Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-476): [#def1]
criu-4.1/compel/src/lib/infect.c:430: error[nullPointer]: Null pointer dereference: (struct sockaddr_un*)0
#  428|   
#  429|   	saddr->sun_family = AF_UNIX;
#  430|-> 	snprintf(saddr->sun_path, UNIX_PATH_MAX, "X/crtools-pr-%d-%s", key, compel_run_id);
#  431|   
#  432|   	sun_len = SUN_LEN(saddr);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
criu-4.1/criu/parasite-syscall.c:112:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
criu-4.1/criu/parasite-syscall.c:108:9: branch_false: following ‘false’ branch...
criu-4.1/criu/parasite-syscall.c:109:9: branch_false: ...to here
criu-4.1/criu/parasite-syscall.c:109:9: branch_false: following ‘false’ branch...
criu-4.1/criu/parasite-syscall.c:110:9: branch_false: ...to here
criu-4.1/criu/parasite-syscall.c:110:9: branch_false: following ‘false’ branch...
criu-4.1/criu/parasite-syscall.c:111:9: branch_false: ...to here
criu-4.1/criu/parasite-syscall.c:111:9: branch_false: following ‘false’ branch...
criu-4.1/criu/parasite-syscall.c:112:9: branch_false: ...to here
criu-4.1/criu/parasite-syscall.c:112:9: branch_true: following ‘true’ branch...
criu-4.1/criu/parasite-syscall.c:112:9: branch_true: ...to here
criu-4.1/criu/parasite-syscall.c:112:9: danger: dereference of NULL ‘0’
#  110|   	BUG_ON(ce->n_cap_eff != CR_CAP_SIZE);
#  111|   	BUG_ON(ce->n_cap_bnd != CR_CAP_SIZE);
#  112|-> 	BUG_ON(ce->n_cap_amb != CR_CAP_SIZE);
#  113|   
#  114|   	memcpy(ce->cap_inh, c->cap_inh, sizeof(c->cap_inh[0]) * CR_CAP_SIZE);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
criu-4.1/criu/pidfd.c:205:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
criu-4.1/criu/pidfd.c:187:12: enter_function: entry to ‘open_one_pidfd’
criu-4.1/criu/pidfd.c:195:12: branch_false: following ‘false’ branch...
criu-4.1/criu/pidfd.c:204:34: branch_false: ...to here
criu-4.1/criu/pidfd.c:204:16: call_function: calling ‘lookup_dead_pidfd’ from ‘open_one_pidfd’
criu-4.1/criu/pidfd.c:204:16: return_function: returning to ‘open_one_pidfd’ from ‘lookup_dead_pidfd’
criu-4.1/criu/pidfd.c:205:9: branch_true: following ‘true’ branch...
criu-4.1/criu/pidfd.c:205:9: branch_true: ...to here
criu-4.1/criu/pidfd.c:205:9: danger: dereference of NULL ‘0’
#  203|   
#  204|   	dead = lookup_dead_pidfd(info->pidfe->ino);
#  205|-> 	BUG_ON(!dead);
#  206|   
#  207|   	if (info->dead && info->dead->creator_id != info->pidfe->id) {

Scan Properties