Error: GCC_ANALYZER_WARNING (CWE-688): [#def1] fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1603:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘s’ where non-null expected fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1523:1: enter_function: entry to ‘IA__FcDirCacheClean’ fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1536:8: branch_false: following ‘false’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1539:15: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1544:8: branch_false: following ‘false’ branch (when ‘dir’ is non-NULL)... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1550:9: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1550:8: branch_false: following ‘false’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1557:8: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1560:8: branch_false: following ‘false’ branch... branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1566:12: branch_true: following ‘true’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1571:13: branch_true: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1571:12: branch_false: following ‘false’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1575:20: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1575:12: branch_false: following ‘false’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1576:13: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1575:13: branch_false: following ‘false’ branch (when the strings are equal)... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1579:21: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1580:12: branch_false: following ‘false’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1587:17: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1587:17: call_function: calling ‘IA__FcDirCacheLoadFile’ from ‘IA__FcDirCacheClean’ fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1587:17: return_function: returning to ‘IA__FcDirCacheClean’ from ‘IA__FcDirCacheLoadFile’ fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1588:12: branch_false: following ‘false’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1598:26: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1599:16: branch_false: following ‘false’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1602:21: branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1602:21: acquire_memory: this call could return NULL fontconfig-2.16.0/redhat-linux-build/../src/fccache.c:1603:17: danger: argument 1 (‘s’) from [(43)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/42) could be NULL where non-null expected # 1601| else # 1602| s = FcStrdup (target_dir); # 1603|-> if (stat ((char *) s, &target_stat) < 0) # 1604| { # 1605| if (verbose || FcDebug () & FC_DBG_CACHE) Error: GCC_ANALYZER_WARNING (CWE-457): [#def2] fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:601:18: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘lang[2]’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:823:1: enter_function: entry to ‘FcNameParseLangSet’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:829:10: call_function: calling ‘IA__FcLangSetCreate’ from ‘FcNameParseLangSet’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:829:10: return_function: returning to ‘FcNameParseLangSet’ from ‘IA__FcLangSetCreate’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:830:8: branch_false: following ‘false’ branch... branch_false: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:835:20: branch_true: following ‘true’ branch (when ‘i != 31’)... fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:837:18: branch_true: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:838:15: branch_true: following ‘true’ branch... fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:842:9: branch_true: ...to here fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:843:14: call_function: calling ‘IA__FcLangSetAdd’ from ‘FcNameParseLangSet’ # 599| if (cmp == 0 && # 600| (fcLangCharSets[mid].lang[2] != '\0' || # 601|-> lang[2] != '\0')) # 602| { # 603| cmp = FcStrCmpIgnoreCase(fcLangCharSets[mid].lang+2, Error: GCC_ANALYZER_WARNING (CWE-476): [#def3] fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:630:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ls’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:1113:1: enter_function: entry to ‘IA__FcLangSetUnion’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:1115:12: call_function: calling ‘FcLangSetOperate’ from ‘IA__FcLangSetUnion’ # 628| return FcTrue; # 629| } # 630|-> if (!ls->extra) # 631| { # 632| ls->extra = FcStrSetCreate (); Error: GCC_ANALYZER_WARNING (CWE-476): [#def4] fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:649:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ls’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:1119:1: enter_function: entry to ‘IA__FcLangSetSubtract’ fontconfig-2.16.0/redhat-linux-build/../src/fclang.c:1121:12: call_function: calling ‘FcLangSetOperate’ from ‘IA__FcLangSetSubtract’ # 647| FcLangSetBitReset (ls, id); # 648| } # 649|-> else if (ls->extra) # 650| { # 651| FcStrSetDel (ls->extra, lang);
| analyzer-version-clippy | 1.86.0 |
| analyzer-version-cppcheck | 2.17.1 |
| analyzer-version-gcc | 15.0.1 |
| analyzer-version-gcc-analyzer | 15.0.1 |
| analyzer-version-shellcheck | 0.10.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.86.0 |
| diffbase-analyzer-version-cppcheck | 2.17.1 |
| diffbase-analyzer-version-gcc | 15.0.1 |
| diffbase-analyzer-version-gcc-analyzer | 15.0.1 |
| diffbase-analyzer-version-shellcheck | 0.10.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-11.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | fontconfig-2.16.2-1.fc43 |
| diffbase-store-results-to | /tmp/tmp7obwatun/fontconfig-2.16.2-1.fc43.tar.xz |
| diffbase-time-created | 2025-04-25 12:31:03 |
| diffbase-time-finished | 2025-04-25 12:33:47 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmp7obwatun/fontconfig-2.16.2-1.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp7obwatun/fontconfig-2.16.2-1.fc43.src.rpm' |
| diffbase-tool-version | csmock-3.8.1.20250422.172604.g26bc3d6-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-11.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | fontconfig-2.16.0-2.fc42 |
| store-results-to | /tmp/tmpefbt7uw5/fontconfig-2.16.0-2.fc42.tar.xz |
| time-created | 2025-04-25 12:27:37 |
| time-finished | 2025-04-25 12:30:48 |
| title | Fixed findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpefbt7uw5/fontconfig-2.16.0-2.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpefbt7uw5/fontconfig-2.16.0-2.fc42.src.rpm' |
| tool-version | csmock-3.8.1.20250422.172604.g26bc3d6-1.el9 |