mozjs128-128.3.0-1.fc42

List of Findings

Error: UNICONTROL_WARNING (CWE-94): [#def1]
mozjs128-128.3.0-build/firefox-128.3.0/devtools/client/shared/sourceeditor/codemirror6/codemirror6.bundle.mjs:1: warning: bidirectional control characters: ['\u202d', '\u202e', '\u2066', '\u2067', '\u2069']
#    1|-> class t{lineAt(t){if(t<0||t>this.length)throw new RangeError(`Invalid position ${t} in document of length ${this.length}`);return this.lineInner(t,!1,1,0)}line(t){if(t<1||t>this.lines)throw new RangeError(`Invalid line number ${t} in ${this.lines}-line document`);return this.lineInner(t,!0,1,0)}replace(t,e,n){[t,e]=h(this,t,e);let s=[];return this.decompose(0,t,s,2),n.length&&n.decompose(0,n.length,s,3),this.decompose(e,this.length,s,1),i.from(s,this.length-(e-t)+n.length)}append(t){return this.rep [...]
mozjs128-128.3.0-build/firefox-128.3.0/devtools/client/shared/sourceeditor/codemirror6/codemirror6.bundle.mjs:1: note: trimmed 1 message(s) with length over 512

Error: CLANG_WARNING: [#def2]
mozjs128-128.3.0-build/firefox-128.3.0/js/src/intl/components/Unified_cpp_intl_components4.cpp:38: included_from: Included from here.
mozjs128-128.3.0-build/firefox-128.3.0/intl/components/src/TimeZone.cpp:232:9: warning: unused variable 'date' [-Wunused-variable]
#  232 |   UDate date = UDate(aUTCMilliseconds);
#      |         ^~~~
#  230|   Result<Maybe<int64_t>, ICUError> TimeZone::GetPreviousTransition(
#  231|       int64_t aUTCMilliseconds) {
#  232|->   UDate date = UDate(aUTCMilliseconds);
#  233|   
#  234|   #if MOZ_INTL_USE_ICU_CPP_TIMEZONE

Error: CLANG_WARNING: [#def3]
mozjs128-128.3.0-build/firefox-128.3.0/intl/components/src/TimeZone.cpp:262:9: warning: unused variable 'date' [-Wunused-variable]
#  262 |   UDate date = UDate(aUTCMilliseconds);
#      |         ^~~~
#  260|   Result<Maybe<int64_t>, ICUError> TimeZone::GetNextTransition(
#  261|       int64_t aUTCMilliseconds) {
#  262|->   UDate date = UDate(aUTCMilliseconds);
#  263|   
#  264|   #if MOZ_INTL_USE_ICU_CPP_TIMEZONE

Error: CPPCHECK_WARNING (CWE-682): [#def4]
mozjs128-128.3.0-build/firefox-128.3.0/mfbt/lz4/lz4frame.c:1563: error[nullPointerArithmetic]: Pointer addition with NULL pointer.
# 1561|       LZ4F_decompressOptions_t optionsNull;
# 1562|       const BYTE* const srcStart = (const BYTE*)srcBuffer;
# 1563|->     const BYTE* const srcEnd = srcStart + *srcSizePtr;
# 1564|       const BYTE* srcPtr = srcStart;
# 1565|       BYTE* const dstStart = (BYTE*)dstBuffer;

Error: UNICONTROL_WARNING (CWE-94): [#def5]
mozjs128-128.3.0-build/firefox-128.3.0/mobile/android/android-components/components/browser/errorpages/src/main/res/values-ar/strings.xml:168: warning: bidirectional control characters: ['\u202a', '\u202c']
#  166|       <!-- This string contains markup. The URL should not be localized. -->
#  167|       <string name="mozac_browser_errorpages_malformed_uri_message_alternative"><![CDATA[<ul>
#  168|->   <li>تُكتب عناوين الوِب عادة على الشكل الآتي <strong>‪http://www.example.com/‬</strong>‏</li>
#  169|     <li>تأكد أنك تستخدم الشرطة المائلة إلى اليمين (أي <strong>/</strong>).</li> 
#  170|   </ul>]]></string>

Error: UNICONTROL_WARNING (CWE-94): [#def6]
mozjs128-128.3.0-build/firefox-128.3.0/mobile/android/android-components/components/feature/addons/src/main/res/values-ur/strings.xml:42: warning: bidirectional control characters: ['\u202a']
#   40|       <string name="mozac_feature_addons_permissions_clipboard_write_description">کلپ بورڈ میں کوائف ڈالیں</string>
#   41|       <!-- Description for downloads permission. -->
#   42|->     <string name="mozac_feature_addons_permissions_downloads_description">مسل کو ڈاؤن لوڈ کریں اور پڑھیں اور براؤزرکے سابقات میں ترمیم کریں‪</string>
#   43|       <!-- Description for downloads_open permission. -->
#   44|       <string name="mozac_feature_addons_permissions_downloads_open_description">آپ کے آلے پر ڈاؤن لوڈ کردہ فائلیں کھولیں</string>

Error: CPPCHECK_WARNING (CWE-457): [#def7]
mozjs128-128.3.0-build/firefox-128.3.0/third_party/xsimd/include/xsimd/arch/xsimd_scalar.hpp:1166: error[uninitvar]: Uninitialized variable: c
# 1164|       {
# 1165|           float s, c;
# 1166|->         detail::generic_sincosf {}(val, s, c);
# 1167|           return std::make_pair(s, c);
# 1168|       }

Error: CPPCHECK_WARNING (CWE-457): [#def8]
mozjs128-128.3.0-build/firefox-128.3.0/third_party/xsimd/include/xsimd/arch/xsimd_scalar.hpp:1166: error[uninitvar]: Uninitialized variable: s
# 1164|       {
# 1165|           float s, c;
# 1166|->         detail::generic_sincosf {}(val, s, c);
# 1167|           return std::make_pair(s, c);
# 1168|       }

Error: CPPCHECK_WARNING (CWE-457): [#def9]
mozjs128-128.3.0-build/firefox-128.3.0/third_party/xsimd/include/xsimd/arch/xsimd_scalar.hpp:1173: error[uninitvar]: Uninitialized variable: c
# 1171|       {
# 1172|           double s, c;
# 1173|->         detail::generic_sincos {}(val, s, c);
# 1174|           return std::make_pair(s, c);
# 1175|       }

Error: CPPCHECK_WARNING (CWE-457): [#def10]
mozjs128-128.3.0-build/firefox-128.3.0/third_party/xsimd/include/xsimd/arch/xsimd_scalar.hpp:1173: error[uninitvar]: Uninitialized variable: s
# 1171|       {
# 1172|           double s, c;
# 1173|->         detail::generic_sincos {}(val, s, c);
# 1174|           return std::make_pair(s, c);
# 1175|       }

Error: CPPCHECK_WARNING (CWE-562): [#def11]
mozjs128-128.3.0-build/firefox-128.3.0/third_party/xsimd/include/xsimd/memory/xsimd_aligned_allocator.hpp:146: error[returnDanglingLifetime]: Returning pointer to local variable 'r' that will be invalid when returning.
#  144|       aligned_allocator<T, A>::address(reference r) noexcept -> pointer
#  145|       {
#  146|->         return &r;
#  147|       }
#  148|   

Error: CPPCHECK_WARNING (CWE-562): [#def12]
mozjs128-128.3.0-build/firefox-128.3.0/third_party/xsimd/include/xsimd/memory/xsimd_aligned_allocator.hpp:158: error[returnDanglingLifetime]: Returning pointer to local variable 'r' that will be invalid when returning.
#  156|       aligned_allocator<T, A>::address(const_reference r) const noexcept -> const_pointer
#  157|       {
#  158|->         return &r;
#  159|       }
#  160|   

Error: UNICONTROL_WARNING (CWE-94): [#def13]
mozjs128-128.3.0-build/firefox-128.3.0/tools/lint/test/files/trojan-source/commenting-out.cpp:5: warning: bidirectional control characters: ['\u202e', '\u2066', '\u2069', '\u2066']
#    3|   int main() {
#    4|       bool isAdmin = false;
#    5|->     /*‮ } ⁦if (isAdmin)⁩ ⁦ begin admins only */
#    6|           std::cout << "You are an admin.\n";
#    7|       /* end admins only ‮ { ⁦*/

Error: UNICONTROL_WARNING (CWE-94): [#def14]
mozjs128-128.3.0-build/firefox-128.3.0/tools/lint/test/files/trojan-source/commenting-out.cpp:7: warning: bidirectional control characters: ['\u202e', '\u2066']
#    5|       /*‮ } ⁦if (isAdmin)⁩ ⁦ begin admins only */
#    6|           std::cout << "You are an admin.\n";
#    7|->     /* end admins only ‮ { ⁦*/
#    8|       return 0;
#    9|   }

Error: UNICONTROL_WARNING (CWE-94): [#def15]
mozjs128-128.3.0-build/firefox-128.3.0/tools/lint/test/files/trojan-source/early-return.py:5: warning: bidirectional control characters: ['\u2067']
#    3|   
#    4|   def subtract_funds(account: str, amount: int):
#    5|->     ''' Subtract funds from bank account then ⁧''' ;return
#    6|       bank[account] -= amount
#    7|       return

Scan Properties

analyzer-version-clippy1.82.0
analyzer-version-cppcheck2.16.0
analyzer-version-gcc14.2.1
analyzer-version-gcc-analyzer15.0.0
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-41.us-west-2.compute.internal
mock-configfedora-rawhide-gcc-latest-x86_64
project-namemozjs128-128.3.0-1.fc42
store-results-to/tmp/tmp32i5z0fz/mozjs128-128.3.0-1.fc42.tar.xz
time-created2024-11-13 02:19:48
time-finished2024-11-13 02:37:33
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmp32i5z0fz/mozjs128-128.3.0-1.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmp32i5z0fz/mozjs128-128.3.0-1.fc42.src.rpm'
tool-versioncsmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9