Error: GCC_ANALYZER_WARNING (CWE-688): [#def1] AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:65:35: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:50:1: enter_function: entry to ‘asc_parse_metainfo_data’ AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:58:9: branch_true: following ‘true’ branch (when ‘mi_basename’ is non-NULL)... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:60:14: branch_true: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:60:12: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:61:47: call_function: inlined call to ‘g_strdup_inline’ from ‘asc_parse_metainfo_data’ AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:64:21: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:65:35: danger: argument 1 (‘<unknown>’) NULL where non-null expected #argument 1 of ‘__builtin_strlen’ must be non-null # 63| /* try to guess the component-ID */ # 64| if (g_str_has_suffix (cid_guess, ".metainfo.xml")) # 65|-> cid_guess[strlen (cid_guess) - 13] = '\0'; # 66| else if (g_str_has_suffix (cid_guess, ".appdata.xml")) # 67| cid_guess[strlen (cid_guess) - 12] = '\0'; Error: GCC_ANALYZER_WARNING (CWE-688): [#def2] AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:67:35: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:50:1: enter_function: entry to ‘asc_parse_metainfo_data’ AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:58:9: branch_true: following ‘true’ branch (when ‘mi_basename’ is non-NULL)... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:60:14: branch_true: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:60:12: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:61:47: call_function: inlined call to ‘g_strdup_inline’ from ‘asc_parse_metainfo_data’ AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:64:21: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:64:21: branch_true: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:64:20: branch_false: following ‘false’ branch (when ‘__result == 0’)... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:66:26: branch_false: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:66:26: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:67:35: danger: argument 1 (‘<unknown>’) NULL where non-null expected #argument 1 of ‘__builtin_strlen’ must be non-null # 65| cid_guess[strlen (cid_guess) - 13] = '\0'; # 66| else if (g_str_has_suffix (cid_guess, ".appdata.xml")) # 67|-> cid_guess[strlen (cid_guess) - 12] = '\0'; # 68| else if (g_str_has_suffix (cid_guess, ".xml")) # 69| cid_guess[strlen (cid_guess) - 4] = '\0'; Error: GCC_ANALYZER_WARNING (CWE-688): [#def3] AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:69:35: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:50:1: enter_function: entry to ‘asc_parse_metainfo_data’ AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:58:9: branch_true: following ‘true’ branch (when ‘mi_basename’ is non-NULL)... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:60:14: branch_true: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:60:12: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:61:47: call_function: inlined call to ‘g_strdup_inline’ from ‘asc_parse_metainfo_data’ AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:64:21: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:64:21: branch_true: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:64:20: branch_false: following ‘false’ branch (when ‘__result == 0’)... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:66:26: branch_false: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:66:26: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:66:26: branch_true: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:66:25: branch_false: following ‘false’ branch (when ‘__result == 0’)... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:68:26: branch_false: ...to here AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:68:26: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../compose/asc-utils-metainfo.c:69:35: danger: argument 1 (‘<unknown>’) NULL where non-null expected #argument 1 of ‘__builtin_strlen’ must be non-null # 67| cid_guess[strlen (cid_guess) - 12] = '\0'; # 68| else if (g_str_has_suffix (cid_guess, ".xml")) # 69|-> cid_guess[strlen (cid_guess) - 4] = '\0'; # 70| # 71| asc_result_add_hint_by_cid (cres, Error: GCC_ANALYZER_WARNING (CWE-688): [#def4] AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:158:54: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:112:12: branch_false: following ‘false’ branch... AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:120:42: branch_false: ...to here AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:132:12: branch_false: following ‘false’ branch... AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:135:17: branch_false: ...to here AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:136:13: branch_false: following ‘false’ branch... AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:140:15: branch_false: ...to here AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:144:21: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:146:22: branch_true: ...to here AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:154:20: branch_true: following ‘true’ branch... AppStream-1.0.4/redhat-linux-build/../src/as-distro-extras.c:158:54: danger: argument 1 (‘<unknown>’) NULL where non-null expected #argument 1 of ‘__builtin_strlen’ must be non-null # 156| # 157| tmp = origin; # 158|-> origin = g_strndup (tmp + 1, strlen (tmp) - 2); # 159| } # 160| Error: GCC_ANALYZER_WARNING (CWE-688): [#def5] AppStream-1.0.4/redhat-linux-build/../src/as-system-info.c:267:62: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected AppStream-1.0.4/redhat-linux-build/../src/as-system-info.c:1239:1: enter_function: entry to ‘as_get_current_distro_component_id’ AppStream-1.0.4/redhat-linux-build/../src/as-system-info.c:1242:16: call_function: calling ‘as_system_info_get_os_cid’ from ‘as_get_current_distro_component_id’ #argument 1 of ‘__builtin_strlen’ must be non-null # 265| if (g_str_has_prefix (dvalue, "\"")) { # 266| gchar *tmp; # 267|-> tmp = g_strndup (dvalue + 1, strlen (dvalue) - 2); # 268| g_free (dvalue); # 269| dvalue = tmp;
| analyzer-version-clippy | 1.86.0 |
| analyzer-version-cppcheck | 2.17.1 |
| analyzer-version-gcc | 15.0.1 |
| analyzer-version-gcc-analyzer | 15.0.1 |
| analyzer-version-shellcheck | 0.10.0 |
| analyzer-version-unicontrol | 0.0.2 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-195.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | appstream-1.0.4-2.fc43 |
| store-results-to | /tmp/tmpv1y440_1/appstream-1.0.4-2.fc43.tar.xz |
| time-created | 2025-04-25 12:03:25 |
| time-finished | 2025-04-25 12:06:44 |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpv1y440_1/appstream-1.0.4-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpv1y440_1/appstream-1.0.4-2.fc43.src.rpm' |
| tool-version | csmock-3.8.1.20250422.172604.g26bc3d6-1.el9 |