Error: COMPILER_WARNING (CWE-697): [#def1] alsa-lib-1.2.13/src/seq/seqmid.c: scope_hint: In function 'snd_seq_create_ump_endpoint' alsa-lib-1.2.13/src/seq/seqmid.c:555:13: warning[-Waddress]: the comparison will always evaluate as 'true' for the address of 'name' will never be NULL # 555 | if (info->name) { # | ^~~~ alsa-lib-1.2.13/include/sound/asound.h:4: included_from: Included from here. alsa-lib-1.2.13/include/local.h:161: included_from: Included from here. alsa-lib-1.2.13/src/seq/seq_local.h:26: included_from: Included from here. alsa-lib-1.2.13/src/seq/seqmid.c:23: included_from: Included from here. alsa-lib-1.2.13/include/sound/uapi/asound.h:806:23: note: 'name' declared here # 806 | unsigned char name[128]; /* endpoint name string */ # | ^~~~ # 553| seq->ump_ep->version = SND_UMP_EP_INFO_DEFAULT_VERSION; # 554| # 555|-> if (info->name) { # 556| err = snd_seq_set_client_name(seq, (const char *)info->name); # 557| if (err < 0) Error: COMPILER_WARNING: [#def2] alsa-lib-1.2.13/src/seq/seqmid.c: scope_hint: In function 'update_group_ports' alsa-lib-1.2.13/src/seq/seqmid.c:675:45: warning[-Wformat-truncation=]: '%s' directive output may be truncated writing up to 127 bytes into a region of size 61 # 675 | ", %s", bp->name); # | ^~ /usr/include/bits/stdio2.h:68:10: note: '__snprintf_chk' output between 3 and 130 bytes into a destination of size 63 # 68 | return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1, # | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # 69 | __glibc_objsize (__s), __fmt, # | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # 70 | __va_arg_pack ()); # | ~~~~~~~~~~~~~~~~~ # 673| if (len) # 674| snprintf(blknames + len, sizeof(blknames) - len, # 675|-> ", %s", bp->name); # 676| else # 677| snd_strlcpy(blknames, (const char *)bp->name, Error: GCC_ANALYZER_WARNING (CWE-688): [#def3] alsa-lib-1.2.13/src/topology/save.c:96:9: warning[-Wanalyzer-null-argument]: use of NULL 'buf.dst' where non-null expected alsa-lib-1.2.13/src/topology/save.c:557:5: enter_function: entry to 'snd_tplg_save' alsa-lib-1.2.13/src/topology/save.c:565:9: branch_true: following 'true' branch (when 'tplg' is non-NULL)... alsa-lib-1.2.13/src/topology/save.c:566:9: branch_true: ...to here alsa-lib-1.2.13/src/topology/save.c:566:9: branch_true: following 'true' branch (when 'dst' is non-NULL)... alsa-lib-1.2.13/src/topology/save.c:567:9: branch_true: ...to here alsa-lib-1.2.13/src/topology/save.c:567:9: release_memory: '*dst' is NULL alsa-lib-1.2.13/src/topology/save.c:569:9: call_function: calling 'tplg_buf_init' from 'snd_tplg_save' alsa-lib-1.2.13/src/topology/save.c:569:9: return_function: returning to 'snd_tplg_save' from 'tplg_buf_init' alsa-lib-1.2.13/src/topology/save.c:571:12: branch_false: following 'false' branch... alsa-lib-1.2.13/src/topology/save.c:586:23: branch_false: ...to here alsa-lib-1.2.13/src/topology/save.c:586:23: call_function: calling 'tplg_save' from 'snd_tplg_save' #argument 2 of '__builtin_strcpy' must be non-null # 94| if (pl > 0) # 95| strcpy(s + l, pfx); # 96|-> strcpy(s + l + pl, dst->printf_buf); # 97| dst->dst = s; # 98| dst->dst_len = t - 1;
analyzer-version-clippy | 1.86.0 |
analyzer-version-cppcheck | 2.17.1 |
analyzer-version-gcc | 15.0.1 |
analyzer-version-gcc-analyzer | 15.0.1 |
analyzer-version-shellcheck | 0.10.0 |
analyzer-version-unicontrol | 0.0.2 |
diffbase-analyzer-version-clippy | 1.86.0 |
diffbase-analyzer-version-cppcheck | 2.17.1 |
diffbase-analyzer-version-gcc | 15.0.1 |
diffbase-analyzer-version-gcc-analyzer | 15.0.1 |
diffbase-analyzer-version-shellcheck | 0.10.0 |
diffbase-analyzer-version-unicontrol | 0.0.2 |
diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
diffbase-exit-code | 0 |
diffbase-host | ip-172-16-1-115.us-west-2.compute.internal |
diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch |
diffbase-mock-config | fedora-rawhide-x86_64 |
diffbase-project-name | alsa-lib-1.2.14-2.fc43 |
diffbase-store-results-to | /tmp/tmp26yykemk/alsa-lib-1.2.14-2.fc43.tar.xz |
diffbase-time-created | 2025-04-25 12:01:19 |
diffbase-time-finished | 2025-04-25 12:04:25 |
diffbase-tool | csmock |
diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmp26yykemk/alsa-lib-1.2.14-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp26yykemk/alsa-lib-1.2.14-2.fc43.src.rpm' |
diffbase-tool-version | csmock-3.8.1.20250422.172604.g26bc3d6-1.el9 |
enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
exit-code | 0 |
host | ip-172-16-1-115.us-west-2.compute.internal |
known-false-positives | /usr/share/csmock/known-false-positives.js |
known-false-positives-rpm | known-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch |
mock-config | fedora-rawhide-x86_64 |
project-name | alsa-lib-1.2.13-4.fc42 |
store-results-to | /tmp/tmpa8_zfg7b/alsa-lib-1.2.13-4.fc42.tar.xz |
time-created | 2025-04-25 11:57:33 |
time-finished | 2025-04-25 12:01:00 |
title | Fixed findings |
tool | csmock |
tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpa8_zfg7b/alsa-lib-1.2.13-4.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpa8_zfg7b/alsa-lib-1.2.13-4.fc42.src.rpm' |
tool-version | csmock-3.8.1.20250422.172604.g26bc3d6-1.el9 |