flatpak-1.16.0-3.fc43

List of Findings

Error: SHELLCHECK_WARNING (CWE-758): [#def1]
/etc/profile.d/flatpak.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> if command -v flatpak > /dev/null; then
#    2|       # set XDG_DATA_DIRS to include Flatpak installations
#    3|   

Error: SHELLCHECK_WARNING (CWE-758): [#def2]
/usr/libexec/installed-tests/Flatpak/installed-tests.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> # Copyright 2024 Collabora Ltd.
#    2|   # SPDX-License-Identifier: LGPL-2.1-or-later
#    3|   

Error: SHELLCHECK_WARNING (CWE-563): [#def3]
/usr/libexec/installed-tests/Flatpak/installed-tests.sh:4:1: warning[SC2034]: FUSERMOUNT appears unused. Verify use (or export if used externally).
#    2|   # SPDX-License-Identifier: LGPL-2.1-or-later
#    3|   
#    4|-> FUSERMOUNT='/usr/bin/fusermount3'

Error: SHELLCHECK_WARNING (CWE-758): [#def4]
/usr/libexec/installed-tests/Flatpak/libtest.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> # Source library for shell script tests
#    2|   #
#    3|   # Copyright (C) 2016 Alexander Larsson <alexl@redhat.com>

Error: SHELLCHECK_WARNING (CWE-88): [#def5]
/usr/libexec/installed-tests/Flatpak/libtest.sh:52:10: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   50|   assert_not_reached () {
#   51|       { { local BASH_XTRACEFD=3; } 2> /dev/null
#   52|->     echo $@ 1>&2; exit 1
#   53|       } 3> /dev/null
#   54|   }

Error: SHELLCHECK_WARNING (CWE-138): [#def6]
/usr/libexec/installed-tests/Flatpak/libtest.sh:58:18: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   56|   ok () {
#   57|       { { local BASH_XTRACEFD=3; } 2> /dev/null
#   58|->         echo "ok $@";
#   59|           echo "================ $(basename ${BASH_SOURCE[1]}):${BASH_LINENO[0]} - $@ ================" >&2;
#   60|       } 3> /dev/null

Error: SHELLCHECK_WARNING (CWE-138): [#def7]
/usr/libexec/installed-tests/Flatpak/libtest.sh:59:82: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   57|       { { local BASH_XTRACEFD=3; } 2> /dev/null
#   58|           echo "ok $@";
#   59|->         echo "================ $(basename ${BASH_SOURCE[1]}):${BASH_LINENO[0]} - $@ ================" >&2;
#   60|       } 3> /dev/null
#   61|   }

Error: SHELLCHECK_WARNING (CWE-571): [#def8]
/usr/libexec/installed-tests/Flatpak/libtest.sh:128:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  126|   export USERDIR=${TEST_DATA_DIR}/home/share/flatpak
#  127|   export SYSTEMDIR=${TEST_DATA_DIR}/system
#  128|-> export ARCH=`flatpak --default-arch`
#  129|   
#  130|   if [ x${SUMMARY_FORMAT-} == xold ] ; then

Error: SHELLCHECK_WARNING (CWE-569): [#def9]
/usr/libexec/installed-tests/Flatpak/libtest.sh:278:77: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  276|   assert_remote_has_no_config () {
#  277|       { { local BASH_XTRACEFD=3; } 2> /dev/null
#  278|->     if ostree config --repo=$FL_DIR/repo get --group 'remote "'"$1"'"' "$2" > /dev/null &> /dev/null; then
#  279|           echo 1>&2 "Remote '$1' unexpectedly has key '$2' at $(basename ${BASH_SOURCE[1]}):${BASH_LINENO[0]}"
#  280|           exit 1

Error: SHELLCHECK_WARNING (CWE-569): [#def10]
/usr/libexec/installed-tests/Flatpak/libtest.sh:278:90: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  276|   assert_remote_has_no_config () {
#  277|       { { local BASH_XTRACEFD=3; } 2> /dev/null
#  278|->     if ostree config --repo=$FL_DIR/repo get --group 'remote "'"$1"'"' "$2" > /dev/null &> /dev/null; then
#  279|           echo 1>&2 "Remote '$1' unexpectedly has key '$2' at $(basename ${BASH_SOURCE[1]}):${BASH_LINENO[0]}"
#  280|           exit 1

Error: SHELLCHECK_WARNING (CWE-156): [#def11]
/usr/libexec/installed-tests/Flatpak/libtest.sh:290:4: warning[SC2046]: Quote this to prevent word splitting.
#  288|   mkdir -p ${FL_GPG_HOMEDIR2}
#  289|   # This need to be writable, so copy the keys
#  290|-> cp $(dirname $0)/test-keyring/*.gpg ${FL_GPG_HOMEDIR}/
#  291|   cp $(dirname $0)/test-keyring2/*.gpg ${FL_GPG_HOMEDIR2}/
#  292|   

Error: SHELLCHECK_WARNING (CWE-156): [#def12]
/usr/libexec/installed-tests/Flatpak/libtest.sh:291:4: warning[SC2046]: Quote this to prevent word splitting.
#  289|   # This need to be writable, so copy the keys
#  290|   cp $(dirname $0)/test-keyring/*.gpg ${FL_GPG_HOMEDIR}/
#  291|-> cp $(dirname $0)/test-keyring2/*.gpg ${FL_GPG_HOMEDIR2}/
#  292|   
#  293|   export FL_GPG_ID=7B0961FD

Error: SHELLCHECK_WARNING (CWE-156): [#def13]
/usr/libexec/installed-tests/Flatpak/libtest.sh:316:17: warning[SC2046]: Quote this to prevent word splitting.
#  314|               flock -s 200
#  315|               if [ ! -d ${RUNTIME_REPO} ]; then
#  316|->                 $(dirname $0)/make-test-runtime.sh ${RUNTIME_REPO} org.test.Platform ${BRANCH} "" "" > /dev/null
#  317|               fi
#  318|           ) 200>${TEST_DATA_DIR}/runtime-repo-lock

Error: SHELLCHECK_WARNING (CWE-685): [#def14]
/usr/libexec/installed-tests/Flatpak/libtest.sh:334:1: warning[SC2120]: httpd references arguments, but none are ever passed.
#  332|   }
#  333|   
#  334|-> httpd () {
#  335|       COMMAND=${1:-web-server.py}
#  336|       DIR=${2:-repos}

Error: SHELLCHECK_WARNING (CWE-156): [#def15]
/usr/libexec/installed-tests/Flatpak/libtest.sh:340:24: warning[SC2046]: Quote this to prevent word splitting.
#  338|       rm -f httpd-pipe
#  339|       mkfifo httpd-pipe
#  340|->     PYTHONUNBUFFERED=1 $(dirname $0)/$COMMAND "$DIR" 3> httpd-pipe 2>&1 | tee -a httpd-log >&2 &
#  341|       read < httpd-pipe
#  342|   }

Error: SHELLCHECK_WARNING (CWE-156): [#def16]
/usr/libexec/installed-tests/Flatpak/libtest.sh:358:41: warning[SC2046]: Quote this to prevent word splitting.
#  356|   
#  357|       make_runtime "${REPONAME}" "${COLLECTION_ID}" "${BRANCH}" "${GPGARGS:-${FL_GPGARGS}}"
#  358|->     GPGARGS="${GPGARGS:-${FL_GPGARGS}}" $(dirname $0)/make-test-app.sh repos/${REPONAME} "" "${BRANCH}" "${COLLECTION_ID}" > /dev/null
#  359|       update_repo $REPONAME "${COLLECTION_ID}"
#  360|       if [ $REPONAME == "test" ]; then

Error: SHELLCHECK_WARNING (CWE-156): [#def17]
/usr/libexec/installed-tests/Flatpak/libtest.sh:448:72: warning[SC2046]: Quote this to prevent word splitting.
#  446|       RUNTIME_BRANCH=${6:-$BRANCH}
#  447|   
#  448|->     RUNTIME_BRANCH=$RUNTIME_BRANCH GPGARGS="${GPGARGS:-${FL_GPGARGS}}" $(dirname $0)/make-test-app.sh repos/${REPONAME} "${APP_ID}" "${BRANCH}" "${COLLECTION_ID}" "${TEXT}" > /dev/null
#  449|       update_repo $REPONAME "${COLLECTION_ID}"
#  450|   }

Error: SHELLCHECK_WARNING (CWE-156): [#def18]
/usr/libexec/installed-tests/Flatpak/libtest.sh:462:41: warning[SC2046]: Quote this to prevent word splitting.
#  460|       TEXT=${4:-UPDATED}
#  461|   
#  462|->     GPGARGS="${GPGARGS:-${FL_GPGARGS}}" $(dirname $0)/make-test-runtime.sh repos/${REPONAME} org.test.Platform "${BRANCH}" "${COLLECTION_ID}" "${TEXT}" > /dev/null
#  463|       update_repo $REPONAME "${COLLECTION_ID}"
#  464|   }

Error: SHELLCHECK_WARNING (CWE-156): [#def19]
/usr/libexec/installed-tests/Flatpak/libtest.sh:475:43: warning[SC2046]: Quote this to prevent word splitting.
#  473|       BRANCH=${3:-master}
#  474|   
#  475|->     GPGARGS="${GPGARGS:-${FL_GPGARGS}}" . $(dirname $0)/make-test-runtime.sh repos/${REPONAME} org.test.Sdk "${BRANCH}" "${COLLECTION_ID}" "" make mkdir cp touch > /dev/null
#  476|       update_repo $REPONAME "${COLLECTION_ID}"
#  477|   }

Error: SHELLCHECK_WARNING (CWE-156): [#def20]
/usr/libexec/installed-tests/Flatpak/libtest.sh:500:114: warning[SC2046]: Quote this to prevent word splitting.
#  498|       BUSSOCK=$(mktemp ${test_tmpdir}/bus.XXXXXX)
#  499|       rm -rf ${BUSSOCK}
#  500|->     run --command=socat --filesystem=${test_tmpdir} org.test.Hello unix-listen:${BUSSOCK} unix-connect:/run/user/`id -u`/bus &
#  501|       while [ ! -e ${BUSSOCK} ]; do sleep 1; done
#  502|       DBUS_SESSION_BUS_ADDRESS="unix:path=${BUSSOCK}" "$@"

Error: SHELLCHECK_WARNING (CWE-571): [#def21]
/usr/libexec/installed-tests/Flatpak/libtest.sh:595:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  593|   dbus-daemon --fork --config-file=session.conf --print-address=3 --print-pid=4 \
#  594|       3> dbus-session-bus-address 4> dbus-session-bus-pid
#  595|-> export DBUS_SESSION_BUS_ADDRESS="$(cat dbus-session-bus-address)"
#  596|   DBUS_SESSION_BUS_PID="$(cat dbus-session-bus-pid)"
#  597|   

Error: SHELLCHECK_WARNING (CWE-156): [#def22]
/usr/libexec/installed-tests/Flatpak/libtest.sh:616:10: warning[SC2046]: Quote this to prevent word splitting.
#  614|       gpg-connect-agent --homedir "${FL_GPG_HOMEDIR}" killagent /bye >&2 || true
#  615|       "${FUSERMOUNT}" -u $XDG_RUNTIME_DIR/doc >&2 || :
#  616|->     kill $(jobs -p) &> /dev/null || true
#  617|       if test -n "${TEST_SKIP_CLEANUP:-}"; then
#  618|           echo "# Skipping cleanup of ${TEST_DATA_DIR}"

Error: SHELLCHECK_WARNING (CWE-156): [#def23]
/usr/libexec/installed-tests/Flatpak/make-multi-collection-id-repo.sh:28:3: warning[SC2046]: Quote this to prevent word splitting.
#   26|   set -e
#   27|   
#   28|-> . $(dirname $0)/libtest.sh
#   29|   
#   30|   REPO_DIR=$1

Error: SHELLCHECK_WARNING (CWE-563): [#def24]
/usr/libexec/installed-tests/Flatpak/make-multi-collection-id-repo.sh:31:1: warning[SC2034]: REPO_NAME appears unused. Verify use (or export if used externally).
#   29|   
#   30|   REPO_DIR=$1
#   31|-> REPO_NAME=$(basename $REPO_DIR)
#   32|   
#   33|   COLLECTION_ID_PREFIX=org.test.Collection

Error: SHELLCHECK_WARNING (CWE-156): [#def25]
/usr/libexec/installed-tests/Flatpak/make-multi-collection-id-repo.sh:43:5: warning[SC2046]: Quote this to prevent word splitting.
#   41|       COLLECTION_ID=${COLLECTION_ID_PREFIX}${i}
#   42|   
#   43|->     $(dirname $0)/make-test-app.sh repos/${APP_REPO} ${APP_ID} master ${COLLECTION_ID}
#   44|       ref=$(ostree --repo=${APP_REPO_DIR} refs | grep ${APP_ID})
#   45|   

Error: SHELLCHECK_WARNING (CWE-156): [#def26]
/usr/libexec/installed-tests/Flatpak/make-test-app.sh:132:4: warning[SC2046]: Quote this to prevent word splitting.
#  130|   
#  131|   mkdir -p ${DIR}/files/share/icons/hicolor/64x64/apps
#  132|-> cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/icons/hicolor/64x64/apps/${APP_ID}.png
#  133|   cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/icons/hicolor/64x64/apps/dont-export.png
#  134|   mkdir -p ${DIR}/files/share/icons/HighContrast/64x64/apps

Error: SHELLCHECK_WARNING (CWE-156): [#def27]
/usr/libexec/installed-tests/Flatpak/make-test-app.sh:133:4: warning[SC2046]: Quote this to prevent word splitting.
#  131|   mkdir -p ${DIR}/files/share/icons/hicolor/64x64/apps
#  132|   cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/icons/hicolor/64x64/apps/${APP_ID}.png
#  133|-> cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/icons/hicolor/64x64/apps/dont-export.png
#  134|   mkdir -p ${DIR}/files/share/icons/HighContrast/64x64/apps
#  135|   cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/icons/HighContrast/64x64/apps/${APP_ID}.png

Error: SHELLCHECK_WARNING (CWE-156): [#def28]
/usr/libexec/installed-tests/Flatpak/make-test-app.sh:135:4: warning[SC2046]: Quote this to prevent word splitting.
#  133|   cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/icons/hicolor/64x64/apps/dont-export.png
#  134|   mkdir -p ${DIR}/files/share/icons/HighContrast/64x64/apps
#  135|-> cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/icons/HighContrast/64x64/apps/${APP_ID}.png
#  136|   
#  137|   

Error: SHELLCHECK_WARNING (CWE-156): [#def29]
/usr/libexec/installed-tests/Flatpak/make-test-app.sh:181:4: warning[SC2046]: Quote this to prevent word splitting.
#  179|   gzip -c ${DIR}/files/share/metainfo/${APP_ID}.metainfo.xml > ${DIR}/files/share/app-info/xmls/${APP_ID}.xml.gz
#  180|   gzip -c ${DIR}/files/share/appdata/${APP_ID}.cmd.appdata.xml > ${DIR}/files/share/app-info/xmls/${APP_ID}.cmd.xml.gz
#  181|-> cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/app-info/icons/flatpak/64x64/${APP_ID}.png
#  182|   
#  183|   if [ x$COLLECTION_ID != x ]; then

Error: SHELLCHECK_WARNING (CWE-571): [#def30]
/usr/libexec/installed-tests/Flatpak/make-test-runtime.sh:66:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   64|       (ldd "${f}" | sed "s/.* => //"  | awk '{ print $1}' | grep ^/ | sort -u -o $LIBS $LIBS -)  || true
#   65|   
#   66|->     local shebang=$(sed -n '1s/^#!\([^ ]*\).*/\1/p' "${f}")
#   67|       if [ x$shebang != x ]; then
#   68|           add_bin "$shebang"

Error: SHELLCHECK_WARNING (CWE-88): [#def31]
/usr/libexec/installed-tests/Flatpak/make-test-runtime.sh:72:10: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   70|   }
#   71|   
#   72|-> for i in $@ bash ls cat echo readlink socat; do
#   73|       I=$(type -P "$i")
#   74|       add_bin "$I"

Error: SHELLCHECK_WARNING (CWE-156): [#def32]
/usr/libexec/installed-tests/Flatpak/test-auth.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   

Error: SHELLCHECK_WARNING (CWE-156): [#def33]
/usr/libexec/installed-tests/Flatpak/test-auth.sh:30:18: warning[SC2046]: Quote this to prevent word splitting.
#   28|   
#   29|   commit_to_obj () {
#   30|->     echo objects/$(echo $1 | cut -b 1-2)/$(echo $1 | cut -b 3-).commit
#   31|   }
#   32|   

Error: SHELLCHECK_WARNING (CWE-156): [#def34]
/usr/libexec/installed-tests/Flatpak/test-auth.sh:30:42: warning[SC2046]: Quote this to prevent word splitting.
#   28|   
#   29|   commit_to_obj () {
#   30|->     echo objects/$(echo $1 | cut -b 1-2)/$(echo $1 | cut -b 3-).commit
#   31|   }
#   32|   

Error: SHELLCHECK_WARNING (CWE-156): [#def35]
/usr/libexec/installed-tests/Flatpak/test-auth.sh:39:34: warning[SC2046]: Quote this to prevent word splitting.
#   37|   
#   38|       COMMIT=$(cat repos/$REPO/refs/heads/$REF)
#   39|->     echo -n $TOKEN > repos/$REPO/$(commit_to_obj $COMMIT).need_token
#   40|   }
#   41|   

Error: SHELLCHECK_WARNING (CWE-685): [#def36]
/usr/libexec/installed-tests/Flatpak/test-auth.sh:42:1: warning[SC2120]: assert_failed_with_401 references arguments, but none are ever passed.
#   40|   }
#   41|   
#   42|-> assert_failed_with_401 () {
#   43|       LOGFILE=${1:-install-error-log}
#   44|       assert_file_has_content $LOGFILE "401"

Error: SHELLCHECK_WARNING (CWE-457): [#def37]
/usr/libexec/installed-tests/Flatpak/test-auth.sh:89:76: warning[SC2154]: port is referenced but not assigned.
#   87|   ${FLATPAK} ${U} install -y test-repo org.test.Hello master >&2
#   88|   assert_file_has_content ${XDG_RUNTIME_DIR}/request "^remote: test-repo$"
#   89|-> assert_file_has_content ${XDG_RUNTIME_DIR}/request "^uri: http://127.0.0.1:${port}/test$"
#   90|   if [ x${USE_COLLECTIONS_IN_CLIENT-} == xyes ] ; then
#   91|       assert_file_has_content ${XDG_RUNTIME_DIR}/request "^options: .*'collection-id': <'org.test.Collection.test'>"

Error: SHELLCHECK_WARNING (CWE-156): [#def38]
/usr/libexec/installed-tests/Flatpak/test-basic.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   # This test looks for specific localized strings.

Error: SHELLCHECK_WARNING (CWE-457): [#def39]
/usr/libexec/installed-tests/Flatpak/test-basic.sh:31:15: warning[SC2154]: test_builddir is referenced but not assigned.
#   29|   ${FLATPAK} --version > version_out
#   30|   
#   31|-> VERSION=`cat "$test_builddir/package_version.txt"`
#   32|   assert_file_has_content version_out "^Flatpak $VERSION$"
#   33|   

Error: SHELLCHECK_WARNING (CWE-156): [#def40]
/usr/libexec/installed-tests/Flatpak/test-basic.sh:46:14: warning[SC2046]: Quote this to prevent word splitting.
#   44|   ${FLATPAK} --supported-arches > arches
#   45|   
#   46|-> assert_streq `head -1 arches` `cat arch`
#   47|   
#   48|   ok "default arch"

Error: SHELLCHECK_WARNING (CWE-156): [#def41]
/usr/libexec/installed-tests/Flatpak/test-basic.sh:46:31: warning[SC2046]: Quote this to prevent word splitting.
#   44|   ${FLATPAK} --supported-arches > arches
#   45|   
#   46|-> assert_streq `head -1 arches` `cat arch`
#   47|   
#   48|   ok "default arch"

Error: SHELLCHECK_WARNING (CWE-156): [#def42]
/usr/libexec/installed-tests/Flatpak/test-build-update-repo.sh:25:3: warning[SC2046]: Quote this to prevent word splitting.
#   23|   set -euo pipefail
#   24|   
#   25|-> . $(dirname $0)/libtest.sh
#   26|   
#   27|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def43]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def44]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:33:54: warning[SC2046]: Quote this to prevent word splitting.
#   31|   setup_repo
#   32|   
#   33|-> ${FLATPAK} build-bundle repos/test --repo-url=file://`pwd`/repos/test --gpg-keys=${FL_GPG_HOMEDIR}/pubring.gpg bundles/hello.flatpak org.test.Hello >&2
#   34|   assert_has_file bundles/hello.flatpak
#   35|   

Error: SHELLCHECK_WARNING (CWE-156): [#def45]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:36:64: warning[SC2046]: Quote this to prevent word splitting.
#   34|   assert_has_file bundles/hello.flatpak
#   35|   
#   36|-> ${FLATPAK} build-bundle repos/test --runtime --repo-url=file://`pwd`/repos/test --gpg-keys=${FL_GPG_HOMEDIR}/pubring.gpg bundles/platform.flatpak org.test.Platform >&2
#   37|   assert_has_file bundles/platform.flatpak
#   38|   

Error: SHELLCHECK_WARNING (CWE-156): [#def46]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:43:56: warning[SC2046]: Quote this to prevent word splitting.
#   41|   rm bundles/hello.flatpak
#   42|   ${FLATPAK} ${U} install -y test-repo org.test.Hello >&2
#   43|-> ${FLATPAK} build-bundle $FL_DIR/repo --repo-url=file://`pwd`/repos/test --gpg-keys=${FL_GPG_HOMEDIR}/pubring.gpg bundles/hello.flatpak org.test.Hello >&2
#   44|   assert_has_file bundles/hello.flatpak
#   45|   

Error: SHELLCHECK_WARNING (CWE-156): [#def47]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:56:38: warning[SC2046]: Quote this to prevent word splitting.
#   54|   assert_has_file $FL_DIR/repo/refs/remotes/hello-origin/app/org.test.Hello/$ARCH/master
#   55|   APP_COMMIT=`cat $FL_DIR/repo/refs/remotes/hello-origin/app/org.test.Hello/$ARCH/master`
#   56|-> assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commit
#   57|   assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commitmeta
#   58|   

Error: SHELLCHECK_WARNING (CWE-156): [#def48]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:56:71: warning[SC2046]: Quote this to prevent word splitting.
#   54|   assert_has_file $FL_DIR/repo/refs/remotes/hello-origin/app/org.test.Hello/$ARCH/master
#   55|   APP_COMMIT=`cat $FL_DIR/repo/refs/remotes/hello-origin/app/org.test.Hello/$ARCH/master`
#   56|-> assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commit
#   57|   assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commitmeta
#   58|   

Error: SHELLCHECK_WARNING (CWE-156): [#def49]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:57:38: warning[SC2046]: Quote this to prevent word splitting.
#   55|   APP_COMMIT=`cat $FL_DIR/repo/refs/remotes/hello-origin/app/org.test.Hello/$ARCH/master`
#   56|   assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commit
#   57|-> assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commitmeta
#   58|   
#   59|   assert_has_dir $FL_DIR/app/org.test.Hello

Error: SHELLCHECK_WARNING (CWE-156): [#def50]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:57:71: warning[SC2046]: Quote this to prevent word splitting.
#   55|   APP_COMMIT=`cat $FL_DIR/repo/refs/remotes/hello-origin/app/org.test.Hello/$ARCH/master`
#   56|   assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commit
#   57|-> assert_has_file $FL_DIR/repo/objects/$(echo $APP_COMMIT | cut -b 1-2)/$(echo $APP_COMMIT | cut -b 3-).commitmeta
#   58|   
#   59|   assert_has_dir $FL_DIR/app/org.test.Hello

Error: SHELLCHECK_WARNING (CWE-156): [#def51]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:104:38: warning[SC2046]: Quote this to prevent word splitting.
#  102|   assert_has_file $FL_DIR/repo/refs/remotes/platform-origin/runtime/org.test.Platform/$ARCH/master
#  103|   RUNTIME_COMMIT=`cat $FL_DIR/repo/refs/remotes/platform-origin/runtime/org.test.Platform/$ARCH/master`
#  104|-> assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commit
#  105|   assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commitmeta
#  106|   

Error: SHELLCHECK_WARNING (CWE-156): [#def52]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:104:75: warning[SC2046]: Quote this to prevent word splitting.
#  102|   assert_has_file $FL_DIR/repo/refs/remotes/platform-origin/runtime/org.test.Platform/$ARCH/master
#  103|   RUNTIME_COMMIT=`cat $FL_DIR/repo/refs/remotes/platform-origin/runtime/org.test.Platform/$ARCH/master`
#  104|-> assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commit
#  105|   assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commitmeta
#  106|   

Error: SHELLCHECK_WARNING (CWE-156): [#def53]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:105:38: warning[SC2046]: Quote this to prevent word splitting.
#  103|   RUNTIME_COMMIT=`cat $FL_DIR/repo/refs/remotes/platform-origin/runtime/org.test.Platform/$ARCH/master`
#  104|   assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commit
#  105|-> assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commitmeta
#  106|   
#  107|   assert_has_dir $FL_DIR/runtime/org.test.Platform

Error: SHELLCHECK_WARNING (CWE-156): [#def54]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:105:75: warning[SC2046]: Quote this to prevent word splitting.
#  103|   RUNTIME_COMMIT=`cat $FL_DIR/repo/refs/remotes/platform-origin/runtime/org.test.Platform/$ARCH/master`
#  104|   assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commit
#  105|-> assert_has_file $FL_DIR/repo/objects/$(echo $RUNTIME_COMMIT | cut -b 1-2)/$(echo $RUNTIME_COMMIT | cut -b 3-).commitmeta
#  106|   
#  107|   assert_has_dir $FL_DIR/runtime/org.test.Platform

Error: SHELLCHECK_WARNING (CWE-156): [#def55]
/usr/libexec/installed-tests/Flatpak/test-bundle.sh:161:54: warning[SC2046]: Quote this to prevent word splitting.
#  159|   make_updated_app test org.test.Collection.test master UPDATED2
#  160|   
#  161|-> ${FLATPAK} build-bundle repos/test --repo-url=file://`pwd`/repos/test --gpg-keys=${FL_GPG_HOMEDIR}/pubring.gpg bundles/hello2.flatpak org.test.Hello >&2
#  162|   assert_has_file bundles/hello2.flatpak
#  163|   

Error: SHELLCHECK_WARNING (CWE-156): [#def56]
/usr/libexec/installed-tests/Flatpak/test-completion.sh:23:3: warning[SC2046]: Quote this to prevent word splitting.
#   21|   
#   22|   #FLATPAK=flatpak
#   23|-> . $(dirname $0)/libtest.sh
#   24|   
#   25|   skip_revokefs_without_fuse

Error: SHELLCHECK_WARNING (CWE-156): [#def57]
/usr/libexec/installed-tests/Flatpak/test-config.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   # This test looks for specific localized strings.

Error: SHELLCHECK_WARNING (CWE-563): [#def58]
/usr/libexec/installed-tests/Flatpak/test-default-remotes.sh:22:1: warning[SC2034]: USE_SYSTEMDIR appears unused. Verify use (or export if used externally).
#   20|   set -euo pipefail
#   21|   
#   22|-> USE_SYSTEMDIR=yes
#   23|   
#   24|   . $(dirname $0)/libtest.sh

Error: SHELLCHECK_WARNING (CWE-156): [#def59]
/usr/libexec/installed-tests/Flatpak/test-default-remotes.sh:24:3: warning[SC2046]: Quote this to prevent word splitting.
#   22|   USE_SYSTEMDIR=yes
#   23|   
#   24|-> . $(dirname $0)/libtest.sh
#   25|   
#   26|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-457): [#def60]
/usr/libexec/installed-tests/Flatpak/test-default-remotes.sh:118:14: warning[SC2154]: test_builddir is referenced but not assigned.
#  116|   
#  117|   cp added-default.flatpakrepo $FLATPAK_CONFIG_DIR/remotes.d/
#  118|-> echo "Filter=${test_builddir}/test.filter" >> $FLATPAK_CONFIG_DIR/remotes.d/added-default.flatpakrepo
#  119|   
#  120|   ${FLATPAK} --system remotes > remotes

Error: SHELLCHECK_WARNING (CWE-156): [#def61]
/usr/libexec/installed-tests/Flatpak/test-extensions.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-571): [#def62]
/usr/libexec/installed-tests/Flatpak/test-extensions.sh:32:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   30|       local VERSION=$2
#   31|   
#   32|->     local DIR=`mktemp -d`
#   33|   
#   34|       cat > ${DIR}/metadata <<EOF

Error: SHELLCHECK_WARNING (CWE-156): [#def63]
/usr/libexec/installed-tests/Flatpak/test-extensions.sh:99:1: warning[SC2046]: Quote this to prevent word splitting.
#   97|   mkdir -p repos
#   98|   ostree init --repo=repos/test --mode=archive-z2
#   99|-> $(dirname $0)/make-test-runtime.sh repos/test org.test.Platform master "" "" bash ls cat echo readlink > /dev/null
#  100|   $(dirname $0)/make-test-app.sh repos/test "" master "" > /dev/null
#  101|   

Error: SHELLCHECK_WARNING (CWE-156): [#def64]
/usr/libexec/installed-tests/Flatpak/test-extensions.sh:100:1: warning[SC2046]: Quote this to prevent word splitting.
#   98|   ostree init --repo=repos/test --mode=archive-z2
#   99|   $(dirname $0)/make-test-runtime.sh repos/test org.test.Platform master "" "" bash ls cat echo readlink > /dev/null
#  100|-> $(dirname $0)/make-test-app.sh repos/test "" master "" > /dev/null
#  101|   
#  102|   # Modify platform metadata

Error: SHELLCHECK_WARNING (CWE-563): [#def65]
/usr/libexec/installed-tests/Flatpak/test-history.sh:7:1: warning[SC2034]: USE_SYSTEMDIR appears unused. Verify use (or export if used externally).
#    5|   set -euo pipefail
#    6|   
#    7|-> USE_SYSTEMDIR=yes
#    8|   
#    9|   . $(dirname $0)/libtest.sh

Error: SHELLCHECK_WARNING (CWE-156): [#def66]
/usr/libexec/installed-tests/Flatpak/test-history.sh:9:3: warning[SC2046]: Quote this to prevent word splitting.
#    7|   USE_SYSTEMDIR=yes
#    8|   
#    9|-> . $(dirname $0)/libtest.sh
#   10|   
#   11|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def67]
/usr/libexec/installed-tests/Flatpak/test-http-utils.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   httpd http-utils-test-server.py .

Error: SHELLCHECK_WARNING (CWE-457): [#def68]
/usr/libexec/installed-tests/Flatpak/test-http-utils.sh:37:10: warning[SC2154]: test_builddir is referenced but not assigned.
#   35|       local=$3
#   36|   
#   37|->     out=`${test_builddir}/httpcache $compressed "http://localhost:$port$remote" $local || :`
#   38|   
#   39|       case "$out" in

Error: SHELLCHECK_WARNING (CWE-88): [#def69]
/usr/libexec/installed-tests/Flatpak/test-http-utils.sh:51:42: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   49|   
#   50|   assert_cached() {
#   51|->     assert_result "Reusing cached value" $@
#   52|   }
#   53|   

Error: SHELLCHECK_WARNING (CWE-88): [#def70]
/usr/libexec/installed-tests/Flatpak/test-http-utils.sh:55:48: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   53|   
#   54|   assert_304() {
#   55|->     assert_result "Server returned status 304" $@
#   56|   }
#   57|   

Error: SHELLCHECK_WARNING (CWE-88): [#def71]
/usr/libexec/installed-tests/Flatpak/test-http-utils.sh:59:48: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   57|   
#   58|   assert_ok() {
#   59|->     assert_result "Server returned status 200" $@
#   60|   }
#   61|   

Error: SHELLCHECK_WARNING (CWE-457): [#def72]
/usr/libexec/installed-tests/Flatpak/test-http-utils.sh:71:15: warning[SC2154]: test_tmpdir is referenced but not assigned.
#   69|   
#   70|   # Without anything else, cached for 30 minutes
#   71|-> assert_ok "/" $test_tmpdir/output
#   72|   assert_cached "/" $test_tmpdir/output
#   73|   rm -f $test_tmpdir/output*

Error: SHELLCHECK_WARNING (CWE-156): [#def73]
/usr/libexec/installed-tests/Flatpak/test-info.sh:5:3: warning[SC2046]: Quote this to prevent word splitting.
#    3|   set -euo pipefail
#    4|   
#    5|-> . $(dirname $0)/libtest.sh
#    6|   
#    7|   skip_revokefs_without_fuse

Error: SHELLCHECK_WARNING (CWE-156): [#def74]
/usr/libexec/installed-tests/Flatpak/test-metadata-validation.sh:9:3: warning[SC2046]: Quote this to prevent word splitting.
#    7|   set -euo pipefail
#    8|   
#    9|-> . $(dirname $0)/libtest.sh
#   10|   
#   11|   echo "1..7"

Error: SHELLCHECK_WARNING (CWE-571): [#def75]
/usr/libexec/installed-tests/Flatpak/test-metadata-validation.sh:19:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   17|   create_app () {
#   18|       local OPTIONS="$1"
#   19|->     local DIR=`mktemp -d`
#   20|   
#   21|       mkdir ${DIR}/files

Error: SHELLCHECK_WARNING (CWE-571): [#def76]
/usr/libexec/installed-tests/Flatpak/test-metadata-validation.sh:44:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   42|           echo -e "\nfilesystems=home;" >> ${DIR}/metadata
#   43|       fi
#   44|->     local XA_METADATA=--add-metadata-string=xa.metadata="$(head -n6 ${DIR}/metadata)"$'\n'
#   45|       if [[ $OPTIONS =~ "no-xametadata" ]]; then
#   46|           XA_METADATA="--add-metadata-string=xa.nometadata=1"

Error: SHELLCHECK_WARNING (CWE-156): [#def77]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-457): [#def78]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:32:17: warning[SC2154]: test_srcdir is referenced but not assigned.
#   30|   httpd oci-registry-server.py .
#   31|   port=$(cat httpd-port)
#   32|-> client="python3 $test_srcdir/oci-registry-client.py 127.0.0.1:$port"
#   33|   
#   34|   setup_repo_no_add oci

Error: SHELLCHECK_WARNING (CWE-156): [#def79]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:39:29: warning[SC2046]: Quote this to prevent word splitting.
#   37|   
#   38|   ${FLATPAK} build-bundle --runtime --oci $FL_GPGARGS repos/oci oci/platform-image org.test.Platform >&2
#   39|-> $client add platform latest $(pwd)/oci/platform-image
#   40|   
#   41|   ${FLATPAK} build-bundle --oci $FL_GPGARGS repos/oci oci/app-image org.test.Hello >&2

Error: SHELLCHECK_WARNING (CWE-156): [#def80]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:42:26: warning[SC2046]: Quote this to prevent word splitting.
#   40|   
#   41|   ${FLATPAK} build-bundle --oci $FL_GPGARGS repos/oci oci/app-image org.test.Hello >&2
#   42|-> $client add hello latest $(pwd)/oci/app-image
#   43|   
#   44|   # Add an OCI remote

Error: SHELLCHECK_WARNING (CWE-140): [#def81]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:82:23: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   80|   # Replace with the app image with detached icons, check that the icons work
#   81|   
#   82|-> old_icon_hash=(md5sum $icondir/64x64/org.test.Hello.png)
#   83|   rm $icondir/64x64/org.test.Hello.png
#   84|   $client delete hello latest

Error: SHELLCHECK_WARNING (CWE-156): [#def82]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:85:42: warning[SC2046]: Quote this to prevent word splitting.
#   83|   rm $icondir/64x64/org.test.Hello.png
#   84|   $client delete hello latest
#   85|-> $client  add --detach-icons hello latest $(pwd)/oci/app-image
#   86|   ${FLATPAK} update ${U} --appstream oci-registry >&2
#   87|   assert_has_file $icondir/64x64/org.test.Hello.png

Error: SHELLCHECK_WARNING (CWE-140): [#def83]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:88:23: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#   86|   ${FLATPAK} update ${U} --appstream oci-registry >&2
#   87|   assert_has_file $icondir/64x64/org.test.Hello.png
#   88|-> new_icon_hash=(md5sum $icondir/64x64/org.test.Hello.png)
#   89|   assert_streq $old_icon_hash $new_icon_hash
#   90|   

Error: SHELLCHECK_WARNING (CWE-670): [#def84]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:89:14: warning[SC2128]: Expanding an array without an index only gives the first element.
#   87|   assert_has_file $icondir/64x64/org.test.Hello.png
#   88|   new_icon_hash=(md5sum $icondir/64x64/org.test.Hello.png)
#   89|-> assert_streq $old_icon_hash $new_icon_hash
#   90|   
#   91|   ok "detached icons"

Error: SHELLCHECK_WARNING (CWE-670): [#def85]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:89:29: warning[SC2128]: Expanding an array without an index only gives the first element.
#   87|   assert_has_file $icondir/64x64/org.test.Hello.png
#   88|   new_icon_hash=(md5sum $icondir/64x64/org.test.Hello.png)
#   89|-> assert_streq $old_icon_hash $new_icon_hash
#   90|   
#   91|   ok "detached icons"

Error: SHELLCHECK_WARNING (CWE-156): [#def86]
/usr/libexec/installed-tests/Flatpak/test-oci-registry.sh:106:26: warning[SC2046]: Quote this to prevent word splitting.
#  104|   ${FLATPAK} build-bundle --oci $FL_GPGARGS repos/oci oci/app-image org.test.Hello >&2
#  105|   
#  106|-> $client add hello latest $(pwd)/oci/app-image
#  107|   
#  108|   OLD_COMMIT=`${FLATPAK} ${U} info --show-commit org.test.Hello`

Error: SHELLCHECK_WARNING (CWE-156): [#def87]
/usr/libexec/installed-tests/Flatpak/test-oci.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def88]
/usr/libexec/installed-tests/Flatpak/test-oci.sh:38:11: warning[SC2046]: Quote this to prevent word splitting.
#   36|   
#   37|   for i in oci/image/blobs/sha256/*; do
#   38|->      echo $(basename $i) $i >> sums
#   39|   done
#   40|   sha256sum -c sums >&2

Error: SHELLCHECK_WARNING (CWE-156): [#def89]
/usr/libexec/installed-tests/Flatpak/test-override.sh:5:3: warning[SC2046]: Quote this to prevent word splitting.
#    3|   set -euo pipefail
#    4|   
#    5|-> . $(dirname $0)/libtest.sh
#    6|   if [ -e "${test_builddir}/.libs/libpreload.so" ]; then
#    7|       install "${test_builddir}/.libs/libpreload.so" "${test_tmpdir}"

Error: SHELLCHECK_WARNING (CWE-457): [#def90]
/usr/libexec/installed-tests/Flatpak/test-override.sh:6:10: warning[SC2154]: test_builddir is referenced but not assigned.
#    4|   
#    5|   . $(dirname $0)/libtest.sh
#    6|-> if [ -e "${test_builddir}/.libs/libpreload.so" ]; then
#    7|       install "${test_builddir}/.libs/libpreload.so" "${test_tmpdir}"
#    8|   else

Error: SHELLCHECK_WARNING (CWE-457): [#def91]
/usr/libexec/installed-tests/Flatpak/test-override.sh:7:53: warning[SC2154]: test_tmpdir is referenced but not assigned.
#    5|   . $(dirname $0)/libtest.sh
#    6|   if [ -e "${test_builddir}/.libs/libpreload.so" ]; then
#    7|->     install "${test_builddir}/.libs/libpreload.so" "${test_tmpdir}"
#    8|   else
#    9|       install "${test_builddir}/libpreload.so" "${test_tmpdir}"

Error: SHELLCHECK_WARNING (CWE-480): [#def92]
/usr/libexec/installed-tests/Flatpak/test-override.sh:238:9: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  236|   # Warnings need to be made temporarily non-fatal here.
#  237|   e=0
#  238|-> G_DEBUG= ${FLATPAK} override --user --nofilesystem=/foo:rw org.test.Hello 2>log || e=$?
#  239|   assert_file_has_content log "Filesystem suffix \"rw\" is not applicable for --nofilesystem"
#  240|   assert_streq "$e" 0

Error: SHELLCHECK_WARNING (CWE-480): [#def93]
/usr/libexec/installed-tests/Flatpak/test-override.sh:245:9: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  243|   # Warnings need to be made temporarily non-fatal here.
#  244|   e=0
#  245|-> G_DEBUG= ${FLATPAK} override --user --filesystem=/foo:bar org.test.Hello 2>log || e=$?
#  246|   assert_file_has_content log "Unexpected filesystem suffix bar, ignoring"
#  247|   assert_streq "$e" 0

Error: SHELLCHECK_WARNING (CWE-480): [#def94]
/usr/libexec/installed-tests/Flatpak/test-override.sh:252:9: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  250|   # Warnings need to be made temporarily non-fatal here.
#  251|   e=0
#  252|-> G_DEBUG= ${FLATPAK} override --user --nofilesystem=/foo:bar org.test.Hello 2>log || e=$?
#  253|   assert_file_has_content log "Unexpected filesystem suffix bar, ignoring"
#  254|   assert_streq "$e" 0

Error: SHELLCHECK_WARNING (CWE-156): [#def95]
/usr/libexec/installed-tests/Flatpak/test-prune.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   echo "1..5"

Error: SHELLCHECK_WARNING (CWE-571): [#def96]
/usr/libexec/installed-tests/Flatpak/test-prune.sh:33:15: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   31|           local DEPTH=${3}
#   32|   
#   33|->         local F=$(mktemp -d files.XXXXXX)
#   34|   
#   35|           # Each commit has:

Error: SHELLCHECK_WARNING (CWE-156): [#def97]
/usr/libexec/installed-tests/Flatpak/test-repair.sh:9:3: warning[SC2046]: Quote this to prevent word splitting.
#    7|   set -euo pipefail
#    8|   
#    9|-> . $(dirname $0)/libtest.sh
#   10|   
#   11|   echo "1..1"

Error: SHELLCHECK_WARNING (CWE-156): [#def98]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def99]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:59:67: warning[SC2046]: Quote this to prevent word splitting.
#   57|   fi
#   58|   
#   59|-> ${FLATPAK} remote-add ${U} --no-gpg-verify local-test-no-gpg-repo `pwd`/repos/test-no-gpg >&2
#   60|   
#   61|   #alternative gpg key repo

Error: SHELLCHECK_WARNING (CWE-156): [#def100]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:289:59: warning[SC2046]: Quote this to prevent word splitting.
#  287|       fi
#  288|   
#  289|->     REQUIRED_VERSION="${VERSION}" GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test ${APP_ID} master "${CID}" > /dev/null
#  290|   }
#  291|   

Error: SHELLCHECK_WARNING (CWE-457): [#def101]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:292:23: warning[SC2154]: test_builddir is referenced but not assigned.
#  290|   }
#  291|   
#  292|-> CURRENT_VERSION=`cat "$test_builddir/package_version.txt"`
#  293|   V=( ${CURRENT_VERSION//./ } )  # Split parts to array
#  294|   

Error: SHELLCHECK_WARNING (CWE-140): [#def102]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:293:5: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  291|   
#  292|   CURRENT_VERSION=`cat "$test_builddir/package_version.txt"`
#  293|-> V=( ${CURRENT_VERSION//./ } )  # Split parts to array
#  294|   
#  295|   make_required_version_app org.test.SameVersion "${V[0]}.${V[1]}.${V[2]}"

Error: SHELLCHECK_WARNING (CWE-156): [#def103]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:439:25: warning[SC2046]: Quote this to prevent word splitting.
#  437|   
#  438|   ${FLATPAK} build-commit-from --no-update-summary --end-of-life-rebase=org.test.Hello=org.test.NewHello --src-repo=repos/test ${FL_GPGARGS} repos/test-rebase app/org.test.Hello/$ARCH/master runtime/org.test.Hello.Locale/$ARCH/master >&2
#  439|-> GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test-rebase org.test.NewHello master "${REBASE_COLLECTION_ID}" "NEW" > /dev/null
#  440|   update_repo test-rebase
#  441|   

Error: SHELLCHECK_WARNING (CWE-156): [#def104]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:793:43: warning[SC2046]: Quote this to prevent word splitting.
#  791|   # Test that remote-ls can take a file:// URI
#  792|   ${FLATPAK} build-update-repo  ${BUILD_UPDATE_REPO_FLAGS-} --no-update-appstream repos/test >&2
#  793|-> ${FLATPAK} remote-ls --columns=ref file://`pwd`/repos/test > repo-list
#  794|   assert_file_has_content repo-list "org\.test\.Hello/"
#  795|   

Error: SHELLCHECK_WARNING (CWE-457): [#def105]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:928:4: warning[SC2154]: test_srcdir is referenced but not assigned.
#  926|   
#  927|   # Make a copy so we can remove it later
#  928|-> cp ${test_srcdir}/test.filter test.filter
#  929|   ${FLATPAK} ${U} remote-modify test-repo --filter $(pwd)/test.filter >&2
#  930|   

Error: SHELLCHECK_WARNING (CWE-156): [#def106]
/usr/libexec/installed-tests/Flatpak/test-repo.sh:929:50: warning[SC2046]: Quote this to prevent word splitting.
#  927|   # Make a copy so we can remove it later
#  928|   cp ${test_srcdir}/test.filter test.filter
#  929|-> ${FLATPAK} ${U} remote-modify test-repo --filter $(pwd)/test.filter >&2
#  930|   
#  931|   ${FLATPAK} ${U} remote-ls --columns=ref -a test-repo > remote-ls-log

Error: SHELLCHECK_WARNING (CWE-156): [#def107]
/usr/libexec/installed-tests/Flatpak/test-run.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def108]
/usr/libexec/installed-tests/Flatpak/test-run.sh:197:37: warning[SC2046]: Quote this to prevent word splitting.
#  195|   ok "error handling for invalid refs"
#  196|   
#  197|-> run_sh org.test.Hello cat /run/user/`id -u`/flatpak-info > fpi
#  198|   assert_file_has_content fpi '^name=org\.test\.Hello$'
#  199|   

Error: SHELLCHECK_WARNING (CWE-156): [#def109]
/usr/libexec/installed-tests/Flatpak/test-run.sh:204:18: warning[SC2046]: Quote this to prevent word splitting.
#  202|   run_sh org.test.Hello readlink /proc/self/ns/net > unshared_net_ns
#  203|   ARGS="--share=network" run_sh org.test.Hello readlink /proc/self/ns/net > shared_net_ns
#  204|-> assert_not_streq `cat unshared_net_ns` `readlink /proc/self/ns/net`
#  205|   assert_streq `cat shared_net_ns` `readlink /proc/self/ns/net`
#  206|   

Error: SHELLCHECK_WARNING (CWE-156): [#def110]
/usr/libexec/installed-tests/Flatpak/test-run.sh:204:40: warning[SC2046]: Quote this to prevent word splitting.
#  202|   run_sh org.test.Hello readlink /proc/self/ns/net > unshared_net_ns
#  203|   ARGS="--share=network" run_sh org.test.Hello readlink /proc/self/ns/net > shared_net_ns
#  204|-> assert_not_streq `cat unshared_net_ns` `readlink /proc/self/ns/net`
#  205|   assert_streq `cat shared_net_ns` `readlink /proc/self/ns/net`
#  206|   

Error: SHELLCHECK_WARNING (CWE-156): [#def111]
/usr/libexec/installed-tests/Flatpak/test-run.sh:205:14: warning[SC2046]: Quote this to prevent word splitting.
#  203|   ARGS="--share=network" run_sh org.test.Hello readlink /proc/self/ns/net > shared_net_ns
#  204|   assert_not_streq `cat unshared_net_ns` `readlink /proc/self/ns/net`
#  205|-> assert_streq `cat shared_net_ns` `readlink /proc/self/ns/net`
#  206|   
#  207|   run_sh org.test.Hello readlink /proc/self/ns/ipc > unshared_ipc_ns

Error: SHELLCHECK_WARNING (CWE-156): [#def112]
/usr/libexec/installed-tests/Flatpak/test-run.sh:205:34: warning[SC2046]: Quote this to prevent word splitting.
#  203|   ARGS="--share=network" run_sh org.test.Hello readlink /proc/self/ns/net > shared_net_ns
#  204|   assert_not_streq `cat unshared_net_ns` `readlink /proc/self/ns/net`
#  205|-> assert_streq `cat shared_net_ns` `readlink /proc/self/ns/net`
#  206|   
#  207|   run_sh org.test.Hello readlink /proc/self/ns/ipc > unshared_ipc_ns

Error: SHELLCHECK_WARNING (CWE-156): [#def113]
/usr/libexec/installed-tests/Flatpak/test-run.sh:209:18: warning[SC2046]: Quote this to prevent word splitting.
#  207|   run_sh org.test.Hello readlink /proc/self/ns/ipc > unshared_ipc_ns
#  208|   ARGS="--share=ipc" run_sh org.test.Hello readlink /proc/self/ns/ipc > shared_ipc_ns
#  209|-> assert_not_streq `cat unshared_ipc_ns` `readlink /proc/self/ns/ipc`
#  210|   assert_streq `cat shared_ipc_ns` `readlink /proc/self/ns/ipc`
#  211|   

Error: SHELLCHECK_WARNING (CWE-156): [#def114]
/usr/libexec/installed-tests/Flatpak/test-run.sh:209:40: warning[SC2046]: Quote this to prevent word splitting.
#  207|   run_sh org.test.Hello readlink /proc/self/ns/ipc > unshared_ipc_ns
#  208|   ARGS="--share=ipc" run_sh org.test.Hello readlink /proc/self/ns/ipc > shared_ipc_ns
#  209|-> assert_not_streq `cat unshared_ipc_ns` `readlink /proc/self/ns/ipc`
#  210|   assert_streq `cat shared_ipc_ns` `readlink /proc/self/ns/ipc`
#  211|   

Error: SHELLCHECK_WARNING (CWE-156): [#def115]
/usr/libexec/installed-tests/Flatpak/test-run.sh:210:14: warning[SC2046]: Quote this to prevent word splitting.
#  208|   ARGS="--share=ipc" run_sh org.test.Hello readlink /proc/self/ns/ipc > shared_ipc_ns
#  209|   assert_not_streq `cat unshared_ipc_ns` `readlink /proc/self/ns/ipc`
#  210|-> assert_streq `cat shared_ipc_ns` `readlink /proc/self/ns/ipc`
#  211|   
#  212|   # We try the filesystem namespace tests several times with different

Error: SHELLCHECK_WARNING (CWE-156): [#def116]
/usr/libexec/installed-tests/Flatpak/test-run.sh:210:34: warning[SC2046]: Quote this to prevent word splitting.
#  208|   ARGS="--share=ipc" run_sh org.test.Hello readlink /proc/self/ns/ipc > shared_ipc_ns
#  209|   assert_not_streq `cat unshared_ipc_ns` `readlink /proc/self/ns/ipc`
#  210|-> assert_streq `cat shared_ipc_ns` `readlink /proc/self/ns/ipc`
#  211|   
#  212|   # We try the filesystem namespace tests several times with different

Error: SHELLCHECK_WARNING (CWE-457): [#def117]
/usr/libexec/installed-tests/Flatpak/test-run.sh:250:26: warning[SC2154]: test_builddir is referenced but not assigned.
#  248|   }
#  249|   
#  250|-> test_filesystem_binding "${test_builddir}"
#  251|   
#  252|   mkdir "${TEST_DATA_DIR}/shareable"

Error: SHELLCHECK_WARNING (CWE-156): [#def118]
/usr/libexec/installed-tests/Flatpak/test-seccomp.sh:7:3: warning[SC2046]: Quote this to prevent word splitting.
#    5|   set -euo pipefail
#    6|   
#    7|-> . $(dirname $0)/libtest.sh
#    8|   
#    9|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-457): [#def119]
/usr/libexec/installed-tests/Flatpak/test-seccomp.sh:16:39: warning[SC2154]: test_tmpdir is referenced but not assigned.
#   14|   install_repo
#   15|   
#   16|-> cp -a "$G_TEST_BUILDDIR/try-syscall" "$test_tmpdir/try-syscall"
#   17|   
#   18|   # How this works:

Error: SHELLCHECK_WARNING (CWE-563): [#def120]
/usr/libexec/installed-tests/Flatpak/test-sideload.sh:22:1: warning[SC2034]: USE_COLLECTIONS_IN_SERVER appears unused. Verify use (or export if used externally).
#   20|   set -euo pipefail
#   21|   
#   22|-> USE_COLLECTIONS_IN_SERVER=yes
#   23|   USE_COLLECTIONS_IN_CLIENT=yes
#   24|   

Error: SHELLCHECK_WARNING (CWE-563): [#def121]
/usr/libexec/installed-tests/Flatpak/test-sideload.sh:23:1: warning[SC2034]: USE_COLLECTIONS_IN_CLIENT appears unused. Verify use (or export if used externally).
#   21|   
#   22|   USE_COLLECTIONS_IN_SERVER=yes
#   23|-> USE_COLLECTIONS_IN_CLIENT=yes
#   24|   
#   25|   . $(dirname $0)/libtest.sh

Error: SHELLCHECK_WARNING (CWE-156): [#def122]
/usr/libexec/installed-tests/Flatpak/test-sideload.sh:25:3: warning[SC2046]: Quote this to prevent word splitting.
#   23|   USE_COLLECTIONS_IN_CLIENT=yes
#   24|   
#   25|-> . $(dirname $0)/libtest.sh
#   26|   
#   27|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-457): [#def123]
/usr/libexec/installed-tests/Flatpak/test-sideload.sh:55:58: warning[SC2154]: port is referenced but not assigned.
#   53|   ok "created sideloaded repo"
#   54|   
#   55|-> ${FLATPAK} ${U} remote-modify --url="http://no.127.0.0.1:${port}/test" test-repo >&2
#   56|   
#   57|   if ${FLATPAK} ${U} install -y test-repo org.test.Hello &> /dev/null; then

Error: SHELLCHECK_WARNING (CWE-156): [#def124]
/usr/libexec/installed-tests/Flatpak/test-subset.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def125]
/usr/libexec/installed-tests/Flatpak/test-subset.sh:39:57: warning[SC2046]: Quote this to prevent word splitting.
#   37|   assert_file_has_content repo-all.txt "runtime/org\.test\.Platform/$ARCH/master"
#   38|   
#   39|-> EXPORT_ARGS="--subset=subset1 " GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.SubsetOne master ""
#   40|   EXPORT_ARGS="--subset=subset2 " GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.SubsetTwo master ""
#   41|   EXPORT_ARGS="" GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.NoSubset master ""

Error: SHELLCHECK_WARNING (CWE-156): [#def126]
/usr/libexec/installed-tests/Flatpak/test-subset.sh:40:57: warning[SC2046]: Quote this to prevent word splitting.
#   38|   
#   39|   EXPORT_ARGS="--subset=subset1 " GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.SubsetOne master ""
#   40|-> EXPORT_ARGS="--subset=subset2 " GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.SubsetTwo master ""
#   41|   EXPORT_ARGS="" GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.NoSubset master ""
#   42|   ${FLATPAK} build-update-repo ${BUILD_UPDATE_REPO_FLAGS-} ${FL_GPGARGS} repos/test >&2

Error: SHELLCHECK_WARNING (CWE-156): [#def127]
/usr/libexec/installed-tests/Flatpak/test-subset.sh:41:40: warning[SC2046]: Quote this to prevent word splitting.
#   39|   EXPORT_ARGS="--subset=subset1 " GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.SubsetOne master ""
#   40|   EXPORT_ARGS="--subset=subset2 " GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.SubsetTwo master ""
#   41|-> EXPORT_ARGS="" GPGARGS="${FL_GPGARGS}" $(dirname $0)/make-test-app.sh repos/test org.test.NoSubset master ""
#   42|   ${FLATPAK} build-update-repo ${BUILD_UPDATE_REPO_FLAGS-} ${FL_GPGARGS} repos/test >&2
#   43|   

Error: SHELLCHECK_WARNING (CWE-156): [#def128]
/usr/libexec/installed-tests/Flatpak/test-summaries.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   echo "1..2"

Error: SHELLCHECK_WARNING (CWE-156): [#def129]
/usr/libexec/installed-tests/Flatpak/test-summaries.sh:71:8: warning[SC2046]: Quote this to prevent word splitting.
#   69|   </components>
#   70|   EOF
#   71|->     cp $(dirname $0)/org.test.Hello.png ${DIR}/files/share/app-info/icons/flatpak/64x64/${APP_ID}.png
#   72|   
#   73|       $FLATPAK build-finish --command=hello.sh ${DIR} &> /dev/null

Error: SHELLCHECK_WARNING (CWE-563): [#def130]
/usr/libexec/installed-tests/Flatpak/test-summaries.sh:111:9: warning[SC2034]: FROM appears unused. Verify use (or export if used externally).
#  109|       for DELTA_FILE in $REPO/summaries/*.delta; do
#  110|           DELTA=$(basename $DELTA_FILE .delta)
#  111|->         FROM=$(echo $DELTA | cut -d "-" -f 1)
#  112|           TO=$(echo $DELTA | cut -d "-" -f 2)
#  113|   

Error: SHELLCHECK_WARNING (CWE-477): [#def131]
/usr/libexec/installed-tests/Flatpak/test-summaries.sh:139:22: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#  137|   
#  138|   # A non-default arch (that isn't compatible)
#  139|-> if [ $ARCH == x86_64 -o $ARCH == i386 ]; then
#  140|       OTHER_ARCH=aarch64
#  141|   else

Error: SHELLCHECK_WARNING (CWE-569): [#def132]
/usr/libexec/installed-tests/Flatpak/test-summaries.sh:150:8: warning[SC2124]: Assigning an array to a string! Assign as array, or use * instead of @ to concatenate.
#  148|       arches[$A]=1
#  149|   done
#  150|-> ARCHES=${!arches[@]}
#  151|   
#  152|   for A in $ARCHES; do

Error: SHELLCHECK_WARNING (CWE-563): [#def133]
/usr/libexec/installed-tests/Flatpak/test-summaries.sh:225:1: warning[SC2034]: OLD_OLD_ACTIVE_SUBSET appears unused. Verify use (or export if used externally).
#  223|   $FLATPAK build-commit-from ${GPGARGS} --src-ref=app/org.app.App1/$OTHER_ARCH/master repos/test app/org.app.App1.NEW2/$OTHER_ARCH/master >&2
#  224|   
#  225|-> OLD_OLD_ACTIVE_SUBSET=$OLD_ACTIVE_SUBSET
#  226|   OLD_OLD_ACTIVE_SUBSET_OTHER=$OLD_ACTIVE_SUBSET_OTHER
#  227|   OLD_ACTIVE_SUBSET=$ACTIVE_SUBSET

Error: SHELLCHECK_WARNING (CWE-563): [#def134]
/usr/libexec/installed-tests/Flatpak/test-summaries.sh:226:1: warning[SC2034]: OLD_OLD_ACTIVE_SUBSET_OTHER appears unused. Verify use (or export if used externally).
#  224|   
#  225|   OLD_OLD_ACTIVE_SUBSET=$OLD_ACTIVE_SUBSET
#  226|-> OLD_OLD_ACTIVE_SUBSET_OTHER=$OLD_ACTIVE_SUBSET_OTHER
#  227|   OLD_ACTIVE_SUBSET=$ACTIVE_SUBSET
#  228|   OLD_ACTIVE_SUBSET_OTHER=$ACTIVE_SUBSET_OTHER

Error: SHELLCHECK_WARNING (CWE-156): [#def135]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:25:3: warning[SC2046]: Quote this to prevent word splitting.
#   23|   export USE_SYSTEMDIR=yes
#   24|   
#   25|-> . $(dirname $0)/libtest.sh
#   26|   
#   27|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-569): [#def136]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:32:19: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#   30|   echo "1..3"
#   31|   
#   32|-> setup_empty_repo &> /dev/null > /dev/null
#   33|   
#   34|   # Manually add the user remote too

Error: SHELLCHECK_WARNING (CWE-569): [#def137]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:32:31: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#   30|   echo "1..3"
#   31|   
#   32|-> setup_empty_repo &> /dev/null > /dev/null
#   33|   
#   34|   # Manually add the user remote too

Error: SHELLCHECK_WARNING (CWE-457): [#def138]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:35:99: warning[SC2154]: port is referenced but not assigned.
#   33|   
#   34|   # Manually add the user remote too
#   35|-> $FLATPAK remote-add --user --gpg-import=${FL_GPG_HOMEDIR}/pubring.gpg test-repo "http://127.0.0.1:${port}/test" >&2
#   36|   
#   37|   

Error: SHELLCHECK_WARNING (CWE-571): [#def139]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:70:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   68|   
#   69|       local BRANCH=stable
#   70|->     local DIR=`mktemp -d`
#   71|   
#   72|       mkdir ${DIR}/files

Error: SHELLCHECK_WARNING (CWE-569): [#def140]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:86:55: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#   84|       fi
#   85|   
#   86|->     $FLATPAK build-finish $DIR ${finish_args[$ID]:-} &> /dev/null > /dev/null
#   87|       $FLATPAK build-export -v ${FL_GPGARGS} --disable-sandbox --runtime repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null
#   88|       rm -rf ${DIR}

Error: SHELLCHECK_WARNING (CWE-569): [#def141]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:86:67: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#   84|       fi
#   85|   
#   86|->     $FLATPAK build-finish $DIR ${finish_args[$ID]:-} &> /dev/null > /dev/null
#   87|       $FLATPAK build-export -v ${FL_GPGARGS} --disable-sandbox --runtime repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null
#   88|       rm -rf ${DIR}

Error: SHELLCHECK_WARNING (CWE-569): [#def142]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:87:101: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#   85|   
#   86|       $FLATPAK build-finish $DIR ${finish_args[$ID]:-} &> /dev/null > /dev/null
#   87|->     $FLATPAK build-export -v ${FL_GPGARGS} --disable-sandbox --runtime repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null
#   88|       rm -rf ${DIR}
#   89|   }

Error: SHELLCHECK_WARNING (CWE-569): [#def143]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:87:113: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#   85|   
#   86|       $FLATPAK build-finish $DIR ${finish_args[$ID]:-} &> /dev/null > /dev/null
#   87|->     $FLATPAK build-export -v ${FL_GPGARGS} --disable-sandbox --runtime repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null
#   88|       rm -rf ${DIR}
#   89|   }

Error: SHELLCHECK_WARNING (CWE-571): [#def144]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:97:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   95|   
#   96|       local BRANCH=stable
#   97|->     local DIR=`mktemp -d`
#   98|   
#   99|       mkdir ${DIR}/files

Error: SHELLCHECK_WARNING (CWE-569): [#def145]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:113:58: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  111|   
#  112|       set -x
#  113|->     $FLATPAK build-finish ${DIR}  ${finish_args[$ID]:-} &> /dev/null > /dev/null
#  114|   
#  115|       $FLATPAK build-export ${FL_GPGARGS} --disable-sandbox repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null

Error: SHELLCHECK_WARNING (CWE-569): [#def146]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:113:70: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  111|   
#  112|       set -x
#  113|->     $FLATPAK build-finish ${DIR}  ${finish_args[$ID]:-} &> /dev/null > /dev/null
#  114|   
#  115|       $FLATPAK build-export ${FL_GPGARGS} --disable-sandbox repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null

Error: SHELLCHECK_WARNING (CWE-569): [#def147]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:115:88: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  113|       $FLATPAK build-finish ${DIR}  ${finish_args[$ID]:-} &> /dev/null > /dev/null
#  114|   
#  115|->     $FLATPAK build-export ${FL_GPGARGS} --disable-sandbox repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null
#  116|       rm -rf ${DIR}
#  117|   }

Error: SHELLCHECK_WARNING (CWE-569): [#def148]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:115:100: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  113|       $FLATPAK build-finish ${DIR}  ${finish_args[$ID]:-} &> /dev/null > /dev/null
#  114|   
#  115|->     $FLATPAK build-export ${FL_GPGARGS} --disable-sandbox repos/test ${DIR} ${BRANCH} &> /dev/null > /dev/null
#  116|       rm -rf ${DIR}
#  117|   }

Error: SHELLCHECK_WARNING (CWE-140): [#def149]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:236:13: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  234|       fi
#  235|   
#  236|->     apps+=( $ID )
#  237|       apps_runtime[$ID]="$RUNTIME"
#  238|       apps_sdk[$ID]="$SDK"

Error: SHELLCHECK_WARNING (CWE-569): [#def150]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:258:19: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  256|           create_app "$app" "${apps_runtime[$app]}" "${apps_sdk[$app]}"
#  257|       done
#  258|->     update_repo  &> /dev/null > /dev/null
#  259|   
#  260|       for runtime in "${runtimes[@]}"; do

Error: SHELLCHECK_WARNING (CWE-569): [#def151]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:258:31: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  256|           create_app "$app" "${apps_runtime[$app]}" "${apps_sdk[$app]}"
#  257|       done
#  258|->     update_repo  &> /dev/null > /dev/null
#  259|   
#  260|       for runtime in "${runtimes[@]}"; do

Error: SHELLCHECK_WARNING (CWE-569): [#def152]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:263:121: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  261|           local in=${installs_in[${runtime}]:-system}
#  262|           if test $in = system -o $in = both; then
#  263|->             $FLATPAK install -y --system --no-deps --no-related --no-auto-pin test-repo runtime/$runtime/$ARCH/stable  &> /dev/null > /dev/null
#  264|           fi
#  265|           if test $in = user -o $in = both; then

Error: SHELLCHECK_WARNING (CWE-569): [#def153]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:263:133: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  261|           local in=${installs_in[${runtime}]:-system}
#  262|           if test $in = system -o $in = both; then
#  263|->             $FLATPAK install -y --system --no-deps --no-related --no-auto-pin test-repo runtime/$runtime/$ARCH/stable  &> /dev/null > /dev/null
#  264|           fi
#  265|           if test $in = user -o $in = both; then

Error: SHELLCHECK_WARNING (CWE-569): [#def154]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:266:119: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  264|           fi
#  265|           if test $in = user -o $in = both; then
#  266|->             $FLATPAK install -y --user --no-deps --no-related --no-auto-pin test-repo runtime/$runtime/$ARCH/stable  &> /dev/null > /dev/null
#  267|           fi
#  268|           if test "x${runtimes_pinned[$runtime]:-}" == "xyes"; then

Error: SHELLCHECK_WARNING (CWE-569): [#def155]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:266:131: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  264|           fi
#  265|           if test $in = user -o $in = both; then
#  266|->             $FLATPAK install -y --user --no-deps --no-related --no-auto-pin test-repo runtime/$runtime/$ARCH/stable  &> /dev/null > /dev/null
#  267|           fi
#  268|           if test "x${runtimes_pinned[$runtime]:-}" == "xyes"; then

Error: SHELLCHECK_WARNING (CWE-569): [#def156]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:275:113: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  273|           local in=${installs_in[$app]:-system}
#  274|           if test $in = system -o $in = both; then
#  275|->             $FLATPAK install -y --system --no-deps --no-related --no-auto-pin test-repo app/$app/$ARCH/stable  &> /dev/null > /dev/null
#  276|           fi
#  277|           if test $in = user -o $in = both; then

Error: SHELLCHECK_WARNING (CWE-569): [#def157]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:275:125: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  273|           local in=${installs_in[$app]:-system}
#  274|           if test $in = system -o $in = both; then
#  275|->             $FLATPAK install -y --system --no-deps --no-related --no-auto-pin test-repo app/$app/$ARCH/stable  &> /dev/null > /dev/null
#  276|           fi
#  277|           if test $in = user -o $in = both; then

Error: SHELLCHECK_WARNING (CWE-569): [#def158]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:278:111: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  276|           fi
#  277|           if test $in = user -o $in = both; then
#  278|->             $FLATPAK install -y --user --no-deps --no-related --no-auto-pin test-repo app/$app/$ARCH/stable  &> /dev/null > /dev/null
#  279|           fi
#  280|       done

Error: SHELLCHECK_WARNING (CWE-569): [#def159]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:278:123: error[SC2261]: Multiple redirections compete for stdout. Use cat, tee, or pass filenames instead.
#  276|           fi
#  277|           if test $in = user -o $in = both; then
#  278|->             $FLATPAK install -y --user --no-deps --no-related --no-auto-pin test-repo app/$app/$ARCH/stable  &> /dev/null > /dev/null
#  279|           fi
#  280|       done

Error: SHELLCHECK_WARNING (CWE-457): [#def160]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:394:1: warning[SC2154]: test_builddir is referenced but not assigned.
#  392|   assert_not_file_has_content user-installed.txt USED_EXT_K
#  393|   
#  394|-> ${test_builddir}/list-unused | sed s@^app/@@g | sed s@^runtime/@@g | sort > unused.txt
#  395|   
#  396|   verify_unused

Error: SHELLCHECK_WARNING (CWE-156): [#def161]
/usr/libexec/installed-tests/Flatpak/test-unused.sh:430:6: warning[SC2046]: Quote this to prevent word splitting.
#  428|   
#  429|   comm -13 old-unused.txt unused.txt > newly-unused.txt
#  430|-> if [ $(cat newly-unused.txt | wc -l) -ne 10 ]; then
#  431|       assert_not_reached "Unexpected unused ref"
#  432|   fi

Error: SHELLCHECK_WARNING (CWE-156): [#def162]
/usr/libexec/installed-tests/Flatpak/test-update-portal.sh:22:3: warning[SC2046]: Quote this to prevent word splitting.
#   20|   set -euo pipefail
#   21|   
#   22|-> . $(dirname $0)/libtest.sh
#   23|   
#   24|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-457): [#def163]
/usr/libexec/installed-tests/Flatpak/test-update-portal.sh:32:24: warning[SC2154]: test_builddir is referenced but not assigned.
#   30|   install_repo
#   31|   
#   32|-> run_with_sandboxed_bus ${test_builddir}/test-update-portal monitor monitor.pid > update-monitor.out
#   33|   MONITOR_PID=$(cat monitor.pid)
#   34|   

Error: SHELLCHECK_WARNING (CWE-398): [#def164]
/usr/libexec/installed-tests/Flatpak/test-update-portal.sh:84:1: warning[SC2038]: Use 'find .. -print0 | xargs -0 ..' or 'find .. -exec .. +' to allow non-alphanumeric filenames.
#   82|   # Break the repo so that the update fails
#   83|   cp -r repos/test/objects repos/test/orig-objects
#   84|-> find repos/test/objects -name "*.filez" | xargs  -I FILENAME mv FILENAME FILENAME.broken
#   85|   
#   86|   run_with_sandboxed_bus ${test_builddir}/test-update-portal update-fail monitor.pid >&2

Error: SHELLCHECK_WARNING (CWE-156): [#def165]
/usr/libexec/installed-tests/Flatpak/test-update-remote-configuration.sh:25:3: warning[SC2046]: Quote this to prevent word splitting.
#   23|   set -euo pipefail
#   24|   
#   25|-> . $(dirname $0)/libtest.sh
#   26|   
#   27|   skip_without_bwrap

Error: SHELLCHECK_WARNING (CWE-156): [#def166]
/usr/libexec/installed-tests/Flatpak/test-webserver.sh:9:1: warning[SC2046]: Quote this to prevent word splitting.
#    7|   rm -f httpd-pipe
#    8|   mkfifo httpd-pipe
#    9|-> $(dirname $0)/web-server.py "$dir" 3> httpd-pipe &
#   10|   read < httpd-pipe

Error: CPPCHECK_WARNING (CWE-457): [#def167]
flatpak-1.16.0/app/flatpak-main.c:468: error[legacyUninitvar]: Uninitialized variable: dir
#  466|               g_assert_not_reached ();
#  467|   
#  468|->           g_ptr_array_add (dirs, dir);
#  469|           }
#  470|   

Error: CPPCHECK_WARNING (CWE-457): [#def168]
flatpak-1.16.0/common/flatpak-dir.c:869: error[legacyUninitvar]: Uninitialized variable: meta
#  867|       g_assert_not_reached ();
#  868|   
#  869|->   return meta;
#  870|   }
#  871|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def169]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-config.c:112:14: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-config.c:107:1: enter_function: entry to ‘looks_like_a_locale’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-config.c:112:14: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#argument 1 of ‘__builtin_strchr’ must be non-null
#  110|     gchar *language, *territory, *codeset, *modifier;
#  111|   
#  112|->   modifier = strchr (locale, '@');
#  113|     if (modifier != NULL)
#  114|       *modifier++ = '\0';

Error: GCC_ANALYZER_WARNING (CWE-775): [#def170]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:134:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(g_path_get_dirname(file), 2621440)’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:103:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:108:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:108:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:111:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:111:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:114:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:119:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:122:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:126:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:129:8: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:129:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:133:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:133:6: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:134:10: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:134:10: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:134:10: danger: ‘open(g_path_get_dirname(file), 2621440)’ leaks here; was opened at [(15)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/14)
#  132|   
#  133|     if (opt_noexist)
#  134|->     fd = open (dirname, O_PATH | O_CLOEXEC);
#  135|     else
#  136|       fd = open (file, O_PATH | O_CLOEXEC);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def171]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:136:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(file, 2621440)’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:103:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:108:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:108:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:111:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:111:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:114:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:119:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:122:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:126:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:129:8: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:129:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:133:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:133:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:136:10: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:136:10: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-export.c:136:10: danger: ‘open(file, 2621440)’ leaks here; was opened at [(15)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/14)
#  134|       fd = open (dirname, O_PATH | O_CLOEXEC);
#  135|     else
#  136|->     fd = open (file, O_PATH | O_CLOEXEC);
#  137|   
#  138|     if (fd == -1)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def172]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:90:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘doc_id’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:48:1: enter_function: entry to ‘flatpak_builtin_document_unexport’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:56:20: release_memory: ‘doc_id’ is NULL
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:61:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:66:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:66:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:69:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:69:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:72:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:75:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:78:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:82:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:85:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:85:6: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:86:14: call_function: inlined call to ‘g_strdup_inline’ from ‘flatpak_builtin_document_unexport’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:90:7: release_memory: ‘doc_id’ is NULL
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-document-unexport.c:90:7: danger: dereference of NULL ‘doc_id’
#   88|       return FALSE;
#   89|   
#   90|->   if (strcmp (doc_id, "") == 0)
#   91|       {
#   92|         g_print (_("Not exported\n"));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def173]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:214:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(path, 0)’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:106:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:109:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:109:6: branch_false: following ‘false’ branch (when ‘rest_argc > 1’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:116:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:116:3: branch_true: following ‘true’ branch (when ‘rest_argv_start != 0’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:118:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:137:6: branch_false: following ‘false’ branch (when ‘pid > 0’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:140:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:141:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:148:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:152:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:155:14: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:157:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:160:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:162:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:165:15: branch_true: following ‘true’ branch (when ‘i != 6’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:171:11: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:183:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:194:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:201:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:204:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:204:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:211:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:214:18: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:214:18: danger: ‘open(path, 0)’ leaks here; was opened at [(25)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/24)
#  212|           user_base_ino = path_stat.st_ino;
#  213|   
#  214|->       ns_fd[i] = open (path, O_RDONLY);
#  215|         if (ns_fd[i] == -1)
#  216|           return flatpak_fail (error, _("Can't open %s namespace: %s"), ns_name[i], g_strerror (errno));

Error: GCC_ANALYZER_WARNING (CWE-688): [#def174]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:248:68: warning[-Wanalyzer-null-argument]: use of NULL ‘e’ where non-null expected
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:55:1: enter_function: entry to ‘flatpak_builtin_enter’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:106:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:109:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:109:6: branch_false: following ‘false’ branch (when ‘rest_argc > 1’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:116:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:116:3: branch_true: following ‘true’ branch (when ‘rest_argv_start != 0’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:118:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:137:6: branch_false: following ‘false’ branch (when ‘pid > 0’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:140:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:141:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:148:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:152:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:155:14: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:157:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:160:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:162:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:165:15: branch_true: following ‘true’ branch (when ‘i != 6’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:171:11: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:185:14: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:188:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:219:15: branch_true: following ‘true’ branch (when ‘i != 6’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:221:11: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:233:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:236:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:236:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:239:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:239:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:242:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:242:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:245:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:248:25: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:250:11: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:250:10: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:251:12: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:252:12: branch_false: following ‘false’ branch (when ‘e’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:252:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:253:12: branch_false: following ‘false’ branch (when ‘e’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:253:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:254:12: branch_false: following ‘false’ branch (when ‘e’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:254:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:255:12: branch_false: following ‘false’ branch (when ‘e’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:255:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:257:15: branch_false: following ‘false’ branch (when ‘e’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:257:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:248:68: danger: argument 1 (‘e’) NULL where non-null expected
#argument 1 of ‘__builtin_strlen’ must be non-null
#  246|   
#  247|     envp_array = g_ptr_array_new_with_free_func (g_free);
#  248|->   for (e = environment; e < environment + environment_len; e = e + strlen (e) + 1)
#  249|       {
#  250|         if (*e != 0 &&

Error: GCC_ANALYZER_WARNING (CWE-775): [#def175]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:299:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘ns_fd[0]’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:55:1: enter_function: entry to ‘flatpak_builtin_enter’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:106:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:109:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:109:6: branch_false: following ‘false’ branch (when ‘rest_argc > 1’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:116:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:116:3: branch_true: following ‘true’ branch (when ‘rest_argv_start != 0’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:118:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:137:6: branch_false: following ‘false’ branch (when ‘pid > 0’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:140:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:141:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:148:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:152:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:155:14: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:157:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:160:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:162:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:165:15: branch_true: following ‘true’ branch (when ‘i != 6’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:171:11: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:183:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:194:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:201:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:204:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:204:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:211:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:214:18: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:215:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:168:24: call_function: inlined call to ‘g_autoptr_cleanup_generic_gfree’ from ‘flatpak_builtin_enter’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:165:15: branch_true: following ‘true’ branch (when ‘i != 6’)...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:171:11: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:185:14: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:191:44: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-enter.c:299:1: danger: ‘ns_fd[0]’ leaks here; was opened at [(26)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/25)
#  297|   
#  298|     exit (status);
#  299|-> }
#  300|   
#  301|   gboolean

Error: GCC_ANALYZER_WARNING (CWE-688): [#def176]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:238:11: warning[-Wanalyzer-null-argument]: use of NULL ‘latest’ where non-null expected
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:84:1: enter_function: entry to ‘flatpak_builtin_info’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:119:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:122:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:122:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:124:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:129:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:134:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:140:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:143:17: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:144:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:147:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:148:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:151:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:168:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:168:7: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:195:10: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:196:18: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:198:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:217:13: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:217:7: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:218:13: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:218:7: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:219:13: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:219:7: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:220:13: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:220:7: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:221:10: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:221:10: branch_false: following ‘false’ branch...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:223:10: branch_false: following ‘false’ branch...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:225:10: branch_false: following ‘false’ branch (when ‘collection_id’ is NULL)...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:227:7: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:228:13: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:228:7: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:229:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:234:10: branch_false: following ‘false’ branch (when ‘formatted_timestamp’ is NULL)...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:236:10: branch_false: following ‘false’ branch (when ‘subject’ is NULL)...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-info.c:238:11: danger: argument 2 (‘latest’) NULL where non-null expected
#  236|         if (subject)
#  237|           len = MAX (len, g_utf8_strlen (_("Subject:"), -1));
#  238|->       if (strcmp (commit, latest) != 0)
#  239|           {
#  240|             len = MAX (len, g_utf8_strlen (_("Active commit:"), -1));

Error: GCC_ANALYZER_WARNING (CWE-688): [#def177]
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-utils.c:1016:17: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-utils.c:995:1: enter_function: entry to ‘ellipsize_string_full’
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-utils.c:999:6: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../app/flatpak-builtins-utils.c:1016:17: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#argument 1 of ‘__builtin_strlen’ must be non-null
# 1014|   
# 1015|         p = ret;
# 1016|->       q = ret + strlen (ret);
# 1017|   
# 1018|         for (i = 0; i < l1; i++)

Error: GCC_ANALYZER_WARNING (CWE-688): [#def178]
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:298:7: warning[-Wanalyzer-null-argument]: use of NULL ‘parent’ where non-null expected
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:282:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:285:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:285:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:287:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:289:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:297:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:297:6: branch_true: following ‘true’ branch (when the strings are equal)...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:298:7: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-appdata.c:298:7: danger: argument 1 (‘parent’) NULL where non-null expected
#  296|     /* avoid picking up <id> elements from e.g. <provides> */
#  297|     if (g_str_equal (element_name, "id") &&
#  298|->       g_str_equal (parent, "component"))
#  299|       {
#  300|         component->id = g_steal_pointer (&text);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def179]
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:664:11: warning[-Wanalyzer-null-argument]: use of NULL ‘filesystem’ where non-null expected
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2832:1: enter_function: entry to ‘flatpak_context_export’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2847:6: branch_false: following ‘false’ branch (when ‘xdg_dirs_conf_out’ is NULL)...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2850:13: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2910:6: branch_true: following ‘true’ branch (when ‘home_mode != 0’)...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2912:7: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2928:10: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2930:19: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2933:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2936:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2936:11: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2938:28: release_memory: ‘filesystem’ is NULL
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2943:16: call_function: calling ‘get_xdg_user_dir_from_string’ from ‘flatpak_context_export’
#argument 1 of ‘__builtin_strchr’ must be non-null
#  662|     const char *dir_out = NULL;
#  663|   
#  664|->   slash = strchr (filesystem, '/');
#  665|   
#  666|     if (slash)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def180]
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2860:13: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir("/")’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2847:6: branch_false: following ‘false’ branch (when ‘xdg_dirs_conf_out’ is NULL)...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2850:13: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2851:6: branch_true: following ‘true’ branch (when ‘fs_mode != 0’)...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2856:7: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2860:13: acquire_memory: allocated here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-context.c:2860:13: danger: ‘opendir("/")’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
# 2858|   
# 2859|         /* Bind mount most dirs in / into the new root */
# 2860|->       dir = opendir ("/");
# 2861|         if (dir != NULL)
# 2862|           {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def181]
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1079:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘local_error’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1105:1: enter_function: entry to ‘flatpak_instance_iterate_all_and_gc’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1112:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1117:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1120:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1120:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1123:36: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1138:14: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1139:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1138:15: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1142:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1138:15: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1143:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1138:15: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1144:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1138:15: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1146:33: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1146:33: release_memory: ‘local_error’ is NULL
flatpak-1.16.0/redhat-linux-build/../common/flatpak-instance.c:1152:20: call_function: calling ‘flatpak_instance_gc_per_app_dirs’ from ‘flatpak_instance_iterate_all_and_gc’
# 1077|         else
# 1078|           {
# 1079|->           g_info ("%s/%s no longer points to the expected directory and "
# 1080|                     "was removed: %s",
# 1081|                     per_app_dir, "dev-shm", local_error->message);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def182]
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1578:12: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘local_error’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1537:1: enter_function: entry to ‘_flatpak_split_partial_ref_arg’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1557:21: release_memory: ‘local_error’ is NULL
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1574:12: call_function: calling ‘next_element’ from ‘_flatpak_split_partial_ref_arg’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1574:12: return_function: returning to ‘_flatpak_split_partial_ref_arg’ from ‘next_element’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1577:6: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1578:105: release_memory: ‘local_error’ is NULL
flatpak-1.16.0/redhat-linux-build/../common/flatpak-ref-utils.c:1578:12: danger: dereference of NULL ‘local_error’
# 1576|   
# 1577|     if (validate && !flatpak_is_valid_name (id, -1, &local_error))
# 1578|->     return flatpak_fail_error (error, FLATPAK_ERROR_INVALID_REF, _("Invalid id %s: %s"), id, local_error->message);
# 1579|   
# 1580|     arch_start = partial_ref;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def183]
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:44:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(app_info_path, 524288)’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:44:17: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:44:17: danger: ‘open(app_info_path, 524288)’ leaks here; was opened at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   42|     g_autofree char *proxy_socket_dir = g_build_filename (user_runtime_dir, ".dbus-proxy/", NULL);
#   43|   
#   44|->   app_info_fd = open (app_info_path, O_RDONLY | O_CLOEXEC);
#   45|     if (app_info_fd == -1)
#   46|       return glnx_throw_errno_prefix (error, _("Failed to open app info file"));

Error: GCC_ANALYZER_WARNING (CWE-465): [#def184]
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1495:6: warning[-Wanalyzer-deref-before-check]: check of ‘arg_cwd_path’ for NULL after already dereferencing it
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:747:1: enter_function: entry to ‘handle_spawn’
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:809:6: branch_false: following ‘false’ branch (when ‘fd_list’ is NULL)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:812:14: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:813:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:815:12: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:818:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:820:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:831:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:839:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:839:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:842:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:842:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:850:6: branch_false: following ‘false’ branch (when ‘arg_flags <= 511’)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:857:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:857:6: branch_false: following ‘false’ branch (when ‘testing == 0’)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:860:19: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:864:6: branch_false: following ‘false’ branch (when ‘runtime_ref’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:871:19: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:911:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:918:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:918:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:974:6: branch_false: following ‘false’ branch (when ‘fds’ is NULL)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:977:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:980:15: branch_false: following ‘false’ branch (when ‘i >= n_fds’)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1018:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1018:6: branch_false: following ‘false’ branch (when ‘testing == 0’)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1024:21: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1029:6: branch_false: following ‘false’ branch (when ‘instance_id’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1037:14: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1038:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1051:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1051:6: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1053:13: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1084:36: call_function: inlined call to ‘g_strdup_inline’ from ‘handle_spawn’
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1172:15: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1200:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1283:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1310:6: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1322:6: branch_true: following ‘true’ branch...
 branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1414:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1450:11: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1455:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1484:34: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1495:6: danger: pointer ‘arg_cwd_path’ is checked for NULL here but it was already dereferenced at [(10)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/9)
# 1493|       }
# 1494|   
# 1495|->   if (arg_cwd_path != NULL)
# 1496|       g_ptr_array_add (flatpak_argv, g_strdup_printf ("--cwd=%s", arg_cwd_path));
# 1497|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def185]
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1930:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘error’
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1909:1: enter_function: entry to ‘check_for_updates’
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1919:21: release_memory: ‘error’ is NULL
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1927:18: call_function: calling ‘lookup_installation_for_path’ from ‘check_for_updates’
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1927:18: return_function: returning to ‘check_for_updates’ from ‘lookup_installation_for_path’
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1928:6: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1930:7: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1930:7: release_memory: ‘error’ is NULL
flatpak-1.16.0/redhat-linux-build/../portal/flatpak-portal.c:1930:7: danger: dereference of NULL ‘error’
# 1928|     if (installation == NULL)
# 1929|       {
# 1930|->       g_info ("Unable to find installation for path %s: %s", flatpak_file_get_path_cached (installation_path), error->message);
# 1931|         return;
# 1932|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def186]
flatpak-1.16.0/redhat-linux-build/../subprojects/libglnx/glnx-local-alloc.h:74:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:34:1: enter_function: entry to ‘add_bwrap_wrapper’
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:44:17: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:45:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:48:8: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../common/flatpak-run-dbus.c:38:19: call_function: calling ‘glnx_close_fd’ from ‘add_bwrap_wrapper’
#   72|         errno = errsv;
#   73|       }
#   74|-> }
#   75|   
#   76|   /**

Error: GCC_ANALYZER_WARNING (CWE-688): [#def187]
flatpak-1.16.0/redhat-linux-build/../subprojects/libglnx/glnx-lockfile.c:91:22: warning[-Wanalyzer-null-argument]: use of NULL ‘p’ where non-null expected
flatpak-1.16.0/redhat-linux-build/../subprojects/libglnx/glnx-lockfile.c:64:1: enter_function: entry to ‘glnx_make_lock_file’
flatpak-1.16.0/redhat-linux-build/../subprojects/libglnx/glnx-lockfile.c:91:22: danger: argument 2 (‘p’) NULL where non-null expected
#   89|                   struct stat st;
#   90|   
#   91|->                 fd = openat(dfd, p, O_CREAT|O_RDWR|O_NOFOLLOW|O_CLOEXEC|O_NOCTTY, 0600);
#   92|                   if (fd < 0)
#   93|                           return glnx_throw_errno(error);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def188]
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2086:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sys_error’
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:1922:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:1931:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:1931:11: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2015:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2015:11: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2030:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2030:11: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2043:12: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2043:11: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2049:25: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2049:25: release_memory: ‘error’ is NULL
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2057:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2064:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2076:10: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2080:29: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2080:29: release_memory: ‘sys_error’ is NULL
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2084:14: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2087:114: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2087:114: release_memory: ‘sys_error’ is NULL
flatpak-1.16.0/redhat-linux-build/../system-helper/flatpak-system-helper.c:2086:15: danger: dereference of NULL ‘sys_error’
# 2084|             if (system == NULL)
# 2085|               {
# 2086|->               g_dbus_method_invocation_return_error (invocation, G_DBUS_ERROR, G_DBUS_ERROR_FAILED,
# 2087|                                                        "Error getting installation %s: %s", installation, sys_error->message);
# 2088|                 return FALSE;

Error: GCC_ANALYZER_WARNING (CWE-685): [#def189]
flatpak-1.16.0/redhat-linux-build/../tests/test-context.c:151:10: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (2 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/test-context.c:453:1: enter_function: entry to ‘test_validate_path_args’
flatpak-1.16.0/redhat-linux-build/../tests/test-context.c:457:17: branch_true: following ‘true’ branch (when ‘idx != 3’)...
flatpak-1.16.0/redhat-linux-build/../tests/test-context.c:459:43: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/test-context.c:463:7: call_function: calling ‘context_parse_args’ from ‘test_validate_path_args’ with 2 variadic arguments
#  149|     va_start (ap, error);
#  150|   
#  151|->   while ((arg = va_arg (ap, const char *)) != NULL)
#  152|       g_ptr_array_add (args, g_strdup (arg));
#  153|   

Error: GCC_ANALYZER_WARNING (CWE-685): [#def190]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:150:7: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (1 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
#  148|     for (i = 0; num[i]; i++)
#  149|       {
#  150|->       n = va_arg (args, int);
#  151|         g_assert_true (n == num[i]);
#  152|       }

Error: GCC_ANALYZER_WARNING (CWE-685): [#def191]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:150:7: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (2 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
#  148|     for (i = 0; num[i]; i++)
#  149|       {
#  150|->       n = va_arg (args, int);
#  151|         g_assert_true (n == num[i]);
#  152|       }

Error: GCC_ANALYZER_WARNING (CWE-685): [#def192]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:150:7: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (3 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:187:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 3 variadic arguments
#  148|     for (i = 0; num[i]; i++)
#  149|       {
#  150|->       n = va_arg (args, int);
#  151|         g_assert_true (n == num[i]);
#  152|       }

Error: GCC_ANALYZER_WARNING (CWE-685): [#def193]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:150:7: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (4 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
#  148|     for (i = 0; num[i]; i++)
#  149|       {
#  150|->       n = va_arg (args, int);
#  151|         g_assert_true (n == num[i]);
#  152|       }

Error: GCC_ANALYZER_WARNING (CWE-685): [#def194]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:150:7: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (5 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:187:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 3 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:187:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:188:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:188:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:191:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 5 variadic arguments
#  148|     for (i = 0; num[i]; i++)
#  149|       {
#  150|->       n = va_arg (args, int);
#  151|         g_assert_true (n == num[i]);
#  152|       }

Error: GCC_ANALYZER_WARNING (CWE-685): [#def195]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:154:3: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (1 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
#  152|       }
#  153|   
#  154|->   n = va_arg (args, int);
#  155|     g_assert_true (n == 0);
#  156|     va_end (args);

Error: GCC_ANALYZER_WARNING (CWE-685): [#def196]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:154:3: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (2 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
#  152|       }
#  153|   
#  154|->   n = va_arg (args, int);
#  155|     g_assert_true (n == 0);
#  156|     va_end (args);

Error: GCC_ANALYZER_WARNING (CWE-685): [#def197]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:154:3: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (3 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:187:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 3 variadic arguments
#  152|       }
#  153|   
#  154|->   n = va_arg (args, int);
#  155|     g_assert_true (n == 0);
#  156|     va_end (args);

Error: GCC_ANALYZER_WARNING (CWE-685): [#def198]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:154:3: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (4 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
#  152|       }
#  153|   
#  154|->   n = va_arg (args, int);
#  155|     g_assert_true (n == 0);
#  156|     va_end (args);

Error: GCC_ANALYZER_WARNING (CWE-685): [#def199]
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:154:3: warning[-Wanalyzer-va-list-exhausted]: ‘args’ has no more arguments (5 consumed)
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:160:1: enter_function: entry to ‘test_parse_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 1 variadic argument
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:165:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:166:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 2 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:169:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:170:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:173:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:174:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 4 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:177:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:178:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:187:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 3 variadic arguments
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:187:3: return_function: returning to ‘test_parse_numbers’ from ‘assert_numbers’
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:188:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:188:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testapp.c:191:3: call_function: calling ‘assert_numbers’ from ‘test_parse_numbers’ with 5 variadic arguments
#  152|       }
#  153|   
#  154|->   n = va_arg (args, int);
#  155|     g_assert_true (n == 0);
#  156|     va_end (args);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def200]
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:223:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘newline’
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:164:1: enter_function: entry to ‘tests_dbus_daemon_setup’
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:175:3: branch_true: following ‘true’ branch (when ‘self’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:176:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:176:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:177:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:177:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:178:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:178:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:180:20: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:186:3: call_function: calling ‘replace_tokens’ from ‘tests_dbus_daemon_setup’
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:186:3: return_function: returning to ‘tests_dbus_daemon_setup’ from ‘replace_tokens’
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:204:10: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:219:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:222:3: branch_false: following ‘false’ branch (when ‘newline’ is NULL)...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:222:3: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:223:3: danger: dereference of NULL ‘newline’
#  221|     newline = strchr (address_buffer, '\n');
#  222|     g_assert_nonnull (newline);
#  223|->   *newline = '\0';
#  224|     self->dbus_address = g_strdup (address_buffer);
#  225|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def201]
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:265:6: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(2, 1)’
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:262:6: branch_false: following ‘false’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:265:7: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:265:7: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:265:6: danger: ‘dup2(2, 1)’ leaks here; was opened at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  263|       g_error ("fcntl F_DUPFD_CLOEXEC: %s", g_strerror (errno));
#  264|   
#  265|->   if (dup2 (STDERR_FILENO, STDOUT_FILENO) < 0)
#  266|       g_error ("dup2: %s", g_strerror (errno));
#  267|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def202]
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:279:6: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(*original.fd, 1)’
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:276:3: branch_true: following ‘true’ branch (when ‘original’ is non-NULL)...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:277:3: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:277:3: branch_true: following ‘true’ branch...
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:279:7: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:279:7: acquire_resource: opened here
flatpak-1.16.0/redhat-linux-build/../tests/testlib.c:279:6: danger: ‘dup2(*original.fd, 1)’ leaks here; was opened at [(5)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/4)
#  277|     g_return_if_fail (original->fd >= 0);
#  278|   
#  279|->   if (dup2 (original->fd, STDOUT_FILENO) < 0)
#  280|       g_error ("dup2: %s", g_strerror (errno));
#  281|   

Error: GCC_ANALYZER_WARNING: [#def203]
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:166:15: warning[-Wanalyzer-fd-use-without-check]: ‘listen’ on possibly invalid file descriptor ‘-1’
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:84:15: branch_true: following ‘true’ branch (when ‘i < argc’)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:86:29: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:88:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:96:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:96:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:105:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:105:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:114:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:114:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:123:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:123:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:132:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:132:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:142:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:142:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:154:16: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:154:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:163:15: branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:163:14: branch_true: following ‘true’ branch (when the strings are equal)...
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:166:15: branch_true: ...to here
flatpak-1.16.0/redhat-linux-build/../tests/try-syscall.c:166:15: danger: ‘-1’ could be invalid
#  164|           {
#  165|             /* If not blocked by seccomp, this will fail with EBADF */
#  166|->           if (listen (-1, 42) != 0)
#  167|               {
#  168|                 errsv = errno;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def204]
flatpak-1.16.0/redhat-linux-build/app/parse-datetime.c:1558:3: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(long int *)<unknown>’
flatpak-1.16.0/redhat-linux-build/../app/parse-datetime.y:1268:1: enter_function: entry to ‘parse_datetime’
flatpak-1.16.0/redhat-linux-build/../app/parse-datetime.y:1294:6: branch_false: following ‘false’ branch (when ‘tmp’ is non-NULL)...
 branch_false: ...to here
flatpak-1.16.0/redhat-linux-build/../app/parse-datetime.y:1427:7: call_function: calling ‘yyparse’ from ‘parse_datetime’
# 1556|        unconditionally makes the parser a bit smaller, and it avoids a
# 1557|        GCC warning that YYVAL may be used uninitialized.  */
# 1558|->   yyval = yyvsp[1-yylen];
# 1559|   
# 1560|   

Error: CPPCHECK_WARNING (CWE-457): [#def205]
flatpak-1.16.0/subprojects/libglnx/glnx-xattrs.c:384: error[uninitvar]: Uninitialized variable: bytes_read
#  382|       return glnx_null_throw_errno_prefix (error, "lgetxattr(%s)", attribute);
#  383|   
#  384|->   g_autofree guint8 *buf = g_malloc (bytes_read);
#  385|     if (TEMP_FAILURE_RETRY (real_size = lgetxattr (pathbuf, attribute, buf, bytes_read)) < 0)
#  386|       return glnx_null_throw_errno_prefix (error, "lgetxattr(%s)", attribute);

Error: CPPCHECK_WARNING (CWE-457): [#def206]
flatpak-1.16.0/subprojects/libglnx/glnx-xattrs.c:388: error[uninitvar]: Uninitialized variable: real_size
#  386|       return glnx_null_throw_errno_prefix (error, "lgetxattr(%s)", attribute);
#  387|   
#  388|->   return g_bytes_new_take (g_steal_pointer (&buf), real_size);
#  389|   }
#  390|   

Error: CPPCHECK_WARNING (CWE-457): [#def207]
flatpak-1.16.0/subprojects/libglnx/glnx-xattrs.c:409: error[uninitvar]: Uninitialized variable: bytes_read
#  407|       return glnx_null_throw_errno_prefix (error, "fgetxattr(%s)", attribute);
#  408|   
#  409|->   g_autofree guint8 *buf = g_malloc (bytes_read);
#  410|     if (TEMP_FAILURE_RETRY (real_size = fgetxattr (fd, attribute, buf, bytes_read)) < 0)
#  411|       return glnx_null_throw_errno_prefix (error, "fgetxattr(%s)", attribute);

Error: CPPCHECK_WARNING (CWE-457): [#def208]
flatpak-1.16.0/subprojects/libglnx/glnx-xattrs.c:413: error[uninitvar]: Uninitialized variable: real_size
#  411|       return glnx_null_throw_errno_prefix (error, "fgetxattr(%s)", attribute);
#  412|   
#  413|->   return g_bytes_new_take (g_steal_pointer (&buf), real_size);
#  414|   }
#  415|   

Scan Properties