gnome-shell-47.1-1.fc42

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.c: scope_hint: In function ‘gtk_action_muxer_primary_accel_changed’
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.c:350:19: warning[-Wanalyzer-null-argument]: use of NULL ‘action_and_target’ where non-null expected
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
/usr/include/glib-2.0/gio/gioenums.h:30: included_from: Included from here.
/usr/include/glib-2.0/gio/giotypes.h:30: included_from: Included from here.
/usr/include/glib-2.0/gio/gio.h:28: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.h:22: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.c:22: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.c:892:79: note: in expansion of macro ‘g_strdup’
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.c: scope_hint: In function ‘gtk_action_muxer_primary_accel_changed’
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.c:892:49: note: in expansion of macro ‘g_strdup’
gnome-shell-47.1-build/gnome-shell-47.1/src/gtkactionmuxer.c: scope_hint: In function ‘gtk_action_muxer_primary_accel_changed’
/usr/include/glib-2.0/glib/galloca.h:35: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
/usr/include/string.h:273:14: note: argument 1 of ‘strrchr’ must be non-null
#  348|   
#  349|     if (!action_name)
#  350|->     action_name = strrchr (action_and_target, '|') + 1;
#  351|   
#  352|     action = g_hash_table_lookup (muxer->observed_actions, action_name);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-app.c: scope_hint: In function ‘activate_action_get_bus_cb’
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-app.c:1502:14: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
/usr/include/glib-2.0/glib/gi18n-lib.h:23: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-app.c:7: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-app.c:1501:12: note: in expansion of macro ‘g_strdup’
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-app.c: scope_hint: In function ‘activate_action_get_bus_cb’
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-app.c:5: included_from: Included from here.
/usr/include/string.h:273:14: note: argument 1 of ‘strrchr’ must be non-null
# 1500|   
# 1501|     app_id = g_strdup (g_app_info_get_id (G_APP_INFO (app->info)));
# 1502|->   last_dot = strrchr (app_id, '.');
# 1503|     if (last_dot && g_str_equal (last_dot, ".desktop"))
# 1504|         *last_dot = '\0';

Error: CPPCHECK_WARNING (CWE-190): [#def3]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-camera-monitor.c:279: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  277|       return FALSE;
#  278|   
#  279|->   pw_core_add_listener (monitor->core,
#  280|                           &monitor->core_listener,
#  281|                           &core_events,

Error: CPPCHECK_WARNING (CWE-190): [#def4]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-camera-monitor.c:287: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  285|                                               PW_VERSION_REGISTRY,
#  286|                                               0);
#  287|->   pw_registry_add_listener (monitor->registry,
#  288|                               &monitor->registry_listener,
#  289|                               &registry_events,

Error: CPPCHECK_WARNING (CWE-190): [#def5]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-camera-monitor.c:338: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  336|     MetaPipeWireSource *pipewire_source = (MetaPipeWireSource *) source;
#  337|   
#  338|->   pw_loop_leave (pipewire_source->pipewire_loop);
#  339|     pw_loop_destroy (pipewire_source->pipewire_loop);
#  340|   }

Error: CPPCHECK_WARNING (CWE-190): [#def6]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-camera-monitor.c:363: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  361|   
#  362|     g_source_add_unix_fd (source,
#  363|->                         pw_loop_get_fd (pipewire_source->pipewire_loop),
#  364|                           G_IO_IN | G_IO_ERR);
#  365|   

Error: CPPCHECK_WARNING (CWE-190): [#def7]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-camera-monitor.c:366: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  364|                           G_IO_IN | G_IO_ERR);
#  365|   
#  366|->   pw_loop_enter (pipewire_source->pipewire_loop);
#  367|     g_source_attach (source, NULL);
#  368|     g_source_unref (source);

Error: CPPCHECK_WARNING (CWE-457): [#def8]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-global.c:1243: error[uninitvar]: Uninitialized variable: arr
# 1241|     execvp (arr->pdata[0], (char**)arr->pdata);
# 1242|     g_warning ("failed to reexec: %s", g_strerror (errno));
# 1243|->   g_ptr_array_free (arr, TRUE);
# 1244|   #if defined __linux__ || defined __FreeBSD__
# 1245|     g_free (buf);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-perf-log.c: scope_hint: In function ‘record_event’
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-perf-log.c:376:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘event’
/usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-perf-log.h:4: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-perf-log.c:7: included_from: Included from here.
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1251:45: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-perf-log.c:339:7: note: in expansion of macro ‘G_UNLIKELY’
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1251:45: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
gnome-shell-47.1-build/gnome-shell-47.1/src/shell-perf-log.c:339:7: note: in expansion of macro ‘G_UNLIKELY’
#  374|     memcpy (block->buffer + pos, &time_delta, sizeof (guint32));
#  375|     pos += sizeof (guint32);
#  376|->   memcpy (block->buffer + pos, &event->id, sizeof (guint16));
#  377|     pos += sizeof (guint16);
#  378|     memcpy (block->buffer + pos, bytes, bytes_len);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def10]
gnome-shell-47.1-build/gnome-shell-47.1/src/st/croco/cr-selector.c: scope_hint: In function ‘cr_selector_destroy.part.0’
gnome-shell-47.1-build/gnome-shell-47.1/src/st/croco/cr-selector.c:275:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur’
#  273|   
#  274|           /*walk backward the list and free each "next element" */
#  275|->         for (cur = cur->prev; cur && cur->prev; cur = cur->prev) {
#  276|                   if (cur->next) {
#  277|                           g_free (cur->next);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def11]
gnome-shell-47.1-build/gnome-shell-47.1/src/st/croco/cr-statement.c: scope_hint: In function ‘cr_statement_destroy.part.0’
gnome-shell-47.1-build/gnome-shell-47.1/src/st/croco/cr-statement.c:2760:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur’
# 2758|                   cr_statement_clear (cur);
# 2759|   
# 2760|->         if (cur->prev == NULL) {
# 2761|                   g_free (a_this);
# 2762|                   return;

Error: CPPCHECK_WARNING (CWE-457): [#def12]
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-entry.c:486: error[uninitvar]: Uninitialized variables: child_box.y1, child_box.y2
#  484|       {
#  485|         /* now allocate the hint actor */
#  486|->       hint_box = child_box;
#  487|   
#  488|         clutter_actor_get_preferred_width (priv->hint_actor, -1, &hint_min_w, &hint_w);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def13]
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-image-content.c: scope_hint: In function ‘load_image_thread’
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-image-content.c:279:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘type’
/usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
/usr/include/graphene-1.0/graphene-gobject.h:28: included_from: Included from here.
/usr/include/mutter-15/clutter/clutter/clutter-types.h:30: included_from: Included from here.
/usr/include/mutter-15/clutter/clutter/clutter.h:30: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-image-content.h:23: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-image-content-private.h:21: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-image-content.c:21: included_from: Included from here.
/usr/include/glib-2.0/glib/gmacros.h:1365:7: note: in expansion of macro ‘_GLIB_AUTOPTR_CLEAR_FUNC_NAME’
/usr/include/glib-2.0/glib/gmacros.h:1381:3: note: in expansion of macro ‘_GLIB_DEFINE_AUTOPTR_CLEANUP_FUNCS’
/usr/include/gdk-pixbuf-2.0/gdk-pixbuf/gdk-pixbuf-autocleanups.h:29:1: note: in expansion of macro ‘G_DEFINE_AUTOPTR_CLEANUP_FUNC’
/usr/include/glib-2.0/glib/gmacros.h:1381:3: note: in expansion of macro ‘_GLIB_DEFINE_AUTOPTR_CLEANUP_FUNCS’
/usr/include/gdk-pixbuf-2.0/gdk-pixbuf/gdk-pixbuf-autocleanups.h:29:1: note: in expansion of macro ‘G_DEFINE_AUTOPTR_CLEANUP_FUNC’
#  277|     else
#  278|       {
#  279|->       g_task_set_task_data (task, type, g_free);
#  280|         g_task_return_pointer (task, stream, g_object_unref);
#  281|       }

Error: GCC_ANALYZER_WARNING: [#def14]
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-private.c: scope_hint: In function ‘calculate_gaussian_kernel’
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-private.c:254:9: warning[-Wanalyzer-imprecise-fp-arithmetic]: use of floating-point arithmetic here might yield unexpected results
/usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-private.h:25: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-private.c:25: included_from: Included from here.
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-private.c:250:3: note: in expansion of macro ‘g_return_val_if_fail’
gnome-shell-47.1-build/gnome-shell-47.1/src/st/st-private.c:254:9: note: only use operands of an integer type inside the size argument
#  252|     half = n_values / 2;
#  253|   
#  254|->   ret = g_malloc (n_values * sizeof (gdouble));
#  255|     sum = 0.0;
#  256|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def15]
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c: scope_hint: In function ‘get_profile_canonical_name’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:317:13: warning[-Wanalyzer-null-argument]: use of NULL ‘profile_name’ where non-null expected
/usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.h:22: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:23: included_from: Included from here.
/usr/include/glib-2.0/glib/gmacros.h:1243:8: note: in definition of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:480:9: note: in expansion of macro ‘g_return_val_if_fail’
/usr/include/glib-2.0/gobject/gtype.h:541:66: note: in expansion of macro ‘_G_TYPE_CIT’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.h:30:47: note: in expansion of macro ‘G_TYPE_CHECK_INSTANCE_TYPE’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:480:31: note: in expansion of macro ‘GVC_IS_MIXER_UI_DEVICE’
/usr/include/glib-2.0/glib/gmacros.h:1243:8: note: in definition of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:480:9: note: in expansion of macro ‘g_return_val_if_fail’
/usr/include/glib-2.0/gobject/gtype.h:541:66: note: in expansion of macro ‘_G_TYPE_CIT’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.h:30:47: note: in expansion of macro ‘G_TYPE_CHECK_INSTANCE_TYPE’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:480:31: note: in expansion of macro ‘GVC_IS_MIXER_UI_DEVICE’
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:481:9: note: in expansion of macro ‘g_return_val_if_fail’
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:318:24: note: in expansion of macro ‘g_strdup’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c: scope_hint: In function ‘get_profile_canonical_name’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c:318:24: note: in expansion of macro ‘g_strdup’
gnome-shell-47.1-build/gnome-shell-47.1/subprojects/gvc/gvc-mixer-ui-device.c: scope_hint: In function ‘get_profile_canonical_name’
<built-in>: note: argument 1 of ‘__builtin_strstr’ must be non-null
#  315|   
#  316|           /* optimisation for the simple case. */
#  317|->         if (strstr (profile_name, skip_prefix) == NULL)
#  318|                   return g_strdup (profile_name);
#  319|   

Scan Properties