gst-editing-services-1.24.9-1.fc42

List of Findings

Error: CPPCHECK_WARNING (CWE-476): [#def1]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-asset.c:1277: warning[nullPointer]: Possible null pointer dereference: asset
# 1275|       while (proxied) {
# 1276|         proxied = FALSE;
# 1277|->       switch (asset->priv->state) {
# 1278|           case ASSET_INITIALIZED:
# 1279|             break;

Error: COMPILER_WARNING (CWE-477): [#def2]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-container.c: scope_hint: In function ‘ges_container_group’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-container.c:1046:3: warning[-Wdeprecated-declarations]: ‘g_qsort_with_data’ is deprecated: Use 'g_sort_array' instead
/usr/include/glib-2.0/glib.h:71: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-container.h:23: included_from: Included from here.
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-container.c:40: included_from: Included from here.
/usr/include/glib-2.0/glib/gqsort.h:39:6: note: declared here
# 1044|      * ->grouping_priority is private? */
# 1045|     children_types = g_type_children (GES_TYPE_CONTAINER, &n_children);
# 1046|->   g_qsort_with_data (children_types, n_children, sizeof (GType),
# 1047|         (GCompareDataFunc) compare_grouping_prio, NULL);
# 1048|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-discoverer-manager.c: scope_hint: In function ‘ges_discoverer_manager_start_discovery’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-discoverer-manager.c:476:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
/usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
/usr/include/gstreamer-1.0/gst/gst.h:27: included_from: Included from here.
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-internal.h:23: included_from: Included from here.
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-discoverer-manager.c:1: included_from: Included from here.
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-discoverer-manager.c:470:3: note: in expansion of macro ‘g_return_val_if_fail’
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-discoverer-manager.c:450:3: note: in expansion of macro ‘g_return_val_if_fail’
/usr/include/glib-2.0/glib.h:64: included_from: Included from here.
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-discoverer-manager.c:450:3: note: in expansion of macro ‘g_return_val_if_fail’
#  474|     g_rec_mutex_lock (&self->lock);
#  475|     gboolean res =
#  476|->       gst_discoverer_discover_uri_async (disco_data->discoverer, uri);
#  477|     disco_data->n_uri++;
#  478|     g_hash_table_insert (self->discoverers, g_thread_self (), disco_data);

Error: CPPCHECK_WARNING (CWE-457): [#def4]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-effect.c:102: error[legacyUninitvar]: Uninitialized variable: real_id
#  100|     g_free (bin_desc);
#  101|   
#  102|->   return real_id;
#  103|   }
#  104|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-multi-file-source.c: scope_hint: In function ‘ges_multi_file_uri_new’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-multi-file-source.c:148:19: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘uri_data’
#  146|     uri_data = malloc (sizeof (GESMultiFileURI));
#  147|   
#  148|->   uri_data->start = 0;
#  149|     uri_data->end = -1;
#  150|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-pitivi-formatter.c: scope_hint: In function ‘load_pitivi_file_from_uri’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-pitivi-formatter.c:630:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘prio’
#  628|     gint *prio = malloc (sizeof (gint));
#  629|   
#  630|->   *prio = 0;
#  631|     layer = ges_layer_new ();
#  632|     g_object_set (layer, "auto-transition", TRUE, NULL);

Error: CPPCHECK_WARNING (CWE-457): [#def7]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-structured-interface.c:661: error[legacyUninitvar]: Uninitialized variable: *&pattern
#  659|     GET_AND_CHECK ("asset-id", G_TYPE_STRING, &check_asset_id, beach);
#  660|   
#  661|->   TRY_GET_STRING ("pattern", &pattern, NULL);
#  662|     TRY_GET_STRING ("text", &text, NULL);
#  663|     TRY_GET_STRING ("name", &name, NULL);

Error: CPPCHECK_WARNING (CWE-457): [#def8]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-structured-interface.c:662: error[legacyUninitvar]: Uninitialized variable: *&text
#  660|   
#  661|     TRY_GET_STRING ("pattern", &pattern, NULL);
#  662|->   TRY_GET_STRING ("text", &text, NULL);
#  663|     TRY_GET_STRING ("name", &name, NULL);
#  664|     TRY_GET ("layer-priority", G_TYPE_INT, &layer_priority, -1);

Error: CPPCHECK_WARNING (CWE-457): [#def9]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-structured-interface.c:663: error[legacyUninitvar]: Uninitialized variable: *&name
#  661|     TRY_GET_STRING ("pattern", &pattern, NULL);
#  662|     TRY_GET_STRING ("text", &text, NULL);
#  663|->   TRY_GET_STRING ("name", &name, NULL);
#  664|     TRY_GET ("layer-priority", G_TYPE_INT, &layer_priority, -1);
#  665|     if (layer_priority == -1)

Error: CPPCHECK_WARNING (CWE-457): [#def10]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-structured-interface.c:667: error[legacyUninitvar]: Uninitialized variable: *&type_string
#  665|     if (layer_priority == -1)
#  666|       TRY_GET ("layer", G_TYPE_INT, &layer_priority, -1);
#  667|->   TRY_GET_STRING ("type", &type_string, "GESUriClip");
#  668|     TRY_GET_TIME ("start", &start, &start_frame, GST_CLOCK_TIME_NONE);
#  669|     TRY_GET_TIME ("inpoint", &inpoint, &inpoint_frame, 0);

Error: CPPCHECK_WARNING (CWE-457): [#def11]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-structured-interface.c:671: error[legacyUninitvar]: Uninitialized variable: *&track_types_str
#  669|     TRY_GET_TIME ("inpoint", &inpoint, &inpoint_frame, 0);
#  670|     TRY_GET_TIME ("duration", &duration, &duration_frame, GST_CLOCK_TIME_NONE);
#  671|->   TRY_GET_STRING ("track-types", &track_types_str, NULL);
#  672|     TRY_GET_STRING ("project-uri", &nested_timeline_id, NULL);
#  673|   

Error: CPPCHECK_WARNING (CWE-457): [#def12]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-structured-interface.c:672: error[legacyUninitvar]: Uninitialized variable: *&nested_timeline_id
#  670|     TRY_GET_TIME ("duration", &duration, &duration_frame, GST_CLOCK_TIME_NONE);
#  671|     TRY_GET_STRING ("track-types", &track_types_str, NULL);
#  672|->   TRY_GET_STRING ("project-uri", &nested_timeline_id, NULL);
#  673|   
#  674|     if (track_types_str) {

Error: COMPILER_WARNING (CWE-477): [#def13]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-timeline-element.c: scope_hint: In function ‘ges_timeline_element_list_children_properties’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-timeline-element.c:2189:3: warning[-Wdeprecated-declarations]: ‘g_qsort_with_data’ is deprecated: Use 'g_sort_array' instead
# 2189 |   g_qsort_with_data (ret, *n_properties, sizeof (GParamSpec *),
#      |   ^~~~~~~~~~~~~~~~~
/usr/include/glib-2.0/glib.h:71: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-utils.h:22: included_from: Included from here.
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/ges/ges-timeline-element.c:113: included_from: Included from here.
/usr/include/glib-2.0/glib/gqsort.h:39:6: note: declared here
#   39 | void g_qsort_with_data (gconstpointer    pbase,
#      |      ^~~~~~~~~~~~~~~~~
# 2187|   
# 2188|     ret = class->list_children_properties (self, n_properties);
# 2189|->   g_qsort_with_data (ret, *n_properties, sizeof (GParamSpec *),
# 2190|         (GCompareDataFunc) compare_gparamspec, NULL);
# 2191|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c: scope_hint: In function ‘priv_ges_parse_yy_create_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1565:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1551:21: note: in expansion of macro ‘yy_create_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1555:24: note: in expansion of macro ‘yyalloc’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c: scope_hint: In function ‘priv_ges_parse_yy_create_buffer’
# 1563|   	 * we need to put in 2 end-of-buffer characters.
# 1564|   	 */
# 1565|-> 	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner );
# 1566|   	if ( ! b->yy_ch_buf )
# 1567|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );

Error: GCC_ANALYZER_WARNING (CWE-476): [#def15]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c: scope_hint: In function ‘priv_ges_parse_yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1607:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1486:10: note: in expansion of macro ‘yyrestart’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1491:16: note: in expansion of macro ‘yyensure_buffer_stack’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1709:13: note: in expansion of macro ‘yyensure_buffer_stack’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1491:16: note: in expansion of macro ‘yyensure_buffer_stack’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1493:27: note: in expansion of macro ‘yy_create_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1551:21: note: in expansion of macro ‘yy_create_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1570:2: note: in expansion of macro ‘yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1599:17: note: in expansion of macro ‘yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1605:2: note: in expansion of macro ‘yy_flush_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1628:10: note: in expansion of macro ‘yy_flush_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1605:2: note: in expansion of macro ‘yy_flush_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1570:2: note: in expansion of macro ‘yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1493:27: note: in expansion of macro ‘yy_create_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1496:2: note: in expansion of macro ‘yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1496:2: note: in expansion of macro ‘yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1496:2: note: in expansion of macro ‘yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1599:17: note: in expansion of macro ‘yy_init_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1605:2: note: in expansion of macro ‘yy_flush_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1628:10: note: in expansion of macro ‘yy_flush_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1605:2: note: in expansion of macro ‘yy_flush_buffer’
# 1605|   
# 1606|   	yy_flush_buffer( b , yyscanner);
# 1607|-> 
# 1608|   	b->yy_input_file = file;
# 1609|   	b->yy_fill_buffer = 1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c: scope_hint: In function ‘priv_ges_parse_yy_scan_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1825:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1809:17: note: in expansion of macro ‘yy_scan_bytes’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1818:24: note: in expansion of macro ‘yyalloc’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c: scope_hint: In function ‘priv_ges_parse_yy_scan_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1827:6: note: in expansion of macro ‘yy_scan_buffer’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/redhat-linux-build/ges/lex.priv_ges_parse_yy.c:1759:17: note: in expansion of macro ‘yy_scan_buffer’
# 1823|   	for ( i = 0; i < _yybytes_len; ++i )
# 1824|   		buf[i] = yybytes[i];
# 1825|-> 
# 1826|   	buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 1827|   

Error: GCC_ANALYZER_WARNING (CWE-479): [#def17]
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/tests/check/ges/negative.c: scope_hint: In function ‘sigabrt_handler’
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/tests/check/ges/negative.c:28:3: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler
gst-editing-services-1.24.9-build/gst-editing-services-1.24.9/tests/check/ges/negative.c:28:3: note: ‘_exit’ is a possible signal-safe alternative for ‘exit’
#   26|   {
#   27|     /* expected abort */
#   28|->   exit (0);
#   29|   }
#   30|   

Scan Properties