gnome-shell-48.1-2.fc43

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
gnome-shell-48.1/redhat-linux-build/../src/gtkactionmuxer.c:351:19: warning[-Wanalyzer-null-argument]: use of NULL ‘action_and_target’ where non-null expected
gnome-shell-48.1/redhat-linux-build/../src/gtkactionmuxer.c:885:1: enter_function: entry to ‘gtk_action_muxer_set_primary_accel’
gnome-shell-48.1/redhat-linux-build/../src/gtkactionmuxer.c:892:6: branch_true: following ‘true’ branch (when ‘primary_accel’ is non-NULL)...
gnome-shell-48.1/redhat-linux-build/../src/gtkactionmuxer.c:893:79: call_function: inlined call to ‘g_strdup_inline’ from ‘gtk_action_muxer_set_primary_accel’
gnome-shell-48.1/redhat-linux-build/../src/gtkactionmuxer.c:897:3: call_function: calling ‘gtk_action_muxer_primary_accel_changed’ from ‘gtk_action_muxer_set_primary_accel’
#  349|   
#  350|     if (!action_name)
#  351|->     action_name = strrchr (action_and_target, '|') + 1;
#  352|   
#  353|     action = g_hash_table_lookup (muxer->observed_actions, action_name);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
gnome-shell-48.1/redhat-linux-build/../src/shell-app.c:1517:14: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
gnome-shell-48.1/redhat-linux-build/../src/shell-app.c:1494:1: enter_function: entry to ‘activate_action_get_bus_cb’
gnome-shell-48.1/redhat-linux-build/../src/shell-app.c:1508:6: branch_false: following ‘false’ branch...
gnome-shell-48.1/redhat-linux-build/../src/shell-app.c:1514:9: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/shell-app.c:1517:14: danger: argument 1 (‘<unknown>’) NULL where non-null expected
# 1515|   
# 1516|     app_id = g_strdup (g_app_info_get_id (G_APP_INFO (app->info)));
# 1517|->   last_dot = strrchr (app_id, '.');
# 1518|     if (last_dot && g_str_equal (last_dot, ".desktop"))
# 1519|         *last_dot = '\0';

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
gnome-shell-48.1/redhat-linux-build/../src/shell-perf-log.c:377:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘event’
gnome-shell-48.1/redhat-linux-build/../src/shell-perf-log.c:620:1: enter_function: entry to ‘shell_perf_log_collect_statistics’
gnome-shell-48.1/redhat-linux-build/../src/shell-perf-log.c:626:6: branch_false: following ‘false’ branch...
 branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/shell-perf-log.c:676:3: call_function: calling ‘record_event’ from ‘shell_perf_log_collect_statistics’
#  375|     memcpy (block->buffer + pos, &time_delta, sizeof (guint32));
#  376|     pos += sizeof (guint32);
#  377|->   memcpy (block->buffer + pos, &event->id, sizeof (guint16));
#  378|     pos += sizeof (guint16);
#  379|     memcpy (block->buffer + pos, bytes, bytes_len);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-selector.c:275:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur’
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-selector.c:254:28: branch_false: following ‘false’ branch (when ‘cur’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-selector.c:261:12: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-selector.c:261:12: branch_false: following ‘false’ branch (when ‘cur’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-selector.c:275:14: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-selector.c:275:14: danger: dereference of NULL ‘cur’
#  273|   
#  274|           /*walk backward the list and free each "next element" */
#  275|->         for (cur = cur->prev; cur && cur->prev; cur = cur->prev) {
#  276|                   if (cur->next) {
#  277|                           g_free (cur->next);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-statement.c:2760:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur’
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-statement.c:2753:28: branch_false: following ‘false’ branch (when ‘cur’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-statement.c:2757:12: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-statement.c:2757:12: branch_false: following ‘false’ branch (when ‘cur’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-statement.c:2760:13: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/st/croco/cr-statement.c:2760:13: danger: dereference of NULL ‘cur’
# 2758|                   cr_statement_clear (cur);
# 2759|   
# 2760|->         if (cur->prev == NULL) {
# 2761|                   g_free (a_this);
# 2762|                   return;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def6]
gnome-shell-48.1/redhat-linux-build/../src/st/st-image-content.c:304:7: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘type’
gnome-shell-48.1/redhat-linux-build/../src/st/st-image-content.c:283:1: enter_function: entry to ‘load_image_thread’
gnome-shell-48.1/redhat-linux-build/../src/st/st-image-content.c:292:12: call_function: calling ‘st_image_load’ from ‘load_image_thread’
gnome-shell-48.1/redhat-linux-build/../src/st/st-image-content.c:292:12: return_function: returning to ‘load_image_thread’ from ‘st_image_load’
gnome-shell-48.1/redhat-linux-build/../src/st/st-image-content.c:298:6: branch_false: following ‘false’ branch...
gnome-shell-48.1/redhat-linux-build/../src/st/st-image-content.c:304:7: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/st/st-image-content.c:304:7: danger: use of uninitialized value ‘type’ here
#  302|     else
#  303|       {
#  304|->       g_task_set_task_data (task, type, g_free);
#  305|         g_task_return_pointer (task, stream, g_object_unref);
#  306|       }

Error: GCC_ANALYZER_WARNING: [#def7]
gnome-shell-48.1/redhat-linux-build/../src/st/st-private.c:256:9: warning[-Wanalyzer-imprecise-fp-arithmetic]: use of floating-point arithmetic here might yield unexpected results
gnome-shell-48.1/redhat-linux-build/../src/st/st-private.c:276:1: enter_function: entry to ‘blur_pixels’
gnome-shell-48.1/redhat-linux-build/../src/st/st-private.c:295:6: branch_false: following ‘false’ branch...
gnome-shell-48.1/redhat-linux-build/../src/st/st-private.c:309:18: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../src/st/st-private.c:319:16: call_function: calling ‘calculate_gaussian_kernel’ from ‘blur_pixels’
#  254|     half = n_values / 2;
#  255|   
#  256|->   ret = g_malloc (n_values * sizeof (gdouble));
#  257|     sum = 0.0;
#  258|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def8]
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1328:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘error’
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1311:1: enter_function: entry to ‘st_texture_cache_load_file_to_cogl_texture’
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1318:11: release_memory: ‘error’ is NULL
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1320:13: call_function: calling ‘st_texture_cache_load_file_sync_to_cogl_texture’ from ‘st_texture_cache_load_file_to_cogl_texture’
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1320:13: return_function: returning to ‘st_texture_cache_load_file_to_cogl_texture’ from ‘st_texture_cache_load_file_sync_to_cogl_texture’
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1325:6: branch_true: following ‘true’ branch...
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1327:19: branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1328:7: release_memory: ‘error’ is NULL
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1328:7: release_memory: ‘error’ is NULL
gnome-shell-48.1/redhat-linux-build/../src/st/st-texture-cache.c:1328:7: danger: dereference of NULL ‘error’
# 1326|       {
# 1327|         char *uri = g_file_get_uri (file);
# 1328|->       g_warning ("Failed to load %s: %s", uri, error->message);
# 1329|         g_clear_error (&error);
# 1330|         g_free (uri);

Error: GCC_ANALYZER_WARNING: [#def9]
gnome-shell-48.1/redhat-linux-build/../src/st/st-theme-node-drawing.c:1134:10: warning[-Wanalyzer-imprecise-fp-arithmetic]: use of floating-point arithmetic here might yield unexpected results
gnome-shell-48.1/redhat-linux-build/../src/st/st-theme-node-drawing.c:1719:1: enter_function: entry to ‘st_theme_node_update_resources’
gnome-shell-48.1/redhat-linux-build/../src/st/st-theme-node-drawing.c:1730:3: branch_true: following ‘true’ branch...
gnome-shell-48.1/redhat-linux-build/../src/st/st-theme-node-drawing.c:1754:3: call_function: calling ‘st_theme_node_maybe_prerender_background’ from ‘st_theme_node_update_resources’
# 1132|   
# 1133|     rowstride = cairo_format_stride_for_width (CAIRO_FORMAT_ARGB32, texture_width);
# 1134|->   data = g_new0 (guchar, texture_height * rowstride);
# 1135|   
# 1136|     /* We zero initialize the destination memory, so it's fully transparent

Error: GCC_ANALYZER_WARNING (CWE-688): [#def10]
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:317:13: warning[-Wanalyzer-null-argument]: use of NULL ‘profile_name’ where non-null expected
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:471:1: enter_function: entry to ‘gvc_mixer_ui_device_get_best_profile’
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:480:9: branch_false: following ‘false’ branch (when ‘device’ is non-NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:480:9: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:481:9: branch_true: following ‘true’ branch (when ‘current’ is non-NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:483:13: branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:490:12: branch_false: following ‘false’ branch (when ‘selected’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:494:18: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:494:52: branch_true: following ‘true’ branch (when ‘l’ is non-NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:496:38: branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:497:34: call_function: calling ‘get_profile_canonical_name’ from ‘gvc_mixer_ui_device_get_best_profile’
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:497:34: return_function: returning to ‘gvc_mixer_ui_device_get_best_profile’ from ‘get_profile_canonical_name’
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:498:20: branch_true: following ‘true’ branch (when ‘canonical_name_selected’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:499:38: branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:494:52: branch_false: following ‘false’ branch (when ‘l’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:505:12: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:505:12: branch_false: following ‘false’ branch (when ‘candidates’ is non-NULL)...
 branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:513:30: branch_true: following ‘true’ branch...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:514:38: branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:515:20: branch_true: following ‘true’ branch (when the strings are equal)...
 branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:513:30: branch_false: following ‘false’ branch...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:520:12: branch_false: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:520:12: branch_true: following ‘true’ branch (when ‘result’ is NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:522:52: branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:523:42: call_function: calling ‘get_profile_canonical_name’ from ‘gvc_mixer_ui_device_get_best_profile’
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:523:42: return_function: returning to ‘gvc_mixer_ui_device_get_best_profile’ from ‘get_profile_canonical_name’
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:524:38: branch_true: following ‘true’ branch (when ‘l’ is non-NULL)...
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:526:46: branch_true: ...to here
gnome-shell-48.1/redhat-linux-build/../subprojects/gvc/gvc-mixer-ui-device.c:527:37: call_function: calling ‘get_profile_canonical_name’ from ‘gvc_mixer_ui_device_get_best_profile’
#argument 1 of ‘__builtin_strstr’ must be non-null
#  315|   
#  316|           /* optimisation for the simple case. */
#  317|->         if (strstr (profile_name, skip_prefix) == NULL)
#  318|                   return g_strdup (profile_name);
#  319|   

Error: CPPCHECK_WARNING (CWE-457): [#def11]
gnome-shell-48.1/src/shell-global.c:1291: error[uninitvar]: Uninitialized variable: arr
# 1289|     execvp (arr->pdata[0], (char**)arr->pdata);
# 1290|     g_warning ("failed to reexec: %s", g_strerror (errno));
# 1291|->   g_ptr_array_free (arr, TRUE);
# 1292|   #if defined __linux__ || defined __FreeBSD__
# 1293|     g_free (buf);

Error: CPPCHECK_WARNING (CWE-457): [#def12]
gnome-shell-48.1/src/st/st-entry.c:488: error[uninitvar]: Uninitialized variables: child_box.y1, child_box.y2
#  486|       {
#  487|         /* now allocate the hint actor */
#  488|->       hint_box = child_box;
#  489|   
#  490|         clutter_actor_get_preferred_width (priv->hint_actor, -1, &hint_min_w, &hint_w);

Scan Properties

analyzer-version-clippy1.86.0
analyzer-version-cppcheck2.17.1
analyzer-version-gcc15.0.1
analyzer-version-gcc-analyzer15.0.1
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-117.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegnome-shell-48.1-2.fc43
store-results-to/tmp/tmpuayn731m/gnome-shell-48.1-2.fc43.tar.xz
time-created2025-04-25 12:48:12
time-finished2025-04-25 12:52:14
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpuayn731m/gnome-shell-48.1-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpuayn731m/gnome-shell-48.1-2.fc43.src.rpm'
tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9