openxr-1.1.47-1.fc43

List of Findings

Error: COMPILER_WARNING (CWE-697): [#def1]
OpenXR-SDK-Source-release-1.1.47/redhat-linux-build/src/api_layers/xr_generated_core_validation.cpp: scope_hint: In function ‘XrResult ValidateXrStruct(GenValidUsageXrInstanceInfo*, const std::string&, std::vector<GenValidUsageXrObjectInfo>&, bool, bool, const XrEventDataColocationDiscoveryResultMETA*)’
OpenXR-SDK-Source-release-1.1.47/redhat-linux-build/src/api_layers/xr_generated_core_validation.cpp:50031:43: warning[-Waddress]: the address of ‘XrEventDataColocationDiscoveryResultMETA::buffer’ will never be NULL
#50031 |     if (0 >= value->bufferSize && nullptr != value->buffer) {
#      |                                   ~~~~~~~~^~~~~~~~~~~~~~~~
OpenXR-SDK-Source-release-1.1.47/redhat-linux-build/src/xr_generated_dispatch_table.h:35: included_from: Included from here.
OpenXR-SDK-Source-release-1.1.47/redhat-linux-build/src/api_layers/xr_generated_core_validation.hpp:27: included_from: Included from here.
OpenXR-SDK-Source-release-1.1.47/redhat-linux-build/src/api_layers/xr_generated_core_validation.cpp:26: included_from: Included from here.
OpenXR-SDK-Source-release-1.1.47/redhat-linux-build/include/openxr/openxr.h:9110:33: note: ‘XrEventDataColocationDiscoveryResultMETA::buffer’ declared here
# 9110 |     uint8_t                     buffer[XR_MAX_COLOCATION_DISCOVERY_BUFFER_SIZE_META];
#      |                                 ^~~~~~
#50029|       }
#50030|       // Non-optional array length must be non-zero
#50031|->     if (0 >= value->bufferSize && nullptr != value->buffer) {
#50032|           CoreValidLogMessage(instance_info, "VUID-XrEventDataColocationDiscoveryResultMETA-bufferSize-arraylength",
#50033|                               VALID_USAGE_DEBUG_SEVERITY_ERROR, command_name,

Error: CPPCHECK_WARNING (CWE-562): [#def2]
OpenXR-SDK-Source-release-1.1.47/src/loader/loader_core.cpp:294: error[invalidLifetime]: Using pointer to local variable 'owned_loader_instance' that is out of scope.
#  292|                   dbg_utils_create_info = reinterpret_cast<const XrDebugUtilsMessengerCreateInfoEXT *>(next_header);
#  293|                   XrDebugUtilsMessengerEXT messenger;
#  294|->                 result = LoaderTrampolineCreateDebugUtilsMessengerEXT(loader_instance->GetInstanceHandle(), dbg_utils_create_info,
#  295|                                                                         &messenger);
#  296|                   if (XR_FAILED(result)) {

Error: CPPCHECK_WARNING (CWE-562): [#def3]
OpenXR-SDK-Source-release-1.1.47/src/loader/loader_core.cpp:312: error[invalidLifetime]: Using pointer to local variable 'owned_loader_instance' that is out of scope.
#  310|           LoaderLogger::LogErrorMessage("xrCreateInstance", "xrCreateInstance failed");
#  311|       } else {
#  312|->         *instance = loader_instance->GetInstanceHandle();
#  313|           LoaderLogger::LogVerboseMessage("xrCreateInstance", "Completed loader trampoline");
#  314|       }

Scan Properties

analyzer-version-clippy1.86.0
analyzer-version-cppcheck2.17.1
analyzer-version-gcc15.0.1
analyzer-version-gcc-analyzer15.0.1
analyzer-version-shellcheck0.10.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-199.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250425.124705.g1c7c448.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameopenxr-1.1.47-1.fc43
store-results-to/tmp/tmprp3nm1x8/openxr-1.1.47-1.fc43.tar.xz
time-created2025-04-25 14:39:03
time-finished2025-04-25 14:42:42
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,cppcheck,gcc,clippy,shellcheck' '-o' '/tmp/tmprp3nm1x8/openxr-1.1.47-1.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmprp3nm1x8/openxr-1.1.47-1.fc43.src.rpm'
tool-versioncsmock-3.8.1.20250422.172604.g26bc3d6-1.el9