sssd-2.10.0-3.fc42

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:38: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb.c:23: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb.c: scope_hint: In function 'sysdb_attrs_add_val_int'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb.c:512:45: warning[-Wanalyzer-null-dereference]: dereference of NULL 'el'
#  510|   
#  511|       vals = talloc_realloc(attrs->a, el->values,
#  512|->                           struct ldb_val, el->num_values+1);
#  513|       if (!vals) return ENOMEM;
#  514|   

Error: CPPCHECK_WARNING (CWE-457): [#def2]
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_ops.c:5823: error[legacyUninitvar]: Uninitialized variable: ldb_ret
# 5821|           ERROR_OUT(ret, EINVAL, done);
# 5822|       }
# 5823|->     if (ldb_ret != LDB_SUCCESS) {
# 5824|           ERROR_OUT(ret, EIO, done);
# 5825|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c: scope_hint: In function 'sysdb_getpwnam_with_views'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:392:42: warning[-Wanalyzer-null-dereference]: dereference of NULL 'orig_obj'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:22: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:370:9: note: in expansion of macro 'DOM_HAS_VIEWS'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_private.h:128: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:23: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:319:15: note: in expansion of macro 'sysdb_error_to_errno'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:392:9: note: in expansion of macro 'DOM_HAS_VIEWS'
#  390|       /* If there are views we have to check if override values must be added to
#  391|        * the original object. */
#  392|->     if (DOM_HAS_VIEWS(domain) && orig_obj->count == 1) {
#  393|           ret = sysdb_add_overrides_to_object(domain, orig_obj->msgs[0],
#  394|                             override_obj == NULL ? NULL : override_obj->msgs[0],

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c: scope_hint: In function 'mpg_convert'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:1060:15: warning[-Wanalyzer-null-dereference]: dereference of NULL 'val'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:38: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:51: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:1526:5: note: in expansion of macro 'DEBUG'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:1557:5: note: in expansion of macro 'DEBUG'
# 1058|   
# 1059|       /* yes, convert */
# 1060|->     val->data = (uint8_t *)talloc_strdup(msg, SYSDB_GROUP_CLASS);
# 1061|       if (val->data == NULL) return ENOMEM;
# 1062|       val->length = strlen(SYSDB_GROUP_CLASS);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c: scope_hint: In function 'sysdb_get_user_attr_with_views'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:2043:42: warning[-Wanalyzer-null-dereference]: dereference of NULL 'orig_obj'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:1971:15: note: in expansion of macro 'sysdb_error_to_errno'
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_search.c:2043:9: note: in expansion of macro 'DOM_HAS_VIEWS'
# 2041|       /* If there are views we have to check if override values must be added to
# 2042|        * the original object. */
# 2043|->     if (DOM_HAS_VIEWS(domain) && orig_obj->count == 1) {
# 2044|           ret = sysdb_add_overrides_to_object(domain, orig_obj->msgs[0],
# 2045|                             override_obj == NULL ? NULL : override_obj ->msgs[0],

Error: GCC_ANALYZER_WARNING (CWE-775): [#def6]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[0]'
#  171|       if (buf == NULL) {
#  172|           ret = ENOMEM;
#  173|->         return ret;
#  174|       }
#  175|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def7]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_clpreauth.c: scope_hint: In function 'sss_passkeycl_exec_child'
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_child[1]'
#  171|       if (buf == NULL) {
#  172|           ret = ENOMEM;
#  173|->         return ret;
#  174|       }
#  175|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def8]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_clpreauth.c:173:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipe_to_parent[0]'
#  171|       if (buf == NULL) {
#  172|           ret = ENOMEM;
#  173|->         return ret;
#  174|       }
#  175|   

Error: COMPILER_WARNING (CWE-252): [#def9]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_clpreauth.c: scope_hint: In function 'sss_passkeycl_exec_child'
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_clpreauth.c:222:9: warning[-Wunused-result]: ignoring return value of 'write' declared with attribute 'warn_unused_result'
#  222 |         write(pipe_to_child[1], pin, strlen(pin));
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  220|           close(pipe_to_parent[1]);
#  221|   
#  222|->         write(pipe_to_child[1], pin, strlen(pin));
#  223|           close(pipe_to_child[1]);
#  224|   

Error: GCC_ANALYZER_WARNING (CWE-416): [#def10]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_challenge_free.part.0'
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:111:14: warning[-Wanalyzer-use-after-free]: use after 'free' of 'data'
#  109|       }
#  110|   
#  111|->     free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|       sss_string_array_free(data->credential_id_list);

Error: GCC_ANALYZER_WARNING (CWE-416): [#def11]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:111:14: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘data’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  109|       }
#  110|   
#  111|->     free(data->domain);
#  112|       free(data->cryptographic_challenge);
#  113|       sss_string_array_free(data->credential_id_list);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def12]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:115:5: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
#  113|       sss_string_array_free(data->credential_id_list);
#  114|   
#  115|->     free(data);
#  116|   }
#  117|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def13]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:115:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_challenge_free.part.0’
#  113|       sss_string_array_free(data->credential_id_list);
#  114|   
#  115|->     free(data);
#  116|   }
#  117|   

Error: GCC_ANALYZER_WARNING (CWE-416): [#def14]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function 'sss_passkey_reply_free.part.0'
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:243:14: warning[-Wanalyzer-use-after-free]: use after 'free' of 'data'
#  241|       }
#  242|   
#  243|->     free(data->credential_id);
#  244|       free(data->cryptographic_challenge);
#  245|       free(data->authenticator_data);

Error: GCC_ANALYZER_WARNING (CWE-416): [#def15]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:243:14: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘data’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c: scope_hint: In function ‘sss_passkey_reply_free.part.0’
#  241|       }
#  242|   
#  243|->     free(data->credential_id);
#  244|       free(data->cryptographic_challenge);
#  245|       free(data->authenticator_data);

Error: GCC_ANALYZER_WARNING (CWE-126): [#def16]
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:247:14: warning[-Wanalyzer-out-of-bounds]: heap-based buffer over-read
sssd-2.10.0-build/sssd-2.10.0/src/krb5_plugin/passkey/passkey_utils.c:247:14: note: read of 8 bytes from after the end of the region
#  245|       free(data->authenticator_data);
#  246|       free(data->assertion_signature);
#  247|->     free(data->user_id);
#  248|       free(data);
#  249|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def17]
sssd-2.10.0-build/sssd-2.10.0/src/ldb_modules/memberof.c: scope_hint: In function 'mbof_append_addop'
sssd-2.10.0-build/sssd-2.10.0/src/ldb_modules/memberof.c:380:22: warning[-Wanalyzer-null-dereference]: dereference of NULL 'lastop'
/usr/include/samba-4.0/ldb.h:50: included_from: Included from here.
/usr/include/samba-4.0/ldb_module.h:36: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/ldb_modules/memberof.c:23: included_from: Included from here.
#  378|   
#  379|       if (add_ctx->add_list) {
#  380|->         lastop->next = addop;
#  381|       } else {
#  382|           add_ctx->add_list = addop;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def18]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ad/ad_subdomains.c: scope_hint: In function 'ad_get_slave_domain_send'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ad/ad_subdomains.c:1157:30: warning[-Wanalyzer-null-dereference]: dereference of NULL 'root_id_ctx'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:51: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/data_provider.h:40: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/backend.h:25: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_async.h:29: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ad/ad_subdomains.c:25: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ad/ad_subdomains.c:2299:9: note: in expansion of macro 'DEBUG'
# 1155|       state->sd_ctx = sd_ctx;
# 1156|       state->be_ctx = sd_ctx->be_ctx;
# 1157|->     state->opts = root_id_ctx->sdap_id_ctx->opts;
# 1158|       state->idmap_ctx = root_id_ctx->sdap_id_ctx->opts->idmap_ctx;
# 1159|       state->root_attrs = root_attrs;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def19]
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c: scope_hint: In function ‘matching_name’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:192:13: warning[-Wanalyzer-null-argument]: use of NULL ‘ifname’ where non-null expected
/usr/include/sys/un.h:38: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:35: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:33: included_from: Included from here.
/usr/include/string.h:156:12: note: argument 2 of ‘strcmp’ must be non-null
#  190|   static bool matching_name(const char *ifname, const char *ifname2)
#  191|   {
#  192|->     return (strcmp(MASK, ifname) == 0) || (strcasecmp(ifname, ifname2) == 0);
#  193|   }
#  194|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
sssd-2.10.0-build/sssd-2.10.0/src/providers/data_provider_fo.c: scope_hint: In function ‘be_fo_add_service’
sssd-2.10.0-build/sssd-2.10.0/src/providers/data_provider_fo.c:160:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘*ctx.be_fo’
#  158|       /* if not in the be service list, try to create new one */
#  159|   
#  160|->     ret = fo_new_service(ctx->be_fo->fo_ctx, service_name, user_data_cmp,
#  161|                            &service);
#  162|       if (ret != EOK && ret != EEXIST) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def21]
sssd-2.10.0-build/sssd-2.10.0/src/providers/data_provider_fo.c:160:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ctx’
#  158|       /* if not in the be service list, try to create new one */
#  159|   
#  160|->     ret = fo_new_service(ctx->be_fo->fo_ctx, service_name, user_data_cmp,
#  161|                            &service);
#  162|       if (ret != EOK && ret != EEXIST) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def22]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ipa/ipa_selinux.c: scope_hint: In function 'selinux_fork_child'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ipa/ipa_selinux.c:690:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[0]'
sssd-2.10.0-build/sssd-2.10.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:47: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb.h:25: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb_selinux.h:25: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ipa/ipa_selinux.c:26: included_from: Included from here.
#  688|           DEBUG(SSSDBG_OP_FAILURE, "talloc_asprintf failed.\n");
#  689|           ret = ENOMEM;
#  690|->         return ret;
#  691|       }
#  692|       c++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def23]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ipa/ipa_selinux.c:690:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[1]'
#  688|           DEBUG(SSSDBG_OP_FAILURE, "talloc_asprintf failed.\n");
#  689|           ret = ENOMEM;
#  690|->         return ret;
#  691|       }
#  692|       c++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def24]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ipa/ipa_selinux.c:690:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[0]'
#  688|           DEBUG(SSSDBG_OP_FAILURE, "talloc_asprintf failed.\n");
#  689|           ret = ENOMEM;
#  690|->         return ret;
#  691|       }
#  692|       c++;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def25]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ipa/ipa_selinux.c:690:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[1]'
#  688|           DEBUG(SSSDBG_OP_FAILURE, "talloc_asprintf failed.\n");
#  689|           ret = ENOMEM;
#  690|->         return ret;
#  691|       }
#  692|       c++;

Error: CPPCHECK_WARNING (CWE-457): [#def26]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ipa/selinux_child.c:232: error[uninitvar]: Uninitialized variable: &chain_id
#  230|           {"debug-fd", 0, POPT_ARG_INT, &debug_fd, 0,
#  231|            _("An open file descriptor for the debug logs"), NULL},
#  232|->         {"chain-id", 0, POPT_ARG_LONG, &chain_id,
#  233|            0, _("Tevent chain ID used for logging purposes"), NULL},
#  234|           SSSD_LOGGER_OPTS

Error: GCC_ANALYZER_WARNING (CWE-476): [#def27]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_async.c: scope_hint: In function 'sdap_get_generic_ext_send'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_async.c:1598:44: warning[-Wanalyzer-null-dereference]: dereference of NULL 'serverctrls'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:38: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_async.c:24: included_from: Included from here.
# 1596|   
# 1597|       for (i=0; i < state->nserverctrls; i++) {
# 1598|->         state->serverctrls[i] = serverctrls[i];
# 1599|       }
# 1600|       state->serverctrls[i] = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def28]
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_async_initgroups.c: scope_hint: In function 'sdap_add_incomplete_groups'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_async_initgroups.c:71:31: warning[-Wanalyzer-null-dereference]: dereference of NULL 'sysdb_groupnames'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:38: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_async_initgroups.c:24: included_from: Included from here.
#   69|       mi = 0;
#   70|   
#   71|->     for (i=0; sysdb_groupnames[i]; i++) {
#   72|           subdomain = find_domain_by_object_name(domain, sysdb_groupnames[i]);
#   73|           if (subdomain == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def29]
sssd-2.10.0-build/sssd-2.10.0/src/providers/proxy/proxy_child.c: scope_hint: In function ‘proxy_internal_conv’
sssd-2.10.0-build/sssd-2.10.0/src/providers/proxy/proxy_child.c:108:5: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
#  106|   
#  107|   failed:
#  108|->     free(reply);
#  109|       return PAM_CONV_ERR;
#  110|   }

Error: CPPCHECK_WARNING (CWE-457): [#def30]
sssd-2.10.0-build/sssd-2.10.0/src/providers/proxy/proxy_child.c:481: error[uninitvar]: Uninitialized variable: &chain_id
#  479|           {"id", 0, POPT_ARG_LONG, &id, 0,
#  480|            _("Child identifier (mandatory)"), NULL },
#  481|->         {"chain-id", 0, POPT_ARG_LONG, &chain_id, 0,
#  482|            _("Tevent chain ID used for logging purposes"), NULL },
#  483|           POPT_TABLEEND

Error: GCC_ANALYZER_WARNING (CWE-775): [#def31]
sssd-2.10.0-build/sssd-2.10.0/src/responder/ifp/ifp_users.c:1196:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_from_child[0]’
# 1194|           ret = errno;
# 1195|           DEBUG(SSSDBG_CRIT_FAILURE, "BUG: Could not exec p11 child\n");
# 1196|->         return ret;
# 1197|       } else if (child_pid > 0) { /* parent */
# 1198|           state->io->read_from_child_fd = pipefd_from_child[0];

Error: GCC_ANALYZER_WARNING (CWE-775): [#def32]
sssd-2.10.0-build/sssd-2.10.0/src/responder/ifp/ifp_users.c:1196:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_from_child[1]’
# 1194|           ret = errno;
# 1195|           DEBUG(SSSDBG_CRIT_FAILURE, "BUG: Could not exec p11 child\n");
# 1196|->         return ret;
# 1197|       } else if (child_pid > 0) { /* parent */
# 1198|           state->io->read_from_child_fd = pipefd_from_child[0];

Error: GCC_ANALYZER_WARNING (CWE-775): [#def33]
sssd-2.10.0-build/sssd-2.10.0/src/responder/ifp/ifp_users.c:1196:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_to_child[0]’
# 1194|           ret = errno;
# 1195|           DEBUG(SSSDBG_CRIT_FAILURE, "BUG: Could not exec p11 child\n");
# 1196|->         return ret;
# 1197|       } else if (child_pid > 0) { /* parent */
# 1198|           state->io->read_from_child_fd = pipefd_from_child[0];

Error: GCC_ANALYZER_WARNING (CWE-775): [#def34]
sssd-2.10.0-build/sssd-2.10.0/src/responder/ifp/ifp_users.c: scope_hint: In function ‘p11_child_exec’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ifp/ifp_users.c:1196:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_to_child[1]’
sssd-2.10.0-build/sssd-2.10.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:47: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb.h:25: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/responder/ifp/ifp_users.c:25: included_from: Included from here.
# 1194|           ret = errno;
# 1195|           DEBUG(SSSDBG_CRIT_FAILURE, "BUG: Could not exec p11 child\n");
# 1196|->         return ret;
# 1197|       } else if (child_pid > 0) { /* parent */
# 1198|           state->io->read_from_child_fd = pipefd_from_child[0];

Error: CPPCHECK_WARNING (CWE-457): [#def35]
sssd-2.10.0-build/sssd-2.10.0/src/responder/kcm/kcmsrv_ccache_binary.c:238: error[uninitvar]: Uninitialized variable: uuid
#  236|   
#  237|       for (uint32_t i = 0; i < count; i++) {
#  238|->         ret = sss_iobuf_read_len(buf, sizeof(uuid_t), (uint8_t*)uuid);
#  239|           if (ret != EOK) {
#  240|               return ret;

Error: CPPCHECK_WARNING (CWE-457): [#def36]
sssd-2.10.0-build/sssd-2.10.0/src/responder/kcm/kcmsrv_ops.c:1113: error[uninitvar]: Uninitialized variable: uuid
# 1111|            crd != NULL;
# 1112|            crd = kcm_cc_next_cred(crd)) {
# 1113|->         ret = kcm_cred_get_uuid(crd, uuid);
# 1114|           if (ret != EOK) {
# 1115|               DEBUG(SSSDBG_MINOR_FAILURE, "Credential has no UUID, skipping\n");

Error: CPPCHECK_WARNING (CWE-457): [#def37]
sssd-2.10.0-build/sssd-2.10.0/src/responder/kcm/kcmsrv_ops.c:1230: error[legacyUninitvar]: Uninitialized variable: uuid
# 1228|            crd != NULL;
# 1229|            crd = kcm_cc_next_cred(crd)) {
# 1230|->         ret = kcm_cred_get_uuid(crd, uuid);
# 1231|           if (ret != EOK) {
# 1232|               DEBUG(SSSDBG_MINOR_FAILURE, "Credential has no UUID, skipping\n");

Error: CPPCHECK_WARNING (CWE-457): [#def38]
sssd-2.10.0-build/sssd-2.10.0/src/responder/kcm/kcmsrv_ops.c:1551: error[uninitvar]: Uninitialized variable: uuid_in
# 1549|   
# 1550|       ret = sss_iobuf_read_len(op_ctx->input,
# 1551|->                              UUID_BYTES, uuid_in);
# 1552|       if (ret != EOK) {
# 1553|           DEBUG(SSSDBG_OP_FAILURE,

Error: GCC_ANALYZER_WARNING (CWE-688): [#def39]
sssd-2.10.0-build/sssd-2.10.0/src/responder/pam/pamsrv_p11.c: scope_hint: In function ‘pack_cert_data’
sssd-2.10.0-build/sssd-2.10.0/src/responder/pam/pamsrv_p11.c:1164:17: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
sssd-2.10.0-build/sssd-2.10.0/src/responder/pam/pamsrv_p11.c: scope_hint: In function ‘pack_cert_data’
sssd-2.10.0-build/sssd-2.10.0/src/responder/pam/pamsrv_p11.c: scope_hint: In function ‘pack_cert_data’
sssd-2.10.0-build/sssd-2.10.0/src/responder/pam/pamsrv_p11.c: scope_hint: In function ‘pack_cert_data’
<built-in>: note: argument 1 of ‘__builtin_strlen’ must be non-null
# 1162|   
# 1163|       user_len = strlen(username) + 1;
# 1164|->     token_len = strlen(token_name) + 1;
# 1165|       module_len = strlen(module_name) + 1;
# 1166|       key_id_len = strlen(key_id) + 1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def40]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/common.c: scope_hint: In function ‘sss_cli_check_socket’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/common.c:739:16: warning[-Wanalyzer-malloc-leak]: leak of ‘descriptor’
#  737|       if (ret != 0) {
#  738|           *errnop = EFAULT;
#  739|->         return SSS_STATUS_UNAVAIL;
#  740|       }
#  741|       if (!sss_sd_key_initialized) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def41]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c: scope_hint: In function 'sss_nss_mc_get_record'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:50:9: warning[-Wanalyzer-null-argument]: use of NULL 'copy_rec' where non-null expected
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:353:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc.h:34: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:33: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/mmap_cache.h:65:43: note: in definition of macro 'MC_SLOT_TO_PTR'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:336:14: note: in expansion of macro 'MC_CHECK_RECORD_LENGTH'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:353:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:353:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:353:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/nss_mc_common.c:353:9: note: in expansion of macro 'MEMCPY_WITH_BARRIERS'
<built-in>: note: argument 1 of '__builtin_memcpy' must be non-null
#   48|       if (MC_VALID_BARRIER(_b1)) { \
#   49|           __sync_synchronize(); \
#   50|->         memcpy(dest, src, len); \
#   51|           __sync_synchronize(); \
#   52|           if ((src)->b2 == _b1) { \

Error: GCC_ANALYZER_WARNING (CWE-401): [#def42]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:212:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  210|   
#  211|       pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
#  212|->     if (pcl == NULL) {
#  213|           return ENOMEM;
#  214|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def43]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:212:8: warning[-Wanalyzer-malloc-leak]: leak of 'pcl'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/sss_cli.h:36: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:25: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  210|   
#  211|       pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
#  212|->     if (pcl == NULL) {
#  213|           return ENOMEM;
#  214|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def44]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:212:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  210|   
#  211|       pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
#  212|->     if (pcl == NULL) {
#  213|           return ENOMEM;
#  214|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def45]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:212:8: warning[-Wanalyzer-malloc-leak]: leak of ‘pcl’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/sss_cli.h:36: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:25: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  210|   
#  211|       pcl = realloc(*pc_list, (c + 2) * sizeof(struct prompt_config *));
#  212|->     if (pcl == NULL) {
#  213|           return ENOMEM;
#  214|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def46]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:216:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_pc'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  214|       }
#  215|       pcl[c] = pc;
#  216|->     pcl[c + 1] = NULL;
#  217|   
#  218|       *pc_list = pcl;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def47]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:216:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_pc’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  214|       }
#  215|       pcl[c] = pc;
#  216|->     pcl[c + 1] = NULL;
#  217|   
#  218|       *pc_list = pcl;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def48]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_password'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:252:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_password'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  250|   
#  251|       ret = pc_list_add_pc(pc_list, pc);
#  252|->     if (ret != EOK) {
#  253|           goto done;
#  254|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def49]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_password’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:252:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_password’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  250|   
#  251|       ret = pc_list_add_pc(pc_list, pc);
#  252|->     if (ret != EOK) {
#  253|           goto done;
#  254|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def50]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_2fa'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:297:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_2fa'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  295|   
#  296|       ret = pc_list_add_pc(pc_list, pc);
#  297|->     if (ret != EOK) {
#  298|           goto done;
#  299|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def51]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_2fa’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:297:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_2fa’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  295|   
#  296|       ret = pc_list_add_pc(pc_list, pc);
#  297|->     if (ret != EOK) {
#  298|           goto done;
#  299|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def52]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_2fa_single'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:337:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_2fa_single'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  335|   
#  336|       ret = pc_list_add_pc(pc_list, pc);
#  337|->     if (ret != EOK) {
#  338|           goto done;
#  339|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def53]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_2fa_single’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:337:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_2fa_single’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  335|   
#  336|       ret = pc_list_add_pc(pc_list, pc);
#  337|->     if (ret != EOK) {
#  338|           goto done;
#  339|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def54]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_passkey'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:383:8: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro 'SAFEALIGN_COPY_UINT32_CHECK'
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function 'pc_list_add_passkey'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro 'SAFEALIGN_COPY_UINT32'
#  381|   
#  382|       ret = pc_list_add_pc(pc_list, pc);
#  383|->     if (ret != EOK) {
#  384|           goto done;
#  385|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def55]
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_passkey’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:383:8: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c:532:5: note: in expansion of macro ‘SAFEALIGN_COPY_UINT32_CHECK’
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/pam_sss_prompt_config.c: scope_hint: In function ‘pc_list_add_passkey’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
sssd-2.10.0-build/sssd-2.10.0/src/shared/safealign.h:78:28: note: in definition of macro ‘SAFEALIGN_COPY_UINT32’
#  381|   
#  382|       ret = pc_list_add_pc(pc_list, pc);
#  383|->     if (ret != EOK) {
#  384|           goto done;
#  385|       }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def56]
sssd-2.10.0-build/sssd-2.10.0/src/tools/sss_override.c: scope_hint: In function ‘list_user_overrides’
sssd-2.10.0-build/sssd-2.10.0/src/tools/sss_override.c:1153:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘count’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:38: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/tools/sss_override.c:23: included_from: Included from here.
/usr/include/grp.h:177: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/sss_client/sss_cli.h:30: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/db/sysdb.h:27: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/tools/sss_override.c:25: included_from: Included from here.
# 1151|       }
# 1152|   
# 1153|->     for (i = 0; i < count; i++) {
# 1154|           objs[i].orig_name = ldb_msg_find_attr_as_string(msgs[i], ORIGNAME,
# 1155|                                                           NULL);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def57]
sssd-2.10.0-build/sssd-2.10.0/src/tools/sss_override.c: scope_hint: In function ‘list_group_overrides’
sssd-2.10.0-build/sssd-2.10.0/src/tools/sss_override.c:1243:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘count’
# 1241|       }
# 1242|   
# 1243|->     for (i = 0; i < count; i++) {
# 1244|           objs[i].orig_name = ldb_msg_find_attr_as_string(msgs[i], ORIGNAME,
# 1245|                                                           NULL);

Error: GCC_ANALYZER_WARNING (CWE-910): [#def58]
sssd-2.10.0-build/sssd-2.10.0/src/util/debug.c: scope_hint: In function 'rotate_debug_files'
sssd-2.10.0-build/sssd-2.10.0/src/util/debug.c:445:19: warning[-Wanalyzer-double-fclose]: double 'fclose' of FILE '_sss_debug_file'
#  443|           do {
#  444|               error = 0;
#  445|->             ret = fclose(_sss_debug_file);
#  446|               if (ret != 0) {
#  447|                   error = errno;

Error: GCC_ANALYZER_WARNING (CWE-415): [#def59]
sssd-2.10.0-build/sssd-2.10.0/src/util/debug.c:445:19: warning[-Wanalyzer-double-free]: double-'fclose' of '_sss_debug_file'
#  443|           do {
#  444|               error = 0;
#  445|->             ret = fclose(_sss_debug_file);
#  446|               if (ret != 0) {
#  447|                   error = errno;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def60]
sssd-2.10.0-build/sssd-2.10.0/src/util/find_uid.c: scope_hint: In function 'get_active_uid_linux'
sssd-2.10.0-build/sssd-2.10.0/src/util/find_uid.c:271:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'is_systemd'
sssd-2.10.0-build/sssd-2.10.0/src/util/find_uid.c:28: included_from: Included from here.
#  269|           }
#  270|   
#  271|->         if (is_systemd) {
#  272|               /* Systemd process may linger for a while even when user.
#  273|                * is logged out. Lets ignore it and focus only

Error: GCC_ANALYZER_WARNING (CWE-457): [#def61]
sssd-2.10.0-build/sssd-2.10.0/src/util/find_uid.c: scope_hint: In function ‘get_active_uid_linux’
sssd-2.10.0-build/sssd-2.10.0/src/util/find_uid.c:271:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘is_systemd’
sssd-2.10.0-build/sssd-2.10.0/src/util/find_uid.c:28: included_from: Included from here.
#  269|           }
#  270|   
#  271|->         if (is_systemd) {
#  272|               /* Systemd process may linger for a while even when user.
#  273|                * is logged out. Lets ignore it and focus only

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def62]
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c: scope_hint: In function ‘be_nsupdate_send’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:127:9: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘pipefd_to_child[1]’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:134:5: note: in expansion of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:1063:9: note: in expansion of macro ‘PIPE_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:126:9: note: in definition of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:1041:9: note: in expansion of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:1063:9: note: in expansion of macro ‘PIPE_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:126:9: note: in definition of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:1063:9: note: in expansion of macro ‘PIPE_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:134:5: note: in expansion of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:1063:9: note: in expansion of macro ‘PIPE_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:134:5: note: in expansion of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:1063:9: note: in expansion of macro ‘PIPE_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:134:5: note: in expansion of macro ‘PIPE_FD_CLOSE’
sssd-2.10.0-build/sssd-2.10.0/src/providers/be_dyndns.c:1063:9: note: in expansion of macro ‘PIPE_CLOSE’
#  125|   #define PIPE_FD_CLOSE(fd) do {      \
#  126|       if (fd != -1) {                 \
#  127|->         close(fd);                  \
#  128|           fd = -1;                    \
#  129|       }                               \

Error: GCC_ANALYZER_WARNING (CWE-775): [#def63]
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:48: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:32: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c: scope_hint: In function 'sdap_fork_child'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[0]'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
sssd-2.10.0-build/sssd-2.10.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:47: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:140:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:126:9: note: in definition of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Error: GCC_ANALYZER_WARNING (CWE-775): [#def64]
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_from_child[1]'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:140:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:126:9: note: in definition of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Error: GCC_ANALYZER_WARNING (CWE-775): [#def65]
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[0]'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:140:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:126:9: note: in definition of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Error: GCC_ANALYZER_WARNING (CWE-775): [#def66]
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'pipefd_to_child[1]'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:140:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:126:9: note: in definition of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:133:5: note: in expansion of macro 'PIPE_FD_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:141:5: note: in expansion of macro 'PIPE_CLOSE'
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro 'ERR_OK'
sssd-2.10.0-build/sssd-2.10.0/src/providers/ldap/sdap_child_helpers.c:137:12: note: in expansion of macro 'EOK'
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Error: GCC_ANALYZER_WARNING (CWE-775): [#def67]
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:48: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:20: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c: scope_hint: In function ‘cert_to_ssh_key_step’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_from_child[0]’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
sssd-2.10.0-build/sssd-2.10.0/src/util/atomic_io.h:27: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util.h:47: included_from: Included from here.
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Error: GCC_ANALYZER_WARNING (CWE-775): [#def68]
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_from_child[1]’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Error: GCC_ANALYZER_WARNING (CWE-775): [#def69]
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_to_child[0]’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Error: GCC_ANALYZER_WARNING (CWE-775): [#def70]
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:187:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipefd_to_child[1]’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
sssd-2.10.0-build/sssd-2.10.0/src/util/util_errors.h:190:13: note: in expansion of macro ‘ERR_OK’
sssd-2.10.0-build/sssd-2.10.0/src/responder/ssh/ssh_cert_to_ssh_key.c:185:16: note: in expansion of macro ‘EOK’
#  185|       (((err) > 0) && (SSSD_ERR_BASE(err) == ERR_BASE) && ((err) <= ERR_LAST))
#  186|   
#  187|-> #define ERR_OK      0
#  188|   /* Backwards compat */
#  189|   #ifndef EOK

Scan Properties

analyzer-version-clippy1.82.0
analyzer-version-cppcheck2.16.0
analyzer-version-gcc14.2.1
analyzer-version-gcc-analyzer15.0.0
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-24.us-west-2.compute.internal
mock-configfedora-rawhide-gcc-latest-x86_64
project-namesssd-2.10.0-3.fc42
store-results-to/tmp/tmprc9sis89/sssd-2.10.0-3.fc42.tar.xz
time-created2024-11-13 03:39:42
time-finished2024-11-13 03:47:31
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmprc9sis89/sssd-2.10.0-3.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmprc9sis89/sssd-2.10.0-3.fc42.src.rpm'
tool-versioncsmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9