Fixed findings

List of Findings

Error: COMPILER_WARNING (CWE-697): [#def1]
alsa-lib-1.2.13/src/seq/seqmid.c: scope_hint: In function 'snd_seq_create_ump_endpoint'
alsa-lib-1.2.13/src/seq/seqmid.c:555:13: warning[-Waddress]: the comparison will always evaluate as 'true' for the address of 'name' will never be NULL
#  555 |         if (info->name) {
#      |             ^~~~
alsa-lib-1.2.13/include/sound/asound.h:4: included_from: Included from here.
alsa-lib-1.2.13/include/local.h:161: included_from: Included from here.
alsa-lib-1.2.13/src/seq/seq_local.h:26: included_from: Included from here.
alsa-lib-1.2.13/src/seq/seqmid.c:23: included_from: Included from here.
alsa-lib-1.2.13/include/sound/uapi/asound.h:806:23: note: 'name' declared here
#  806 |         unsigned char name[128];        /* endpoint name string */
#      |                       ^~~~
#  553|   		seq->ump_ep->version = SND_UMP_EP_INFO_DEFAULT_VERSION;
#  554|   
#  555|-> 	if (info->name) {
#  556|   		err = snd_seq_set_client_name(seq, (const char *)info->name);
#  557|   		if (err < 0)

Error: COMPILER_WARNING: [#def2]
alsa-lib-1.2.13/src/seq/seqmid.c: scope_hint: In function 'update_group_ports'
alsa-lib-1.2.13/src/seq/seqmid.c:675:45: warning[-Wformat-truncation=]: '%s' directive output may be truncated writing up to 127 bytes into a region of size 61
#  675 |                                          ", %s", bp->name);
#      |                                             ^~
/usr/include/bits/stdio2.h:68:10: note: '__snprintf_chk' output between 3 and 130 bytes into a destination of size 63
#   68 |   return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
#      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   69 |                                    __glibc_objsize (__s), __fmt,
#      |                                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   70 |                                    __va_arg_pack ());
#      |                                    ~~~~~~~~~~~~~~~~~
#  673|   			if (len)
#  674|   				snprintf(blknames + len, sizeof(blknames) - len,
#  675|-> 					 ", %s", bp->name);
#  676|   			else
#  677|   				snd_strlcpy(blknames, (const char *)bp->name,

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
alsa-lib-1.2.13/src/topology/save.c:96:9: warning[-Wanalyzer-null-argument]: use of NULL 'buf.dst' where non-null expected
alsa-lib-1.2.13/src/topology/save.c:557:5: enter_function: entry to 'snd_tplg_save'
alsa-lib-1.2.13/src/topology/save.c:565:9: branch_true: following 'true' branch (when 'tplg' is non-NULL)...
alsa-lib-1.2.13/src/topology/save.c:566:9: branch_true: ...to here
alsa-lib-1.2.13/src/topology/save.c:566:9: branch_true: following 'true' branch (when 'dst' is non-NULL)...
alsa-lib-1.2.13/src/topology/save.c:567:9: branch_true: ...to here
alsa-lib-1.2.13/src/topology/save.c:567:9: release_memory: '*dst' is NULL
alsa-lib-1.2.13/src/topology/save.c:569:9: call_function: calling 'tplg_buf_init' from 'snd_tplg_save'
alsa-lib-1.2.13/src/topology/save.c:569:9: return_function: returning to 'snd_tplg_save' from 'tplg_buf_init'
alsa-lib-1.2.13/src/topology/save.c:571:12: branch_false: following 'false' branch...
alsa-lib-1.2.13/src/topology/save.c:586:23: branch_false: ...to here
alsa-lib-1.2.13/src/topology/save.c:586:23: call_function: calling 'tplg_save' from 'snd_tplg_save'
#argument 2 of '__builtin_strcpy' must be non-null
#   94|   	if (pl > 0)
#   95|   		strcpy(s + l, pfx);
#   96|-> 	strcpy(s + l + pl, dst->printf_buf);
#   97|   	dst->dst = s;
#   98|   	dst->dst_len = t - 1;

Scan Properties

analyzer-version-clippy1.86.0
analyzer-version-cppcheck2.17.1
analyzer-version-gcc15.0.1
analyzer-version-gcc-analyzer15.0.1
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.86.0
diffbase-analyzer-version-cppcheck2.17.1
diffbase-analyzer-version-gcc15.0.1
diffbase-analyzer-version-gcc-analyzer15.0.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-115.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namealsa-lib-1.2.14-2.fc43
diffbase-store-results-to/tmp/tmp26yykemk/alsa-lib-1.2.14-2.fc43.tar.xz
diffbase-time-created2025-04-25 12:01:19
diffbase-time-finished2025-04-25 12:04:25
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmp26yykemk/alsa-lib-1.2.14-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp26yykemk/alsa-lib-1.2.14-2.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-115.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namealsa-lib-1.2.13-4.fc42
store-results-to/tmp/tmpa8_zfg7b/alsa-lib-1.2.13-4.fc42.tar.xz
time-created2025-04-25 11:57:33
time-finished2025-04-25 12:01:00
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpa8_zfg7b/alsa-lib-1.2.13-4.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpa8_zfg7b/alsa-lib-1.2.13-4.fc42.src.rpm'
tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9