bubblewrap-0.10.0-1.fc42

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
bubblewrap-0.10.0-build/bubblewrap-0.10.0/bind-mount.c: scope_hint: In function ‘bind_mount’
bubblewrap-0.10.0-build/bubblewrap-0.10.0/bind-mount.c:408:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(realpath(dest, 0), 2621440)’
#  406|       return BIND_MOUNT_ERROR_REALPATH_DEST;
#  407|   
#  408|->   dest_fd = open (resolved_dest, O_PATH | O_CLOEXEC);
#  409|     if (dest_fd < 0)
#  410|       {

Error: GCC_ANALYZER_WARNING: [#def2]
bubblewrap-0.10.0-build/bubblewrap-0.10.0/tests/try-syscall.c: scope_hint: In function ‘main’
bubblewrap-0.10.0-build/bubblewrap-0.10.0/tests/try-syscall.c:157:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘-1’
#  155|           {
#  156|             /* If not blocked by seccomp, this will fail with EBADF */
#  157|->           if (listen (-1, 42) != 0)
#  158|               {
#  159|                 errsv = errno;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.c: scope_hint: In function ‘load_file_data’
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.c:168:10: warning[-Wanalyzer-malloc-leak]: leak of ‘xrealloc(data, (long unsigned int)data_len)’
#  166|     if (res == NULL)
#  167|       die_oom ();
#  168|->   return res;
#  169|   }
#  170|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.c: scope_hint: In function ‘readlink_malloc’
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.c:168:10: warning[-Wanalyzer-malloc-leak]: leak of ‘xrealloc(value,  size)’
#  166|     if (res == NULL)
#  167|       die_oom ();
#  168|->   return res;
#  169|   }
#  170|   

Error: GCC_ANALYZER_WARNING (CWE-415): [#def5]
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.h:147:5: warning[-Wanalyzer-double-free]: double-‘free’ of ‘data’
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.c: scope_hint: In function ‘load_file_data’
#  145|   
#  146|     if (*pp)
#  147|->     free (*pp);
#  148|   }
#  149|   

Error: GCC_ANALYZER_WARNING (CWE-415): [#def6]
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.h:147:5: warning[-Wanalyzer-double-free]: double-‘free’ of ‘value’
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.c: scope_hint: In function ‘readlink_malloc’
bubblewrap-0.10.0-build/bubblewrap-0.10.0/utils.h:22: included_from: Included from here.
#  145|   
#  146|     if (*pp)
#  147|->     free (*pp);
#  148|   }
#  149|   

Scan Properties