dbus-broker-36-7.fc43

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:125:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘slot’
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:354:5: enter_function: entry to ‘controller_request_reload’
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:361:13: call_function: calling ‘controller_reload_new’ from ‘controller_request_reload’
#  123|                           break;
#  124|           }
#  125|->         if (!slot)
#  126|                   return CONTROLLER_E_SERIAL_EXHAUSTED;
#  127|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:365:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:354:5: enter_function: entry to ‘controller_request_reload’
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:358:64: release_memory: ‘reload’ is NULL
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:361:13: call_function: calling ‘controller_reload_new’ from ‘controller_request_reload’
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:361:13: return_function: returning to ‘controller_request_reload’ from ‘controller_reload_new’
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:362:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:365:15: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:365:15: release_memory: ‘reload’ is NULL
dbus-broker-36/redhat-linux-build/../src/broker/controller.c:365:9: danger: dereference of NULL ‘reload’
#  363|                   return error_trace(r);
#  364|   
#  365|->         reload->sender_id = sender_id;
#  366|           reload->sender_serial = sender_serial;
#  367|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
dbus-broker-36/redhat-linux-build/../src/bus/name.c:203:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘name’
dbus-broker-36/redhat-linux-build/../src/bus/name.c:389:5: enter_function: entry to ‘name_registry_request_name’
dbus-broker-36/redhat-linux-build/../src/bus/name.c:395:40: release_memory: ‘name’ is NULL
dbus-broker-36/redhat-linux-build/../src/bus/name.c:400:13: call_function: calling ‘name_registry_ref_name’ from ‘name_registry_request_name’
#  201|           c_assert(!c_rbnode_is_linked(&name->registry_node));
#  202|   
#  203|->         c_rbtree_add(&name->registry->name_tree, parent, slot, &name->registry_node);
#  204|   }
#  205|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:241:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:675:5: enter_function: entry to ‘peer_become_monitor’
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:680:9: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:681:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:681:9: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:682:9: call_function: inlined call to ‘c_rbtree_is_empty’ from ‘peer_become_monitor’
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:682:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:685:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:687:9: branch_true: following ‘true’ branch (when ‘rule’ is non-NULL)...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:688:17: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:699:29: branch_true: following ‘true’ branch (when ‘i < n_user_refs’)...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:700:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:700:29: call_function: calling ‘peer_link_match’ from ‘peer_become_monitor’
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:700:29: return_function: returning to ‘peer_become_monitor’ from ‘peer_link_match’
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:701:28: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:699:46: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:699:29: branch_true: following ‘true’ branch (when ‘i < n_user_refs’)...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:700:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:700:29: call_function: calling ‘peer_link_match’ from ‘peer_become_monitor’
#  239|           uint64_t id = *(uint64_t*)k;
#  240|   
#  241|->         if (id < peer->id)
#  242|                   return -1;
#  243|           if (id > peer->id)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:874:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:857:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:860:16: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:861:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:864:20: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:864:20: branch_false: following ‘false’ branch (when ‘c_internal_var_unique_182X1’ is NULL)...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:866:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:867:12: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:868:21: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:868:20: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:869:33: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/peer.c:874:25: danger: dereference of NULL ‘<unknown>’
#  872|                           connection_shutdown(&receiver->connection);
#  873|   
#  874|->                         log_append_here(receiver->bus->log, LOG_WARNING, 0, DBUS_BROKER_CATALOG_RECEIVE_FAILED);
#  875|                           bus_log_append_transaction(receiver->bus, sender->id, receiver->id, &sender_names, &receiver_names,
#  876|                                                      sender->policy->seclabel, receiver->policy->seclabel, message);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
dbus-broker-36/redhat-linux-build/../src/bus/reply.c:24:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/bus/reply.c:21:27: branch_false: following ‘false’ branch (when ‘rb’ is NULL)...
dbus-broker-36/redhat-linux-build/../src/bus/reply.c:24:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/bus/reply.c:24:23: danger: dereference of NULL ‘<unknown>’
#   22|           ReplySlotKey *key = k;
#   23|   
#   24|->         if (key->id < slot->id)
#   25|                   return -1;
#   26|           if (key->id > slot->id)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def7]
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:74:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:51:5: enter_function: entry to ‘message_new_incoming’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:52:46: release_memory: ‘message’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:67:12: branch_false: following ‘false’ branch (when ‘n_data <= 134217728’)...
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:70:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:70:13: call_function: calling ‘message_new’ from ‘message_new_incoming’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:70:13: return_function: returning to ‘message_new_incoming’ from ‘message_new’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:71:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:74:16: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:74:16: release_memory: ‘message’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:88:9: release_memory: ‘*messagep’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:89:9: release_memory: ‘message’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:74:9: danger: dereference of NULL ‘message’
#   72|                   return error_trace(r);
#   73|   
#   74|->         message->n_data = n_data;
#   75|           message->n_header = n_header;
#   76|           message->n_body = n_body;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def8]
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:125:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:104:5: enter_function: entry to ‘message_new_outgoing’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:105:46: release_memory: ‘message’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:110:9: branch_true: following ‘true’ branch (when ‘n_data > 15’)...
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:111:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:111:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:112:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:112:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:114:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:114:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:116:44: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:121:13: call_function: calling ‘message_new’ from ‘message_new_outgoing’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:121:13: return_function: returning to ‘message_new_outgoing’ from ‘message_new’
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:122:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:125:16: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:125:16: release_memory: ‘message’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:137:9: release_memory: ‘*messagep’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:138:9: release_memory: ‘message’ is NULL
dbus-broker-36/redhat-linux-build/../src/dbus/message.c:125:9: danger: dereference of NULL ‘message’
#  123|                   return error_trace(r);
#  124|   
#  125|->         message->allocated_data = true;
#  126|           message->n_data = n_data;
#  127|           message->n_header = n_header;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
dbus-broker-36/redhat-linux-build/../src/dbus/test-stitching.c:130:17: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’
dbus-broker-36/redhat-linux-build/../src/dbus/test-stitching.c:186:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/dbus/test-stitching.c:187:9: call_function: calling ‘test_stitching’ from ‘main’
#  128|   
#  129|           for (n = 0, i = 0; i < C_ARRAY_SIZE(message->vecs); ++i) {
#  130|->                 c_memcpy(p + n, message->vecs[i].iov_base, message->vecs[i].iov_len);
#  131|                   n += message->vecs[i].iov_len;
#  132|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:76:9: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1012:13: enter_function: entry to ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1020:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1031:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1138:21: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1141:41: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1138:21: call_function: calling ‘config_path_new’ from ‘config_parser_end_fn’
#   74|           }
#   75|   
#   76|->         *filep = file;
#   77|           file = NULL;
#   78|           return 0;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def11]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:88:16: warning[-Wanalyzer-malloc-leak]: leak of ‘*((ConfigState)*(void *)userdata).current.<Ued20>.bustype.name’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1012:13: enter_function: entry to ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1020:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1031:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1068:21: call_function: calling ‘config_path_new_dir’ from ‘config_parser_end_fn’
#   86|                   (*filep)->is_dir = true;
#   87|   
#   88|->         return r;
#   89|   }
#   90|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def12]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1034:22: warning[-Wanalyzer-malloc-leak]: leak of ‘*((ConfigState)*(void *)userdata).current.<Ued20>.bustype.name’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1020:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1031:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1033:48: acquire_memory: allocated here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1034:22: danger: ‘*((ConfigState)*(void *)userdata).current.<Ued20>.bustype.name’ leaks here; was allocated at [(7)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/6)
# 1032|           case CONFIG_NODE_TYPE:
# 1033|                   state->current->bustype.name = strdup(state->current->cdata);
# 1034|->                 if (!state->current->bustype.name) {
# 1035|                           state->error = error_origin(-ENOMEM);
# 1036|                           return;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def13]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1076:23: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir(&*_24->D.6213.includedir.dir.path)’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1012:13: enter_function: entry to ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1020:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1031:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1068:21: call_function: calling ‘config_path_new_dir’ from ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1068:21: return_function: returning to ‘config_parser_end_fn’ from ‘config_path_new_dir’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1071:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1076:31: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1076:23: acquire_memory: allocated here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1076:23: danger: ‘opendir(&*_24->D.6213.includedir.dir.path)’ leaks here; was allocated at [(18)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/17)
# 1074|                   }
# 1075|   
# 1076|->                 dir = opendir(state->current->includedir.dir->path);
# 1077|                   if (!dir) {
# 1078|                           if (errno == ENOENT || errno == ENOTDIR)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1155:22: warning[-Wanalyzer-malloc-leak]: leak of ‘*((ConfigState)*(void *)userdata).current.<Ued20>.bustype.name’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1020:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1031:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1154:51: acquire_memory: allocated here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1155:22: danger: ‘*((ConfigState)*(void *)userdata).current.<Ued20>.bustype.name’ leaks here; was allocated at [(7)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/6)
# 1153|           case CONFIG_NODE_SERVICEDIR: {
# 1154|                   state->current->servicedir.path = strdup(state->current->cdata);
# 1155|->                 if (!state->current->servicedir.path) {
# 1156|                           state->error = error_origin(-ENOMEM);
# 1157|                           return;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def15]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1231:9: warning[-Wanalyzer-malloc-leak]: leak of ‘t’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1220:13: acquire_memory: allocated here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1221:12: branch_false: following ‘false’ branch (when ‘t’ is non-NULL)...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1226:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1231:9: danger: ‘t’ leaks here; was allocated at [(1)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/0)
# 1229|           free(state->current->cdata);
# 1230|           state->current->cdata = t;
# 1231|->         state->current->n_cdata += n_data;
# 1232|   }
# 1233|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def16]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1329:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&*node_73(D)->D.6213.include.file.path, 524544)’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1276:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1277:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1277:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1279:18: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1305:13: acquire_resource: opened here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1306:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1326:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1329:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1330:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1336:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1336:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1338:18: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1329:21: danger: ‘open(&*node_73(D)->D.6213.include.file.path, 524544)’ leaks here; was opened at [(5)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/4)
# 1327|                           return error_origin(-errno);
# 1328|   
# 1329|->                 r = XML_Parse(parser->xml, buffer, len, len ? XML_FALSE : XML_TRUE);
# 1330|                   if (r != XML_STATUS_OK) {
# 1331|                           CONFIG_ERR(&parser->state, "Invalid XML", ": %s",

Error: GCC_ANALYZER_WARNING (CWE-457): [#def17]
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1375:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘node’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1349:5: enter_function: entry to ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1359:13: call_function: calling ‘config_root_new’ from ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1359:13: return_function: returning to ‘config_parser_read’ from ‘config_root_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1360:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1367:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1367:13: call_function: calling ‘config_path_new’ from ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1367:13: return_function: returning to ‘config_parser_read’ from ‘config_path_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1368:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1371:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1371:13: call_function: calling ‘config_node_new’ from ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1371:13: return_function: returning to ‘config_parser_read’ from ‘config_node_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1372:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1375:30: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1375:13: danger: use of uninitialized value ‘node’ here
# 1373|                   return error_trace(r);
# 1374|   
# 1375|->         node->include.file = config_path_ref(file);
# 1376|           c_list_link_front(&root->node_list, &node->root_link);
# 1377|           c_list_link_front(&root->include_list, &node->include_link);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def18]
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:520:14: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(path, 524288)’
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:132:12: enter_function: entry to ‘launcher_on_dirwatch’
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:143:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:146:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:146:13: call_function: calling ‘launcher_reload_config’ from ‘launcher_on_dirwatch’
#  518|           int r;
#  519|   
#  520|->         fd = open(path, O_RDONLY | O_CLOEXEC);
#  521|           if (fd < 0) {
#  522|                   /*

Error: GCC_ANALYZER_WARNING (CWE-476): [#def19]
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:716:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘service’
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:132:12: enter_function: entry to ‘launcher_on_dirwatch’
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:143:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:146:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:146:13: call_function: calling ‘launcher_reload_config’ from ‘launcher_on_dirwatch’
#  714|                   Service *old_service = c_container_of(parent, Service, rb_by_name);
#  715|   
#  716|->                 if (!old_service->reload_tag) {
#  717|                           old_service->reload_tag = true;
#  718|                           r = service_update(old_service, path, unit, argc, argv, user, uid);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def20]
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:747:15: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir(dirpath)’
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:132:12: enter_function: entry to ‘launcher_on_dirwatch’
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:143:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:146:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/launcher.c:146:13: call_function: calling ‘launcher_reload_config’ from ‘launcher_on_dirwatch’
#  745|           int r;
#  746|   
#  747|->         dir = opendir(dirpath);
#  748|           if (!dir) {
#  749|                   if (errno == ENOENT || errno == ENOTDIR) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def21]
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:210:55: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘node’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:632:5: enter_function: entry to ‘policy_import’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:636:13: call_function: calling ‘policy_import_connect_self’ from ‘policy_import’
#  208|                           return error_trace(r);
#  209|   
#  210|->                 c_rbtree_add(tree, parent, slot, &node->policy_node);
#  211|           } else {
#  212|                   node = c_container_of(parent, PolicyNode, policy_node);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def22]
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:236:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘record’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:632:5: enter_function: entry to ‘policy_import’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:636:13: call_function: calling ‘policy_import_connect_self’ from ‘policy_import’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:636:13: return_function: returning to ‘policy_import’ from ‘policy_import_connect_self’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:637:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:640:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:640:9: branch_true: following ‘true’ branch (when ‘i_cnode != root’)...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:641:21: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:641:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:646:20: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:646:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:653:20: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:653:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:660:20: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:666:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:670:22: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:670:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:671:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:670:21: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:672:22: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:670:21: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:678:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:680:29: call_function: calling ‘policy_import_connect’ from ‘policy_import’
#  234|           c_assert(cnode->parent->policy.context < _CONFIG_POLICY_N);
#  235|   
#  236|->         record->verdict = (cnode->type == CONFIG_NODE_ALLOW);
#  237|           record->priority = UINT64_MAX / _CONFIG_POLICY_N *
#  238|                              cnode->parent->policy.context +

Error: GCC_ANALYZER_WARNING (CWE-476): [#def23]
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:259:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:632:5: enter_function: entry to ‘policy_import’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:636:13: call_function: calling ‘policy_import_connect_self’ from ‘policy_import’
#  257|                   return error_trace(r);
#  258|   
#  259|->         record->verdict = true;
#  260|           record->priority = ++policy->i_priority;
#  261|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def24]
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:266:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘node’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:632:5: enter_function: entry to ‘policy_import’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:636:13: call_function: calling ‘policy_import_connect_self’ from ‘policy_import’
#  264|                   return error_trace(r);
#  265|   
#  266|->         c_list_link_tail(&node->entries.connect_list, &record->link);
#  267|   
#  268|           record = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def25]
dbus-broker-36/redhat-linux-build/../src/util/dispatch.h:74:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘file’
dbus-broker-36/redhat-linux-build/../test/dbus/test-fdstream.c:134:12: enter_function: entry to ‘test_fd_stream_fn’
dbus-broker-36/redhat-linux-build/../test/dbus/test-fdstream.c:135:25: branch_false: following ‘false’ branch (when ‘file’ is NULL)...
dbus-broker-36/redhat-linux-build/../test/dbus/test-fdstream.c:138:13: call_function: inlined call to ‘dispatch_file_events’ from ‘test_fd_stream_fn’
#   72|   
#   73|   static inline uint32_t dispatch_file_events(DispatchFile *file) {
#   74|->         return file->events & file->user_mask;
#   75|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def26]
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:90:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:79:5: enter_function: entry to ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:84:13: call_function: calling ‘fdlist_new_with_fds’ from ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:84:13: return_function: returning to ‘fdlist_new_dup_fds’ from ‘fdlist_new_with_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:85:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:88:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:88:13: call_function: inlined call to ‘fdlist_data’ from ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:89:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:89:21: branch_true: following ‘true’ branch (when ‘i < n_fds’)...
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:90:31: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:90:31: release_memory: ‘0’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:90:24: danger: dereference of NULL ‘<unknown> + i * 4’
#   88|           p = fdlist_data(list);
#   89|           for (i = 0; i < n_fds; ++i) {
#   90|->                 p[i] = fcntl(p[i], F_DUPFD_CLOEXEC, 3);
#   91|                   if (p[i] < 0) {
#   92|                           r = -errno;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def27]
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:90:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:79:5: enter_function: entry to ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:84:13: call_function: calling ‘fdlist_new_with_fds’ from ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:84:13: return_function: returning to ‘fdlist_new_dup_fds’ from ‘fdlist_new_with_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:85:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:88:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:88:13: call_function: inlined call to ‘fdlist_data’ from ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:89:21: branch_true: following ‘true’ branch (when ‘i < n_fds’)...
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:90:31: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:90:24: danger: use of uninitialized value ‘*<unknown>’ here
#   88|           p = fdlist_data(list);
#   89|           for (i = 0; i < n_fds; ++i) {
#   90|->                 p[i] = fcntl(p[i], F_DUPFD_CLOEXEC, 3);
#   91|                   if (p[i] < 0) {
#   92|                           r = -errno;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def28]
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:101:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:79:5: enter_function: entry to ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:80:43: release_memory: ‘list’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:84:13: call_function: calling ‘fdlist_new_with_fds’ from ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:84:13: return_function: returning to ‘fdlist_new_dup_fds’ from ‘fdlist_new_with_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:85:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:88:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:88:13: release_memory: ‘list’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:88:13: call_function: inlined call to ‘fdlist_data’ from ‘fdlist_new_dup_fds’
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:89:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:89:21: branch_false: following ‘false’ branch (when ‘i >= n_fds’)...
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:101:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:103:9: release_memory: ‘*listp’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:104:9: release_memory: ‘list’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fdlist.c:101:9: danger: dereference of NULL ‘list’
#   99|           }
#  100|   
#  101|->         list->consumed = true;
#  102|   
#  103|           *listp = list;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def29]
dbus-broker-36/redhat-linux-build/../src/util/fs.c:94:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:165:5: enter_function: entry to ‘fs_dir_list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:166:50: release_memory: ‘list’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fs.c:170:13: call_function: calling ‘fs_dirlist_new’ from ‘fs_dir_list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:170:13: return_function: returning to ‘fs_dir_list’ from ‘fs_dirlist_new’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:171:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fs.c:175:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fs.c:176:17: branch_true: following ‘true’ branch (when ‘de’ is non-NULL)...
dbus-broker-36/redhat-linux-build/../src/util/fs.c:179:34: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fs.c:179:21: call_function: calling ‘string_equal’ from ‘fs_dir_list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:179:21: return_function: returning to ‘fs_dir_list’ from ‘string_equal’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:179:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fs.c:181:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fs.c:181:21: call_function: calling ‘string_equal’ from ‘fs_dir_list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:181:21: return_function: returning to ‘fs_dir_list’ from ‘string_equal’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:181:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fs.c:183:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fs.c:186:21: release_memory: ‘list’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fs.c:186:21: call_function: calling ‘fs_dirlist_push’ from ‘fs_dir_list’
#   92|   
#   93|           /* Increase array-size if minimum was exceeded. */
#   94|->         if (list->n_entries >= list->n_allocated) {
#   95|                   c_assert(list->n_allocated > 0);
#   96|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def30]
dbus-broker-36/redhat-linux-build/../src/util/fs.c:140:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:165:5: enter_function: entry to ‘fs_dir_list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:166:50: release_memory: ‘list’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fs.c:170:13: call_function: calling ‘fs_dirlist_new’ from ‘fs_dir_list’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:170:13: return_function: returning to ‘fs_dir_list’ from ‘fs_dirlist_new’
dbus-broker-36/redhat-linux-build/../src/util/fs.c:171:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fs.c:175:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fs.c:190:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/fs.c:201:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/fs.c:201:9: release_memory: ‘list’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/fs.c:201:9: call_function: calling ‘fs_dirlist_sort’ from ‘fs_dir_list’
#  138|    */
#  139|   void fs_dirlist_sort(FsDirlist *list) {
#  140|->         qsort(
#  141|                   list->entries,
#  142|                   list->n_entries,

Error: GCC_ANALYZER_WARNING (CWE-688): [#def31]
dbus-broker-36/redhat-linux-build/../src/util/proc.c:48:29: warning[-Wanalyzer-null-argument]: use of NULL ‘pos’ where non-null expected
dbus-broker-36/redhat-linux-build/../src/util/proc.c:189:5: enter_function: entry to ‘proc_resolve_pidfd’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:190:36: release_memory: ‘data’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/proc.c:190:50: release_memory: ‘data’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/proc.c:197:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/proc.c:200:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/proc.c:200:13: call_function: calling ‘proc_read’ from ‘proc_resolve_pidfd’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:200:13: return_function: returning to ‘proc_resolve_pidfd’ from ‘proc_read’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:201:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/proc.c:204:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/proc.c:204:13: release_memory: ‘data’ is NULL
dbus-broker-36/redhat-linux-build/../src/util/proc.c:204:13: call_function: calling ‘proc_field’ from ‘proc_resolve_pidfd’
#argument 1 of ‘__builtin_strstr’ must be non-null
#   46|                   do {
#   47|                           /* Find next occurrence of they key. */
#   48|->                         t = strstr(pos, key);
#   49|                           if (!t)
#   50|                                   return PROC_E_NOT_FOUND;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def32]
dbus-broker-36/redhat-linux-build/../src/util/proc.c:196:14: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&path, 524288)’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:196:14: acquire_resource: opened here
dbus-broker-36/redhat-linux-build/../src/util/proc.c:196:14: danger: ‘open(&path, 524288)’ leaks here; was opened at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  194|   
#  195|           sprintf(path, "/proc/self/fdinfo/%d", pidfd);
#  196|->         fd = open(path, O_RDONLY | O_CLOEXEC);
#  197|           if (fd < 0)
#  198|                   return error_origin(-errno);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def33]
dbus-broker-36/redhat-linux-build/../src/util/proc.c:213:1: warning[-Wanalyzer-malloc-leak]: leak of ‘field’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:189:5: enter_function: entry to ‘proc_resolve_pidfd’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:197:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/proc.c:200:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/proc.c:200:13: call_function: calling ‘proc_read’ from ‘proc_resolve_pidfd’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:200:13: return_function: returning to ‘proc_resolve_pidfd’ from ‘proc_read’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:201:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/proc.c:204:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/proc.c:204:13: call_function: calling ‘proc_field’ from ‘proc_resolve_pidfd’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:204:13: return_function: returning to ‘proc_resolve_pidfd’ from ‘proc_field’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:205:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/proc.c:208:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/proc.c:209:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/proc.c:191:35: call_function: inlined call to ‘c_closep’ from ‘proc_resolve_pidfd’
dbus-broker-36/redhat-linux-build/../src/util/proc.c:213:1: danger: ‘field’ leaks here; was allocated at [(22)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/21)
#  211|   
#  212|           return 0;
#  213|-> }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def34]
dbus-broker-36/redhat-linux-build/../src/util/test-fs.c:32:15: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir("/")’
dbus-broker-36/redhat-linux-build/../src/util/test-fs.c:32:15: acquire_memory: allocated here
dbus-broker-36/redhat-linux-build/../src/util/test-fs.c:32:15: danger: ‘opendir("/")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   30|           int r;
#   31|   
#   32|->         dir = opendir("/");
#   33|           c_assert(dir);
#   34|   

Error: GCC_ANALYZER_WARNING (CWE-121): [#def35]
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:81:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:33:12: branch_false: following ‘false’ branch (when ‘domain == 1’)...
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:35:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:35:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:40:28: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:41:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:44:28: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:45:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:55:26: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-peersec.c:81:17: danger: out-of-bounds write at byte 110 but ‘address’ ends at byte 110
#   79|                   };
#   80|   
#   81|->                 sprintf(address.sun_path + 1, "%"PRIx64, magic);
#   82|   
#   83|                   r = bind(listener, (struct sockaddr *)&address, sizeof(address));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def36]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[0]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: danger: ‘pipes[0]’ leaks here
#  117|           r = pipe2(pipes, O_CLOEXEC | O_DIRECT);
#  118|           c_assert(r >= 0);
#  119|->         rpipe_up = pipes[0];
#  120|           wpipe_up = pipes[1];
#  121|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def37]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: danger: ‘pipes[1]’ leaks here
#  123|   
#  124|           fd_server = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
#  125|->         c_assert(fd_server >= 0);
#  126|   
#  127|           /*

Error: GCC_ANALYZER_WARNING (CWE-775): [#def38]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:136:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: danger: ‘pipes[1]’ leaks here
#  135|   
#  136|           pid_server = fork();
#  137|->         c_assert(pid_server >= 0);
#  138|           if (!pid_server) {
#  139|                   rpipe_up = c_close(rpipe_up);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def39]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘socket(1, 526337, 0)’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:124:21: acquire_resource: socket created here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:136:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: danger: ‘socket(1, 526337, 0)’ leaks here
#  135|   
#  136|           pid_server = fork();
#  137|->         c_assert(pid_server >= 0);
#  138|           if (!pid_server) {
#  139|                   rpipe_up = c_close(rpipe_up);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def40]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:146:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘socket(1, 526337, 0)’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:99:13: enter_function: entry to ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:124:21: acquire_resource: socket created here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:136:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: branch_true: following ‘true’ branch (when ‘pid_server >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: following ‘true’ branch (when ‘pid_server == 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:139:28: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:140:30: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:142:17: call_function: calling ‘create_server’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:142:17: return_function: returning to ‘test_peerpidfd’ from ‘create_server’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:146:17: danger: ‘socket(1, 526337, 0)’ leaks here
#  144|                   /* signal parent that the server is up */
#  145|                   l = write(wpipe_up, "!", 1);
#  146|->                 c_assert(l == 1);
#  147|   
#  148|                   /* wait with exit until told */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def41]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:150:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘socket(1, 526337, 0)’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:99:13: enter_function: entry to ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:124:21: acquire_resource: socket created here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:136:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: branch_true: following ‘true’ branch (when ‘pid_server >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: following ‘true’ branch (when ‘pid_server == 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:139:28: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:140:30: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:142:17: call_function: calling ‘create_server’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:142:17: return_function: returning to ‘test_peerpidfd’ from ‘create_server’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:146:17: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:149:21: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:150:17: danger: ‘socket(1, 526337, 0)’ leaks here
#  148|                   /* wait with exit until told */
#  149|                   l = read(rpipe_down, &c, 1);
#  150|->                 c_assert(l == 1 && c == '!');
#  151|   
#  152|                   _exit(0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def42]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:161:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:99:13: enter_function: entry to ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:136:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: branch_true: following ‘true’ branch (when ‘pid_server >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_false: following ‘false’ branch (when ‘pid_server != 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:155:20: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:156:22: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:161:9: danger: ‘pipes[1]’ leaks here
#  159|   
#  160|           l = read(rpipe_up, &c, 1);
#  161|->         c_assert(l == 1 && c == '!');
#  162|   
#  163|           n_address = sizeof(address);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def43]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:161:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘socket(1, 526337, 0)’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:99:13: enter_function: entry to ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:124:21: acquire_resource: socket created here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:136:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: branch_true: following ‘true’ branch (when ‘pid_server >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_false: following ‘false’ branch (when ‘pid_server != 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:155:20: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:156:22: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:161:9: danger: ‘socket(1, 526337, 0)’ leaks here
#  159|   
#  160|           l = read(rpipe_up, &c, 1);
#  161|->         c_assert(l == 1 && c == '!');
#  162|   
#  163|           n_address = sizeof(address);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def44]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:165:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#  163|           n_address = sizeof(address);
#  164|           r = getsockname(fd_server, &address, &n_address);
#  165|->         c_assert(r >= 0);
#  166|   
#  167|           /*

Error: GCC_ANALYZER_WARNING (CWE-775): [#def45]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:173:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#  171|   
#  172|           pid_client = fork();
#  173|->         c_assert(pid_client >= 0);
#  174|           if (!pid_client) {
#  175|                   rpipe_up = c_close(rpipe_up);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def46]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:188:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#  186|   
#  187|           l = write(wpipe_down, "!", 1);
#  188|->         c_assert(l == 1);
#  189|   
#  190|           wait_and_verify(pid_server);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def47]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:198:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#  196|   
#  197|           pid_client = fork();
#  198|->         c_assert(pid_client >= 0);
#  199|           if (!pid_client) {
#  200|                   rpipe_up = c_close(rpipe_up);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def48]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:209:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[0]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#  207|   
#  208|           wait_and_verify(pid_client);
#  209|-> }
#  210|   
#  211|   int main(int argc, char **argv) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def49]
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:209:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#  207|   
#  208|           wait_and_verify(pid_client);
#  209|-> }
#  210|   
#  211|   int main(int argc, char **argv) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def50]
dbus-broker-36/redhat-linux-build/../src/util/user.c:217:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘usage’
dbus-broker-36/redhat-linux-build/../src/util/user.c:282:5: enter_function: entry to ‘user_charge’
dbus-broker-36/redhat-linux-build/../src/util/user.c:288:12: branch_false: following ‘false’ branch (when ‘amount != 0’)...
dbus-broker-36/redhat-linux-build/../src/util/user.c:292:12: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/user.c:292:12: branch_false: following ‘false’ branch (when ‘user’ is non-NULL)...
dbus-broker-36/redhat-linux-build/../src/util/user.c:296:12: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/user.c:299:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/user.c:305:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/user.c:305:21: call_function: calling ‘user_ref_usage’ from ‘user_charge’
#  215|                           return r;
#  216|   
#  217|->                 user_usage_link(usage, parent, slot);
#  218|           } else {
#  219|                   usage = c_container_of(parent, UserUsage, user_node);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def51]
dbus-broker-36/redhat-linux-build/../src/util/user.c:357:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/util/user.c:354:22: branch_false: following ‘false’ branch (when ‘rb’ is NULL)...
dbus-broker-36/redhat-linux-build/../src/util/user.c:355:15: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/user.c:357:19: danger: dereference of NULL ‘<unknown>’
#  355|           uid_t uid = *(uid_t*)k;
#  356|   
#  357|->         if (uid < user->uid)
#  358|                   return -1;
#  359|           if (uid > user->uid)

Error: GCC_ANALYZER_WARNING (CWE-457): [#def52]
dbus-broker-36/redhat-linux-build/../src/util/user.c:434:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘user’
dbus-broker-36/redhat-linux-build/../src/util/user.c:423:5: enter_function: entry to ‘user_registry_ref_user’
dbus-broker-36/redhat-linux-build/../src/util/user.c:428:16: call_function: calling ‘c_rbtree_find_slot’ from ‘user_registry_ref_user’
dbus-broker-36/redhat-linux-build/../src/util/user.c:428:16: return_function: returning to ‘user_registry_ref_user’ from ‘c_rbtree_find_slot’
dbus-broker-36/redhat-linux-build/../src/util/user.c:429:12: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/user.c:430:21: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/user.c:430:21: call_function: calling ‘user_new’ from ‘user_registry_ref_user’
dbus-broker-36/redhat-linux-build/../src/util/user.c:430:21: return_function: returning to ‘user_registry_ref_user’ from ‘user_new’
dbus-broker-36/redhat-linux-build/../src/util/user.c:431:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/util/user.c:434:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/util/user.c:434:17: danger: use of uninitialized value ‘user’ here
#  432|                           return error_trace(r);
#  433|   
#  434|->                 user_link(user, parent, slot);
#  435|           } else {
#  436|                   user = c_container_of(parent, User, registry_node);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def53]
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:236:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘t1’
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:199:13: enter_function: entry to ‘test_skip’
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:215:13: call_function: calling ‘c_dvar_type_new_from_string’ from ‘test_skip’
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:215:13: return_function: returning to ‘test_skip’ from ‘c_dvar_type_new_from_string’
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:216:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:218:13: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:219:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:223:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:228:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:232:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:235:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:236:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcdvar-1/src/test-basic.c:236:9: danger: use of uninitialized value ‘t1’ here
#  234|           c_dvar_read(var, "[tt]", &t0, &t1);
#  235|           c_assert(t0 == 7);
#  236|->         c_assert(t1 == 127);
#  237|   
#  238|           r = c_dvar_end_read(var);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def54]
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:116:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘entry’
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:240:6: enter_function: entry to ‘c_ini_group_unlink’
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:242:17: call_function: calling ‘c_rbnode_unlink’ from ‘c_ini_group_unlink’
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:242:17: return_function: returning to ‘c_ini_group_unlink’ from ‘c_rbnode_unlink’
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:243:17: call_function: inlined call to ‘c_list_unlink’ from ‘c_ini_group_unlink’
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:244:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:245:25: call_function: calling ‘c_ini_group_unref’ from ‘c_ini_group_unlink’
#  114|   
#  115|   void c_ini_entry_unlink(CIniEntry *entry) {
#  116|->         if (entry->group) {
#  117|                   c_rbnode_unlink(&entry->rb_group);
#  118|                   c_list_unlink(&entry->link_group);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def55]
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:356:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘raw’
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:411:24: enter_function: entry to ‘c_ini_domain_unref’
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:412:12: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcini-1/src/c-ini.c:413:17: call_function: calling ‘c_ini_domain_free_internal’ from ‘c_ini_domain_unref’
#  354|   
#  355|   void c_ini_raw_unlink(CIniRaw *raw) {
#  356|->         if (raw->domain) {
#  357|                   c_list_unlink(&raw->link_domain);
#  358|                   raw->domain = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def56]
dbus-broker-36/redhat-linux-build/../subprojects/libclist-3/src/c-list.h:149:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:632:5: enter_function: entry to ‘policy_import’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:636:13: call_function: calling ‘policy_import_connect_self’ from ‘policy_import’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:636:13: return_function: returning to ‘policy_import’ from ‘policy_import_connect_self’
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:637:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:640:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:640:9: branch_true: following ‘true’ branch (when ‘i_cnode != root’)...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:641:21: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:641:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:646:20: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:646:20: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:647:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/policy.c:647:29: call_function: calling ‘policy_import_selinux’ from ‘policy_import’
#  147|   
#  148|           next->prev = what;
#  149|->         what->next = next;
#  150|           what->prev = prev;
#  151|           prev->next = what;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def57]
dbus-broker-36/redhat-linux-build/../subprojects/libclist-3/src/c-list.h:170:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘root’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1349:5: enter_function: entry to ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1350:52: release_memory: ‘root’ is NULL
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1359:13: call_function: calling ‘config_root_new’ from ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1359:13: return_function: returning to ‘config_parser_read’ from ‘config_root_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1360:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1367:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1367:13: call_function: calling ‘config_path_new’ from ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1367:13: return_function: returning to ‘config_parser_read’ from ‘config_path_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1368:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1371:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1371:13: call_function: calling ‘config_node_new’ from ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1371:13: return_function: returning to ‘config_parser_read’ from ‘config_node_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1372:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1375:30: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1375:30: call_function: inlined call to ‘config_path_ref’ from ‘config_parser_read’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1375:9: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1376:9: release_memory: ‘root’ is NULL
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1376:9: call_function: inlined call to ‘c_list_link_after’ from ‘config_parser_read’
#  168|    */
#  169|   static inline void c_list_link_after(CList *where, CList *what) {
#  170|->         CList *prev = where, *next = where->next;
#  171|   
#  172|           next->prev = what;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def58]
dbus-broker-36/redhat-linux-build/../subprojects/libclist-3/src/c-list.h:173:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1012:13: enter_function: entry to ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1020:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:13: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1022:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1031:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1068:21: call_function: calling ‘config_path_new_dir’ from ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1068:21: return_function: returning to ‘config_parser_end_fn’ from ‘config_path_new_dir’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1071:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1076:31: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1077:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1090:51: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1091:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1096:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1097:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1102:29: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1103:68: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1103:68: release_memory: ‘node’ is NULL
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1108:28: branch_false: following ‘false’ branch (when ‘n > 5’)...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1110:51: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1110:28: branch_false: following ‘false’ branch (when the strings are equal)...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1113:29: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1113:29: call_function: calling ‘config_node_new’ from ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1113:29: return_function: returning to ‘config_parser_end_fn’ from ‘config_node_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1114:28: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1120:45: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1119:50: release_memory: ‘node’ is NULL
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1119:29: call_function: calling ‘config_path_new’ from ‘config_parser_end_fn’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1119:29: return_function: returning to ‘config_parser_end_fn’ from ‘config_path_new’
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1123:28: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1128:25: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1130:25: release_memory: ‘0’ is NULL
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1130:25: release_memory: ‘0’ is NULL
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1130:25: release_memory: ‘0’ is NULL
dbus-broker-36/redhat-linux-build/../src/launch/config.c:1128:25: call_function: inlined call to ‘c_list_link_after’ from ‘config_parser_end_fn’
#  171|   
#  172|           next->prev = what;
#  173|->         what->next = next;
#  174|           what->prev = prev;
#  175|           prev->next = what;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def59]
dbus-broker-36/redhat-linux-build/../subprojects/libclist-3/src/c-list.h:447:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘subscribers.next’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:350:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:353:9: call_function: calling ‘test_splitting’ from ‘main’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:353:9: return_function: return of NULL to ‘main’ from ‘test_splitting’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:354:9: call_function: calling ‘test_parse_key’ from ‘main’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:354:9: return_function: return of NULL to ‘main’ from ‘test_parse_key’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:355:9: call_function: calling ‘test_parse_value’ from ‘main’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:355:9: return_function: return of NULL to ‘main’ from ‘test_parse_value’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:356:9: call_function: calling ‘test_wildcard’ from ‘main’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:356:9: return_function: return of NULL to ‘main’ from ‘test_wildcard’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:357:9: call_function: calling ‘test_validate_keys’ from ‘main’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:357:9: return_function: return of NULL to ‘main’ from ‘test_validate_keys’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:358:9: call_function: calling ‘test_eavesdrop’ from ‘main’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:358:9: return_function: return of NULL to ‘main’ from ‘test_eavesdrop’
dbus-broker-36/redhat-linux-build/../src/bus/test-match.c:360:9: call_function: calling ‘test_individual_matches’ from ‘main’
#  445|           CList *iter, *safe;
#  446|   
#  447|->         c_list_for_each_safe_unlink(iter, safe, list)
#  448|                   /* empty */ ;
#  449|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def60]
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:400:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1013:17: enter_function: entry to ‘c_rbnode_unlink_stale’
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1016:9: branch_true: following ‘true’ branch (when ‘n’ is non-NULL)...
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1017:9: call_function: inlined call to ‘c_rbnode_is_linked’ from ‘c_rbnode_unlink_stale’
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1065:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1080:21: call_function: inlined call to ‘c_rbnode_pop_root’ from ‘c_rbnode_unlink_stale’
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1100:17: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1101:20: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1110:29: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1110:29: call_function: calling ‘c_rbnode_leftmost’ from ‘c_rbnode_unlink_stale’
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1110:29: return_function: returning to ‘c_rbnode_unlink_stale’ from ‘c_rbnode_leftmost’
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1111:29: call_function: inlined call to ‘c_rbnode_parent’ from ‘c_rbnode_unlink_stale’
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1112:25: branch_false: ...to here
 release_memory: ‘0’ is NULL
dbus-broker-36/redhat-linux-build/../subprojects/libcrbtree-3/src/c-rbtree.c:1118:25: call_function: inlined call to ‘c_rbtree_store’ from ‘c_rbnode_unlink_stale’
#  398|            * undefined behavior.
#  399|            */
#  400|->         *(volatile CRBNode **)ptr = addr;
#  401|   }
#  402|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def61]
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/c-stdaux-unix.h:61:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:99:13: enter_function: entry to ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:113:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:114:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:118:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:119:20: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:125:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:136:22: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:137:9: branch_true: following ‘true’ branch (when ‘pid_server >= 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:138:12: branch_true: following ‘true’ branch (when ‘pid_server == 0’)...
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:139:28: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:140:30: call_function: inlined call to ‘c_close’ from ‘test_peerpidfd’
#   59|    */
#   60|   static inline int c_close(int fd) {
#   61|->         if (fd >= 0)
#   62|                   close(fd);
#   63|           return -1;

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def62]
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/c-stdaux-unix.h:62:17: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘pipes[1]’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#   60|   static inline int c_close(int fd) {
#   61|           if (fd >= 0)
#   62|->                 close(fd);
#   63|           return -1;
#   64|   }

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def63]
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/c-stdaux-unix.h:62:17: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘rpipe_down’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#   60|   static inline int c_close(int fd) {
#   61|           if (fd >= 0)
#   62|->                 close(fd);
#   63|           return -1;
#   64|   }

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def64]
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/c-stdaux-unix.h:62:17: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘rpipe_up’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:211:5: enter_function: entry to ‘main’
dbus-broker-36/redhat-linux-build/../src/util/test-sockopt.c:212:9: call_function: calling ‘test_peerpidfd’ from ‘main’
#   60|   static inline int c_close(int fd) {
#   61|           if (fd >= 0)
#   62|->                 close(fd);
#   63|           return -1;
#   64|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def65]
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:205:25: warning[-Wanalyzer-fd-leak]: leak of file descriptor
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:28:13: enter_function: entry to ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:146:29: branch_true: following ‘true’ branch (when ‘i != 16’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:146:37: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:174:17: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:175:17: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:176:17: call_function: inlined call to ‘c_close’ from ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:178:21: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:179:17: branch_true: following ‘true’ branch (when ‘f’ is non-NULL)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:182:21: call_function: inlined call to ‘c_fclose’ from ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:200:29: branch_true: following ‘true’ branch (when ‘i != 2’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:204:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:205:25: danger: leaks here
#  203|   
#  204|                           r = pipe(tmp);
#  205|->                         c_assert(r >= 0);
#  206|                           tfd = tmp[0];
#  207|                           c_close(tmp[1]);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def66]
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:351:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘tmp[1]’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:28:13: enter_function: entry to ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:146:29: branch_true: following ‘true’ branch (when ‘i != 16’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:146:37: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:174:17: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:175:17: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:179:17: branch_true: following ‘true’ branch (when ‘f’ is non-NULL)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:182:21: call_function: inlined call to ‘c_fclose’ from ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:200:29: branch_true: following ‘true’ branch (when ‘i != 2’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:204:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:205:25: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:206:25: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:207:25: call_function: inlined call to ‘c_close’ from ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:209:25: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:209:25: branch_true: following ‘true’ branch (when ‘fd == tfd’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:210:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:211:25: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:201:65: call_function: inlined call to ‘c_fclosep’ from ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:200:29: branch_true: following ‘true’ branch (when ‘i != 2’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:204:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:205:25: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:206:25: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:207:25: call_function: inlined call to ‘c_close’ from ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:209:25: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:209:25: branch_true: following ‘true’ branch (when ‘fd == tfd’)...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:210:29: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:211:25: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:201:65: call_function: inlined call to ‘c_fclosep’ from ‘test_basic_generic’
dbus-broker-36/redhat-linux-build/../subprojects/libcstdaux-1/src/test-basic.c:351:1: danger: ‘tmp[1]’ leaks here
#  349|                   c_assert(c_load(uint64_t, le, aligned, data, 8) == UINT64_C(0x0807060504030201));
#  350|           }
#  351|-> }
#  352|   
#  353|   #else /* C_MODULE_GENERIC */

Error: GCC_ANALYZER_WARNING (CWE-775): [#def67]
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:515:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*broker.listener_fd’
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:424:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:425:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:425:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:426:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:426:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:433:13: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:434:9: branch_true: following ‘true’ branch (when ‘r == 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:442:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:457:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:459:13: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:459:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:505:39: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:506:17: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:508:66: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:509:17: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:511:91: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:512:17: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:514:21: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:515:17: danger: ‘*broker.listener_fd’ leaks here
#  513|   
#  514|                   r = listen(broker->listener_fd, 256);
#  515|->                 c_assert(r >= 0);
#  516|   
#  517|                   r = pthread_create(&broker->thread, NULL, util_broker_thread, broker);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def68]
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:517:21: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*broker.listener_fd’
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:424:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:425:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:425:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:426:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:426:9: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:433:13: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:434:9: branch_true: following ‘true’ branch (when ‘r == 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:442:9: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:457:9: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:459:13: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:459:12: branch_false: following ‘false’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:505:39: branch_false: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:506:17: branch_true: following ‘true’ branch...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:508:66: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:509:17: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:511:91: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:512:17: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:514:21: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:515:17: branch_true: following ‘true’ branch (when ‘r >= 0’)...
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:517:36: branch_true: ...to here
dbus-broker-36/redhat-linux-build/../test/dbus/util-broker.c:517:21: danger: ‘*broker.listener_fd’ leaks here
#  515|                   c_assert(r >= 0);
#  516|   
#  517|->                 r = pthread_create(&broker->thread, NULL, util_broker_thread, broker);
#  518|                   c_assert(r >= 0);
#  519|           }

Error: CPPCHECK_WARNING (CWE-401): [#def69]
dbus-broker-36/src/bus/reply.c:64: error[memleak]: Memory leak: reply
#   62|           r = user_charge(user, &reply->charge, actor, USER_SLOT_OBJECTS, 1);
#   63|           if (r)
#   64|->                 return (r == USER_E_QUOTA) ? REPLY_E_QUOTA : error_fold(r);
#   65|   
#   66|           c_rbtree_add(&registry->reply_tree, parent, slot, &reply->registry_node);

Error: CPPCHECK_WARNING (CWE-457): [#def70]
dbus-broker-36/src/dbus/test-queue.c:20: error[legacyUninitvar]: Uninitialized variable: iq
#   18|   
#   19|   static void test_in_setup(void) {
#   20|->         _c_cleanup_(iqueue_deinit) IQueue iq = IQUEUE_NULL(iq);
#   21|   
#   22|           iqueue_init(&iq, NULL);

Error: CPPCHECK_WARNING (CWE-457): [#def71]
dbus-broker-36/src/dbus/test-queue.c:27: error[legacyUninitvar]: Uninitialized variable: iq
#   25|   
#   26|   static void test_in_special(void) {
#   27|->         _c_cleanup_(iqueue_deinit) IQueue iq = IQUEUE_NULL(iq);
#   28|           int r;
#   29|   

Error: CPPCHECK_WARNING (CWE-457): [#def72]
dbus-broker-36/src/dbus/test-queue.c:268: error[legacyUninitvar]: Uninitialized variable: iq
#  266|                   "foobar",
#  267|           };
#  268|->         _c_cleanup_(iqueue_deinit) IQueue iq = IQUEUE_NULL(iq);
#  269|           size_t i, n, i_send, i_expect;
#  270|           int r;

Error: CPPCHECK_WARNING (CWE-401): [#def73]
dbus-broker-36/src/util/dirwatch.c:39: error[memleak]: Memory leak: dw
#   37|           dw->inotify_fd = inotify_init1(IN_CLOEXEC | IN_NONBLOCK);
#   38|           if (dw->inotify_fd < 0)
#   39|->                 return error_origin(-errno);
#   40|   
#   41|           *dwp = dw;

Error: CPPCHECK_WARNING (CWE-401): [#def74]
dbus-broker-36/src/util/fs.c:39: error[memleak]: Memory leak: list
#   37|           list->entries = calloc(n_allocated, sizeof(*list->entries));
#   38|           if (!list->entries)
#   39|->                 return error_origin(-ENOMEM);
#   40|   
#   41|           list->n_allocated = n_allocated;

Error: CPPCHECK_WARNING (CWE-404): [#def75]
dbus-broker-36/src/util/proc.c:172: error[resourceLeak]: Resource leak: f
#  170|                            */
#  171|                           if (ferror(f) && errno != EINVAL)
#  172|->                                 return errno ? error_origin(-errno) : error_origin(-ENOTRECOVERABLE);
#  173|                   }
#  174|           } else if (errno != ENOENT) {

Error: CPPCHECK_WARNING (CWE-404): [#def76]
dbus-broker-36/src/util/proc.c:181: error[resourceLeak]: Resource leak: f
#  179|           label = strndup(buffer, c - buffer);
#  180|           if (!label)
#  181|->                 return error_origin(-ENOMEM);
#  182|   
#  183|           if (n_labelp)

Error: CPPCHECK_WARNING (CWE-404): [#def77]
dbus-broker-36/src/util/proc.c:186: error[resourceLeak]: Resource leak: f
#  184|                   *n_labelp = strlen(label);
#  185|           *labelp = label;
#  186|->         return 0;
#  187|   }
#  188|   

Error: CPPCHECK_WARNING (CWE-401): [#def78]
dbus-broker-36/src/util/selinux.c:96: error[memleak]: Memory leak: selinux_name
#   94|           selinux_name->context = strdup(context);
#   95|           if (!selinux_name->context)
#   96|->                 return error_origin(-ENOMEM);
#   97|   
#   98|           c_rbtree_add(tree, parent, slot, &selinux_name->rb);

Error: CPPCHECK_WARNING (CWE-401): [#def79]
dbus-broker-36/src/util/selinux.c:99: error[memleak]: Memory leak: selinux_name
#   97|   
#   98|           c_rbtree_add(tree, parent, slot, &selinux_name->rb);
#   99|->         selinux_name = NULL;
#  100|   
#  101|           return 0;

Error: CPPCHECK_WARNING (CWE-401): [#def80]
dbus-broker-36/src/util/sockopt.c:107: error[memleak]: Memory leak: gids
#  105|                           tmp = realloc(gids, sizeof(*gids) + socklen);
#  106|                           if (!tmp)
#  107|->                                 return error_origin(-ENOMEM);
#  108|                           gids = tmp;
#  109|                           gids[0] = primary_gid;

Error: CPPCHECK_WARNING (CWE-401): [#def81]
dbus-broker-36/src/util/sockopt.c:114: error[memleak]: Memory leak: gids
#  112|                   }
#  113|                   if (r < 0 && errno != ENOPROTOOPT) {
#  114|->                         return error_origin(-errno);
#  115|                   } else if (r >= 0) {
#  116|                           n_gids = 1 + socklen / sizeof(*gids);

Error: CPPCHECK_WARNING (CWE-401): [#def82]
dbus-broker-36/subprojects/libcini-1/src/c-ini.c:375: error[memleak]: Memory leak: domain
#  373|           r = c_ini_group_new(&domain->null_group, NULL, 0);
#  374|           if (r)
#  375|->                 return r;
#  376|   
#  377|           *domainp = domain;

Error: CPPCHECK_WARNING (CWE-562): [#def83]
dbus-broker-36/subprojects/libclist-3/src/test-basic.c:276: error[danglingLifetime]: Non-local variable '.link' will use object that points to local variable 'list'.
#  274|                           CList link;
#  275|                           int b;
#  276|->                 } list = { .link = C_LIST_INIT(list.link) };
#  277|                   CList *p[2] = { &list.link, NULL };
#  278|                   unsigned int i = 0;

Scan Properties