libavif-1.1.1-1.fc43

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
libavif-1.1.1/apps/shared/avifpng.c:483:9: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)rgb.height * 8)’
libavif-1.1.1/apps/shared/avifpng.c:248:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:254:24: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:255:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:259:9: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:259:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:264:11: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:265:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:269:12: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:270:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:275:9: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:275:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:280:5: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:455:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:459:9: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:459:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:464:5: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:470:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:477:29: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:478:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:482:59: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:482:32: acquire_memory: allocated here
libavif-1.1.1/apps/shared/avifpng.c:483:9: danger: ‘malloc((long unsigned int)rgb.height * 8)’ leaks here; was allocated at [(22)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/21)
#  481|       }
#  482|       rowPointers = (png_bytep *)malloc(sizeof(png_bytep) * rgb.height);
#  483|->     if (rowPointers == NULL) {
#  484|           fprintf(stderr, "avifPNGRead internal error: memory allocation failure");
#  485|           goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def2]
libavif-1.1.1/apps/shared/avifpng.c:589:9: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(outputFilename, "wb")’
libavif-1.1.1/apps/shared/avifpng.c:588:9: acquire_resource: opened here
libavif-1.1.1/apps/shared/avifpng.c:589:9: danger: ‘fopen(outputFilename, "wb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  587|   
#  588|       f = fopen(outputFilename, "wb");
#  589|->     if (!f) {
#  590|           fprintf(stderr, "Can't open PNG file for write: %s\n", outputFilename);
#  591|           goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
libavif-1.1.1/apps/shared/avifpng.c:589:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(outputFilename, "wb")’
libavif-1.1.1/apps/shared/avifpng.c:588:9: acquire_memory: allocated here
libavif-1.1.1/apps/shared/avifpng.c:589:9: danger: ‘fopen(outputFilename, "wb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  587|   
#  588|       f = fopen(outputFilename, "wb");
#  589|->     if (!f) {
#  590|           fprintf(stderr, "Can't open PNG file for write: %s\n", outputFilename);
#  591|           goto cleanup;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
libavif-1.1.1/apps/shared/avifpng.c:713:9: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc((long unsigned int)*avif.height * 8)’
libavif-1.1.1/apps/shared/avifpng.c:589:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:594:11: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:595:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:599:12: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:600:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:605:9: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:605:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:610:5: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:703:8: branch_false: following ‘false’ branch...
libavif-1.1.1/apps/shared/avifpng.c:712:59: branch_false: ...to here
libavif-1.1.1/apps/shared/avifpng.c:712:32: acquire_memory: allocated here
libavif-1.1.1/apps/shared/avifpng.c:713:9: danger: ‘malloc((long unsigned int)*avif.height * 8)’ leaks here; was allocated at [(12)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/11)
#  711|   
#  712|       rowPointers = (png_bytep *)malloc(sizeof(png_bytep) * avif->height);
#  713|->     if (rowPointers == NULL) {
#  714|           fprintf(stderr, "Error writing PNG: memory allocation failure");
#  715|           goto cleanup;

Scan Properties