libpng-1.6.44-1.fc42

List of Findings

Error: SHELLCHECK_WARNING (CWE-563): [#def1]
/usr/bin/libpng16-config:16:1: warning[SC2034]: exec_prefix appears unused. Verify use (or export if used externally).
#   14|   version=`pkg-config --modversion libpng`
#   15|   prefix=`pkg-config --variable prefix libpng`
#   16|-> exec_prefix=`pkg-config --variable exec_prefix libpng`
#   17|   libdir=`pkg-config --variable libdir libpng`
#   18|   includedir=`pkg-config --variable includedir libpng`

Error: GCC_ANALYZER_WARNING (CWE-775): [#def2]
libpng-1.6.44-build/libpng-1.6.44/contrib/libtests/timepng.c: scope_hint: In function ‘add_one_file’
libpng-1.6.44-build/libpng-1.6.44/contrib/libtests/timepng.c:274:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(name, "rb")’
#  272|         fpos_t pos;
#  273|   
#  274|->       if (fgetpos(fp, &pos))
#  275|         {
#  276|            /* Fatal error reading the start: */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
libpng-1.6.44-build/libpng-1.6.44/contrib/libtests/timepng.c:274:10: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(name, "rb")’
#  272|         fpos_t pos;
#  273|   
#  274|->       if (fgetpos(fp, &pos))
#  275|         {
#  276|            /* Fatal error reading the start: */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def4]
libpng-1.6.44-build/libpng-1.6.44/contrib/libtests/timepng.c: scope_hint: In function ‘main’
libpng-1.6.44-build/libpng-1.6.44/contrib/libtests/timepng.c:400:16: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(argv[2], "rb")’
#  398|         }
#  399|   
#  400|->       nfiles = atoi(argv[3]);
#  401|         if (nfiles <= 0)
#  402|         {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
libpng-1.6.44-build/libpng-1.6.44/contrib/libtests/timepng.c:400:16: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(argv[2], "rb")’
#  398|         }
#  399|   
#  400|->       nfiles = atoi(argv[3]);
#  401|         if (nfiles <= 0)
#  402|         {

Error: GCC_ANALYZER_WARNING (CWE-126): [#def6]
libpng-1.6.44-build/libpng-1.6.44/contrib/tools/pngcp.c: scope_hint: In function ‘option_index’
libpng-1.6.44-build/libpng-1.6.44/contrib/tools/pngcp.c:718:69: warning[-Wanalyzer-out-of-bounds]: buffer over-read
libpng-1.6.44-build/libpng-1.6.44/pngconf.h:51: included_from: Included from here.
libpng-1.6.44-build/libpng-1.6.44/png.h:334: included_from: Included from here.
libpng-1.6.44-build/libpng-1.6.44/contrib/tools/pngcp.c:53: included_from: Included from here.
libpng-1.6.44-build/libpng-1.6.44/contrib/tools/pngcp.c:74: included_from: Included from here.
libpng-1.6.44-build/libpng-1.6.44/contrib/tools/pngcp.c:718:69: note: read of 1 byte from after the end of ‘"verbose"’
libpng-1.6.44-build/libpng-1.6.44/contrib/tools/pngcp.c:718:69: note: valid subscripts for ‘"verbose"’ are ‘[0]’ to ‘[7]’
#  716|   
#  717|      for (j=0; j<option_count; ++j)
#  718|->       if (strncmp(options[j].name, opt, len) == 0 && options[j].name[len] == 0)
#  719|            return j;
#  720|   

Scan Properties