c-ares-1.34.5-1.fc43

List of Findings

Error: COMPILER_WARNING: [#def1] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-1UJaQi/CheckSymbolExists.c:32:19: error[error]: ‘kqueue’ undeclared (first use in this function); did you mean ‘sigqueue’?

Error: COMPILER_WARNING: [#def2] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-2rp6cO/CheckSymbolExists.c:32:19: error[error]: ‘ConvertInterfaceIndexToLuid’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def3] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-7q82vs/CheckSymbolExists.c:32:19: error[error]: ‘strcmpi’ undeclared (first use in this function); did you mean ‘strcmp’?

Error: COMPILER_WARNING: [#def4] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-Cwd31H/CheckSymbolExists.c:32:19: error[error]: ‘GetBestRoute2’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def5] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-FpPypK/CheckSymbolExists.c:32:19: error[error]: ‘ConvertInterfaceLuidToNameA’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def6] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-NnTsfe/CheckSymbolExists.c:32:19: error[error]: ‘NotifyIpInterfaceChange’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def7] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-UkMAl5/CheckSymbolExists.c:32:19: error[error]: ‘strnicmp’ undeclared (first use in this function); did you mean ‘strncmp’?

Error: COMPILER_WARNING: [#def8] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-W58VvT/CheckSymbolExists.c:32:19: error[error]: ‘stricmp’ undeclared (first use in this function); did you mean ‘strncmp’?

Error: COMPILER_WARNING: [#def9] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-Y8UuSX/CheckSymbolExists.c:32:19: error[error]: ‘CloseSocket’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def10] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-cYUk9y/CheckSymbolExists.c:32:19: error[error]: ‘ioctlsocket’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def11] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-eoSOaD/src.c:31:25: error[error]: unknown type name ‘SOCKET’

Error: COMPILER_WARNING: [#def12] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-gVOFbn/CheckSymbolExists.c:32:19: error[error]: ‘strncmpi’ undeclared (first use in this function); did you mean ‘strncmp’?

Error: COMPILER_WARNING: [#def13] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-hwCFyQ/CheckSymbolExists.c:32:19: error[error]: ‘SO_NONBLOCK’ undeclared (first use in this function); did you mean ‘O_NONBLOCK’?

Error: COMPILER_WARNING: [#def14] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-nuTlim/CheckSymbolExists.c:32:19: error[error]: ‘closesocket’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def15] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-smTIC2/CheckSymbolExists.c:32:19: error[error]: ‘IoctlSocket’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def16] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-wTGXR6/CheckSymbolExists.c:32:19: error[error]: ‘RegisterWaitForSingleObject’ undeclared (first use in this function)

Error: COMPILER_WARNING: [#def17] [important]
c-ares-1.34.5/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-wndwuT/CheckSymbolExists.c:32:19: error[error]: ‘connectx’ undeclared (first use in this function); did you mean ‘connect’?

Error: GCC_ANALYZER_WARNING (CWE-476): [#def18]
c-ares-1.34.5/src/lib/ares_getnameinfo.c:173:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘addr’
c-ares-1.34.5/src/lib/ares_getnameinfo.c:99:6: branch_true: following ‘true’ branch (when ‘sa’ is non-NULL)...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:99:13: branch_true: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:103:14: branch_true: following ‘true’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:118:7: branch_false: following ‘false’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:131:9: branch_false: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:131:8: branch_false: following ‘false’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:162:17: branch_false: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:163:10: branch_false: following ‘false’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:167:7: branch_false: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:171:10: branch_true: following ‘true’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:172:9: branch_true: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:173:9: danger: dereference of NULL ‘addr’
#  171|         if (sa->sa_family == AF_INET) {
#  172|           niquery->family = AF_INET;
#  173|->         memcpy(&niquery->addr.addr4, addr, sizeof(niquery->addr.addr4));
#  174|           ares_gethostbyaddr_nolock(channel, &addr->sin_addr,
#  175|                                     sizeof(struct in_addr), AF_INET,

Error: GCC_ANALYZER_WARNING (CWE-688): [#def19]
c-ares-1.34.5/src/lib/ares_getnameinfo.c:179:9: warning[-Wanalyzer-null-argument]: use of NULL ‘addr6’ where non-null expected
c-ares-1.34.5/src/lib/ares_getnameinfo.c:99:6: branch_true: following ‘true’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:118:7: branch_false: following ‘false’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:131:9: branch_false: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:131:8: branch_false: following ‘false’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:162:17: branch_false: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:163:10: branch_false: following ‘false’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:167:7: branch_false: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:171:10: branch_false: following ‘false’ branch...
c-ares-1.34.5/src/lib/ares_getnameinfo.c:178:9: branch_false: ...to here
c-ares-1.34.5/src/lib/ares_getnameinfo.c:179:9: danger: argument 2 (‘addr6’) NULL where non-null expected
#argument 2 of ‘__builtin_memcpy’ must be non-null
#  177|         } else {
#  178|           niquery->family = AF_INET6;
#  179|->         memcpy(&niquery->addr.addr6, addr6, sizeof(niquery->addr.addr6));
#  180|           ares_gethostbyaddr_nolock(channel, &addr6->sin6_addr,
#  181|                                     sizeof(struct ares_in6_addr), AF_INET6,

Error: COMPILER_WARNING: [#def20]
c-ares-1.34.5/src/lib/ares_metrics.c: scope_hint: In function ‘ares_metrics_server_timeout’
c-ares-1.34.5/src/lib/ares_metrics.c:221:30: warning[-Warray-bounds=]: array subscript 5 is above array bounds of ‘const struct ares_server_metrics_t[5]’
#  221 |     if (ts != server->metrics[i].ts ||
#      |               ~~~~~~~~~~~~~~~^~~
c-ares-1.34.5/src/lib/ares_private.h:63: included_from: Included from here.
c-ares-1.34.5/src/lib/ares_metrics.c:98: included_from: Included from here.
c-ares-1.34.5/src/lib/ares_conn.h:158:25: note: while referencing ‘metrics’
#  158 |   ares_server_metrics_t metrics[ARES_METRIC_COUNT];
#      |                         ^~~~~~~
#  219|       /* This ts has been invalidated, see if we should use the previous
#  220|        * time period */
#  221|->     if (ts != server->metrics[i].ts ||
#  222|           server->metrics[i].total_count < MIN_COUNT_FOR_AVERAGE) {
#  223|         time_t prev_ts = ares_metric_timestamp(i, now, ARES_TRUE);

Error: COMPILER_WARNING: [#def21]
c-ares-1.34.5/src/lib/ares_metrics.c:222:24: warning[-Warray-bounds=]: array subscript 5 is above array bounds of ‘const struct ares_server_metrics_t[5]’
#  222 |         server->metrics[i].total_count < MIN_COUNT_FOR_AVERAGE) {
#      |         ~~~~~~~~~~~~~~~^~~
c-ares-1.34.5/src/lib/ares_conn.h:158:25: note: while referencing ‘metrics’
#  158 |   ares_server_metrics_t metrics[ARES_METRIC_COUNT];
#      |                         ^~~~~~~
#  220|        * time period */
#  221|       if (ts != server->metrics[i].ts ||
#  222|->         server->metrics[i].total_count < MIN_COUNT_FOR_AVERAGE) {
#  223|         time_t prev_ts = ares_metric_timestamp(i, now, ARES_TRUE);
#  224|         if (prev_ts != server->metrics[i].prev_ts ||

Error: CPPCHECK_WARNING (CWE-457): [#def22]
c-ares-1.34.5/src/lib/ares_sysconfig_files.c:355: error[legacyUninitvar]: Uninitialized variable: lookupstr
#  353|   
#  354|       /* Look for a duplicate and ignore */
#  355|->     if (memchr(lookupstr, ch, lookupstr_cnt) == NULL) {
#  356|         lookupstr[lookupstr_cnt++] = ch;
#  357|       }

Error: COMPILER_WARNING (CWE-252): [#def23]
c-ares-1.34.5/src/lib/event/ares_event_wake_pipe.c: scope_hint: In function ‘ares_pipeevent_signal’
c-ares-1.34.5/src/lib/event/ares_event_wake_pipe.c:120:9: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  120 |   (void)write(p->filedes[1], "1", 1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  118|   
#  119|     p = e->data;
#  120|->   (void)write(p->filedes[1], "1", 1);
#  121|   }
#  122|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def24]
c-ares-1.34.5/src/lib/util/ares_rand.c:337:14: warning[-Wanalyzer-file-leak]: leak of FILE ‘*state.state.rand_file’
c-ares-1.34.5/src/lib/util/ares_rand.c:361:6: enter_function: entry to ‘ares_rand_bytes’
c-ares-1.34.5/src/lib/util/ares_rand.c:365:6: branch_true: following ‘true’ branch...
c-ares-1.34.5/src/lib/util/ares_rand.c:367:5: call_function: calling ‘ares_rand_bytes_fetch’ from ‘ares_rand_bytes’
#  335|             size_t rv = fread(buf + bytes_read, 1, len - bytes_read,
#  336|                               state->state.rand_file);
#  337|->           if (rv == 0) {
#  338|               break; /* critical error, will reinit rand state */
#  339|             }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def25]
c-ares-1.34.5/src/lib/util/ares_rand.c:337:14: warning[-Wanalyzer-malloc-leak]: leak of ‘*state.state.rand_file’
c-ares-1.34.5/src/lib/util/ares_rand.c:361:6: enter_function: entry to ‘ares_rand_bytes’
c-ares-1.34.5/src/lib/util/ares_rand.c:365:6: branch_true: following ‘true’ branch...
c-ares-1.34.5/src/lib/util/ares_rand.c:367:5: call_function: calling ‘ares_rand_bytes_fetch’ from ‘ares_rand_bytes’
#  335|             size_t rv = fread(buf + bytes_read, 1, len - bytes_read,
#  336|                               state->state.rand_file);
#  337|->           if (rv == 0) {
#  338|               break; /* critical error, will reinit rand state */
#  339|             }

Scan Properties