Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-685): [#def1]
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:526:29: warning[-Wanalyzer-va-list-exhausted]: ‘expected_tags’ has no more arguments (1 consumed)
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:537:1: enter_function: entry to ‘test_ot_tag_full’
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:539:3: call_function: calling ‘test_tags’ from ‘test_ot_tag_full’ with 1 variadic argument
#  524|     for (i = 0; i < script_count + language_count; i++)
#  525|     {
#  526|->     hb_tag_t expected_tag = hb_tag_from_string (va_arg (expected_tags, const char *), -1);
#  527|       hb_tag_t actual_tag = i < script_count ? script_tags[i] : language_tags[i - script_count];
#  528|       g_assert_cmphex (actual_tag, ==, expected_tag);

Error: GCC_ANALYZER_WARNING (CWE-685): [#def2]
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:526:29: warning[-Wanalyzer-va-list-exhausted]: ‘expected_tags’ has no more arguments (2 consumed)
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:537:1: enter_function: entry to ‘test_ot_tag_full’
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:539:3: call_function: calling ‘test_tags’ from ‘test_ot_tag_full’ with 1 variadic argument
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:539:3: return_function: returning to ‘test_ot_tag_full’ from ‘test_tags’
harfbuzz-10.4.0/redhat-linux-build/../test/api/test-ot-tag.c:540:3: call_function: calling ‘test_tags’ from ‘test_ot_tag_full’ with 2 variadic arguments
#  524|     for (i = 0; i < script_count + language_count; i++)
#  525|     {
#  526|->     hb_tag_t expected_tag = hb_tag_from_string (va_arg (expected_tags, const char *), -1);
#  527|       hb_tag_t actual_tag = i < script_count ? script_tags[i] : language_tags[i - script_count];
#  528|       g_assert_cmphex (actual_tag, ==, expected_tag);

Error: CPPCHECK_WARNING (CWE-401): [#def3]
harfbuzz-10.4.0/src/hb-machinery.hh:258: error[memleak]: Memory leak: p
#  256|       Stored *p = (Stored *) hb_calloc (1, sizeof (Stored));
#  257|       if (likely (p))
#  258|->       p = new (p) Stored (data);
#  259|       return p;
#  260|     }

Error: CPPCHECK_WARNING (CWE-401): [#def4]
harfbuzz-10.4.0/src/hb-machinery.hh:265: error[memleak]: Memory leak: p
#  263|       Stored *p = (Stored *) hb_calloc (1, sizeof (Stored));
#  264|       if (likely (p))
#  265|->       p = new (p) Stored ();
#  266|       return p;
#  267|     }

Scan Properties

analyzer-version-clippy1.86.0
analyzer-version-cppcheck2.17.1
analyzer-version-gcc15.0.1
analyzer-version-gcc-analyzer15.0.1
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.86.0
diffbase-analyzer-version-cppcheck2.17.1
diffbase-analyzer-version-gcc15.0.1
diffbase-analyzer-version-gcc-analyzer15.0.1
diffbase-analyzer-version-shellcheck0.10.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-168.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameharfbuzz-11.1.0-1.fc43
diffbase-store-results-to/tmp/tmpnojkx_k4/harfbuzz-11.1.0-1.fc43.tar.xz
diffbase-time-created2025-04-25 13:07:43
diffbase-time-finished2025-04-25 13:16:47
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpnojkx_k4/harfbuzz-11.1.0-1.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpnojkx_k4/harfbuzz-11.1.0-1.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-168.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameharfbuzz-10.4.0-1.fc42
store-results-to/tmp/tmpmutini34/harfbuzz-10.4.0-1.fc42.tar.xz
time-created2025-04-25 12:58:04
time-finished2025-04-25 13:07:18
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmpmutini34/harfbuzz-10.4.0-1.fc42.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpmutini34/harfbuzz-10.4.0-1.fc42.src.rpm'
tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9