Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/cddap_interface.c: scope_hint: In function ‘jitter_read’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/cddap_interface.c:226:12: warning[-Wanalyzer-null-argument]: use of NULL ‘p_buf’ where non-null expected
<built-in>: note: argument 2 of ‘__builtin_memcpy’ must be non-null
#  224|     } else {
#  225|       /* Got full amount, but now adjust size for jittering. */
#  226|->     if (p) memcpy(p, p_buf+i_jitter_offset, i_sectors_orig*CDIO_CD_FRAMESIZE_RAW);
#  227|       i_sectors = i_sectors_orig;
#  228|     }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/cddap_interface.c:226:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘p_buf + (sizetype)i_jitter_offset’
#  224|     } else {
#  225|       /* Got full amount, but now adjust size for jittering. */
#  226|->     if (p) memcpy(p, p_buf+i_jitter_offset, i_sectors_orig*CDIO_CD_FRAMESIZE_RAW);
#  227|       i_sectors = i_sectors_orig;
#  228|     }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.c: scope_hint: In function ‘data_bigendianp’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.c:63:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buff’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_memset’ must be non-null
#   61|     long readsectors=5;
#   62|     int16_t *buff=malloc(readsectors*CDIO_CD_FRAMESIZE_RAW*sizeof(int16_t));
#   63|->   memset(buff, 0, readsectors*CDIO_CD_FRAMESIZE_RAW*sizeof(int16_t));
#   64|   
#   65|     /* look at the starts of the audio tracks */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.c:119:16: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘a’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/include/cdio/paranoia/paranoia.h:31: included_from: Included from here.
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/low_interface.h:27: included_from: Included from here.
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.h:16: included_from: Included from here.
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.c:29: included_from: Included from here.
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.c:77:8: note: in expansion of macro ‘cdda_track_audiop’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.c:78:24: note: in expansion of macro ‘cdda_track_firstsector’
#  117|   	
#  118|   	for(j=0;j<128;j++)
#  119|-> 	  a[j] = le16_to_cpu(buff[j*2+beginsec+460]);
#  120|   	for(j=0;j<128;j++)
#  121|   	  b[j] = le16_to_cpu(buff[j*2+beginsec+461]);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/scan_devices.c: scope_hint: In function ‘cdda_identify_device_cdio’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/scan_devices.c:290:23: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘d’
#  288|   
#  289|     d=calloc(1, sizeof(cdrom_drive_t));
#  290|->   d->p_cdio           = p_cdio;
#  291|     d->cdda_device_name = strdup(psz_device);
#  292|     d->drive_type       = drive_type;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘drfti1’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c:64:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ifac’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘drfti1’
#   62|       ifac[ib+1]=ifac[ib];
#   63|     }
#   64|->   ifac[2] = 2;
#   65|   
#   66|    L107:

Error: GCC_ANALYZER_WARNING (CWE-476): [#def7]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c:68:10: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ifac’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘drfti1’
#   66|    L107:
#   67|     if(nl!=1)goto L104;
#   68|->   ifac[0]=n;
#   69|     ifac[1]=nf;
#   70|     argh=tpi/n;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def8]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘dradb2’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c:330:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ch’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘dradb2’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘dradb2’
#  328|     t3=(ido<<1)-1;
#  329|     for(k=0;k<l1;k++){
#  330|->     ch[t1]=cc[t2]+cc[t3+t2];
#  331|       ch[t1+t0]=cc[t2]-cc[t3+t2];
#  332|       t2=(t1+=ido)<<1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘dradb4’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c:390:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ch’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘dradb4’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/smallft.c: scope_hint: In function ‘dradb4’
#  388|       tr1=cc[t3]-cc[(t4+=t6)-1];
#  389|       tr2=cc[t3]+cc[t4-1];
#  390|->     ch[t5]=tr2+tr3;
#  391|       ch[t5+=t0]=tr1-tr4;
#  392|       ch[t5+=t0]=tr2-tr3;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def10]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c: scope_hint: In function ‘idperror’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c:85:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buffer’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_sprintf’ must be non-null
#   83|       else{
#   84|         buffer=malloc(strlen(f)+strlen(s)+9);
#   85|->       sprintf(buffer,f,s);
#   86|         malloced=1;
#   87|       }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def11]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c: scope_hint: In function ‘idmessage’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c:133:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buffer’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_sprintf’ must be non-null
#  131|         const unsigned int i_buffer=strlen(f)+strlen(s)+2;
#  132|         buffer=malloc(i_buffer);
#  133|->       sprintf(buffer,f,s);
#  134|         strncat(buffer,"\n",1);
#  135|         malloced=1;

Error: COMPILER_WARNING: [#def12]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c: scope_hint: In function ‘idmessage’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c:134:7: warning[-Wstringop-overflow=]: ‘strncat’ specified bound 1 equals source length
#  132|         buffer=malloc(i_buffer);
#  133|         sprintf(buffer,f,s);
#  134|->       strncat(buffer,"\n",1);
#  135|         malloced=1;
#  136|       }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def13]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c: scope_hint: In function ‘catstring’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c:168:5: warning[-Wanalyzer-null-argument]: use of NULL ‘buff’ where non-null expected
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/low_interface.h:17: included_from: Included from here.
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/common_interface.h:16: included_from: Included from here.
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c:29: included_from: Included from here.
/usr/include/string.h:152:14: note: argument 1 of ‘strncat’ must be non-null
#  166|         buff=calloc(add_len, 1);
#  167|       }
#  168|->     strncat(buff, s, add_len - 1);
#  169|     }
#  170|     return(buff);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def14]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/cdda_interface/utils.c:168:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buff’ where non-null expected
/usr/include/string.h:152:14: note: argument 1 of ‘strncat’ must be non-null
#  166|         buff=calloc(add_len, 1);
#  167|       }
#  168|->     strncat(buff, s, add_len - 1);
#  169|     }
#  170|     return(buff);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def15]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/isort.c: scope_hint: In function ‘sort_alloc’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/isort.c:64:17: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ret’
#   62|   
#   63|     ret->vector=NULL;
#   64|->   ret->sortbegin=-1;
#   65|     ret->size=-1;
#   66|     ret->maxsize=size;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def16]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c: scope_hint: In function ‘new_list’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c:27:16: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ret’
#   25|   {
#   26|     linked_list_t *ret=calloc(1,sizeof(linked_list_t));
#   27|->   ret->new_poly=newp;
#   28|     ret->free_poly=freep;
#   29|     return(ret);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def17]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c: scope_hint: In function ‘add_elem’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c:36:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ret’
#   34|   
#   35|     linked_element *ret=calloc(1,sizeof(linked_element));
#   36|->   ret->stamp=l->current++;
#   37|     ret->ptr=elem;
#   38|     ret->list=l;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def18]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c: scope_hint: In function ‘free_c_block’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c:137:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’
#  135|   {
#  136|     /* also rid ourselves of v_fragments that reference this block */
#  137|->   v_fragment_t *v=v_first(c->p);
#  138|   
#  139|     while(v){

Error: GCC_ANALYZER_WARNING (CWE-476): [#def19]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c: scope_hint: In function ‘c_alloc’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c:282:12: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘c’
#  280|   {
#  281|     c_block_t *c=calloc(1,sizeof(c_block_t));
#  282|->   c->vector=vector;
#  283|     c->begin=begin;
#  284|     c->size=size;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c: scope_hint: In function ‘cdio_paranoia_init’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/p_block.c:421:11: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘p’
#  419|     cdrom_paranoia_t *p=calloc(1,sizeof(cdrom_paranoia_t));
#  420|   
#  421|->   p->cache=new_list((void *)&i_cblock_constructor,
#  422|   		    (void *)&i_cblock_destructor);
#  423|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def21]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘try_sort_sync’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:411:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘B’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘try_sort_sync’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:107: included_from: Included from here.
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:169:10: note: in expansion of macro ‘cv’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘try_sort_sync’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:169:10: note: in expansion of macro ‘cv’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘try_sort_sync’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:1011:9: note: in expansion of macro ‘min’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:1011:13: note: in expansion of macro ‘min’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘try_sort_sync’
#  409|     long int dynoverlap=p->dynoverlap;
#  410|     sort_link_t *ptr=NULL;
#  411|->   unsigned char *Bflags=B->flags;
#  412|   
#  413|     /* block flag matches FLAGS_UNREAD (and hence unmatchable) */

Error: GCC_ANALYZER_WARNING (CWE-688): [#def22]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘i_init_root’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:2139:7: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buff’ where non-null expected
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘i_init_root’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘i_init_root’
<built-in>: note: argument 1 of ‘__builtin_memcpy’ must be non-null
# 2137|       {
# 2138|         int16_t *buff=malloc(fs(v)*sizeof(int16_t));
# 2139|->       memcpy(buff,fv(v),fs(v)*sizeof(int16_t));
# 2140|         root->vector=c_alloc(buff,fb(v),fs(v));
# 2141|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def23]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘i_stage2’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c:2223:20: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘list’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/lib/paranoia/paranoia.c: scope_hint: In function ‘i_stage2’
# 2221|       while (first){
# 2222|         v_fragment_t *next=v_next(first);
# 2223|->       list[count++]=first;
# 2224|         first=next;
# 2225|       }

Error: COMPILER_WARNING (CWE-457): [#def24]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cachetest.c: scope_hint: In function ‘analyze_cache’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cachetest.c:600:9: warning[-Wmaybe-uninitialized]: ‘ret’ may be used uninitialized
#  600 |       if(ret<=0){
#      |         ^
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cachetest.c:562:19: note: ‘ret’ was declared here
#  562 |       int sofar=0,ret=0,retry=0;
#      |                   ^~~
#  598|   
#  599|       error:
#  600|->       if(ret<=0){
#  601|   	offset+=cachesize;
#  602|   	retry++;

Error: COMPILER_WARNING (CWE-805): [#def25]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c: scope_hint: In function ‘main’
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1360:57: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1360 |                 strncat(outfile_name, "cdda.raw", sizeof("cdda.raw"));
#      |                                                         ^
# 1358|                 switch (output_type) {
# 1359|                 case 0: /* raw */
# 1360|->                 strncat(outfile_name, "cdda.raw", sizeof("cdda.raw"));
# 1361|                   break;
# 1362|                 case 1:

Error: COMPILER_WARNING (CWE-805): [#def26]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1363:57: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1363 |                 strncat(outfile_name, "cdda.wav", sizeof("cdda.wav"));
#      |                                                         ^
# 1361|                   break;
# 1362|                 case 1:
# 1363|->                 strncat(outfile_name, "cdda.wav", sizeof("cdda.wav"));
# 1364|                   break;
# 1365|                 case 2:

Error: COMPILER_WARNING (CWE-805): [#def27]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1366:58: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1366 |                 strncat(outfile_name, "cdda.aifc", sizeof("cdda.aifc"));
#      |                                                          ^
# 1364|                   break;
# 1365|                 case 2:
# 1366|->                 strncat(outfile_name, "cdda.aifc", sizeof("cdda.aifc"));
# 1367|                   break;
# 1368|                 case 3:

Error: COMPILER_WARNING (CWE-805): [#def28]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1369:58: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1369 |                 strncat(outfile_name, "cdda.aiff", sizeof("cdda.aiff"));
#      |                                                          ^
# 1367|                   break;
# 1368|                 case 3:
# 1369|->                 strncat(outfile_name, "cdda.aiff", sizeof("cdda.aiff"));
# 1370|                   break;
# 1371|                 }

Error: COMPILER_WARNING (CWE-805): [#def29]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1395:53: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1395 |             strncat(outfile_name, "cdda.raw", sizeof("cdda.raw"));
#      |                                                     ^
# 1393|             switch(output_type){
# 1394|             case 0: /* raw */
# 1395|->             strncat(outfile_name, "cdda.raw", sizeof("cdda.raw"));
# 1396|               break;
# 1397|             case 1:

Error: COMPILER_WARNING (CWE-805): [#def30]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1398:53: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1398 |             strncat(outfile_name, "cdda.wav", sizeof("cdda.wav"));
#      |                                                     ^
# 1396|               break;
# 1397|             case 1:
# 1398|->             strncat(outfile_name, "cdda.wav", sizeof("cdda.wav"));
# 1399|               break;
# 1400|             case 2:

Error: COMPILER_WARNING (CWE-805): [#def31]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1401:54: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1401 |             strncat(outfile_name, "cdda.aifc", sizeof("cdda.aifc"));
#      |                                                      ^
# 1399|               break;
# 1400|             case 2:
# 1401|->             strncat(outfile_name, "cdda.aifc", sizeof("cdda.aifc"));
# 1402|               break;
# 1403|             case 3:

Error: COMPILER_WARNING (CWE-805): [#def32]
libcdio-paranoia-10.2+2.0.1-build/libcdio-paranoia-10.2+2.0.1/src/cd-paranoia.c:1404:54: warning[-Wsizeof-pointer-memaccess]: argument to ‘sizeof’ in ‘strncat’ call is the same expression as the source; did you mean to use the size of the destination?
# 1404 |             strncat(outfile_name, "cdda.aiff", sizeof("cdda.aiff"));
#      |                                                      ^
# 1402|               break;
# 1403|             case 3:
# 1404|->             strncat(outfile_name, "cdda.aiff", sizeof("cdda.aiff"));
# 1405|               break;
# 1406|             }

Scan Properties

analyzer-version-clippy1.82.0
analyzer-version-cppcheck2.16.0
analyzer-version-gcc14.2.1
analyzer-version-gcc-analyzer15.0.0
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.82.0
diffbase-analyzer-version-cppcheck2.16.0
diffbase-analyzer-version-gcc14.2.1
diffbase-analyzer-version-gcc-analyzer15.0.0
diffbase-analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-74.us-west-2.compute.internal
diffbase-mock-configfedora-rawhide-gcc-latest-x86_64
diffbase-project-namelibcdio-paranoia-10.2+2.0.2-2.fc42
diffbase-store-results-to/tmp/tmpqcww7_ft/libcdio-paranoia-10.2+2.0.2-2.fc42.tar.xz
diffbase-time-created2024-11-13 01:20:39
diffbase-time-finished2024-11-13 01:22:09
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmpqcww7_ft/libcdio-paranoia-10.2+2.0.2-2.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpqcww7_ft/libcdio-paranoia-10.2+2.0.2-2.fc42.src.rpm'
diffbase-tool-versioncsmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-74.us-west-2.compute.internal
mock-configfedora-rawhide-gcc-latest-x86_64
project-namelibcdio-paranoia-10.2+2.0.1-13.fc41
store-results-to/tmp/tmpyydzgcb4/libcdio-paranoia-10.2+2.0.1-13.fc41.tar.xz
time-created2024-11-13 01:18:37
time-finished2024-11-13 01:20:28
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmpyydzgcb4/libcdio-paranoia-10.2+2.0.1-13.fc41.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpyydzgcb4/libcdio-paranoia-10.2+2.0.1-13.fc41.src.rpm'
tool-versioncsmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9