libgweather-4.4.4-1.fc42

List of Findings

Error: CPPCHECK_WARNING (CWE-628): [#def1]
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/gweather-info.c:431: warning[invalidFunctionArg]: Invalid log10() argument nr 1. The value is -0.1636661211 but the valid values are '4.94066e-324:'.
#  429|       }
#  430|   
#  431|->     double tmp = log10 (esurf / 6.11);
#  432|   
#  433|       return TEMP_C_TO_F (tmp * 237.7 / (tmp + 7.5));

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/tests/metar.c: scope_hint: In function ‘parse_metar_stations’
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/tests/metar.c:115:37: warning[-Wanalyzer-null-argument]: use of NULL ‘contents’ where non-null expected
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
#  113|       int i;
#  114|   
#  115|->     doc = xmlParseMemory (contents, strlen (contents));
#  116|   
#  117|       if (doc == NULL)

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/tests/metar.c:161:21: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
/usr/include/glib-2.0/glib/gstring.h:37: included_from: Included from here.
/usr/include/glib-2.0/glib/giochannel.h:36: included_from: Included from here.
/usr/include/glib-2.0/glib.h:56: included_from: Included from here.
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/tests/gweather-test-utils.h:9: included_from: Included from here.
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/tests/metar.c:9: included_from: Included from here.
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/tests/metar.c:158:30: note: in expansion of macro ‘g_strdup’
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/tests/metar.c: scope_hint: In function ‘parse_metar_stations’
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
#  159|                   xmlFree (val);
#  160|   
#  161|->                 if (strlen (station_id) != 4) {
#  162|                       g_free (station_id);
#  163|                       station_id = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-metar.c: scope_hint: In function ‘metar_tok_temp’
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-metar.c:256:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘psep’
#  254|   
#  255|       psep = strchr (tokp, '/');
#  256|->     *psep = 0;
#  257|       ptemp = tokp;
#  258|       pdew = psep + 1;

Error: CPPCHECK_WARNING (CWE-457): [#def5]
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-owm.c:174: error[uninitvar]: Uninitialized variables: &ref.sky, &ref.condition
#  172|       ref.symbol = strtol ((char *) val, NULL, 0) - 1;
#  173|       xmlFree (val);
#  174|->     obj = bsearch (&ref, symbols, G_N_ELEMENTS (symbols), sizeof (struct owm_symbol), symbol_compare);
#  175|   
#  176|       if (obj == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-owm.c: scope_hint: In function ‘parse_forecast_xml’
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-owm.c:375:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
/usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
/usr/include/glib-2.0/glib.h:32: included_from: Included from here.
/usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
/usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
/usr/include/glib-2.0/gio/gioenums.h:30: included_from: Included from here.
/usr/include/glib-2.0/gio/giotypes.h:30: included_from: Included from here.
/usr/include/glib-2.0/gio/gio.h:28: included_from: Included from here.
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/gweather-private.h:12: included_from: Included from here.
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-owm.c:9: included_from: Included from here.
/usr/include/glib-2.0/glib/gmacros.h:1249:31: note: in expansion of macro ‘_G_BOOLEAN_EXPR_IMPL’
/usr/include/glib-2.0/glib/gmacros.h:1250:43: note: in expansion of macro ‘_G_BOOLEAN_EXPR’
/usr/include/glib-2.0/glib/gmessages.h:664:9: note: in expansion of macro ‘G_LIKELY’
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-owm.c:335:5: note: in expansion of macro ‘g_return_val_if_fail’
/usr/include/glib-2.0/glib.h:64: included_from: Included from here.
libgweather-4.4.4-build/libgweather-4.4.4/libgweather/weather-owm.c:335:5: note: in expansion of macro ‘g_return_val_if_fail’
#  373|           info = make_info_from_node (original_info, node);
#  374|   
#  375|->         info->forecast_list = g_slist_append (info->forecast_list, info);
#  376|       }
#  377|   

Scan Properties

analyzer-version-clippy1.82.0
analyzer-version-cppcheck2.16.0
analyzer-version-gcc14.2.1
analyzer-version-gcc-analyzer15.0.0
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-49.us-west-2.compute.internal
mock-configfedora-rawhide-gcc-latest-x86_64
project-namelibgweather-4.4.4-1.fc42
store-results-to/tmp/tmpzb_xec71/libgweather-4.4.4-1.fc42.tar.xz
time-created2024-11-13 01:25:37
time-finished2024-11-13 01:27:13
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmpzb_xec71/libgweather-4.4.4-1.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpzb_xec71/libgweather-4.4.4-1.fc42.src.rpm'
tool-versioncsmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9