Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
ffmpeg-7.1.1/libavcodec/get_bits.h:340:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘*s.gb.buffer’
ffmpeg-7.1.1/libavcodec/nellymoserdec.c:63:13: enter_function: entry to ‘nelly_decode_block’
ffmpeg-7.1.1/libavcodec/nellymoserdec.c:73:5: call_function: calling ‘init_get_bits’ from ‘nelly_decode_block’
ffmpeg-7.1.1/libavcodec/nellymoserdec.c:73:5: return_function: returning to ‘nelly_decode_block’ from ‘init_get_bits’
ffmpeg-7.1.1/libavcodec/nellymoserdec.c:77:31: call_function: calling ‘get_bits’ from ‘nelly_decode_block’
#  338|       OPEN_READER(re, s);
#  339|       av_assert2(n>0 && n<=25);
#  340|->     UPDATE_CACHE(re, s);
#  341|       tmp = SHOW_UBITS(re, s, n);
#  342|       LAST_SKIP_BITS(re, s, n);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
ffmpeg-7.1.1/libavcodec/get_bits.h:340:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘header.data’
ffmpeg-7.1.1/libavcodec/qdm2.c:1846:12: enter_function: entry to ‘qdm2_decode_frame’
ffmpeg-7.1.1/libavcodec/qdm2.c:1855:7: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
ffmpeg-7.1.1/libavcodec/qdm2.c:1857:19: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1857:7: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/qdm2.c:1861:30: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1862:8: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/qdm2.c:1864:5: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1866:17: branch_true: following ‘true’ branch (when ‘i != 16’)...
ffmpeg-7.1.1/libavcodec/qdm2.c:1867:20: branch_true: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1867:20: call_function: calling ‘qdm2_decode’ from ‘qdm2_decode_frame’
#  338|       OPEN_READER(re, s);
#  339|       av_assert2(n>0 && n<=25);
#  340|->     UPDATE_CACHE(re, s);
#  341|       tmp = SHOW_UBITS(re, s, n);
#  342|       LAST_SKIP_BITS(re, s, n);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
ffmpeg-7.1.1/libavcodec/get_bits.h:361:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘gb.buffer_end’
ffmpeg-7.1.1/libavcodec/g726.c:464:12: enter_function: entry to ‘g726_decode_frame’
ffmpeg-7.1.1/libavcodec/g726.c:478:8: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/g726.c:480:5: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/g726.c:482:5: call_function: calling ‘init_get_bits’ from ‘g726_decode_frame’
ffmpeg-7.1.1/libavcodec/g726.c:482:5: return_function: returning to ‘g726_decode_frame’ from ‘init_get_bits’
ffmpeg-7.1.1/libavcodec/g726.c:484:12: branch_true: following ‘true’ branch (when ‘out_samples != 0’)...
ffmpeg-7.1.1/libavcodec/g726.c:485:37: branch_true: ...to here
ffmpeg-7.1.1/libavcodec/g726.c:485:22: branch_true: following ‘true’ branch...
ffmpeg-7.1.1/libavcodec/g726.c:486:37: branch_true: ...to here
ffmpeg-7.1.1/libavcodec/g726.c:486:37: call_function: calling ‘get_bits_le’ from ‘g726_decode_frame’
#  359|       OPEN_READER(re, s);
#  360|       av_assert2(n>0 && n<=25);
#  361|->     UPDATE_CACHE_LE(re, s);
#  362|       tmp = SHOW_UBITS_LE(re, s, n);
#  363|       LAST_SKIP_BITS(re, s, n);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
ffmpeg-7.1.1/libavcodec/get_bits.h:391:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘gb.buffer’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1183:12: enter_function: entry to ‘read_access_unit’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1199:8: branch_false: following ‘false’ branch (when ‘buf_size > 3’)...
ffmpeg-7.1.1/libavcodec/mlpdec.c:1202:15: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/mlpdec.c:1204:8: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/mlpdec.c:1207:35: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/mlpdec.c:1207:5: call_function: calling ‘init_get_bits’ from ‘read_access_unit’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1207:5: return_function: returning to ‘read_access_unit’ from ‘init_get_bits’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1210:9: call_function: calling ‘show_bits_long’ from ‘read_access_unit’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1210:9: return_function: returning to ‘read_access_unit’ from ‘show_bits_long’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1218:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
ffmpeg-7.1.1/libavcodec/mlpdec.c:1284:8: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/mlpdec.c:1289:12: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/mlpdec.c:1291:22: branch_true: following ‘true’ branch...
ffmpeg-7.1.1/libavcodec/mlpdec.c:1294:33: branch_true: ...to here
ffmpeg-7.1.1/libavcodec/mlpdec.c:1294:9: call_function: calling ‘init_get_bits’ from ‘read_access_unit’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1294:9: return_function: returning to ‘read_access_unit’ from ‘init_get_bits’
ffmpeg-7.1.1/libavcodec/mlpdec.c:1301:17: call_function: calling ‘get_bits1’ from ‘read_access_unit’
#  389|   {
#  390|       unsigned int index = s->index;
#  391|->     uint8_t result     = s->buffer[index >> 3];
#  392|   #ifdef BITSTREAM_READER_LE
#  393|       result >>= index & 7;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
ffmpeg-7.1.1/libavcodec/get_bits.h:433:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘gb.buffer_end’
ffmpeg-7.1.1/libavcodec/h264_parser.c:584:12: enter_function: entry to ‘h264_parse’
ffmpeg-7.1.1/libavcodec/h264_parser.c:603:8: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/h264_parser.c:606:16: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/h264_parser.c:606:16: call_function: calling ‘h264_find_frame_end’ from ‘h264_parse’
#  431|           unsigned tmp;
#  432|           OPEN_READER(re, s);
#  433|->         UPDATE_CACHE_32(re, s);
#  434|           tmp = SHOW_UBITS(re, s, n);
#  435|           LAST_SKIP_BITS(re, s, n);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
ffmpeg-7.1.1/libavcodec/get_bits.h:658:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘gb.buffer_end’
ffmpeg-7.1.1/libavcodec/qdm2.c:1846:12: enter_function: entry to ‘qdm2_decode_frame’
ffmpeg-7.1.1/libavcodec/qdm2.c:1855:7: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
ffmpeg-7.1.1/libavcodec/qdm2.c:1857:19: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1857:7: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/qdm2.c:1861:30: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1862:8: branch_false: following ‘false’ branch...
ffmpeg-7.1.1/libavcodec/qdm2.c:1864:5: branch_false: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1866:17: branch_true: following ‘true’ branch (when ‘i != 16’)...
ffmpeg-7.1.1/libavcodec/qdm2.c:1867:20: branch_true: ...to here
ffmpeg-7.1.1/libavcodec/qdm2.c:1867:20: call_function: calling ‘qdm2_decode’ from ‘qdm2_decode_frame’
#  656|   
#  657|       OPEN_READER(re, s);
#  658|->     UPDATE_CACHE(re, s);
#  659|   
#  660|       GET_VLC(code, re, s, table, bits, max_depth);

Scan Properties

analyzer-version-clippy1.86.0
analyzer-version-cppcheck2.17.1
analyzer-version-gcc15.0.1
analyzer-version-gcc-analyzer15.0.1
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.86.0
diffbase-analyzer-version-cppcheck2.17.1
diffbase-analyzer-version-gcc15.0.1
diffbase-analyzer-version-gcc-analyzer15.0.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-243.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameffmpeg-7.1.1-3.fc42
diffbase-store-results-to/tmp/tmpb1fbqycg/ffmpeg-7.1.1-3.fc42.tar.xz
diffbase-time-created2025-04-25 12:26:05
diffbase-time-finished2025-04-25 12:48:17
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpb1fbqycg/ffmpeg-7.1.1-3.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpb1fbqycg/ffmpeg-7.1.1-3.fc42.src.rpm'
diffbase-tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-243.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameffmpeg-7.1.1-3.fc43
store-results-to/tmp/tmps8rzmxuu/ffmpeg-7.1.1-3.fc43.tar.xz
time-created2025-04-25 12:48:49
time-finished2025-04-25 13:10:45
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmps8rzmxuu/ffmpeg-7.1.1-3.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmps8rzmxuu/ffmpeg-7.1.1-3.fc43.src.rpm'
tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9