chrony-4.6-0.1.pre1.fc41

List of Findings

Error: SHELLCHECK_WARNING (CWE-457): [#def1]
/etc/dhcp/dhclient.d/chrony.sh:4:30: warning[SC2154]: interface is referenced but not assigned.
#    2|   
#    3|   CHRONY_SOURCEDIR=/run/chrony-dhcp
#    4|-> SERVERFILE=$CHRONY_SOURCEDIR/$interface.sources
#    5|   
#    6|   chrony_config() {

Error: SHELLCHECK_WARNING (CWE-457): [#def2]
/etc/dhcp/dhclient.d/chrony.sh:13:17: warning[SC2154]: new_ntp_servers is referenced but not assigned.
#   11|   	if [ "$PEERNTP" != "no" ]; then
#   12|   		mkdir -p $CHRONY_SOURCEDIR
#   13|-> 		for server in $new_ntp_servers; do
#   14|   			echo "server $server ${NTPSERVERARGS:-iburst}" >> "$SERVERFILE"
#   15|   		done

Error: GCC_ANALYZER_WARNING (CWE-457): [#def3]
chrony-4.6-build/chrony-4.6-pre1/getdate.c: scope_hint: In function ‘gd_parse’
chrony-4.6-build/chrony-4.6-pre1/getdate.c:676:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyss’
chrony-4.6-build/chrony-4.6-pre1/getdate.c:661:9: note: in expansion of macro ‘YYCOPY’
chrony-4.6-build/chrony-4.6-pre1/getdate.c:1225:9: note: in expansion of macro ‘YYSTACK_RELOCATE’
chrony-4.6-build/chrony-4.6-pre1/getdate.c:661:9: note: in expansion of macro ‘YYCOPY’
chrony-4.6-build/chrony-4.6-pre1/getdate.c:1225:9: note: in expansion of macro ‘YYSTACK_RELOCATE’
chrony-4.6-build/chrony-4.6-pre1/getdate.c:661:9: note: in expansion of macro ‘YYCOPY’
chrony-4.6-build/chrony-4.6-pre1/getdate.c:1225:9: note: in expansion of macro ‘YYSTACK_RELOCATE’
#  674|   #  if defined __GNUC__ && 1 < __GNUC__
#  675|   #   define YYCOPY(Dst, Src, Count) \
#  676|->       __builtin_memcpy (Dst, Src, YY_CAST (YYSIZE_T, (Count)) * sizeof (*(Src)))
#  677|   #  else
#  678|   #   define YYCOPY(Dst, Src, Count)              \

Error: GCC_ANALYZER_WARNING (CWE-457): [#def4]
chrony-4.6-build/chrony-4.6-pre1/getdate.c:1352:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(unsigned int *)<unknown>’
# 1350|        unconditionally makes the parser a bit smaller, and it avoids a
# 1351|        GCC warning that YYVAL may be used uninitialized.  */
# 1352|->   yyval = yyvsp[1-yylen];
# 1353|   
# 1354|   

Error: CPPCHECK_WARNING (CWE-457): [#def5]
chrony-4.6-build/chrony-4.6-pre1/hwclock.c:192: warning[uninitvar]: Uninitialized variable: min_delay
#  190|       }
#  191|   
#  192|->     if (i == 0 || min_delay > delay) {
#  193|         min_delay = delay;
#  194|         min_reading = i;

Error: CPPCHECK_WARNING (CWE-457): [#def6]
chrony-4.6-build/chrony-4.6-pre1/keys.c:339: error[uninitvar]: Uninitialized variable: buf
#  337|     switch (key->class) {
#  338|       case NTP_MAC:
#  339|->       return HSH_Hash(key->data.ntp_mac.hash_id, buf, 0, buf, 0, buf, sizeof (buf));
#  340|       case CMAC:
#  341|         return CMC_Hash(key->data.cmac, buf, 0, buf, sizeof (buf));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def7]
chrony-4.6-build/chrony-4.6-pre1/main.c: scope_hint: In function ‘go_daemon’
chrony-4.6-build/chrony-4.6-pre1/main.c:386:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/null", 0)’
#  384|         /* Open /dev/null as new stdin/out/err */
#  385|         errno = 0;
#  386|->       if (open(DEV_NULL, O_RDONLY) != STDIN_FILENO ||
#  387|             open(DEV_NULL, O_WRONLY) != STDOUT_FILENO ||
#  388|             open(DEV_NULL, O_RDWR) != STDERR_FILENO)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def8]
chrony-4.6-build/chrony-4.6-pre1/main.c:386:52: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/null", 1)’
#  384|         /* Open /dev/null as new stdin/out/err */
#  385|         errno = 0;
#  386|->       if (open(DEV_NULL, O_RDONLY) != STDIN_FILENO ||
#  387|             open(DEV_NULL, O_WRONLY) != STDOUT_FILENO ||
#  388|             open(DEV_NULL, O_RDWR) != STDERR_FILENO)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def9]
chrony-4.6-build/chrony-4.6-pre1/main.c:387:53: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/null", 2)’
#  385|         errno = 0;
#  386|         if (open(DEV_NULL, O_RDONLY) != STDIN_FILENO ||
#  387|->           open(DEV_NULL, O_WRONLY) != STDOUT_FILENO ||
#  388|             open(DEV_NULL, O_RDWR) != STDERR_FILENO)
#  389|           LOG_FATAL("Could not open %s : %s", DEV_NULL, strerror(errno));

Scan Properties