fprintd-1.94.5-1.fc43

List of Findings

Error: CPPCHECK_WARNING (CWE-476): [#def1]
fprintd-v1.94.5/pam/pam_fprintd.c:768: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
#  766|   
#  767|     data = calloc (1, sizeof (verify_data));
#  768|->   data->max_tries = max_tries;
#  769|     data->pamh = pamh;
#  770|   

Error: CPPCHECK_WARNING (CWE-476): [#def2]
fprintd-v1.94.5/pam/pam_fprintd.c:769: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
#  767|     data = calloc (1, sizeof (verify_data));
#  768|     data->max_tries = max_tries;
#  769|->   data->pamh = pamh;
#  770|   
#  771|     if (sd_bus_open_system (&bus) < 0)

Error: CPPCHECK_WARNING (CWE-401): [#def3]
fprintd-v1.94.5/pam/pam_fprintd.c:774: error[memleak]: Memory leak: data
#  772|       {
#  773|         pam_syslog (pamh, LOG_ERR, "Error with getting the bus: %d", errno);
#  774|->       return PAM_AUTHINFO_UNAVAIL;
#  775|       }
#  776|   

Error: CPPCHECK_WARNING (CWE-401): [#def4]
fprintd-v1.94.5/pam/pam_fprintd.c:779: error[memleak]: Memory leak: data
#  777|     data->dev = open_device (pamh, bus, username, &data->has_multiple_devices);
#  778|     if (data->dev == NULL)
#  779|->     return PAM_AUTHINFO_UNAVAIL;
#  780|   
#  781|     /* Only connect to NameOwnerChanged when needed. In case of automatic startup

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:768:3: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘data’
/usr/include/security/pam_modules.h:34:5: enter_function: entry to ‘pam_sm_authenticate’
fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:843:6: branch_false: following ‘false’ branch...
fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:846:7: branch_false: ...to here
fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:846:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
fprintd-v1.94.5/redhat-linux-build/../pam/pam_fprintd.c:915:10: call_function: calling ‘do_auth’ from ‘pam_sm_authenticate’
#  766|   
#  767|     data = calloc (1, sizeof (verify_data));
#  768|->   data->max_tries = max_tries;
#  769|     data->pamh = pamh;
#  770|   

Scan Properties