libnotify-0.8.6-1.fc43

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:575:13: warning[-Wanalyzer-null-argument]: use of NULL ‘desktop’ where non-null expected
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:592:1: enter_function: entry to ‘notify_notification_update_internal’
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:613:12: branch_true: following ‘true’ branch...
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:617:17: branch_true: ...to here
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:618:35: branch_true: following ‘true’ branch (when ‘icon’ is non-NULL)...
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:619:53: branch_true: ...to here
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:618:36: branch_false: following ‘false’ branch...
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:618:17: branch_false: ...to here
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:618:17: release_memory: ‘0’ is NULL
libnotify-0.8.6/redhat-linux-build/../libnotify/notification.c:620:32: call_function: calling ‘try_prepend_snap_desktop’ from ‘notify_notification_update_internal’
#argument 1 of ‘__builtin_strchr’ must be non-null
#  573|   
#  574|           if (ret == NULL && _notify_get_snap_name () != NULL &&
#  575|->             strchr (desktop, G_DIR_SEPARATOR) == NULL) {
#  576|                   ret = g_strdup_printf ("%s_%s", _notify_get_snap_name (), desktop);
#  577|           }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
libnotify-0.8.6/redhat-linux-build/../libnotify/notify.c:283:21: warning[-Wanalyzer-null-argument]: use of NULL ‘<unknown>[1]’ where non-null expected
libnotify-0.8.6/redhat-linux-build/../libnotify/notify.c:569:1: enter_function: entry to ‘_notify_get_proxy’
libnotify-0.8.6/redhat-linux-build/../libnotify/notify.c:574:13: call_function: calling ‘_notify_is_running_in_sandbox’ from ‘_notify_get_proxy’
#  281|                   }
#  282|   
#  283|->                 if (g_str_equal (ns[1], _snap_name)) {
#  284|                           _snap_app = g_strdup (ns[2]);
#  285|                           g_strfreev (ns);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:458:47: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘name’
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:229:1: enter_function: entry to ‘main’
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:314:12: branch_false: following ‘false’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:320:13: branch_false: ...to here
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:320:12: branch_false: following ‘false’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:325:13: branch_false: ...to here
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:331:17: call_function: calling ‘validate_utf8_or_die’ from ‘main’
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:331:17: return_function: returning to ‘main’ from ‘validate_utf8_or_die’
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:334:12: branch_false: following ‘false’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:339:19: branch_false: ...to here
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:354:12: branch_false: following ‘false’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:357:9: branch_false: ...to here
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:362:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:362:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:362:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:362:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:364:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:365:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:366:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:367:9: release_memory: ‘body’ is NULL
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:430:12: branch_true: following ‘true’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:436:32: branch_true: ...to here
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:444:24: branch_true: following ‘true’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:450:28: branch_false: following ‘false’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:454:40: branch_false: ...to here
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:458:28: branch_true: following ‘true’ branch...
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:458:47: branch_true: ...to here
libnotify-0.8.6/redhat-linux-build/../tools/notify-send.c:458:47: danger: dereference of NULL ‘name’
#  456|                           }
#  457|   
#  458|->                         if (*label != '\0' && *name != '\0') {
#  459|                                   notify_notification_add_action (notify,
#  460|                                                                   name,

Scan Properties