gnome-kiosk-47.0-1.fc42

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-dbus-utils.c: scope_hint: In function ‘dashed_string_to_studly_caps’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-dbus-utils.c:51:32: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-dbus-utils.h:4: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-dbus-utils.c:2: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-dbus-utils.c:50:25: note: in expansion of macro ‘g_strdup’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-dbus-utils.c: scope_hint: In function ‘dashed_string_to_studly_caps’
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
#   49|   
#   50|           studly_string = g_strdup (dashed_string);
#   51|->         studly_string_length = strlen (studly_string);
#   52|   
#   53|           studly_string[i] = g_ascii_toupper (studly_string[i]);

Error: GCC_ANALYZER_WARNING (CWE-126): [#def2]
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c: scope_hint: In function ‘setup_bus_watcher’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:619:40: warning[-Wanalyzer-out-of-bounds]: buffer over-read
/usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.h:3: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:2: included_from: Included from here.
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:635:9: note: in expansion of macro ‘g_return_val_if_fail’
/usr/include/glib-2.0/glib.h:64: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:637:9: note: in expansion of macro ‘g_debug’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:619:40: note: read of 8 bytes from after the end of ‘allowed_app_list’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:619:40: note: valid subscripts for ‘allowed_app_list’ are ‘[0]’ to ‘[2]’
#  617|           int i;
#  618|   
#  619|->         for (i = 0; allowed_app_list[i].name; i++) {
#  620|                   allowed_app_list[i].watcher_id =
#  621|                           g_bus_watch_name (G_BUS_TYPE_SESSION,

Error: GCC_ANALYZER_WARNING (CWE-787): [#def3]
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:620:48: warning[-Wanalyzer-out-of-bounds]: buffer overflow
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:635:9: note: in expansion of macro ‘g_return_val_if_fail’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:637:9: note: in expansion of macro ‘g_debug’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:620:48: note: write of 4 bytes to beyond the end of ‘allowed_app_list’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-shell-introspect-service.c:620:48: note: valid subscripts for ‘allowed_app_list’ are ‘[0]’ to ‘[2]’
#  618|   
#  619|           for (i = 0; allowed_app_list[i].name; i++) {
#  620|->                 allowed_app_list[i].watcher_id =
#  621|                           g_bus_watch_name (G_BUS_TYPE_SESSION,
#  622|                                             allowed_app_list[i].name,

Error: GCC_ANALYZER_WARNING (CWE-688): [#def4]
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c: scope_hint: In function ‘kiosk_x_keyboard_manager_read_xkb_rules_names_data’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c:307:39: warning[-Wanalyzer-null-argument]: use of NULL ‘layouts_string’ where non-null expected
/usr/include/glib-2.0/glib.h:64: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.h:3: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c:2: included_from: Included from here.
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c:399:9: note: in expansion of macro ‘g_debug’
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
/usr/include/glib-2.0/glib/gstrfuncs.h:324:38: note: in definition of macro ‘g_strdup’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c:306:42: note: in expansion of macro ‘g_strdup’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c: scope_hint: In function ‘kiosk_x_keyboard_manager_read_xkb_rules_names_data’
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
#  305|           for (i = 0; i < number_of_bytes_read; i++) {
#  306|                   g_autofree char *value = g_strdup ((char *) property_values + i);
#  307|->                 size_t value_length = strlen (value);
#  308|   
#  309|                   switch (property_value_index) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def5]
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c:307:39: warning[-Wanalyzer-null-argument]: use of NULL ‘variants_string’ where non-null expected
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c:399:9: note: in expansion of macro ‘g_debug’
/usr/include/glib-2.0/glib/gstrfuncs.h:324:38: note: in definition of macro ‘g_strdup’
/usr/include/glib-2.0/glib/gstrfuncs.h:324:38: note: in definition of macro ‘g_strdup’
/usr/include/glib-2.0/glib/gstrfuncs.h:324:38: note: in definition of macro ‘g_strdup’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c:306:42: note: in expansion of macro ‘g_strdup’
gnome-kiosk-47.0-build/gnome-kiosk-47.0/compositor/kiosk-x-keyboard-manager.c: scope_hint: In function ‘kiosk_x_keyboard_manager_read_xkb_rules_names_data’
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
#  305|           for (i = 0; i < number_of_bytes_read; i++) {
#  306|                   g_autofree char *value = g_strdup ((char *) property_values + i);
#  307|->                 size_t value_length = strlen (value);
#  308|   
#  309|                   switch (property_value_index) {

Scan Properties