Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/cddap_interface.c: scope_hint: In function 'jitter_read'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/cddap_interface.c:226:12: warning[-Wanalyzer-null-argument]: use of NULL 'p_buf' where non-null expected
<built-in>: note: argument 2 of '__builtin_memcpy' must be non-null
#  224|     } else {
#  225|       /* Got full amount, but now adjust size for jittering. */
#  226|->     if (p) memcpy(p, p_buf+i_jitter_offset, i_sectors_orig*CDIO_CD_FRAMESIZE_RAW);
#  227|       i_sectors = i_sectors_orig;
#  228|     }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/cddap_interface.c:226:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'p_buf + (sizetype)i_jitter_offset'
#  224|     } else {
#  225|       /* Got full amount, but now adjust size for jittering. */
#  226|->     if (p) memcpy(p, p_buf+i_jitter_offset, i_sectors_orig*CDIO_CD_FRAMESIZE_RAW);
#  227|       i_sectors = i_sectors_orig;
#  228|     }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.c: scope_hint: In function 'data_bigendianp'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.c:63:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'buff' where non-null expected
<built-in>: note: argument 1 of '__builtin_memset' must be non-null
#   61|     long readsectors=5;
#   62|     int16_t *buff=malloc(readsectors*CDIO_CD_FRAMESIZE_RAW*sizeof(int16_t));
#   63|->   memset(buff, 0, readsectors*CDIO_CD_FRAMESIZE_RAW*sizeof(int16_t));
#   64|   
#   65|     /* look at the starts of the audio tracks */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.c:119:16: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'a'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/include/cdio/paranoia/paranoia.h:31: included_from: Included from here.
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/low_interface.h:27: included_from: Included from here.
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.h:16: included_from: Included from here.
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.c:29: included_from: Included from here.
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.c:77:8: note: in expansion of macro 'cdda_track_audiop'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.c:78:24: note: in expansion of macro 'cdda_track_firstsector'
#  117|   	
#  118|   	for(j=0;j<128;j++)
#  119|-> 	  a[j] = le16_to_cpu(buff[j*2+beginsec+460]);
#  120|   	for(j=0;j<128;j++)
#  121|   	  b[j] = le16_to_cpu(buff[j*2+beginsec+461]);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/scan_devices.c: scope_hint: In function 'cdda_identify_device_cdio'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/scan_devices.c:290:23: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'd'
#  288|   
#  289|     d=calloc(1, sizeof(cdrom_drive_t));
#  290|->   d->p_cdio           = p_cdio;
#  291|     d->cdda_device_name = strdup(psz_device);
#  292|     d->drive_type       = drive_type;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'drfti1'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c:64:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ifac'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'drfti1'
#   62|       ifac[ib+1]=ifac[ib];
#   63|     }
#   64|->   ifac[2] = 2;
#   65|   
#   66|    L107:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def7]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c:68:10: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ifac'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'drfti1'
#   66|    L107:
#   67|     if(nl!=1)goto L104;
#   68|->   ifac[0]=n;
#   69|     ifac[1]=nf;
#   70|     argh=tpi/n;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def8]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'dradb2'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c:330:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ch'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'dradb2'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'dradb2'
#  328|     t3=(ido<<1)-1;
#  329|     for(k=0;k<l1;k++){
#  330|->     ch[t1]=cc[t2]+cc[t3+t2];
#  331|       ch[t1+t0]=cc[t2]-cc[t3+t2];
#  332|       t2=(t1+=ido)<<1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'dradb4'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c:390:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ch'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'dradb4'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/smallft.c: scope_hint: In function 'dradb4'
#  388|       tr1=cc[t3]-cc[(t4+=t6)-1];
#  389|       tr2=cc[t3]+cc[t4-1];
#  390|->     ch[t5]=tr2+tr3;
#  391|       ch[t5+=t0]=tr1-tr4;
#  392|       ch[t5+=t0]=tr2-tr3;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def10]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c: scope_hint: In function 'idperror'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c:85:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'buffer' where non-null expected
<built-in>: note: argument 1 of '__builtin_sprintf' must be non-null
#   83|       else{
#   84|         buffer=malloc(strlen(f)+strlen(s)+9);
#   85|->       sprintf(buffer,f,s);
#   86|         malloced=1;
#   87|       }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def11]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c: scope_hint: In function 'idmessage'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c:133:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'buffer' where non-null expected
<built-in>: note: argument 1 of '__builtin_sprintf' must be non-null
#  131|         const unsigned int i_buffer=strlen(f)+strlen(s)+2;
#  132|         buffer=malloc(i_buffer);
#  133|->       sprintf(buffer,f,s);
#  134|         strncat(buffer,"\n",1);
#  135|         malloced=1;

Error: COMPILER_WARNING: [#def12]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c: scope_hint: In function 'idmessage'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c:134:7: warning[-Wstringop-overflow=]: 'strncat' specified bound 1 equals source length
#  132|         buffer=malloc(i_buffer);
#  133|         sprintf(buffer,f,s);
#  134|->       strncat(buffer,"\n",1);
#  135|         malloced=1;
#  136|       }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def13]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c: scope_hint: In function 'catstring'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c:168:5: warning[-Wanalyzer-null-argument]: use of NULL 'buff' where non-null expected
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/low_interface.h:17: included_from: Included from here.
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/common_interface.h:16: included_from: Included from here.
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c:29: included_from: Included from here.
/usr/include/string.h:152:14: note: argument 1 of 'strncat' must be non-null
#  166|         buff=calloc(add_len, 1);
#  167|       }
#  168|->     strncat(buff, s, add_len - 1);
#  169|     }
#  170|     return(buff);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def14]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/cdda_interface/utils.c:168:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'buff' where non-null expected
/usr/include/string.h:152:14: note: argument 1 of 'strncat' must be non-null
#  166|         buff=calloc(add_len, 1);
#  167|       }
#  168|->     strncat(buff, s, add_len - 1);
#  169|     }
#  170|     return(buff);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def15]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/isort.c: scope_hint: In function 'sort_alloc'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/isort.c:64:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ret'
#   62|   
#   63|     ret->vector=NULL;
#   64|->   ret->sortbegin=-1;
#   65|     ret->size=-1;
#   66|     ret->maxsize=size;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def16]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c: scope_hint: In function 'new_list'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c:27:16: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ret'
#   25|   {
#   26|     linked_list_t *ret=calloc(1,sizeof(linked_list_t));
#   27|->   ret->new_poly=newp;
#   28|     ret->free_poly=freep;
#   29|     return(ret);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def17]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c: scope_hint: In function 'add_elem'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c:36:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ret'
#   34|   
#   35|     linked_element *ret=calloc(1,sizeof(linked_element));
#   36|->   ret->stamp=l->current++;
#   37|     ret->ptr=elem;
#   38|     ret->list=l;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def18]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c: scope_hint: In function 'free_c_block'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c:137:19: warning[-Wanalyzer-null-dereference]: dereference of NULL 'c'
#  135|   {
#  136|     /* also rid ourselves of v_fragments that reference this block */
#  137|->   v_fragment_t *v=v_first(c->p);
#  138|   
#  139|     while(v){

Error: GCC_ANALYZER_WARNING (CWE-476): [#def19]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c: scope_hint: In function 'c_alloc'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c:282:12: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'c'
#  280|   {
#  281|     c_block_t *c=calloc(1,sizeof(c_block_t));
#  282|->   c->vector=vector;
#  283|     c->begin=begin;
#  284|     c->size=size;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c: scope_hint: In function 'cdio_paranoia_init'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/p_block.c:421:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'p'
#  419|     cdrom_paranoia_t *p=calloc(1,sizeof(cdrom_paranoia_t));
#  420|   
#  421|->   p->cache=new_list((void *)&i_cblock_constructor,
#  422|   		    (void *)&i_cblock_destructor);
#  423|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def21]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'try_sort_sync'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:411:18: warning[-Wanalyzer-null-dereference]: dereference of NULL 'B'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'try_sort_sync'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:107: included_from: Included from here.
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:169:10: note: in expansion of macro 'cv'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'try_sort_sync'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:169:10: note: in expansion of macro 'cv'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'try_sort_sync'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:1011:9: note: in expansion of macro 'min'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:1011:13: note: in expansion of macro 'min'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'try_sort_sync'
#  409|     long int dynoverlap=p->dynoverlap;
#  410|     sort_link_t *ptr=NULL;
#  411|->   unsigned char *Bflags=B->flags;
#  412|   
#  413|     /* block flag matches FLAGS_UNREAD (and hence unmatchable) */

Error: GCC_ANALYZER_WARNING (CWE-688): [#def22]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'i_init_root'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:2139:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'buff' where non-null expected
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'i_init_root'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'i_init_root'
<built-in>: note: argument 1 of '__builtin_memcpy' must be non-null
# 2137|       {
# 2138|         int16_t *buff=malloc(fs(v)*sizeof(int16_t));
# 2139|->       memcpy(buff,fv(v),fs(v)*sizeof(int16_t));
# 2140|         root->vector=c_alloc(buff,fb(v),fs(v));
# 2141|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def23]
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'i_stage2'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c:2223:20: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'list'
libcdio-paranoia-10.2+2.0.2-build/libcdio-paranoia-10.2+2.0.2/lib/paranoia/paranoia.c: scope_hint: In function 'i_stage2'
# 2221|       while (first){
# 2222|         v_fragment_t *next=v_next(first);
# 2223|->       list[count++]=first;
# 2224|         first=next;
# 2225|       }

Scan Properties