gnome-online-accounts-3.54.2-4.fc43

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1108:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘error’
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1098:21: release_memory: ‘error’ is NULL
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1101:6: branch_false: following ‘false’ branch...
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1106:13: branch_false: ...to here
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1106:13: release_memory: ‘error’ is NULL
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1106:11: branch_true: following ‘true’ branch...
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1108:7: branch_true: ...to here
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1108:7: release_memory: ‘error’ is NULL
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goadavclient.c:1108:7: danger: dereference of NULL ‘error’
# 1106|     else if (!g_error_matches (error, G_IO_ERROR, G_IO_ERROR_CANCELLED))
# 1107|       {
# 1108|->       g_debug ("%s(): %s", G_STRFUNC, error->message);
# 1109|         g_clear_error (&error);
# 1110|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:878:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘lookup_error’
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:831:1: enter_function: entry to ‘ensure_credentials_sync’
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:854:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:865:7: release_memory: ‘lookup_error’ is NULL
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:868:23: call_function: calling ‘goa_kerberos_provider_get_ticket_sync’ from ‘ensure_credentials_sync’
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:868:23: return_function: returning to ‘ensure_credentials_sync’ from ‘goa_kerberos_provider_get_ticket_sync’
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:875:10: branch_true: following ‘true’ branch...
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:877:11: branch_true: ...to here
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:877:11: release_memory: ‘lookup_error’ is NULL
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:878:27: release_memory: ‘lookup_error’ is NULL
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goakerberosprovider.c:878:15: danger: dereference of NULL ‘lookup_error’
#  876|           {
#  877|             g_dbus_error_strip_remote_error (lookup_error);
#  878|->           if (lookup_error->domain == GOA_IDENTITY_MANAGER_ERROR)
#  879|               {
#  880|                 lookup_error->domain = GOA_ERROR;

Error: COMPILER_WARNING (CWE-477): [#def3]
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goamailclient.c:146:5: warning[-Wdeprecated-declarations]: ‘g_tls_client_connection_set_validation_flags’ is deprecated
#  144|     data->tls_conn = g_object_ref (connection);
#  145|     if (data->accept_ssl_errors)
#  146|->     g_tls_client_connection_set_validation_flags (G_TLS_CLIENT_CONNECTION (data->tls_conn), 0);
#  147|   
#  148|     g_signal_connect (data->tls_conn,

Error: COMPILER_WARNING (CWE-477): [#def4]
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goabackend/goamailclient.c:293:5: warning[-Wdeprecated-declarations]: ‘g_tls_client_connection_set_validation_flags’ is deprecated
#  291|   
#  292|     if (data->accept_ssl_errors)
#  293|->     g_tls_client_connection_set_validation_flags (G_TLS_CLIENT_CONNECTION (data->tls_conn), 0);
#  294|   
#  295|     g_signal_connect (data->tls_conn,

Error: GCC_ANALYZER_WARNING (CWE-688): [#def5]
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goaidentity/goaidentityutils.c:99:26: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goaidentity/goaidentityutils.c:90:1: enter_function: entry to ‘dashed_string_to_studly_caps’
gnome-online-accounts-3.54.2/redhat-linux-build/../src/goaidentity/goaidentityutils.c:99:26: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#argument 1 of ‘__builtin_strlen’ must be non-null
#   97|   
#   98|     studly_string = g_strdup (dashed_string);
#   99|->   studly_string_length = strlen (studly_string);
#  100|   
#  101|     studly_string[i] = g_ascii_toupper (studly_string[i]);

Error: COMPILER_WARNING (CWE-477): [#def6]
gnome-online-accounts-3.54.2/src/goabackend/goamailclient.c: scope_hint: In function ‘mail_client_check_event_cb’
gnome-online-accounts-3.54.2/src/goabackend/goamailclient.c:146:5: warning[-Wdeprecated-declarations]: ‘g_tls_client_connection_set_validation_flags’ is deprecated
#  146 |     g_tls_client_connection_set_validation_flags (G_TLS_CLIENT_CONNECTION (data->tls_conn), 0);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/glib-2.0/gio/gio.h:165: included_from: Included from here.
/usr/include/libsoup-3.0/libsoup/soup-types.h:9: included_from: Included from here.
/usr/include/libsoup-3.0/libsoup/soup-auth.h:8: included_from: Included from here.
/usr/include/libsoup-3.0/libsoup/soup.h:11: included_from: Included from here.
gnome-online-accounts-3.54.2/src/goabackend/goasouplogger.h:26: included_from: Included from here.
gnome-online-accounts-3.54.2/src/goabackend/goamailclient.c:25: included_from: Included from here.
/usr/include/glib-2.0/gio/gtlsclientconnection.h:67:23: note: declared here
#   67 | void                  g_tls_client_connection_set_validation_flags (GTlsClientConnection    *conn,
#      |                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  144|     data->tls_conn = g_object_ref (connection);
#  145|     if (data->accept_ssl_errors)
#  146|->     g_tls_client_connection_set_validation_flags (G_TLS_CLIENT_CONNECTION (data->tls_conn), 0);
#  147|   
#  148|     g_signal_connect (data->tls_conn,

Error: COMPILER_WARNING (CWE-477): [#def7]
gnome-online-accounts-3.54.2/src/goabackend/goamailclient.c: scope_hint: In function ‘mail_client_check_auth_starttls_cb’
gnome-online-accounts-3.54.2/src/goabackend/goamailclient.c:293:5: warning[-Wdeprecated-declarations]: ‘g_tls_client_connection_set_validation_flags’ is deprecated
#  293 |     g_tls_client_connection_set_validation_flags (G_TLS_CLIENT_CONNECTION (data->tls_conn), 0);
#      |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/glib-2.0/gio/gtlsclientconnection.h:67:23: note: declared here
#   67 | void                  g_tls_client_connection_set_validation_flags (GTlsClientConnection    *conn,
#      |                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  291|   
#  292|     if (data->accept_ssl_errors)
#  293|->     g_tls_client_connection_set_validation_flags (G_TLS_CLIENT_CONNECTION (data->tls_conn), 0);
#  294|   
#  295|     g_signal_connect (data->tls_conn,

Scan Properties

analyzer-version-clippy1.86.0
analyzer-version-cppcheck2.17.1
analyzer-version-gcc15.0.1
analyzer-version-gcc-analyzer15.0.1
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-110.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegnome-online-accounts-3.54.2-4.fc43
store-results-to/tmp/tmprk7qb4kk/gnome-online-accounts-3.54.2-4.fc43.tar.xz
time-created2025-04-25 12:42:11
time-finished2025-04-25 12:44:48
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmprk7qb4kk/gnome-online-accounts-3.54.2-4.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmprk7qb4kk/gnome-online-accounts-3.54.2-4.fc43.src.rpm'
tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9