# 10|-> THREAD_LIBS=""
# 11| ENABLE_LIBXML2_BACKEND="no"
# 12| MUST_BUILD_WININET_CLIENT="no"
Error: SHELLCHECK_WARNING (CWE-563): [#def3]
/usr/bin/xmlrpc-c-config:32:1: warning[SC2034]: BLDDIR appears unused. Verify use (or export if used externally).
# 30| HEADERINST_DIR="/usr/include"
# 31| LIBINST_DIR="/usr/lib64"
# 32|-> BLDDIR="/builddir/build/BUILD/xmlrpc-c-1.59.03"
# 33| ABS_SRCDIR="/builddir/build/BUILD/xmlrpc-c-1.59.03"
# 34| ABYSS_DOES_OPENSSL="yes"
Error: SHELLCHECK_WARNING (CWE-563): [#def4]
/usr/bin/xmlrpc-c-config:33:1: warning[SC2034]: ABS_SRCDIR appears unused. Verify use (or export if used externally).
# 31| LIBINST_DIR="/usr/lib64"
# 32| BLDDIR="/builddir/build/BUILD/xmlrpc-c-1.59.03"
# 33|-> ABS_SRCDIR="/builddir/build/BUILD/xmlrpc-c-1.59.03"
# 34| ABYSS_DOES_OPENSSL="yes"
# 35| OPENSSL_LDADD="-lssl -lcrypto"
Error: SHELLCHECK_WARNING (CWE-563): [#def5]
/usr/bin/xmlrpc-c-config:77:1: warning[SC2034]: cpp_libs appears unused. Verify use (or export if used externally).
# 75| the_rpath=
# 76| the_wl_rpath=
# 77|-> cpp_libs=
# 78| # It's important that packetsocket lib go after client, server libs
# 79| packetsocket_lib=
Error: GCC_ANALYZER_WARNING (CWE-126): [#def6]
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:32: included_from: Included from here.
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c: scope_hint: In function ‘formatPeerInfoInet6’
xmlrpc-c-1.59.03/include/xmlrpc-c/string_int.h:129:23: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:236:9: note: in expansion of macro ‘MEMSCPY’
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:236:9: note: in expansion of macro ‘MEMSCPY’
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:236:9: note: in expansion of macro ‘MEMSCPY’
xmlrpc-c-1.59.03/include/xmlrpc-c/string_int.h:129:23: note: read of 12 bytes from after the end of ‘sockaddr’
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:236:9: note: in expansion of macro ‘MEMSCPY’
# └──────────────────────────────────────────────────────────────────────┘
# ^ ^
# 127| #define MEMSSET(a,b) (memset(a, b, sizeof(*a)))
# 128|
# 129|-> #define MEMSCPY(a,b) (memcpy(a, b, sizeof(*a)))
# 130|
# 131| #define MEMSZERO(a) (MEMSSET(a, 0))
Error: GCC_ANALYZER_WARNING (CWE-457): [#def7]
xmlrpc-c-1.59.03/include/xmlrpc-c/base.h:11: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_client.c:21: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_client.c: scope_hint: In function ‘xmlrpc_client_call2’
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:275:6: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘callXmlP’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:623:25: note: in expansion of macro ‘XMLRPC_MEMBLOCK_SIZE’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:623:25: note: in expansion of macro ‘XMLRPC_MEMBLOCK_SIZE’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:623:25: note: in expansion of macro ‘XMLRPC_MEMBLOCK_SIZE’
# 273| xmlrpc_mem_block_free(block)
# 274| #define XMLRPC_MEMBLOCK_SIZE(type,block) \
# 275|-> (xmlrpc_mem_block_size(block) / sizeof(type))
# 276| #define XMLRPC_MEMBLOCK_CONTENTS(type,block) \
# 277| ((type*) xmlrpc_mem_block_contents(block))
Error: CLANG_WARNING: [#def8]
xmlrpc-c-1.59.03/lib/abyss/src/conf.c:284:21: warning[core.NullDereference]: Access to field 'pw_uid' results in a dereference of a null pointer (loaded from variable 'pwd')
# 282| TraceExit("Unknown user '%s'", p);
# 283|
# 284|-> srvP->uid = pwd->pw_uid;
# 285| if ((int)srvP->gid==(-1))
# 286| srvP->gid = pwd->pw_gid;
Error: CLANG_WARNING: [#def9]
xmlrpc-c-1.59.03/lib/abyss/src/conn.c:526:17: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value
# 524| dealWithReadTimeout(timedOutP, !readyForRead, timeout, errorP);
# 525| if (!*errorP)
# 526|-> dealWithReadEof(eofP, eof, errorP);
# 527| }
# 528| }
Error: GCC_ANALYZER_WARNING (CWE-122): [#def10]
xmlrpc-c-1.59.03/lib/abyss/src/data.c: scope_hint: In function ‘PoolZoneAlloc’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:551:27: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/abyss/src/data.c:42: included_from: Included from here.
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:551:27: note: write of 7 bytes to beyond the end of the region
# 549| MALLOCARRAY(poolZoneP, zonesize);
# 550| if (poolZoneP) {
# 551|-> poolZoneP->pos = &poolZoneP->data[0];
# 552| poolZoneP->maxpos = poolZoneP->pos + zonesize;
# 553| poolZoneP->next = NULL;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def11]
xmlrpc-c-1.59.03/lib/abyss/src/data.c:552:27: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:552:27: note: write of 8 bytes to beyond the end of the region
# 550| if (poolZoneP) {
# 551| poolZoneP->pos = &poolZoneP->data[0];
# 552|-> poolZoneP->maxpos = poolZoneP->pos + zonesize;
# 553| poolZoneP->next = NULL;
# 554| poolZoneP->prev = NULL;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def12]
xmlrpc-c-1.59.03/lib/abyss/src/data.c:553:27: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:553:27: note: write of 8 bytes to beyond the end of the region
# 551| poolZoneP->pos = &poolZoneP->data[0];
# 552| poolZoneP->maxpos = poolZoneP->pos + zonesize;
# 553|-> poolZoneP->next = NULL;
# 554| poolZoneP->prev = NULL;
# 555| }
Error: GCC_ANALYZER_WARNING (CWE-122): [#def13]
xmlrpc-c-1.59.03/lib/abyss/src/data.c:554:27: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:554:27: note: write of 8 bytes to beyond the end of the region
# 552| poolZoneP->maxpos = poolZoneP->pos + zonesize;
# 553| poolZoneP->next = NULL;
# 554|-> poolZoneP->prev = NULL;
# 555| }
# 556| return poolZoneP;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def14]
xmlrpc-c-1.59.03/lib/abyss/src/data.c: scope_hint: In function ‘PoolAlloc’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:621:40: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/abyss/src/data.c:43: included_from: Included from here.
xmlrpc-c-1.59.03/include/xmlrpc-c/util_int.h:33:26: note: in definition of macro ‘MAX’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:621:40: note: write of 8 bytes to beyond the end of the region
# 619| TPoolZone * const newPoolZoneP = PoolZoneAlloc(zonesize);
# 620| if (newPoolZoneP) {
# 621|-> newPoolZoneP->prev = curPoolZoneP;
# 622| newPoolZoneP->next = curPoolZoneP->next;
# 623| curPoolZoneP->next = newPoolZoneP;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def15]
xmlrpc-c-1.59.03/lib/abyss/src/data.c:622:40: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/include/xmlrpc-c/util_int.h:33:26: note: in definition of macro ‘MAX’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:622:40: note: write of 8 bytes to beyond the end of the region
# 620| if (newPoolZoneP) {
# 621| newPoolZoneP->prev = curPoolZoneP;
# 622|-> newPoolZoneP->next = curPoolZoneP->next;
# 623| curPoolZoneP->next = newPoolZoneP;
# 624| poolP->currentzone = newPoolZoneP;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def16]
xmlrpc-c-1.59.03/lib/abyss/src/data.c:626:39: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/include/xmlrpc-c/util_int.h:33:26: note: in definition of macro ‘MAX’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:549:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/abyss/src/data.c:626:39: note: write of 7 bytes to beyond the end of the region
# 624| poolP->currentzone = newPoolZoneP;
# 625| retval= newPoolZoneP->data;
# 626|-> newPoolZoneP->pos = newPoolZoneP->data + size;
# 627| } else
# 628| retval = NULL;
Error: CLANG_WARNING: [#def17]
xmlrpc-c-1.59.03/lib/abyss/src/handler.c:324:5: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 322|
# 323| /* Sort the files */
# 324|-> qsort(listP->item, listP->size, sizeof(void *),
# 325| (TQSortProc)(sort == 1 ? cmpfilenames : cmpfiledates));
# 326|
Error: CLANG_WARNING: [#def18]
xmlrpc-c-1.59.03/lib/abyss/src/handler.c:358:13: warning[deadcode.DeadStores]: Value stored to 'k' is never read
# 356| strcat(z1, "...");
# 357| strcat(z1, z + k - 11);
# 358|-> k = 24;
# 359| p = z1 + 24;
# 360| } else {
Error: COMPILER_WARNING: [#def19]
xmlrpc-c-1.59.03/lib/abyss/src/handler.c:394:25: warning[-Wformat-overflow=]: ‘%5lu’ directive writing between 5 and 14 bytes into a region of size 9
# 394 | sprintf(z3, "%5" PRIu64 " %c", fi->size, u);
# | ^~~~
xmlrpc-c-1.59.03/lib/abyss/src/handler.c: scope_hint: In function ‘HandlerDefaultBuiltin’
xmlrpc-c-1.59.03/lib/abyss/src/handler.c:394:26: note: format string is defined here
# 394 | sprintf(z3, "%5" PRIu64 " %c", fi->size, u);
xmlrpc-c-1.59.03/lib/abyss/src/handler.c:394:25: note: directive argument in the range [0, 17592186044415]
# 394 | sprintf(z3, "%5" PRIu64 " %c", fi->size, u);
# | ^~~~
/usr/include/bits/stdio2.h:30:10: note: ‘__sprintf_chk’ output between 8 and 17 bytes into a destination of size 9
# 30 | return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 31 | __glibc_objsize (__s), __fmt,
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 32 | __va_arg_pack ());
# | ~~~~~~~~~~~~~~~~~
# 392| }
# 393|
# 394|-> sprintf(z3, "%5" PRIu64 " %c", fi->size, u);
# 395|
# 396| if (xmlrpc_streq(fi->name, ".."))
Error: CLANG_WARNING: [#def20]
xmlrpc-c-1.59.03/lib/abyss/src/handler.c:658:9: warning[core.CallAndMessage]: 5th function call argument is an uninitialized value
# 656|
# 657| if (sessionP->requestInfo.method != m_head)
# 658|-> sendBody(sessionP, fileP, filesize, mediatype, start, end);
# 659| }
# 660|
Error: GCC_ANALYZER_WARNING (CWE-688): [#def21]
xmlrpc-c-1.59.03/lib/abyss/src/http.c: scope_hint: In function ‘RequestAuth’
xmlrpc-c-1.59.03/lib/abyss/src/http.c:149:13: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘valueBuffer’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_strcpy’ must be non-null
# 147| char * authHdrPtr;
# 148|
# 149|-> strcpy(valueBuffer, authValue); /* initial value */
# 150| authHdrPtr = &valueBuffer[0];
# 151|
Error: CPPCHECK_WARNING (CWE-401): [#def22]
xmlrpc-c-1.59.03/lib/abyss/src/http.c:177: error[memleak]: Memory leak: valueBuffer
# 175| free(valueBuffer);
# 176| }
# 177|-> } else
# 178| authorized = false;
# 179|
Error: CLANG_WARNING: [#def23]
xmlrpc-c-1.59.03/lib/abyss/src/server.c:540:5: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 538| const char * const name) {
# 539|
# 540|-> xmlrpc_strfree(serverP->srvP->name);
# 541|
# 542| serverP->srvP->name = strdup(name);
Error: CLANG_WARNING: [#def24]
xmlrpc-c-1.59.03/lib/abyss/src/server.c:562:9: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 560| struct _TServer * const srvP = serverP->srvP;
# 561|
# 562|-> if (srvP->logfilename)
# 563| xmlrpc_strfree(srvP->logfilename);
# 564|
Error: GCC_ANALYZER_WARNING (CWE-401): [#def25]
xmlrpc-c-1.59.03/lib/abyss/src/server.c: scope_hint: In function ‘serverRun2’
xmlrpc-c-1.59.03/lib/abyss/src/server.c:1325:1: warning[-Wanalyzer-malloc-leak]: leak of ‘outstandingConnListP’
xmlrpc-c-1.59.03/lib/abyss/src/server.c:26: included_from: Included from here.
xmlrpc-c-1.59.03/lib/abyss/src/server.c:1017:5: note: in expansion of macro ‘MALLOCVAR_NOFAIL’
xmlrpc-c-1.59.03/lib/abyss/src/server.c:1017:5: note: in expansion of macro ‘MALLOCVAR_NOFAIL’
xmlrpc-c-1.59.03/lib/abyss/src/server.c:1017:5: note: in expansion of macro ‘MALLOCVAR_NOFAIL’
# 1323| destroyOutstandingConnList(outstandingConnListP);
# 1324| }
# 1325|-> }
# 1326|
# 1327|
Error: CLANG_WARNING: [#def26]
xmlrpc-c-1.59.03/lib/abyss/src/server.c:1325:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'outstandingConnListP'
# 1323| destroyOutstandingConnList(outstandingConnListP);
# 1324| }
# 1325|-> }
# 1326|
# 1327|
Error: CLANG_WARNING: [#def27]
xmlrpc-c-1.59.03/lib/abyss/src/server.c:1613:13: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 1611| setGroups(&error);
# 1612|
# 1613|-> if (error) {
# 1614| TraceExit("Failed to set groups. %s", error);
# 1615| xmlrpc_strfree(error);
Error: CLANG_WARNING: [#def28]
xmlrpc-c-1.59.03/lib/abyss/src/session.c:257:9: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 255| unsigned int digitValue;
# 256|
# 257|-> parseHexDigit(*p, &digitValue, errorP);
# 258|
# 259| if (!*errorP) {
Error: GCC_ANALYZER_WARNING (CWE-457): [#def29]
xmlrpc-c-1.59.03/lib/abyss/src/session.c: scope_hint: In function ‘parseChunkHeader’
xmlrpc-c-1.59.03/lib/abyss/src/session.c:261:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘digitValue’
# 259| if (!*errorP) {
# 260| accum <<= 4;
# 261|-> accum += digitValue;
# 262| }
# 263| }
Error: COMPILER_WARNING (CWE-457): [#def30]
xmlrpc-c-1.59.03/lib/abyss/src/session.c:293:12: warning[-Wmaybe-uninitialized]: ‘line’ may be used uninitialized
# 293 | if (line) {
# | ^
xmlrpc-c-1.59.03/lib/abyss/src/session.c: scope_hint: In function ‘getSomeChunkedRequestBody’
xmlrpc-c-1.59.03/lib/abyss/src/session.c:283:18: note: ‘line’ was declared here
# 283 | const char * line;
# | ^~~~
# 291| xmlrpc_strfree(error);
# 292| } else {
# 293|-> if (line) {
# 294| parseChunkHeader(line, chunkSizeP, errorP);
# 295|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def31]
xmlrpc-c-1.59.03/lib/abyss/src/session.c: scope_hint: In function ‘getChunkHeader’
xmlrpc-c-1.59.03/lib/abyss/src/session.c:293:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘line’
# 291| xmlrpc_strfree(error);
# 292| } else {
# 293|-> if (line) {
# 294| parseChunkHeader(line, chunkSizeP, errorP);
# 295|
Error: CLANG_WARNING: [#def32]
xmlrpc-c-1.59.03/lib/abyss/src/session.c:293:13: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 291| xmlrpc_strfree(error);
# 292| } else {
# 293|-> if (line) {
# 294| parseChunkHeader(line, chunkSizeP, errorP);
# 295|
Error: GCC_ANALYZER_WARNING (CWE-401): [#def33]
xmlrpc-c-1.59.03/lib/abyss/src/session.c: scope_hint: In function ‘getChunkHeader’
xmlrpc-c-1.59.03/lib/abyss/src/session.c:305:1: warning[-Wanalyzer-malloc-leak]: leak of ‘line’
# 303| }
# 304| }
# 305|-> }
# 306|
# 307|
Error: CLANG_WARNING: [#def34]
xmlrpc-c-1.59.03/lib/abyss/src/session.c:305:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'line'
# 303| }
# 304| }
# 305|-> }
# 306|
# 307|
Error: COMPILER_WARNING (CWE-457): [#def35]
xmlrpc-c-1.59.03/lib/abyss/src/session.c:359:12: warning[-Wmaybe-uninitialized]: ‘gotHeader’ may be used uninitialized
# 359 | if (gotHeader) {
# | ^
xmlrpc-c-1.59.03/lib/abyss/src/session.c: scope_hint: In function ‘getSomeChunkedRequestBody’
xmlrpc-c-1.59.03/lib/abyss/src/session.c:353:10: note: ‘gotHeader’ was declared here
# 353 | bool gotHeader;
# | ^~~~~~~~~
# 357|
# 358| if (!*errorP) {
# 359|-> if (gotHeader) {
# 360| if (chunkSize == 0)
# 361| sessionP->chunkState.position = CHUNK_EOF;
Error: GCC_ANALYZER_WARNING (CWE-457): [#def36]
xmlrpc-c-1.59.03/lib/abyss/src/session.c: scope_hint: In function ‘processChunkHeaderIfThere’
xmlrpc-c-1.59.03/lib/abyss/src/session.c:359:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘gotHeader’
# 357|
# 358| if (!*errorP) {
# 359|-> if (gotHeader) {
# 360| if (chunkSize == 0)
# 361| sessionP->chunkState.position = CHUNK_EOF;
Error: CLANG_WARNING: [#def37]
xmlrpc-c-1.59.03/lib/abyss/src/session.c:359:13: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 357|
# 358| if (!*errorP) {
# 359|-> if (gotHeader) {
# 360| if (chunkSize == 0)
# 361| sessionP->chunkState.position = CHUNK_EOF;
Error: COMPILER_WARNING (CWE-457): [#def38]
xmlrpc-c-1.59.03/lib/abyss/src/session.c:360:16: warning[-Wmaybe-uninitialized]: ‘chunkSize’ may be used uninitialized
# 360 | if (chunkSize == 0)
# | ^
xmlrpc-c-1.59.03/lib/abyss/src/session.c: scope_hint: In function ‘getSomeChunkedRequestBody’
xmlrpc-c-1.59.03/lib/abyss/src/session.c:354:14: note: ‘chunkSize’ was declared here
# 354 | uint32_t chunkSize;
# | ^~~~~~~~~
# 358| if (!*errorP) {
# 359| if (gotHeader) {
# 360|-> if (chunkSize == 0)
# 361| sessionP->chunkState.position = CHUNK_EOF;
# 362| else {
Error: COMPILER_WARNING (CWE-457): [#def39]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:50:31: warning[-Wmaybe-uninitialized]: ‘httpMethod’ may be used uninitialized
# 50 | requestInfoP->method = httpMethod;
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1187:17: note: ‘httpMethod’ was declared here
# 1187 | TMethod httpMethod;
# | ^~~~~~~~~~
# 48|
# 49| requestInfoP->requestline = xmlrpc_strdupsol(requestLine);
# 50|-> requestInfoP->method = httpMethod;
# 51| requestInfoP->host = xmlrpc_strdupnull(host);
# 52| requestInfoP->port = port;
Error: COMPILER_WARNING (CWE-457): [#def40]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:51:33: warning[-Wmaybe-uninitialized]: ‘host’ may be used uninitialized
# 51 | requestInfoP->host = xmlrpc_strdupnull(host);
# | ^~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1188:22: note: ‘host’ was declared here
# 1188 | const char * host;
# | ^~~~
# 49| requestInfoP->requestline = xmlrpc_strdupsol(requestLine);
# 50| requestInfoP->method = httpMethod;
# 51|-> requestInfoP->host = xmlrpc_strdupnull(host);
# 52| requestInfoP->port = port;
# 53| requestInfoP->uri = strdup(path);
Error: COMPILER_WARNING (CWE-457): [#def41]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:52:31: warning[-Wmaybe-uninitialized]: ‘port’ may be used uninitialized
# 52 | requestInfoP->port = port;
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1191:24: note: ‘port’ was declared here
# 1191 | unsigned short port;
# | ^~~~
# 50| requestInfoP->method = httpMethod;
# 51| requestInfoP->host = xmlrpc_strdupnull(host);
# 52|-> requestInfoP->port = port;
# 53| requestInfoP->uri = strdup(path);
# 54| requestInfoP->query = xmlrpc_strdupnull(query);
Error: COMPILER_WARNING (CWE-457): [#def42]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:53:33: warning[-Wmaybe-uninitialized]: ‘path’ may be used uninitialized
# 53 | requestInfoP->uri = strdup(path);
# | ^~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1189:22: note: ‘path’ was declared here
# 1189 | const char * path;
# | ^~~~
# 51| requestInfoP->host = xmlrpc_strdupnull(host);
# 52| requestInfoP->port = port;
# 53|-> requestInfoP->uri = strdup(path);
# 54| requestInfoP->query = xmlrpc_strdupnull(query);
# 55| requestInfoP->from = NULL;
Error: CLANG_WARNING: [#def43]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:53:33: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 51| requestInfoP->host = xmlrpc_strdupnull(host);
# 52| requestInfoP->port = port;
# 53|-> requestInfoP->uri = strdup(path);
# 54| requestInfoP->query = xmlrpc_strdupnull(query);
# 55| requestInfoP->from = NULL;
Error: COMPILER_WARNING (CWE-457): [#def44]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:54:33: warning[-Wmaybe-uninitialized]: ‘query’ may be used uninitialized
# 54 | requestInfoP->query = xmlrpc_strdupnull(query);
# | ^~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1190:22: note: ‘query’ was declared here
# 1190 | const char * query;
# | ^~~~~
# 52| requestInfoP->port = port;
# 53| requestInfoP->uri = strdup(path);
# 54|-> requestInfoP->query = xmlrpc_strdupnull(query);
# 55| requestInfoP->from = NULL;
# 56| requestInfoP->useragent = NULL;
Error: CLANG_WARNING: [#def45]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:418:13: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 416| &timedOut, &error);
# 417|
# 418|-> if (error) {
# 419| xmlrpc_asprintf(errorP, "Got beginning of the request field, "
# 420| "but failed to get the rest. %s", error);
Error: CLANG_WARNING: [#def46]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:435:31: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 433|
# 434| *timedOutP = false;
# 435|-> *requestLineP = line;
# 436| }
# 437| }
Error: COMPILER_WARNING (CWE-457): [#def47]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:501:44: warning[-Wmaybe-uninitialized]: ‘digit0’ may be used uninitialized
# 501 | *unescapedP = ((digit0 << 4) | digit1);
# | ~~~~~~~~^~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘unescapeUri’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:477:18: note: ‘digit0’ was declared here
# 477 | unsigned int digit0;
# | ^~~~~~
# 499|
# 500| if (!*errorP)
# 501|-> *unescapedP = ((digit0 << 4) | digit1);
# 502| }
# 503| }
Error: CLANG_WARNING: [#def48]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:501:44: warning[core.UndefinedBinaryOperatorResult]: The left operand of '<<' is a garbage value
# 499|
# 500| if (!*errorP)
# 501|-> *unescapedP = ((digit0 << 4) | digit1);
# 502| }
# 503| }
Error: COMPILER_WARNING (CWE-457): [#def49]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:501:50: warning[-Wmaybe-uninitialized]: ‘digit1’ may be used uninitialized
# 501 | *unescapedP = ((digit0 << 4) | digit1);
# | ~~~~~~~~~~~~~~~^~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘unescapeUri’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:493:26: note: ‘digit1’ was declared here
# 493 | unsigned int digit1;
# | ^~~~~~
# 499|
# 500| if (!*errorP)
# 501|-> *unescapedP = ((digit0 << 4) | digit1);
# 502| }
# 503| }
Error: CLANG_WARNING: [#def50]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:501:50: warning[core.UndefinedBinaryOperatorResult]: The right operand of '|' is a garbage value
# 499|
# 500| if (!*errorP)
# 501|-> *unescapedP = ((digit0 << 4) | digit1);
# 502| }
# 503| }
Error: COMPILER_WARNING (CWE-457): [#def51]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:549:28: warning[-Wmaybe-uninitialized]: ‘unescaped’ may be used uninitialized
# 549 | *dst++ = unescaped;
# | ~~~~~~~^~~~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:538:22: note: ‘unescaped’ was declared here
# 538 | char unescaped;
# | ^~~~~~~~~
# 547| xmlrpc_strfree(error);
# 548| } else
# 549|-> *dst++ = unescaped;
# 550| } break;
# 551|
Error: CLANG_WARNING: [#def52]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:697:9: warning[unix.Malloc]: Potential leak of memory pointed to by 'path'
# 695| *pathP = path;
# 696|
# 697|-> free(buffer);
# 698| }
# 699| }
Error: COMPILER_WARNING (CWE-457): [#def53]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:721:12: warning[-Wmaybe-uninitialized]: ‘path’ may be used uninitialized
# 721 | if (path)
# | ^
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:777:18: note: ‘path’ was declared here
# 777 | const char * path;
# | ^~~~
# 719| *hostP = NULL;
# 720| if (!*errorP) {
# 721|-> if (path)
# 722| unescapeUri(path, pathP, errorP);
# 723| else
Error: COMPILER_WARNING (CWE-457): [#def54]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:726:16: warning[-Wmaybe-uninitialized]: ‘query’ may be used uninitialized
# 726 | if (query)
# | ^
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:776:18: note: ‘query’ was declared here
# 776 | const char * query;
# | ^~~~~
# 724| *pathP = NULL;
# 725| if (!*errorP) {
# 726|-> if (query)
# 727| unescapeUri(query, queryP, errorP);
# 728| else
Error: CLANG_WARNING: [#def55]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:731:17: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 729| *queryP = NULL;
# 730| if (*errorP)
# 731|-> xmlrpc_strfree(*pathP);
# 732| } else {
# 733| if (*hostP)
Error: CLANG_WARNING: [#def56]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:733:17: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 731| xmlrpc_strfree(*pathP);
# 732| } else {
# 733|-> if (*hostP)
# 734| xmlrpc_strfree(*hostP);
# 735| }
Error: CLANG_WARNING: [#def57]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:783:13: warning[core.NullDereference]: Array access (from variable 'requestUriNoQuery') results in an undefined pointer dereference
# 781| splitUriQuery(requestUri, &query, &requestUriNoQuery, errorP);
# 782| if (!*errorP) {
# 783|-> if (requestUriNoQuery[0] == '/') {
# 784| host = NULL;
# 785| path = xmlrpc_strdupsol(requestUriNoQuery);
Error: COMPILER_WARNING (CWE-457): [#def58]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:783:30: warning[-Wmaybe-uninitialized]: ‘requestUriNoQuery’ may be used uninitialized
# 783 | if (requestUriNoQuery[0] == '/') {
# | ~~~~~~~~~~~~~~~~~^~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:772:18: note: ‘requestUriNoQuery’ was declared here
# 772 | const char * requestUriNoQuery;
# | ^~~~~~~~~~~~~~~~~
# 781| splitUriQuery(requestUri, &query, &requestUriNoQuery, errorP);
# 782| if (!*errorP) {
# 783|-> if (requestUriNoQuery[0] == '/') {
# 784| host = NULL;
# 785| path = xmlrpc_strdupsol(requestUriNoQuery);
Error: CLANG_WARNING: [#def59]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:797:20: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 795|
# 796| if (!*errorP) {
# 797|-> *portP = port;
# 798| unescapeHostPathQuery(host, path, query,
# 799| hostP, pathP, queryP, errorP);
Error: CLANG_WARNING: [#def60]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:807:13: warning[unix.Malloc]: Potential leak of memory pointed to by 'path'
# 805| }
# 806|
# 807|-> if (query)
# 808| xmlrpc_strfree(query);
# 809| xmlrpc_strfree(requestUriNoQuery);
Error: CLANG_WARNING: [#def61]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:811:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'requestUriNoQuery'
# 809| xmlrpc_strfree(requestUriNoQuery);
# 810| }
# 811|-> }
# 812|
# 813|
Error: COMPILER_WARNING (CWE-457): [#def62]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:867:34: warning[-Wmaybe-uninitialized]: ‘requestLine’ may be used uninitialized
# 867 | char * const requestBuffer = strdup(requestLine);
# | ^~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1174:12: note: ‘requestLine’ was declared here
# 1174 | char * requestLine; /* In connection's internal buffer */
# | ^~~~~~~~~~~
# 865| const char ** const errorP) {
# 866|
# 867|-> char * const requestBuffer = strdup(requestLine);
# 868|
# 869| const char * httpMethodName;
Error: CLANG_WARNING: [#def63]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:906:21: warning[unix.Malloc]: Potential leak of memory pointed to by 'host'
# 904|
# 905| if (error) {
# 906|-> xmlrpc_asprintf(errorP, "Invalid URI ('%s'). %s",
# 907| requestUri, error);
# 908| xmlrpc_strfree(error);
Error: CLANG_WARNING: [#def64]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:938:25: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 936| }
# 937| if (*errorP) {
# 938|-> xmlrpc_strfree(host);
# 939| xmlrpc_strfree(path);
# 940| xmlrpc_strfree(query);
Error: CLANG_WARNING: [#def65]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:939:25: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 937| if (*errorP) {
# 938| xmlrpc_strfree(host);
# 939|-> xmlrpc_strfree(path);
# 940| xmlrpc_strfree(query);
# 941| }
Error: CLANG_WARNING: [#def66]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:942:28: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 940| xmlrpc_strfree(query);
# 941| }
# 942|-> *hostP = host;
# 943| *portP = port;
# 944| *pathP = path;
Error: CLANG_WARNING: [#def67]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:944:28: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 942| *hostP = host;
# 943| *portP = port;
# 944|-> *pathP = path;
# 945| *queryP = query;
# 946| }
Error: CLANG_WARNING: [#def68]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1110:13: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 1108| readField(sessionP->connP, deadline, &endOfHeader, &field,
# 1109| &timedOut, &error);
# 1110|-> if (error) {
# 1111| xmlrpc_asprintf(errorP, "Failed to read header from "
# 1112| "client connection. %s", error);
Error: CLANG_WARNING: [#def69]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1124:19: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 1122| char * fieldName;
# 1123|
# 1124|-> p = &field[0];
# 1125| getFieldNameToken(&p, &fieldName, errorP, httpErrorCodeP);
# 1126| if (!*errorP) {
Error: COMPILER_WARNING (CWE-457): [#def70]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c: scope_hint: In function ‘SessionReadRequest’
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1182:15: warning[-Wmaybe-uninitialized]: ‘timedOut’ may be used uninitialized
# 1182 | } else if (timedOut) {
# | ^
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1172:10: note: ‘timedOut’ was declared here
# 1172 | bool timedOut;
# | ^~~~~~~~
# 1180| *httpErrorCodeP = 500; /* Internal error */
# 1181| xmlrpc_strfree(error);
# 1182|-> } else if (timedOut) {
# 1183| xmlrpc_asprintf(errorP, "Timed out waiting for client to send "
# 1184| "the request field");
Error: CLANG_WARNING: [#def71]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1182:16: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 1180| *httpErrorCodeP = 500; /* Internal error */
# 1181| xmlrpc_strfree(error);
# 1182|-> } else if (timedOut) {
# 1183| xmlrpc_asprintf(errorP, "Timed out waiting for client to send "
# 1184| "the request field");
Error: CLANG_WARNING: [#def72]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1200:13: warning[unix.Malloc]: Potential leak of memory pointed to by 'host'
# 1198|
# 1199| if (error) {
# 1200|-> xmlrpc_asprintf(errorP, "Unable to parse the request header "
# 1201| "'%s'. %s", requestLine, error);
# 1202| *httpErrorCodeP = 400; /* Bad request */
Error: CLANG_WARNING: [#def73]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1200:13: warning[unix.Malloc]: Potential leak of memory pointed to by 'path'
# 1198|
# 1199| if (error) {
# 1200|-> xmlrpc_asprintf(errorP, "Unable to parse the request header "
# 1201| "'%s'. %s", requestLine, error);
# 1202| *httpErrorCodeP = 400; /* Bad request */
Error: CLANG_WARNING: [#def74]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1205:13: warning[core.CallAndMessage]: 4th function call argument is an uninitialized value
# 1203| xmlrpc_strfree(error);
# 1204| } else {
# 1205|-> initRequestInfo(&sessionP->requestInfo, sessionP->version,
# 1206| requestLine,
# 1207| httpMethod, host, port, path, query);
Error: CLANG_WARNING: [#def75]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1205:13: warning[core.CallAndMessage]: 5th function call argument is an uninitialized value
# 1203| xmlrpc_strfree(error);
# 1204| } else {
# 1205|-> initRequestInfo(&sessionP->requestInfo, sessionP->version,
# 1206| requestLine,
# 1207| httpMethod, host, port, path, query);
Error: COMPILER_WARNING (CWE-457): [#def76]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1209:16: warning[-Wmaybe-uninitialized]: ‘moreFields’ may be used uninitialized
# 1209 | if (moreFields) {
# | ^
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1192:14: note: ‘moreFields’ was declared here
# 1192 | bool moreFields;
# | ^~~~~~~~~~
# 1207| httpMethod, host, port, path, query);
# 1208|
# 1209|-> if (moreFields) {
# 1210| readAndProcessHeaderFields(sessionP, deadline,
# 1211| errorP, httpErrorCodeP);
Error: CLANG_WARNING: [#def77]
xmlrpc-c-1.59.03/lib/abyss/src/sessionReadRequest.c:1209:17: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 1207| httpMethod, host, port, path, query);
# 1208|
# 1209|-> if (moreFields) {
# 1210| readAndProcessHeaderFields(sessionP, deadline,
# 1211| errorP, httpErrorCodeP);
Error: COMPILER_WARNING (CWE-477): [#def78]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c: scope_hint: In function ‘sslErrorMsg’
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:71:9: warning[-Wdeprecated-declarations]: ‘ERR_get_error_line’ is deprecated: Since OpenSSL 3.0
# 71 | int const errCode = ERR_get_error_line(&sourceFileName, &lineNum);
# | ^~~
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:26: included_from: Included from here.
/usr/include/openssl/err.h:423:15: note: declared here
# 423 | unsigned long ERR_get_error_line(const char **file, int *line);
# | ^~~~~~~~~~~~~~~~~~
# 69| int lineNum;
# 70|
# 71|-> int const errCode = ERR_get_error_line(&sourceFileName, &lineNum);
# 72|
# 73| if (errCode == 0)
Error: GCC_ANALYZER_WARNING (CWE-457): [#def79]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c: scope_hint: In function ‘createChannelFromAcceptedConn’
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:658:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sslP’
# 656| struct abyss_openSsl_chaninfo * channelInfoP;
# 657|
# 658|-> makeChannelInfo(&channelInfoP, sslP, errorP);
# 659| if (!*errorP) {
# 660| bool const userSuppliedFalse = false;
Error: COMPILER_WARNING (CWE-457): [#def80]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:658:13: warning[-Wmaybe-uninitialized]: ‘sslP’ may be used uninitialized
# 658 | makeChannelInfo(&channelInfoP, sslP, errorP);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c: scope_hint: In function ‘chanSwitchAccept’
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:646:15: note: ‘sslP’ was declared here
# 646 | SSL * sslP;
# | ^~~~
# 656| struct abyss_openSsl_chaninfo * channelInfoP;
# 657|
# 658|-> makeChannelInfo(&channelInfoP, sslP, errorP);
# 659| if (!*errorP) {
# 660| bool const userSuppliedFalse = false;
Error: CLANG_WARNING: [#def81]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:658:13: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value
# 656| struct abyss_openSsl_chaninfo * channelInfoP;
# 657|
# 658|-> makeChannelInfo(&channelInfoP, sslP, errorP);
# 659| if (!*errorP) {
# 660| bool const userSuppliedFalse = false;
Error: GCC_ANALYZER_WARNING (CWE-457): [#def82]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:666:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘channelInfoP’
# 664|
# 665| if (*errorP)
# 666|-> free(channelInfoP);
# 667| else
# 668| *channelInfoPP = channelInfoP;
Error: CLANG_WARNING: [#def83]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:666:21: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 664|
# 665| if (*errorP)
# 666|-> free(channelInfoP);
# 667| else
# 668| *channelInfoPP = channelInfoP;
Error: GCC_ANALYZER_WARNING (CWE-457): [#def84]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:668:36: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘channelInfoP’
# 666| free(channelInfoP);
# 667| else
# 668|-> *channelInfoPP = channelInfoP;
# 669| }
# 670| if (*errorP)
Error: CLANG_WARNING: [#def85]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:668:36: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 666| free(channelInfoP);
# 667| else
# 668|-> *channelInfoPP = channelInfoP;
# 669| }
# 670| if (*errorP)
Error: GCC_ANALYZER_WARNING (CWE-401): [#def86]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:678:1: warning[-Wanalyzer-malloc-leak]: leak of ‘channelOpenSslP’
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:32: included_from: Included from here.
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:641:5: note: in expansion of macro ‘MALLOCVAR’
# 676| free(channelOpenSslP);
# 677| }
# 678|-> }
# 679|
# 680|
Error: CLANG_WARNING: [#def87]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:678:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'channelOpenSslP'
# 676| free(channelOpenSslP);
# 677| }
# 678|-> }
# 679|
# 680|
Error: GCC_ANALYZER_WARNING (CWE-775): [#def88]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c: scope_hint: In function ‘chanSwitchAccept’
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:721:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘accept(*chanSwitchOpenSslP.listenFd, & peerAddr, & peerAddrLen)’
# 719| const char * error;
# 720|
# 721|-> createChannelFromAcceptedConn(
# 722| acceptedFd, chanSwitchOpenSslP->sslCtxP,
# 723| &channelP, channelInfoPP, &error);
Error: COMPILER_WARNING (CWE-252): [#def89]
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c: scope_hint: In function ‘chanSwitchInterrupt’
xmlrpc-c-1.59.03/lib/abyss/src/socket_openssl.c:762:5: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
# 762 | write(chanSwitchOpenSslP->interruptPipe.interruptorFd,
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 763 | &zero, sizeof(zero));
# | ~~~~~~~~~~~~~~~~~~~~
# 760| unsigned char const zero[1] = {0u};
# 761|
# 762|-> write(chanSwitchOpenSslP->interruptPipe.interruptorFd,
# 763| &zero, sizeof(zero));
# 764| }
Error: GCC_ANALYZER_WARNING (CWE-775): [#def90]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c: scope_hint: In function ‘chanSwitchAccept’
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:354:35: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘accept(*listenSocketP.fd, & peerAddr, & peerAddrLen)’
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:501:9: note: in expansion of macro ‘MALLOCVAR’
# 352| xmlrpc_asprintf(errorP, "Unable to allocate memory");
# 353| else {
# 354|-> channelInfoP->peerAddrLen = peerAddrLen;
# 355| channelInfoP->peerAddr = peerAddr;
# 356|
Error: GCC_ANALYZER_WARNING (CWE-775): [#def91]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:498:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘accept(*listenSocketP.fd, & peerAddr, & peerAddrLen)’
# 496|
# 497| makeChannelInfo(&channelInfoP, peerAddr, sizeof(peerAddr), errorP);
# 498|-> if (!*errorP) {
# 499| struct socketUnix * acceptedSocketP;
# 500|
Error: GCC_ANALYZER_WARNING (CWE-401): [#def92]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c: scope_hint: In function ‘createChannelForAccept’
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:533:1: warning[-Wanalyzer-malloc-leak]: leak of ‘channelInfoP’
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:34: included_from: Included from here.
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:349:5: note: in expansion of macro ‘MALLOCVAR’
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:501:9: note: in expansion of macro ‘MALLOCVAR’
# 531| free(channelInfoP);
# 532| }
# 533|-> }
# 534|
# 535|
Error: CLANG_WARNING: [#def93]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:533:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'channelInfoP'
# 531| free(channelInfoP);
# 532| }
# 533|-> }
# 534|
# 535|
Error: COMPILER_WARNING (CWE-252): [#def94]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c: scope_hint: In function ‘chanSwitchInterrupt’
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:612:5: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
# 612 | write(listenSocketP->interruptPipe.interruptorFd, &zero, sizeof(zero));
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 610| unsigned char const zero[1] = {0u};
# 611|
# 612|-> write(listenSocketP->interruptPipe.interruptorFd, &zero, sizeof(zero));
# 613| }
# 614|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def95]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c: scope_hint: In function ‘SocketUnixCreateFd’
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:858:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘channelInfoP’
# 856| ChannelUnixCreateFd(fd, &channelP, &channelInfoP, &error);
# 857| if (!error)
# 858|-> SocketCreateChannel(channelP, channelInfoP, &socketP);
# 859| } else {
# 860| TChanSwitch * chanSwitchP;
Error: GCC_ANALYZER_WARNING (CWE-457): [#def96]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:858:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘channelP’
# 856| ChannelUnixCreateFd(fd, &channelP, &channelInfoP, &error);
# 857| if (!error)
# 858|-> SocketCreateChannel(channelP, channelInfoP, &socketP);
# 859| } else {
# 860| TChanSwitch * chanSwitchP;
Error: CLANG_WARNING: [#def97]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:858:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 856| ChannelUnixCreateFd(fd, &channelP, &channelInfoP, &error);
# 857| if (!error)
# 858|-> SocketCreateChannel(channelP, channelInfoP, &socketP);
# 859| } else {
# 860| TChanSwitch * chanSwitchP;
Error: GCC_ANALYZER_WARNING (CWE-457): [#def98]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:863:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘chanSwitchP’
# 861| ChanSwitchUnixCreateFd(fd, &chanSwitchP, &error);
# 862| if (!error)
# 863|-> SocketCreateChanSwitch(chanSwitchP, &socketP);
# 864| }
# 865| if (error) {
Error: CLANG_WARNING: [#def99]
xmlrpc-c-1.59.03/lib/abyss/src/socket_unix.c:863:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 861| ChanSwitchUnixCreateFd(fd, &chanSwitchP, &error);
# 862| if (!error)
# 863|-> SocketCreateChanSwitch(chanSwitchP, &socketP);
# 864| }
# 865| if (error) {
Error: COMPILER_WARNING (CWE-252): [#def100]
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c: scope_hint: In function ‘sockutil_interruptPipeInterrupt’
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:80:5: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
# 80 | write(interruptPipe.interruptorFd, &zero, sizeof(zero));
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 78| unsigned char const zero[1] = {0u};
# 79|
# 80|-> write(interruptPipe.interruptorFd, &zero, sizeof(zero));
# 81| }
# 82|
Error: CLANG_WARNING: [#def101]
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:153:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'sockName'
# 151| free(sockName);
# 152| }
# 153|-> }
# 154|
# 155|
Error: CLANG_WARNING: [#def102]
xmlrpc-c-1.59.03/lib/abyss/src/sockutil.c:197:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'peerName'
# 195| free(peerName);
# 196| }
# 197|-> }
# 198|
# 199|
Error: COMPILER_WARNING (CWE-477): [#def103]
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c: scope_hint: In function ‘setupCurlSession’
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c:727:13: warning[-Wdeprecated-declarations]: ‘CURLOPT_PROGRESSFUNCTION’ is deprecated: since 7.32.0. Use CURLOPT_XFERINFOFUNCTION
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c:19: included_from: Included from here.
/usr/include/curl/curl.h:1291:3: note: declared here
# 725| if (transP->progress) {
# 726| curl_easy_setopt(curlSessionP, CURLOPT_NOPROGRESS, 0);
# 727|-> curl_easy_setopt(curlSessionP, CURLOPT_PROGRESSFUNCTION,
# 728| curlProgress);
# 729| curl_easy_setopt(curlSessionP, CURLOPT_PROGRESSDATA, transP);
Error: COMPILER_WARNING (CWE-477): [#def104]
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c:778:13: warning[-Wdeprecated-declarations]: ‘CURLOPT_RANDOM_FILE’ is deprecated: since 7.84.0. Serves no purpose anymore
/usr/include/curl/curl.h:1360:3: note: declared here
# 776| curlSetupP->caPath);
# 777| if (curlSetupP->randomFile)
# 778|-> curl_easy_setopt(curlSessionP, CURLOPT_RANDOM_FILE,
# 779| curlSetupP->randomFile);
# 780| if (curlSetupP->egdSocket)
Error: COMPILER_WARNING (CWE-477): [#def105]
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c:781:13: warning[-Wdeprecated-declarations]: ‘CURLOPT_EGDSOCKET’ is deprecated: since 7.84.0. Serves no purpose anymore
/usr/include/curl/curl.h:1364:3: note: declared here
# 779| curlSetupP->randomFile);
# 780| if (curlSetupP->egdSocket)
# 781|-> curl_easy_setopt(curlSessionP, CURLOPT_EGDSOCKET,
# 782| curlSetupP->egdSocket);
# 783| if (curlSetupP->sslCipherList)
Error: CLANG_WARNING: [#def106]
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c:860:10: warning[unix.Malloc]: Potential leak of memory pointed to by 'authHdrValue'
# 858| }
# 859|
# 860|-> if (!envP->fault_occurred)
# 861| setupKeepalive(curlSetupP, curlSessionP, envP);
# 862|
Error: GCC_ANALYZER_WARNING (CWE-401): [#def107]
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c:863:1: warning[-Wanalyzer-malloc-leak]: leak of ‘authHdrValue’
/usr/include/curl/curl.h:3227: included_from: Included from here.
xmlrpc-c-1.59.03/lib/curl_transport/curltransaction.c:719:26: note: in expansion of macro ‘XMLRPC_MEMBLOCK_CONTENTS’
# 861| setupKeepalive(curlSetupP, curlSessionP, envP);
# 862|
# 863|-> }
# 864|
# 865|
Error: COMPILER_WARNING (CWE-457): [#def108]
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:402:56: warning[-Wmaybe-uninitialized]: ‘selectTimeoutMillisec’ may be used uninitialized
# 402 | retval.tv_nsec = (uint32_t)((selectTimeoutMillisec % 1000) * million);
# | ~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c: scope_hint: In function ‘waitForWork’
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:378:18: note: ‘selectTimeoutMillisec’ was declared here
# 378 | unsigned int selectTimeoutMillisec;
# | ^~~~~~~~~~~~~~~~~~~~~
# 400| }
# 401| retval.tv_sec = selectTimeoutMillisec / 1000;
# 402|-> retval.tv_nsec = (uint32_t)((selectTimeoutMillisec % 1000) * million);
# 403|
# 404| return retval;
Error: GCC_ANALYZER_WARNING (CWE-476): [#def109]
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c: scope_hint: In function ‘startRpc’
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:1269:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rpcP’
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:73: included_from: Included from here.
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:1295:5: note: in expansion of macro ‘MALLOCVAR’
# 1267| rpc * const rpcP) {
# 1268|
# 1269|-> curlMulti_addHandle(envP,
# 1270| rpcP->transportP->asyncCurlMultiP,
# 1271| curlTransaction_curlSession(rpcP->curlTransactionP));
Error: GCC_ANALYZER_WARNING (CWE-476): [#def110]
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:1357:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rpcP’
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c: scope_hint: In function ‘call’
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c: scope_hint: In function ‘call’
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:1295:5: note: in expansion of macro ‘MALLOCVAR’
# 1355| int * const interruptP) {
# 1356|
# 1357|-> performCurlTransaction(envP, rpcP->curlTransactionP, curlMultiP,
# 1358| interruptP);
# 1359| }
Error: CPPCHECK_WARNING (CWE-457): [#def111]
xmlrpc-c-1.59.03/lib/curl_transport/xmlrpc_curl_transport.c:1555: warning[uninitvar]: Uninitialized variable: waitTimeoutTime
# 1553|
# 1554| finishCurlMulti(&env, clientTransportP->asyncCurlMultiP,
# 1555|-> timeoutType, waitTimeoutTime,
# 1556| clientTransportP->interruptP);
# 1557|
Error: GCC_ANALYZER_WARNING (CWE-476): [#def112]
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c: scope_hint: In function ‘doProlog’
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:332:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:3625:16: note: in expansion of macro ‘externalEntityRefHandler’
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c: scope_hint: In function ‘doProlog’
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:3621:16: note: in expansion of macro ‘externalEntityRefHandler’
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:3625:16: note: in expansion of macro ‘externalEntityRefHandler’
# 330| #define endNamespaceDeclHandler (((Parser *)parser)->m_endNamespaceDeclHandler)
# 331| #define notStandaloneHandler (((Parser *)parser)->m_notStandaloneHandler)
# 332|-> #define externalEntityRefHandler (((Parser *)parser)->m_externalEntityRefHandler)
# 333| #define externalEntityRefHandlerArg (((Parser *)parser)->m_externalEntityRefHandlerArg)
# 334| #define unknownEncodingHandler (((Parser *)parser)->m_unknownEncodingHandler)
Error: COMPILER_WARNING (CWE-457): [#def113]
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c: scope_hint: In function ‘poolGrow’
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:486:8: warning[-Wmaybe-uninitialized]: ‘wasGrownFromFreeBlocks’ may be used uninitialized
# 486 | if (wasGrownFromFreeBlocks)
# | ^
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:482:10: note: ‘wasGrownFromFreeBlocks’ was declared here
# 482 | bool wasGrownFromFreeBlocks;
# | ^~~~~~~~~~~~~~~~~~~~~~
# 484| poolGrowFromFreeBlocks(poolP, &wasGrownFromFreeBlocks);
# 485|
# 486|-> if (wasGrownFromFreeBlocks)
# 487| *errorP = NULL;
# 488| else {
Error: CPPCHECK_WARNING (CWE-457): [#def114]
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:1579: error[uninitvar]: Uninitialized variable: &version
# 1577| next,
# 1578| &parserP->m_eventPtr,
# 1579|-> &version,
# 1580| &encodingName,
# 1581| &newEncodingP,
Error: CLANG_WARNING: [#def115]
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:2748:27: warning[unix.Malloc]: Potential leak of memory pointed to by 'tag'
# 2746| tag->buf = malloc(INIT_TAG_BUF_SIZE);
# 2747| if (!tag->buf) {
# 2748|-> *errorCodeP = XML_ERROR_NO_MEMORY;
# 2749| return;
# 2750| }
Error: CPPCHECK_WARNING (CWE-401): [#def116]
xmlrpc-c-1.59.03/lib/expat/xmlparse/xmlparse.c:2749: error[memleak]: Memory leak: tag
# 2747| if (!tag->buf) {
# 2748| *errorCodeP = XML_ERROR_NO_MEMORY;
# 2749|-> return;
# 2750| }
# 2751| tag->bufEnd = tag->buf + INIT_TAG_BUF_SIZE;
Error: CLANG_WARNING: [#def117]
xmlrpc-c-1.59.03/lib/expat/xmltok/xmltok.c:1252:17: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 1250| }
# 1251| do {
# 1252|-> *(*toP)++ = *utf8++;
# 1253| } while (--n != 0);
# 1254| }
Error: COMPILER_WARNING (CWE-457): [#def118]
xmlrpc-c-1.59.03/lib/expat/xmltok/xmltok.c:11: included_from: Included from here.
xmlrpc-c-1.59.03/lib/expat/xmltok/xmltok_ns.c: scope_hint: In function ‘findEncodingNS’
xmlrpc-c-1.59.03/lib/expat/xmltok/xmltok.h:262:10: warning[-Wmaybe-uninitialized]: ‘buf’ may be used uninitialized
# 262 | (((enc)->utf8Convert)(enc, fromP, fromLim, toP, toLim))
# | ~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/expat/xmltok/xmltok.h:262:10: note: by argument 5 of type ‘const char *’ to ‘void Utf8Converter (const struct ENCODING *, const char * *, const char *, char * *, const char *)’
xmlrpc-c-1.59.03/lib/expat/xmltok/xmltok.c:1554: included_from: Included from here.
xmlrpc-c-1.59.03/lib/expat/xmltok/xmltok_ns.c:81:8: note: ‘buf’ declared here
# 81 | char buf[ENCODING_MAX];
# | ^~~
# 260|
# 261| #define XmlUtf8Convert(enc, fromP, fromLim, toP, toLim) \
# 262|-> (((enc)->utf8Convert)(enc, fromP, fromLim, toP, toLim))
# 263|
# 264| #define XmlUtf16Convert(enc, fromP, fromLim, toP, toLim) \
Error: COMPILER_WARNING (CWE-457): [#def119]
xmlrpc-c-1.59.03/lib/libutil++/base64.cpp:40:38: warning[-Wmaybe-uninitialized]: ‘buffer.buffer’ may be used uninitialized
# 40 | this->buffer = (this->buffer << 8) | newBits;
# | ~~~~~~~~~~~~~~^~~~~
xmlrpc-c-1.59.03/lib/libutil++/base64.cpp: scope_hint: In function ‘xmlrpc_c::base64FromBytes[abi:cxx11](std::vector<unsigned char, std::allocator<unsigned char> > const&, xmlrpc_c::newlineCtl)’
xmlrpc-c-1.59.03/lib/libutil++/base64.cpp:116:15: note: ‘buffer.buffer’ was declared here
# 116 | bitBuffer buffer;
# | ^~~~~~
# 38| // Shift in 8 bits to the right end of the buffer
# 39|
# 40|-> this->buffer = (this->buffer << 8) | newBits;
# 41| this->bitsInBuffer += 8;
# 42|
Error: COMPILER_WARNING (CWE-457): [#def120]
xmlrpc-c-1.59.03/lib/libutil++/base64.cpp:50:38: warning[-Wmaybe-uninitialized]: ‘buffer.buffer’ may be used uninitialized
# 50 | this->buffer = (this->buffer << 6) | newBits;
# | ~~~~~~~~~~~~~~^~~~~
xmlrpc-c-1.59.03/lib/libutil++/base64.cpp: scope_hint: In function ‘xmlrpc_c::bytesFromBase64(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)’
xmlrpc-c-1.59.03/lib/libutil++/base64.cpp:224:15: note: ‘buffer.buffer’ was declared here
# 224 | bitBuffer buffer;
# | ^~~~~~
# 48| // Shift in 6 bits to the right end of the buffer
# 49|
# 50|-> this->buffer = (this->buffer << 6) | newBits;
# 51| this->bitsInBuffer += 6;
# 52|
Error: CLANG_WARNING: [#def121]
xmlrpc-c-1.59.03/lib/libutil++/base64.cpp:50:38: warning[core.UndefinedBinaryOperatorResult]: The left operand of '<<' is a garbage value
# 48| // Shift in 6 bits to the right end of the buffer
# 49|
# 50|-> this->buffer = (this->buffer << 6) | newBits;
# 51| this->bitsInBuffer += 6;
# 52|
Error: CPPCHECK_WARNING (CWE-664): [#def122]
xmlrpc-c-1.59.03/lib/libutil++/girerr.cpp:23: error[va_end_missing]: va_list 'varargs' was opened but not closed by va_end().
# 21| xmlrpc_strfree(value);
# 22|
# 23|-> throw(girerr::error(valueString));
# 24|
# 25| va_end(varargs);
Error: CPPCHECK_WARNING (CWE-401): [#def123]
xmlrpc-c-1.59.03/lib/libutil/asprintf.c:166: error[memleak]: Memory leak: retvalOrNull
# 164| retvalOrNull = strdup(string);
# 165|
# 166|-> return retvalOrNull ? retvalOrNull : xmlrpc_strsol;
# 167| }
# 168|
Error: GCC_ANALYZER_WARNING (CWE-126): [#def124]
xmlrpc-c-1.59.03/lib/libutil/make_printable.c: scope_hint: In function ‘xmlrpc_makePrintable_lp’
xmlrpc-c-1.59.03/lib/libutil/make_printable.c:37:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
xmlrpc-c-1.59.03/lib/libutil/make_printable.c:7: included_from: Included from here.
xmlrpc-c-1.59.03/lib/libutil/make_printable.c:37:29: note: read of 1 byte from after the end of ‘buffer’
xmlrpc-c-1.59.03/lib/libutil/make_printable.c:37:29: note: valid subscripts for ‘buffer’ are ‘[0]’ to ‘[1]’
# └─────────────────────────────┘
# ^
# 35|
# 36| if (0) {
# 37|-> } else if (input[inputCursor] == '\\') {
# 38| output[outputCursor++] = '\\';
# 39| output[outputCursor++] = '\\';
Error: CLANG_WARNING: [#def125]
xmlrpc-c-1.59.03/lib/libutil/make_printable.c:37:43: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value due to array index out of bounds
# 35|
# 36| if (0) {
# 37|-> } else if (input[inputCursor] == '\\') {
# 38| output[outputCursor++] = '\\';
# 39| output[outputCursor++] = '\\';
Error: CPPCHECK_WARNING (CWE-457): [#def126]
xmlrpc-c-1.59.03/lib/libutil/memblock.c:89: warning[uninitvar]: Uninitialized variables: blockP.poolP, blockP.size, blockP.allocated, blockP.blockP
# 87| }
# 88| }
# 89|-> return blockP;
# 90| }
# 91|
Error: CLANG_WARNING: [#def127]
xmlrpc-c-1.59.03/lib/libutil/memblock.c:89:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 87| }
# 88| }
# 89|-> return blockP;
# 90| }
# 91|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def128]
xmlrpc-c-1.59.03/lib/libutil/memblock.c: scope_hint: In function ‘xmlrpc_mem_block_new_pool’
xmlrpc-c-1.59.03/lib/libutil/memblock.c:89:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘blockP’
# 87| }
# 88| }
# 89|-> return blockP;
# 90| }
# 91|
Error: COMPILER_WARNING (CWE-457): [#def129]
xmlrpc-c-1.59.03/lib/libutil/memblock.c: scope_hint: In function ‘xmlrpc_mem_block_new_pool’
xmlrpc-c-1.59.03/lib/libutil/memblock.c:89:12: warning[-Wmaybe-uninitialized]: ‘blockP’ may be used uninitialized
# 89 | return blockP;
# | ^~~~~~
xmlrpc-c-1.59.03/lib/libutil/memblock.c:51:24: note: ‘blockP’ was declared here
# 51 | xmlrpc_mem_block * blockP;
# | ^~~~~~
# 87| }
# 88| }
# 89|-> return blockP;
# 90| }
# 91|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def130]
xmlrpc-c-1.59.03/lib/libutil/memblock.c: scope_hint: In function ‘xmlrpc_mem_block_new’
xmlrpc-c-1.59.03/lib/libutil/memblock.c:100:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘blockP’
xmlrpc-c-1.59.03/lib/libutil/memblock.c: scope_hint: In function ‘xmlrpc_mem_block_new’
# 98| Create an xmlrpc_mem_block of size 'size', not in any pool
# 99| -----------------------------------------------------------------------------*/
# 100|-> return xmlrpc_mem_block_new_pool(envP, size, NULL);
# 101| }
# 102|
Error: COMPILER_WARNING (CWE-457): [#def131]
xmlrpc-c-1.59.03/lib/libutil/memblock.c: scope_hint: In function ‘xmlrpc_mem_block_new’
xmlrpc-c-1.59.03/lib/libutil/memblock.c:100:12: warning[-Wmaybe-uninitialized]: ‘blockP’ may be used uninitialized
# 100 | return xmlrpc_mem_block_new_pool(envP, size, NULL);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/libutil/memblock.c:51:24: note: ‘blockP’ was declared here
# 51 | xmlrpc_mem_block * blockP;
# | ^~~~~~
# 98| Create an xmlrpc_mem_block of size 'size', not in any pool
# 99| -----------------------------------------------------------------------------*/
# 100|-> return xmlrpc_mem_block_new_pool(envP, size, NULL);
# 101| }
# 102|
Error: CLANG_WARNING: [#def132]
xmlrpc-c-1.59.03/lib/libutil/mempool.c:44:5: warning[unix.Malloc]: Use of memory after it is freed
# 42| free(poolP);
# 43| }
# 44|-> return poolP;
# 45| }
# 46|
Error: COMPILER_WARNING: [#def133]
xmlrpc-c-1.59.03/lib/libutil/string_number.c: scope_hint: In function ‘xmlrpc_parse_int64’
xmlrpc-c-1.59.03/lib/libutil/string_number.c:35:29: warning[-Wformat=]: format ‘%lld’ expects argument of type ‘long long int’, but argument 3 has type ‘long int’
# 35 | xmlrpc_faultf(envP, "Number cannot be represented in 64 bits. "
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:23: included_from: Included from here.
xmlrpc-c-1.59.03/include/xmlrpc-c/base.h:11: included_from: Included from here.
xmlrpc-c-1.59.03/lib/libutil/string_number.c:12: included_from: Included from here.
xmlrpc-c-1.59.03/include/xmlrpc-c/config.h:40:28: note: format string is defined here
# 40 | #define XMLRPC_PRId64 "lld"
# 33|
# 34| if (errno == ERANGE)
# 35|-> xmlrpc_faultf(envP, "Number cannot be represented in 64 bits. "
# 36| "Must be in the range "
# 37| "[%" XMLRPC_PRId64 " - %" XMLRPC_PRId64 "]",
Error: COMPILER_WARNING: [#def134]
xmlrpc-c-1.59.03/lib/libutil/string_number.c:35:29: warning[-Wformat=]: format ‘%lld’ expects argument of type ‘long long int’, but argument 4 has type ‘long int’
# 35 | xmlrpc_faultf(envP, "Number cannot be represented in 64 bits. "
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/include/xmlrpc-c/config.h:40:28: note: format string is defined here
# 40 | #define XMLRPC_PRId64 "lld"
# 33|
# 34| if (errno == ERANGE)
# 35|-> xmlrpc_faultf(envP, "Number cannot be represented in 64 bits. "
# 36| "Must be in the range "
# 37| "[%" XMLRPC_PRId64 " - %" XMLRPC_PRId64 "]",
Error: COMPILER_WARNING (CWE-457): [#def135]
xmlrpc-c-1.59.03/lib/libutil/utf8.c:158:9: warning[-Wmaybe-uninitialized]: ‘wc’ may be used uninitialized
# 158 | xmlrpc_env_set_fault_formatted(
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 159 | envP, XMLRPC_INVALID_UTF8_ERROR,
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 160 | "Xmlrpc-c is not capable of handling UTF16 character encodings "
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 161 | "longer than 16 bits, which means you can't have a code point "
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 162 | "> U+FFFD. "
# | ~~~~~~~~~~~~~
# 163 | "This string contains 0x%04x",
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 164 | (unsigned)wc);
# | ~~~~~~~~~~~~~
xmlrpc-c-1.59.03/lib/libutil/utf8.c: scope_hint: In function ‘decodeUtf8’
xmlrpc-c-1.59.03/lib/libutil/utf8.c:192:13: note: ‘wc’ was declared here
# 192 | wchar_t wc;
# | ^~
# 156| -----------------------------------------------------------------------------*/
# 157| if (wc > UCS2_MAX_LEGAL_CHARACTER)
# 158|-> xmlrpc_env_set_fault_formatted(
# 159| envP, XMLRPC_INVALID_UTF8_ERROR,
# 160| "Xmlrpc-c is not capable of handling UTF16 character encodings "
Error: GCC_ANALYZER_WARNING (CWE-457): [#def136]
xmlrpc-c-1.59.03/lib/libutil/utf8.c: scope_hint: In function ‘decodeMultibyte’
xmlrpc-c-1.59.03/lib/libutil/utf8.c:243:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘wc’
# 241|
# 242| if (!envP->fault_occurred)
# 243|-> validateUtf16(envP, wc);
# 244|
# 245| if (!envP->fault_occurred)
Error: CLANG_WARNING: [#def137]
xmlrpc-c-1.59.03/lib/libutil/utf8.c:243:9: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value
# 241|
# 242| if (!envP->fault_occurred)
# 243|-> validateUtf16(envP, wc);
# 244|
# 245| if (!envP->fault_occurred)
Error: GCC_ANALYZER_WARNING (CWE-457): [#def138]
xmlrpc-c-1.59.03/lib/libutil/utf8.c:251:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘wc’
# 249| "Overlong UTF-8 sequence not allowed");
# 250|
# 251|-> *wcP = wc;
# 252| }
# 253|
Error: CLANG_WARNING: [#def139]
xmlrpc-c-1.59.03/lib/libutil/utf8.c:251:10: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 249| "Overlong UTF-8 sequence not allowed");
# 250|
# 251|-> *wcP = wc;
# 252| }
# 253|
Error: COMPILER_WARNING (CWE-457): [#def140]
xmlrpc-c-1.59.03/lib/libutil/utf8.c:325:34: warning[-Wmaybe-uninitialized]: ‘wc’ may be used uninitialized
# 325 | ioBuff[outPos++] = wc;
# | ~~~~~~~~~~~~~~~~~^~~~
xmlrpc-c-1.59.03/lib/libutil/utf8.c:288:17: note: ‘wc’ was declared here
# 288 | wchar_t wc;
# | ^~
# 323| /* If we have a buffer, write our character to it. */
# 324| if (ioBuff)
# 325|-> ioBuff[outPos++] = wc;
# 326| }
# 327| }
Error: GCC_ANALYZER_WARNING (CWE-122): [#def141]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:57:30: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:57:30: note: write of 7 bytes to beyond the end of the region
# 55|
# 56| for (i = 0; i < numOptions; ++i) {
# 57|-> longopts[i].name = optionDescArray[i].name;
# 58| /* If the option takes a value, we say it is optional even
# 59| though it never is. That's because if we say it is
Error: GCC_ANALYZER_WARNING (CWE-122): [#def142]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:65:33: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:65:33: note: write of 4 bytes to beyond the end of the region
# 63| the user omits a required option value.
# 64| */
# 65|-> longopts[i].has_arg =
# 66| optionDescArray[i].type == OPTTYPE_FLAG ?
# 67| no_argument : optional_argument;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def143]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:68:30: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:68:30: note: write of 8 bytes to beyond the end of the region
# 66| optionDescArray[i].type == OPTTYPE_FLAG ?
# 67| no_argument : optional_argument;
# 68|-> longopts[i].flag = NULL;
# 69| longopts[i].val = i;
# 70| }
Error: GCC_ANALYZER_WARNING (CWE-122): [#def144]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:69:29: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:69:29: note: write of 4 bytes to beyond the end of the region
# 67| no_argument : optional_argument;
# 68| longopts[i].flag = NULL;
# 69|-> longopts[i].val = i;
# 70| }
# 71| longopts[numOptions].name = 0;
Error: GCC_ANALYZER_WARNING (CWE-401): [#def145]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c: scope_hint: In function ‘parseOptionValue’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:189:30: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(optarg)’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
# 187| else {
# 188| *errorP = NULL;
# 189|-> optionP->value.s = strdup(optarg);
# 190| }
# 191| break;
Error: CLANG_WARNING: [#def146]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:211:9: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 209|
# 210| parseOptionValue(optarg, optionP, &error);
# 211|-> if (error)
# 212| casprintf(errorP, "Error in '%s' option: %s", optionP->name, error);
# 213| else
Error: GCC_ANALYZER_WARNING (CWE-401): [#def147]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:236:16: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*<unknown>)’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:225:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:225:5: note: in expansion of macro ‘MALLOCARRAY’
# 234| for (i = 0; i < cpP->numArguments; ++i) {
# 235| cpP->argumentArray[i] = strdup(argv[getopt_argstart() + i]);
# 236|-> if (cpP->argumentArray[i] == NULL) {
# 237| fprintf(stderr, "Unable to allocate memory for Argument %u\n",
# 238| i);
Error: CLANG_WARNING: [#def148]
xmlrpc-c-1.59.03/lib/util/cmdline_parser_cpp.cpp:20:5: warning[deadcode.DeadStores]: Value stored to 'retval' is never read
# 18| enum optiontype retval;
# 19|
# 20|-> retval = OPTTYPE_FLAG; // defeat compiler warning
# 21|
# 22| switch (arg) {
Error: GCC_ANALYZER_WARNING (CWE-131): [#def149]
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:13: included_from: Included from here.
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c: scope_hint: In function ‘createLongOptsArray’
xmlrpc-c-1.59.03/lib/util/include/mallocvar.h:79:15: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/cmdline_parser.c:52:5: note: in expansion of macro ‘MALLOCARRAY’
# 77| void * array; \
# 78| mallocProduct(&array, nElements, sizeof(arrayName[0])); \
# 79|-> arrayName = array; \
# 80| } while (0)
# 81|
Error: CLANG_WARNING: [#def150]
xmlrpc-c-1.59.03/src/cpp/registry.cpp:284:17: warning[core.CallAndMessage]: Called C++ object pointer is null
# 282| method2P->execute(paramList, callInfoP, &result);
# 283| else
# 284|-> methodP->execute(paramList, &result);
# 285| } catch (xmlrpc_c::fault const& fault) {
# 286| xmlrpc_env_set_fault(envP, fault.getCode(),
Error: CPPCHECK_WARNING (CWE-762): [#def151]
xmlrpc-c-1.59.03/src/cpp/server_cgi.cpp:227: error[mismatchAllocDealloc]: Mismatching allocation and deallocation: buffer
# 225| setModeBinary(fileP);
# 226| char * const buffer(new char[length]);
# 227|-> UNIQUE_PTR<char> p(buffer); // To make it go away when we leave
# 228|
# 229| size_t count;
Error: GCC_ANALYZER_WARNING (CWE-401): [#def152]
xmlrpc-c-1.59.03/src/double.c: scope_hint: In function ‘bufferConcat’
xmlrpc-c-1.59.03/src/double.c:50:27: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 48| bufferP->bytes = realloc(bufferP->bytes, newSize);
# 49| bufferP->next = bufferP->bytes + oldSize;
# 50|-> bufferP->end = bufferP->bytes + newSize;
# 51| }
# 52|
Error: CLANG_WARNING: [#def153]
xmlrpc-c-1.59.03/src/double.c:281:9: warning[unix.Malloc]: Potential leak of memory pointed to by 'formatted.bytes'
# 279|
# 280| if (formatted.bytes == NULL)
# 281|-> xmlrpc_faultf(envP, "Couldn't allocate memory to format %g",
# 282| value);
# 283| else
Error: CLANG_WARNING: [#def154]
xmlrpc-c-1.59.03/src/json.c:712:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 710| xmlrpc_env_clean(&env);
# 711|
# 712|-> return valP;
# 713| }
# 714|
Error: COMPILER_WARNING (CWE-457): [#def155]
xmlrpc-c-1.59.03/src/json.c: scope_hint: In function ‘parseValue’
xmlrpc-c-1.59.03/src/json.c:976:12: warning[-Wmaybe-uninitialized]: ‘valP’ may be used uninitialized
# 976 | return retval;
# | ^~~~~~
xmlrpc-c-1.59.03/src/json.c:695:20: note: ‘valP’ was declared here
# 695 | xmlrpc_value * valP;
# | ^~~~
# 974| tokTypeName(tokP->type));
# 975| }
# 976|-> return retval;
# 977| }
# 978|
Error: CPPCHECK_WARNING (CWE-457): [#def156]
xmlrpc-c-1.59.03/src/json.c:985: error[legacyUninitvar]: Uninitialized variable: retval
# 983| const char * const str) {
# 984|
# 985|-> xmlrpc_value * retval = retval;
# 986| Tokenizer tok;
# 987|
Error: CLANG_WARNING: [#def157]
xmlrpc-c-1.59.03/src/json.c:985:5: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 983| const char * const str) {
# 984|
# 985|-> xmlrpc_value * retval = retval;
# 986| Tokenizer tok;
# 987|
Error: GCC_ANALYZER_WARNING (CWE-476): [#def158]
xmlrpc-c-1.59.03/src/method.c: scope_hint: In function ‘parseArgumentTypeSpecifiers’
xmlrpc-c-1.59.03/src/method.c:113:57: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xmlrpc-c-1.59.03/src/method.c: scope_hint: In function ‘parseArgumentTypeSpecifiers’
xmlrpc-c-1.59.03/src/method.c:22: included_from: Included from here.
xmlrpc-c-1.59.03/lib/util/include/mallocvar.h:83:20: note: in definition of macro ‘REALLOCARRAY’
xmlrpc-c-1.59.03/lib/util/include/mallocvar.h:83:20: note: in definition of macro ‘REALLOCARRAY’
xmlrpc-c-1.59.03/src/method.c:81:9: note: in expansion of macro ‘REALLOCARRAY’
xmlrpc-c-1.59.03/src/method.c:81:9: note: in expansion of macro ‘REALLOCARRAY’
xmlrpc-c-1.59.03/src/method.c:81:9: note: in expansion of macro ‘REALLOCARRAY’
# 111| makeRoomInArgList(envP, signatureP, signatureP->argCount + 1);
# 112|
# 113|-> signatureP->argList[signatureP->argCount++] = typeName;
# 114| }
# 115| }
Error: GCC_ANALYZER_WARNING (CWE-476): [#def159]
xmlrpc-c-1.59.03/src/method.c: scope_hint: In function ‘listSignatures’
xmlrpc-c-1.59.03/src/method.c:221:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘signatureP’
xmlrpc-c-1.59.03/src/method.c: scope_hint: In function ‘listSignatures’
xmlrpc-c-1.59.03/src/method.c:147:5: note: in expansion of macro ‘MALLOCVAR’
# 219|
# 220| if (!envP->fault_occurred) {
# 221|-> signatureP->nextP = NULL;
# 222| *p = signatureP;
# 223| p = &signatureP->nextP;
Error: CLANG_WARNING: [#def160]
xmlrpc-c-1.59.03/src/parse_datetime.c:465:24: warning[core.CallAndMessage]: Passed-by-value struct argument contains uninitialized data (e.g., field: 'Y')
# 463|
# 464| if (!envP->fault_occurred)
# 465|-> *valuePP = xmlrpc_datetime_new(envP, dt);
# 466| }
# 467| }
Error: GCC_ANALYZER_WARNING (CWE-457): [#def161]
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘parseArrayDataChild’
xmlrpc-c-1.59.03/src/parse_value.c:55:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘itemP’
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘parseArrayDataChild’
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘parseArrayDataChild’
# 53|
# 54| if (!envP->fault_occurred) {
# 55|-> xmlrpc_array_append_item(envP, arrayP, itemP);
# 56|
# 57| xmlrpc_DECREF(itemP);
Error: CLANG_WARNING: [#def162]
xmlrpc-c-1.59.03/src/parse_value.c:55:13: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value
# 53|
# 54| if (!envP->fault_occurred) {
# 55|-> xmlrpc_array_append_item(envP, arrayP, itemP);
# 56|
# 57| xmlrpc_DECREF(itemP);
Error: COMPILER_WARNING (CWE-457): [#def163]
xmlrpc-c-1.59.03/src/parse_value.c:116:31: warning[-Wmaybe-uninitialized]: ‘nameElemP’ may be used uninitialized
# 116 | size_t const childCount = xml_element_children_size(nameElemP);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue.part.0’
xmlrpc-c-1.59.03/src/parse_value.c:193:23: note: ‘nameElemP’ was declared here
# 193 | xml_element * nameElemP;
# | ^~~~~~~~~
# 114| xmlrpc_value ** const valuePP) {
# 115|
# 116|-> size_t const childCount = xml_element_children_size(nameElemP);
# 117|
# 118| if (childCount > 0)
Error: CLANG_WARNING: [#def164]
xmlrpc-c-1.59.03/src/parse_value.c:198:13: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value
# 196|
# 197| if (!envP->fault_occurred) {
# 198|-> parseName(envP, nameElemP, keyPP);
# 199|
# 200| if (!envP->fault_occurred) {
Error: COMPILER_WARNING (CWE-457): [#def165]
xmlrpc-c-1.59.03/src/parse_value.c:201:31: warning[-Wmaybe-uninitialized]: ‘valueElemP’ may be used uninitialized
# 201 | xml_element * valueElemP;
# | ^~~~~~~~~~
# 199|
# 200| if (!envP->fault_occurred) {
# 201|-> xml_element * valueElemP;
# 202|
# 203| getValueChild(envP, memberP, &valueElemP);
Error: COMPILER_WARNING (CWE-457): [#def166]
xmlrpc-c-1.59.03/src/parse_value.c:206:21: warning[-Wmaybe-uninitialized]: ‘valueElemP’ may be used uninitialized
# 206 | xmlrpc_parseValue(envP, maxRecursion-1, valueElemP,
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 207 | valuePP);
# | ~~~~~~~~
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue’
xmlrpc-c-1.59.03/src/parse_value.c:201:31: note: ‘valueElemP’ was declared here
# 201 | xml_element * valueElemP;
# | ^~~~~~~~~~
# 204|
# 205| if (!envP->fault_occurred)
# 206|-> xmlrpc_parseValue(envP, maxRecursion-1, valueElemP,
# 207| valuePP);
# 208|
Error: CLANG_WARNING: [#def167]
xmlrpc-c-1.59.03/src/parse_value.c:206:21: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value
# 204|
# 205| if (!envP->fault_occurred)
# 206|-> xmlrpc_parseValue(envP, maxRecursion-1, valueElemP,
# 207| valuePP);
# 208|
Error: COMPILER_WARNING (CWE-457): [#def168]
xmlrpc-c-1.59.03/src/parse_value.c:210:21: warning[-Wmaybe-uninitialized]: ‘keyP’ may be used uninitialized
# 210 | xmlrpc_DECREF(*keyPP);
# | ^~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue.part.0’
xmlrpc-c-1.59.03/src/parse_value.c:247:32: note: ‘keyP’ was declared here
# 247 | xmlrpc_value * keyP;
# | ^~~~
# 208|
# 209| if (envP->fault_occurred)
# 210|-> xmlrpc_DECREF(*keyPP);
# 211| }
# 212| }
Error: CLANG_WARNING: [#def169]
xmlrpc-c-1.59.03/src/parse_value.c:210:21: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 208|
# 209| if (envP->fault_occurred)
# 210|-> xmlrpc_DECREF(*keyPP);
# 211| }
# 212| }
Error: GCC_ANALYZER_WARNING (CWE-457): [#def170]
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘parseStruct’
xmlrpc-c-1.59.03/src/parse_value.c:253:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘valueP’
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘parseStruct’
# 251|
# 252| if (!envP->fault_occurred) {
# 253|-> xmlrpc_struct_set_value_v(envP, structP, keyP, valueP);
# 254|
# 255| xmlrpc_DECREF(keyP);
Error: CLANG_WARNING: [#def171]
xmlrpc-c-1.59.03/src/parse_value.c:253:21: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value
# 251|
# 252| if (!envP->fault_occurred) {
# 253|-> xmlrpc_struct_set_value_v(envP, structP, keyP, valueP);
# 254|
# 255| xmlrpc_DECREF(keyP);
Error: CLANG_WARNING: [#def172]
xmlrpc-c-1.59.03/src/parse_value.c:253:21: warning[core.CallAndMessage]: 4th function call argument is an uninitialized value
# 251|
# 252| if (!envP->fault_occurred) {
# 253|-> xmlrpc_struct_set_value_v(envP, structP, keyP, valueP);
# 254|
# 255| xmlrpc_DECREF(keyP);
Error: COMPILER_WARNING (CWE-457): [#def173]
xmlrpc-c-1.59.03/src/parse_value.c:432:12: warning[-Wmaybe-uninitialized]: ‘mantissaEnd’ may be used uninitialized
# 432 | if (mantissa == mantissaEnd && fraction == fractionEnd) {
# | ^
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue.part.0’
xmlrpc-c-1.59.03/src/parse_value.c:420:18: note: ‘mantissaEnd’ was declared here
# 420 | const char * mantissaEnd;
# | ^~~~~~~~~~~
# 430| accum = 0.0;
# 431|
# 432|-> if (mantissa == mantissaEnd && fraction == fractionEnd) {
# 433| setParseFault(envP, "No digits");
# 434| return;
Error: COMPILER_WARNING (CWE-457): [#def174]
xmlrpc-c-1.59.03/src/parse_value.c:432:12: warning[-Wmaybe-uninitialized]: ‘mantissa’ may be used uninitialized
# 432 | if (mantissa == mantissaEnd && fraction == fractionEnd) {
# | ^
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue.part.0’
xmlrpc-c-1.59.03/src/parse_value.c:419:18: note: ‘mantissa’ was declared here
# 419 | const char * mantissa;
# | ^~~~~~~~
# 430| accum = 0.0;
# 431|
# 432|-> if (mantissa == mantissaEnd && fraction == fractionEnd) {
# 433| setParseFault(envP, "No digits");
# 434| return;
Error: CLANG_WARNING: [#def175]
xmlrpc-c-1.59.03/src/parse_value.c:432:22: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value
# 430| accum = 0.0;
# 431|
# 432|-> if (mantissa == mantissaEnd && fraction == fractionEnd) {
# 433| setParseFault(envP, "No digits");
# 434| return;
Error: COMPILER_WARNING (CWE-457): [#def176]
xmlrpc-c-1.59.03/src/parse_value.c:432:37: warning[-Wmaybe-uninitialized]: ‘fractionEnd’ may be used uninitialized
# 432 | if (mantissa == mantissaEnd && fraction == fractionEnd) {
# | ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue.part.0’
xmlrpc-c-1.59.03/src/parse_value.c:422:18: note: ‘fractionEnd’ was declared here
# 422 | const char * fractionEnd;
# | ^~~~~~~~~~~
# 430| accum = 0.0;
# 431|
# 432|-> if (mantissa == mantissaEnd && fraction == fractionEnd) {
# 433| setParseFault(envP, "No digits");
# 434| return;
Error: COMPILER_WARNING (CWE-457): [#def177]
xmlrpc-c-1.59.03/src/parse_value.c:432:37: warning[-Wmaybe-uninitialized]: ‘fraction’ may be used uninitialized
# 432 | if (mantissa == mantissaEnd && fraction == fractionEnd) {
# | ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue.part.0’
xmlrpc-c-1.59.03/src/parse_value.c:421:18: note: ‘fraction’ was declared here
# 421 | const char * fraction;
# | ^~~~~~~~
# 430| accum = 0.0;
# 431|
# 432|-> if (mantissa == mantissaEnd && fraction == fractionEnd) {
# 433| setParseFault(envP, "No digits");
# 434| return;
Error: COMPILER_WARNING (CWE-457): [#def178]
xmlrpc-c-1.59.03/src/parse_value.c:530:20: warning[-Wmaybe-uninitialized]: ‘valueDouble’ may be used uninitialized
# 530 | *valuePP = xmlrpc_double_new(envP, valueDouble);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/parse_value.c: scope_hint: In function ‘xmlrpc_parseValue.part.0’
xmlrpc-c-1.59.03/src/parse_value.c:505:12: note: ‘valueDouble’ was declared here
# 505 | double valueDouble;
# | ^~~~~~~~~~~
# 528|
# 529| if (!envP->fault_occurred)
# 530|-> *valuePP = xmlrpc_double_new(envP, valueDouble);
# 531|
# 532| xmlrpc_env_clean(&parseEnv);
Error: CLANG_WARNING: [#def179]
xmlrpc-c-1.59.03/src/registry.c:77:5: warning[unix.Malloc]: Use of memory after it is freed
# 75| free(registryP);
# 76| }
# 77|-> return registryP;
# 78| }
# 79|
Error: CLANG_WARNING: [#def180]
xmlrpc-c-1.59.03/src/registry.c:430:17: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value
# 428|
# 429| if (!fault.fault_occurred) {
# 430|-> xmlrpc_serialize_response2(envP, responseXmlP,
# 431| resultP, registryP->dialect);
# 432|
Error: CLANG_WARNING: [#def181]
xmlrpc-c-1.59.03/src/registry.c:469:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 467| &responseXmlP);
# 468|
# 469|-> return responseXmlP;
# 470| }
# 471|
Error: COMPILER_WARNING (CWE-457): [#def182]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_multicall’
xmlrpc-c-1.59.03/src/system_method.c:166:17: warning[-Wmaybe-uninitialized]: ‘methlistP’ may be used uninitialized
# 166 | xmlrpc_array_size(envP, methlistP);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:148:20: note: ‘methlistP’ was declared here
# 148 | xmlrpc_value * methlistP;
# | ^~~~~~~~~
# 164| /* Loop over our input list, calling each method in turn. */
# 165| unsigned int const methodCount =
# 166|-> xmlrpc_array_size(envP, methlistP);
# 167| unsigned int i;
# 168| for (i = 0; i < methodCount && !envP->fault_occurred; ++i) {
Error: CLANG_WARNING: [#def183]
xmlrpc-c-1.59.03/src/system_method.c:166:17: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value
# 164| /* Loop over our input list, calling each method in turn. */
# 165| unsigned int const methodCount =
# 166|-> xmlrpc_array_size(envP, methlistP);
# 167| unsigned int i;
# 168| for (i = 0; i < methodCount && !envP->fault_occurred; ++i) {
Error: CLANG_WARNING: [#def184]
xmlrpc-c-1.59.03/src/system_method.c:180:21: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value
# 178| if (!envP->fault_occurred) {
# 179| /* Append this method result to our master array. */
# 180|-> xmlrpc_array_append_item(envP, resultsP, resultP);
# 181| xmlrpc_DECREF(resultP);
# 182| }
Error: COMPILER_WARNING (CWE-457): [#def185]
xmlrpc-c-1.59.03/src/system_method.c:181:21: warning[-Wmaybe-uninitialized]: ‘resultP’ may be used uninitialized
# 181 | xmlrpc_DECREF(resultP);
# | ^~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:172:32: note: ‘resultP’ was declared here
# 172 | xmlrpc_value * resultP;
# | ^~~~~~~
# 179| /* Append this method result to our master array. */
# 180| xmlrpc_array_append_item(envP, resultsP, resultP);
# 181|-> xmlrpc_DECREF(resultP);
# 182| }
# 183| }
Error: CPPCHECK_WARNING (CWE-457): [#def186]
xmlrpc-c-1.59.03/src/system_method.c:275: error[legacyUninitvar]: Uninitialized variable: retvalP
# 273| createMethodListArray(envP, registryP, &retvalP);
# 274| }
# 275|-> return retvalP;
# 276| }
# 277|
Error: CLANG_WARNING: [#def187]
xmlrpc-c-1.59.03/src/system_method.c:275:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 273| createMethodListArray(envP, registryP, &retvalP);
# 274| }
# 275|-> return retvalP;
# 276| }
# 277|
Error: COMPILER_WARNING (CWE-457): [#def188]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_listMethods’
xmlrpc-c-1.59.03/src/system_method.c:275:12: warning[-Wmaybe-uninitialized]: ‘retvalP’ may be used uninitialized
# 275 | return retvalP;
# | ^~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:259:20: note: ‘retvalP’ was declared here
# 259 | xmlrpc_value * retvalP;
# | ^~~~~~~
# 273| createMethodListArray(envP, registryP, &retvalP);
# 274| }
# 275|-> return retvalP;
# 276| }
# 277|
Error: CPPCHECK_WARNING (CWE-457): [#def189]
xmlrpc-c-1.59.03/src/system_method.c:333: error[legacyUninitvar]: Uninitialized variable: retvalP
# 331| }
# 332|
# 333|-> return retvalP;
# 334| }
# 335|
Error: CLANG_WARNING: [#def190]
xmlrpc-c-1.59.03/src/system_method.c:333:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 331| }
# 332|
# 333|-> return retvalP;
# 334| }
# 335|
Error: COMPILER_WARNING (CWE-457): [#def191]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_methodExist’
xmlrpc-c-1.59.03/src/system_method.c:333:12: warning[-Wmaybe-uninitialized]: ‘retvalP’ may be used uninitialized
# 333 | return retvalP;
# | ^~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:317:20: note: ‘retvalP’ was declared here
# 317 | xmlrpc_value * retvalP;
# | ^~~~~~~
# 331| }
# 332|
# 333|-> return retvalP;
# 334| }
# 335|
Error: CPPCHECK_WARNING (CWE-457): [#def192]
xmlrpc-c-1.59.03/src/system_method.c:403: error[legacyUninitvar]: Uninitialized variable: retvalP
# 401| }
# 402|
# 403|-> return retvalP;
# 404| }
# 405|
Error: CLANG_WARNING: [#def193]
xmlrpc-c-1.59.03/src/system_method.c:403:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 401| }
# 402|
# 403|-> return retvalP;
# 404| }
# 405|
Error: COMPILER_WARNING (CWE-457): [#def194]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_methodHelp’
xmlrpc-c-1.59.03/src/system_method.c:403:12: warning[-Wmaybe-uninitialized]: ‘retvalP’ may be used uninitialized
# 403 | return retvalP;
# | ^~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:381:20: note: ‘retvalP’ was declared here
# 381 | xmlrpc_value * retvalP;
# | ^~~~~~~
# 401| }
# 402|
# 403|-> return retvalP;
# 404| }
# 405|
Error: COMPILER_WARNING (CWE-457): [#def195]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_methodSignature’
xmlrpc-c-1.59.03/src/system_method.c:575:20: warning[-Wmaybe-uninitialized]: ‘signatureListP’ may be used uninitialized
# 575 | if (signatureListP)
# | ^
xmlrpc-c-1.59.03/src/system_method.c:570:28: note: ‘signatureListP’ was declared here
# 570 | xmlrpc_value * signatureListP;
# | ^~~~~~~~~~~~~~
# 573|
# 574| if (!envP->fault_occurred) {
# 575|-> if (signatureListP)
# 576| retvalP = signatureListP;
# 577| else
Error: CLANG_WARNING: [#def196]
xmlrpc-c-1.59.03/src/system_method.c:575:21: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 573|
# 574| if (!envP->fault_occurred) {
# 575|-> if (signatureListP)
# 576| retvalP = signatureListP;
# 577| else
Error: CLANG_WARNING: [#def197]
xmlrpc-c-1.59.03/src/system_method.c:585:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 583| xmlrpc_env_clean(&env);
# 584|
# 585|-> return retvalP;
# 586| }
# 587|
Error: COMPILER_WARNING (CWE-457): [#def198]
xmlrpc-c-1.59.03/src/system_method.c:585:12: warning[-Wmaybe-uninitialized]: ‘retvalP’ may be used uninitialized
# 585 | return retvalP;
# | ^~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:549:20: note: ‘retvalP’ was declared here
# 549 | xmlrpc_value * retvalP;
# | ^~~~~~~
# 583| xmlrpc_env_clean(&env);
# 584|
# 585|-> return retvalP;
# 586| }
# 587|
Error: CLANG_WARNING: [#def199]
xmlrpc-c-1.59.03/src/system_method.c:658:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 656| xmlrpc_env_clean(&env);
# 657|
# 658|-> return retvalP;
# 659| }
# 660|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def200]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_shutdown’
xmlrpc-c-1.59.03/src/system_method.c:658:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘retvalP’
# 656| xmlrpc_env_clean(&env);
# 657|
# 658|-> return retvalP;
# 659| }
# 660|
Error: COMPILER_WARNING (CWE-457): [#def201]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_shutdown’
xmlrpc-c-1.59.03/src/system_method.c:658:12: warning[-Wmaybe-uninitialized]: ‘retvalP’ may be used uninitialized
# 658 | return retvalP;
# | ^~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:618:20: note: ‘retvalP’ was declared here
# 618 | xmlrpc_value * retvalP;
# | ^~~~~~~
# 656| xmlrpc_env_clean(&env);
# 657|
# 658|-> return retvalP;
# 659| }
# 660|
Error: CLANG_WARNING: [#def202]
xmlrpc-c-1.59.03/src/system_method.c:720:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 718| constructCapabilities(envP, registryP, &retvalP);
# 719|
# 720|-> return retvalP;
# 721| }
# 722|
Error: COMPILER_WARNING (CWE-457): [#def203]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_capabilities’
xmlrpc-c-1.59.03/src/system_method.c:720:12: warning[-Wmaybe-uninitialized]: ‘retvalP’ may be used uninitialized
# 720 | return retvalP;
# | ^~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:703:20: note: ‘retvalP’ was declared here
# 703 | xmlrpc_value * retvalP;
# | ^~~~~~~
# 718| constructCapabilities(envP, registryP, &retvalP);
# 719|
# 720|-> return retvalP;
# 721| }
# 722|
Error: CLANG_WARNING: [#def204]
xmlrpc-c-1.59.03/src/system_method.c:786:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 784| listCapabilities(envP, registryP, &retvalP);
# 785|
# 786|-> return retvalP;
# 787| }
# 788|
Error: COMPILER_WARNING (CWE-457): [#def205]
xmlrpc-c-1.59.03/src/system_method.c: scope_hint: In function ‘system_getCapabilities’
xmlrpc-c-1.59.03/src/system_method.c:786:12: warning[-Wmaybe-uninitialized]: ‘retvalP’ may be used uninitialized
# 786 | return retvalP;
# | ^~~~~~~
xmlrpc-c-1.59.03/src/system_method.c:769:20: note: ‘retvalP’ was declared here
# 769 | xmlrpc_value * retvalP;
# | ^~~~~~~
# 784| listCapabilities(envP, registryP, &retvalP);
# 785|
# 786|-> return retvalP;
# 787| }
# 788|
Error: CLANG_WARNING: [#def206]
xmlrpc-c-1.59.03/src/xmlrpc_array.c:177:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 175|
# 176| if (!envP->fault_occurred)
# 177|-> xmlrpc_DECREF(valueP);
# 178| }
# 179| if (envP->fault_occurred)
Error: CLANG_WARNING: [#def207]
xmlrpc-c-1.59.03/src/xmlrpc_array.c:182:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 180| valueP = NULL;
# 181|
# 182|-> return valueP;
# 183| }
# 184|
Error: CPPCHECK_WARNING (CWE-672): [#def208]
xmlrpc-c-1.59.03/src/xmlrpc_array.c:201: error[deallocret]: Returning/dereferencing 'arrayP' after it is deallocated / released
# 199| free(arrayP);
# 200| }
# 201|-> return arrayP;
# 202| }
# 203|
Error: CLANG_WARNING: [#def209]
xmlrpc-c-1.59.03/src/xmlrpc_array.c:201:5: warning[unix.Malloc]: Use of memory after it is freed
# 199| free(arrayP);
# 200| }
# 201|-> return arrayP;
# 202| }
# 203|
Error: CLANG_WARNING: [#def210]
xmlrpc-c-1.59.03/src/xmlrpc_array.c:245:17: warning[unix.Malloc]: Attempt to free released memory
# 243|
# 244| if (envP->fault_occurred)
# 245|-> free(arrayP);
# 246| }
# 247| }
Error: CLANG_WARNING: [#def211]
xmlrpc-c-1.59.03/src/xmlrpc_array.c:248:5: warning[unix.Malloc]: Use of memory after it is freed
# 246| }
# 247| }
# 248|-> return arrayP;
# 249| }
# 250|
Error: GCC_ANALYZER_WARNING (CWE-688): [#def212]
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:63:5: warning[-Wanalyzer-null-argument]: use of NULL ‘unencoded’ where non-null expected
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:62:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:62:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:62:5: note: in expansion of macro ‘MALLOCARRAY’
<built-in>: note: argument 1 of ‘__builtin_sprintf’ must be non-null
# 61|
# 62| MALLOCARRAY(unencoded,(strlen(username) + strlen(password) + 1 + 1));
# 63|-> sprintf(unencoded, "%s:%s", username, password);
# 64|
# 65| /* Create encoded string. */
Error: GCC_ANALYZER_WARNING (CWE-688): [#def213]
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c: scope_hint: In function ‘xmlrpc_authcookie_set’
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:63:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘unencoded’ where non-null expected
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:32: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:62:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_authcookie.c:62:5: note: in expansion of macro ‘MALLOCARRAY’
<built-in>: note: argument 1 of ‘__builtin_sprintf’ must be non-null
# 61|
# 62| MALLOCARRAY(unencoded,(strlen(username) + strlen(password) + 1 + 1));
# 63|-> sprintf(unencoded, "%s:%s", username, password);
# 64|
# 65| /* Create encoded string. */
Error: CLANG_WARNING: [#def214]
xmlrpc-c-1.59.03/src/xmlrpc_build.c:114:17: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value
# 112| getValue(envP, formatP, argsP, &itemP);
# 113| if (!envP->fault_occurred) {
# 114|-> xmlrpc_array_append_item(envP, arrayP, itemP);
# 115| xmlrpc_DECREF(itemP);
# 116| }
Error: CLANG_WARNING: [#def215]
xmlrpc-c-1.59.03/src/xmlrpc_build.c:187:21: warning[core.CallAndMessage]: 4th function call argument is an uninitialized value
# 185| if (!envP->fault_occurred)
# 186| /* Add the new member to the struct. */
# 187|-> xmlrpc_struct_set_value_v(envP, structP, keyP, valueP);
# 188|
# 189| xmlrpc_DECREF(valueP);
Error: CLANG_WARNING: [#def216]
xmlrpc-c-1.59.03/src/xmlrpc_build.c:189:17: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 187| xmlrpc_struct_set_value_v(envP, structP, keyP, valueP);
# 188|
# 189|-> xmlrpc_DECREF(valueP);
# 190| xmlrpc_DECREF(keyP);
# 191| }
Error: CLANG_WARNING: [#def217]
xmlrpc-c-1.59.03/src/xmlrpc_build.c:391:13: warning[core.NullDereference]: Dereference of undefined pointer value (loaded from variable 'suffix')
# 389|
# 390| if (!envP->fault_occurred) {
# 391|-> if (*suffix != '\0')
# 392| xmlrpc_faultf(envP, "Junk after the format specifier: '%s'. "
# 393| "The format string must describe exactly "
Error: CLANG_WARNING: [#def218]
xmlrpc-c-1.59.03/src/xmlrpc_build.c:400:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 398|
# 399| if (envP->fault_occurred)
# 400|-> xmlrpc_DECREF(retval);
# 401| }
# 402| return retval;
Error: CLANG_WARNING: [#def219]
xmlrpc-c-1.59.03/src/xmlrpc_build.c:402:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 400| xmlrpc_DECREF(retval);
# 401| }
# 402|-> return retval;
# 403| }
# 404|
Error: COMPILER_WARNING (CWE-457): [#def220]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:419:9: warning[-Wmaybe-uninitialized]: ‘transportparms.parmsP’ may be used uninitialized
# 419 | transportOpsP->create(
# | ^~~~~~~~~~~~~~~~~~~~~~
# 420 | envP, flags, appname, appversion,
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 421 | transportparmsP, transportparmSize,
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 422 | &transportP);
# | ~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_client.c: scope_hint: In function ‘xmlrpc_client_create’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:458:27: note: ‘transportparms.parmsP’ was declared here
# 458 | struct xportParms transportparms;
# | ^~~~~~~~~~~~~~
# 417|
# 418| /* The following call is not thread-safe */
# 419|-> transportOpsP->create(
# 420| envP, flags, appname, appversion,
# 421| transportparmsP, transportparmSize,
Error: COMPILER_WARNING (CWE-457): [#def221]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:419:9: warning[-Wmaybe-uninitialized]: ‘transportparms.size’ may be used uninitialized
# 419 | transportOpsP->create(
# | ^~~~~~~~~~~~~~~~~~~~~~
# 420 | envP, flags, appname, appversion,
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 421 | transportparmsP, transportparmSize,
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 422 | &transportP);
# | ~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_client.c: scope_hint: In function ‘xmlrpc_client_create’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:458:27: note: ‘transportparms.size’ was declared here
# 458 | struct xportParms transportparms;
# | ^~~~~~~~~~~~~~
# 417|
# 418| /* The following call is not thread-safe */
# 419|-> transportOpsP->create(
# 420| envP, flags, appname, appversion,
# 421| transportparmsP, transportparmSize,
Error: CLANG_WARNING: [#def222]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:419:9: warning[core.NullDereference]: Access to field 'create' results in a dereference of an undefined pointer value (loaded from variable 'transportOpsP')
# 417|
# 418| /* The following call is not thread-safe */
# 419|-> transportOpsP->create(
# 420| envP, flags, appname, appversion,
# 421| transportparmsP, transportparmSize,
Error: COMPILER_WARNING (CWE-457): [#def223]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:473:16: warning[-Wmaybe-uninitialized]: ‘transportName’ may be used uninitialized
# 473 | if (transportName)
# | ^
xmlrpc-c-1.59.03/src/xmlrpc_client.c: scope_hint: In function ‘xmlrpc_client_create’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:457:22: note: ‘transportName’ was declared here
# 457 | const char * transportName;
# | ^~~~~~~~~~~~~
# 471|
# 472| if (!envP->fault_occurred) {
# 473|-> if (transportName)
# 474| createTransportAndClient(envP, transportName,
# 475| transportparms.parmsP,
Error: CLANG_WARNING: [#def224]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:473:17: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 471|
# 472| if (!envP->fault_occurred) {
# 473|-> if (transportName)
# 474| createTransportAndClient(envP, transportName,
# 475| transportparms.parmsP,
Error: CLANG_WARNING: [#def225]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:622:25: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 620|
# 621| xmlrpc_traceXml("XML-RPC CALL",
# 622|-> XMLRPC_MEMBLOCK_CONTENTS(char, callXmlP),
# 623| XMLRPC_MEMBLOCK_SIZE(char, callXmlP));
# 624|
Error: CLANG_WARNING: [#def226]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:743:9: warning[core.CallAndMessage]: 5th function call argument is an uninitialized value
# 741|
# 742| if (!envP->fault_occurred) {
# 743|-> xmlrpc_client_call2(envP, clientP,
# 744| serverInfoP, methodName, paramArrayP,
# 745| resultPP);
Error: CLANG_WARNING: [#def227]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:781:13: warning[core.CallAndMessage]: 5th function call argument is an uninitialized value
# 779| if (!envP->fault_occurred) {
# 780| /* Perform the actual XML-RPC call. */
# 781|-> xmlrpc_client_call2(envP, clientP,
# 782| serverInfoP, methodName, paramArrayP,
# 783| resultPP);
Error: CLANG_WARNING: [#def228]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:788:9: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 786| xmlrpc_server_info_free(serverInfoP);
# 787| }
# 788|-> xmlrpc_DECREF(paramArrayP);
# 789| }
# 790| }
Error: GCC_ANALYZER_WARNING (CWE-457): [#def229]
xmlrpc-c-1.59.03/src/xmlrpc_client.c: scope_hint: In function ‘callInfoCreate’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:883:39: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘callXmlP’
# 881|
# 882| if (!envP->fault_occurred) {
# 883|-> callInfoP->serialized_xml = callXmlP;
# 884|
# 885| callInfoSetCompletion(envP, callInfoP, serverUrl, methodName,
Error: CLANG_WARNING: [#def230]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:883:39: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 881|
# 882| if (!envP->fault_occurred) {
# 883|-> callInfoP->serialized_xml = callXmlP;
# 884|
# 885| callInfoSetCompletion(envP, callInfoP, serverUrl, methodName,
Error: GCC_ANALYZER_WARNING (CWE-401): [#def231]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:890:17: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 888|
# 889| if (envP->fault_occurred)
# 890|-> free(callInfoP);
# 891| }
# 892| }
Error: CLANG_WARNING: [#def232]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:903:9: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 901| XMLRPC_ASSERT_PTR_OK(callInfoP);
# 902|
# 903|-> if (callInfoP->completionFn) {
# 904| xmlrpc_DECREF(callInfoP->completionArgs.paramArrayP);
# 905| xmlrpc_strfree(callInfoP->completionArgs.methodName);
Error: GCC_ANALYZER_WARNING (CWE-476): [#def233]
xmlrpc-c-1.59.03/src/xmlrpc_client.c: scope_hint: In function ‘callInfoDestroy’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:903:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘callInfoP’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:19: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_client.c:874:5: note: in expansion of macro ‘MALLOCVAR’
# 901| XMLRPC_ASSERT_PTR_OK(callInfoP);
# 902|
# 903|-> if (callInfoP->completionFn) {
# 904| xmlrpc_DECREF(callInfoP->completionArgs.paramArrayP);
# 905| xmlrpc_strfree(callInfoP->completionArgs.methodName);
Error: GCC_ANALYZER_WARNING (CWE-416): [#def234]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:903:18: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘callInfoP’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:874:5: note: in expansion of macro ‘MALLOCVAR’
# 901| XMLRPC_ASSERT_PTR_OK(callInfoP);
# 902|
# 903|-> if (callInfoP->completionFn) {
# 904| xmlrpc_DECREF(callInfoP->completionArgs.paramArrayP);
# 905| xmlrpc_strfree(callInfoP->completionArgs.methodName);
Error: CLANG_WARNING: [#def235]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:994:5: warning[core.CallAndMessage]: 6th function call argument is an uninitialized value
# 992| }
# 993| /* Call the user's completion function with the RPC result */
# 994|-> (*callInfoP->completionFn)(callInfoP->completionArgs.serverUrl,
# 995| callInfoP->completionArgs.methodName,
# 996| callInfoP->completionArgs.paramArrayP,
Error: GCC_ANALYZER_WARNING (CWE-476): [#def236]
xmlrpc-c-1.59.03/src/xmlrpc_client.c: scope_hint: In function ‘xmlrpc_client_start_rpc’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:1054:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘callInfoP’
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:275:28: note: in definition of macro ‘XMLRPC_MEMBLOCK_SIZE’
xmlrpc-c-1.59.03/src/xmlrpc_client.c:874:5: note: in expansion of macro ‘MALLOCVAR’
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:275:28: note: in definition of macro ‘XMLRPC_MEMBLOCK_SIZE’
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:275:28: note: in definition of macro ‘XMLRPC_MEMBLOCK_SIZE’
# 1052| "XML-RPC CALL",
# 1053| XMLRPC_MEMBLOCK_CONTENTS(char, callInfoP->serialized_xml),
# 1054|-> XMLRPC_MEMBLOCK_SIZE(char, callInfoP->serialized_xml));
# 1055|
# 1056| clientP->transportOps.send_request(
Error: CLANG_WARNING: [#def237]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:1063:9: warning[unix.Malloc]: Use of memory after it is freed
# 1061| }
# 1062| if (envP->fault_occurred)
# 1063|-> callInfoDestroy(callInfoP);
# 1064| else {
# 1065| /* asynchComplete() will destroy *callInfoP */
Error: CLANG_WARNING: [#def238]
xmlrpc-c-1.59.03/src/xmlrpc_client.c:1094:9: warning[core.CallAndMessage]: 5th function call argument is an uninitialized value
# 1092|
# 1093| if (!envP->fault_occurred) {
# 1094|-> xmlrpc_client_start_rpc(envP, clientP,
# 1095| serverInfoP, methodName, paramArrayP,
# 1096| responseHandler, userHandle);
Error: CPPCHECK_WARNING (CWE-457): [#def239]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:146: warning[uninitvar]: Uninitialized variable: resultP
# 144| va_end(args);
# 145| }
# 146|-> return resultP;
# 147| }
# 148|
Error: CLANG_WARNING: [#def240]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:146:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 144| va_end(args);
# 145| }
# 146|-> return resultP;
# 147| }
# 148|
Error: CPPCHECK_WARNING (CWE-457): [#def241]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:171: warning[uninitvar]: Uninitialized variable: resultP
# 169| va_end(args);
# 170| }
# 171|-> return resultP;
# 172| }
# 173|
Error: CLANG_WARNING: [#def242]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:171:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 169| va_end(args);
# 170| }
# 171|-> return resultP;
# 172| }
# 173|
Error: CPPCHECK_WARNING (CWE-457): [#def243]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:192: warning[uninitvar]: Uninitialized variable: resultP
# 190| &resultP);
# 191|
# 192|-> return resultP;
# 193| }
# 194|
Error: CLANG_WARNING: [#def244]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:192:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 190| &resultP);
# 191|
# 192|-> return resultP;
# 193| }
# 194|
Error: CPPCHECK_WARNING (CWE-457): [#def245]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:220: warning[uninitvar]: Uninitialized variable: resultP
# 218| }
# 219| }
# 220|-> return resultP;
# 221| }
# 222|
Error: CLANG_WARNING: [#def246]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:220:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 218| }
# 219| }
# 220|-> return resultP;
# 221| }
# 222|
Error: CLANG_WARNING: [#def247]
xmlrpc-c-1.59.03/src/xmlrpc_client_global.c:333:9: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 331| validateGlobalClientExists(&env);
# 332|
# 333|-> if (!env.fault_occurred) {
# 334| va_list args;
# 335|
Error: GCC_ANALYZER_WARNING (CWE-476): [#def248]
xmlrpc-c-1.59.03/src/xmlrpc_data.c: scope_hint: In function ‘xmlrpc_int_new’
xmlrpc-c-1.59.03/src/xmlrpc_data.c:441:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 439|
# 440| if (!envP->fault_occurred) {
# 441|-> valP->_type = XMLRPC_TYPE_INT;
# 442| valP->_value.i = value;
# 443| }
Error: GCC_ANALYZER_WARNING (CWE-476): [#def249]
xmlrpc-c-1.59.03/src/xmlrpc_data.c: scope_hint: In function ‘xmlrpc_i8_new’
xmlrpc-c-1.59.03/src/xmlrpc_data.c:477:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 475|
# 476| if (!envP->fault_occurred) {
# 477|-> valP->_type = XMLRPC_TYPE_I8;
# 478| valP->_value.i8 = value;
# 479| }
Error: GCC_ANALYZER_WARNING (CWE-476): [#def250]
xmlrpc-c-1.59.03/src/xmlrpc_data.c: scope_hint: In function ‘xmlrpc_bool_new’
xmlrpc-c-1.59.03/src/xmlrpc_data.c:513:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 511|
# 512| if (!envP->fault_occurred) {
# 513|-> valP->_type = XMLRPC_TYPE_BOOL;
# 514| valP->_value.b = value;
# 515| }
Error: GCC_ANALYZER_WARNING (CWE-476): [#def251]
xmlrpc-c-1.59.03/src/xmlrpc_data.c: scope_hint: In function ‘xmlrpc_double_new.part.0’
xmlrpc-c-1.59.03/src/xmlrpc_data.c:554:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 552|
# 553| if (!envP->fault_occurred) {
# 554|-> valP->_type = XMLRPC_TYPE_DOUBLE;
# 555| valP->_value.d = value;
# 556| }
Error: GCC_ANALYZER_WARNING (CWE-476): [#def252]
xmlrpc-c-1.59.03/src/xmlrpc_data.c: scope_hint: In function ‘xmlrpc_base64_new’
xmlrpc-c-1.59.03/src/xmlrpc_data.c:593:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 591|
# 592| if (!envP->fault_occurred) {
# 593|-> valP->_type = XMLRPC_TYPE_BASE64;
# 594|
# 595| valP->blockP = xmlrpc_mem_block_new(envP, length);
Error: CPPCHECK_WARNING (CWE-672): [#def253]
xmlrpc-c-1.59.03/src/xmlrpc_data.c:604: error[deallocret]: Returning/dereferencing 'valP' after it is deallocated / released
# 602| free(valP);
# 603| }
# 604|-> return valP;
# 605| }
# 606|
Error: CLANG_WARNING: [#def254]
xmlrpc-c-1.59.03/src/xmlrpc_data.c:604:5: warning[unix.Malloc]: Use of memory after it is freed
# 602| free(valP);
# 603| }
# 604|-> return valP;
# 605| }
# 606|
Error: GCC_ANALYZER_WARNING (CWE-476): [#def255]
xmlrpc-c-1.59.03/src/xmlrpc_data.c: scope_hint: In function ‘xmlrpc_cptr_new_dtor’
xmlrpc-c-1.59.03/src/xmlrpc_data.c:654:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 652|
# 653| if (!envP->fault_occurred) {
# 654|-> valP->_type = XMLRPC_TYPE_C_PTR;
# 655| valP->_value.cptr.objectP = value;
# 656| valP->_value.cptr.dtor = dtor;
Error: GCC_ANALYZER_WARNING (CWE-476): [#def256]
xmlrpc-c-1.59.03/src/xmlrpc_data.c: scope_hint: In function ‘xmlrpc_nil_new’
xmlrpc-c-1.59.03/src/xmlrpc_data.c:691:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 689| xmlrpc_createXmlrpcValue(envP, &valP);
# 690| if (!envP->fault_occurred)
# 691|-> valP->_type = XMLRPC_TYPE_NIL;
# 692|
# 693| return valP;
Error: CLANG_WARNING: [#def257]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:151:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 149| char dtString[64];
# 150|
# 151|-> xmlrpc_gmtime(secs, &brokenTime);
# 152|
# 153| /* Note that this format is NOT ISO 8601 -- it's a bizarre
Error: CLANG_WARNING: [#def258]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:159:23: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value
# 157| &brokenTime);
# 158|
# 159|-> if (usecs != 0) {
# 160| char usecString[32];
# 161| assert(usecs < 1000000);
Error: CLANG_WARNING: [#def259]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:274:25: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 272| xmlrpc_read_datetime_usec(envP, valueP, &secs, &usecs);
# 273|
# 274|-> timeValueP->tv_sec = secs;
# 275| timeValueP->tv_usec = usecs;
# 276| }
Error: CLANG_WARNING: [#def260]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:275:25: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 273|
# 274| timeValueP->tv_sec = secs;
# 275|-> timeValueP->tv_usec = usecs;
# 276| }
# 277| #endif
Error: CLANG_WARNING: [#def261]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:293:25: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 291| xmlrpc_read_datetime_usec(envP, valueP, &secs, &usecs);
# 292|
# 293|-> timeValueP->tv_sec = secs;
# 294| timeValueP->tv_nsec = usecs * 1000;
# 295| }
Error: CLANG_WARNING: [#def262]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:294:33: warning[core.UndefinedBinaryOperatorResult]: The left operand of '*' is a garbage value
# 292|
# 293| timeValueP->tv_sec = secs;
# 294|-> timeValueP->tv_nsec = usecs * 1000;
# 295| }
# 296| #endif
Error: CLANG_WARNING: [#def263]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:376:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 374| free(readBufferP);
# 375| }
# 376|-> return valP;
# 377| }
# 378|
Error: CPPCHECK_WARNING (CWE-457): [#def264]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:571: error[legacyUninitvar]: Uninitialized variable: retval
# 569| }
# 570|
# 571|-> return retval;
# 572| }
# 573|
Error: CLANG_WARNING: [#def265]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:571:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 569| }
# 570|
# 571|-> return retval;
# 572| }
# 573|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def266]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c: scope_hint: In function ‘xmlrpc_datetime_new_str’
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:571:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘retval’
# 569| }
# 570|
# 571|-> return retval;
# 572| }
# 573|
Error: COMPILER_WARNING (CWE-457): [#def267]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c: scope_hint: In function ‘xmlrpc_datetime_new_str’
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:571:12: warning[-Wmaybe-uninitialized]: ‘retval’ may be used uninitialized
# 571 | return retval;
# | ^~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:554:20: note: ‘retval’ was declared here
# 554 | xmlrpc_value * retval;
# | ^~~~~~
# 569| }
# 570|
# 571|-> return retval;
# 572| }
# 573|
Error: CLANG_WARNING: [#def268]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:606:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 604| valueP = xmlrpc_datetime_new(envP, dt);
# 605| }
# 606|-> return valueP;
# 607| }
# 608|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def269]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c: scope_hint: In function ‘xmlrpc_datetime_new_usec’
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:606:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘valueP’
# 604| valueP = xmlrpc_datetime_new(envP, dt);
# 605| }
# 606|-> return valueP;
# 607| }
# 608|
Error: COMPILER_WARNING (CWE-457): [#def270]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c: scope_hint: In function ‘xmlrpc_datetime_new_usec’
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:606:12: warning[-Wmaybe-uninitialized]: ‘valueP’ may be used uninitialized
# 606 | return valueP;
# | ^~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:585:20: note: ‘valueP’ was declared here
# 585 | xmlrpc_value * valueP;
# | ^~~~~~
# 604| valueP = xmlrpc_datetime_new(envP, dt);
# 605| }
# 606|-> return valueP;
# 607| }
# 608|
Error: COMPILER_WARNING (CWE-457): [#def271]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c: scope_hint: In function ‘xmlrpc_datetime_new_timeval’
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:626:12: warning[-Wmaybe-uninitialized]: ‘valueP’ may be used uninitialized
# 626 | return xmlrpc_datetime_new_usec(envP, value.tv_sec, value.tv_usec);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:585:20: note: ‘valueP’ was declared here
# 585 | xmlrpc_value * valueP;
# | ^~~~~~
# 624| struct timeval const value) {
# 625|
# 626|-> return xmlrpc_datetime_new_usec(envP, value.tv_sec, value.tv_usec);
# 627| }
# 628| #endif
Error: COMPILER_WARNING (CWE-457): [#def272]
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c: scope_hint: In function ‘xmlrpc_datetime_new_timespec’
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:638:12: warning[-Wmaybe-uninitialized]: ‘valueP’ may be used uninitialized
# 638 | return xmlrpc_datetime_new_usec(envP, value.tv_sec, value.tv_nsec/1000);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_datetime.c:585:20: note: ‘valueP’ was declared here
# 585 | xmlrpc_value * valueP;
# | ^~~~~~
# 636| struct timespec const value) {
# 637|
# 638|-> return xmlrpc_datetime_new_usec(envP, value.tv_sec, value.tv_nsec/1000);
# 639| }
# 640| #endif
Error: CLANG_WARNING: [#def273]
xmlrpc-c-1.59.03/src/xmlrpc_decompose.c:726:64: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 724|
# 725| if (!envP->fault_occurred)
# 726|-> decompNodeP->store.Tarray.itemArray[itemCnt++] = itemNodeP;
# 727| }
# 728| }
Error: GCC_ANALYZER_WARNING (CWE-457): [#def274]
xmlrpc-c-1.59.03/src/xmlrpc_decompose.c: scope_hint: In function ‘doStructValue’
xmlrpc-c-1.59.03/src/xmlrpc_decompose.c:757:27: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘valueNodeP’
# 755|
# 756| if (!envP->fault_occurred)
# 757|-> mbrP->decompTreeP = valueNodeP;
# 758| }
# 759|
Error: CLANG_WARNING: [#def275]
xmlrpc-c-1.59.03/src/xmlrpc_decompose.c:1064:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 1062|
# 1063| if (envP->fault_occurred)
# 1064|-> destroyDecompTree(decompRootP);
# 1065| }
# 1066| *decompRootPP = decompRootP;
Error: CLANG_WARNING: [#def276]
xmlrpc-c-1.59.03/src/xmlrpc_decompose.c:1066:19: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 1064| destroyDecompTree(decompRootP);
# 1065| }
# 1066|-> *decompRootPP = decompRootP;
# 1067| }
# 1068|
Error: COMPILER_WARNING (CWE-563): [#def277]
xmlrpc-c-1.59.03/src/xmlrpc_expat.c: scope_hint: In function ‘xml_init’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:47:29: warning[-Wunused-parameter]: unused parameter ‘envP’
# 47 | xml_init(xmlrpc_env * const envP) {
# | ~~~~~~~~~~~~~~~~~~~^~~~
# 45|
# 46| void
# 47|-> xml_init(xmlrpc_env * const envP) {
# 48|
# 49| XMLRPC_ASSERT_ENV_OK(envP);
Error: GCC_ANALYZER_WARNING (CWE-476): [#def278]
xmlrpc-c-1.59.03/src/xmlrpc_expat.c: scope_hint: In function ‘xml_element_free’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:132:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘elemP’
xmlrpc-c-1.59.03/include/xmlrpc-c/base.h:11: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:13: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:80:5: note: in expansion of macro ‘XMLRPC_FAIL_IF_NULL’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:80:5: note: in expansion of macro ‘XMLRPC_FAIL_IF_NULL’
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:226:13: note: in expansion of macro ‘XMLRPC_FAIL’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:80:5: note: in expansion of macro ‘XMLRPC_FAIL_IF_NULL’
# 130| XMLRPC_ASSERT_ELEM_OK(elemP);
# 131|
# 132|-> xmlrpc_strfree(elemP->name);
# 133| elemP->name = XMLRPC_BAD_POINTER;
# 134|
Error: GCC_ANALYZER_WARNING (CWE-416): [#def279]
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:132:5: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘elemP’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:80:5: note: in expansion of macro ‘XMLRPC_FAIL_IF_NULL’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:144:5: note: in expansion of macro ‘XMLRPC_MEMBLOCK_FREE’
# 130| XMLRPC_ASSERT_ELEM_OK(elemP);
# 131|
# 132|-> xmlrpc_strfree(elemP->name);
# 133| elemP->name = XMLRPC_BAD_POINTER;
# 134|
Error: GCC_ANALYZER_WARNING (CWE-476): [#def280]
xmlrpc-c-1.59.03/src/xmlrpc_expat.c: scope_hint: In function ‘xml_element_append_child’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:242:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 240| XMLRPC_MEMBLOCK_APPEND(xml_element *, envP, elemP->childrenP, &childP, 1);
# 241| if (!envP->fault_occurred)
# 242|-> childP->parentP = elemP;
# 243| else
# 244| xml_element_free(childP);
Error: GCC_ANALYZER_WARNING (CWE-401): [#def281]
xmlrpc-c-1.59.03/src/xmlrpc_expat.c: scope_hint: In function ‘startElement.part.0’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:305:27: warning[-Wanalyzer-malloc-leak]: leak of ‘xmlElementNew(&*(ParseContext *)userData.env, name)’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:80:5: note: in expansion of macro ‘XMLRPC_FAIL_IF_NULL’
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:80:5: note: in expansion of macro ‘XMLRPC_FAIL_IF_NULL’
# 303|
# 304| elemP = xmlElementNew(&contextP->env, name);
# 305|-> if (!contextP->env.fault_occurred) {
# 306| XMLRPC_ASSERT(elemP != NULL);
# 307|
Error: CLANG_WARNING: [#def282]
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:495:17: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 493| envP, XMLRPC_PARSE_ERROR,
# 494| xmlrpc_XML_GetErrorString(parser));
# 495|-> if (!context.env.fault_occurred) {
# 496| /* Have to clean up what our handlers built before Expat
# 497| barfed.
Error: CLANG_WARNING: [#def283]
xmlrpc-c-1.59.03/src/xmlrpc_expat.c:507:17: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 505| such a problem in *contextP.
# 506| */
# 507|-> if (context.env.fault_occurred)
# 508| xmlrpc_env_set_fault_formatted(
# 509| envP, context.env.fault_code,
Error: CLANG_WARNING: [#def284]
xmlrpc-c-1.59.03/src/xmlrpc_parse.c:656:13: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 654| retval = NULL;
# 655| else {
# 656|-> if (faultString) {
# 657| xmlrpc_env_set_fault(envP, faultCode, faultString);
# 658| xmlrpc_strfree(faultString);
Error: CLANG_WARNING: [#def285]
xmlrpc-c-1.59.03/src/xmlrpc_parse.c:661:20: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 659| retval = NULL;
# 660| } else
# 661|-> retval = result; /* transfer reference */
# 662| }
# 663| return retval;
Error: COMPILER_WARNING (CWE-457): [#def286]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:161:22: warning[-Wmaybe-uninitialized]: ‘xmlProcessorMaxStackSize’ may be used uninitialized
# 161 | size_t const stackSize =
# | ^~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c: scope_hint: In function ‘xmlrpc_server_abyss_set_handler3’
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:219:12: note: ‘xmlProcessorMaxStackSize’ was declared here
# 219 | size_t xmlProcessorMaxStackSize;
# | ^~~~~~~~~~~~~~~~~~~~~~~~
# 159|
# 160| {
# 161|-> size_t const stackSize =
# 162| xmlrpc_abyss_handler_stacksize() + xmlProcessorMaxStackSize;
# 163| struct ServerReqHandler3 const handlerDesc = {
Error: CLANG_WARNING: [#def287]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:194:12: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 192|
# 193| if (parmSize >= XMLRPC_AHPSIZE(access_ctl_expires)
# 194|-> && parmsP->access_ctl_expires) {
# 195| expires = true;
# 196|
Error: CLANG_WARNING: [#def288]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:251:13: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 249|
# 250| if (parmSize >= XMLRPC_AHPSIZE(chunk_response) &&
# 251|-> parmsP->chunk_response)
# 252| uriHandlerXmlrpcP->chunkResponse = parmsP->chunk_response;
# 253| else
Error: CLANG_WARNING: [#def289]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:263:9: warning[core.CallAndMessage]: 4th function call argument is an uninitialized value
# 261| }
# 262| if (!envP->fault_occurred)
# 263|-> setHandler(envP, srvP, uriHandlerXmlrpcP, xmlProcessorMaxStackSize);
# 264|
# 265| if (envP->fault_occurred)
Error: COMPILER_WARNING (CWE-457): [#def290]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:461:8: warning[-Wmaybe-uninitialized]: ‘sockAddrP’ may be used uninitialized
# 461 | if (*sockAddrPP == NULL) {
# | ^
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c: scope_hint: In function ‘xmlrpc_server_abyss_create’
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:649:29: note: ‘sockAddrP’ was declared here
# 649 | const struct sockaddr * sockAddrP;
# | ^~~~~~~~~
# 459| *sockAddrPP = NULL;
# 460|
# 461|-> if (*sockAddrPP == NULL) {
# 462| unsigned int portNumber;
# 463|
Error: COMPILER_WARNING (CWE-457): [#def291]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:529:5: warning[-Wmaybe-uninitialized]: ‘socketFd’ may be used uninitialized
# 529 | ChanSwitchUnixCreateFd(socketFd, chanSwitchPP, errorP);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c: scope_hint: In function ‘xmlrpc_server_abyss_create’
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:652:15: note: ‘socketFd’ was declared here
# 652 | TOsSocket socketFd;
# | ^~~~~~~~
# 527| ChanSwitchWinCreateWinsock(socketFd, chanSwitchPP, errorP);
# 528| #else
# 529|-> ChanSwitchUnixCreateFd(socketFd, chanSwitchPP, errorP);
# 530| #endif
# 531|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def292]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:565:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘protocolFamily’
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c: scope_hint: In function ‘createChanSwitchSockAddr’
# 563| chanSwitchPP, errorP);
# 564| #else
# 565|-> ChanSwitchUnixCreate2(protocolFamily, sockAddrP, sockAddrLen,
# 566| chanSwitchPP, errorP);
# 567| #endif
Error: COMPILER_WARNING (CWE-457): [#def293]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:565:5: warning[-Wmaybe-uninitialized]: ‘protocolFamily’ may be used uninitialized
# 565 | ChanSwitchUnixCreate2(protocolFamily, sockAddrP, sockAddrLen,
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 566 | chanSwitchPP, errorP);
# | ~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c: scope_hint: In function ‘xmlrpc_server_abyss_create’
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:579:9: note: ‘protocolFamily’ was declared here
# 579 | int protocolFamily;
# | ^~~~~~~~~~~~~~
# 563| chanSwitchPP, errorP);
# 564| #else
# 565|-> ChanSwitchUnixCreate2(protocolFamily, sockAddrP, sockAddrLen,
# 566| chanSwitchPP, errorP);
# 567| #endif
Error: COMPILER_WARNING (CWE-457): [#def294]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:565:5: warning[-Wmaybe-uninitialized]: ‘sockAddrLen’ may be used uninitialized
# 565 | ChanSwitchUnixCreate2(protocolFamily, sockAddrP, sockAddrLen,
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 566 | chanSwitchPP, errorP);
# | ~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c: scope_hint: In function ‘xmlrpc_server_abyss_create’
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:650:15: note: ‘sockAddrLen’ was declared here
# 650 | socklen_t sockAddrLen;
# | ^~~~~~~~~~~
# 563| chanSwitchPP, errorP);
# 564| #else
# 565|-> ChanSwitchUnixCreate2(protocolFamily, sockAddrP, sockAddrLen,
# 566| chanSwitchPP, errorP);
# 567| #endif
Error: CLANG_WARNING: [#def295]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:599:9: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 597| const char * error;
# 598|
# 599|-> chanSwitchCreateSockAddr(protocolFamily, sockAddrP, sockAddrLen,
# 600| chanSwitchPP, &error);
# 601|
Error: CLANG_WARNING: [#def296]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:885:1: warning[unix.Malloc]: Potential leak of memory pointed to by 'serverP'
# 883| }
# 884| }
# 885|-> }
# 886|
# 887|
Error: CLANG_WARNING: [#def297]
xmlrpc-c-1.59.03/src/xmlrpc_server_abyss.c:1161:9: warning[core.CallAndMessage]: 2nd function call argument is an uninitialized value
# 1159| xmlrpc_server_abyss_sig * oldHandlersP;
# 1160|
# 1161|-> xmlrpc_server_abyss_setup_sig(envP, serverP, &oldHandlersP);
# 1162|
# 1163| if (!envP->fault_occurred) {
Error: CLANG_WARNING: [#def298]
xmlrpc-c-1.59.03/src/xmlrpc_server_cgi.c:213:38: warning[core.NonNullParamChecker]: Null pointer passed to 1st parameter expecting 'nonnull'
# 211| if (!type || !xmlrpc_strneq(type, "text/xml", strlen("text/xml"))) {
# 212| char *template = "Expected content type: \"text/xml\", received: \"%s\"";
# 213|-> size_t err_len = strlen(template) + strlen(type) + 1;
# 214| char *err = malloc(err_len);
# 215|
Error: CLANG_WARNING: [#def299]
xmlrpc-c-1.59.03/src/xmlrpc_server_cgi.c:258:9: warning[unix.Malloc]: Potential leak of memory pointed to by 'err'
# 256|
# 257| cleanup:
# 258|-> if (input)
# 259| xmlrpc_mem_block_free(input);
# 260| if (output)
Error: GCC_ANALYZER_WARNING (CWE-401): [#def300]
xmlrpc-c-1.59.03/src/xmlrpc_server_info.c: scope_hint: In function ‘xmlrpc_server_info_new’
xmlrpc-c-1.59.03/src/xmlrpc_server_info.c:61:13: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 59| }
# 60| if (envP->fault_occurred)
# 61|-> free(serverInfoP);
# 62| }
# 63| return serverInfoP;
Error: CLANG_WARNING: [#def301]
xmlrpc-c-1.59.03/src/xmlrpc_server_info.c:63:5: warning[unix.Malloc]: Use of memory after it is freed
# 61| free(serverInfoP);
# 62| }
# 63|-> return serverInfoP;
# 64| }
# 65|
Error: GCC_ANALYZER_WARNING (CWE-401): [#def302]
xmlrpc-c-1.59.03/src/xmlrpc_server_info.c: scope_hint: In function ‘xmlrpc_server_info_copy’
xmlrpc-c-1.59.03/src/xmlrpc_server_info.c:165:13: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 163|
# 164| if (envP->fault_occurred)
# 165|-> free(serverInfoP);
# 166| }
# 167| return serverInfoP;
Error: CLANG_WARNING: [#def303]
xmlrpc-c-1.59.03/src/xmlrpc_server_info.c:167:5: warning[unix.Malloc]: Use of memory after it is freed
# 165| free(serverInfoP);
# 166| }
# 167|-> return serverInfoP;
# 168| }
# 169|
Error: GCC_ANALYZER_WARNING (CWE-122): [#def304]
xmlrpc-c-1.59.03/src/xmlrpc_string.c: scope_hint: In function ‘copyAndConvertLfToCrlf’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:201:22: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/include/xmlrpc-c/base.h:11: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_string.c:22: included_from: Included from here.
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:275:28: note: in definition of macro ‘XMLRPC_MEMBLOCK_SIZE’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:20: included_from: Included from here.
xmlrpc-c-1.59.03/src/xmlrpc_string.c:191:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:191:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:201:22: note: write of 1 byte to beyond the end of the region
# 199| for (p = &src[0], q = &dst[0]; p < srcEnd; ++p) {
# 200| if (*p == '\n')
# 201|-> *q++ = '\r';
# 202|
# 203| *q++ = *p;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def305]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:203:18: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:275:28: note: in definition of macro ‘XMLRPC_MEMBLOCK_SIZE’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:191:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:191:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:203:18: note: write of 1 byte to beyond the end of the region
# 201| *q++ = '\r';
# 202|
# 203|-> *q++ = *p;
# 204| }
# 205| XMLRPC_ASSERT(q == dst + dstLen);
Error: GCC_ANALYZER_WARNING (CWE-122): [#def306]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:207:12: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:275:28: note: in definition of macro ‘XMLRPC_MEMBLOCK_SIZE’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:191:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:191:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:207:12: note: write of 1 byte to beyond the end of the region
# 205| XMLRPC_ASSERT(q == dst + dstLen);
# 206|
# 207|-> *q = '\0';
# 208|
# 209| *dstP = dst;
Error: GCC_ANALYZER_WARNING (CWE-131): [#def307]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:392:27: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
xmlrpc-c-1.59.03/src/xmlrpc_string.c:384:9: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:384:9: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:384:9: note: in expansion of macro ‘MALLOCARRAY’
# 390| stringValue[length] = '\0';
# 391|
# 392|-> *stringValueP = stringValue;
# 393| }
# 394| }
Error: GCC_ANALYZER_WARNING (CWE-122): [#def308]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:445:22: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:445:22: note: write of 3 bytes to beyond the end of the region
# 443| for (p = &src[0], q = &dst[0]; p < srcEnd; ++p) {
# 444| if (*p == '\n')
# 445|-> *q++ = '\r';
# 446|
# 447| *q++ = *p;
Error: GCC_ANALYZER_WARNING (CWE-122): [#def309]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:447:18: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:447:18: note: write of 3 bytes to beyond the end of the region
# 445| *q++ = '\r';
# 446|
# 447|-> *q++ = *p;
# 448| }
# 449| XMLRPC_ASSERT(q == dst + dstLen);
Error: GCC_ANALYZER_WARNING (CWE-122): [#def310]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:451:12: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:451:12: note: write of 3 bytes to beyond the end of the region
# 449| XMLRPC_ASSERT(q == dst + dstLen);
# 450|
# 451|-> *q = '\0';
# 452|
# 453| *dstP = dst;
Error: GCC_ANALYZER_WARNING (CWE-131): [#def311]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:453:18: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:435:5: note: in expansion of macro ‘MALLOCARRAY’
# 451| *q = '\0';
# 452|
# 453|-> *dstP = dst;
# 454| *dstLenP = dstLen;
# 455| }
Error: GCC_ANALYZER_WARNING (CWE-131): [#def312]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:522:31: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
xmlrpc-c-1.59.03/src/xmlrpc_string.c: scope_hint: In function ‘xmlrpc_read_string_w_lp’
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:277:40: note: in definition of macro ‘XMLRPC_MEMBLOCK_CONTENTS’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:513:13: note: in expansion of macro ‘MALLOCARRAY’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:513:13: note: in expansion of macro ‘MALLOCARRAY’
# 520|
# 521| *lengthP = size - 1; /* size includes terminating NUL */
# 522|-> *stringValueP = stringValue;
# 523| }
# 524| }
Error: CLANG_WARNING: [#def313]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:784:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 782| xmlrpc_value * retval;
# 783| stringNew(envP, length, value, CR_IS_LINEDELIM, &retval);
# 784|-> return retval;
# 785| }
# 786|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def314]
xmlrpc-c-1.59.03/src/xmlrpc_string.c: scope_hint: In function ‘xmlrpc_string_new_lp’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:784:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘retval’
# 782| xmlrpc_value * retval;
# 783| stringNew(envP, length, value, CR_IS_LINEDELIM, &retval);
# 784|-> return retval;
# 785| }
# 786|
Error: CLANG_WARNING: [#def315]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:796:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 794| xmlrpc_value * retval;
# 795| stringNew(envP, length, value, CR_IS_CHAR, &retval);
# 796|-> return retval;
# 797| }
# 798|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def316]
xmlrpc-c-1.59.03/src/xmlrpc_string.c: scope_hint: In function ‘xmlrpc_string_new_lp_cr’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:796:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘retval’
# 794| xmlrpc_value * retval;
# 795| stringNew(envP, length, value, CR_IS_CHAR, &retval);
# 796|-> return retval;
# 797| }
# 798|
Error: CLANG_WARNING: [#def317]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:807:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 805| xmlrpc_value * retval;
# 806| stringNew(envP, strlen(value), value, CR_IS_LINEDELIM, &retval);
# 807|-> return retval;
# 808| }
# 809|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def318]
xmlrpc-c-1.59.03/src/xmlrpc_string.c: scope_hint: In function ‘xmlrpc_string_new’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:807:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘retval’
# 805| xmlrpc_value * retval;
# 806| stringNew(envP, strlen(value), value, CR_IS_LINEDELIM, &retval);
# 807|-> return retval;
# 808| }
# 809|
Error: CLANG_WARNING: [#def319]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:818:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 816| xmlrpc_value * retval;
# 817| stringNew(envP, strlen(value), value, CR_IS_CHAR, &retval);
# 818|-> return retval;
# 819| }
# 820|
Error: GCC_ANALYZER_WARNING (CWE-457): [#def320]
xmlrpc-c-1.59.03/src/xmlrpc_string.c: scope_hint: In function ‘xmlrpc_string_new_cr’
xmlrpc-c-1.59.03/src/xmlrpc_string.c:818:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘retval’
# 816| xmlrpc_value * retval;
# 817| stringNew(envP, strlen(value), value, CR_IS_CHAR, &retval);
# 818|-> return retval;
# 819| }
# 820|
Error: CLANG_WARNING: [#def321]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:901:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 899| xmlrpc_value * valP;
# 900| stringWNew(envP, length, value, CR_IS_LINEDELIM, &valP);
# 901|-> return valP;
# 902| }
# 903|
Error: CLANG_WARNING: [#def322]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:914:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 912| xmlrpc_value * valP;
# 913| stringWNew(envP, length, value, CR_IS_CHAR, &valP);
# 914|-> return valP;
# 915| }
# 916|
Error: CLANG_WARNING: [#def323]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:926:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 924| xmlrpc_value * valP;
# 925| stringWNew(envP, wcslen(value), value, CR_IS_LINEDELIM, &valP);
# 926|-> return valP;
# 927| }
# 928|
Error: CLANG_WARNING: [#def324]
xmlrpc-c-1.59.03/src/xmlrpc_string.c:937:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 935| xmlrpc_value * valP;
# 936| stringWNew(envP, wcslen(value), value, CR_IS_CHAR, &valP);
# 937|-> return valP;
# 938| }
# 939|
Error: CLANG_WARNING: [#def325]
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:139:5: warning[unix.Malloc]: Use of memory after it is freed
# 137| free(valP);
# 138| }
# 139|-> return valP;
# 140| }
# 141|
Error: CLANG_WARNING: [#def326]
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:195:17: warning[unix.Malloc]: Attempt to free released memory
# 193|
# 194| if (envP->fault_occurred)
# 195|-> free(structP);
# 196| }
# 197| }
Error: CLANG_WARNING: [#def327]
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:198:5: warning[unix.Malloc]: Use of memory after it is freed
# 196| }
# 197| }
# 198|-> return structP;
# 199| }
# 200|
Error: CLANG_WARNING: [#def328]
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:498:24: warning[core.UndefinedBinaryOperatorResult]: The left operand of '==' is a garbage value
# 496|
# 497| if (!envP->fault_occurred) {
# 498|-> if (retval == NULL) {
# 499| xmlrpc_env_set_fault_formatted(
# 500| envP, XMLRPC_INDEX_ERROR,
Error: CPPCHECK_WARNING (CWE-457): [#def329]
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:511: error[legacyUninitvar]: Uninitialized variable: retval
# 509| xmlrpc_DECREF(keyP);
# 510| }
# 511|-> return retval;
# 512| }
# 513|
Error: CLANG_WARNING: [#def330]
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:511:5: warning[core.uninitialized.UndefReturn]: Undefined or garbage value returned to caller
# 509| xmlrpc_DECREF(keyP);
# 510| }
# 511|-> return retval;
# 512| }
# 513|
Error: COMPILER_WARNING (CWE-457): [#def331]
xmlrpc-c-1.59.03/src/xmlrpc_struct.c: scope_hint: In function ‘xmlrpc_struct_get_value_n’
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:511:12: warning[-Wmaybe-uninitialized]: ‘retval’ may be used uninitialized
# 511 | return retval;
# | ^~~~~~
xmlrpc-c-1.59.03/src/xmlrpc_struct.c:490:20: note: ‘retval’ declared here
# 490 | xmlrpc_value * retval;
# | ^~~~~~
# 509| xmlrpc_DECREF(keyP);
# 510| }
# 511|-> return retval;
# 512| }
# 513|
Error: GCC_ANALYZER_WARNING (CWE-688): [#def332]
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c: scope_hint: In function ‘dumpStructMember’
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c:318:32: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘prefix’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
# 316| printf("Unable to get struct member %u\n", index);
# 317| else {
# 318|-> int const blankCount = strlen(prefix);
# 319| const char * prefix2;
# 320| const char * blankPrefix;
Error: CLANG_WARNING: [#def333]
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c:359:39: warning[unix.Malloc]: Potential leak of memory pointed to by 'prefix1'
# 357| printf("%sStruct of %u members:\n", prefix, structSize);
# 358|
# 359|-> for (i = 0; i < structSize; ++i) {
# 360| const char * prefix1;
# 361|
Error: GCC_ANALYZER_WARNING (CWE-401): [#def334]
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c: scope_hint: In function ‘dumpStruct’
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c:374:1: warning[-Wanalyzer-malloc-leak]: leak of ‘prefix1’
# 372| }
# 373| xmlrpc_env_clean(&env);
# 374|-> }
# 375|
# 376|
Error: COMPILER_WARNING: [#def335]
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c: scope_hint: In function ‘dumpI8’
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c:438:16: warning[-Wformat=]: format ‘%lld’ expects argument of type ‘long long int’, but argument 3 has type ‘xmlrpc_int64’ {aka ‘long int’}
# 438 | printf("%s64-bit integer: %" XMLRPC_PRId64 "\n", prefix, value);
# | ^~~~~~~~~~~~~~~~~~~~~ ~~~~~
# | |
# | xmlrpc_int64 {aka long int}
xmlrpc-c-1.59.03/include/xmlrpc-c/util.h:23: included_from: Included from here.
xmlrpc-c-1.59.03/include/xmlrpc-c/base.h:11: included_from: Included from here.
xmlrpc-c-1.59.03/tools/lib/dumpvalue.c:19: included_from: Included from here.
xmlrpc-c-1.59.03/include/xmlrpc-c/config.h:40:28: note: format string is defined here
# 40 | #define XMLRPC_PRId64 "lld"
# 436| (unsigned long)valueP, env.fault_string);
# 437| else
# 438|-> printf("%s64-bit integer: %" XMLRPC_PRId64 "\n", prefix, value);
# 439|
# 440| xmlrpc_env_clean(&env);
Error: COMPILER_WARNING (CWE-457): [#def336]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:237:9: warning[-Wmaybe-uninitialized]: ‘cmdline.url’ may be used uninitialized
# 237 | if (strstr(urlArg, "://") != 0)
# | ^~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.url’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 235| const char ** const urlP) {
# 236|
# 237|-> if (strstr(urlArg, "://") != 0)
# 238| casprintf(urlP, "%s", urlArg);
# 239| else
Error: COMPILER_WARNING (CWE-457): [#def337]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘getDelimiter’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:286:31: warning[-Wmaybe-uninitialized]: ‘tokenType’ may be used uninitialized
# 286 | if (!envP->fault_occurred && tokenType != END)
# | ~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:270:20: note: ‘tokenType’ was declared here
# 270 | enum TokenType tokenType;
# | ^~~~~~~~~
# 284| }
# 285|
# 286|-> if (!envP->fault_occurred && tokenType != END)
# 287| ++cursor;
# 288|
Error: CLANG_WARNING: [#def338]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:286:44: warning[core.UndefinedBinaryOperatorResult]: The left operand of '!=' is a garbage value
# 284| }
# 285|
# 286|-> if (!envP->fault_occurred && tokenType != END)
# 287| ++cursor;
# 288|
Error: CLANG_WARNING: [#def339]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:290:12: warning[core.uninitialized.Assign]: Assigned value is garbage or undefined
# 288|
# 289| *cursorP = cursor;
# 290|-> *typeP = tokenType;
# 291| }
# 292|
Error: CLANG_WARNING: [#def340]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:706:13: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 704|
# 705| if (!envP->fault_occurred) {
# 706|-> if (strlen(cdata) == 0)
# 707| setError(envP, "Expected value type specifier such as 'i/' or "
# 708| "'array/' but found '%s'", *cursorP);
Error: COMPILER_WARNING (CWE-457): [#def341]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:779:32: warning[-Wmaybe-uninitialized]: ‘cmdline.paramCount’ may be used uninitialized
# 779 | for (i = 0; i < paramCount && !envP->fault_occurred; ++i) {
# | ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.paramCount’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 777| paramArrayP = xmlrpc_array_new(envP);
# 778|
# 779|-> for (i = 0; i < paramCount && !envP->fault_occurred; ++i) {
# 780| xmlrpc_value * paramP;
# 781| xmlrpc_env paramEnv;
Error: COMPILER_WARNING (CWE-457): [#def342]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:785:9: warning[-Wmaybe-uninitialized]: ‘cmdline.params’ may be used uninitialized
# 785 | computeParam(¶mEnv, params[i], ¶mP);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.params’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 783| xmlrpc_env_init(¶mEnv);
# 784|
# 785|-> computeParam(¶mEnv, params[i], ¶mP);
# 786|
# 787| if (!paramEnv.fault_occurred) {
Error: CLANG_WARNING: [#def343]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:788:13: warning[core.CallAndMessage]: 3rd function call argument is an uninitialized value
# 786|
# 787| if (!paramEnv.fault_occurred) {
# 788|-> xmlrpc_array_append_item(¶mEnv, paramArrayP, paramP);
# 789|
# 790| xmlrpc_DECREF(paramP);
Error: COMPILER_WARNING (CWE-457): [#def344]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:822:17: warning[-Wmaybe-uninitialized]: ‘cmdline.methodName’ may be used uninitialized
# 822 | *resultPP = xmlrpc_client_call_server_params(
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 823 | &env, serverInfoP, methodName, paramArrayP);
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.methodName’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 820| xmlrpc_env env;
# 821| xmlrpc_env_init(&env);
# 822|-> *resultPP = xmlrpc_client_call_server_params(
# 823| &env, serverInfoP, methodName, paramArrayP);
# 824|
Error: COMPILER_WARNING (CWE-457): [#def345]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:851:8: warning[-Wmaybe-uninitialized]: ‘MEM[(const char * *)&cmdline + 48B]’ may be used uninitialized
# 851 | if (transport && streq(transport, "curl")) {
# | ^
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘MEM[(const char * *)&cmdline + 48B]’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 849| clientparms.transport = transport;
# 850|
# 851|-> if (transport && streq(transport, "curl")) {
# 852| struct xmlrpc_curl_xportparms * curlXportParmsP;
# 853| MALLOCVAR(curlXportParmsP);
Error: COMPILER_WARNING (CWE-457): [#def346]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:855:44: warning[-Wmaybe-uninitialized]: ‘cmdline.curlinterface’ may be used uninitialized
# 855 | curlXportParmsP->network_interface = curlinterface;
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.curlinterface’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 853| MALLOCVAR(curlXportParmsP);
# 854|
# 855|-> curlXportParmsP->network_interface = curlinterface;
# 856| curlXportParmsP->no_ssl_verifypeer = curlnoverifypeer;
# 857| curlXportParmsP->no_ssl_verifyhost = curlnoverifyhost;
Error: COMPILER_WARNING (CWE-457): [#def347]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:858:44: warning[-Wmaybe-uninitialized]: ‘cmdline.curluseragent’ may be used uninitialized
# 858 | curlXportParmsP->user_agent = curluseragent;
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.curluseragent’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 856| curlXportParmsP->no_ssl_verifypeer = curlnoverifypeer;
# 857| curlXportParmsP->no_ssl_verifyhost = curlnoverifyhost;
# 858|-> curlXportParmsP->user_agent = curluseragent;
# 859|
# 860| clientparms.transportparmsP = curlXportParmsP;
Error: COMPILER_WARNING (CWE-457): [#def348]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:890:12: warning[-Wmaybe-uninitialized]: ‘cmdline.username’ may be used uninitialized
# 890 | if (userName) {
# | ^
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.username’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 888| serverInfoP = xmlrpc_server_info_new(envP, serverUrl);
# 889| if (!envP->fault_occurred) {
# 890|-> if (userName) {
# 891| xmlrpc_server_info_set_basic_auth(
# 892| envP, serverInfoP, userName, password);
Error: COMPILER_WARNING (CWE-457): [#def349]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:891:13: warning[-Wmaybe-uninitialized]: ‘cmdline.password’ may be used uninitialized
# 891 | xmlrpc_server_info_set_basic_auth(
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 892 | envP, serverInfoP, userName, password);
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.password’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 889| if (!envP->fault_occurred) {
# 890| if (userName) {
# 891|-> xmlrpc_server_info_set_basic_auth(
# 892| envP, serverInfoP, userName, password);
# 893| }
Error: COMPILER_WARNING (CWE-457): [#def350]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:916:8: warning[-Wmaybe-uninitialized]: ‘MEM <unsigned int> [(struct cmdlineInfo *)&cmdline + 80B]’ may be used uninitialized
# 916 | if (cmdline.xmlsizelimitSpec)
# | ^
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘MEM <unsigned int> [(struct cmdlineInfo *)&cmdline + 80B]’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 914| die_if_fault_occurred(&env);
# 915|
# 916|-> if (cmdline.xmlsizelimitSpec)
# 917| xmlrpc_limit_set(XMLRPC_XML_SIZE_LIMIT_ID, cmdline.xmlsizelimit);
# 918|
Error: CLANG_WARNING: [#def351]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:916:9: warning[core.uninitialized.Branch]: Branch condition evaluates to a garbage value
# 914| die_if_fault_occurred(&env);
# 915|
# 916|-> if (cmdline.xmlsizelimitSpec)
# 917| xmlrpc_limit_set(XMLRPC_XML_SIZE_LIMIT_ID, cmdline.xmlsizelimit);
# 918|
Error: COMPILER_WARNING (CWE-457): [#def352]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:917:9: warning[-Wmaybe-uninitialized]: ‘cmdline.xmlsizelimit’ may be used uninitialized
# 917 | xmlrpc_limit_set(XMLRPC_XML_SIZE_LIMIT_ID, cmdline.xmlsizelimit);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:904:24: note: ‘cmdline.xmlsizelimit’ was declared here
# 904 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 915|
# 916| if (cmdline.xmlsizelimitSpec)
# 917|-> xmlrpc_limit_set(XMLRPC_XML_SIZE_LIMIT_ID, cmdline.xmlsizelimit);
# 918|
# 919| computeUrl(cmdline.url, &url);
Error: GCC_ANALYZER_WARNING (CWE-457): [#def353]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:919:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘cmdline.url’
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c: scope_hint: In function ‘main’
# 917| xmlrpc_limit_set(XMLRPC_XML_SIZE_LIMIT_ID, cmdline.xmlsizelimit);
# 918|
# 919|-> computeUrl(cmdline.url, &url);
# 920|
# 921| computeParamArray(&env, cmdline.paramCount, cmdline.params, ¶mArrayP);
Error: CLANG_WARNING: [#def354]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:919:5: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 917| xmlrpc_limit_set(XMLRPC_XML_SIZE_LIMIT_ID, cmdline.xmlsizelimit);
# 918|
# 919|-> computeUrl(cmdline.url, &url);
# 920|
# 921| computeParamArray(&env, cmdline.paramCount, cmdline.params, ¶mArrayP);
Error: COMPILER_WARNING (CWE-457): [#def355]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:940:5: warning[-Wmaybe-uninitialized]: ‘resultP’ may be used uninitialized
# 940 | xmlrpc_DECREF(resultP);
# | ^~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:907:20: note: ‘resultP’ was declared here
# 907 | xmlrpc_value * resultP;
# | ^~~~~~~
# 938| strfree(url);
# 939|
# 940|-> xmlrpc_DECREF(resultP);
# 941|
# 942| freeCmdline(cmdline);
Error: CLANG_WARNING: [#def356]
xmlrpc-c-1.59.03/tools/xmlrpc/xmlrpc.c:944:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'cmdline.params'
# 942| freeCmdline(cmdline);
# 943|
# 944|-> xmlrpc_env_clean(&env);
# 945|
# 946| return 0;
Error: CLANG_WARNING: [#def357]
xmlrpc-c-1.59.03/tools/xmlrpc_dumpserver/xmlrpc_dumpserver.c:253:9: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 251| const char * error;
# 252|
# 253|-> runServer(cmdline.port, &error);
# 254|
# 255| if (error) {
Error: COMPILER_WARNING (CWE-457): [#def358]
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:132:9: warning[-Wmaybe-uninitialized]: ‘cmdline.url’ may be used uninitialized
# 132 | if (strstr(urlArg, "://") != 0) {
# | ^~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:247:24: note: ‘cmdline.url’ was declared here
# 247 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 130| const char ** const urlP) {
# 131|
# 132|-> if (strstr(urlArg, "://") != 0) {
# 133| *urlP = strdup(urlArg);
# 134| } else {
Error: COMPILER_WARNING (CWE-457): [#def359]
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:150:27: warning[-Wmaybe-uninitialized]: ‘cmdline.transport’ may be used uninitialized
# 150 | clientparms.transport = transport;
# | ~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:247:24: note: ‘cmdline.transport’ was declared here
# 247 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 148| struct xmlrpc_clientparms clientparms;
# 149|
# 150|-> clientparms.transport = transport;
# 151|
# 152| clientparms.transportparmsP = NULL;
Error: COMPILER_WARNING (CWE-457): [#def360]
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:178:12: warning[-Wmaybe-uninitialized]: ‘cmdline.username’ may be used uninitialized
# 178 | if (userName) {
# | ^
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:247:24: note: ‘cmdline.username’ was declared here
# 247 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 176| serverInfoP = xmlrpc_server_info_new(envP, serverUrl);
# 177| if (!envP->fault_occurred) {
# 178|-> if (userName) {
# 179| xmlrpc_server_info_set_basic_auth(
# 180| envP, serverInfoP, userName, password);
Error: COMPILER_WARNING (CWE-457): [#def361]
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:179:13: warning[-Wmaybe-uninitialized]: ‘cmdline.password’ may be used uninitialized
# 179 | xmlrpc_server_info_set_basic_auth(
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 180 | envP, serverInfoP, userName, password);
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c: scope_hint: In function ‘main’
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:247:24: note: ‘cmdline.password’ was declared here
# 247 | struct cmdlineInfo cmdline;
# | ^~~~~~~
# 177| if (!envP->fault_occurred) {
# 178| if (userName) {
# 179|-> xmlrpc_server_info_set_basic_auth(
# 180| envP, serverInfoP, userName, password);
# 181| }
Error: CLANG_WARNING: [#def362]
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:259:5: warning[core.CallAndMessage]: 1st function call argument is an uninitialized value
# 257| die_if_fault_occurred(&env);
# 258|
# 259|-> computeUrl(cmdline.url, &url);
# 260|
# 261| createServerInfo(&env, url, cmdline.username, cmdline.password,
Error: CLANG_WARNING: [#def363]
xmlrpc-c-1.59.03/tools/xmlrpc_transport/xmlrpc_transport.c:285:5: warning[unix.Malloc]: Potential leak of memory pointed to by 'url'
# 283| strfree(url);
# 284|
# 285|-> freeCmdline(cmdline);
# 286|
# 287| xmlrpc_env_clean(&env);
Scan Properties
| analyzer-version-clang | 18.1.3 |
| analyzer-version-cppcheck | 2.13.0 |
| analyzer-version-gcc | 14.0.1 |
| analyzer-version-gcc-analyzer | 14.0.1 |
| analyzer-version-shellcheck | 0.10.0 |
| enabled-plugins | clang, cppcheck, gcc, shellcheck |
| exit-code | 0 |
| host | ip-172-16-1-106.us-west-2.compute.internal |
| mock-config | fedora-41-x86_64 |
| project-name | xmlrpc-c-1.59.03-1.fc41 |
| store-results-to | /tmp/tmpbqez24sx/xmlrpc-c-1.59.03-1.fc41.tar.xz |
| time-created | 2024-04-22 11:25:03 |
| time-finished | 2024-04-22 11:28:15 |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmpbqez24sx/xmlrpc-c-1.59.03-1.fc41.tar.xz' '--gcc-analyze' '/tmp/tmpbqez24sx/xmlrpc-c-1.59.03-1.fc41.src.rpm' |
| tool-version | csmock-3.5.3-1.el9 |