xen-4.19.2-2.fc43

List of Findings

Error: SHELLCHECK_WARNING (CWE-571): [#def1]
/etc/xen/scripts/block:101:13: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   99|       if [ -e "$file" ]
#  100|       then
#  101|->       local d=$(device_major_minor "$file")
#  102|   
#  103|         # checking for $d in $devmm is best through the [[...]] bashism

Error: SHELLCHECK_WARNING (CWE-571): [#def2]
/etc/xen/scripts/block:130:17: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  128|             fi
#  129|           else
#  130|->           local m=$(xenstore_read_default "$base_path/$dom/$dev/mode" "")
#  131|             m=$(canonicalise_mode "$m")
#  132|   

Error: SHELLCHECK_WARNING (CWE-571): [#def3]
/etc/xen/scripts/block:158:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  156|   {
#  157|     local dev="$1"
#  158|->   local mode=$(canonicalise_mode "$2")
#  159|     local type="device"
#  160|     local result

Error: SHELLCHECK_WARNING (CWE-457): [#def4]
/etc/xen/scripts/block:250:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#  248|   fi
#  249|   
#  250|-> case "$command" in
#  251|     add)
#  252|       phys=$(xenstore_read_default "$XENBUS_PATH/physical-device" 'MISSING')

Error: SHELLCHECK_WARNING (CWE-563): [#def5]
/etc/xen/scripts/block:261:5: warning[SC2034]: FRONTEND_UUID appears unused. Verify use (or export if used externally).
#  259|   
#  260|       FRONTEND_ID=$(xenstore_read "$XENBUS_PATH/frontend-id")
#  261|->     FRONTEND_UUID=$(xenstore_read_default \
#  262|               "/local/domain/$FRONTEND_ID/vm" 'unknown')
#  263|   

Error: SHELLCHECK_WARNING (CWE-758): [#def6]
/etc/xen/scripts/block-common.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> #
#    2|   # Copyright (c) 2005 XenSource Ltd.
#    3|   #

Error: SHELLCHECK_WARNING (CWE-457): [#def7]
/etc/xen/scripts/block-common.sh:23:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   21|   findCommand "$@"
#   22|   
#   23|-> if [ "$command" != "add" ] &&
#   24|      [ "$command" != "remove" ]
#   25|   then

Error: SHELLCHECK_WARNING (CWE-571): [#def8]
/etc/xen/scripts/block-common.sh:111:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  109|     # VM is the same as FRONTEND_UUID, because that way the 'sharing' will be
#  110|     # allowed.
#  111|->   local othervm=$(xenstore_read_default "/local/domain/$otherdom/vm"         \
#  112|                     "$FRONTEND_UUID")
#  113|     local target=$(xenstore_read_default  "/local/domain/$FRONTEND_ID/target"   \

Error: SHELLCHECK_WARNING (CWE-571): [#def9]
/etc/xen/scripts/block-common.sh:113:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  111|     local othervm=$(xenstore_read_default "/local/domain/$otherdom/vm"         \
#  112|                     "$FRONTEND_UUID")
#  113|->   local target=$(xenstore_read_default  "/local/domain/$FRONTEND_ID/target"   \
#  114|                    "-1")
#  115|     local targetvm=$(xenstore_read_default "/local/domain/$target/vm" "No Target")

Error: SHELLCHECK_WARNING (CWE-571): [#def10]
/etc/xen/scripts/block-common.sh:115:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  113|     local target=$(xenstore_read_default  "/local/domain/$FRONTEND_ID/target"   \
#  114|                    "-1")
#  115|->   local targetvm=$(xenstore_read_default "/local/domain/$target/vm" "No Target")
#  116|     local otarget=$(xenstore_read_default  "/local/domain/$otherdom/target"   \
#  117|                    "-1")

Error: SHELLCHECK_WARNING (CWE-571): [#def11]
/etc/xen/scripts/block-common.sh:116:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  114|                    "-1")
#  115|     local targetvm=$(xenstore_read_default "/local/domain/$target/vm" "No Target")
#  116|->   local otarget=$(xenstore_read_default  "/local/domain/$otherdom/target"   \
#  117|                    "-1")
#  118|     local otvm=$(xenstore_read_default  "/local/domain/$otarget/vm"   \

Error: SHELLCHECK_WARNING (CWE-571): [#def12]
/etc/xen/scripts/block-common.sh:118:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  116|     local otarget=$(xenstore_read_default  "/local/domain/$otherdom/target"   \
#  117|                    "-1")
#  118|->   local otvm=$(xenstore_read_default  "/local/domain/$otarget/vm"   \
#  119|                    "No Other Target")
#  120|   

Error: SHELLCHECK_WARNING (CWE-477): [#def13]
/etc/xen/scripts/block-common.sh:123:35: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#  121|     local frontend_uuid=${FRONTEND_UUID%-1}
#  122|     
#  123|->   [ "$frontend_uuid" = "$othervm" -o "$targetvm" = "$othervm" -o \
#  124|       "$frontend_uuid" = "$otvm" -o "$targetvm" = "$otvm" ]
#  125|   }

Error: SHELLCHECK_WARNING (CWE-477): [#def14]
/etc/xen/scripts/block-common.sh:123:63: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#  121|     local frontend_uuid=${FRONTEND_UUID%-1}
#  122|     
#  123|->   [ "$frontend_uuid" = "$othervm" -o "$targetvm" = "$othervm" -o \
#  124|       "$frontend_uuid" = "$otvm" -o "$targetvm" = "$otvm" ]
#  125|   }

Error: SHELLCHECK_WARNING (CWE-477): [#def15]
/etc/xen/scripts/block-common.sh:124:32: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#  122|     
#  123|     [ "$frontend_uuid" = "$othervm" -o "$targetvm" = "$othervm" -o \
#  124|->     "$frontend_uuid" = "$otvm" -o "$targetvm" = "$otvm" ]
#  125|   }
#  126|   

Error: SHELLCHECK_WARNING (CWE-140): [#def16]
/etc/xen/scripts/block-drbd-probe:34:26: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#   32|   {
#   33|       local drbd_dev=$1
#   34|->     local drbd_dev_list=($(drbdadm sh-dev all))
#   35|       local drbd_res_list=($(drbdadm sh-resource all))
#   36|       local temp_drbd_dev temp_drbd_res

Error: SHELLCHECK_WARNING (CWE-140): [#def17]
/etc/xen/scripts/block-drbd-probe:35:26: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#   33|       local drbd_dev=$1
#   34|       local drbd_dev_list=($(drbdadm sh-dev all))
#   35|->     local drbd_res_list=($(drbdadm sh-resource all))
#   36|       local temp_drbd_dev temp_drbd_res
#   37|       local found=0

Error: SHELLCHECK_WARNING (CWE-88): [#def18]
/etc/xen/scripts/block-drbd-probe:39:26: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   37|       local found=0
#   38|   
#   39|->     for temp_drbd_dev in ${drbd_dev_list[@]}; do
#   40|           if [[ "$temp_drbd_dev" == "$drbd_dev" ]]; then
#   41|               found=1

Error: SHELLCHECK_WARNING (CWE-88): [#def19]
/etc/xen/scripts/block-drbd-probe:50:26: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#   48|       fi
#   49|   
#   50|->     for temp_drbd_res in ${drbd_res_list[@]}; do
#   51|           temp_drbd_dev=$(drbdadm sh-dev $temp_drbd_res)
#   52|           if [[ "$temp_drbd_dev" == "$drbd_dev" ]]; then

Error: SHELLCHECK_WARNING (CWE-140): [#def20]
/etc/xen/scripts/block-dummy:39:13: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#   37|   parse_target()
#   38|   {
#   39|->     params=($(echo "$1" | tr ":" "\n"))
#   40|   
#   41|       type=${params[0]}

Error: SHELLCHECK_WARNING (CWE-457): [#def21]
/etc/xen/scripts/block-enbd:13:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   11|   . "$dir/block-common.sh"
#   12|   
#   13|-> case "$command" in
#   14|     add)
#   15|       for dev in /dev/nd*; do

Error: SHELLCHECK_WARNING (CWE-149): [#def22]
/etc/xen/scripts/block-iscsi:31:26: warning[SC2027]: The surrounding quotes actually unquote this. Remove or escape them.
#   29|   remove_label()
#   30|   {
#   31|->     echo $1 | sed "s/^\("$2"\)//"
#   32|   }
#   33|   

Error: SHELLCHECK_WARNING: [#def23]
/etc/xen/scripts/block-iscsi:76:18: error[SC2144]: -e doesn't work with globs. Use a for loop.
#   74|   {
#   75|       count=0
#   76|->     while [ ! -e /dev/disk/by-path/*"$iqn"-lun-0 ]; do
#   77|           sleep 1
#   78|           count=`expr $count + 1`

Error: SHELLCHECK_WARNING (CWE-398): [#def24]
/etc/xen/scripts/block-iscsi:79:20: warning[SC2050]: This expression is constant. Did you forget the $ on a variable?
#   77|           sleep 1
#   78|           count=`expr $count + 1`
#   79|->         if [ count = 100 ]; then
#   80|               # 10s timeout while waiting for iSCSI disk to settle
#   81|               fatal "timeout waiting for iSCSI disk to settle"

Error: SHELLCHECK_WARNING (CWE-457): [#def25]
/etc/xen/scripts/block-nbd:13:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   11|   . "$dir/block-common.sh"
#   12|   
#   13|-> case "$command" in
#   14|     add)
#   15|       for dev in /dev/nbd*; do

Error: SHELLCHECK_WARNING (CWE-149): [#def26]
/etc/xen/scripts/block-tap:36:26: warning[SC2027]: The surrounding quotes actually unquote this. Remove or escape them.
#   34|   remove_label()
#   35|   {
#   36|->     echo $1 | sed "s/^\("$2"\)//"
#   37|   }
#   38|   

Error: SHELLCHECK_WARNING (CWE-140): [#def27]
/etc/xen/scripts/block-tap:50:13: warning[SC2207]: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
#   48|   parse_target()
#   49|   {
#   50|->     params=($(echo "$1" | tr ":" "\n"))
#   51|   
#   52|       type=${params[0]}

Error: SHELLCHECK_WARNING (CWE-156): [#def28]
/etc/xen/scripts/block-tap:119:7: warning[SC2046]: Quote this to prevent word splitting.
#  117|   # be freed when there is a single one left.
#  118|   tap_shared() {
#  119|->     [ $( count_using "$file" ) -gt 1 ]
#  120|   }
#  121|   

Error: SHELLCHECK_WARNING (CWE-571): [#def29]
/etc/xen/scripts/block-tap:132:19: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  130|       for dom in $(xenstore-list "$base_path") ; do
#  131|           for dev in $(xenstore-list "$base_path/$dom") ; do
#  132|->             local f=$(xenstore_read_default "$base_path/$dom/$dev/params" "")
#  133|               f=$(echo "$f" | cut -d ":" -f 2)
#  134|   

Error: SHELLCHECK_WARNING (CWE-571): [#def30]
/etc/xen/scripts/block-tap:142:27: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  140|                       fi
#  141|                   else
#  142|->                     local m=$(xenstore_read_default "$base_path/$dom/$dev/mode"
#  143|                                                       "")
#  144|                       m=$(canonicalise_mode "$m")

Error: SHELLCHECK_WARNING: [#def31]
/etc/xen/scripts/block-tap:143:53: error[SC2286]: This empty string is interpreted as a command name. Double check syntax (or use 'true' as a no-op).
#  141|                   else
#  142|                       local m=$(xenstore_read_default "$base_path/$dom/$dev/mode"
#  143|->                                                     "")
#  144|                       m=$(canonicalise_mode "$m")
#  145|   

Error: SHELLCHECK_WARNING (CWE-457): [#def32]
/etc/xen/scripts/block-tap:173:30: warning[SC2154]: _lockfd is referenced but not assigned.
#  171|       # Ensure it is closed before running tap-ctl spawn, which needs to be
#  172|       # done in a subshell to continue holding the lock in the parent.
#  173|->     if ! pid=$( ( eval "exec $_lockfd>&-" ; tap-ctl spawn ) ) ; then
#  174|           tap-ctl free -m "$minor"
#  175|           fatal "Could not spawn tapdisk for $minor"

Error: SHELLCHECK_WARNING (CWE-563): [#def33]
/etc/xen/scripts/block-tap:267:1: warning[SC2034]: FRONTEND_UUID appears unused. Verify use (or export if used externally).
#  265|   # needed for same_vm
#  266|   FRONTEND_ID=$(xenstore_read "$XENBUS_PATH/frontend-id")
#  267|-> FRONTEND_UUID=$(xenstore_read_default \
#  268|                       "/local/domain/$FRONTEND_ID/vm" 'unknown')
#  269|   

Error: SHELLCHECK_WARNING (CWE-457): [#def34]
/etc/xen/scripts/colo-proxy-setup:9:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#    7|   findCommand "$@"
#    8|   
#    9|-> if [ "$command" != "setup" -a  "$command" != "teardown" ]
#   10|   then
#   11|       echo "Invalid command: $command"

Error: SHELLCHECK_WARNING (CWE-477): [#def35]
/etc/xen/scripts/colo-proxy-setup:9:28: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#    7|   findCommand "$@"
#    8|   
#    9|-> if [ "$command" != "setup" -a  "$command" != "teardown" ]
#   10|   then
#   11|       echo "Invalid command: $command"

Error: SHELLCHECK_WARNING (CWE-477): [#def36]
/etc/xen/scripts/colo-proxy-setup:26:27: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#   24|   forwardbr="colobr0"
#   25|   
#   26|-> if [ "$mode" != "primary" -a "$mode" != "secondary" ]
#   27|   then
#   28|       echo "Invalid mode: $mode"

Error: SHELLCHECK_WARNING (CWE-477): [#def37]
/etc/xen/scripts/external-device-migrate:71:23: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   69|   	done
#   70|   
#   71|-> 	if [ "$step"    = "" -o \
#   72|   	     "$host"    = "" -o \
#   73|   	     "$typ"     = "" -o \

Error: SHELLCHECK_WARNING (CWE-477): [#def38]
/etc/xen/scripts/external-device-migrate:72:23: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   70|   
#   71|   	if [ "$step"    = "" -o \
#   72|-> 	     "$host"    = "" -o \
#   73|   	     "$typ"     = "" -o \
#   74|   	     "$domname" = "" ]; then

Error: SHELLCHECK_WARNING (CWE-477): [#def39]
/etc/xen/scripts/external-device-migrate:73:23: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   71|   	if [ "$step"    = "" -o \
#   72|   	     "$host"    = "" -o \
#   73|-> 	     "$typ"     = "" -o \
#   74|   	     "$domname" = "" ]; then
#   75|   	 	echo "Error: Parameter(s) missing (-step/-host/-type/-domname)" 1>&2

Error: SHELLCHECK_WARNING (CWE-569): [#def40]
/etc/xen/scripts/external-device-migrate:90:35: warning[SC2048]: Use "$@" (with quotes) to prevent whitespace problems.
#   88|   	if [ "$recover" = "1" ]; then
#   89|   		func="$typ"_recover
#   90|-> 		eval $func $host $domname $step $*
#   91|   	else
#   92|   		func="$typ"_migration_step

Error: SHELLCHECK_WARNING (CWE-569): [#def41]
/etc/xen/scripts/external-device-migrate:93:35: warning[SC2048]: Use "$@" (with quotes) to prevent whitespace problems.
#   91|   	else
#   92|   		func="$typ"_migration_step
#   93|-> 		eval $func $host $domname $step $*
#   94|   	fi
#   95|   }

Error: SHELLCHECK_WARNING (CWE-758): [#def42]
/etc/xen/scripts/hotplugpath.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> sbindir="/usr/sbin"
#    2|   bindir="/usr/bin"
#    3|   LIBEXEC="/usr/libexec/xen"

Error: SHELLCHECK_WARNING (CWE-563): [#def43]
/etc/xen/scripts/hotplugpath.sh:1:1: warning[SC2034]: sbindir appears unused. Verify use (or export if used externally).
#    1|-> sbindir="/usr/sbin"
#    2|   bindir="/usr/bin"
#    3|   LIBEXEC="/usr/libexec/xen"

Error: SHELLCHECK_WARNING (CWE-563): [#def44]
/etc/xen/scripts/hotplugpath.sh:2:1: warning[SC2034]: bindir appears unused. Verify use (or export if used externally).
#    1|   sbindir="/usr/sbin"
#    2|-> bindir="/usr/bin"
#    3|   LIBEXEC="/usr/libexec/xen"
#    4|   LIBEXEC_BIN="/usr/libexec/xen/bin"

Error: SHELLCHECK_WARNING (CWE-563): [#def45]
/etc/xen/scripts/hotplugpath.sh:3:1: warning[SC2034]: LIBEXEC appears unused. Verify use (or export if used externally).
#    1|   sbindir="/usr/sbin"
#    2|   bindir="/usr/bin"
#    3|-> LIBEXEC="/usr/libexec/xen"
#    4|   LIBEXEC_BIN="/usr/libexec/xen/bin"
#    5|   libdir="/usr/lib64"

Error: SHELLCHECK_WARNING (CWE-563): [#def46]
/etc/xen/scripts/hotplugpath.sh:4:1: warning[SC2034]: LIBEXEC_BIN appears unused. Verify use (or export if used externally).
#    2|   bindir="/usr/bin"
#    3|   LIBEXEC="/usr/libexec/xen"
#    4|-> LIBEXEC_BIN="/usr/libexec/xen/bin"
#    5|   libdir="/usr/lib64"
#    6|   SHAREDIR="/usr/share"

Error: SHELLCHECK_WARNING (CWE-563): [#def47]
/etc/xen/scripts/hotplugpath.sh:5:1: warning[SC2034]: libdir appears unused. Verify use (or export if used externally).
#    3|   LIBEXEC="/usr/libexec/xen"
#    4|   LIBEXEC_BIN="/usr/libexec/xen/bin"
#    5|-> libdir="/usr/lib64"
#    6|   SHAREDIR="/usr/share"
#    7|   XENFIRMWAREDIR="/usr/libexec/xen/boot"

Error: SHELLCHECK_WARNING (CWE-563): [#def48]
/etc/xen/scripts/hotplugpath.sh:6:1: warning[SC2034]: SHAREDIR appears unused. Verify use (or export if used externally).
#    4|   LIBEXEC_BIN="/usr/libexec/xen/bin"
#    5|   libdir="/usr/lib64"
#    6|-> SHAREDIR="/usr/share"
#    7|   XENFIRMWAREDIR="/usr/libexec/xen/boot"
#    8|   XEN_CONFIG_DIR="/etc/xen"

Error: SHELLCHECK_WARNING (CWE-563): [#def49]
/etc/xen/scripts/hotplugpath.sh:7:1: warning[SC2034]: XENFIRMWAREDIR appears unused. Verify use (or export if used externally).
#    5|   libdir="/usr/lib64"
#    6|   SHAREDIR="/usr/share"
#    7|-> XENFIRMWAREDIR="/usr/libexec/xen/boot"
#    8|   XEN_CONFIG_DIR="/etc/xen"
#    9|   XEN_SCRIPT_DIR="/etc/xen/scripts"

Error: SHELLCHECK_WARNING (CWE-563): [#def50]
/etc/xen/scripts/hotplugpath.sh:8:1: warning[SC2034]: XEN_CONFIG_DIR appears unused. Verify use (or export if used externally).
#    6|   SHAREDIR="/usr/share"
#    7|   XENFIRMWAREDIR="/usr/libexec/xen/boot"
#    8|-> XEN_CONFIG_DIR="/etc/xen"
#    9|   XEN_SCRIPT_DIR="/etc/xen/scripts"
#   10|   XEN_LOCK_DIR="/var/lock"

Error: SHELLCHECK_WARNING (CWE-563): [#def51]
/etc/xen/scripts/hotplugpath.sh:9:1: warning[SC2034]: XEN_SCRIPT_DIR appears unused. Verify use (or export if used externally).
#    7|   XENFIRMWAREDIR="/usr/libexec/xen/boot"
#    8|   XEN_CONFIG_DIR="/etc/xen"
#    9|-> XEN_SCRIPT_DIR="/etc/xen/scripts"
#   10|   XEN_LOCK_DIR="/var/lock"
#   11|   XEN_RUN_DIR="/var/run/xen"

Error: SHELLCHECK_WARNING (CWE-563): [#def52]
/etc/xen/scripts/hotplugpath.sh:10:1: warning[SC2034]: XEN_LOCK_DIR appears unused. Verify use (or export if used externally).
#    8|   XEN_CONFIG_DIR="/etc/xen"
#    9|   XEN_SCRIPT_DIR="/etc/xen/scripts"
#   10|-> XEN_LOCK_DIR="/var/lock"
#   11|   XEN_RUN_DIR="/var/run/xen"
#   12|   XEN_PAGING_DIR="/var/lib/xen/xenpaging"

Error: SHELLCHECK_WARNING (CWE-563): [#def53]
/etc/xen/scripts/hotplugpath.sh:11:1: warning[SC2034]: XEN_RUN_DIR appears unused. Verify use (or export if used externally).
#    9|   XEN_SCRIPT_DIR="/etc/xen/scripts"
#   10|   XEN_LOCK_DIR="/var/lock"
#   11|-> XEN_RUN_DIR="/var/run/xen"
#   12|   XEN_PAGING_DIR="/var/lib/xen/xenpaging"
#   13|   XEN_DUMP_DIR="/var/lib/xen/dump"

Error: SHELLCHECK_WARNING (CWE-563): [#def54]
/etc/xen/scripts/hotplugpath.sh:12:1: warning[SC2034]: XEN_PAGING_DIR appears unused. Verify use (or export if used externally).
#   10|   XEN_LOCK_DIR="/var/lock"
#   11|   XEN_RUN_DIR="/var/run/xen"
#   12|-> XEN_PAGING_DIR="/var/lib/xen/xenpaging"
#   13|   XEN_DUMP_DIR="/var/lib/xen/dump"
#   14|   XEN_LOG_DIR="/var/log/xen"

Error: SHELLCHECK_WARNING (CWE-563): [#def55]
/etc/xen/scripts/hotplugpath.sh:13:1: warning[SC2034]: XEN_DUMP_DIR appears unused. Verify use (or export if used externally).
#   11|   XEN_RUN_DIR="/var/run/xen"
#   12|   XEN_PAGING_DIR="/var/lib/xen/xenpaging"
#   13|-> XEN_DUMP_DIR="/var/lib/xen/dump"
#   14|   XEN_LOG_DIR="/var/log/xen"
#   15|   XEN_LIB_DIR="/var/lib/xen"

Error: SHELLCHECK_WARNING (CWE-563): [#def56]
/etc/xen/scripts/hotplugpath.sh:14:1: warning[SC2034]: XEN_LOG_DIR appears unused. Verify use (or export if used externally).
#   12|   XEN_PAGING_DIR="/var/lib/xen/xenpaging"
#   13|   XEN_DUMP_DIR="/var/lib/xen/dump"
#   14|-> XEN_LOG_DIR="/var/log/xen"
#   15|   XEN_LIB_DIR="/var/lib/xen"
#   16|   XEN_RUN_STORED="/var/run/xenstored"

Error: SHELLCHECK_WARNING (CWE-563): [#def57]
/etc/xen/scripts/hotplugpath.sh:15:1: warning[SC2034]: XEN_LIB_DIR appears unused. Verify use (or export if used externally).
#   13|   XEN_DUMP_DIR="/var/lib/xen/dump"
#   14|   XEN_LOG_DIR="/var/log/xen"
#   15|-> XEN_LIB_DIR="/var/lib/xen"
#   16|   XEN_RUN_STORED="/var/run/xenstored"

Error: SHELLCHECK_WARNING (CWE-563): [#def58]
/etc/xen/scripts/hotplugpath.sh:16:1: warning[SC2034]: XEN_RUN_STORED appears unused. Verify use (or export if used externally).
#   14|   XEN_LOG_DIR="/var/log/xen"
#   15|   XEN_LIB_DIR="/var/lib/xen"
#   16|-> XEN_RUN_STORED="/var/run/xenstored"

Error: SHELLCHECK_WARNING (CWE-138): [#def59]
/etc/xen/scripts/launch-xenstore:42:25: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   40|   	# Exit if we timed out
#   41|   	if ! [ $time -lt $timeout ] ; then
#   42|-> 		echo "Could not start $@"
#   43|   		return 1
#   44|   	fi

Error: SHELLCHECK_WARNING (CWE-758): [#def60]
/etc/xen/scripts/locking.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> #
#    2|   # Copyright (c) 2005 XenSource Ltd.
#    3|   # Copyright (c) 2007 Red Hat

Error: SHELLCHECK_WARNING (CWE-477): [#def61]
/etc/xen/scripts/locking.sh:28:32: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   26|       local i
#   27|       for ((i = 0; i < ${#_lockdict}; i++))
#   28|->     do [ -z "${_lockdict[$i]}" -o "${_lockdict[$i]}" = "$1" ] && break
#   29|       done
#   30|       _lockdict[$i]="$1"

Error: SHELLCHECK_WARNING (CWE-758): [#def62]
/etc/xen/scripts/logging.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> #
#    2|   # Copyright (c) 2005 XenSource Ltd.
#    3|   #

Error: SHELLCHECK_WARNING (CWE-138): [#def63]
/etc/xen/scripts/logging.sh:20:55: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   18|     local level="$1"
#   19|     shift
#   20|->   logger -p "daemon.$level" -- "$0:" "$@" || echo "$0 $@" >&2
#   21|   }

Error: SHELLCHECK_WARNING (CWE-457): [#def64]
/etc/xen/scripts/remus-netbuf-setup:82:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   80|   findCommand "$@"
#   81|   
#   82|-> if [ "$command" != "setup" -a  "$command" != "teardown" ]
#   83|   then
#   84|     echo "Invalid command: $command"

Error: SHELLCHECK_WARNING (CWE-477): [#def65]
/etc/xen/scripts/remus-netbuf-setup:82:28: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#   80|   findCommand "$@"
#   81|   
#   82|-> if [ "$command" != "setup" -a  "$command" != "teardown" ]
#   83|   then
#   84|     echo "Invalid command: $command"

Error: SHELLCHECK_WARNING (CWE-571): [#def66]
/etc/xen/scripts/remus-netbuf-setup:121:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  119|   #return 0 if the ifb is free
#  120|   check_ifb() {
#  121|->     local installed=`nl-qdisc-list -d $1`
#  122|       [ -n "$installed" ] && return 1
#  123|   

Error: SHELLCHECK_WARNING (CWE-571): [#def67]
/etc/xen/scripts/remus-netbuf-setup:132:19: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  130|               local path="/libxl/$domid/remus/netbuf/$devid/ifb"
#  131|               xenstore-exists $path || continue
#  132|->             local ifb=`xenstore-read "$path" 2>/dev/null || true`
#  133|               [ "$ifb" = "$1" ] && return 1
#  134|           done

Error: SHELLCHECK_WARNING (CWE-571): [#def68]
/etc/xen/scripts/remus-netbuf-setup:200:15: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  198|       #up freeing another domain's allocated IFB inside the if loop.
#  199|       xenstore-exists "$XENBUS_PATH/ifb" && \
#  200|->         local ifb2=`xenstore-read "$XENBUS_PATH/ifb" 2>/dev/null || true`
#  201|   
#  202|       if [[ "$ifb2" && "$ifb2" == "$ifb" ]]; then

Error: SHELLCHECK_WARNING (CWE-457): [#def69]
/etc/xen/scripts/vif-bridge:79:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   77|   fi
#   78|   
#   79|-> case "$command" in
#   80|       add|online)
#   81|           setup_virtual_bridge_port "$dev"

Error: SHELLCHECK_WARNING (CWE-457): [#def70]
/etc/xen/scripts/vif-bridge:81:36: warning[SC2154]: dev is referenced but not assigned.
#   79|   case "$command" in
#   80|       add|online)
#   81|->         setup_virtual_bridge_port "$dev"
#   82|           set_mtu "$bridge" "$dev" "$type_if"
#   83|           add_to_bridge "$bridge" "$dev"

Error: SHELLCHECK_WARNING (CWE-457): [#def71]
/etc/xen/scripts/vif-bridge:82:35: warning[SC2154]: type_if is referenced but not assigned.
#   80|       add|online)
#   81|           setup_virtual_bridge_port "$dev"
#   82|->         set_mtu "$bridge" "$dev" "$type_if"
#   83|           add_to_bridge "$bridge" "$dev"
#   84|           ;;

Error: SHELLCHECK_WARNING (CWE-477): [#def72]
/etc/xen/scripts/vif-bridge:95:23: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#   93|   
#   94|   log debug "Successful vif-bridge $command for $dev, bridge $bridge."
#   95|-> if [ "$type_if" = vif -a "$command" = "online" ]
#   96|   then
#   97|     success

Error: SHELLCHECK_WARNING (CWE-758): [#def73]
/etc/xen/scripts/vif-common.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> #
#    2|   # Copyright (c) 2005 XenSource Ltd.
#    3|   #

Error: SHELLCHECK_WARNING (CWE-457): [#def74]
/etc/xen/scripts/vif-common.sh:24:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   22|   findCommand "$@"
#   23|   
#   24|-> if [ "$command" != "online" ]  &&
#   25|      [ "$command" != "offline" ] &&
#   26|      [ "$command" != "add" ]     &&

Error: SHELLCHECK_WARNING (CWE-457): [#def75]
/etc/xen/scripts/vif-common.sh:47:13: warning[SC2154]: vif is referenced but not assigned.
#   45|   case "$type_if" in
#   46|       vif)
#   47|->         dev=$vif
#   48|           ;;
#   49|       tap)

Error: SHELLCHECK_WARNING: [#def76]
/etc/xen/scripts/vif-common.sh:141:10: warning[SC2319]: This $? refers to a condition, not a command. Assign to a variable to avoid it being overwritten.
#  139|   	    # If we succeed, then -w is supported; don't check again
#  140|   	    IPTABLES_WAIT_RUNE_CHECKED=true
#  141|-> 	elif [[ $? == 2 ]] ; then
#  142|   	    iptables -L -n >& /dev/null
#  143|   	    if [[ $? != 2 ]] ; then

Error: SHELLCHECK_WARNING (CWE-477): [#def77]
/etc/xen/scripts/vif-common.sh:157:31: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#  155|   frob_iptable()
#  156|   {
#  157|->   if [ "$command" == "online" -o "$command" == "add" ]
#  158|     then
#  159|       local c="-I"

Error: SHELLCHECK_WARNING (CWE-477): [#def78]
/etc/xen/scripts/vif-common.sh:169:34: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#  167|       -j ACCEPT 2>/dev/null
#  168|   
#  169|->   if [ \( "$command" == "online" -o "$command" == "add" \) -a $? -ne 0 ]
#  170|     then
#  171|       log err "iptables setup failed. This may affect guest networking."

Error: SHELLCHECK_WARNING (CWE-477): [#def79]
/etc/xen/scripts/vif-common.sh:169:60: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#  167|       -j ACCEPT 2>/dev/null
#  168|   
#  169|->   if [ \( "$command" == "online" -o "$command" == "add" \) -a $? -ne 0 ]
#  170|     then
#  171|       log err "iptables setup failed. This may affect guest networking."

Error: SHELLCHECK_WARNING (CWE-571): [#def80]
/etc/xen/scripts/vif-common.sh:238:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  236|   {
#  237|     local nd=${netdev:-eth0}
#  238|->   local result=$(ip_of "$nd")
#  239|     if [ -z "$result" ]
#  240|     then

Error: SHELLCHECK_WARNING (CWE-156): [#def81]
/etc/xen/scripts/vif-nat:64:8: warning[SC2046]: Quote this to prevent word splitting.
#   62|   routing_ip()
#   63|   {
#   64|->   echo $(echo $1 | awk -F. '{print $1"."$2"."$3"."$4 + 127}')
#   65|   }
#   66|   

Error: SHELLCHECK_WARNING (CWE-571): [#def82]
/etc/xen/scripts/vif-nat:96:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   94|   dhcparg_remove_entry()
#   95|   {
#   96|->   local tmpfile=$(mktemp)
#   97|     sed -e "s/${dev} //" "$dhcpd_arg_file" >"$tmpfile"
#   98|     if ! diff "$tmpfile" "$dhcpd_arg_file" >/dev/null

Error: SHELLCHECK_WARNING (CWE-457): [#def83]
/etc/xen/scripts/vif-nat:97:13: warning[SC2154]: dev is referenced but not assigned.
#   95|   {
#   96|     local tmpfile=$(mktemp)
#   97|->   sed -e "s/${dev} //" "$dhcpd_arg_file" >"$tmpfile"
#   98|     if ! diff "$tmpfile" "$dhcpd_arg_file" >/dev/null
#   99|     then

Error: SHELLCHECK_WARNING (CWE-571): [#def84]
/etc/xen/scripts/vif-nat:108:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  106|   {
#  107|     dhcparg_remove_entry
#  108|->   local tmpfile=$(mktemp)
#  109|     # handle Red Hat, SUSE, and Debian styles, with or without quotes
#  110|     sed -e 's/^DHCPDARGS="*\([^"]*\)"*/DHCPDARGS="\1'"${dev} "'"/' \

Error: SHELLCHECK_WARNING (CWE-571): [#def85]
/etc/xen/scripts/vif-nat:121:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  119|   dhcp_remove_entry()
#  120|   {
#  121|->   local tmpfile=$(mktemp)
#  122|     grep -v "host $hostname" "$dhcpd_conf_file" >"$tmpfile"
#  123|     if ! diff "$tmpfile" "$dhcpd_conf_file" >/dev/null

Error: SHELLCHECK_WARNING (CWE-457): [#def86]
/etc/xen/scripts/vif-nat:159:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#  157|   
#  158|   
#  159|-> case "$command" in
#  160|       online)
#  161|           if ip route | grep -q "dev ${dev}"

Error: SHELLCHECK_WARNING (CWE-571): [#def87]
/etc/xen/scripts/vif-openvswitch:49:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   47|   openvswitch_external_id_all() {
#   48|       local dev=$1
#   49|->     local frontend_id=$(xenstore_read "$XENBUS_PATH/frontend-id")
#   50|       local vm_path=$(xenstore_read "/local/domain/${frontend_id}/vm")
#   51|       local name=$(xenstore_read "${vm_path}/name")

Error: SHELLCHECK_WARNING (CWE-571): [#def88]
/etc/xen/scripts/vif-openvswitch:50:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   48|       local dev=$1
#   49|       local frontend_id=$(xenstore_read "$XENBUS_PATH/frontend-id")
#   50|->     local vm_path=$(xenstore_read "/local/domain/${frontend_id}/vm")
#   51|       local name=$(xenstore_read "${vm_path}/name")
#   52|       openvswitch_external_id $dev "xen-vm-name" "$name"

Error: SHELLCHECK_WARNING (CWE-571): [#def89]
/etc/xen/scripts/vif-openvswitch:51:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   49|       local frontend_id=$(xenstore_read "$XENBUS_PATH/frontend-id")
#   50|       local vm_path=$(xenstore_read "/local/domain/${frontend_id}/vm")
#   51|->     local name=$(xenstore_read "${vm_path}/name")
#   52|       openvswitch_external_id $dev "xen-vm-name" "$name"
#   53|       local uuid=$(xenstore_read "${vm_path}/uuid")

Error: SHELLCHECK_WARNING (CWE-571): [#def90]
/etc/xen/scripts/vif-openvswitch:53:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   51|       local name=$(xenstore_read "${vm_path}/name")
#   52|       openvswitch_external_id $dev "xen-vm-name" "$name"
#   53|->     local uuid=$(xenstore_read "${vm_path}/uuid")
#   54|       openvswitch_external_id $dev "xen-vm-uuid" "$uuid"
#   55|       local mac=$(xenstore_read "$XENBUS_PATH/mac")

Error: SHELLCHECK_WARNING (CWE-571): [#def91]
/etc/xen/scripts/vif-openvswitch:55:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   53|       local uuid=$(xenstore_read "${vm_path}/uuid")
#   54|       openvswitch_external_id $dev "xen-vm-uuid" "$uuid"
#   55|->     local mac=$(xenstore_read "$XENBUS_PATH/mac")
#   56|       openvswitch_external_id $dev "attached-mac" "$mac"
#   57|   }

Error: SHELLCHECK_WARNING (CWE-571): [#def92]
/etc/xen/scripts/vif-openvswitch:61:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   59|   add_to_openvswitch () {
#   60|       local dev=$1
#   61|->     local bridge="$(xenstore_read_default "$XENBUS_PATH/bridge" "$bridge")"
#   62|       local tag trunk
#   63|   

Error: SHELLCHECK_WARNING (CWE-571): [#def93]
/etc/xen/scripts/vif-openvswitch:80:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   78|       fi
#   79|   
#   80|->     local vif_details="$(openvswitch_external_id_all $dev)"
#   81|   
#   82|       do_or_die ovs-vsctl --timeout=30 \

Error: SHELLCHECK_WARNING (CWE-457): [#def94]
/etc/xen/scripts/vif-openvswitch:88:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   86|   }
#   87|   
#   88|-> case "$command" in
#   89|       add|online)
#   90|           check_tools

Error: SHELLCHECK_WARNING (CWE-457): [#def95]
/etc/xen/scripts/vif-openvswitch:102:7: warning[SC2154]: type_if is referenced but not assigned.
#  100|   esac
#  101|   
#  102|-> if [ "$type_if" = vif ]; then
#  103|       handle_iptable
#  104|   fi

Error: SHELLCHECK_WARNING (CWE-477): [#def96]
/etc/xen/scripts/vif-openvswitch:107:23: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#  105|   
#  106|   log debug "Successful vif-openvswitch $command for $dev."
#  107|-> if [ "$type_if" = vif -a "$command" = "online" ]; then
#  108|       success
#  109|   fi

Error: SHELLCHECK_WARNING (CWE-457): [#def97]
/etc/xen/scripts/vif-route:24:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   22|   main_ip=$(dom0_ip)
#   23|   
#   24|-> case "${command}" in
#   25|       add|online)
#   26|           ifconfig ${dev} ${main_ip} netmask 255.255.255.255 up

Error: SHELLCHECK_WARNING (CWE-457): [#def98]
/etc/xen/scripts/vif-route:26:18: warning[SC2154]: dev is referenced but not assigned.
#   24|   case "${command}" in
#   25|       add|online)
#   26|->         ifconfig ${dev} ${main_ip} netmask 255.255.255.255 up
#   27|           echo 1 >/proc/sys/net/ipv4/conf/${dev}/proxy_arp
#   28|           ipcmd='add'

Error: SHELLCHECK_WARNING (CWE-457): [#def99]
/etc/xen/scripts/vif-route:38:7: warning[SC2154]: type_if is referenced but not assigned.
#   36|   esac
#   37|   
#   38|-> case "${type_if}" in
#   39|       tap)
#   40|   	metric=1

Error: SHELLCHECK_WARNING (CWE-457): [#def100]
/etc/xen/scripts/vif-route:52:13: warning[SC2154]: ip is referenced but not assigned.
#   50|   # If we've been given a list of IP addresses, then add routes from dom0 to
#   51|   # the guest using those addresses.
#   52|-> for addr in ${ip} ; do
#   53|       ${cmdprefix} ip route ${ipcmd} ${addr} dev ${dev} src ${main_ip} metric ${metric}
#   54|   done

Error: SHELLCHECK_WARNING (CWE-457): [#def101]
/etc/xen/scripts/vif-setup:3:10: warning[SC2154]: script is referenced but not assigned.
#    1|   #!/usr/bin/bash
#    2|   
#    3|-> if test "$script"
#    4|   then
#    5|       exec $script $*

Error: SHELLCHECK_WARNING (CWE-569): [#def102]
/etc/xen/scripts/vif-setup:5:18: warning[SC2048]: Use "$@" (with quotes) to prevent whitespace problems.
#    3|   if test "$script"
#    4|   then
#    5|->     exec $script $*
#    6|   else
#    7|       exec /etc/xen/scripts/vif-bridge $*

Error: SHELLCHECK_WARNING (CWE-569): [#def103]
/etc/xen/scripts/vif-setup:7:38: warning[SC2048]: Use "$@" (with quotes) to prevent whitespace problems.
#    5|       exec $script $*
#    6|   else
#    7|->     exec /etc/xen/scripts/vif-bridge $*
#    8|   fi
#    9|   

Error: SHELLCHECK_WARNING (CWE-457): [#def104]
/etc/xen/scripts/vscsi:12:7: warning[SC2154]: command is referenced but not assigned (for output from commands, use "$(command ...)" ).
#   10|   findCommand "$@"
#   11|   
#   12|-> case "$command" in
#   13|   	add)
#   14|   		success

Error: SHELLCHECK_WARNING (CWE-758): [#def105]
/etc/xen/scripts/xen-hotplug-common.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> #
#    2|   # Copyright (c) 2005 XenSource Ltd.
#    3|   #

Error: SHELLCHECK_WARNING (CWE-457): [#def106]
/etc/xen/scripts/xen-hotplug-common.sh:25:14: warning[SC2154]: bindir is referenced but not assigned.
#   23|   exec 2>>/var/log/xen/xen-hotplug.log
#   24|   
#   25|-> export PATH="${bindir}:${sbindir}:${LIBEXEC_BIN}:/sbin:/bin:/usr/bin:/usr/sbin:$PATH"
#   26|   export LD_LIBRARY_PATH="${libdir}${LD_LIBRARY_PATH+:}$LD_LIBRARY_PATH"
#   27|   export LANG="POSIX"

Error: SHELLCHECK_WARNING (CWE-457): [#def107]
/etc/xen/scripts/xen-hotplug-common.sh:25:24: warning[SC2154]: sbindir is referenced but not assigned.
#   23|   exec 2>>/var/log/xen/xen-hotplug.log
#   24|   
#   25|-> export PATH="${bindir}:${sbindir}:${LIBEXEC_BIN}:/sbin:/bin:/usr/bin:/usr/sbin:$PATH"
#   26|   export LD_LIBRARY_PATH="${libdir}${LD_LIBRARY_PATH+:}$LD_LIBRARY_PATH"
#   27|   export LANG="POSIX"

Error: SHELLCHECK_WARNING (CWE-457): [#def108]
/etc/xen/scripts/xen-hotplug-common.sh:26:25: warning[SC2154]: libdir is referenced but not assigned.
#   24|   
#   25|   export PATH="${bindir}:${sbindir}:${LIBEXEC_BIN}:/sbin:/bin:/usr/bin:/usr/sbin:$PATH"
#   26|-> export LD_LIBRARY_PATH="${libdir}${LD_LIBRARY_PATH+:}$LD_LIBRARY_PATH"
#   27|   export LANG="POSIX"
#   28|   unset $(set | grep ^LC_ | cut -d= -f1)

Error: SHELLCHECK_WARNING (CWE-156): [#def109]
/etc/xen/scripts/xen-hotplug-common.sh:28:7: warning[SC2046]: Quote this to prevent word splitting.
#   26|   export LD_LIBRARY_PATH="${libdir}${LD_LIBRARY_PATH+:}$LD_LIBRARY_PATH"
#   27|   export LANG="POSIX"
#   28|-> unset $(set | grep ^LC_ | cut -d= -f1)
#   29|   
#   30|   fatal() {

Error: SHELLCHECK_WARNING (CWE-138): [#def110]
/etc/xen/scripts/xen-hotplug-common.sh:43:18: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   41|   
#   42|   do_or_die() {
#   43|->   "$@" || fatal "$@ failed"
#   44|   }
#   45|   

Error: SHELLCHECK_WARNING (CWE-138): [#def111]
/etc/xen/scripts/xen-hotplug-common.sh:47:34: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   45|   
#   46|   do_without_error() {
#   47|->   "$@" 2>/dev/null || log debug "$@ failed"
#   48|   }
#   49|   

Error: SHELLCHECK_WARNING (CWE-571): [#def112]
/etc/xen/scripts/xen-hotplug-common.sh:64:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   62|   #
#   63|   xenstore_read() {
#   64|->   local v=$(xenstore-read "$@" || true)
#   65|     [ "$v" != "" ] || fatal "xenstore-read $@ failed."
#   66|     echo "$v"

Error: SHELLCHECK_WARNING (CWE-138): [#def113]
/etc/xen/scripts/xen-hotplug-common.sh:65:42: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   63|   xenstore_read() {
#   64|     local v=$(xenstore-read "$@" || true)
#   65|->   [ "$v" != "" ] || fatal "xenstore-read $@ failed."
#   66|     echo "$v"
#   67|   }

Error: SHELLCHECK_WARNING (CWE-138): [#def114]
/etc/xen/scripts/xen-hotplug-common.sh:87:22: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   85|   #
#   86|   _xenstore_write() {
#   87|->   log debug "Writing $@ to xenstore."
#   88|     xenstore-write "$@"
#   89|   }

Error: SHELLCHECK_WARNING (CWE-138): [#def115]
/etc/xen/scripts/xen-hotplug-common.sh:98:42: error[SC2145]: Argument mixes string and array. Use * or separate argument.
#   96|   #
#   97|   xenstore_write() {
#   98|->   _xenstore_write "$@" || fatal "Writing $@ to xenstore failed."
#   99|   }
#  100|   

Error: SHELLCHECK_WARNING (CWE-398): [#def116]
/etc/xen/scripts/xen-network-common.sh:57:8: error[SC1073]: Couldn't parse this test expression. Fix to allow more checks.
#   55|     for file in $@
#   56|     do
#   57|->     if [ "$t" "$file" ]
#   58|       then
#   59|         echo "$file"

Error: SHELLCHECK_WARNING (CWE-398): [#def117]
/etc/xen/scripts/xen-network-common.sh:57:16: error[SC1072]: Expected comparison operator (don't wrap commands in []/[[]]). Fix any mentioned problems and try again.
#   55|     for file in $@
#   56|     do
#   57|->     if [ "$t" "$file" ]
#   58|       then
#   59|         echo "$file"

Error: SHELLCHECK_WARNING (CWE-758): [#def118]
/etc/xen/scripts/xen-script-common.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> #
#    2|   # Copyright (c) 2005 XenSource Ltd.
#    3|   #

Error: SHELLCHECK_WARNING (CWE-563): [#def119]
/etc/xen/scripts/xen-script-common.sh:39:7: warning[SC2034]: command appears unused. Verify use (or export if used externally).
#   37|       if ! expr 'index' "$arg" '=' >/dev/null
#   38|       then
#   39|->       command="$arg"
#   40|         return
#   41|       fi

Error: SHELLCHECK_WARNING (CWE-457): [#def120]
/usr/libexec/xen/bin/xendomains:32:5: warning[SC2154]: sbindir is referenced but not assigned.
#   30|   . /etc/xen/scripts/hotplugpath.sh
#   31|   
#   32|-> CMD=${sbindir}/xl
#   33|   HEADCOMP="Xen saved domain"
#   34|   $CMD list &> /dev/null

Error: SHELLCHECK_WARNING: [#def121]
/usr/libexec/xen/bin/xendomains:37:7: warning[SC2319]: This $? refers to a condition, not a command. Assign to a variable to avoid it being overwritten.
#   35|   if test $? -ne 0
#   36|   then
#   37|-> 	exit $?
#   38|   fi
#   39|   

Error: SHELLCHECK_WARNING (CWE-398): [#def122]
/usr/libexec/xen/bin/xendomains:80:9: warning[SC1010]: Use semicolon or linefeed before 'done' (or quote to make it literal).
#   78|   	_RC_UNUSED=3
#   79|       else
#   80|-> 	_SMSG=(done failed failed missed failed skipped unused failed failed)
#   81|   	_RC_UNUSED=6
#   82|       fi

Error: SHELLCHECK_WARNING: [#def123]
/usr/libexec/xen/bin/xendomains:132:9: error[SC2151]: Only one integer 0-255 can be returned. Use stdout for other data.
#  130|       rc_check()
#  131|       {
#  132|-> 	return rc_failed $?
#  133|       }
#  134|       rc_status()

Error: SHELLCHECK_WARNING (CWE-156): [#def124]
/usr/libexec/xen/bin/xendomains:173:23: warning[SC2046]: Quote this to prevent word splitting.
#  171|   contains_something()
#  172|   {
#  173|->   if [ -d "$1" ] && [ `/bin/ls $1 | wc -l` -gt 0 ]
#  174|     then
#  175|       return 0

Error: SHELLCHECK_WARNING (CWE-457): [#def125]
/usr/libexec/xen/bin/xendomains:208:15: warning[SC2154]: bindir is referenced but not assigned.
#  206|   get_xsdomid()
#  207|   {
#  208|->     XS_DOMID=`${bindir}/xenstore-read /tool/xenstored/domid 2>/dev/null`
#  209|       if test $? -ne 0; then
#  210|           XS_DOMID=0

Error: SHELLCHECK_WARNING: [#def126]
/usr/libexec/xen/bin/xendomains:217:19: warning[SC2076]: Remove quotes from right-hand side of =~ to match as a regex rather than literally.
#  215|   parseln()
#  216|   {
#  217|->     if [[ "$1" =~ '(domain' ]] || [[ "$1" = "{" ]]; then
#  218|           name=;id=
#  219|       elif [[ "$1" =~ '(name' ]]; then

Error: SHELLCHECK_WARNING: [#def127]
/usr/libexec/xen/bin/xendomains:219:21: warning[SC2076]: Remove quotes from right-hand side of =~ to match as a regex rather than literally.
#  217|       if [[ "$1" =~ '(domain' ]] || [[ "$1" = "{" ]]; then
#  218|           name=;id=
#  219|->     elif [[ "$1" =~ '(name' ]]; then
#  220|           name=$(echo $1 | sed -e 's/^.*(name \(.*\))$/\1/')
#  221|       elif [[ "$1" =~ '(domid' ]]; then

Error: SHELLCHECK_WARNING: [#def128]
/usr/libexec/xen/bin/xendomains:221:21: warning[SC2076]: Remove quotes from right-hand side of =~ to match as a regex rather than literally.
#  219|       elif [[ "$1" =~ '(name' ]]; then
#  220|           name=$(echo $1 | sed -e 's/^.*(name \(.*\))$/\1/')
#  221|->     elif [[ "$1" =~ '(domid' ]]; then
#  222|           id=$(echo $1 | sed -e 's/^.*(domid \(.*\))$/\1/')
#  223|       elif [[ "$1" =~ '"name":' ]]; then

Error: SHELLCHECK_WARNING (CWE-477): [#def129]
/usr/libexec/xen/bin/xendomains:229:18: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#  227|       fi
#  228|   
#  229|->     [ -n "$name" -a -n "$id" ] && return 0 || return 1
#  230|   }
#  231|   

Error: SHELLCHECK_WARNING (CWE-691): [#def130]
/usr/libexec/xen/bin/xendomains:243:7: warning[SC2254]: Quote expansions in case patterns to match literally rather than as a glob.
#  241|   	if test $id = $XS_DOMID; then continue; fi
#  242|   	case $name in
#  243|-> 	    ($NM)
#  244|   		RC=0
#  245|   		;;

Error: SHELLCHECK_WARNING (CWE-156): [#def131]
/usr/libexec/xen/bin/xendomains:258:14: warning[SC2046]: Quote this to prevent word splitting.
#  256|       fi
#  257|   
#  258|->     mkdir -p $(dirname "$LOCKFILE")
#  259|       touch $LOCKFILE
#  260|   

Error: SHELLCHECK_WARNING: [#def132]
/usr/libexec/xen/bin/xendomains:276:35: warning[SC2320]: This $? refers to echo/printf, not a previous command. Assign to variable to avoid it being overwritten.
#  274|                       if [ $? -ne 0 ]; then
#  275|                           echo -e "\nAn error occurred while restoring domain ${dom##*/}:\n$XMR"
#  276|->                         rc_failed $?
#  277|                           echo -e '!'
#  278|                       else

Error: SHELLCHECK_WARNING: [#def133]
/usr/libexec/xen/bin/xendomains:310:17: warning[SC2320]: This $? refers to echo/printf, not a previous command. Assign to variable to avoid it being overwritten.
#  308|   		if [ $? -ne 0 ]; then
#  309|   		    echo -e "\nAn error occurred while creating domain ${dom##*/}: $XMC\n"
#  310|-> 		    rc_failed $?
#  311|   		    echo -e '!'
#  312|   		else

Error: SHELLCHECK_WARNING (CWE-457): [#def134]
/usr/libexec/xen/bin/xendomains:328:11: warning[SC2154]: state is referenced but not assigned.
#  326|   	if test $id = 0; then continue; fi
#  327|   	if test $id = $XS_DOMID; then continue; fi
#  328|-> 	if test "$state" != "-b---d" -a "$state" != "-----d"; then
#  329|   	    return 1;
#  330|   	fi

Error: SHELLCHECK_WARNING (CWE-563): [#def135]
/usr/libexec/xen/bin/xendomains:348:5: warning[SC2034]: no appears unused. Verify use (or export if used externally).
#  346|   
#  347|       usleep 20000
#  348|->     for no in `seq 0 $XENDOMAINS_STOP_MAXWAIT`; do
#  349|   	# exit if $CMD save/migrate/shutdown is finished
#  350|   	PSAX=`ps axlw | grep "$CMD $1" | grep -v grep`

Error: SHELLCHECK_WARNING (CWE-563): [#def136]
/usr/libexec/xen/bin/xendomains:358:10: warning[SC2034]: PSF appears unused. Verify use (or export if used externally).
#  356|       done
#  357|       sleep 1
#  358|->     read PSF PSUID PSPID PSPPID < <(echo "$PSAX")
#  359|       # kill $CMD $1
#  360|       kill $PSPID >/dev/null 2>&1

Error: SHELLCHECK_WARNING (CWE-563): [#def137]
/usr/libexec/xen/bin/xendomains:358:14: warning[SC2034]: PSUID appears unused. Verify use (or export if used externally).
#  356|       done
#  357|       sleep 1
#  358|->     read PSF PSUID PSPID PSPPID < <(echo "$PSAX")
#  359|       # kill $CMD $1
#  360|       kill $PSPID >/dev/null 2>&1

Error: SHELLCHECK_WARNING (CWE-563): [#def138]
/usr/libexec/xen/bin/xendomains:358:26: warning[SC2034]: PSPPID appears unused. Verify use (or export if used externally).
#  356|       done
#  357|       sleep 1
#  358|->     read PSF PSUID PSPID PSPPID < <(echo "$PSAX")
#  359|       # kill $CMD $1
#  360|       kill $PSPID >/dev/null 2>&1

Error: SHELLCHECK_WARNING: [#def139]
/usr/libexec/xen/bin/xendomains:403:17: warning[SC2320]: This $? refers to echo/printf, not a previous command. Assign to variable to avoid it being overwritten.
#  401|   		if test $? -ne 0; then
#  402|   		    echo -e "\nAn error occurred while doing sysrq on domain:\n$XMR\n"
#  403|-> 		    rc_failed $?
#  404|   		    echo -n '!'
#  405|   		fi

Error: SHELLCHECK_WARNING: [#def140]
/usr/libexec/xen/bin/xendomains:421:13: warning[SC2320]: This $? refers to echo/printf, not a previous command. Assign to variable to avoid it being overwritten.
#  419|   	    if test $? -ne 0; then
#  420|   		echo -e "\nAn error occurred while migrating domain:\n$XMR\n"
#  421|-> 		rc_failed $?
#  422|   		echo -e '!'
#  423|   

Error: SHELLCHECK_WARNING: [#def141]
/usr/libexec/xen/bin/xendomains:441:13: warning[SC2320]: This $? refers to echo/printf, not a previous command. Assign to variable to avoid it being overwritten.
#  439|   	    if test $? -ne 0; then
#  440|   		echo -e "\nAn error occurred while saving domain:\n$XMR\n"
#  441|-> 		rc_failed $?
#  442|   		echo -e '!'
#  443|   		kill $WDOG_PID >/dev/null 2>&1

Error: SHELLCHECK_WARNING: [#def142]
/usr/libexec/xen/bin/xendomains:459:13: warning[SC2320]: This $? refers to echo/printf, not a previous command. Assign to variable to avoid it being overwritten.
#  457|   	    if test $? -ne 0; then
#  458|   		echo -e "\nAn error occurred while shutting down domain:\n$XMR\n"
#  459|-> 		rc_failed $?
#  460|   		echo -e '!'
#  461|   	    fi

Error: SHELLCHECK_WARNING: [#def143]
/usr/libexec/xen/bin/xendomains:478:16: warning[SC2320]: This $? refers to echo/printf, not a previous command. Assign to variable to avoid it being overwritten.
#  476|   	if test $? -ne 0; then
#  477|   	    echo -e "\nAn error occurred while shutting down all domains: $XMR\n"
#  478|-> 	    rc_failed $?
#  479|   	    echo -e '!'
#  480|   	fi

Error: SHELLCHECK_WARNING (CWE-691): [#def144]
/usr/libexec/xen/bin/xendomains:497:7: warning[SC2254]: Quote expansions in case patterns to match literally rather than as a glob.
#  495|   	if test $id = 0; then continue; fi
#  496|   	case $name in
#  497|-> 	    ($1)
#  498|   		return 0
#  499|   		;;

Error: SHELLCHECK_WARNING (CWE-563): [#def145]
/usr/libexec/xen/bin/xendomains:514:2: warning[SC2034]: found appears unused. Verify use (or export if used externally).
#  512|       for nm in $XENDOMAINS_AUTO/*; do
#  513|   	rdname $nm
#  514|-> 	found=0
#  515|   	if check_domain_up "$NM"; then
#  516|   	    echo -n " $name"

Error: CPPCHECK_WARNING (CWE-476): [#def146]
xen-4.19.2/extras/mini-os/9pfront.c:371: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: target
#  369|       if ( len <= *len1 )
#  370|       {
#  371|->         memcpy(target, *buf1, len);
#  372|           *buf1 += len;
#  373|           *len1 -= len;

Error: CPPCHECK_WARNING (CWE-476): [#def147]
xen-4.19.2/extras/mini-os/9pfront.c:377: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: target
#  375|       else
#  376|       {
#  377|->         memcpy(target, *buf1, *len1);
#  378|           target = (char *)target + *len1;
#  379|           len -= *len1;

Error: CPPCHECK_WARNING (CWE-682): [#def148]
xen-4.19.2/extras/mini-os/9pfront.c:378: error[nullPointerArithmeticOutOfMemory]: If memory allocation fail: pointer addition with NULL pointer.
#  376|       {
#  377|           memcpy(target, *buf1, *len1);
#  378|->         target = (char *)target + *len1;
#  379|           len -= *len1;
#  380|           *buf1 = *buf2;

Error: CPPCHECK_WARNING (CWE-476): [#def149]
xen-4.19.2/extras/mini-os/9pfront.c:436: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: str
#  434|           str = malloc(len + 1);
#  435|           copy_bufs(&buf1, &buf2, &len1, &len2, str, len);
#  436|->         str[len] = 0;
#  437|           printk("9pfs: request %u resulted in \"%s\"\n", req->cmd, str);
#  438|           free(str);

Error: CPPCHECK_WARNING (CWE-476): [#def150]
xen-4.19.2/extras/mini-os/9pfront.c:984: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: f9pfs
#  982|   
#  983|       f9pfs = calloc(1, sizeof(*f9pfs));
#  984|->     f9pfs->dev = mnt->dev;
#  985|       f9pfs->fid = P9_ROOT_FID;
#  986|   

Error: CPPCHECK_WARNING (CWE-476): [#def151]
xen-4.19.2/extras/mini-os/9pfront.c:985: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: f9pfs
#  983|       f9pfs = calloc(1, sizeof(*f9pfs));
#  984|       f9pfs->dev = mnt->dev;
#  985|->     f9pfs->fid = P9_ROOT_FID;
#  986|   
#  987|       fd = alloc_fd(ftype_9pfs);

Error: CPPCHECK_WARNING (CWE-476): [#def152]
xen-4.19.2/extras/mini-os/9pfront.c:1086: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1084|       printk("9pfsfront add %u, for mount at %s\n", id, mnt);
# 1085|       dev = malloc(sizeof(*dev));
# 1086|->     memset(dev, 0, sizeof(*dev));
# 1087|       snprintf(dev->nodename, sizeof(dev->nodename), "device/9pfs/%u", id);
# 1088|       dev->id = id;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def153]
xen-4.19.2/extras/mini-os/9pfront.c:1086:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘dev’ where non-null expected
xen-4.19.2/extras/mini-os/9pfront.c:1085:11: acquire_memory: this call could return NULL
xen-4.19.2/extras/mini-os/9pfront.c:1086:5: danger: argument 1 (‘dev’) from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#argument 1 of ‘__builtin_memset’ must be non-null
# 1084|       printk("9pfsfront add %u, for mount at %s\n", id, mnt);
# 1085|       dev = malloc(sizeof(*dev));
# 1086|->     memset(dev, 0, sizeof(*dev));
# 1087|       snprintf(dev->nodename, sizeof(dev->nodename), "device/9pfs/%u", id);
# 1088|       dev->id = id;

Error: CPPCHECK_WARNING (CWE-476): [#def154]
xen-4.19.2/extras/mini-os/9pfront.c:1087: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1085|       dev = malloc(sizeof(*dev));
# 1086|       memset(dev, 0, sizeof(*dev));
# 1087|->     snprintf(dev->nodename, sizeof(dev->nodename), "device/9pfs/%u", id);
# 1088|       dev->id = id;
# 1089|       init_waitqueue_head(&dev->waitq);

Error: CPPCHECK_WARNING (CWE-476): [#def155]
xen-4.19.2/extras/mini-os/9pfront.c:1088: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1086|       memset(dev, 0, sizeof(*dev));
# 1087|       snprintf(dev->nodename, sizeof(dev->nodename), "device/9pfs/%u", id);
# 1088|->     dev->id = id;
# 1089|       init_waitqueue_head(&dev->waitq);
# 1090|       init_SEMAPHORE(&dev->ring_out_sem, 1);

Error: CPPCHECK_WARNING (CWE-476): [#def156]
xen-4.19.2/extras/mini-os/9pfront.c:1092: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1090|       init_SEMAPHORE(&dev->ring_out_sem, 1);
# 1091|       init_SEMAPHORE(&dev->ring_in_sem, 1);
# 1092|->     dev->fid_mask = ~0ULL;
# 1093|   
# 1094|       for ( i = 0; i < N_REQS; i++ )

Error: CPPCHECK_WARNING (CWE-476): [#def157]
xen-4.19.2/extras/mini-os/9pfront.c:1096: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1094|       for ( i = 0; i < N_REQS; i++ )
# 1095|       {
# 1096|->         dev->req[i].id = i;
# 1097|           dev->req[i].next_free = i + 1;
# 1098|       }

Error: CPPCHECK_WARNING (CWE-476): [#def158]
xen-4.19.2/extras/mini-os/9pfront.c:1097: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1095|       {
# 1096|           dev->req[i].id = i;
# 1097|->         dev->req[i].next_free = i + 1;
# 1098|       }
# 1099|       dev->free_reqs = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def159]
xen-4.19.2/extras/mini-os/9pfront.c:1099: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1097|           dev->req[i].next_free = i + 1;
# 1098|       }
# 1099|->     dev->free_reqs = 0;
# 1100|   
# 1101|       msg = xenbus_read_unsigned(XBT_NIL, dev->nodename, "backend-id", &dev->dom);

Error: CPPCHECK_WARNING (CWE-476): [#def160]
xen-4.19.2/extras/mini-os/9pfront.c:1101: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
# 1099|       dev->free_reqs = 0;
# 1100|   
# 1101|->     msg = xenbus_read_unsigned(XBT_NIL, dev->nodename, "backend-id", &dev->dom);
# 1102|       if ( msg )
# 1103|           goto err;

Error: CPPCHECK_WARNING (CWE-457): [#def161]
xen-4.19.2/extras/mini-os/arch/x86/gnttab.c:70: warning[uninitvar]: Uninitialized variable: frames
#   68|       }
#   69|   
#   70|->     return map_frames(frames, nr_grant_frames);
#   71|   }
#   72|   #endif

Error: GCC_ANALYZER_WARNING (CWE-787): [#def162]
xen-4.19.2/extras/mini-os/arch/x86/mm.c:747:5: warning[-Wanalyzer-out-of-bounds]: buffer overflow
#  745|   
#  746|       /* Use first page as the CoW zero page */
#  747|->     memset(&_text, 0, PAGE_SIZE);
#  748|       mfn_zero = virt_to_mfn((unsigned long) &_text);
#  749|   #ifdef CONFIG_PARAVIRT

Error: GCC_ANALYZER_WARNING (CWE-476): [#def163]
xen-4.19.2/extras/mini-os/arch/x86/mm.c:754:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pgt’
#  752|   #else
#  753|       pgt = get_pgt((unsigned long)&_text);
#  754|->     *pgt = 0;
#  755|       invlpg((unsigned long)&_text);
#  756|   #endif

Error: GCC_ANALYZER_WARNING (CWE-476): [#def164]
xen-4.19.2/extras/mini-os/console.c:320:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘intf’
xen-4.19.2/extras/mini-os/include/console.h:94:5: enter_function: entry to ‘xencons_ring_avail’
xen-4.19.2/extras/mini-os/console.c:315:8: branch_true: following ‘true’ branch (when ‘dev’ is NULL)...
xen-4.19.2/extras/mini-os/console.c:316:16: call_function: inlined call to ‘xencons_interface’ from ‘xencons_ring_avail’
xen-4.19.2/extras/mini-os/console.c:320:5: branch_false: ...to here
xen-4.19.2/extras/mini-os/console.c:320:5: danger: dereference of NULL ‘intf’
#  318|           intf = dev->ring;
#  319|   
#  320|->     cons = intf->in_cons;
#  321|       prod = intf->in_prod;
#  322|       mb();

Error: GCC_ANALYZER_WARNING (CWE-476): [#def165]
xen-4.19.2/extras/mini-os/console.c:340:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘intf’
xen-4.19.2/extras/mini-os/include/console.h:95:5: enter_function: entry to ‘xencons_ring_recv’
xen-4.19.2/extras/mini-os/console.c:335:8: branch_true: following ‘true’ branch (when ‘dev’ is NULL)...
xen-4.19.2/extras/mini-os/console.c:336:16: call_function: inlined call to ‘xencons_interface’ from ‘xencons_ring_recv’
xen-4.19.2/extras/mini-os/console.c:340:5: branch_false: ...to here
xen-4.19.2/extras/mini-os/console.c:340:5: danger: dereference of NULL ‘intf’
#  338|           intf = dev->ring;
#  339|   
#  340|->     cons = intf->in_cons;
#  341|       prod = intf->in_prod;
#  342|       mb();

Error: CPPCHECK_WARNING (CWE-476): [#def166]
xen-4.19.2/extras/mini-os/console.c:368: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  366|   
#  367|       dev = malloc(sizeof(struct consfront_dev));
#  368|->     memset(dev, 0, sizeof(struct consfront_dev));
#  369|       dev->nodename = "device/console";
#  370|       dev->dom = 0;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def167]
xen-4.19.2/extras/mini-os/console.c:368:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘dev’ where non-null expected
xen-4.19.2/extras/mini-os/console.c:364:8: branch_false: following ‘false’ branch...
xen-4.19.2/extras/mini-os/console.c:367:11: branch_false: ...to here
xen-4.19.2/extras/mini-os/console.c:367:11: acquire_memory: this call could return NULL
xen-4.19.2/extras/mini-os/console.c:368:5: danger: argument 1 (‘dev’) from [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_memset’ must be non-null
#  366|   
#  367|       dev = malloc(sizeof(struct consfront_dev));
#  368|->     memset(dev, 0, sizeof(struct consfront_dev));
#  369|       dev->nodename = "device/console";
#  370|       dev->dom = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def168]
xen-4.19.2/extras/mini-os/console.c:369: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  367|       dev = malloc(sizeof(struct consfront_dev));
#  368|       memset(dev, 0, sizeof(struct consfront_dev));
#  369|->     dev->nodename = "device/console";
#  370|       dev->dom = 0;
#  371|       dev->backend = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def169]
xen-4.19.2/extras/mini-os/console.c:370: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  368|       memset(dev, 0, sizeof(struct consfront_dev));
#  369|       dev->nodename = "device/console";
#  370|->     dev->dom = 0;
#  371|       dev->backend = 0;
#  372|       dev->ring_ref = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def170]
xen-4.19.2/extras/mini-os/console.c:371: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  369|       dev->nodename = "device/console";
#  370|       dev->dom = 0;
#  371|->     dev->backend = 0;
#  372|       dev->ring_ref = 0;
#  373|   

Error: CPPCHECK_WARNING (CWE-476): [#def171]
xen-4.19.2/extras/mini-os/console.c:372: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  370|       dev->dom = 0;
#  371|       dev->backend = 0;
#  372|->     dev->ring_ref = 0;
#  373|   
#  374|   #ifdef HAVE_LIBC

Error: CPPCHECK_WARNING (CWE-476): [#def172]
xen-4.19.2/extras/mini-os/console.c:375: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  373|   
#  374|   #ifdef HAVE_LIBC
#  375|->     dev->fd = -1;
#  376|   #endif
#  377|   

Error: CPPCHECK_WARNING (CWE-476): [#def173]
xen-4.19.2/extras/mini-os/console.c:385: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  383|       int err;
#  384|   
#  385|->     dev->evtchn = console_evtchn;
#  386|       dev->ring = xencons_interface();
#  387|   

Error: CPPCHECK_WARNING (CWE-476): [#def174]
xen-4.19.2/extras/mini-os/console.c:386: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  384|   
#  385|       dev->evtchn = console_evtchn;
#  386|->     dev->ring = xencons_interface();
#  387|   
#  388|       err = bind_evtchn(dev->evtchn, console_handle_input, dev);

Error: CPPCHECK_WARNING (CWE-476): [#def175]
xen-4.19.2/extras/mini-os/console.c:388: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  386|       dev->ring = xencons_interface();
#  387|   
#  388|->     err = bind_evtchn(dev->evtchn, console_handle_input, dev);
#  389|       if ( err <= 0 )
#  390|       {

Error: CPPCHECK_WARNING (CWE-476): [#def176]
xen-4.19.2/extras/mini-os/console.c:395: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: dev
#  393|           return NULL;
#  394|       }
#  395|->     unmask_evtchn(dev->evtchn);
#  396|   
#  397|       /* In case we have in-flight data after save/restore... */

Error: GCC_ANALYZER_WARNING (CWE-835): [#def177]
xen-4.19.2/extras/mini-os/gnttab.c:138:12: warning[-Wanalyzer-infinite-loop]: infinite loop
xen-4.19.2/extras/mini-os/gnttab.c:138:12: danger: infinite loop here
xen-4.19.2/extras/mini-os/gnttab.c:138:12: branch_true: if it ever follows ‘true’ branch, it will always do so...
 branch_true: ...to here
#  136|   
#  137|       /* If a transfer is in progress then wait until it is completed. */
#  138|->     while (!(flags & GTF_transfer_completed)) {
#  139|           flags = gnttab_table[ref].flags;
#  140|       }

Error: CPPCHECK_WARNING (CWE-476): [#def178]
xen-4.19.2/extras/mini-os/include/posix/pthread.h:14: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: *key
#   12|   {
#   13|       *key = malloc(sizeof(**key));
#   14|->     (*key)->ptr = NULL;
#   15|       return 0;
#   16|   }

Error: CPPCHECK_WARNING (CWE-758): [#def179]
xen-4.19.2/extras/mini-os/kernel.c:71: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   69|           
#   70|           for (j=0; j<32; j++)
#   71|->             xen_features[i*32+j] = !!(fi.submap & 1<<j);
#   72|       }
#   73|   }

Error: CPPCHECK_WARNING (CWE-369): [#def180]
xen-4.19.2/extras/mini-os/lib/math.c:163: error[zerodiv]: Division by zero.
#  161|   		static volatile const unsigned int zero = 0;
#  162|   
#  163|-> 		tmp.ul[H] = tmp.ul[L] = 1 / zero;
#  164|   		if (arq)
#  165|   			*arq = uq;

Error: CPPCHECK_WARNING (CWE-476): [#def181]
xen-4.19.2/extras/mini-os/lib/sys.c:678: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  676|       DIR *ret;
#  677|       ret = malloc(sizeof(*ret));
#  678|->     ret->name = strdup(name);
#  679|       ret->offset = 0;
#  680|       ret->entries = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def182]
xen-4.19.2/extras/mini-os/lib/sys.c:678:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ret’
xen-4.19.2/extras/mini-os/lib/sys.c:677:11: acquire_memory: this call could return NULL
xen-4.19.2/extras/mini-os/lib/sys.c:678:5: danger: ‘ret’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  676|       DIR *ret;
#  677|       ret = malloc(sizeof(*ret));
#  678|->     ret->name = strdup(name);
#  679|       ret->offset = 0;
#  680|       ret->entries = NULL;

Error: CPPCHECK_WARNING (CWE-476): [#def183]
xen-4.19.2/extras/mini-os/lib/sys.c:679: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  677|       ret = malloc(sizeof(*ret));
#  678|       ret->name = strdup(name);
#  679|->     ret->offset = 0;
#  680|       ret->entries = NULL;
#  681|       ret->curentry = -1;

Error: CPPCHECK_WARNING (CWE-476): [#def184]
xen-4.19.2/extras/mini-os/lib/sys.c:680: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  678|       ret->name = strdup(name);
#  679|       ret->offset = 0;
#  680|->     ret->entries = NULL;
#  681|       ret->curentry = -1;
#  682|       ret->nbentries = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def185]
xen-4.19.2/extras/mini-os/lib/sys.c:681: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  679|       ret->offset = 0;
#  680|       ret->entries = NULL;
#  681|->     ret->curentry = -1;
#  682|       ret->nbentries = 0;
#  683|       ret->has_more = 1;

Error: CPPCHECK_WARNING (CWE-476): [#def186]
xen-4.19.2/extras/mini-os/lib/sys.c:682: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  680|       ret->entries = NULL;
#  681|       ret->curentry = -1;
#  682|->     ret->nbentries = 0;
#  683|       ret->has_more = 1;
#  684|       return ret;

Error: CPPCHECK_WARNING (CWE-476): [#def187]
xen-4.19.2/extras/mini-os/lib/sys.c:683: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  681|       ret->curentry = -1;
#  682|       ret->nbentries = 0;
#  683|->     ret->has_more = 1;
#  684|       return ret;
#  685|   }

Error: CPPCHECK_WARNING (CWE-476): [#def188]
xen-4.19.2/extras/mini-os/lib/sys.c:1531: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: mfns
# 1529|               }
# 1530|   #endif
# 1531|->         mfns[i] = virtual_to_mfn(data + i * PAGE_SIZE);
# 1532|       }
# 1533|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def189]
xen-4.19.2/extras/mini-os/lib/sys.c:1531:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘mfns’
xen-4.19.2/extras/mini-os/lib/sys.c:1514:8: branch_false: following ‘false’ branch...
xen-4.19.2/extras/mini-os/lib/sys.c:1516:10: branch_false: ...to here
xen-4.19.2/extras/mini-os/lib/sys.c:1521:12: acquire_memory: this call could return NULL
xen-4.19.2/extras/mini-os/lib/sys.c:1522:17: branch_true: following ‘true’ branch (when ‘i < n’)...
xen-4.19.2/extras/mini-os/lib/sys.c:1531:19: branch_true: ...to here
xen-4.19.2/extras/mini-os/lib/sys.c:1531:9: danger: ‘mfns + (long unsigned int)i * 8’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
# 1529|               }
# 1530|   #endif
# 1531|->         mfns[i] = virtual_to_mfn(data + i * PAGE_SIZE);
# 1532|       }
# 1533|   

Error: CPPCHECK_WARNING (CWE-476): [#def190]
xen-4.19.2/extras/mini-os/lib/xs.c:143: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  141|       msg = xenbus_msg_reply(type, t, iovec, num_vecs);
#  142|       ret = malloc(msg->len);
#  143|->     memcpy(ret, (char*) msg + sizeof(*msg), msg->len);
#  144|       if (len)
#  145|   	*len = msg->len - 1;

Error: GCC_ANALYZER_WARNING (CWE-131): [#def191]
xen-4.19.2/extras/mini-os/lib/xs.c:193:15: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
xen-4.19.2/extras/mini-os/lib/xs.c:183:8: branch_false: following ‘false’ branch (when ‘msg’ is NULL)...
 branch_false: ...to here
xen-4.19.2/extras/mini-os/lib/xs.c:190:17: branch_true: following ‘true’ branch...
xen-4.19.2/extras/mini-os/lib/xs.c:191:17: branch_true: ...to here
xen-4.19.2/extras/mini-os/lib/xs.c:190:17: branch_false: following ‘false’ branch...
xen-4.19.2/extras/mini-os/lib/xs.c:193:15: branch_false: ...to here
xen-4.19.2/extras/mini-os/lib/xs.c:193:15: danger: allocated ‘(long unsigned int)n * 8 + (long unsigned int)size’ bytes and assigned to ‘char **’ here; ‘sizeof (char *)’ is ‘8’
#  191|   	size += strlen(res[n]) + 1;
#  192|   
#  193|->     entries = malloc(n * sizeof(char *) + size);
#  194|       entry = (char *) (&entries[n]);
#  195|   

Error: CPPCHECK_WARNING (CWE-476): [#def192]
xen-4.19.2/extras/mini-os/lib/xs.c:200: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: entries
#  198|   	memcpy(entry, res[i], l);
#  199|   	free(res[i]);
#  200|-> 	entries[i] = entry;
#  201|   	entry += l;
#  202|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def193]
xen-4.19.2/extras/mini-os/lib/xs.c:200:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘entries’
xen-4.19.2/extras/mini-os/lib/xs.c:183:8: branch_false: following ‘false’ branch (when ‘msg’ is NULL)...
 branch_false: ...to here
xen-4.19.2/extras/mini-os/lib/xs.c:193:15: acquire_memory: this call could return NULL
xen-4.19.2/extras/mini-os/lib/xs.c:196:17: branch_true: following ‘true’ branch (when ‘i < n’)...
xen-4.19.2/extras/mini-os/lib/xs.c:197:27: branch_true: ...to here
xen-4.19.2/extras/mini-os/lib/xs.c:200:9: danger: ‘entries + (long unsigned int)i * 8’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  198|   	memcpy(entry, res[i], l);
#  199|   	free(res[i]);
#  200|-> 	entries[i] = entry;
#  201|   	entry += l;
#  202|       }

Error: CPPCHECK_WARNING (CWE-570): [#def194]
xen-4.19.2/extras/mini-os/main.c:70: error[subtractPointers]: Subtracting pointers that point to different objects
#   68|   
#   69|   #ifdef CONFIG_SPARSE_BSS
#   70|->     sparse((unsigned long) &__app_bss_start, &__app_bss_end - &__app_bss_start);
#   71|   #endif
#   72|   #if defined(HAVE_LWIP) && defined(CONFIG_START_NETWORK) && defined(CONFIG_NETFRONT)

Error: GCC_ANALYZER_WARNING (CWE-469): [#def195]
xen-4.19.2/extras/mini-os/main.c:70:46: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
#   68|   
#   69|   #ifdef CONFIG_SPARSE_BSS
#   70|->     sparse((unsigned long) &__app_bss_start, &__app_bss_end - &__app_bss_start);
#   71|   #endif
#   72|   #if defined(HAVE_LWIP) && defined(CONFIG_START_NETWORK) && defined(CONFIG_NETFRONT)

Error: CPPCHECK_WARNING (CWE-476): [#def196]
xen-4.19.2/extras/mini-os/xenbus.c:148: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: event
#  146|       struct xenbus_event *event = malloc(sizeof(*event));
#  147|   
#  148|->     event->next = *queue;
#  149|       *queue = event;
#  150|       wake_up(&xenbus_watch_queue);

Error: CPPCHECK_WARNING (CWE-682): [#def197]
xen-4.19.2/extras/mini-os/xenbus.c:313: error[nullPointerArithmeticOutOfMemory]: If memory allocation fail: pointer addition with NULL pointer.
#  311|               int zeroes = 0;
#  312|   
#  313|->             data = (char *)event + sizeof(*event);
#  314|               xenbus_read_data(data, msg.len);
#  315|   

Error: CPPCHECK_WARNING (CWE-476): [#def198]
xen-4.19.2/extras/mini-os/xenbus.c:353: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
#  351|   
#  352|           data = malloc(sizeof(msg) + msg.len);
#  353|->         memcpy(data, &msg, sizeof(msg));
#  354|           xenbus_read_data(data + sizeof(msg), msg.len);
#  355|   

Error: CPPCHECK_WARNING (CWE-682): [#def199]
xen-4.19.2/extras/mini-os/xenbus.c:354: error[nullPointerArithmeticOutOfMemory]: If memory allocation fail: pointer addition with NULL pointer.
#  352|           data = malloc(sizeof(msg) + msg.len);
#  353|           memcpy(data, &msg, sizeof(msg));
#  354|->         xenbus_read_data(data + sizeof(msg), msg.len);
#  355|   
#  356|           if ( msg.req_id >= NR_REQS || !req_info[msg.req_id].in_use )

Error: GCC_ANALYZER_WARNING (CWE-401): [#def200]
xen-4.19.2/extras/mini-os/xenbus.c:407:14: warning[-Wanalyzer-malloc-leak]: leak of ‘xenbus_read(0, "domid", &dom_id)’
xen-4.19.2/extras/mini-os/include/xenbus.h:126:9: enter_function: entry to ‘xenbus_get_self_id’
xen-4.19.2/extras/mini-os/xenbus.c:988:5: call_function: calling ‘xenbus_read’ from ‘xenbus_get_self_id’
xen-4.19.2/extras/mini-os/xenbus.c:988:5: return_function: returning to ‘xenbus_get_self_id’ from ‘xenbus_read’
xen-4.19.2/extras/mini-os/xenbus.c:407:14: danger: ‘xenbus_read(0, "domid", &dom_id)’ leaks here; was allocated at [(44)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/43)
#  405|       {
#  406|           spin_lock(&req_lock);
#  407|->         if ( nr_live_reqs < NR_REQS )
#  408|               break;
#  409|           spin_unlock(&req_lock);

Error: CPPCHECK_WARNING (CWE-476): [#def201]
xen-4.19.2/extras/mini-os/xenbus.c:629: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  627|   
#  628|       res = malloc(rep->len + 1);
#  629|->     memcpy(res, rep + 1, rep->len);
#  630|       res[rep->len] = 0;
#  631|       free(rep);

Error: CPPCHECK_WARNING (CWE-476): [#def202]
xen-4.19.2/extras/mini-os/xenbus.c:630: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  628|       res = malloc(rep->len + 1);
#  629|       memcpy(res, rep + 1, rep->len);
#  630|->     res[rep->len] = 0;
#  631|       free(rep);
#  632|   

Error: CPPCHECK_WARNING (CWE-476): [#def203]
xen-4.19.2/extras/mini-os/xenbus.c:665: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  663|           int l = strlen((char *)reply + x);
#  664|   
#  665|->         res[i] = malloc(l + 1);
#  666|           memcpy(res[i], (char *)reply + x, l + 1);
#  667|           x += l + 1;

Error: CPPCHECK_WARNING (CWE-476): [#def204]
xen-4.19.2/extras/mini-os/xenbus.c:666: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  664|   
#  665|           res[i] = malloc(l + 1);
#  666|->         memcpy(res[i], (char *)reply + x, l + 1);
#  667|           x += l + 1;
#  668|       }

Error: CPPCHECK_WARNING (CWE-476): [#def205]
xen-4.19.2/extras/mini-os/xenbus.c:670: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  668|       }
#  669|   
#  670|->     res[i] = NULL;
#  671|       free(repmsg);
#  672|       *contents = res;

Error: CPPCHECK_WARNING (CWE-476): [#def206]
xen-4.19.2/extras/mini-os/xenbus.c:693: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  691|   
#  692|       res = malloc(rep->len + 1);
#  693|->     memcpy(res, rep + 1, rep->len);
#  694|       res[rep->len] = 0;
#  695|       free(rep);

Error: CPPCHECK_WARNING (CWE-476): [#def207]
xen-4.19.2/extras/mini-os/xenbus.c:694: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  692|       res = malloc(rep->len + 1);
#  693|       memcpy(res, rep + 1, rep->len);
#  694|->     res[rep->len] = 0;
#  695|       free(rep);
#  696|       *value = res;

Error: CPPCHECK_WARNING (CWE-476): [#def208]
xen-4.19.2/extras/mini-os/xenbus.c:821: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  819|   
#  820|       res = malloc(rep->len + 1);
#  821|->     memcpy(res, rep + 1, rep->len);
#  822|       res[rep->len] = 0;
#  823|       free(rep);

Error: CPPCHECK_WARNING (CWE-476): [#def209]
xen-4.19.2/extras/mini-os/xenbus.c:822: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: res
#  820|       res = malloc(rep->len + 1);
#  821|       memcpy(res, rep + 1, rep->len);
#  822|->     res[rep->len] = 0;
#  823|       free(rep);
#  824|       *value = res;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def210]
xen-4.19.2/extras/mini-os/xenbus.c:938:10: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buf’ where non-null expected
xen-4.19.2/extras/mini-os/include/xenbus.h:111:5: enter_function: entry to ‘xenbus_read_uuid’
xen-4.19.2/extras/mini-os/xenbus.c:930:11: call_function: calling ‘xenbus_read’ from ‘xenbus_read_uuid’
xen-4.19.2/extras/mini-os/xenbus.c:930:11: return_function: returning to ‘xenbus_read_uuid’ from ‘xenbus_read’
xen-4.19.2/extras/mini-os/xenbus.c:931:8: branch_false: following ‘false’ branch (when ‘res’ is NULL)...
xen-4.19.2/extras/mini-os/xenbus.c:938:10: branch_false: ...to here
xen-4.19.2/extras/mini-os/xenbus.c:938:10: danger: argument 1 (‘buf’) from [(47)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/46) could be NULL where non-null expected
#argument 1 of ‘__builtin_strlen’ must be non-null
#  936|       }
#  937|   
#  938|->     if ( strlen(buf) != ((2 * 16) + 4) /* 16 hex bytes and 4 hyphens */ ||
#  939|            sscanf(buf, "%2hhx%2hhx%2hhx%2hhx-"
#  940|                        "%2hhx%2hhx-"

Error: GCC_ANALYZER_WARNING (CWE-401): [#def211]
xen-4.19.2/extras/mini-os/xenbus.c:992:1: warning[-Wanalyzer-malloc-leak]: leak of ‘dom_id’
xen-4.19.2/extras/mini-os/include/xenbus.h:126:9: enter_function: entry to ‘xenbus_get_self_id’
xen-4.19.2/extras/mini-os/xenbus.c:988:5: call_function: calling ‘xenbus_read’ from ‘xenbus_get_self_id’
xen-4.19.2/extras/mini-os/xenbus.c:988:5: return_function: returning to ‘xenbus_get_self_id’ from ‘xenbus_read’
xen-4.19.2/extras/mini-os/xenbus.c:988:5: branch_false: following ‘false’ branch...
xen-4.19.2/extras/mini-os/xenbus.c:989:5: branch_false: ...to here
xen-4.19.2/extras/mini-os/xenbus.c:992:1: danger: ‘dom_id’ leaks here; was allocated at [(47)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/46)
#  990|   
#  991|       return ret;
#  992|-> }
#  993|   EXPORT_SYMBOL(xenbus_get_self_id);
#  994|   

Error: GCC_ANALYZER_WARNING (CWE-1335): [#def212]
xen-4.19.2/stubdom/include/../../xen/common/bunzip2.c:140:55: warning[-Wanalyzer-shift-count-overflow]: shift by count (‘32’) >= precision of type (‘32’)
xen-4.19.2/stubdom/include/../../xen/common/bunzip2.c:518:19: enter_function: entry to ‘read_bunzip’
xen-4.19.2/stubdom/include/../../xen/common/bunzip2.c:524:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/include/../../xen/common/bunzip2.c:528:9: branch_false: ...to here
xen-4.19.2/stubdom/include/../../xen/common/bunzip2.c:536:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/include/../../xen/common/bunzip2.c:605:20: branch_false: ...to here
xen-4.19.2/stubdom/include/../../xen/common/bunzip2.c:605:20: call_function: calling ‘get_next_block’ from ‘read_bunzip’
#  138|   	/* Calculate result */
#  139|   	bd->inbufBitCount -= bits_wanted;
#  140|-> 	bits |= (bd->inbufBits >> bd->inbufBitCount)&((1 << bits_wanted)-1);
#  141|   
#  142|   	return bits;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def213]
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:575:49: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*rc.ptr’
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:552:12: branch_false: following ‘false’ branch (when ‘buf’ is NULL)...
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:555:25: branch_false: ...to here
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:556:12: branch_false: following ‘false’ branch (when ‘inbuf’ is non-NULL)...
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:561:9: branch_false: ...to here
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:572:21: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:573:21: branch_true: ...to here
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:573:20: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:575:50: branch_false: ...to here
xen-4.19.2/stubdom/include/../../xen/common/unlzma.c:575:49: danger: use of uninitialized value ‘*rc.ptr’ here
#  573|   		if (rc.ptr >= rc.buffer_end)
#  574|   			rc_read(&rc);
#  575|-> 		((unsigned char *)&header)[i] = *rc.ptr++;
#  576|   	}
#  577|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def214]
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:182:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  180|       {
#  181|       case XEN_ELFNOTE_LOADER:
#  182|->         safe_strcpy(parms->loader, str);
#  183|           break;
#  184|       case XEN_ELFNOTE_GUEST_OS:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def215]
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:185:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  183|           break;
#  184|       case XEN_ELFNOTE_GUEST_OS:
#  185|->         safe_strcpy(parms->guest_os, str);
#  186|           break;
#  187|       case XEN_ELFNOTE_GUEST_VERSION:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def216]
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:188:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  186|           break;
#  187|       case XEN_ELFNOTE_GUEST_VERSION:
#  188|->         safe_strcpy(parms->guest_ver, str);
#  189|           break;
#  190|       case XEN_ELFNOTE_XEN_VERSION:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def217]
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:191:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  189|           break;
#  190|       case XEN_ELFNOTE_XEN_VERSION:
#  191|->         safe_strcpy(parms->xen_ver, str);
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def218]
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:194:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:
#  194|->         if ( !strcmp(str, "yes") )
#  195|               parms->pae = XEN_PAE_EXTCR3;
#  196|           if ( strstr(str, "bimodal") )

Error: GCC_ANALYZER_WARNING (CWE-688): [#def219]
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:200:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#  198|           break;
#  199|       case XEN_ELFNOTE_BSD_SYMTAB:
#  200|->         if ( !strcmp(str, "yes") )
#  201|               parms->bsd_symtab = 1;
#  202|           break;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def220]
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:87:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘r’
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:77:8: branch_false: following ‘false’ branch (when ‘fd >= 0’)...
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:81:14: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:82:8: branch_false: following ‘false’ branch (when ‘nullfd >= 0’)...
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:84:9: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:84:9: acquire_resource: opened here
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:85:8: branch_false: following ‘false’ branch (when ‘r >= 0’)...
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:87:5: branch_false: ...to here
xen-4.19.2/stubdom/libs-x86_64/toolcore/handlereg.c:87:5: danger: ‘r’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   85|       if (r < 0) goto err;
#   86|   
#   87|->     close(nullfd);
#   88|       return 0;
#   89|   

Error: COMPILER_WARNING: [#def221]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:38: included_from: Included from here.
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘init_string_with_size’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:67:19: warning[-Wold-style-definition]: old-style function definition
#   67 | static void DEFUN(init_string_with_size,(buffer, size),
#      |                   ^~~~~~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#   65|   
#   66|   
#   67|-> static void DEFUN(init_string_with_size,(buffer, size),
#   68|   	   string_type *buffer AND
#   69|   	   unsigned int size )

Error: COMPILER_WARNING: [#def222]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘init_string’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:76:19: warning[-Wold-style-definition]: old-style function definition
#   76 | static void DEFUN(init_string,(buffer),
#      |                   ^~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#   74|   }
#   75|   
#   76|-> static void DEFUN(init_string,(buffer),
#   77|   	   string_type *buffer)
#   78|   {

Error: COMPILER_WARNING: [#def223]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘find’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:83:18: warning[-Wold-style-definition]: old-style function definition
#   83 | static int DEFUN(find, (str, what),
#      |                  ^~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#   81|   }
#   82|   
#   83|-> static int DEFUN(find, (str, what),
#   84|   	  string_type *str AND
#   85|   	  char *what)

Error: COMPILER_WARNING: [#def224]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘write_buffer’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:101:19: warning[-Wold-style-definition]: old-style function definition
#  101 | static void DEFUN(write_buffer,(buffer),
#      |                   ^~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#   99|   }
#  100|   
#  101|-> static void DEFUN(write_buffer,(buffer),
#  102|   	   string_type *buffer)
#  103|   {

Error: COMPILER_WARNING: [#def225]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘delete_string’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:108:19: warning[-Wold-style-definition]: old-style function definition
#  108 | static void DEFUN(delete_string,(buffer),
#      |                   ^~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  106|   
#  107|   
#  108|-> static void DEFUN(delete_string,(buffer),
#  109|   	   string_type *buffer)
#  110|   {

Error: COMPILER_WARNING: [#def226]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘addr’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:115:20: warning[-Wold-style-definition]: old-style function definition
#  115 | static char *DEFUN(addr, (buffer, idx),
#      |                    ^~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  113|   
#  114|   
#  115|-> static char *DEFUN(addr, (buffer, idx),
#  116|   	    string_type *buffer AND
#  117|   	    unsigned int idx)

Error: COMPILER_WARNING: [#def227]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘at’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:122:19: warning[-Wold-style-definition]: old-style function definition
#  122 | static char DEFUN(at,(buffer, pos),
#      |                   ^~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  120|   }
#  121|   
#  122|-> static char DEFUN(at,(buffer, pos),
#  123|   	   string_type *buffer AND
#  124|   	   unsigned int pos) 

Error: COMPILER_WARNING: [#def228]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘catchar’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:133:19: warning[-Wold-style-definition]: old-style function definition
#  133 | static void DEFUN(catchar,(buffer, ch),
#      |                   ^~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  131|   }
#  132|   
#  133|-> static void DEFUN(catchar,(buffer, ch), 
#  134|   	   string_type *buffer AND
#  135|   	   char ch)

Error: COMPILER_WARNING: [#def229]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘overwrite_string’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:147:19: warning[-Wold-style-definition]: old-style function definition
#  147 | static void DEFUN(overwrite_string,(dst,   src),
#      |                   ^~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  145|   
#  146|   
#  147|-> static void DEFUN(overwrite_string,(dst,   src),
#  148|   	   string_type *dst AND
#  149|   	   string_type *src)

Error: COMPILER_WARNING: [#def230]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘catstr’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:157:19: warning[-Wold-style-definition]: old-style function definition
#  157 | static void DEFUN(catstr,(dst, src),
#      |                   ^~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  155|   }
#  156|   
#  157|-> static void DEFUN(catstr,(dst, src),
#  158|   	   string_type *dst AND
#  159|   	   string_type *src)

Error: COMPILER_WARNING: [#def231]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘cattext’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:169:19: warning[-Wold-style-definition]: old-style function definition
#  169 | static void DEFUN(cattext,(buffer, string),
#      |                   ^~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  167|   
#  168|   
#  169|-> static void DEFUN(cattext,(buffer, string),
#  170|   	   string_type *buffer AND
#  171|   	   char *string)

Error: COMPILER_WARNING: [#def232]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘catbuf’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:181:19: warning[-Wold-style-definition]: old-style function definition
#  181 | static void DEFUN(catbuf,(buffer, buf, len),
#      |                   ^~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  179|   }
#  180|   
#  181|-> static void DEFUN(catbuf,(buffer, buf, len),
#  182|   	   string_type *buffer AND
#  183|   	   char *buf AND

Error: COMPILER_WARNING: [#def233]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘skip_white_and_stars’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:197:7: warning[-Wold-style-definition]: old-style function definition
#  197 | DEFUN(skip_white_and_stars,(src, idx),
#      |       ^~~~~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  195|   
#  196|   static unsigned int 
#  197|-> DEFUN(skip_white_and_stars,(src, idx),
#  198|         string_type *src AND
#  199|         unsigned int idx)

Error: COMPILER_WARNING: [#def234]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘exec’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:240:19: warning[-Wold-style-definition]: old-style function definition
#  240 | static void DEFUN(exec,(word),
#      |                   ^~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  238|   #define WORD(x) static void x()
#  239|   
#  240|-> static void DEFUN(exec,(word),
#  241|   		  dict_type *word)
#  242|   {

Error: COMPILER_WARNING (CWE-704): [#def235]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘push_number’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:271:12: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  271 |     *isp = (int)(*pc);
#      |            ^
#  269|       isp++;
#  270|       pc++;
#  271|->     *isp = (int)(*pc);
#  272|       pc++;
#  273|       

Error: COMPILER_WARNING: [#def236]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘remove_noncomments’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:299:7: warning[-Wold-style-definition]: old-style function definition
#  299 | DEFUN(remove_noncomments,(src,dst),
#      |       ^~~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  297|   
#  298|   static void 
#  299|-> DEFUN(remove_noncomments,(src,dst),
#  300|   	   string_type *src AND
#  301|   	   string_type *dst)

Error: COMPILER_WARNING: [#def237]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘iscommand’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:777:8: warning[-Wold-style-definition]: old-style function definition
#  777 | DEFUN( iscommand,(ptr, idx),
#      |        ^~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  775|   /* A command is all upper case,and alone on a line */
#  776|   static int 
#  777|-> DEFUN( iscommand,(ptr, idx),
#  778|         string_type *ptr AND
#  779|         unsigned int idx)

Error: COMPILER_WARNING: [#def238]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘copy_past_newline’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:802:7: warning[-Wold-style-definition]: old-style function definition
#  802 | DEFUN(copy_past_newline,(ptr, idx, dst),
#      |       ^~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
#  800|   
#  801|   static unsigned int
#  802|-> DEFUN(copy_past_newline,(ptr, idx, dst),
#  803|         string_type *ptr AND
#  804|         unsigned int idx AND

Error: COMPILER_WARNING: [#def239]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘nextword’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1066:7: warning[-Wold-style-definition]: old-style function definition
# 1066 | DEFUN(nextword,(string, word),
#      |       ^~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1064|   
# 1065|   char *
# 1066|-> DEFUN(nextword,(string, word),
# 1067|         char *string AND
# 1068|         char **word)

Error: COMPILER_WARNING: [#def240]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘lookup_word’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1144:7: warning[-Wold-style-definition]: old-style function definition
# 1144 | DEFUN(lookup_word,(word),
#      |       ^~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1142|   dict_type *root;
# 1143|   dict_type *
# 1144|-> DEFUN(lookup_word,(word),
# 1145|         char *word)
# 1146|   {

Error: COMPILER_WARNING: [#def241]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘newentry’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1198:7: warning[-Wold-style-definition]: old-style function definition
# 1198 | DEFUN(newentry,(word),
#      |       ^~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1196|   
# 1197|   dict_type *
# 1198|-> DEFUN(newentry,(word),
# 1199|         char *word)
# 1200|   {

Error: CPPCHECK_WARNING (CWE-476): [#def242]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1202: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new
# 1200|   {
# 1201|       dict_type *new = (dict_type *)malloc(sizeof(dict_type));
# 1202|->     new->word = word;
# 1203|       new->next = root;
# 1204|       root = new;

Error: CPPCHECK_WARNING (CWE-476): [#def243]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1203: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new
# 1201|       dict_type *new = (dict_type *)malloc(sizeof(dict_type));
# 1202|       new->word = word;
# 1203|->     new->next = root;
# 1204|       root = new;
# 1205|       new->code = (stinst_type *)malloc(sizeof(stinst_type ));

Error: CPPCHECK_WARNING (CWE-476): [#def244]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1205: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new
# 1203|       new->next = root;
# 1204|       root = new;
# 1205|->     new->code = (stinst_type *)malloc(sizeof(stinst_type ));
# 1206|       new->code_length = 1;
# 1207|       new->code_end = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def245]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1206: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new
# 1204|       root = new;
# 1205|       new->code = (stinst_type *)malloc(sizeof(stinst_type ));
# 1206|->     new->code_length = 1;
# 1207|       new->code_end = 0;
# 1208|       return new;

Error: CPPCHECK_WARNING (CWE-476): [#def246]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1207: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new
# 1205|       new->code = (stinst_type *)malloc(sizeof(stinst_type ));
# 1206|       new->code_length = 1;
# 1207|->     new->code_end = 0;
# 1208|       return new;
# 1209|       

Error: COMPILER_WARNING: [#def247]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘add_to_definition’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1214:7: warning[-Wold-style-definition]: old-style function definition
# 1214 | DEFUN(add_to_definition,(entry, word),
#      |       ^~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1212|   
# 1213|   unsigned int
# 1214|-> DEFUN(add_to_definition,(entry, word), 
# 1215|         dict_type *entry AND
# 1216|         stinst_type word)

Error: COMPILER_WARNING: [#def248]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘add_intrinsic’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1237:7: warning[-Wold-style-definition]: old-style function definition
# 1237 | DEFUN(add_intrinsic,(name, func),
#      |       ^~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1235|   
# 1236|   void
# 1237|-> DEFUN(add_intrinsic,(name, func),
# 1238|         char *name AND
# 1239|         void (*func)())

Error: COMPILER_WARNING: [#def249]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘add_var’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1253:7: warning[-Wold-style-definition]: old-style function definition
# 1253 | DEFUN(add_var,(name),
#      |       ^~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1251|   
# 1252|   void
# 1253|-> DEFUN(add_var,(name),
# 1254|         char *name)
# 1255|   {

Error: COMPILER_WARNING: [#def250]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘compile’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1267:7: warning[-Wold-style-definition]: old-style function definition
# 1267 | DEFUN(compile, (string),
#      |       ^~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1265|   
# 1266|   void 
# 1267|-> DEFUN(compile, (string), 
# 1268|         char *string)
# 1269|   

Error: COMPILER_WARNING (CWE-704): [#def251]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘bang’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1343:2: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
# 1343 | *(int *)((isp[0])) = isp[-1];
#      |  ^
# 1341|   static void DEFUN_VOID(bang)
# 1342|   {
# 1343|-> *(int *)((isp[0])) = isp[-1];
# 1344|   isp-=2;
# 1345|   pc++;

Error: COMPILER_WARNING (CWE-704): [#def252]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘atsign’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1351:15: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
# 1351 |     isp[0] = *(int *)(isp[0]);
#      |               ^
# 1349|   WORD(atsign)
# 1350|   {
# 1351|->     isp[0] = *(int *)(isp[0]);
# 1352|       pc++;
# 1353|   }

Error: COMPILER_WARNING: [#def253]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘read_in’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1364:19: warning[-Wold-style-definition]: old-style function definition
# 1364 | static void DEFUN(read_in, (str, file),
#      |                   ^~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1362|   
# 1363|   
# 1364|-> static void DEFUN(read_in, (str, file), 
# 1365|   	   string_type *str AND
# 1366|   		  FILE *file)

Error: COMPILER_WARNING: [#def254]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c: scope_hint: In function ‘main’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/makedoc.c:1389:11: warning[-Wold-style-definition]: old-style function definition
# 1389 | int DEFUN(main,(ac,av),
#      |           ^~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/doc/ansidecl.h:110:41: note: in definition of macro ‘DEFUN’
#  110 | #define DEFUN(name, arglist, args)      name arglist args;
#      |                                         ^~~~
# 1387|   }
# 1388|   
# 1389|-> int DEFUN(main,(ac,av),
# 1390|   int ac AND
# 1391|   char *av[])

Error: CPPCHECK_WARNING (CWE-476): [#def255]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/argz/envz_merge.c:33: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: name_str
#   31|           {
#   32|             name_str = strdup (entry);
#   33|->           name_iter = strchr(name_str, '=');
#   34|             if(name_iter)
#   35|               *name_iter = '\0';

Error: CPPCHECK_WARNING (CWE-476): [#def256]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/argz/envz_merge.c:46: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: name_str
#   44|           {
#   45|             name_str = strdup (entry);
#   46|->           name_iter = strchr(name_str, '=');
#   47|             if(name_iter)
#   48|               {

Error: COMPILER_WARNING: [#def257]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/errno/errno.c:11:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   11 | __errno ()
#      | ^~~~~~~
#    9|   
#   10|   int *
#   11|-> __errno ()
#   12|   {
#   13|     return &_REENT->_errno;

Error: COMPILER_WARNING: [#def258]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:22:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   22 | static long get_number ();
#      | ^~~~~~
#   20|   #endif
#   21|   
#   22|-> static long get_number ();
#   23|   static void print_number ();
#   24|   static void write_char ();

Error: COMPILER_WARNING: [#def259]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:23:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   23 | static void print_number ();
#      | ^~~~~~
#   21|   
#   22|   static long get_number ();
#   23|-> static void print_number ();
#   24|   static void write_char ();
#   25|   static void write_string ();

Error: COMPILER_WARNING: [#def260]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:24:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   24 | static void write_char ();
#      | ^~~~~~
#   22|   static long get_number ();
#   23|   static void print_number ();
#   24|-> static void write_char ();
#   25|   static void write_string ();
#   26|   

Error: COMPILER_WARNING: [#def261]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:25:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   25 | static void write_string ();
#      | ^~~~~~
#   23|   static void print_number ();
#   24|   static void write_char ();
#   25|-> static void write_string ();
#   26|   
#   27|   /* Non-zero for big-endian systems.  */

Error: COMPILER_WARNING: [#def262]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:179:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  179 | get_number (s, size, unsigned_p)
#      | ^~~~~~~~~~
#  177|   
#  178|   static long
#  179|-> get_number (s, size, unsigned_p)
#  180|        char *s;
#  181|        long size;

Error: COMPILER_WARNING: [#def263]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:222:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  222 | print_number (base, unsigned_p, n)
#      | ^~~~~~~~~~~~
#  220|   
#  221|   static void
#  222|-> print_number (base, unsigned_p, n)
#  223|        int base;
#  224|        int unsigned_p;

Error: COMPILER_WARNING: [#def264]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:256:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  256 | write_char (c)
#      | ^~~~~~~~~~
#  254|   
#  255|   static void
#  256|-> write_char (c)
#  257|        char c;
#  258|   {

Error: COMPILER_WARNING: [#def265]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/__dprintf.c:267:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  267 | write_string (s)
#      | ^~~~~~~~~~~~
#  265|   
#  266|   static void
#  267|-> write_string (s)
#  268|        char *s;
#  269|   {

Error: CPPCHECK_WARNING (CWE-570): [#def266]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/init.c:36: error[subtractPointers]: Subtracting pointers that point to different objects
#   34|     size_t i;
#   35|   
#   36|->   count = __preinit_array_end - __preinit_array_start;
#   37|     for (i = 0; i < count; i++)
#   38|       __preinit_array_start[i] ();

Error: CPPCHECK_WARNING (CWE-570): [#def267]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/init.c:42: error[subtractPointers]: Subtracting pointers that point to different objects
#   40|     _init ();
#   41|   
#   42|->   count = __init_array_end - __init_array_start;
#   43|     for (i = 0; i < count; i++)
#   44|       __init_array_start[i] ();

Error: CPPCHECK_WARNING (CWE-570): [#def268]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/misc/init.c:54: error[subtractPointers]: Subtracting pointers that point to different objects
#   52|     size_t i;
#   53|     
#   54|->   count = __fini_array_end - __fini_array_start;
#   55|     for (i = 0; i < count; i++)
#   56|       __fini_array_start[i] ();

Error: COMPILER_WARNING: [#def269]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash.c:106:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  106 | __hash_open(file, flags, mode, info, dflags)
#      | ^~~~~~~~~~~
#  104|   
#  105|   extern DB *
#  106|-> __hash_open(file, flags, mode, info, dflags)
#  107|   	const char *file;
#  108|   	int flags, mode, dflags;

Error: COMPILER_WARNING (CWE-457): [#def270]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash.h:171:29: warning[-Wmaybe-uninitialized]: ‘freep’ may be used uninitialized
#  171 | #define SETBIT(A, N)    ((A)[(N)/BITS_PER_MAP] |= (1<<((N)%BITS_PER_MAP)))
#      |                          ~~~^~~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:769:17: note: in expansion of macro ‘SETBIT’
#  769 |                 SETBIT(freep, free_bit);
#      |                 ^~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c: scope_hint: In function ‘__add_ovflpage’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_page.c:670:21: note: ‘freep’ was declared here
#  670 |         __uint32_t *freep;
#      |                     ^~~~~
#  169|   /* Given the address of the beginning of a big map, clear/set the nth bit */
#  170|   #define CLRBIT(A, N)	((A)[(N)/BITS_PER_MAP] &= ~(1<<((N)%BITS_PER_MAP)))
#  171|-> #define SETBIT(A, N)	((A)[(N)/BITS_PER_MAP] |= (1<<((N)%BITS_PER_MAP)))
#  172|   #define ISSET(A, N)	((A)[(N)/BITS_PER_MAP] & (1<<((N)%BITS_PER_MAP)))
#  173|   

Error: COMPILER_WARNING (CWE-691): [#def271]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_bigkey.c: scope_hint: In function ‘__big_insert’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_bigkey.c:126:20: warning[-Wdangling-else]: suggest explicit braces to avoid ambiguous ‘else’
#  126 |                 if (!key_size)
#      |                    ^
#  124|   			return (-1);
#  125|   		n = p[0];
#  126|-> 		if (!key_size)
#  127|   			if (FREESPACE(p)) {
#  128|   				move_bytes = MIN(FREESPACE(p), val_size);

Error: COMPILER_WARNING (CWE-457): [#def272]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c: scope_hint: In function ‘__get_buf’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:153:29: warning[-Wmaybe-uninitialized]: ‘segment_ndx’ may be used uninitialized
#  153 |                         segp[segment_ndx] =
#      |                             ^
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:122:22: note: ‘segment_ndx’ was declared here
#  122 |         int is_disk, segment_ndx;
#      |                      ^~~~~~~~~~~
#  151|   			return (NULL);
#  152|   		if (!prev_bp)
#  153|-> 			segp[segment_ndx] =
#  154|   			    (BUFHEAD *)((ptrdiff_t)bp | is_disk_mask);
#  155|   	} else {

Error: COMPILER_WARNING (CWE-457): [#def273]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:153:29: warning[-Wmaybe-uninitialized]: ‘segp’ may be used uninitialized
#  153 |                         segp[segment_ndx] =
#      |                             ^
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_buf.c:123:17: note: ‘segp’ was declared here
#  123 |         SEGMENT segp;
#      |                 ^~~~
#  151|   			return (NULL);
#  152|   		if (!prev_bp)
#  153|-> 			segp[segment_ndx] =
#  154|   			    (BUFHEAD *)((ptrdiff_t)bp | is_disk_mask);
#  155|   	} else {

Error: COMPILER_WARNING (CWE-1164): [#def274]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_func.c:69:1: warning[-Wunused-function]: ‘hash1’ defined but not used
#   69 | hash1(keyarg, len)
#      | ^~~~~
#   67|   
#   68|   static __uint32_t
#   69|-> hash1(keyarg, len)
#   70|   	const void *keyarg;
#   71|   	size_t len;

Error: COMPILER_WARNING (CWE-1164): [#def275]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_func.c:89:1: warning[-Wunused-function]: ‘hash2’ defined but not used
#   89 | hash2(keyarg, len)
#      | ^~~~~
#   87|   
#   88|   static __uint32_t
#   89|-> hash2(keyarg, len)
#   90|   	const void *keyarg;
#   91|   	size_t len;

Error: COMPILER_WARNING (CWE-1164): [#def276]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_func.c:118:1: warning[-Wunused-function]: ‘hash3’ defined but not used
#  118 | hash3(keyarg, len)
#      | ^~~~~
#  116|    */
#  117|   static __uint32_t
#  118|-> hash3(keyarg, len)
#  119|   	const void *keyarg;
#  120|   	size_t len;

Error: COMPILER_WARNING: [#def277]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hash_log2.c:47:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   47 | __log2(num)
#      | ^~~~~~
#   45|   
#   46|   __uint32_t
#   47|-> __log2(num)
#   48|   	__uint32_t num;
#   49|   {

Error: COMPILER_WARNING (CWE-563): [#def278]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hcreate_r.c:126:32: warning[-Wunused-variable]: unused variable ‘ie’
#  126 |         struct internal_entry *ie;
#      |                                ^~
#  124|   hdestroy_r(struct hsearch_data *htab)
#  125|   {
#  126|-> 	struct internal_entry *ie;
#  127|   	size_t idx;
#  128|   

Error: COMPILER_WARNING (CWE-563): [#def279]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hcreate_r.c: scope_hint: In function ‘hdestroy_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/hcreate_r.c:127:16: warning[-Wunused-variable]: unused variable ‘idx’
#  127 |         size_t idx;
#      |                ^~~
#  125|   {
#  126|   	struct internal_entry *ie;
#  127|-> 	size_t idx;
#  128|   
#  129|   	if (htab->htable == NULL)

Error: COMPILER_WARNING: [#def280]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/qsort.c:84:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   84 | static inline char      *med3 _PARAMS((char *, char *, char *, int (*)()));
#      | ^~~~~~
#   82|   #endif
#   83|   
#   84|-> static inline char	*med3 _PARAMS((char *, char *, char *, int (*)()));
#   85|   static inline void	 swapfunc _PARAMS((char *, char *, int, int));
#   86|   

Error: COMPILER_WARNING: [#def281]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/qsort.c:130:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  130 | _DEFUN(med3, (a, b, c, cmp),
#      | ^~~~~~
#  128|   
#  129|   static inline char *
#  130|-> _DEFUN(med3, (a, b, c, cmp),
#  131|   	char *a _AND
#  132|   	char *b _AND

Error: COMPILER_WARNING: [#def282]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/qsort.c:142:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  142 | _DEFUN(qsort, (a, n, es, cmp),
#      | ^~~~~~
#  140|   
#  141|   void
#  142|-> _DEFUN(qsort, (a, n, es, cmp),
#  143|   	void *a _AND
#  144|   	size_t n _AND

Error: COMPILER_WARNING: [#def283]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/search/tdestroy.c:29:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   29 | trecurse(root, free_action)
#      | ^~~~~~~~
#   27|   /* Walk the nodes of a tree */
#   28|   static void
#   29|-> trecurse(root, free_action)
#   30|   	node_t *root;	/* Root of the tree to be walked */
#   31|   	void (*free_action)(void *);

Error: COMPILER_WARNING (CWE-681): [#def284]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c: scope_hint: In function ‘_asiprintf_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c:48:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness
#   48 |       *strp = f._bf._base;
#      |             ^
#   46|       {
#   47|         *f._p = 0;
#   48|->       *strp = f._bf._base;
#   49|       }
#   50|     return (ret);

Error: COMPILER_WARNING (CWE-681): [#def285]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c: scope_hint: In function ‘asiprintf’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asiprintf.c:75:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness
#   75 |       *strp = f._bf._base;
#      |             ^
#   73|       {
#   74|         *f._p = 0;
#   75|->       *strp = f._bf._base;
#   76|       }
#   77|     return (ret);

Error: COMPILER_WARNING (CWE-681): [#def286]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c: scope_hint: In function ‘_asprintf_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c:48:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness
#   48 |       *strp = f._bf._base;
#      |             ^
#   46|       {
#   47|         *f._p = 0;
#   48|->       *strp = f._bf._base;
#   49|       }
#   50|     return (ret);

Error: COMPILER_WARNING (CWE-681): [#def287]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c: scope_hint: In function ‘asprintf’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/asprintf.c:75:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness
#   75 |       *strp = f._bf._base;
#      |             ^
#   73|       {
#   74|         *f._p = 0;
#   75|->       *strp = f._bf._base;
#   76|       }
#   77|     return (ret);

Error: COMPILER_WARNING (CWE-681): [#def288]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/fread.c: scope_hint: In function ‘_fread_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/fread.c:182:25: warning[-Wpointer-sign]: pointer targets in assignment from ‘char *’ to ‘unsigned char *’ differ in signedness
#  182 |           fp->_bf._base = p;
#      |                         ^
#  180|   	  int old_size = fp->_bf._size;
#  181|   	  /* allow __refill to use user's buffer */
#  182|-> 	  fp->_bf._base = p;
#  183|   	  fp->_bf._size = resid;
#  184|   	  fp->_p = p;

Error: COMPILER_WARNING (CWE-681): [#def289]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/fread.c:184:18: warning[-Wpointer-sign]: pointer targets in assignment from ‘char *’ to ‘unsigned char *’ differ in signedness
#  184 |           fp->_p = p;
#      |                  ^
#  182|   	  fp->_bf._base = p;
#  183|   	  fp->_bf._size = resid;
#  184|-> 	  fp->_p = p;
#  185|   	  rc = __srefill_r (ptr, fp);
#  186|   	  /* restore fp buffering back to original state */

Error: COMPILER_WARNING (CWE-563): [#def290]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/open_memstream.c: scope_hint: In function ‘_open_memstream_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/open_memstream.c:257:7: warning[-Wunused-variable]: unused variable ‘flags’
#  257 |   int flags;
#      |       ^~~~~
#  255|     FILE *fp;
#  256|     memstream *c;
#  257|->   int flags;
#  258|   
#  259|     if (!buf || !size)

Error: COMPILER_WARNING (CWE-681): [#def291]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vasiprintf.c: scope_hint: In function ‘_vasiprintf_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vasiprintf.c:60:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness
#   60 |       *strp = f._bf._base;
#      |             ^
#   58|       {
#   59|         *f._p = 0;
#   60|->       *strp = f._bf._base;
#   61|       }
#   62|     return ret;

Error: COMPILER_WARNING (CWE-681): [#def292]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vasprintf.c: scope_hint: In function ‘_vasprintf_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vasprintf.c:60:13: warning[-Wpointer-sign]: pointer targets in assignment from ‘unsigned char *’ to ‘char *’ differ in signedness
#   60 |       *strp = f._bf._base;
#      |             ^
#   58|       {
#   59|         *f._p = 0;
#   60|->       *strp = f._bf._base;
#   61|       }
#   62|     return ret;

Error: COMPILER_WARNING: [#def293]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:229:12: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  229 | /*static*/ u_char *__sccl ();
#      |            ^~~~~~
#  227|   #endif
#  228|   
#  229|-> /*static*/ u_char *__sccl ();
#  230|   
#  231|   /*

Error: COMPILER_WARNING: [#def294]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c: scope_hint: In function ‘__svfscanf_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:302:3: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  302 |   u_long (*ccfn) () = 0;        /* conversion function (strtol/strtoul) */
#      |   ^~~~~~
#  300|     mbstate_t state;              /* value to keep track of multibyte state */
#  301|   
#  302|->   u_long (*ccfn) () = 0;	/* conversion function (strtol/strtoul) */
#  303|     char ccltab[256];		/* character class table for %[...] */
#  304|     char buf[BUF];		/* buffer for numeric conversions */

Error: COMPILER_WARNING: [#def295]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:506:11: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  506 |           ccfn = (u_long (*)())_strtol_r;
#      |           ^~~~
#  504|   	case 'd':
#  505|   	  c = CT_INT;
#  506|-> 	  ccfn = (u_long (*)())_strtol_r;
#  507|   	  base = 10;
#  508|   	  break;

Error: COMPILER_WARNING: [#def296]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:512:11: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  512 |           ccfn = (u_long (*)())_strtol_r;
#      |           ^~~~
#  510|   	case 'i':
#  511|   	  c = CT_INT;
#  512|-> 	  ccfn = (u_long (*)())_strtol_r;
#  513|   	  base = 0;
#  514|   	  break;

Error: COMPILER_WARNING: [#def297]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:634:11: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  634 |           ccfn = (u_long (*)())_strtol_r;
#      |           ^~~~
#  632|   	    flags |= LONG;
#  633|   	  c = CT_INT;
#  634|-> 	  ccfn = (u_long (*)())_strtol_r;
#  635|   	  base = 10;
#  636|   	  break;

Error: CPPCHECK_WARNING (CWE-476): [#def298]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdio/vfscanf.c:1403: error[nullPointer]: Null pointer dereference
# 1401|   		  flp = GET_ARG (N, ap, float *);
# 1402|   		  if (isnan (res))
# 1403|-> 		    *flp = nanf (NULL);
# 1404|   		  else
# 1405|   		    *flp = res;

Error: COMPILER_WARNING (CWE-681): [#def299]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/btowc.c: scope_hint: In function ‘btowc’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/btowc.c:22:37: warning[-Wpointer-sign]: pointer targets in passing argument 3 of ‘_mbtowc_r’ differ in signedness
#   22 |   retval = _mbtowc_r (_REENT, &pwc, &b, 1, &mbs);
#      |                                     ^~
#      |                                     |
#      |                                     unsigned char *
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/include/wchar.h:4: included_from: Included from here.
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/btowc.c:1: included_from: Included from here.
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/include/stdlib.h:91:9: note: expected ‘const char *’ but argument is of type ‘unsigned char *’
#   91 | int     _EXFUN(_mbtowc_r,(struct _reent *, wchar_t *, const char *, size_t, _mbstate_t *));
#      |         ^~~~~~
#   20|     _REENT_CHECK_MISC(_REENT);
#   21|   
#   22|->   retval = _mbtowc_r (_REENT, &pwc, &b, 1, &mbs);
#   23|   
#   24|     if (c == EOF || retval != 1)

Error: COMPILER_WARNING: [#def300]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv.c: scope_hint: In function ‘getenv’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv.c:89:3: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   89 |   char *_findenv_r ();
#      |   ^~~~
#   87|   {
#   88|     int offset;
#   89|->   char *_findenv_r ();
#   90|   
#   91|     return _findenv_r (_REENT, name, &offset);

Error: COMPILER_WARNING: [#def301]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv_r.c: scope_hint: In function ‘_getenv_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/getenv_r.c:133:3: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  133 |   char *_findenv_r ();
#      |   ^~~~
#  131|   {
#  132|     int offset;
#  133|->   char *_findenv_r ();
#  134|   
#  135|     return _findenv_r (reent_ptr, name, &offset);

Error: COMPILER_WARNING: [#def302]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:722:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  722 | eiisinf (x)
#      | ^~~~~~~
#  720|   /* Return nonzero if internal format number is infinite. */
#  721|   static int 
#  722|-> eiisinf (x)
#  723|        unsigned short x[];
#  724|   {

Error: COMPILER_WARNING: [#def303]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/mallocr.c:1014:41: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
# 1014 | #define malloc_update_mallinfo          __malloc_update_mallinfo
#      |                                         ^~~~~~~~~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/mallocr.c:3412:13: note: in expansion of macro ‘malloc_update_mallinfo’
# 3412 | STATIC void malloc_update_mallinfo()
#      |             ^~~~~~~~~~~~~~~~~~~~~~
# 1012|   #define malloc_usable_size		_malloc_usable_size_r
# 1013|   
# 1014|-> #define malloc_update_mallinfo		__malloc_update_mallinfo
# 1015|   
# 1016|   #define malloc_av_			__malloc_av_

Error: COMPILER_WARNING: [#def304]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/mlock.c:47:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   47 | __malloc_lock (ptr)
#      | ^~~~~~~~~~~~~
#   45|   
#   46|   void
#   47|-> __malloc_lock (ptr)
#   48|        struct _reent *ptr;
#   49|   {

Error: COMPILER_WARNING: [#def305]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/mlock.c:56:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   56 | __malloc_unlock (ptr)
#      | ^~~~~~~~~~~~~~~
#   54|   
#   55|   void
#   56|-> __malloc_unlock (ptr)
#   57|        struct _reent *ptr;
#   58|   {

Error: CPPCHECK_WARNING (CWE-476): [#def306]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/strtod.c:1176: error[nullPointer]: Null pointer dereference
# 1174|     double retval = _strtod_r (_REENT, s00, se);
# 1175|     if (isnan (retval))
# 1176|->     return nanf (NULL);
# 1177|     return (float)retval;
# 1178|   }

Error: COMPILER_WARNING: [#def307]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/system.c:64:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   64 | static int do_system ();
#      | ^~~~~~
#   62|   
#   63|   #if defined (unix) || defined (__CYGWIN__)
#   64|-> static int do_system ();
#   65|   #endif
#   66|   

Error: COMPILER_WARNING: [#def308]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/system.c:121:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#  121 | do_system (ptr, s)
#      | ^~~~~~~~~
#  119|   
#  120|   static int
#  121|-> do_system (ptr, s)
#  122|        struct _reent *ptr;
#  123|        _CONST char *s;

Error: COMPILER_WARNING (CWE-681): [#def309]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/wctob.c: scope_hint: In function ‘wctob’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/wctob.c:19:31: warning[-Wpointer-sign]: pointer targets in passing argument 2 of ‘_wctomb_r’ differ in signedness
#   19 |   retval = _wctomb_r (_REENT, &pwc, c, &mbs);
#      |                               ^~~~
#      |                               |
#      |                               unsigned char *
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/include/sys/reent.h:13: included_from: Included from here.
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/include/reent.h:48: included_from: Included from here.
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/stdlib/wctob.c:1: included_from: Included from here.
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/include/stdlib.h:93:9: note: expected ‘char *’ but argument is of type ‘unsigned char *’
#   93 | int     _EXFUN(_wctomb_r,(struct _reent *, char *, wchar_t, _mbstate_t *));
#      |         ^~~~~~
#   17|     _REENT_CHECK_MISC(_REENT);
#   18|   
#   19|->   retval = _wctomb_r (_REENT, &pwc, c, &mbs);
#   20|   
#   21|     if (c == EOF || retval != 1)

Error: COMPILER_WARNING: [#def310]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libc/time/mktime.c:68:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   68 | validate_structure (tim_p)
#      | ^~~~~~~~~~~~~~~~~~
#   66|   
#   67|   static void 
#   68|-> validate_structure (tim_p)
#   69|        struct tm *tim_p;
#   70|   {

Error: COMPILER_WARNING (CWE-457): [#def311]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:21: included_from: Included from here.
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c: scope_hint: In function ‘__ieee754_rem_pio2’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/fdlibm.h:335:14: warning[-Wmaybe-uninitialized]: ‘z’ may be used uninitialized
#  335 |   sl_u.value = (d);                                             \
#      |   ~~~~~~~~~~~^~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: note: in expansion of macro ‘SET_LOW_WORD’
#  170 |         SET_LOW_WORD(z,low);
#      |         ^~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:92:16: note: ‘z’ was declared here
#   92 |         double z,w,t,r,fn;
#      |                ^
#  333|   do {								\
#  334|     ieee_double_shape_type sl_u;					\
#  335|->   sl_u.value = (d);						\
#  336|     sl_u.parts.lsw = (v);						\
#  337|     (d) = sl_u.value;						\

Error: CPPCHECK_WARNING (CWE-758): [#def312]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/s_lrint.c:59: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   57|   
#   58|     /* Extract sign bit. */
#   59|->   sx = (i0>>31)&1;
#   60|   
#   61|     /* Extract exponent field. */

Error: CPPCHECK_WARNING (CWE-758): [#def313]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/s_lrint.c:75: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   73|             /* Detect the all-zeros representation of plus and
#   74|                minus zero, which fails the calculation below. */
#   75|->           if ((i0 & ~(1 << 31)) == 0)
#   76|                 return 0;
#   77|             j0 = ((i0 & 0x7ff00000) >> 20) - 1023;

Error: CPPCHECK_WARNING (CWE-758): [#def314]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/s_rint.c:50: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   48|   	volatile double w;
#   49|   	EXTRACT_WORDS(i0,i1,x);
#   50|-> 	sx = (i0>>31)&1;
#   51|   	j0 = ((i0>>20)&0x7ff)-0x3ff;
#   52|   	if(j0<20) {

Error: CPPCHECK_WARNING (CWE-758): [#def315]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/s_rint.c:62: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   60|   	        t =  w-TWO52[sx];
#   61|   		GET_HIGH_WORD(i0,t);
#   62|-> 		SET_HIGH_WORD(t,(i0&0x7fffffff)|(sx<<31));
#   63|   	        return t;
#   64|   	    } else {

Error: CPPCHECK_WARNING (CWE-758): [#def316]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/sf_lrint.c:74: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   72|             /* Detect the all-zeros representation of plus and
#   73|                minus zero, which fails the calculation below. */
#   74|->           if ((i0 & ~(1 << 31)) == 0)
#   75|                 return 0;
#   76|             j0 = ((i0 >> 23) & 0xff) - 0x7f;

Error: CPPCHECK_WARNING (CWE-758): [#def317]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/sf_rint.c:40: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   38|   	volatile float w;
#   39|   	GET_FLOAT_WORD(i0,x);
#   40|-> 	sx = (i0>>31)&1;
#   41|   	ix = (i0&0x7fffffff);
#   42|   	j0 = (ix>>23)-0x7f;

Error: CPPCHECK_WARNING (CWE-758): [#def318]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/common/sf_rint.c:54: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   52|   	        t =  w-TWO23[sx];
#   53|   		GET_FLOAT_WORD(i0,t);
#   54|-> 		SET_FLOAT_WORD(t,(i0&0x7fffffff)|(sx<<31));
#   55|   	        return t;
#   56|   	    } else {

Error: COMPILER_WARNING (CWE-569): [#def319]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_atan2.c: scope_hint: In function ‘__ieee754_atan2’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_atan2.c:76:15: warning[-Wparentheses]: suggest parentheses around arithmetic in operand of ‘|’
#   76 |         if((hx-0x3ff00000|lx)==0) return atan(y);   /* x=1.0 */
#      |             ~~^~~~~~~~~~~
#   74|   	   ((iy|((ly|-ly)>>31))>0x7ff00000))	/* x or y is NaN */
#   75|   	   return x+y;
#   76|-> 	if((hx-0x3ff00000|lx)==0) return atan(y);   /* x=1.0 */
#   77|   	m = ((hy>>31)&1)|((hx>>30)&2);	/* 2*sign(x)+sign(y) */
#   78|   

Error: CPPCHECK_WARNING (CWE-758): [#def320]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_atan2.c:77: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   75|   	   return x+y;
#   76|   	if((hx-0x3ff00000|lx)==0) return atan(y);   /* x=1.0 */
#   77|-> 	m = ((hy>>31)&1)|((hx>>30)&2);	/* 2*sign(x)+sign(y) */
#   78|   
#   79|       /* when y = 0 */

Error: CPPCHECK_WARNING (CWE-457): [#def321]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:152: error[legacyUninitvar]: Uninitialized variable: k
#  150|   	t  = x*x;
#  151|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#  152|-> 	if(k==0) 	return one-((x*c)/(c-2.0)-x); 
#  153|   	else 		y = one-((lo-(x*c)/(2.0-c))-hi);
#  154|   	if(k >= -1021) {

Error: COMPILER_WARNING (CWE-457): [#def322]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:152:11: warning[-Wmaybe-uninitialized]: ‘k’ may be used uninitialized
#  152 |         if(k==0)        return one-((x*c)/(c-2.0)-x);
#      |           ^
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:112:19: note: ‘k’ was declared here
#  112 |         __int32_t k,xsb;
#      |                   ^
#  150|   	t  = x*x;
#  151|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#  152|-> 	if(k==0) 	return one-((x*c)/(c-2.0)-x); 
#  153|   	else 		y = one-((lo-(x*c)/(2.0-c))-hi);
#  154|   	if(k >= -1021) {

Error: COMPILER_WARNING (CWE-457): [#def323]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:153:37: warning[-Wmaybe-uninitialized]: ‘lo’ may be used uninitialized
#  153 |         else            y = one-((lo-(x*c)/(2.0-c))-hi);
#      |                                  ~~~^~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:111:21: note: ‘lo’ was declared here
#  111 |         double y,hi,lo,c,t;
#      |                     ^~
#  151|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#  152|   	if(k==0) 	return one-((x*c)/(c-2.0)-x); 
#  153|-> 	else 		y = one-((lo-(x*c)/(2.0-c))-hi);
#  154|   	if(k >= -1021) {
#  155|   	    __uint32_t hy;

Error: COMPILER_WARNING (CWE-457): [#def324]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c: scope_hint: In function ‘__ieee754_exp’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:153:52: warning[-Wmaybe-uninitialized]: ‘hi’ may be used uninitialized
#  153 |         else            y = one-((lo-(x*c)/(2.0-c))-hi);
#      |                                 ~~~~~~~~~~~~~~~~~~~^~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_exp.c:111:18: note: ‘hi’ was declared here
#  111 |         double y,hi,lo,c,t;
#      |                  ^~
#  151|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#  152|   	if(k==0) 	return one-((x*c)/(c-2.0)-x); 
#  153|-> 	else 		y = one-((lo-(x*c)/(2.0-c))-hi);
#  154|   	if(k >= -1021) {
#  155|   	    __uint32_t hy;

Error: CPPCHECK_WARNING (CWE-758): [#def325]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_jn.c:84: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   82|   	if(n==0) return(__ieee754_j0(x));
#   83|   	if(n==1) return(__ieee754_j1(x));
#   84|-> 	sgn = (n&1)&(hx>>31);	/* even n -- 0, odd n -- sign(x) */
#   85|   	x = fabs(x);
#   86|   	if((ix|lx)==0||ix>=0x7ff00000) 	/* if x is 0 or inf */

Error: COMPILER_WARNING (CWE-691): [#def326]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_pow.c: scope_hint: In function ‘__ieee754_pow’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/e_pow.c:122:11: warning[-Wdangling-else]: suggest explicit braces to avoid ambiguous ‘else’
#  122 |         if(ix > 0x7ff00000 || ((ix==0x7ff00000)&&(lx!=0)) ||
#      |           ^
#  120|   
#  121|       /* x|y==NaN return NaN unless x==1 then return 1 */
#  122|-> 	if(ix > 0x7ff00000 || ((ix==0x7ff00000)&&(lx!=0)) ||
#  123|   	   iy > 0x7ff00000 || ((iy==0x7ff00000)&&(ly!=0))) 
#  124|   	    if(((ix-0x3ff00000)|lx)==0) return one;

Error: CPPCHECK_WARNING (CWE-758): [#def327]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_atan2.c:49: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   47|   	   return x+y;
#   48|   	if(hx==0x3f800000) return atanf(y);   /* x=1.0 */
#   49|-> 	m = ((hy>>31)&1)|((hx>>30)&2);	/* 2*sign(x)+sign(y) */
#   50|   
#   51|       /* when y = 0 */

Error: CPPCHECK_WARNING (CWE-758): [#def328]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:54: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   52|   
#   53|   	GET_FLOAT_WORD(sx,x);
#   54|-> 	xsb = (sx>>31)&1;		/* sign bit of x */
#   55|   	hx = sx & 0x7fffffff;		/* high word of |x| */
#   56|   

Error: COMPILER_WARNING (CWE-457): [#def329]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:87:11: warning[-Wmaybe-uninitialized]: ‘k’ may be used uninitialized
#   87 |         if(k==0)        return one-((x*c)/(c-(float)2.0)-x);
#      |           ^
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:50:19: note: ‘k’ was declared here
#   50 |         __int32_t k,xsb,sx;
#      |                   ^
#   85|   	t  = x*x;
#   86|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#   87|-> 	if(k==0) 	return one-((x*c)/(c-(float)2.0)-x); 
#   88|   	else 		y = one-((lo-(x*c)/((float)2.0-c))-hi);
#   89|   	if(k >= -125) {

Error: COMPILER_WARNING (CWE-457): [#def330]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:88:37: warning[-Wmaybe-uninitialized]: ‘lo’ may be used uninitialized
#   88 |         else            y = one-((lo-(x*c)/((float)2.0-c))-hi);
#      |                                  ~~~^~~~~~~~~~~~~~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:49:20: note: ‘lo’ was declared here
#   49 |         float y,hi,lo,c,t;
#      |                    ^~
#   86|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#   87|   	if(k==0) 	return one-((x*c)/(c-(float)2.0)-x); 
#   88|-> 	else 		y = one-((lo-(x*c)/((float)2.0-c))-hi);
#   89|   	if(k >= -125) {
#   90|   	    __uint32_t hy;

Error: COMPILER_WARNING (CWE-457): [#def331]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c: scope_hint: In function ‘__ieee754_expf’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:88:59: warning[-Wmaybe-uninitialized]: ‘hi’ may be used uninitialized
#   88 |         else            y = one-((lo-(x*c)/((float)2.0-c))-hi);
#      |                                 ~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_exp.c:49:17: note: ‘hi’ was declared here
#   49 |         float y,hi,lo,c,t;
#      |                 ^~
#   86|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#   87|   	if(k==0) 	return one-((x*c)/(c-(float)2.0)-x); 
#   88|-> 	else 		y = one-((lo-(x*c)/((float)2.0-c))-hi);
#   89|   	if(k >= -125) {
#   90|   	    __uint32_t hy;

Error: COMPILER_WARNING: [#def332]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_jn.c:23:1: warning[-Wunused-const-variable=]: ‘invsqrtpi’ defined but not used
#   23 | invsqrtpi=  5.6418961287e-01, /* 0x3f106ebb */
#      | ^~~~~~~~~
#   21|   static float
#   22|   #endif
#   23|-> invsqrtpi=  5.6418961287e-01, /* 0x3f106ebb */
#   24|   two   =  2.0000000000e+00, /* 0x40000000 */
#   25|   one   =  1.0000000000e+00; /* 0x3F800000 */

Error: CPPCHECK_WARNING (CWE-758): [#def333]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_jn.c:58: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#   56|   	if(n==0) return(__ieee754_j0f(x));
#   57|   	if(n==1) return(__ieee754_j1f(x));
#   58|-> 	sgn = (n&1)&(hx>>31);	/* even n -- 0, odd n -- sign(x) */
#   59|   	x = fabsf(x);
#   60|   	if(FLT_UWORD_IS_ZERO(ix)||FLT_UWORD_IS_INFINITE(ix))

Error: COMPILER_WARNING (CWE-691): [#def334]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_pow.c: scope_hint: In function ‘__ieee754_powf’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_pow.c:79:11: warning[-Wdangling-else]: suggest explicit braces to avoid ambiguous ‘else’
#   79 |         if(FLT_UWORD_IS_NAN(ix) ||
#      |           ^
#   77|   
#   78|       /* x|y==NaN return NaN unless x==1 then return 1 */
#   79|-> 	if(FLT_UWORD_IS_NAN(ix) ||
#   80|   	   FLT_UWORD_IS_NAN(iy))
#   81|   	    if(ix==0x3f800000) return one;

Error: COMPILER_WARNING (CWE-563): [#def335]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_sqrt.c: scope_hint: In function ‘__ieee754_sqrtf’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/ef_sqrt.c:32:25: warning[-Wunused-variable]: unused variable ‘sign’
#   32 |         __int32_t       sign = (__int32_t)0x80000000;
#      |                         ^~~~
#   30|   {
#   31|   	float z;
#   32|-> 	__int32_t 	sign = (__int32_t)0x80000000; 
#   33|   	__uint32_t r,hx;
#   34|   	__int32_t ix,s,q,m,t,i;

Error: COMPILER_WARNING (CWE-457): [#def336]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c: scope_hint: In function ‘__ieee754_lgamma_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c:307:20: warning[-Wmaybe-uninitialized]: ‘nadj’ may be used uninitialized
#  307 |         if(hx<0) r = nadj - r;
#      |                  ~~^~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/er_lgamma.c:219:22: note: ‘nadj’ was declared here
#  219 |         double t,y,z,nadj,p,p1,p2,p3,q,r,w;
#      |                      ^~~~
#  305|       /* 2**58 <= x <= inf */
#  306|   	    r =  x*(__ieee754_log(x)-one);
#  307|-> 	if(hx<0) r = nadj - r;
#  308|   	return r;
#  309|   }

Error: COMPILER_WARNING (CWE-457): [#def337]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c: scope_hint: In function ‘__ieee754_lgammaf_r’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c:242:20: warning[-Wmaybe-uninitialized]: ‘nadj’ may be used uninitialized
#  242 |         if(hx<0) r = nadj - r;
#      |                  ~~^~~~~~~~~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/erf_lgamma.c:154:21: note: ‘nadj’ was declared here
#  154 |         float t,y,z,nadj,p,p1,p2,p3,q,r,w;
#      |                     ^~~~
#  240|       /* 2**58 <= x <= inf */
#  241|   	    r =  x*(__ieee754_logf(x)-one);
#  242|-> 	if(hx<0) r = nadj - r;
#  243|   	return r;
#  244|   }

Error: COMPILER_WARNING (CWE-483): [#def338]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c: scope_hint: In function ‘__kernel_rem_pio2’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:190:13: warning[-Wmisleading-indentation]: this ‘for’ clause does not guard...
#  190 |             for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw;
#      |             ^~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:190:61: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘for’
#  190 |             for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw;
#      |                                                             ^
#  188|       /* compute q[0],q[1],...q[jk] */
#  189|   	for (i=0;i<=jk;i++) {
#  190|-> 	    for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw;
#  191|   	}
#  192|   

Error: COMPILER_WARNING (CWE-483): [#def339]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c: scope_hint: In function ‘__kernel_rem_pio2f’
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:80:13: warning[-Wmisleading-indentation]: this ‘for’ clause does not guard...
#   80 |             for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw;
#      |             ^~~
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:80:61: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the ‘for’
#   80 |             for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw;
#      |                                                             ^
#   78|       /* compute q[0],q[1],...q[jk] */
#   79|   	for (i=0;i<=jk;i++) {
#   80|-> 	    for(j=0,fw=0.0;j<=jx;j++) fw += x[j]*f[jx+i-j]; q[i] = fw;
#   81|   	}
#   82|   

Error: COMPILER_WARNING: [#def340]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/sf_cos.c:19:20: warning[-Wunused-const-variable=]: ‘one’ defined but not used
#   19 | static const float one=1.0;
#      |                    ^~~
#   17|   
#   18|   #ifdef __STDC__
#   19|-> static const float one=1.0;
#   20|   #else
#   21|   static float one=1.0;

Error: COMPILER_WARNING: [#def341]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/w_cabs.c:16:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   16 | cabs(z)
#      | ^~~~
#   14|   
#   15|   double
#   16|-> cabs(z)
#   17|   	struct complex z;
#   18|   {

Error: COMPILER_WARNING: [#def342]
xen-4.19.2/stubdom/newlib-1.16.0/newlib/libm/math/wf_cabs.c:16:1: warning[-Wstrict-prototypes]: function declaration isn’t a prototype
#   16 | cabsf(z)
#      | ^~~~~
#   14|   
#   15|   float
#   16|-> cabsf(z)
#   17|   	struct complex z;
#   18|   {

Error: COMPILER_WARNING: [#def343]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:67:13: warning[-Wold-style-definition]: old-style function definition
#   65|   
#   66|   
#   67|-> static void DEFUN(init_string_with_size,(buffer, size),
#   68|   	   string_type *buffer AND
#   69|   	   unsigned int size )

Error: COMPILER_WARNING: [#def344]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:76:13: warning[-Wold-style-definition]: old-style function definition
#   74|   }
#   75|   
#   76|-> static void DEFUN(init_string,(buffer),
#   77|   	   string_type *buffer)
#   78|   {

Error: COMPILER_WARNING: [#def345]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:83:12: warning[-Wold-style-definition]: old-style function definition
#   81|   }
#   82|   
#   83|-> static int DEFUN(find, (str, what),
#   84|   	  string_type *str AND
#   85|   	  char *what)

Error: COMPILER_WARNING: [#def346]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:101:13: warning[-Wold-style-definition]: old-style function definition
#   99|   }
#  100|   
#  101|-> static void DEFUN(write_buffer,(buffer),
#  102|   	   string_type *buffer)
#  103|   {

Error: COMPILER_WARNING: [#def347]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:108:13: warning[-Wold-style-definition]: old-style function definition
#  106|   
#  107|   
#  108|-> static void DEFUN(delete_string,(buffer),
#  109|   	   string_type *buffer)
#  110|   {

Error: COMPILER_WARNING: [#def348]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:115:14: warning[-Wold-style-definition]: old-style function definition
#  113|   
#  114|   
#  115|-> static char *DEFUN(addr, (buffer, idx),
#  116|   	    string_type *buffer AND
#  117|   	    unsigned int idx)

Error: COMPILER_WARNING: [#def349]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:122:13: warning[-Wold-style-definition]: old-style function definition
#  120|   }
#  121|   
#  122|-> static char DEFUN(at,(buffer, pos),
#  123|   	   string_type *buffer AND
#  124|   	   unsigned int pos) 

Error: COMPILER_WARNING: [#def350]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:133:13: warning[-Wold-style-definition]: old-style function definition
#  131|   }
#  132|   
#  133|-> static void DEFUN(catchar,(buffer, ch), 
#  134|   	   string_type *buffer AND
#  135|   	   char ch)

Error: COMPILER_WARNING: [#def351]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:147:13: warning[-Wold-style-definition]: old-style function definition
#  145|   
#  146|   
#  147|-> static void DEFUN(overwrite_string,(dst,   src),
#  148|   	   string_type *dst AND
#  149|   	   string_type *src)

Error: COMPILER_WARNING: [#def352]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:157:13: warning[-Wold-style-definition]: old-style function definition
#  155|   }
#  156|   
#  157|-> static void DEFUN(catstr,(dst, src),
#  158|   	   string_type *dst AND
#  159|   	   string_type *src)

Error: COMPILER_WARNING: [#def353]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:169:13: warning[-Wold-style-definition]: old-style function definition
#  167|   
#  168|   
#  169|-> static void DEFUN(cattext,(buffer, string),
#  170|   	   string_type *buffer AND
#  171|   	   char *string)

Error: COMPILER_WARNING: [#def354]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:181:13: warning[-Wold-style-definition]: old-style function definition
#  179|   }
#  180|   
#  181|-> static void DEFUN(catbuf,(buffer, buf, len),
#  182|   	   string_type *buffer AND
#  183|   	   char *buf AND

Error: COMPILER_WARNING: [#def355]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:197:1: warning[-Wold-style-definition]: old-style function definition
#  195|   
#  196|   static unsigned int 
#  197|-> DEFUN(skip_white_and_stars,(src, idx),
#  198|         string_type *src AND
#  199|         unsigned int idx)

Error: COMPILER_WARNING: [#def356]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:240:13: warning[-Wold-style-definition]: old-style function definition
#  238|   #define WORD(x) static void x()
#  239|   
#  240|-> static void DEFUN(exec,(word),
#  241|   		  dict_type *word)
#  242|   {

Error: COMPILER_WARNING (CWE-704): [#def357]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:271:12: warning[-Wpointer-to-int-cast]: cast from pointer to integer of different size
#  269|       isp++;
#  270|       pc++;
#  271|->     *isp = (int)(*pc);
#  272|       pc++;
#  273|       

Error: COMPILER_WARNING: [#def358]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:299:1: warning[-Wold-style-definition]: old-style function definition
#  297|   
#  298|   static void 
#  299|-> DEFUN(remove_noncomments,(src,dst),
#  300|   	   string_type *src AND
#  301|   	   string_type *dst)

Error: COMPILER_WARNING: [#def359]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:777:1: warning[-Wold-style-definition]: old-style function definition
#  775|   /* A command is all upper case,and alone on a line */
#  776|   static int 
#  777|-> DEFUN( iscommand,(ptr, idx),
#  778|         string_type *ptr AND
#  779|         unsigned int idx)

Error: COMPILER_WARNING: [#def360]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:802:1: warning[-Wold-style-definition]: old-style function definition
#  800|   
#  801|   static unsigned int
#  802|-> DEFUN(copy_past_newline,(ptr, idx, dst),
#  803|         string_type *ptr AND
#  804|         unsigned int idx AND

Error: COMPILER_WARNING: [#def361]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1066:1: warning[-Wold-style-definition]: old-style function definition
# 1064|   
# 1065|   char *
# 1066|-> DEFUN(nextword,(string, word),
# 1067|         char *string AND
# 1068|         char **word)

Error: COMPILER_WARNING: [#def362]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1144:1: warning[-Wold-style-definition]: old-style function definition
# 1142|   dict_type *root;
# 1143|   dict_type *
# 1144|-> DEFUN(lookup_word,(word),
# 1145|         char *word)
# 1146|   {

Error: COMPILER_WARNING: [#def363]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1198:1: warning[-Wold-style-definition]: old-style function definition
# 1196|   
# 1197|   dict_type *
# 1198|-> DEFUN(newentry,(word),
# 1199|         char *word)
# 1200|   {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def364]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1202:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘new’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1389:5: enter_function: entry to ‘main’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1406:5: call_function: calling ‘add_intrinsic’ from ‘main’
# 1200|   {
# 1201|       dict_type *new = (dict_type *)malloc(sizeof(dict_type));
# 1202|->     new->word = word;
# 1203|       new->next = root;
# 1204|       root = new;

Error: COMPILER_WARNING: [#def365]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1214:1: warning[-Wold-style-definition]: old-style function definition
# 1212|   
# 1213|   unsigned int
# 1214|-> DEFUN(add_to_definition,(entry, word), 
# 1215|         dict_type *entry AND
# 1216|         stinst_type word)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def366]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1221:9: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1389:5: enter_function: entry to ‘main’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1406:5: call_function: calling ‘add_intrinsic’ from ‘main’
# 1219|       {
# 1220|   	entry->code_length += 2;
# 1221|-> 	entry->code =
# 1222|   	 (stinst_type *) realloc((char *)(entry->code),
# 1223|   			       entry->code_length *sizeof(word_type));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def367]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1225:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*entry.code + (long unsigned int)*entry.code_end * 8’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1389:5: enter_function: entry to ‘main’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1406:5: call_function: calling ‘add_intrinsic’ from ‘main’
# 1223|   			       entry->code_length *sizeof(word_type));
# 1224|       }
# 1225|->     entry->code[entry->code_end] = word;
# 1226|       
# 1227|   return     entry->code_end++;  

Error: COMPILER_WARNING: [#def368]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1237:1: warning[-Wold-style-definition]: old-style function definition
# 1235|   
# 1236|   void
# 1237|-> DEFUN(add_intrinsic,(name, func),
# 1238|         char *name AND
# 1239|         void (*func)())

Error: COMPILER_WARNING: [#def369]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1253:1: warning[-Wold-style-definition]: old-style function definition
# 1251|   
# 1252|   void
# 1253|-> DEFUN(add_var,(name),
# 1254|         char *name)
# 1255|   {

Error: COMPILER_WARNING: [#def370]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1267:1: warning[-Wold-style-definition]: old-style function definition
# 1265|   
# 1266|   void 
# 1267|-> DEFUN(compile, (string), 
# 1268|         char *string)
# 1269|   

Error: COMPILER_WARNING (CWE-704): [#def371]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1343:2: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
# 1341|   static void DEFUN_VOID(bang)
# 1342|   {
# 1343|-> *(int *)((isp[0])) = isp[-1];
# 1344|   isp-=2;
# 1345|   pc++;

Error: COMPILER_WARNING (CWE-704): [#def372]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1351:15: warning[-Wint-to-pointer-cast]: cast to pointer from integer of different size
# 1349|   WORD(atsign)
# 1350|   {
# 1351|->     isp[0] = *(int *)(isp[0]);
# 1352|       pc++;
# 1353|   }

Error: COMPILER_WARNING: [#def373]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1364:13: warning[-Wold-style-definition]: old-style function definition
# 1362|   
# 1363|   
# 1364|-> static void DEFUN(read_in, (str, file), 
# 1365|   	   string_type *str AND
# 1366|   		  FILE *file)

Error: COMPILER_WARNING: [#def374]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/doc/../../../../newlib-1.16.0/newlib/doc/makedoc.c:1389:5: warning[-Wold-style-definition]: old-style function definition
# 1387|   }
# 1388|   
# 1389|-> int DEFUN(main,(ac,av),
# 1390|   int ac AND
# 1391|   char *av[])

Error: GCC_ANALYZER_WARNING (CWE-401): [#def375]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_create_sep.c:68:1: warning[-Wanalyzer-malloc-leak]: leak of ‘running’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_create_sep.c:30:6: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_create_sep.c:39:13: acquire_memory: allocated here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_create_sep.c:49:5: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_create_sep.c:68:1: danger: ‘running’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   66|     free(old_running);
#   67|     return 0;
#   68|-> }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def376]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_replace.c:73:9: warning[-Wanalyzer-malloc-leak]: leak of ‘new_argz_iter’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_replace.c:46:6: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_replace.c:48:26: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_replace.c:48:26: acquire_memory: allocated here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_replace.c:73:9: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/argz_replace.c:73:9: danger: ‘new_argz_iter’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   71|   
#   72|         /* reallocate argz, and copy over the new value. */
#   73|->       if(!(*argz = (char *)realloc(*argz, new_argz_len)))
#   74|           return ENOMEM;
#   75|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def377]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:33:23: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘name_str’ where non-null expected
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:28:9: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:30:10: branch_true: following ‘true’ branch (when ‘override == 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:32:22: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:32:22: acquire_memory: this call could return NULL
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:33:23: danger: argument 1 (‘name_str’) from [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4) could be NULL where non-null expected
#argument 1 of ‘__builtin_strchr’ must be non-null
#   31|           {
#   32|             name_str = strdup (entry);
#   33|->           name_iter = strchr(name_str, '=');
#   34|             if(name_iter)
#   35|               *name_iter = '\0';

Error: GCC_ANALYZER_WARNING (CWE-401): [#def378]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:45:22: warning[-Wanalyzer-malloc-leak]: leak of ‘name_str’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:28:9: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:45:22: acquire_memory: allocated here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:47:13: branch_false: following ‘false’ branch (when ‘name_iter’ is NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:57:20: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:28:9: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:30:10: branch_false: following ‘false’ branch (when ‘override != 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:45:22: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:45:22: danger: ‘name_str’ leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#   43|         else
#   44|           {
#   45|->           name_str = strdup (entry);
#   46|             name_iter = strchr(name_str, '=');
#   47|             if(name_iter)

Error: GCC_ANALYZER_WARNING (CWE-688): [#def379]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:46:23: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘name_str’ where non-null expected
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:28:9: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:45:22: acquire_memory: this call could return NULL
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/argz/../../../../../newlib-1.16.0/newlib/libc/argz/envz_merge.c:46:23: danger: argument 1 (‘name_str’) from [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2) could be NULL where non-null expected
#argument 1 of ‘__builtin_strchr’ must be non-null
#   44|           {
#   45|             name_str = strdup (entry);
#   46|->           name_iter = strchr(name_str, '=');
#   47|             if(name_iter)
#   48|               {

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def380]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:160:15: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘fd’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:69:12: branch_false: following ‘false’ branch (when ‘name’ is non-NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:72:14: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:72:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:90:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:93:9: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:98:14: acquire_resource: opened here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:99:12: branch_false: following ‘false’ branch (when ‘fd >= 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:104:13: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:104:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:107:13: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:107:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:109:30: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:124:12: branch_false: following ‘false’ branch (when ‘lbuf’ is non-NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:126:16: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:129:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:131:13: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:131:13: release_resource: first ‘close’ here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:160:15: danger: second ‘close’ here; first ‘close’ was at [(19)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/18)
#  158|   	free(lbuf);
#  159|   bad_locale:
#  160|-> 	(void)close(fd);
#  161|   no_locale:
#  162|   	*using_locale = save_using_locale;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def381]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:173:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:171:21: branch_true: following ‘true’ branch (when ‘p < plim’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:172:21: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/locale/../../../../../newlib-1.16.0/newlib/libc/locale/ldpart.c:173:17: danger: dereference of NULL ‘p’
#  171|   	for (i = 0; p < plim; i++) {
#  172|   		p = strchr(p, '\n');
#  173|-> 		*p++ = '\0';
#  174|   	}
#  175|   	return i;

Error: GCC_ANALYZER_WARNING (CWE-469): [#def382]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/misc/../../../../../newlib-1.16.0/newlib/libc/misc/init.c:36:31: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
#   34|     size_t i;
#   35|   
#   36|->   count = __preinit_array_end - __preinit_array_start;
#   37|     for (i = 0; i < count; i++)
#   38|       __preinit_array_start[i] ();

Error: GCC_ANALYZER_WARNING (CWE-469): [#def383]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/misc/../../../../../newlib-1.16.0/newlib/libc/misc/init.c:42:28: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
#   40|     _init ();
#   41|   
#   42|->   count = __init_array_end - __init_array_start;
#   43|     for (i = 0; i < count; i++)
#   44|       __init_array_start[i] ();

Error: GCC_ANALYZER_WARNING (CWE-469): [#def384]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/misc/../../../../../newlib-1.16.0/newlib/libc/misc/init.c:54:28: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
#   52|     size_t i;
#   53|     
#   54|->   count = __fini_array_end - __fini_array_start;
#   55|     for (i = 0; i < count; i++)
#   56|       __fini_array_start[i] ();

Error: GCC_ANALYZER_WARNING (CWE-476): [#def385]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:814:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bp’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:781:25: branch_true: following ‘true’ branch (when ‘bp’ is NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:782:22: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:782:20: branch_true: following ‘true’ branch (when ‘bufp’ is NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:783:39: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:784:29: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:794:25: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:795:28: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:806:24: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:814:22: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:814:22: danger: dereference of NULL ‘bp’
#  812|   			hashp->cndx = 1;
#  813|   		}
#  814|-> 		if (!bp[0]) {
#  815|   			hashp->cpage = NULL;
#  816|   			++hashp->cbucket;

Error: GCC_ANALYZER_WARNING (CWE-131): [#def386]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:912:17: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:908:12: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:909:17: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:912:17: danger: assigned to ‘BUFHEAD ***’ {{aka ‘struct _bufhead ***’}} here; ‘sizeof (SEGMENT {{aka struct _bufhead **}})’ is ‘8’
#  910|   		memset((char *)p + oldsize, 0, newsize - oldsize);
#  911|   		free(*p_ptr);
#  912|-> 		*p_ptr = p;
#  913|   	}
#  914|   	return (p);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def387]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:962:21: warning[-Wanalyzer-malloc-leak]: leak of ‘store’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:947:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:956:38: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:956:22: acquire_memory: allocated here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:955:12: branch_false: following ‘false’ branch (when ‘store’ is non-NULL)...
 branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:962:21: branch_false: following ‘false’ branch (when ‘i >= nsegs’)...
 branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash.c:962:21: danger: ‘store’ leaks here; was allocated at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#  960|   		return (-1);
#  961|   	}
#  962|-> 	for (i = 0; i < nsegs; i++, hashp->nsegs++)
#  963|   		hashp->dir[i] = &store[i << hashp->SSHIFT];
#  964|   	return (0);

Error: GCC_ANALYZER_WARNING (CWE-131): [#def388]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:636:33: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
#  634|   	int clearbytes, clearints;
#  635|   
#  636|-> 	if ((ip = (__uint32_t *)malloc(hashp->BSIZE)) == NULL)
#  637|   		return (1);
#  638|   	hashp->nmaps++;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def389]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:769:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘freep’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:685:31: branch_false: following ‘false’ branch (when ‘i > free_page’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:709:29: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:712:13: branch_false: following ‘false’ branch (when ‘splitnum == 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:711:9: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:715:12: branch_false: following ‘false’ branch (when ‘offset <= 2047’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:727:26: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:727:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:768:17: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:769:17: danger: use of uninitialized value ‘freep’ here
#  767|   		 */
#  768|   		free_bit++;
#  769|-> 		SETBIT(freep, free_bit);
#  770|   	}
#  771|   

Error: GCC_ANALYZER_WARNING (CWE-131): [#def390]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:918:13: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:916:12: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:918:54: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/search/../../../../../newlib-1.16.0/newlib/libc/search/hash_page.c:918:13: danger: assigned to ‘__uint32_t *’ {{aka ‘unsigned int *’}} here; ‘sizeof (__uint32_t {{aka unsigned int}})’ is ‘4’
#  916|   	if (ndx >= hashp->nmaps)
#  917|   		return (NULL);
#  918|-> 	if ((hashp->mapp[ndx] = (__uint32_t *)malloc(hashp->BSIZE)) == NULL)
#  919|   		return (NULL);
#  920|   	if (__get_page(hashp,

Error: GCC_ANALYZER_WARNING (CWE-476): [#def391]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:313:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:282:6: branch_false: following ‘false’ branch (when ‘flags != 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:284:6: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:284:6: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:289:6: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:291:27: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:291:6: branch_false: following ‘false’ branch (when ‘c’ is non-NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:303:3: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:309:6: branch_true: following ‘true’ branch (when ‘buf’ is NULL)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:312:25: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdio/../../../../../newlib-1.16.0/newlib/libc/stdio/fmemopen.c:313:7: danger: dereference of NULL ‘0’
#  311|         /* r+/w+/a+, and no buf: file starts empty.  */
#  312|         c->buf = (char *) (c + 1);
#  313|->       *(char *) buf = '\0';
#  314|         c->pos = c->eof = 0;
#  315|         c->append = (flags & __SAPP) != 0;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def392]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:2490:5: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘x[2]’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3249:1: enter_function: entry to ‘asctoeg’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3263:4: branch_false: following ‘false’ branch (when ‘c > 200’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3267:21: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3278:11: branch_true: following ‘true’ branch (when ‘k < c’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:23: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3278:16: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3278:11: branch_true: following ‘true’ branch (when ‘k < c’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:23: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3295:1: call_function: inlined call to ‘ecleaz’ from ‘asctoeg’
 branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3300:3: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3354:1: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3445:8: branch_false: following ‘false’ branch (when ‘nexp <= 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3457:10: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3457:10: call_function: calling ‘enormlz’ from ‘asctoeg’
# 2488|   sc = 0;
# 2489|   p = &x[M];
# 2490|-> if( *p != 0 )
# 2491|   	goto normdn;
# 2492|   ++p;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def393]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘sp’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3263:4: branch_false: following ‘false’ branch (when ‘c > 200’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3267:21: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3267:21: acquire_memory: this call could return NULL
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3278:11: branch_true: following ‘true’ branch (when ‘k < c’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:23: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:13: danger: ‘sp’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
# 3278|   for( k=0; k<c; k++ )
# 3279|   	{
# 3280|-> 	if( (*sp++ = *s++) == '\0' )
# 3281|   		break;
# 3282|   	}

Error: GCC_ANALYZER_WARNING (CWE-457): [#def394]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3329:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yy[2]’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3249:1: enter_function: entry to ‘asctoeg’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3263:4: branch_false: following ‘false’ branch (when ‘c > 200’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3267:21: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3278:11: branch_true: following ‘true’ branch (when ‘k < c’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:23: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3278:16: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3278:11: branch_true: following ‘true’ branch (when ‘k < c’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3280:23: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3295:1: call_function: inlined call to ‘ecleaz’ from ‘asctoeg’
 branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3300:3: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3303:13: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3303:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3306:13: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3306:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3329:13: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/ldtoa.c:3329:13: danger: use of uninitialized value ‘yy[2]’ here
# 3327|    * of the low guard word after normalization.
# 3328|    */
# 3329|-> 	if( yy[2] == 0 )
# 3330|   		{
# 3331|   		if( decflg )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def395]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:184:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:418:1: enter_function: entry to ‘__pow5mult’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:425:6: branch_true: following ‘true’ branch (when ‘i != 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:426:30: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:426:9: call_function: calling ‘__multadd’ from ‘__pow5mult’
#  182|   	}
#  183|         b->_x[wds++] = a;
#  184|->       b->_wds = wds;
#  185|       }
#  186|     return b;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def396]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:206:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:190:1: enter_function: entry to ‘__s2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:204:7: call_function: calling ‘_Balloc’ from ‘__s2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:204:7: return_function: return of NULL to ‘__s2b’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:206:3: danger: dereference of NULL ‘b’
#  204|     b = Balloc (ptr, k);
#  205|     b->_x[0] = y9;
#  206|->   b->_wds = 1;
#  207|   #else
#  208|     b = Balloc (ptr, k + 1);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def397]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:321:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:315:1: enter_function: entry to ‘__i2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:319:7: call_function: calling ‘_Balloc’ from ‘__i2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:319:7: return_function: return of NULL to ‘__i2b’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:321:3: danger: dereference of NULL ‘b’
#  319|     b = Balloc (ptr, 1);
#  320|     b->_x[0] = i;
#  321|->   b->_wds = 1;
#  322|     return b;
#  323|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def398]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:413:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:326:1: enter_function: entry to ‘__multiply’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:348:7: call_function: calling ‘_Balloc’ from ‘__multiply’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:348:7: return_function: return of NULL to ‘__multiply’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:349:32: branch_false: following ‘false’ branch (when ‘x >= xa’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:351:3: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:357:10: branch_false: following ‘false’ branch (when ‘xb >= xbe’)...
 branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:413:3: danger: dereference of NULL ‘c’
#  411|   #endif
#  412|     for (xc0 = c->_x, xc = xc0 + wc; wc > 0 && !*--xc; --wc);
#  413|->   c->_wds = wc;
#  414|     return c;
#  415|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def399]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:512:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b1’
#  510|         *x1++ = *x++;
#  511|       while (x < xe);
#  512|->   b1->_wds = n1 - 1;
#  513|     Bfree (ptr, b);
#  514|     return b1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def400]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:563:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:548:1: enter_function: entry to ‘__mdiff’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:560:6: branch_true: following ‘true’ branch (when ‘i == 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:562:11: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:562:11: call_function: calling ‘_Balloc’ from ‘__mdiff’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:562:11: return_function: return of NULL to ‘__mdiff’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:563:7: danger: dereference of NULL ‘c’
#  561|       {
#  562|         c = Balloc (ptr, 0);
#  563|->       c->_wds = 1;
#  564|         c->_x[0] = 0;
#  565|         return c;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def401]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:577:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:548:1: enter_function: entry to ‘__mdiff’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:560:6: branch_false: following ‘false’ branch (when ‘i != 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:567:6: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:576:7: call_function: calling ‘_Balloc’ from ‘__mdiff’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:576:7: return_function: return of NULL to ‘__mdiff’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:577:3: danger: dereference of NULL ‘c’
#  575|       i = 0;
#  576|     c = Balloc (ptr, a->_k);
#  577|->   c->_sign = i;
#  578|     wa = a->_wds;
#  579|     xa = a->_x;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def402]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:806:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:755:1: enter_function: entry to ‘__d2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: call_function: calling ‘_Balloc’ from ‘__d2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: return_function: return of NULL to ‘__d2b’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:800:6: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:802:7: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:804:10: branch_true: following ‘true’ branch (when ‘k != 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:806:21: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:806:10: danger: dereference of NULL ‘b’
#  804|         if (k)
#  805|   	{
#  806|->          x[0] = y | z << (32 - k);
#  807|   	  z >>= k;
#  808|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def403]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:810:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:755:1: enter_function: entry to ‘__d2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: call_function: calling ‘_Balloc’ from ‘__d2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: return_function: return of NULL to ‘__d2b’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:800:6: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:802:7: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:804:10: branch_false: following ‘false’ branch (when ‘k == 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:810:9: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:810:9: danger: dereference of NULL ‘b’
#  808|   	}
#  809|         else
#  810|-> 	x[0] = y;
#  811|         i = b->_wds = (x[1] = z) ? 2 : 1;
#  812|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def404]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:821:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:755:1: enter_function: entry to ‘__d2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: call_function: calling ‘_Balloc’ from ‘__d2b’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:781:7: return_function: return of NULL to ‘__d2b’ from ‘_Balloc’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:800:6: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:820:11: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libc/stdlib/../../../../../newlib-1.16.0/newlib/libc/stdlib/mprec.c:821:7: danger: dereference of NULL ‘b’
#  819|   #endif
#  820|         k = lo0bits (&z);
#  821|->       x[0] = z;
#  822|         i = b->_wds = 1;
#  823|   #ifndef _DOUBLE_IS_32BITS

Error: GCC_ANALYZER_WARNING (CWE-457): [#def405]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:152:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘k’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:133:11: branch_false: following ‘false’ branch (when ‘hx <= 1071001154’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:144:16: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:144:16: branch_true: following ‘true’ branch (when ‘hx <= 1043333119’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:145:16: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:145:15: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:150:9: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_exp.c:152:11: danger: use of uninitialized value ‘k’ here
#  150|   	t  = x*x;
#  151|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#  152|-> 	if(k==0) 	return one-((x*c)/(c-2.0)-x); 
#  153|   	else 		y = one-((lo-(x*c)/(2.0-c))-hi);
#  154|   	if(k >= -1021) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def406]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘z’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:100:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:102:11: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:102:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:127:11: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:127:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:165:11: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:165:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/e_rem_pio2.c:170:9: danger: use of uninitialized value ‘z’ here
#  168|       /* set z = scalbn(|x|,ilogb(x)-23) */
#  169|   	GET_LOW_WORD(low,x);
#  170|-> 	SET_LOW_WORD(z,low);
#  171|   	e0 	= (int)((ix>>20)-1046);	/* e0 = ilogb(z)-23; */
#  172|   	SET_HIGH_WORD(z, ix - ((__int32_t)e0<<20));

Error: GCC_ANALYZER_WARNING (CWE-457): [#def407]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:87:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘k’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:58:11: branch_false: following ‘false’ branch (when ‘hx <= 2139095040’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:60:11: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:60:11: branch_false: following ‘false’ branch (when ‘hx != 2139095040’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:62:11: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:62:11: branch_false: following ‘false’ branch (when ‘sx <= 1118925335’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:64:12: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:64:11: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:68:11: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:68:11: branch_false: following ‘false’ branch (when ‘hx <= 1051816472’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:79:16: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:79:16: branch_true: following ‘true’ branch (when ‘hx <= 830472191’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:80:16: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:80:15: branch_false: following ‘false’ branch...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:85:9: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/ef_exp.c:87:11: danger: use of uninitialized value ‘k’ here
#   85|   	t  = x*x;
#   86|   	c  = x - t*(P1+t*(P2+t*(P3+t*(P4+t*P5))));
#   87|-> 	if(k==0) 	return one-((x*c)/(c-(float)2.0)-x); 
#   88|   	else 		y = one-((lo-(x*c)/((float)2.0-c))-hi);
#   89|   	if(k >= -125) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def408]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:209:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘iq[<unknown>]’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:196:30: branch_false: following ‘false’ branch (when ‘j <= 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:203:14: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:208:11: branch_true: following ‘true’ branch (when ‘q0 > 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:209:22: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/k_rem_pio2.c:209:19: danger: use of uninitialized value ‘iq[<unknown>]’ here
#  207|   	ih = 0;
#  208|   	if(q0>0) {	/* need iq[jz-1] to determine n */
#  209|-> 	    i  = (iq[jz-1]>>(24-q0)); n += i;
#  210|   	    iq[jz-1] -= i<<(24-q0);
#  211|   	    ih = iq[jz-1]>>(23-q0);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def409]
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:99:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘iq[<unknown>]’
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:86:30: branch_false: following ‘false’ branch (when ‘j <= 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:93:14: branch_false: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:98:11: branch_true: following ‘true’ branch (when ‘q0 > 0’)...
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:99:22: branch_true: ...to here
xen-4.19.2/stubdom/newlib-x86_64/x86_64-xen-elf/newlib/libm/math/../../../../../newlib-1.16.0/newlib/libm/math/kf_rem_pio2.c:99:19: danger: use of uninitialized value ‘iq[<unknown>]’ here
#   97|   	ih = 0;
#   98|   	if(q0>0) {	/* need iq[jz-1] to determine n */
#   99|-> 	    i  = (iq[jz-1]>>(8-q0)); n += i;
#  100|   	    iq[jz-1] -= i<<(8-q0);
#  101|   	    ih = iq[jz-1]>>(7-q0);

Error: CPPCHECK_WARNING (CWE-476): [#def410]
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:73: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: a
#   71|     int i;
#   72|   
#   73|->   memset(a, 0, sizeof(*a));
#   74|     pci_set_name_list_path(a, PCI_PATH_IDS_DIR "/" PCI_IDS, 0);
#   75|     for(i=0; i<PCI_ACCESS_MAX; i++)

Error: GCC_ANALYZER_WARNING (CWE-688): [#def411]
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:73:3: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘a’ where non-null expected
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:70:26: acquire_memory: this call could return NULL
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:73:3: danger: argument 1 (‘a’) from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#argument 1 of ‘__builtin_memset’ must be non-null
#   71|     int i;
#   72|   
#   73|->   memset(a, 0, sizeof(*a));
#   74|     pci_set_name_list_path(a, PCI_PATH_IDS_DIR "/" PCI_IDS, 0);
#   75|     for(i=0; i<PCI_ACCESS_MAX; i++)

Error: GCC_ANALYZER_WARNING (CWE-404): [#def412]
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:119:1: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:115:3: acquire_resource: ‘va_start’ called here
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:119:1: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  117|     vfprintf(stderr, msg, args);
#  118|     fputc('\n', stderr);
#  119|-> }
#  120|   
#  121|   static void

Error: GCC_ANALYZER_WARNING (CWE-688): [#def413]
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:205:3: warning[-Wanalyzer-null-argument]: use of NULL ‘d’ where non-null expected
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:201:1: enter_function: entry to ‘pci_alloc_dev’
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:203:23: call_function: calling ‘pci_malloc’ from ‘pci_alloc_dev’
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:203:23: return_function: returning to ‘pci_alloc_dev’ from ‘pci_malloc’
xen-4.19.2/stubdom/pciutils-x86_64/lib/access.c:205:3: danger: argument 1 (‘d’) NULL where non-null expected
#argument 1 of ‘__builtin_memset’ must be non-null
#  203|     struct pci_dev *d = pci_malloc(a, sizeof(struct pci_dev));
#  204|   
#  205|->   memset(d, 0, sizeof(*d));
#  206|     d->access = a;
#  207|     d->methods = a->methods;

Error: COMPILER_WARNING (CWE-563): [#def414]
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c: scope_hint: In function ‘dump_validate’
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:44:7: warning[-Wunused-value]: value computed is not used
#   44 |       *fmt++, *s++;
#      |       ^~~~~~
#   42|         if (*fmt == '#' ? !isxdigit(*s) : *fmt != *s)
#   43|   	return 0;
#   44|->       *fmt++, *s++;
#   45|       }
#   46|     return 1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def415]
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:67:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘z’
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:60:6: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
 branch_false: ...to here
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:62:10: branch_true: following ‘true’ branch...
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:64:17: branch_true: ...to here
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:65:10: branch_true: following ‘true’ branch (when ‘z’ is NULL)...
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:66:9: branch_true: ...to here
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:67:7: danger: dereference of NULL ‘z’
#   65|         if (!z)
#   66|   	a->error("dump: line too long or unterminated");
#   67|->       *z-- = 0;
#   68|         if (z >= buf && *z == '\r')
#   69|   	*z-- = 0;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def416]
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:110:1: warning[-Wanalyzer-file-leak]: leak of FILE ‘f’
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:60:13: acquire_resource: opened here
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:60:6: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
 branch_false: ...to here
xen-4.19.2/stubdom/pciutils-x86_64/lib/dump.c:110:1: danger: ‘f’ leaks here; was opened at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  108|   	}
#  109|       }
#  110|-> }
#  111|   
#  112|   static void

Error: COMPILER_WARNING (CWE-563): [#def417]
xen-4.19.2/stubdom/pciutils-x86_64/lib/generic.c: scope_hint: In function ‘pci_generic_fill_info’
xen-4.19.2/stubdom/pciutils-x86_64/lib/generic.c:134:27: warning[-Wunused-variable]: unused variable ‘size’
#  134 |                       u32 size;
#      |                           ^~~~
#  132|                     if (flags & PCI_FILL_SIZES)
#  133|                       {
#  134|->                       u32 size;
#  135|                         pci_write_long(d, PCI_BASE_ADDRESS_0 + i*4, ~0);
#  136|                         d->size[i] = pci_size(x, pci_read_long(d, PCI_BASE_ADDRESS_0 + i*4), PCI_BASE_ADDRESS_IO_MASK);

Error: COMPILER_WARNING (CWE-563): [#def418]
xen-4.19.2/stubdom/pciutils-x86_64/lib/generic.c:147:31: warning[-Wunused-variable]: unused variable ‘size’
#  147 |                           u32 size;
#      |                               ^~~~
#  145|                         if (flags & PCI_FILL_SIZES)
#  146|                           {
#  147|->                           u32 size;
#  148|                             pci_write_long(d, PCI_BASE_ADDRESS_0 + i*4, ~0);
#  149|                             d->size[i] = pci_read_long(d, PCI_BASE_ADDRESS_0 + i*4);

Error: COMPILER_WARNING (CWE-563): [#def419]
xen-4.19.2/stubdom/pciutils-x86_64/lib/generic.c:179:35: warning[-Wunused-variable]: unused variable ‘size’
#  179 |                               u32 size;
#      |                                   ^~~~
#  177|                             if (flags & PCI_FILL_SIZES)
#  178|                               {
#  179|->                               u32 size;
#  180|                                 pci_write_long(d, PCI_BASE_ADDRESS_0 + (i-1)*4, ~0);
#  181|                                 d->size[i-1] = pci_size(x, pci_read_long(d, PCI_BASE_ADDRESS_0 + (i-1)*4), PCI_BASE_ADDRESS_MEM_MASK);

Error: COMPILER_WARNING (CWE-563): [#def420]
xen-4.19.2/stubdom/pciutils-x86_64/lib/generic.c:212:23: warning[-Wunused-variable]: unused variable ‘size’
#  212 |                   u32 size;
#      |                       ^~~~
#  210|                 if (flags & PCI_FILL_SIZES)
#  211|                   {
#  212|->                   u32 size;
#  213|                     pci_write_long(d, reg, ~0);
#  214|                     d->rom_size = pci_read_long(d, reg);

Error: COMPILER_WARNING (CWE-563): [#def421]
xen-4.19.2/stubdom/pciutils-x86_64/lib/minios.c: scope_hint: In function ‘minios_detect’
xen-4.19.2/stubdom/pciutils-x86_64/lib/minios.c:15:34: warning[-Wunused-parameter]: unused parameter ‘a’
#   15 | minios_detect(struct pci_access *a)
#      |               ~~~~~~~~~~~~~~~~~~~^
#   13|   
#   14|   static int
#   15|-> minios_detect(struct pci_access *a)
#   16|   {
#   17|     return 1;

Error: COMPILER_WARNING (CWE-563): [#def422]
xen-4.19.2/stubdom/pciutils-x86_64/lib/minios.c: scope_hint: In function ‘minios_init’
xen-4.19.2/stubdom/pciutils-x86_64/lib/minios.c:21:32: warning[-Wunused-parameter]: unused parameter ‘a’
#   21 | minios_init(struct pci_access *a)
#      |             ~~~~~~~~~~~~~~~~~~~^
#   19|   
#   20|   static void
#   21|-> minios_init(struct pci_access *a)
#   22|   {
#   23|   }

Error: COMPILER_WARNING (CWE-563): [#def423]
xen-4.19.2/stubdom/pciutils-x86_64/lib/minios.c: scope_hint: In function ‘minios_cleanup’
xen-4.19.2/stubdom/pciutils-x86_64/lib/minios.c:26:35: warning[-Wunused-parameter]: unused parameter ‘a’
#   26 | minios_cleanup(struct pci_access *a)
#      |                ~~~~~~~~~~~~~~~~~~~^
#   24|   
#   25|   static void
#   26|-> minios_cleanup(struct pci_access *a)
#   27|   {
#   28|     shutdown_pcifront(NULL);

Error: CPPCHECK_WARNING (CWE-476): [#def424]
xen-4.19.2/stubdom/pciutils-x86_64/lib/names.c:36: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_name
#   34|       return result;
#   35|     new_name = malloc(len - 2);
#   36|->   memcpy(new_name, a->id_file_name, len - 3);
#   37|     new_name[len - 3] = 0;
#   38|     pci_set_name_list_path(a, new_name, 1);

Error: CPPCHECK_WARNING (CWE-476): [#def425]
xen-4.19.2/stubdom/pciutils-x86_64/lib/names.c:37: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: new_name
#   35|     new_name = malloc(len - 2);
#   36|     memcpy(new_name, a->id_file_name, len - 3);
#   37|->   new_name[len - 3] = 0;
#   38|     pci_set_name_list_path(a, new_name, 1);
#   39|     return gzopen(a->id_file_name, "rb");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def426]
xen-4.19.2/tools/9pfsd/io.c:378:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘array’
xen-4.19.2/tools/9pfsd/io.c:1406:7: enter_function: entry to ‘io_thread’
xen-4.19.2/tools/9pfsd/io.c:1415:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/9pfsd/io.c:1421:13: branch_false: following ‘false’ branch...
xen-4.19.2/tools/9pfsd/io.c:1423:9: branch_false: ...to here
xen-4.19.2/tools/9pfsd/io.c:1432:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/9pfsd/io.c:1435:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/9pfsd/io.c:1437:16: branch_false: ...to here
xen-4.19.2/tools/9pfsd/io.c:1437:16: branch_true: following ‘true’ branch (when ‘in_hdr != 0’)...
xen-4.19.2/tools/9pfsd/io.c:1439:26: branch_true: ...to here
xen-4.19.2/tools/9pfsd/io.c:1440:20: branch_false: following ‘false’ branch (when ‘count == 7’)...
xen-4.19.2/tools/9pfsd/io.c:1442:44: branch_false: ...to here
xen-4.19.2/tools/9pfsd/io.c:1443:20: branch_false: following ‘false’ branch...
xen-4.19.2/tools/9pfsd/io.c:1454:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/9pfsd/io.c:1457:13: branch_false: ...to here
xen-4.19.2/tools/9pfsd/io.c:1462:17: call_function: calling ‘p9_version’ from ‘io_thread’
#  376|                              unsigned int elem_sz, void *data)
#  377|   {
#  378|->     if ( *array_sz && !*array )
#  379|       {
#  380|           *array = calloc(*array_sz, elem_sz);

Error: CPPCHECK_WARNING (CWE-909): [#def427]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:256: error[uninitStructMember]: Uninitialized struct member: device.devid
#  254|       XEN_TAILQ_FOREACH( device, &devs, list )
#  255|       {
#  256|->         if ( domid == device->domid && devid == device->devid )
#  257|               return device;
#  258|       }

Error: CPPCHECK_WARNING (CWE-909): [#def428]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:256: error[uninitStructMember]: Uninitialized struct member: device.domid
#  254|       XEN_TAILQ_FOREACH( device, &devs, list )
#  255|       {
#  256|->         if ( domid == device->domid && devid == device->devid )
#  257|               return device;
#  258|       }

Error: CPPCHECK_WARNING (CWE-457): [#def429]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:256: error[uninitvar]: Uninitialized variable: device
#  254|       XEN_TAILQ_FOREACH( device, &devs, list )
#  255|       {
#  256|->         if ( domid == device->domid && devid == device->devid )
#  257|               return device;
#  258|       }

Error: CPPCHECK_WARNING (CWE-401): [#def430]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:304: error[memleak]: Memory leak: device
#  302|                  domid, devid);
#  303|           free(device);
#  304|->         return NULL;
#  305|       }
#  306|   

Error: CPPCHECK_WARNING (CWE-909): [#def431]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:617: error[uninitStructMember]: Uninitialized struct member: device.last_seen
#  615|       XEN_TAILQ_FOREACH_SAFE( device, &devs, list, tmp )
#  616|       {
#  617|->         if ( device->last_seen != now )
#  618|               remove_device(device);
#  619|       }

Error: CPPCHECK_WARNING (CWE-457): [#def432]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:617: error[uninitvar]: Uninitialized variable: device
#  615|       XEN_TAILQ_FOREACH_SAFE( device, &devs, list, tmp )
#  616|       {
#  617|->         if ( device->last_seen != now )
#  618|               remove_device(device);
#  619|       }

Error: CPPCHECK_WARNING (CWE-909): [#def433]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:688: error[uninitStructMember]: Uninitialized struct member: device.num_rings
#  686|       XEN_TAILQ_FOREACH( device, &devs, list )
#  687|       {
#  688|->         for ( ring_idx = 0; ring_idx < device->num_rings; ring_idx++ )
#  689|           {
#  690|               ring = device->ring[ring_idx];

Error: CPPCHECK_WARNING (CWE-457): [#def434]
xen-4.19.2/tools/9pfsd/xen-9pfsd.c:688: error[uninitvar]: Uninitialized variable: device
#  686|       XEN_TAILQ_FOREACH( device, &devs, list )
#  687|       {
#  688|->         for ( ring_idx = 0; ring_idx < device->num_rings; ring_idx++ )
#  689|           {
#  690|               ring = device->ring[ring_idx];

Error: GCC_ANALYZER_WARNING (CWE-775): [#def435]
xen-4.19.2/tools/console/client/main.c:200:32: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
xen-4.19.2/tools/console/client/main.c:324:5: enter_function: entry to ‘main’
xen-4.19.2/tools/console/client/main.c:399:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/console/client/main.c:405:28: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:414:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/console/client/main.c:418:9: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:421:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/console/client/main.c:423:12: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:426:20: branch_false: following ‘false’ branch...
xen-4.19.2/tools/console/client/main.c:428:21: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:428:20: branch_false: following ‘false’ branch...
xen-4.19.2/tools/console/client/main.c:433:21: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:440:12: branch_false: following ‘false’ branch (when ‘path’ is non-NULL)...
xen-4.19.2/tools/console/client/main.c:442:12: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:456:12: branch_false: following ‘false’ branch (when ‘type != 3’)...
xen-4.19.2/tools/console/client/main.c:465:12: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:465:12: branch_false: following ‘false’ branch (when ‘domid != 0’)...
xen-4.19.2/tools/console/client/main.c:470:9: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:470:9: call_function: calling ‘console_lock’ from ‘main’
xen-4.19.2/tools/console/client/main.c:470:9: return_function: returning to ‘main’ from ‘console_lock’
xen-4.19.2/tools/console/client/main.c:474:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/console/client/main.c:476:16: branch_true: ...to here
xen-4.19.2/tools/console/client/main.c:482:16: call_function: calling ‘get_pty_fd’ from ‘main’
xen-4.19.2/tools/console/client/main.c:482:16: return_function: returning to ‘main’ from ‘get_pty_fd’
xen-4.19.2/tools/console/client/main.c:483:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/console/client/main.c:487:9: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:488:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:494:12: branch_false: following ‘false’ branch (when ‘start_notify_fd == -1’)...
xen-4.19.2/tools/console/client/main.c:509:9: branch_false: ...to here
xen-4.19.2/tools/console/client/main.c:509:9: call_function: calling ‘console_loop’ from ‘main’
#  198|   				continue;
#  199|   			}
#  200|-> 			return -1;
#  201|   		}
#  202|   

Error: CPPCHECK_WARNING (CWE-457): [#def436]
xen-4.19.2/tools/console/daemon/io.c:204: warning[uninitvar]: Uninitialized variable: ret
#  202|   			break;
#  203|   	}
#  204|-> 	return ret;
#  205|   }
#  206|   

Error: CPPCHECK_WARNING (CWE-457): [#def437]
xen-4.19.2/tools/console/daemon/io.c:226: warning[uninitvar]: Uninitialized variable: ret
#  224|   			break;
#  225|   	}
#  226|-> 	return ret;
#  227|   }
#  228|   

Error: CPPCHECK_WARNING (CWE-457): [#def438]
xen-4.19.2/tools/console/daemon/io.c:1399: error[legacyUninitvar]: Uninitialized variable: poll_timeout
# 1397|   		}
# 1398|   
# 1399|-> 		ret = poll(fds, nr_fds, next_timeout ? poll_timeout : -1);
# 1400|   
# 1401|   		if (log_reload) {

Error: GCC_ANALYZER_WARNING: [#def439]
xen-4.19.2/tools/console/daemon/utils.c:75:17: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘i’
xen-4.19.2/tools/console/daemon/utils.c:54:12: branch_false: following ‘false’ branch (when ‘pid <= 0’)...
xen-4.19.2/tools/console/daemon/utils.c:56:19: branch_false: ...to here
xen-4.19.2/tools/console/daemon/utils.c:56:19: branch_false: following ‘false’ branch (when ‘pid != -1’)...
xen-4.19.2/tools/console/daemon/utils.c:60:9: branch_false: ...to here
xen-4.19.2/tools/console/daemon/utils.c:62:12: branch_false: following ‘false’ branch (when ‘pid <= 0’)...
xen-4.19.2/tools/console/daemon/utils.c:64:19: branch_false: ...to here
xen-4.19.2/tools/console/daemon/utils.c:64:19: branch_false: following ‘false’ branch (when ‘pid != -1’)...
xen-4.19.2/tools/console/daemon/utils.c:69:19: branch_false: ...to here
xen-4.19.2/tools/console/daemon/utils.c:69:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/console/daemon/utils.c:73:21: branch_true: following ‘true’ branch (when ‘i != 3’)...
xen-4.19.2/tools/console/daemon/utils.c:74:17: branch_true: ...to here
xen-4.19.2/tools/console/daemon/utils.c:74:17: release_resource: closed here
xen-4.19.2/tools/console/daemon/utils.c:75:17: danger: ‘i’ could be invalid
#   73|   	for (i = 0; i <= 2; i++) {
#   74|   		close(i);
#   75|-> 		dup2(fd, i);
#   76|   	}
#   77|   

Error: CPPCHECK_WARNING (CWE-682): [#def440]
xen-4.19.2/tools/debugger/gdbsx/gx/gx_comm.c:286: error[nullPointerArithmeticOutOfMemory]: If memory allocation fail: pointer addition with NULL pointer.
#  284|   
#  285|       p = buf2;
#  286|->     *p++ = '$';
#  287|   
#  288|       for (i = 0; i < cnt; i++) {

Error: CPPCHECK_WARNING (CWE-476): [#def441]
xen-4.19.2/tools/debugger/gdbsx/gx/gx_comm.c:286: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p++
#  284|   
#  285|       p = buf2;
#  286|->     *p++ = '$';
#  287|   
#  288|       for (i = 0; i < cnt; i++) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def442]
xen-4.19.2/tools/debugger/gdbsx/gx/gx_comm.c:286:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘buf2’
xen-4.19.2/tools/debugger/gdbsx/gx/gx_comm.c:280:12: acquire_memory: this call could return NULL
xen-4.19.2/tools/debugger/gdbsx/gx/gx_comm.c:286:5: danger: ‘buf2’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  284|   
#  285|       p = buf2;
#  286|->     *p++ = '$';
#  287|   
#  288|       for (i = 0; i < cnt; i++) {

Error: CPPCHECK_WARNING (CWE-823): [#def443]
xen-4.19.2/tools/debugger/kdd/kdd.c:816: error[arrayIndexOutOfBounds]: Array 's->txb[56]' accessed at index 271, which is out of bounds.
#  814|           /* XXX debug pattern */
#  815|           for (i = 0; i < 0x100 ; i++) 
#  816|->             s->txb[sizeof (kdd_hdr) + i] = i;
#  817|       }
#  818|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def444]
xen-4.19.2/tools/firmware/hvmloader/hvmloader.c:331:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
#  329|   
#  330|       printf("HVM Loader\n");
#  331|->     BUG_ON(hvm_start_info->magic != XEN_HVM_START_MAGIC_VALUE);
#  332|   
#  333|       init_hypercalls();

Error: GCC_ANALYZER_WARNING (CWE-686): [#def445]
xen-4.19.2/tools/firmware/hvmloader/util.c:520:17: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘long unsigned int’ but received ‘char (*)[7]’ for variadic argument 1 of ‘ap’
xen-4.19.2/tools/firmware/hvmloader/util.c:707:21: enter_function: entry to ‘get_shared_info’
xen-4.19.2/tools/firmware/hvmloader/util.c:721:9: call_function: calling ‘__bug’ from ‘get_shared_info’
#  518|               if ( lflag )
#  519|               {
#  520|->                 value = va_arg(ap, unsigned long);
#  521|                   if ( (c == 'd') && ((long)value < 0) )
#  522|                   {

Error: GCC_ANALYZER_WARNING (CWE-685): [#def446]
xen-4.19.2/tools/firmware/hvmloader/util.c:520:17: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed)
xen-4.19.2/tools/firmware/hvmloader/util.c:690:24: enter_function: entry to ‘get_hvm_info_table’
xen-4.19.2/tools/firmware/hvmloader/util.c:700:5: call_function: calling ‘validate_hvm_info’ from ‘get_hvm_info_table’
#  518|               if ( lflag )
#  519|               {
#  520|->                 value = va_arg(ap, unsigned long);
#  521|                   if ( (c == 'd') && ((long)value < 0) )
#  522|                   {

Error: GCC_ANALYZER_WARNING (CWE-686): [#def447]
xen-4.19.2/tools/firmware/hvmloader/util.c:529:17: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘long unsigned int’ but received ‘char (*)[7]’ for variadic argument 1 of ‘ap’
xen-4.19.2/tools/firmware/hvmloader/util.c:707:21: enter_function: entry to ‘get_shared_info’
xen-4.19.2/tools/firmware/hvmloader/util.c:721:9: call_function: calling ‘__bug’ from ‘get_shared_info’
#  527|               else
#  528|               {
#  529|->                 value = va_arg(ap, unsigned int);
#  530|                   if ( (c == 'd') && ((int)value < 0) )
#  531|                   {

Error: GCC_ANALYZER_WARNING (CWE-685): [#def448]
xen-4.19.2/tools/firmware/hvmloader/util.c:529:17: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed)
xen-4.19.2/tools/firmware/hvmloader/util.c:690:24: enter_function: entry to ‘get_hvm_info_table’
xen-4.19.2/tools/firmware/hvmloader/util.c:700:5: call_function: calling ‘validate_hvm_info’ from ‘get_hvm_info_table’
#  527|               else
#  528|               {
#  529|->                 value = va_arg(ap, unsigned int);
#  530|                   if ( (c == 'd') && ((int)value < 0) )
#  531|                   {

Error: GCC_ANALYZER_WARNING (CWE-686): [#def449]
xen-4.19.2/tools/firmware/hvmloader/util.c:552:13: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘char *’ but received ‘int’ for variadic argument 2 of ‘ap’
xen-4.19.2/tools/firmware/hvmloader/util.c:707:21: enter_function: entry to ‘get_shared_info’
xen-4.19.2/tools/firmware/hvmloader/util.c:721:9: call_function: calling ‘__bug’ from ‘get_shared_info’
#  550|           else if ( c == 's' )
#  551|           {
#  552|->             str = va_arg(ap, char *);
#  553|               slen = strlen(str);
#  554|               if ( nflag == 0 )

Error: GCC_ANALYZER_WARNING (CWE-685): [#def450]
xen-4.19.2/tools/firmware/hvmloader/util.c:552:13: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed)
xen-4.19.2/tools/firmware/hvmloader/util.c:690:24: enter_function: entry to ‘get_hvm_info_table’
xen-4.19.2/tools/firmware/hvmloader/util.c:700:5: call_function: calling ‘validate_hvm_info’ from ‘get_hvm_info_table’
#  550|           else if ( c == 's' )
#  551|           {
#  552|->             str = va_arg(ap, char *);
#  553|               slen = strlen(str);
#  554|               if ( nflag == 0 )

Error: GCC_ANALYZER_WARNING (CWE-686): [#def451]
xen-4.19.2/tools/firmware/hvmloader/util.c:565:23: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘int’ but received ‘char (*)[7]’ for variadic argument 1 of ‘ap’
xen-4.19.2/tools/firmware/hvmloader/util.c:707:21: enter_function: entry to ‘get_shared_info’
xen-4.19.2/tools/firmware/hvmloader/util.c:721:9: call_function: calling ‘__bug’ from ‘get_shared_info’
#  563|           else if ( c == 'c' )
#  564|           {
#  565|->             emit(arg, va_arg(ap, int));
#  566|           }
#  567|           else

Error: GCC_ANALYZER_WARNING (CWE-685): [#def452]
xen-4.19.2/tools/firmware/hvmloader/util.c:565:23: warning[-Wanalyzer-va-list-exhausted]: ‘ap’ has no more arguments (0 consumed)
xen-4.19.2/tools/firmware/hvmloader/util.c:690:24: enter_function: entry to ‘get_hvm_info_table’
xen-4.19.2/tools/firmware/hvmloader/util.c:700:5: call_function: calling ‘validate_hvm_info’ from ‘get_hvm_info_table’
#  563|           else if ( c == 'c' )
#  564|           {
#  565|->             emit(arg, va_arg(ap, int));
#  566|           }
#  567|           else

Error: GCC_ANALYZER_WARNING (CWE-457): [#def453]
xen-4.19.2/tools/firmware/hvmloader/xenbus.c:124:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘data + done’
xen-4.19.2/tools/firmware/hvmloader/xenbus.c:176:13: enter_function: entry to ‘xenbus_send’
xen-4.19.2/tools/firmware/hvmloader/xenbus.c:188:5: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/hvmloader/xenbus.c:191:5: branch_false: ...to here
xen-4.19.2/tools/firmware/hvmloader/xenbus.c:209:5: call_function: inlined call to ‘ring_write’ from ‘xenbus_send’
#  122|               part = len;
#  123|   
#  124|->         memcpy(rings->req + MASK_XENSTORE_IDX(rings->req_prod),
#  125|                  data + done, part);
#  126|           barrier(); /* = wmb before prod write, rmb before next cons read */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def454]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/./arch/x86/include/asm/shared.h:81:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘v’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/traps.c:131:22: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/traps.c:133:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/traps.c:145:28: call_function: inlined call to ‘arch_get_cr2’ from ‘show_registers’
#   79|   GET_SET_SHARED(unsigned long, nmi_reason)
#   80|   
#   81|-> GET_SET_VCPU(unsigned long, cr2)
#   82|   
#   83|   #undef GET_SET_VCPU

Error: GCC_ANALYZER_WARNING (CWE-121): [#def455]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/./arch/x86/include/asm/uaccess.h:310:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:677:21: enter_function: entry to ‘rep_outs’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:692:8: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:695:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:695:10: call_function: calling ‘read_segment’ from ‘rep_outs’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:695:10: return_function: returning to ‘rep_outs’ from ‘read_segment’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:696:8: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:699:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:699:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:701:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:701:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:702:12: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:712:13: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:714:22: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:717:14: call_function: calling ‘pv_emul_virt_to_linear’ from ‘rep_outs’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:717:14: return_function: returning to ‘rep_outs’ from ‘pv_emul_virt_to_linear’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:719:12: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/pv/emul-priv-op.c:722:20: branch_false: ...to here
#  308|               return ret;
#  309|           case 8:
#  310|->             get_guest_size(*(uint64_t *)to, from, 8, ret, 8);
#  311|               return ret;
#  312|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def456]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/domain_page.c:192:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘v’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/domain_page.c:176:6: enter_function: entry to ‘unmap_domain_page’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/domain_page.c:184:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/domain_page.c:189:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/domain_page.c:189:9: call_function: calling ‘mapcache_current_vcpu’ from ‘unmap_domain_page’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/domain_page.c:189:9: return_function: return of NULL to ‘unmap_domain_page’ from ‘mapcache_current_vcpu’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/domain_page.c:192:15: danger: dereference of NULL ‘v’
#  190|       ASSERT(v && is_pv_vcpu(v));
#  191|   
#  192|->     dcache = &v->domain->arch.pv.mapcache;
#  193|       ASSERT(dcache->inuse);
#  194|   

Error: GCC_ANALYZER_WARNING (CWE-469): [#def457]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/extable.c:55:22: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/extable.c:59:13: enter_function: entry to ‘sort_exception_tables’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/extable.c:61:5: call_function: calling ‘sort_exception_table’ from ‘sort_exception_tables’
#   53|                                    const struct exception_table_entry *stop)
#   54|   {
#   55|->     sort(start, stop - start,
#   56|            sizeof(struct exception_table_entry), cmp_ex, swap_ex);
#   57|   }

Error: GCC_ANALYZER_WARNING (CWE-469): [#def458]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/extable.c:76:21: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/extable.c:219:26: enter_function: entry to ‘search_pre_exception_table’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/extable.c:222:27: call_function: calling ‘search_one_extable’ from ‘search_pre_exception_table’
#   74|       while ( first <= last )
#   75|       {
#   76|->         mid = (last - first) / 2 + first;
#   77|           diff = ex_addr(mid) - value;
#   78|           if (diff == 0)

Error: GCC_ANALYZER_WARNING (CWE-457): [#def459]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:276:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘desc’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2150:5: enter_function: entry to ‘map_domain_pirq’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2163:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2166:8: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2166:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2176:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2177:11: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2176:10: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2193:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2207:8: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2209:8: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2214:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2224:15: call_function: inlined call to ‘boot_cpu_has’ from ‘map_domain_pirq’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2224:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2227:16: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2228:12: branch_false: following ‘false’ branch (when ‘pdev’ is non-NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2231:15: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2232:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2242:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2244:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2256:17: branch_true: following ‘true’ branch (when ‘ret == 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2258:18: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2270:16: branch_false: following ‘false’ branch (when ‘type != 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2271:26: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2270:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2270:18: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2270:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2275:13: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/irq.c:2280:19: call_function: calling ‘create_irq’ from ‘map_domain_pirq’
#  274|            return -ENOSPC;
#  275|   
#  276|->     ret = init_one_irq_desc(desc);
#  277|       if (!ret)
#  278|       {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def460]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:886:41: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘msi’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:753:12: enter_function: entry to ‘msix_capability_init’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:769:8: branch_false: following ‘false’ branch (when ‘pos != 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:774:15: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:786:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:793:8: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:793:8: branch_true: following ‘true’ branch (when ‘desc’ is non-NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:795:17: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:795:17: call_function: calling ‘alloc_msi_entry’ from ‘msix_capability_init’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:795:17: return_function: returning to ‘msix_capability_init’ from ‘alloc_msi_entry’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:796:12: branch_false: following ‘false’ branch (when ‘entry’ is non-NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:806:20: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:807:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:818:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:820:13: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:836:23: call_function: calling ‘read_pci_mem_bar’ from ‘msix_capability_init’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:836:23: return_function: returning to ‘msix_capability_init’ from ‘read_pci_mem_bar’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:839:12: branch_false: following ‘false’ branch (when ‘table_paddr != 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:850:24: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:860:21: call_function: calling ‘read_pci_mem_bar’ from ‘msix_capability_init’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:860:21: return_function: returning to ‘msix_capability_init’ from ‘read_pci_mem_bar’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:883:8: branch_true: following ‘true’ branch (when ‘entry’ is non-NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:886:41: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/msi.c:886:41: danger: dereference of NULL ‘msi’
#  884|       {
#  885|           /* Map MSI-X table region */
#  886|->         u64 entry_paddr = table_paddr + msi->entry_nr * PCI_MSIX_ENTRY_SIZE;
#  887|           int idx = msix_get_fixmap(msix, table_paddr, entry_paddr);
#  888|           void __iomem *base;

Error: GCC_ANALYZER_WARNING (CWE-469): [#def461]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/percpu.c:33:35: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/percpu.c:30:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/percpu.c:33:35: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/percpu.c:33:35: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
#   31|           return 0;
#   32|   
#   33|->     if ( (p = alloc_xenheap_pages(PERCPU_ORDER, 0)) == NULL )
#   34|           return -ENOMEM;
#   35|   

Error: GCC_ANALYZER_WARNING (CWE-469): [#def462]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/percpu.c:54:27: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
#   52|       char *p = __per_cpu_start + __per_cpu_offset[cpu];
#   53|   
#   54|->     free_xenheap_pages(p, PERCPU_ORDER);
#   55|       __per_cpu_offset[cpu] = INVALID_PERCPU_AREA;
#   56|   }

Error: GCC_ANALYZER_WARNING (CWE-469): [#def463]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:496:5: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:968:33: enter_function: entry to ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1010:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1013:9: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1028:8: branch_false: following ‘false’ branch (when ‘kextra’ is NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1039:5: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1343:5: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1343:5: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1366:35: branch_true: following ‘true’ branch (when ‘i >= 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1371:14: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1416:13: call_function: calling ‘move_xen’ from ‘__start_xen’
#  494|        * This includes a snapshot of the current stack.
#  495|        */
#  496|->     memcpy(__va(__pa(_start)), _start, _end - _start);
#  497|   
#  498|       /*

Error: GCC_ANALYZER_WARNING (CWE-469): [#def464]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1339:40: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1010:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1013:9: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1028:8: branch_false: following ‘false’ branch (when ‘kextra’ is NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1039:5: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1329:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1338:42: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1339:40: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
# 1337|            */
# 1338|           mod[mbi->mods_count].mod_start = virt_to_mfn(_stext);
# 1339|->         mod[mbi->mods_count].mod_end = __2M_rwdata_end - _stext;
# 1340|       }
# 1341|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def465]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1556:25: warning[-Wanalyzer-out-of-bounds]: buffer under-read
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:968:33: enter_function: entry to ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1010:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1013:9: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1028:8: branch_true: following ‘true’ branch (when ‘kextra’ is non-NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1035:9: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1343:5: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1343:5: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1477:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1484:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1484:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1488:10: call_function: inlined call to ‘using_2M_mapping’ from ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1511:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1516:14: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1516:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1520:14: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1523:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1526:14: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1546:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1548:18: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1548:16: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1550:23: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1552:24: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1556:25: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1556:25: danger: out-of-bounds read from byte -16 till byte -9 but ‘boot_e820’ starts at byte 0
# 1554|                       ASSERT(j);
# 1555|                   }
# 1556|->                 map_e = boot_e820.map[j].addr + boot_e820.map[j].size;
# 1557|                   for ( j = 0; j < mbi->mods_count; ++j )
# 1558|                   {

Error: GCC_ANALYZER_WARNING (CWE-127): [#def466]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1556:49: warning[-Wanalyzer-out-of-bounds]: buffer under-read
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:968:33: enter_function: entry to ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1010:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1013:9: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1028:8: branch_true: following ‘true’ branch (when ‘kextra’ is non-NULL)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1035:9: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1343:5: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1343:5: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1477:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1484:10: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1484:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1488:10: call_function: inlined call to ‘using_2M_mapping’ from ‘__start_xen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1511:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1516:14: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1516:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1520:14: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1523:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1526:14: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1546:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1548:18: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1548:16: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1550:23: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1552:24: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1556:25: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/setup.c:1556:49: danger: out-of-bounds read from byte -8 till byte -1 but ‘boot_e820’ starts at byte 0
# 1554|                       ASSERT(j);
# 1555|                   }
# 1556|->                 map_e = boot_e820.map[j].addr + boot_e820.map[j].size;
# 1557|                   for ( j = 0; j < mbi->mods_count; ++j )
# 1558|                   {

Error: GCC_ANALYZER_WARNING (CWE-469): [#def467]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/mm.c:725:22: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/mm.c:715:13: enter_function: entry to ‘zap_low_mappings’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/mm.c:717:5: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/mm.c:720:5: call_function: inlined call to ‘write_u64_atomic’ from ‘zap_low_mappings’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/arch/x86/x86_64/mm.c:725:22: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
#  723|       /* Replace with mapping of the boot trampoline only. */
#  724|       map_pages_to_xen(trampoline_phys, maddr_to_mfn(trampoline_phys),
#  725|->                      PFN_UP(trampoline_end - trampoline_start),
#  726|                        __PAGE_HYPERVISOR_RX);
#  727|   }

Error: GCC_ANALYZER_WARNING (CWE-1335): [#def468]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/bunzip2.c:140:55: warning[-Wanalyzer-shift-count-overflow]: shift by count (‘32’) >= precision of type (‘32’)
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/bunzip2.c:518:19: enter_function: entry to ‘read_bunzip’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/bunzip2.c:524:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/bunzip2.c:528:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/bunzip2.c:536:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/bunzip2.c:605:20: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/bunzip2.c:605:20: call_function: calling ‘get_next_block’ from ‘read_bunzip’
#  138|   	/* Calculate result */
#  139|   	bd->inbufBitCount -= bits_wanted;
#  140|-> 	bits |= (bd->inbufBits >> bd->inbufBitCount)&((1 << bits_wanted)-1);
#  141|   
#  142|   	return bits;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def469]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/domain.c:672:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘config’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/domain.c:820:13: enter_function: entry to ‘setup_system_domains’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/domain.c:829:15: call_function: calling ‘domain_create’ from ‘setup_system_domains’
#  670|       {
#  671|           err = -ENOMEM;
#  672|->         d->vcpu = xzalloc_array(struct vcpu *, config->max_vcpus);
#  673|           if ( !d->vcpu )
#  674|               goto fail;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def470]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/domain.c:734:36: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘config’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/domain.c:820:13: enter_function: entry to ‘setup_system_domains’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/domain.c:829:15: call_function: calling ‘domain_create’ from ‘setup_system_domains’
#  732|           atomic_inc(&d->pause_count);
#  733|   
#  734|->         if ( (err = evtchn_init(d, config->max_evtchn_port)) != 0 )
#  735|               goto fail;
#  736|           init_status |= INIT_evtchn;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def471]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:123:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ch[12]’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:84:16: branch_true: following ‘true’ branch (when ‘len > 110’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:85:22: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:85:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:94:37: branch_true: following ‘true’ branch (when ‘i != 0’)...
 branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:96:32: branch_true: following ‘true’ branch (when ‘j != 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:97:33: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:96:32: branch_true: following ‘true’ branch (when ‘j != 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:97:33: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:94:37: branch_false: following ‘false’ branch (when ‘i == 0’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:118:22: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:118:20: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:121:17: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/earlycpio.c:123:24: danger: use of uninitialized value ‘ch[12]’ here
#  121|   		len -= cpio_header_len;
#  122|   
#  123|-> 		dptr = PTR_ALIGN(p + ch[C_NAMESIZE], 4);
#  124|   		nptr = PTR_ALIGN(dptr + ch[C_FILESIZE], 4);
#  125|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def472]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:194:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 1 of ‘__builtin_strcmp’ must be non-null
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:
#  194|->         if ( !strcmp(str, "yes") )
#  195|               parms->pae = XEN_PAE_EXTCR3;
#  196|           if ( strstr(str, "bimodal") )

Error: GCC_ANALYZER_WARNING (CWE-688): [#def473]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:200:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 1 of ‘__builtin_strcmp’ must be non-null
#  198|           break;
#  199|       case XEN_ELFNOTE_BSD_SYMTAB:
#  200|->         if ( !strcmp(str, "yes") )
#  201|               parms->bsd_symtab = 1;
#  202|           break;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def474]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:152:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  150|           {
#  151|               x = first_range(r);
#  152|->             x->s = s;
#  153|           }
#  154|           else if ( (x->e < s) && ((x->e + 1) != s) )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def475]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:152:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:394:5: enter_function: entry to ‘rangeset_merge’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:396:12: call_function: calling ‘rangeset_report_ranges’ from ‘rangeset_merge’
#  150|           {
#  151|               x = first_range(r);
#  152|->             x->s = s;
#  153|           }
#  154|           else if ( (x->e < s) && ((x->e + 1) != s) )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def476]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:157:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  155|           {
#  156|               x = next_range(r, x);
#  157|->             x->s = s;
#  158|           }
#  159|           

Error: GCC_ANALYZER_WARNING (CWE-476): [#def477]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:157:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  155|           {
#  156|               x = next_range(r, x);
#  157|->             x->s = s;
#  158|           }
#  159|           

Error: GCC_ANALYZER_WARNING (CWE-476): [#def478]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:160:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  158|           }
#  159|           
#  160|->         x->e = (y->e > e) ? y->e : e;
#  161|   
#  162|           for ( ; ; )

Error: GCC_ANALYZER_WARNING (CWE-835): [#def479]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/sched/cpupool.c:137:16: warning[-Wanalyzer-infinite-loop]: infinite loop
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/common/sched/cpupool.c:1298:28: enter_function: entry to ‘cpupool_init’
#  135|       while ( gran == 0 )
#  136|       {
#  137|->         gran = cpupool_check_granularity(opt_sched_granularity);
#  138|   
#  139|           if ( gran == 0 )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def480]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1547:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pdev’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1527:12: enter_function: entry to ‘assign_device’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1533:11: call_function: inlined call to ‘is_iommu_enabled’ from ‘assign_device’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1536:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1541:31: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1541:12: call_function: calling ‘pci_get_pdev’ from ‘assign_device’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1541:12: return_function: return of NULL to ‘assign_device’ from ‘pci_get_pdev’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/drivers/passthrough/pci.c:1547:10: danger: dereference of NULL ‘pdev’
# 1545|       /* Do not allow broken devices to be assigned to guests. */
# 1546|       rc = -EBADF;
# 1547|->     if ( pdev->broken && d != hardware_domain && d != dom_io )
# 1548|           goto done;
# 1549|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def481]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:92:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘list’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:114:6: enter_function: entry to ‘list_sort’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:124:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:127:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:129:9: release_memory: ‘0’ is NULL
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:132:16: branch_false: following ‘false’ branch (when ‘list’ is NULL)...
 branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:152:23: branch_false: following ‘false’ branch (when ‘lev >= max_lev’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:156:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:156:9: release_memory: ‘list’ is NULL
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/lib/list-sort.c:156:9: call_function: calling ‘merge_and_restore_back_links’ from ‘list_sort’
#   90|   			(*cmp)(priv, tail->next, tail->next);
#   91|   
#   92|-> 		tail->next->prev = tail;
#   93|   		tail = tail->next;
#   94|   	} while (tail->next);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def482]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:327:30: warning[-Wanalyzer-out-of-bounds]: heap-based buffer under-read
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:385:5: enter_function: entry to ‘main’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:390:12: branch_false: following ‘false’ branch (when ‘argc == 4’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:393:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:397:9: call_function: calling ‘xprintf’ from ‘main’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:397:9: return_function: returning to ‘main’ from ‘xprintf’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:399:15: call_function: calling ‘read_file’ from ‘main’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:399:15: return_function: returning to ‘main’ from ‘read_file’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/fixdep.c:400:9: call_function: calling ‘parse_dep_file’ from ‘main’
#  325|   		is_last = (*p == '\0');
#  326|   		/* Is the token we found a target name? */
#  327|-> 		is_target = (*(p-1) == ':');
#  328|   		/* Don't write any target names into the dependency file */
#  329|   		if (is_target) {

Error: GCC_ANALYZER_WARNING (CWE-126): [#def483]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/confdata.c:96:9: warning[-Wanalyzer-out-of-bounds]: buffer over-read
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/confdata.c:988:12: enter_function: entry to ‘conf_touch_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/confdata.c:1001:9: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/confdata.c:1003:20: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/confdata.c:1043:27: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/confdata.c:1052:38: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/confdata.c:1052:23: call_function: calling ‘conf_touch_dep’ from ‘conf_touch_deps’
#   94|   	char *p;
#   95|   
#   96|-> 	strncpy(tmp, path, sizeof(tmp));
#   97|   	tmp[sizeof(tmp) - 1] = 0;
#   98|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def484]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3338:33: warning[-Wanalyzer-malloc-leak]: leak of ‘*b.yy_ch_buf’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4156:14: enter_function: entry to ‘expand_token’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4167:21: call_function: calling ‘input’ from ‘expand_token’
# 3336|   					b->yy_buf_size *= 2;
# 3337|   
# 3338|-> 				b->yy_ch_buf = (char *)
# 3339|   					/* Include room in for 2 EOB chars. */
# 3340|   					yyrealloc( (void *) b->yy_ch_buf,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def485]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3594:12: warning[-Wanalyzer-file-leak]: leak of FILE
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: return_function: returning to ‘zconf_nextfile’ from ‘yy_create_buffer’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_switch_to_buffer’ from ‘zconf_nextfile’
# 3592|        */
# 3593|   	yyensure_buffer_stack ();
# 3594|-> 	if ( YY_CURRENT_BUFFER == new_buffer )
# 3595|   		return;
# 3596|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def486]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3594:12: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: return_function: returning to ‘zconf_nextfile’ from ‘yy_create_buffer’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_switch_to_buffer’ from ‘zconf_nextfile’
# 3592|        */
# 3593|   	yyensure_buffer_stack ();
# 3594|-> 	if ( YY_CURRENT_BUFFER == new_buffer )
# 3595|   		return;
# 3596|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def487]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3644:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:30: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:20: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
# 3642|   	 */
# 3643|   	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2)  );
# 3644|-> 	if ( ! b->yy_ch_buf )
# 3645|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );
# 3646|   

Error: CPPCHECK_WARNING (CWE-476): [#def488]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3684: warning[nullPointer]: Possible null pointer dereference: b
# 3682|   	yy_flush_buffer( b );
# 3683|   
# 3684|-> 	b->yy_input_file = file;
# 3685|   	b->yy_fill_buffer = 1;
# 3686|   

Error: CPPCHECK_WARNING (CWE-476): [#def489]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3685: warning[nullPointer]: Possible null pointer dereference: b
# 3683|   
# 3684|   	b->yy_input_file = file;
# 3685|-> 	b->yy_fill_buffer = 1;
# 3686|   
# 3687|       /* If b is the current buffer, then yy_init_buffer was _probably_

Error: GCC_ANALYZER_WARNING (CWE-401): [#def490]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:3724:19: warning[-Wanalyzer-malloc-leak]: leak of ‘yy_create_buffer(zconf_fopen(*file.name), 16384)’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: return_function: returning to ‘zconf_nextfile’ from ‘yy_create_buffer’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_switch_to_buffer’ from ‘zconf_nextfile’
# 3722|   	b->yy_buffer_status = YY_BUFFER_NEW;
# 3723|   
# 3724|-> 	if ( b == YY_CURRENT_BUFFER )
# 3725|   		yy_load_buffer_state(  );
# 3726|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def491]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1073:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘prop’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1250:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1251:17: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1251:17: call_function: calling ‘sym_check_print_recursive’ from ‘sym_check_deps’
# 1071|   		}
# 1072|   		if (stack->sym == last_sym)
# 1073|-> 			fprintf(stderr, "%s:%d:error: recursive dependency detected!\n",
# 1074|   				prop->file->name, prop->lineno);
# 1075|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def492]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1218:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1250:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1254:13: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1254:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1257:13: call_function: inlined call to ‘sym_is_choice_value’ from ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1257:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1261:17: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1262:24: call_function: inlined call to ‘sym_get_choice_prop’ from ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1263:24: call_function: calling ‘sym_check_deps’ from ‘sym_check_deps’
# 1216|   
# 1217|   	prop = sym_get_choice_prop(choice);
# 1218|-> 	expr_list_for_each_sym(prop->expr, e, sym)
# 1219|   		sym->flags |= (SYMBOL_CHECK | SYMBOL_CHECKED);
# 1220|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def493]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1250:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sym’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1250:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1254:13: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1254:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1257:13: call_function: inlined call to ‘sym_is_choice_value’ from ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1257:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1261:17: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1262:24: call_function: inlined call to ‘sym_get_choice_prop’ from ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1263:24: call_function: calling ‘sym_check_deps’ from ‘sym_check_deps’
# 1248|   	struct property *prop;
# 1249|   
# 1250|-> 	if (sym->flags & SYMBOL_CHECK) {
# 1251|   		sym_check_print_recursive(sym);
# 1252|   		return sym;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def494]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1300:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1250:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1254:13: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1254:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1257:13: call_function: inlined call to ‘sym_is_choice_value’ from ‘sym_check_deps’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1257:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1261:17: branch_true: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/kconfig/symbol.c:1263:24: call_function: inlined call to ‘prop_get_symbol’ from ‘sym_check_deps’
# 1298|   struct symbol *prop_get_symbol(struct property *prop)
# 1299|   {
# 1300|-> 	if (prop->expr && (prop->expr->type == E_SYMBOL ||
# 1301|   			   prop->expr->type == E_LIST))
# 1302|   		return prop->expr->left.sym;

Error: GCC_ANALYZER_WARNING (CWE-415): [#def495]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:120:17: warning[-Wanalyzer-double-free]: double-‘free’ of ‘0’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:584:5: enter_function: entry to ‘main’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:614:19: branch_false: following ‘false’ branch (when ‘argc == 1’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:617:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:617:9: call_function: calling ‘read_map’ from ‘main’
#  118|   	     input_format == fmt_sysv && !*type && stype == '?' && sym &&
#  119|   	     sym[1] && strchr("cSsoh", sym[1]) && !sym[2])) {
#  120|-> 		free(filename);
#  121|   		filename = *str ? strdup(str) : NULL;
#  122|   		goto skip_tail;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def496]
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:175:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*s.sym’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:584:5: enter_function: entry to ‘main’
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:614:19: branch_false: following ‘false’ branch (when ‘argc == 1’)...
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:617:9: branch_false: ...to here
xen-4.19.2/tools/firmware/xen-dir/xen-root/xen/tools/symbols.c:617:9: call_function: calling ‘read_map’ from ‘main’
#  173|   		s->type = stype; /* As s->sym[0] ends mangled. */
#  174|   	}
#  175|-> 	s->sym[0] = stype;
#  176|   	rc = 0;
#  177|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def497]
xen-4.19.2/tools/flask/utils/label-pci.c:78:15: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&buf, "r")’
xen-4.19.2/tools/flask/utils/label-pci.c:46:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/flask/utils/label-pci.c:49:12: branch_false: ...to here
xen-4.19.2/tools/flask/utils/label-pci.c:56:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/flask/utils/label-pci.c:64:9: branch_false: ...to here
xen-4.19.2/tools/flask/utils/label-pci.c:70:13: acquire_resource: opened here
xen-4.19.2/tools/flask/utils/label-pci.c:71:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/flask/utils/label-pci.c:78:15: branch_false: ...to here
xen-4.19.2/tools/flask/utils/label-pci.c:78:15: danger: ‘fopen(&buf, "r")’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   76|   	}
#   77|   
#   78|-> 	ret = xc_flask_add_device(xch, sbdf, argv[2]);
#   79|   	if (ret) {
#   80|   		fprintf(stderr, "xc_flask_add_device: Unable to set context of PCI device %s (0x%x) to %s: %d\n",

Error: GCC_ANALYZER_WARNING (CWE-401): [#def498]
xen-4.19.2/tools/flask/utils/label-pci.c:78:15: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&buf, "r")’
xen-4.19.2/tools/flask/utils/label-pci.c:46:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/flask/utils/label-pci.c:49:12: branch_false: ...to here
xen-4.19.2/tools/flask/utils/label-pci.c:56:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/flask/utils/label-pci.c:64:9: branch_false: ...to here
xen-4.19.2/tools/flask/utils/label-pci.c:70:13: acquire_memory: allocated here
xen-4.19.2/tools/flask/utils/label-pci.c:71:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/flask/utils/label-pci.c:78:15: branch_false: ...to here
xen-4.19.2/tools/flask/utils/label-pci.c:78:15: danger: ‘fopen(&buf, "r")’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#   76|   	}
#   77|   
#   78|-> 	ret = xc_flask_add_device(xch, sbdf, argv[2]);
#   79|   	if (ret) {
#   80|   		fprintf(stderr, "xc_flask_add_device: Unable to set context of PCI device %s (0x%x) to %s: %d\n",

Error: GCC_ANALYZER_WARNING (CWE-688): [#def499]
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:182:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  180|       {
#  181|       case XEN_ELFNOTE_LOADER:
#  182|->         safe_strcpy(parms->loader, str);
#  183|           break;
#  184|       case XEN_ELFNOTE_GUEST_OS:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def500]
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:185:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  183|           break;
#  184|       case XEN_ELFNOTE_GUEST_OS:
#  185|->         safe_strcpy(parms->guest_os, str);
#  186|           break;
#  187|       case XEN_ELFNOTE_GUEST_VERSION:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def501]
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:188:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  186|           break;
#  187|       case XEN_ELFNOTE_GUEST_VERSION:
#  188|->         safe_strcpy(parms->guest_ver, str);
#  189|           break;
#  190|       case XEN_ELFNOTE_XEN_VERSION:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def502]
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:191:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  189|           break;
#  190|       case XEN_ELFNOTE_XEN_VERSION:
#  191|->         safe_strcpy(parms->xen_ver, str);
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def503]
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:194:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:
#  194|->         if ( !strcmp(str, "yes") )
#  195|               parms->pae = XEN_PAE_EXTCR3;
#  196|           if ( strstr(str, "bimodal") )

Error: GCC_ANALYZER_WARNING (CWE-688): [#def504]
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:200:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/fuzz/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#  198|           break;
#  199|       case XEN_ELFNOTE_BSD_SYMTAB:
#  200|->         if ( !strcmp(str, "yes") )
#  201|               parms->bsd_symtab = 1;
#  202|           break;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def505]
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:94:16: warning[-Wanalyzer-null-argument]: use of NULL ‘fp’ where non-null expected
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:31:12: branch_true: following ‘true’ branch (when ‘c == -1’)...
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:53:11: branch_true: ...to here
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:55:8: branch_false: following ‘false’ branch (when ‘max != 0’)...
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:61:10: branch_false: ...to here
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:61:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:69:21: branch_true: following ‘true’ branch (when ‘max > count’)...
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:72:14: branch_true: ...to here
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:72:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:94:16: branch_false: ...to here
xen-4.19.2/tools/fuzz/x86_instruction_emulator/afl-harness.c:94:16: danger: argument 4 (‘fp’) NULL where non-null expected
#   92|   #endif
#   93|   
#   94|->         size = fread(input, 1, INPUT_SIZE, fp);
#   95|   
#   96|           if ( ferror(fp) )

Error: GCC_ANALYZER_WARNING (CWE-775): [#def506]
xen-4.19.2/tools/helpers/init-xenstore-domain.c:109:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/xen/xenbus_backend", 2)’
xen-4.19.2/tools/helpers/init-xenstore-domain.c:102:13: acquire_resource: opened here
xen-4.19.2/tools/helpers/init-xenstore-domain.c:103:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/helpers/init-xenstore-domain.c:109:10: branch_false: ...to here
xen-4.19.2/tools/helpers/init-xenstore-domain.c:109:10: danger: ‘open("/dev/xen/xenbus_backend", 2)’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  107|       }
#  108|   
#  109|->     if ( flask )
#  110|       {
#  111|           rv = xc_flask_context_to_sid(xch, flask, strlen(flask), &config.ssidref);

Error: CPPCHECK_WARNING (CWE-758): [#def507]
xen-4.19.2/tools/libacpi/mk_dsdt.c:443: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  441|                   stmt("Name", "_ADR, %#06x0000", slot);
#  442|                   push_block("Method", "_EJ0,1"); {
#  443|->                     stmt("Store", "%#010x, B0EJ", 1 << slot);
#  444|                   } pop_block();
#  445|                   stmt("Name", "_SUN, %i", slot);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def508]
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:182:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  180|       {
#  181|       case XEN_ELFNOTE_LOADER:
#  182|->         safe_strcpy(parms->loader, str);
#  183|           break;
#  184|       case XEN_ELFNOTE_GUEST_OS:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def509]
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:185:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  183|           break;
#  184|       case XEN_ELFNOTE_GUEST_OS:
#  185|->         safe_strcpy(parms->guest_os, str);
#  186|           break;
#  187|       case XEN_ELFNOTE_GUEST_VERSION:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def510]
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:188:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  186|           break;
#  187|       case XEN_ELFNOTE_GUEST_VERSION:
#  188|->         safe_strcpy(parms->guest_ver, str);
#  189|           break;
#  190|       case XEN_ELFNOTE_XEN_VERSION:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def511]
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:191:9: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 2 of ‘__builtin_strncpy’ must be non-null
#  189|           break;
#  190|       case XEN_ELFNOTE_XEN_VERSION:
#  191|->         safe_strcpy(parms->xen_ver, str);
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def512]
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:194:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:
#  194|->         if ( !strcmp(str, "yes") )
#  195|               parms->pae = XEN_PAE_EXTCR3;
#  196|           if ( strstr(str, "bimodal") )

Error: GCC_ANALYZER_WARNING (CWE-688): [#def513]
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:200:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/tools/libs/guest/../../../xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#  198|           break;
#  199|       case XEN_ELFNOTE_BSD_SYMTAB:
#  200|->         if ( !strcmp(str, "yes") )
#  201|               parms->bsd_symtab = 1;
#  202|           break;

Error: CPPCHECK_WARNING (CWE-758): [#def514]
xen-4.19.2/tools/libs/guest/xg_core_x86.c:79: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
#   77|   static inline bool is_canonical_address(uint64_t vaddr)
#   78|   {
#   79|->     return ((int64_t)vaddr >> 47) == ((int64_t)vaddr >> 63);
#   80|   }
#   81|   

Error: CPPCHECK_WARNING (CWE-401): [#def515]
xen-4.19.2/tools/libs/guest/xg_sr_common.h:211: error[memleak]: Memory leak: ptr
#  209|       blob->size = size;
#  210|   
#  211|->     return 0;
#  212|   }
#  213|   

Error: CPPCHECK_WARNING (CWE-457): [#def516]
xen-4.19.2/tools/libs/guest/xg_sr_restore_x86_pv.c:1006: warning[uninitvar]: Uninitialized variable: pfns
# 1004|       }
# 1005|   
# 1006|->     if ( to_populate && populate_pfns(ctx, to_populate, pfns, NULL) )
# 1007|           return -1;
# 1008|   

Error: CPPCHECK_WARNING (CWE-758): [#def517]
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:9: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
#    7|   static inline bool is_canonical_address(xen_vaddr_t vaddr)
#    8|   {
#    9|->     return ((int64_t)vaddr >> 47) == ((int64_t)vaddr >> 63);
#   10|   }
#   11|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def518]
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:106:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:1032:12: enter_function: entry to ‘x86_pv_setup’
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:1044:10: call_function: calling ‘map_shinfo’ from ‘x86_pv_setup’
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:1044:10: return_function: returning to ‘x86_pv_setup’ from ‘map_shinfo’
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:1045:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:1048:10: branch_false: ...to here
xen-4.19.2/tools/libs/guest/xg_sr_save_x86_pv.c:1048:10: call_function: calling ‘map_p2m’ from ‘x86_pv_setup’
#  104|       for ( x = 0; x < n_mfns; ++x )
#  105|       {
#  106|->         if ( !mfn_in_pseudophysmap(ctx, mfns[x]) )
#  107|           {
#  108|               ERROR("Bad mfn in p2m_frame_list[%u]", x);

Error: CPPCHECK_WARNING (CWE-401): [#def519]
xen-4.19.2/tools/libs/hypfs/core.c:149: error[memleakOnRealloc]: Common realloc mistake: 'content' nulled but not freed upon failure
#  147|   
#  148|           out_sz = z.next_out - workbuf;
#  149|->         content = realloc(content, *sz + out_sz + 1);
#  150|           if (!content) {
#  151|               ret = Z_MEM_ERROR;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def520]
xen-4.19.2/tools/libs/light/libxl_aoutils.c:295:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘buf’
xen-4.19.2/tools/libs/light/libxl_aoutils.c:219:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_aoutils.c:222:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_aoutils.c:222:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_aoutils.c:229:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_aoutils.c:229:5: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_aoutils.c:274:12: branch_false: following ‘false’ branch (when ‘r != 0’)...
xen-4.19.2/tools/libs/light/libxl_aoutils.c:294:13: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_aoutils.c:295:43: danger: dereference of NULL ‘buf’
#  293|           }
#  294|           if (dc->log) {
#  295|->             int wrote = fwrite(buf->buf + buf->used, 1, r, dc->log);
#  296|               if (wrote != r) {
#  297|                   assert(ferror(dc->log));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def521]
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:298:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘h’
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:204:5: enter_function: entry to ‘colo_proxy_setup’
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:211:14: release_memory: ‘buff’ is NULL
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:217:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:257:12: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:258:8: branch_false: following ‘false’ branch (when ‘skfd >= 0’)...
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:262:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:269:8: branch_false: following ‘false’ branch (when ‘i != 11’)...
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:274:11: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:278:15: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:283:18: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:284:11: call_function: calling ‘colo_proxy_send’ from ‘colo_proxy_setup’
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:284:11: return_function: returning to ‘colo_proxy_setup’ from ‘colo_proxy_send’
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:285:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:289:12: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:289:12: call_function: calling ‘colo_proxy_recv’ from ‘colo_proxy_setup’
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:289:12: return_function: returning to ‘colo_proxy_setup’ from ‘colo_proxy_recv’
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:290:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:296:8: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:296:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:297:9: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:297:9: release_memory: ‘buff’ is NULL
xen-4.19.2/tools/libs/light/libxl_colo_proxy.c:298:13: danger: dereference of NULL ‘h’
#  296|       if (size) {
#  297|           h = (struct nlmsghdr *)buff;
#  298|->         if (h->nlmsg_type == NLMSG_ERROR) {
#  299|               /* ack's type is NLMSG_ERROR */
#  300|               struct nlmsgerr *err = (struct nlmsgerr *)NLMSG_DATA(h);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def522]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:87:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘policy’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:83:8: branch_true: following ‘true’ branch (when ‘policy’ is NULL)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:84:24: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:84:24: acquire_memory: this call could return NULL
xen-4.19.2/tools/libs/light/libxl_cpuid.c:87:9: danger: ‘policy’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   85|   
#   86|       list = &policy->cpuid;
#   87|->     if (*list != NULL) {
#   88|           for (i = 0; (*list)[i].input[0] != XEN_CPUID_INPUT_UNUSED; i++) {
#   89|               if ((*list)[i].input[0] == leaf && (*list)[i].input[1] == subleaf)

Error: GCC_ANALYZER_WARNING (CWE-457): [#def523]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:137:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(unsigned int *)(&flags[4])’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:232:5: enter_function: entry to ‘libxl_cpuid_parse_config’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:357:8: branch_false: following ‘false’ branch (when ‘sep’ is non-NULL)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:360:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:362:30: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:363:38: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:369:8: branch_false: following ‘false’ branch (when ‘name’ is non-NULL)...
 branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:372:12: call_function: inlined call to ‘bsearch’ from ‘libxl_cpuid_parse_config’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:376:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:379:31: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:391:16: call_function: calling ‘cpuid_add’ from ‘libxl_cpuid_parse_config’
#  135|       if (!strcmp(flag->name, "family")) {
#  136|           if (num < 16) {
#  137|->             memcpy(resstr + (32 - 4) - flag->bit, flags + 4, 4);
#  138|               memcpy(resstr + (32 - 8) - 20, "00000000", 8);
#  139|           } else {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def524]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:149:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘resstr’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:101:12: enter_function: entry to ‘cpuid_add’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:104:35: call_function: calling ‘cpuid_find_match’ from ‘cpuid_add’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:104:35: return_function: returning to ‘cpuid_add’ from ‘cpuid_find_match’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:113:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:128:8: branch_true: following ‘true’ branch (when ‘resstr’ is NULL)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:129:18: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:129:18: acquire_memory: this call could return NULL
xen-4.19.2/tools/libs/light/libxl_cpuid.c:135:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:148:17: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:148:15: branch_true: following ‘true’ branch (when the strings are equal)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:149:9: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:149:9: danger: ‘resstr’ could be NULL: unchecked value from [(10)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/9)
#  147|           }
#  148|       } else if (!strcmp(flag->name, "model")) {
#  149|->         memcpy(resstr + (32 - 4) - 16, flags, 4);
#  150|           memcpy(resstr + (32 - 4) - flag->bit, flags + 4, 4);
#  151|       } else {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def525]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:150:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(unsigned int *)(&flags[4])’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:232:5: enter_function: entry to ‘libxl_cpuid_parse_config’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:357:8: branch_false: following ‘false’ branch (when ‘sep’ is non-NULL)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:360:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:362:30: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:363:38: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:369:8: branch_false: following ‘false’ branch (when ‘name’ is non-NULL)...
 branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:372:12: call_function: inlined call to ‘bsearch’ from ‘libxl_cpuid_parse_config’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:376:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:379:31: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:391:16: call_function: calling ‘cpuid_add’ from ‘libxl_cpuid_parse_config’
#  148|       } else if (!strcmp(flag->name, "model")) {
#  149|           memcpy(resstr + (32 - 4) - 16, flags, 4);
#  150|->         memcpy(resstr + (32 - 4) - flag->bit, flags + 4, 4);
#  151|       } else {
#  152|           memcpy(resstr + (32 - flag->length) - flag->bit, flags,

Error: GCC_ANALYZER_WARNING (CWE-476): [#def526]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:168:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘policy’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:165:8: branch_true: following ‘true’ branch (when ‘policy’ is NULL)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:166:24: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:166:24: acquire_memory: this call could return NULL
xen-4.19.2/tools/libs/light/libxl_cpuid.c:168:9: danger: ‘policy’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
#  166|           policy = *pl = calloc(1, sizeof(*policy));
#  167|   
#  168|->     if (policy->msr != NULL) {
#  169|           for (i = 0; policy->msr[i].index != XC_MSR_INPUT_UNUSED; i++) {
#  170|               if (policy->msr[i].index == idx) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def527]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:177:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:165:8: branch_true: following ‘true’ branch (when ‘policy’ is NULL)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:166:24: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:168:9: release_memory: ‘0’ is NULL
xen-4.19.2/tools/libs/light/libxl_cpuid.c:168:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:176:64: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:177:16: release_memory: ‘0’ is NULL
xen-4.19.2/tools/libs/light/libxl_cpuid.c:177:5: danger: dereference of NULL ‘realloc(*policy.msr, (long unsigned int)(i + 2) * 72) + (long unsigned int)i * 72’
#  175|   
#  176|       policy->msr = realloc(policy->msr, sizeof(struct xc_msr) * (i + 2));
#  177|->     policy->msr[i].index = idx;
#  178|       memset(policy->msr[i].policy, 'x', ARRAY_SIZE(policy->msr[0].policy) - 1);
#  179|       policy->msr[i].policy[ARRAY_SIZE(policy->msr[0].policy) - 1] = '\0';

Error: GCC_ANALYZER_WARNING (CWE-688): [#def528]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:459:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘calloc(33, 1)’ where non-null expected
xen-4.19.2/tools/libs/light/libxl_cpuid.c:413:5: enter_function: entry to ‘libxl_cpuid_parse_config_xend’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:423:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:426:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:428:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:436:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:436:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:440:13: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:440:13: call_function: calling ‘cpuid_find_match’ from ‘libxl_cpuid_parse_config_xend’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:440:13: return_function: returning to ‘libxl_cpuid_parse_config_xend’ from ‘cpuid_find_match’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:441:28: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:442:12: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:442:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:447:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:452:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:455:13: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:455:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:458:32: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:458:32: acquire_memory: this call could return NULL
xen-4.19.2/tools/libs/light/libxl_cpuid.c:459:9: danger: argument 1 (‘calloc(33, 1)’) from [(28)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/27) could be NULL where non-null expected
#argument 1 of ‘__builtin_strncpy’ must be non-null
#  457|           }
#  458|           entry->policy[value] = calloc(32 + 1, 1);
#  459|->         strncpy(entry->policy[value], str, 32);
#  460|           entry->policy[value][32] = 0;
#  461|           if (*endptr == 0) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def529]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:669:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:633:5: enter_function: entry to ‘libxl__cpuid_policy_list_parse_json’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:668:13: call_function: inlined call to ‘libxl__json_object_get_array’ from ‘libxl__cpuid_policy_list_parse_json’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:669:10: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:669:10: danger: dereference of NULL ‘<unknown>’
#  667|   
#  668|       array = libxl__json_object_get_array(co);
#  669|->     if (!array->count)
#  670|           goto cpuid_empty;
#  671|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def530]
xen-4.19.2/tools/libs/light/libxl_cpuid.c:743:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
xen-4.19.2/tools/libs/light/libxl_cpuid.c:633:5: enter_function: entry to ‘libxl__cpuid_policy_list_parse_json’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:713:8: branch_false: following ‘false’ branch (when ‘cpuid_only == 0’)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:716:10: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:721:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:723:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:729:17: branch_true: following ‘true’ branch (when ‘i < size’)...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:732:13: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:732:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:735:14: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:739:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:740:24: call_function: inlined call to ‘libxl__json_object_get_integer’ from ‘libxl__cpuid_policy_list_parse_json’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:742:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_cpuid.c:743:13: call_function: inlined call to ‘libxl__json_object_get_string’ from ‘libxl__cpuid_policy_list_parse_json’
xen-4.19.2/tools/libs/light/libxl_cpuid.c:743:13: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_cpuid.c:743:13: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#argument 1 of ‘__builtin_strlen’ must be non-null
#  741|           r = libxl__json_map_get("policy", t, JSON_STRING);
#  742|           if (!r) return ERROR_FAIL;
#  743|->         if (strlen(libxl__json_object_get_string(r)) !=
#  744|               ARRAY_SIZE(msr[i].policy) - 1)
#  745|               return ERROR_FAIL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def531]
xen-4.19.2/tools/libs/light/libxl_device.c:2143:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dir’
xen-4.19.2/tools/libs/light/libxl_device.c:2126:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_device.c:2133:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_device.c:2136:32: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_device.c:2139:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_device.c:2140:9: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_device.c:2142:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_device.c:2143:22: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_device.c:2143:22: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_device.c:2143:43: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_device.c:2143:43: danger: dereference of NULL ‘dir’
# 2141|   
# 2142|           if (dt->from_xenstore) {
# 2143|->             int nr = dt->get_num ? *num : atoi(*dir);
# 2144|               char *device_path = dt->get_num ? path :
# 2145|                   GCSPRINTF("%s/%d", path, nr);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def532]
xen-4.19.2/tools/libs/light/libxl_dm.c:1151:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘**dmss.build_state.dm_monitor_fd’
xen-4.19.2/tools/libs/light/libxl_dm.c:2872:6: enter_function: entry to ‘libxl__spawn_local_dm’
xen-4.19.2/tools/libs/light/libxl_dm.c:2898:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:2902:10: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:2902:10: call_function: calling ‘libxl__domain_device_model’ from ‘libxl__spawn_local_dm’
xen-4.19.2/tools/libs/light/libxl_dm.c:2902:10: return_function: returning to ‘libxl__spawn_local_dm’ from ‘libxl__domain_device_model’
xen-4.19.2/tools/libs/light/libxl_dm.c:2903:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:2907:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:2907:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:2913:10: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:2914:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:2917:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:2917:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:2919:9: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:2917:9: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:2923:14: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:2923:14: call_function: calling ‘libxl__pre_open_qmp_socket’ from ‘libxl__spawn_local_dm’
# 1149|       if (fd < 0) {
# 1150|           LOGED(ERROR, domid, "socket() failed");
# 1151|->         return ERROR_FAIL;
# 1152|       }
# 1153|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def533]
xen-4.19.2/tools/libs/light/libxl_dm.c:3132:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
xen-4.19.2/tools/libs/light/libxl_dm.c:3104:13: enter_function: entry to ‘device_model_qmp_cb’
xen-4.19.2/tools/libs/light/libxl_dm.c:3116:8: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/tools/libs/light/libxl_dm.c:3119:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:3120:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:3127:14: call_function: inlined call to ‘libxl__json_object_get_string’ from ‘device_model_qmp_cb’
xen-4.19.2/tools/libs/light/libxl_dm.c:3128:10: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:3132:9: danger: argument 1 (‘<unknown>’) NULL where non-null expected
# 3130|       else
# 3131|           expected_state = "paused";
# 3132|->     if (strcmp(status, expected_state)) {
# 3133|           LOGD(ERROR, ev->domid, "Unexpected QEMU status: %s", status);
# 3134|           rc = ERROR_NOT_READY;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def534]
xen-4.19.2/tools/libs/light/libxl_dm.c:3355:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/libs/light/libxl_dm.c:3346:8: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/tools/libs/light/libxl_dm.c:3348:41: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:3349:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_dm.c:3355:33: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_dm.c:3355:33: danger: dereference of NULL ‘libxl__dm_vnc(((libxl__dm_spawn_state *)((char *)qmp + 608))[16709007313142709].guest_config)’
# 3353|       rc = libxl__xs_printf(gc, XBT_NULL,
# 3354|                             GCSPRINTF("%s/console/vnc-pass", dompath),
# 3355|->                           "%s", vnc->passwd);
# 3356|   
# 3357|   out:

Error: GCC_ANALYZER_WARNING (CWE-415): [#def535]
xen-4.19.2/tools/libs/light/libxl_exec.c:212:9: warning[-Wanalyzer-double-free]: double-‘free’ of ‘xs_read(xs_open(0), 0, path, & len)’
xen-4.19.2/tools/libs/light/libxl_exec.c:182:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_exec.c:187:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_exec.c:191:5: branch_true: following ‘true’ branch (when ‘spawning’ is NULL)...
 branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_exec.c:193:12: branch_false: following ‘false’ branch (when ‘rc <= 0’)...
xen-4.19.2/tools/libs/light/libxl_exec.c:193:12: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_exec.c:193:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_exec.c:212:9: release_memory: first ‘free’ here
xen-4.19.2/tools/libs/light/libxl_exec.c:213:9: branch_true: following ‘true’ branch (when ‘__i != 16’)...
xen-4.19.2/tools/libs/light/libxl_exec.c:213:9: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_exec.c:216:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_exec.c:217:17: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_exec.c:217:16: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_exec.c:218:21: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_exec.c:219:20: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_exec.c:222:21: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_exec.c:212:9: danger: second ‘free’ here; first ‘free’ was at [(9)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/8)
#  210|           return rc;
#  211|   again:
#  212|->         free(p);
#  213|           FD_ZERO(&rfds);
#  214|           FD_SET(xs_fileno(xsh), &rfds);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def536]
xen-4.19.2/tools/libs/light/libxl_save_helper.c:159:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘r’
xen-4.19.2/tools/libs/light/libxl_save_helper.c:151:13: acquire_resource: opened here
xen-4.19.2/tools/libs/light/libxl_save_helper.c:152:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_save_helper.c:158:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_save_helper.c:159:1: danger: ‘r’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  157|   
#  158|       errno = esave;
#  159|-> }
#  160|   
#  161|   static void setup_signals(void (*handler)(int))

Error: GCC_ANALYZER_WARNING (CWE-775): [#def537]
xen-4.19.2/tools/libs/light/libxl_utils.c:347:10: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(filename, "r")’
xen-4.19.2/tools/libs/light/libxl_utils.c:335:9: acquire_resource: opened here
xen-4.19.2/tools/libs/light/libxl_utils.c:336:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:342:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:342:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:347:10: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:347:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:353:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:353:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:359:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:361:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:363:12: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
xen-4.19.2/tools/libs/light/libxl_utils.c:365:14: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:366:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:367:17: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:367:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:369:22: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:347:10: danger: ‘fopen(filename, "r")’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  345|       }
#  346|   
#  347|->     if (!S_ISREG(stab.st_mode)) {
#  348|           LOGE(ERROR, "%s is not a plain file", filename);
#  349|           errno = ENOTTY;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def538]
xen-4.19.2/tools/libs/light/libxl_utils.c:347:10: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(filename, "r")’
xen-4.19.2/tools/libs/light/libxl_utils.c:335:9: acquire_memory: allocated here
xen-4.19.2/tools/libs/light/libxl_utils.c:336:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:342:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:342:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:347:10: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:347:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:353:9: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:353:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:359:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:361:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:363:12: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
xen-4.19.2/tools/libs/light/libxl_utils.c:365:14: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:366:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:367:17: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:367:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:369:22: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:347:10: danger: ‘fopen(filename, "r")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  345|       }
#  346|   
#  347|->     if (!S_ISREG(stab.st_mode)) {
#  348|           LOGE(ERROR, "%s is not a plain file", filename);
#  349|           errno = ENOTTY;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def539]
xen-4.19.2/tools/libs/light/libxl_utils.c:1083:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmsg’
xen-4.19.2/tools/libs/light/libxl_utils.c:1082:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:1083:5: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1083:5: danger: dereference of NULL ‘cmsg’
# 1081|       /* attach open fd */
# 1082|       cmsg = CMSG_FIRSTHDR(&msg);
# 1083|->     cmsg->cmsg_level = SOL_SOCKET;
# 1084|       cmsg->cmsg_type = SCM_RIGHTS;
# 1085|       cmsg->cmsg_len = CMSG_LEN(spaceneeded);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def540]
xen-4.19.2/tools/libs/light/libxl_utils.c:1144:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmsg’
xen-4.19.2/tools/libs/light/libxl_utils.c:1139:12: branch_false: following ‘false’ branch (when ‘r != 0’)...
xen-4.19.2/tools/libs/light/libxl_utils.c:1143:16: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1143:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:1144:13: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1144:13: danger: dereference of NULL ‘cmsg’
# 1142|           }
# 1143|           cmsg = CMSG_FIRSTHDR(&msg);
# 1144|->         if (cmsg->cmsg_len <= CMSG_LEN(0)) {
# 1145|               LOG(ERROR,"recvmsg got no control msg"
# 1146|                   " when expecting fds (%s)", what);

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def541]
xen-4.19.2/tools/libs/light/libxl_utils.c:1170:17: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘fd’
xen-4.19.2/tools/libs/light/libxl_utils.c:1139:12: branch_false: following ‘false’ branch (when ‘r != 0’)...
xen-4.19.2/tools/libs/light/libxl_utils.c:1143:16: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1143:16: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:1143:9: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1144:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:1149:13: branch_false: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1149:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:1167:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:1169:17: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1170:17: release_resource: first ‘close’ here
xen-4.19.2/tools/libs/light/libxl_utils.c:1167:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/light/libxl_utils.c:1169:17: branch_true: ...to here
xen-4.19.2/tools/libs/light/libxl_utils.c:1170:17: danger: second ‘close’ here; first ‘close’ was at [(11)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/10)
# 1168|                    i++, i+=sizeof(fd)) {
# 1169|                   memcpy(&fd, p, sizeof(fd));
# 1170|->                 close(fd);
# 1171|               }
# 1172|               return ERROR_FAIL;

Error: CPPCHECK_WARNING (CWE-401): [#def542]
xen-4.19.2/tools/libs/light/test_common.c:41: error[memleakOnRealloc]: Common realloc mistake: 'poll_fds' nulled but not freed upon failure
#   39|   
#   40|           assert(poll_nfds > poll_nfds_allocd);
#   41|->         poll_fds = realloc(poll_fds, poll_nfds * sizeof(poll_fds[0]));
#   42|           assert(poll_fds);
#   43|           poll_nfds_allocd = poll_nfds;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def543]
xen-4.19.2/tools/libs/stat/xenstat_linux.c:78:22: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘opendir("/sys/class/net")’ where non-null expected
xen-4.19.2/tools/libs/stat/xenstat_linux.c:77:13: acquire_memory: this call could return NULL
xen-4.19.2/tools/libs/stat/xenstat_linux.c:78:22: danger: argument 1 (‘opendir("/sys/class/net")’) from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
#   76|   
#   77|   	d = opendir("/sys/class/net");
#   78|-> 	while ((de = readdir(d)) != NULL) {
#   79|   		if ((strlen(de->d_name) > 0) && (de->d_name[0] != '.')
#   80|   			&& (strstr(de->d_name, excludeName) == NULL)) {

Error: CPPCHECK_WARNING (CWE-401): [#def544]
xen-4.19.2/tools/libs/stat/xenstat_linux.c:169: error[memleakOnRealloc]: Common realloc mistake: 'tmp' nulled but not freed upon failure
#  167|   				/* Col variable contains current id of non-empty match */
#  168|   				col++;
#  169|-> 				tmp = (char *)realloc(tmp, (matches[i].rm_eo - 
#  170|   							matches[i].rm_so + 1) * sizeof(char));
#  171|   				for (x = matches[i].rm_so; x < matches[i].rm_eo; x++)

Error: GCC_ANALYZER_WARNING (CWE-688): [#def545]
xen-4.19.2/tools/libs/stat/xenstat_linux.c:231:54: warning[-Wanalyzer-null-argument]: use of NULL ‘tmp’ where non-null expected
xen-4.19.2/tools/libs/stat/xenstat_linux.c:269:5: enter_function: entry to ‘xenstat_collect_networks’
xen-4.19.2/tools/libs/stat/xenstat_linux.c:276:34: call_function: inlined call to ‘get_priv_data’ from ‘xenstat_collect_networks’
xen-4.19.2/tools/libs/stat/xenstat_linux.c:284:13: branch_true: ...to here
xen-4.19.2/tools/libs/stat/xenstat_linux.c:284:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/stat/xenstat_linux.c:308:9: branch_false: ...to here
xen-4.19.2/tools/libs/stat/xenstat_linux.c:315:16: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/stat/xenstat_linux.c:320:17: branch_true: ...to here
xen-4.19.2/tools/libs/stat/xenstat_linux.c:320:17: call_function: calling ‘parseNetDevLine’ from ‘xenstat_collect_networks’
#  229|   				}
#  230|   				else if (iface != NULL) {
#  231|-> 					char *tmp2 = strpbrk(tmp, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789");
#  232|   					if (tmp2 != NULL)
#  233|   						strcpy(iface, tmp2);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def546]
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:220:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:418:6: enter_function: entry to ‘read_attributes_qdisk’
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:427:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:430:29: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:431:29: branch_true: ...to here
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:431:28: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:432:33: branch_true: ...to here
xen-4.19.2/tools/libs/stat/xenstat_qmp.c:432:33: call_function: calling ‘read_attributes_qdisk_dom’ from ‘read_attributes_qdisk’
#  218|   
#  219|   	/* Array of devices */
#  220|-> 	for (i=0; i<YAJL_GET_ARRAY(ret_obj)->len; i++) {
#  221|   		memset(&vbd, 0, sizeof(xenstat_vbd));
#  222|   		qmp_devname = NULL;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def547]
xen-4.19.2/tools/libs/store/xs.c:304:13: warning[-Wanalyzer-null-argument]: use of NULL ‘connect_to’ where non-null expected
xen-4.19.2/tools/libs/store/xs.c:1387:5: enter_function: entry to ‘xs_suspend_evtchn_port’
xen-4.19.2/tools/libs/store/xs.c:1395:10: call_function: inlined call to ‘xs_daemon_open’ from ‘xs_suspend_evtchn_port’
#  302|   	xentoolcore__register_active_handle(&h->tc_ah);
#  303|   
#  304|-> 	if (stat(connect_to, &buf) != 0)
#  305|   		goto err;
#  306|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def548]
xen-4.19.2/tools/libs/store/xs.c:312:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(connect_to, 524290)’
xen-4.19.2/tools/libs/store/xs.c:1387:5: enter_function: entry to ‘xs_suspend_evtchn_port’
xen-4.19.2/tools/libs/store/xs.c:1395:10: call_function: inlined call to ‘xs_daemon_open’ from ‘xs_suspend_evtchn_port’
#  310|   		h->fd = get_socket(connect_to);
#  311|   	else
#  312|-> 		h->fd = get_dev(connect_to);
#  313|   
#  314|   	if (h->fd == -1)

Error: CPPCHECK_WARNING (CWE-401): [#def549]
xen-4.19.2/tools/libs/store/xs.c:826: error[memleakOnRealloc]: Common realloc mistake: 'strings' nulled but not freed upon failure
#  824|   
#  825|   		result_len -= strlen(result) + 1;
#  826|-> 		strings = realloc(strings, off + result_len);
#  827|   		memcpy(strings + off, result + strlen(result) + 1, result_len);
#  828|   		free(result);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def550]
xen-4.19.2/tools/libs/toolcore/handlereg.c:87:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘r’
xen-4.19.2/tools/libs/toolcore/handlereg.c:77:8: branch_false: following ‘false’ branch (when ‘fd >= 0’)...
xen-4.19.2/tools/libs/toolcore/handlereg.c:81:14: branch_false: ...to here
xen-4.19.2/tools/libs/toolcore/handlereg.c:82:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/toolcore/handlereg.c:84:9: branch_false: ...to here
xen-4.19.2/tools/libs/toolcore/handlereg.c:84:9: acquire_resource: opened here
xen-4.19.2/tools/libs/toolcore/handlereg.c:85:8: branch_false: following ‘false’ branch (when ‘r >= 0’)...
xen-4.19.2/tools/libs/toolcore/handlereg.c:87:5: branch_false: ...to here
xen-4.19.2/tools/libs/toolcore/handlereg.c:87:5: danger: ‘r’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   85|       if (r < 0) goto err;
#   86|   
#   87|->     close(nullfd);
#   88|       return 0;
#   89|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def551]
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1721:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1707:21: enter_function: entry to ‘xlu__cfg_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1711:31: call_function: inlined call to ‘xlu__cfg_yyalloc’ from ‘xlu__cfg_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1712:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1715:9: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1721:12: danger: ‘malloc(64)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
# 1719|   	 */
# 1720|   	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner );
# 1721|-> 	if ( ! b->yy_ch_buf )
# 1722|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );
# 1723|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def552]
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1721:12: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__cfg_yyalloc(64, yyscanner)’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1707:21: enter_function: entry to ‘xlu__cfg_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1711:31: call_function: calling ‘xlu__cfg_yyalloc’ from ‘xlu__cfg_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1711:31: return_function: returning to ‘xlu__cfg_yy_create_buffer’ from ‘xlu__cfg_yyalloc’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1712:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1715:9: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1721:12: danger: ‘xlu__cfg_yyalloc(64, yyscanner)’ leaks here; was allocated at [(4)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/3)
# 1719|   	 */
# 1720|   	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner );
# 1721|-> 	if ( ! b->yy_ch_buf )
# 1722|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );
# 1723|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def553]
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1763:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1354:12: enter_function: entry to ‘yy_get_next_buffer’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1362:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1366:14: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1366:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1388:33: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1452:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1454:40: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1454:20: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1457:25: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1457:25: call_function: calling ‘xlu__cfg_yyrestart’ from ‘yy_get_next_buffer’
# 1761|   	yy_flush_buffer( b , yyscanner);
# 1762|   
# 1763|-> 	b->yy_input_file = file;
# 1764|   	b->yy_fill_buffer = 1;
# 1765|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def554]
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1981:32: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1965:17: enter_function: entry to ‘xlu__cfg_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1974:24: call_function: inlined call to ‘xlu__cfg_yyalloc’ from ‘xlu__cfg_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1975:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1983:13: call_function: calling ‘xlu__cfg_yy_scan_buffer’ from ‘xlu__cfg_yy_scan_bytes’
# 1979|   		buf[i] = yybytes[i];
# 1980|   
# 1981|-> 	buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 1982|   
# 1983|   	b = yy_scan_buffer( buf, n , yyscanner);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def555]
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1981:32: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__cfg_yyalloc(n,  yyscanner)’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1965:17: enter_function: entry to ‘xlu__cfg_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1974:24: call_function: calling ‘xlu__cfg_yyalloc’ from ‘xlu__cfg_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1974:24: return_function: returning to ‘xlu__cfg_yy_scan_bytes’ from ‘xlu__cfg_yyalloc’
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1975:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_l.c:1983:13: call_function: calling ‘xlu__cfg_yy_scan_buffer’ from ‘xlu__cfg_yy_scan_bytes’
# 1979|   		buf[i] = yybytes[i];
# 1980|   
# 1981|-> 	buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 1982|   
# 1983|   	b = yy_scan_buffer( buf, n , yyscanner);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def556]
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1275:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyss’
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1231:6: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1237:43: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1263:10: branch_false: following ‘false’ branch (when ‘yystacksize <= 9999’)...
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1265:7: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1273:12: branch_false: following ‘false’ branch (when ‘yyptr’ is non-NULL)...
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1275:9: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1275:9: danger: use of uninitialized value ‘yyss’ here
# 1273|           if (! yyptr)
# 1274|             goto yyexhaustedlab;
# 1275|->         YYSTACK_RELOCATE (yyss_alloc, yyss);
# 1276|           YYSTACK_RELOCATE (yyvs_alloc, yyvs);
# 1277|           YYSTACK_RELOCATE (yyls_alloc, yyls);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def557]
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1394:3: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.string’
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1231:6: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1298:6: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1298:6: branch_false: following ‘false’ branch (when ‘yystate != 3’)...
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1301:3: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1313:6: branch_true: following ‘true’ branch (when ‘yyn == -18’)...
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1314:5: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1374:6: branch_false: following ‘false’ branch (when ‘yyn != 0’)...
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1376:3: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_cfg_y.c:1394:3: danger: use of uninitialized value ‘*<unknown>.string’ here
# 1392|        unconditionally makes the parser a bit smaller, and it avoids a
# 1393|        GCC warning that YYVAL may be used uninitialized.  */
# 1394|->   yyval = yyvsp[1-yylen];
# 1395|   
# 1396|     /* Default location. */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def558]
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2389:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2375:21: enter_function: entry to ‘xlu__disk_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2379:24: call_function: inlined call to ‘xlu__disk_yyalloc’ from ‘xlu__disk_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2380:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2383:2: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2389:12: danger: ‘malloc(64)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
# 2387|   	 * we need to put in 2 end-of-buffer characters.
# 2388|   	 */
# 2389|-> 	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner );
# 2390|   	if ( ! b->yy_ch_buf )
# 2391|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );

Error: GCC_ANALYZER_WARNING (CWE-401): [#def559]
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2389:12: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__disk_yyalloc(64, yyscanner)’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2375:21: enter_function: entry to ‘xlu__disk_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2379:24: call_function: calling ‘xlu__disk_yyalloc’ from ‘xlu__disk_yy_create_buffer’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2379:24: return_function: returning to ‘xlu__disk_yy_create_buffer’ from ‘xlu__disk_yyalloc’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2380:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2383:2: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2389:12: danger: ‘xlu__disk_yyalloc(64, yyscanner)’ leaks here; was allocated at [(4)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/3)
# 2387|   	 * we need to put in 2 end-of-buffer characters.
# 2388|   	 */
# 2389|-> 	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner );
# 2390|   	if ( ! b->yy_ch_buf )
# 2391|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );

Error: GCC_ANALYZER_WARNING (CWE-476): [#def560]
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2431:2: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘b’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2064:12: enter_function: entry to ‘yy_get_next_buffer’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2072:5: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2076:7: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2076:5: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2098:33: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2114:11: branch_false: following ‘false’ branch (when ‘num_to_read > 0’)...
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2122:6: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2132:5: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2134:40: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2134:20: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2137:25: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2137:25: call_function: calling ‘xlu__disk_yyrestart’ from ‘yy_get_next_buffer’
# 2429|   
# 2430|   	yy_flush_buffer( b , yyscanner);
# 2431|-> 
# 2432|   	b->yy_input_file = file;
# 2433|   	b->yy_fill_buffer = 1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def561]
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2649:25: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(n)’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2633:17: enter_function: entry to ‘xlu__disk_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2642:24: call_function: inlined call to ‘xlu__disk_yyalloc’ from ‘xlu__disk_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2643:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2651:6: call_function: calling ‘xlu__disk_yy_scan_buffer’ from ‘xlu__disk_yy_scan_bytes’
# 2647|   	for ( i = 0; i < _yybytes_len; ++i )
# 2648|   		buf[i] = yybytes[i];
# 2649|-> 
# 2650|   	buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 2651|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def562]
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2649:25: warning[-Wanalyzer-malloc-leak]: leak of ‘xlu__disk_yyalloc(n,  yyscanner)’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2633:17: enter_function: entry to ‘xlu__disk_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2642:24: call_function: calling ‘xlu__disk_yyalloc’ from ‘xlu__disk_yy_scan_bytes’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2642:24: return_function: returning to ‘xlu__disk_yy_scan_bytes’ from ‘xlu__disk_yyalloc’
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2643:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_disk_l.c:2651:6: call_function: calling ‘xlu__disk_yy_scan_buffer’ from ‘xlu__disk_yy_scan_bytes’
# 2647|   	for ( i = 0; i < _yybytes_len; ++i )
# 2648|   		buf[i] = yybytes[i];
# 2649|-> 
# 2650|   	buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
# 2651|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def563]
xen-4.19.2/tools/libs/util/libxlu_pci.c:211:1: warning[-Wanalyzer-malloc-leak]: leak of ‘key’
xen-4.19.2/tools/libs/util/libxlu_pci.c:142:5: enter_function: entry to ‘xlu_pci_parse_spec_string’
xen-4.19.2/tools/libs/util/libxlu_pci.c:152:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:169:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_pci.c:172:15: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:172:15: call_function: calling ‘parse_key_val’ from ‘xlu_pci_parse_spec_string’
xen-4.19.2/tools/libs/util/libxlu_pci.c:172:15: return_function: returning to ‘xlu_pci_parse_spec_string’ from ‘parse_key_val’
xen-4.19.2/tools/libs/util/libxlu_pci.c:173:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_pci.c:176:14: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:176:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:179:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:179:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:181:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:181:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:183:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:183:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:185:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:185:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:187:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:187:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:189:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:191:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:196:13: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:196:13: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_pci.c:211:1: danger: ‘key’ leaks here; was allocated at [(10)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/9)
#  209|   
#  210|       return 0;
#  211|-> }
#  212|   
#  213|   int xlu_rdm_parse(XLU_Config *cfg, libxl_rdm_reserve *rdm, const char *str)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def564]
xen-4.19.2/tools/libs/util/libxlu_pci.c:211:1: warning[-Wanalyzer-malloc-leak]: leak of ‘val’
xen-4.19.2/tools/libs/util/libxlu_pci.c:142:5: enter_function: entry to ‘xlu_pci_parse_spec_string’
xen-4.19.2/tools/libs/util/libxlu_pci.c:152:8: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:169:12: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_pci.c:172:15: branch_true: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:172:15: call_function: calling ‘parse_key_val’ from ‘xlu_pci_parse_spec_string’
xen-4.19.2/tools/libs/util/libxlu_pci.c:172:15: return_function: returning to ‘xlu_pci_parse_spec_string’ from ‘parse_key_val’
xen-4.19.2/tools/libs/util/libxlu_pci.c:173:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/libs/util/libxlu_pci.c:176:14: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:176:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:179:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:179:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:181:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:181:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:183:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:183:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:185:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:185:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:187:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:187:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:189:21: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:191:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/libs/util/libxlu_pci.c:196:13: branch_false: ...to here
xen-4.19.2/tools/libs/util/libxlu_pci.c:196:13: branch_true: following ‘true’ branch...
xen-4.19.2/tools/libs/util/libxlu_pci.c:211:1: danger: ‘val’ leaks here; was allocated at [(12)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/11)
#  209|   
#  210|       return 0;
#  211|-> }
#  212|   
#  213|   int xlu_rdm_parse(XLU_Config *cfg, libxl_rdm_reserve *rdm, const char *str)

Error: CPPCHECK_WARNING (CWE-476): [#def565]
xen-4.19.2/tools/misc/xen-access.c:206: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: xenaccess
#  204|       /* Allocate memory */
#  205|       xenaccess = malloc(sizeof(xenaccess_t));
#  206|->     memset(xenaccess, 0, sizeof(xenaccess_t));
#  207|   
#  208|       /* Open connection to xen */

Error: CPPCHECK_WARNING (CWE-476): [#def566]
xen-4.19.2/tools/misc/xen-access.c:209: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: xenaccess
#  207|   
#  208|       /* Open connection to xen */
#  209|->     xenaccess->xc_handle = xch;
#  210|   
#  211|       /* Set domain id */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def567]
xen-4.19.2/tools/misc/xen-access.c:209:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xenaccess’
xen-4.19.2/tools/misc/xen-access.c:198:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xen-access.c:201:5: branch_false: ...to here
xen-4.19.2/tools/misc/xen-access.c:205:17: acquire_memory: this call could return NULL
xen-4.19.2/tools/misc/xen-access.c:209:5: danger: ‘xenaccess’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  207|   
#  208|       /* Open connection to xen */
#  209|->     xenaccess->xc_handle = xch;
#  210|   
#  211|       /* Set domain id */

Error: CPPCHECK_WARNING (CWE-476): [#def568]
xen-4.19.2/tools/misc/xen-access.c:212: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: xenaccess
#  210|   
#  211|       /* Set domain id */
#  212|->     xenaccess->vm_event.domain_id = domain_id;
#  213|   
#  214|       /* Enable mem_access */

Error: CPPCHECK_WARNING (CWE-476): [#def569]
xen-4.19.2/tools/misc/xen-access.c:215: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: xenaccess
#  213|   
#  214|       /* Enable mem_access */
#  215|->     xenaccess->vm_event.ring_page =
#  216|               xc_monitor_enable(xenaccess->xc_handle,
#  217|                                 xenaccess->vm_event.domain_id,

Error: CPPCHECK_WARNING (CWE-476): [#def570]
xen-4.19.2/tools/misc/xen-access.c:216: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: xenaccess
#  214|       /* Enable mem_access */
#  215|       xenaccess->vm_event.ring_page =
#  216|->             xc_monitor_enable(xenaccess->xc_handle,
#  217|                                 xenaccess->vm_event.domain_id,
#  218|                                 &xenaccess->vm_event.evtchn_port);

Error: CPPCHECK_WARNING (CWE-476): [#def571]
xen-4.19.2/tools/misc/xen-access.c:217: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: xenaccess
#  215|       xenaccess->vm_event.ring_page =
#  216|               xc_monitor_enable(xenaccess->xc_handle,
#  217|->                               xenaccess->vm_event.domain_id,
#  218|                                 &xenaccess->vm_event.evtchn_port);
#  219|       if ( xenaccess->vm_event.ring_page == NULL )

Error: CPPCHECK_WARNING (CWE-476): [#def572]
xen-4.19.2/tools/misc/xen-access.c:219: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: xenaccess
#  217|                                 xenaccess->vm_event.domain_id,
#  218|                                 &xenaccess->vm_event.evtchn_port);
#  219|->     if ( xenaccess->vm_event.ring_page == NULL )
#  220|       {
#  221|           switch ( errno ) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def573]
xen-4.19.2/tools/misc/xencov.c:83:1: warning[-Wanalyzer-file-leak]: leak of FILE ‘f’
xen-4.19.2/tools/misc/xencov.c:44:13: enter_function: entry to ‘cov_read’
xen-4.19.2/tools/misc/xencov.c:51:9: call_function: calling ‘cov_sysctl’ from ‘cov_read’
xen-4.19.2/tools/misc/xencov.c:51:9: return_function: returning to ‘cov_read’ from ‘cov_sysctl’
xen-4.19.2/tools/misc/xencov.c:51:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:53:5: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:56:8: branch_false: following ‘false’ branch (when ‘total_len <= 8388608’)...
xen-4.19.2/tools/misc/xencov.c:59:9: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:59:9: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:60:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:63:5: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:64:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:68:10: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:68:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/misc/xencov.c:71:13: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:71:13: acquire_resource: opened here
xen-4.19.2/tools/misc/xencov.c:73:8: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
xen-4.19.2/tools/misc/xencov.c:76:9: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:76:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:79:9: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:79:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:82:5: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:83:1: danger: ‘f’ leaks here; was opened at [(19)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/18)
#   81|   
#   82|       xc_hypercall_buffer_free(xch, p);
#   83|-> }
#   84|   
#   85|   static void cov_reset(void)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def574]
xen-4.19.2/tools/misc/xencov.c:83:1: warning[-Wanalyzer-malloc-leak]: leak of ‘f’
xen-4.19.2/tools/misc/xencov.c:44:13: enter_function: entry to ‘cov_read’
xen-4.19.2/tools/misc/xencov.c:51:9: call_function: calling ‘cov_sysctl’ from ‘cov_read’
xen-4.19.2/tools/misc/xencov.c:51:9: return_function: returning to ‘cov_read’ from ‘cov_sysctl’
xen-4.19.2/tools/misc/xencov.c:51:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:53:5: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:56:8: branch_false: following ‘false’ branch (when ‘total_len <= 8388608’)...
xen-4.19.2/tools/misc/xencov.c:59:9: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:59:9: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:60:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:63:5: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:64:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:68:10: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:68:8: branch_false: following ‘false’ branch (when the strings are non-equal)...
xen-4.19.2/tools/misc/xencov.c:71:13: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:71:13: acquire_memory: allocated here
xen-4.19.2/tools/misc/xencov.c:73:8: branch_false: following ‘false’ branch (when ‘f’ is non-NULL)...
xen-4.19.2/tools/misc/xencov.c:76:9: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:76:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:79:9: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:79:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xencov.c:82:5: branch_false: ...to here
xen-4.19.2/tools/misc/xencov.c:83:1: danger: ‘f’ leaks here; was allocated at [(19)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/18)
#   81|   
#   82|       xc_hypercall_buffer_free(xch, p);
#   83|-> }
#   84|   
#   85|   static void cov_reset(void)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def575]
xen-4.19.2/tools/misc/xenpm.c:150:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cxstatinfo.triggers’
xen-4.19.2/tools/misc/xenpm.c:264:6: enter_function: entry to ‘cxstat_func’
xen-4.19.2/tools/misc/xenpm.c:277:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:278:18: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:278:18: call_function: calling ‘show_cxstat_by_cpuid’ from ‘cxstat_func’
#  148|       for ( i = 0; i < cxstat->nr; i++ )
#  149|       {
#  150|->         printf("C%-20d: transition [%20"PRIu64"]\n",
#  151|                  i, cxstat->triggers[i]);
#  152|           printf("                       residency  [%20"PRIu64" ms]\n",

Error: GCC_ANALYZER_WARNING (CWE-476): [#def576]
xen-4.19.2/tools/misc/xenpm.c:156:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cxstatinfo.triggers’
xen-4.19.2/tools/misc/xenpm.c:264:6: enter_function: entry to ‘cxstat_func’
xen-4.19.2/tools/misc/xenpm.c:277:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:278:18: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:278:18: call_function: calling ‘show_cxstat_by_cpuid’ from ‘cxstat_func’
#  154|       }
#  155|       for ( i = 0; i < MAX_PKG_RESIDENCIES && i < cxstat->nr_pc; ++i )
#  156|->         if ( cxstat->pc[i] )
#  157|              printf("pc%d                  : [%20"PRIu64" ms]\n", i + 1,
#  158|                     cxstat->pc[i] / 1000000UL);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def577]
xen-4.19.2/tools/misc/xenpm.c:160:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cxstatinfo.triggers’
xen-4.19.2/tools/misc/xenpm.c:264:6: enter_function: entry to ‘cxstat_func’
xen-4.19.2/tools/misc/xenpm.c:277:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:278:18: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:278:18: call_function: calling ‘show_cxstat_by_cpuid’ from ‘cxstat_func’
#  158|                     cxstat->pc[i] / 1000000UL);
#  159|       for ( i = 0; i < MAX_CORE_RESIDENCIES && i < cxstat->nr_cc; ++i )
#  160|->         if ( cxstat->cc[i] )
#  161|              printf("cc%d                  : [%20"PRIu64" ms]\n", i + 1,
#  162|                     cxstat->cc[i] / 1000000UL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def578]
xen-4.19.2/tools/misc/xenpm.c:186:10: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.cc’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:478:19: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:478:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:477:38: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  184|       cxstat->pc = calloc(MAX_PKG_RESIDENCIES, sizeof(*cxstat->pc));
#  185|       cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc));
#  186|->     if ( !cxstat->triggers || !cxstat->residencies ||
#  187|            !cxstat->pc || !cxstat->cc )
#  188|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def579]
xen-4.19.2/tools/misc/xenpm.c:186:10: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.pc’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:478:19: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:478:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:477:38: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  184|       cxstat->pc = calloc(MAX_PKG_RESIDENCIES, sizeof(*cxstat->pc));
#  185|       cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc));
#  186|->     if ( !cxstat->triggers || !cxstat->residencies ||
#  187|            !cxstat->pc || !cxstat->cc )
#  188|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def580]
xen-4.19.2/tools/misc/xenpm.c:186:10: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.residencies’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:478:19: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:478:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:477:38: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  184|       cxstat->pc = calloc(MAX_PKG_RESIDENCIES, sizeof(*cxstat->pc));
#  185|       cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc));
#  186|->     if ( !cxstat->triggers || !cxstat->residencies ||
#  187|            !cxstat->pc || !cxstat->cc )
#  188|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def581]
xen-4.19.2/tools/misc/xenpm.c:186:10: warning[-Wanalyzer-malloc-leak]: leak of ‘*cxstat.triggers’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:478:19: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:478:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:477:38: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  184|       cxstat->pc = calloc(MAX_PKG_RESIDENCIES, sizeof(*cxstat->pc));
#  185|       cxstat->cc = calloc(MAX_CORE_RESIDENCIES, sizeof(*cxstat->cc));
#  186|->     if ( !cxstat->triggers || !cxstat->residencies ||
#  187|            !cxstat->pc || !cxstat->cc )
#  188|       {

Error: GCC_ANALYZER_WARNING (CWE-479): [#def582]
xen-4.19.2/tools/misc/xenpm.c:189:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  187|            !cxstat->pc || !cxstat->cc )
#  188|       {
#  189|->         free(cxstat->cc);
#  190|           free(cxstat->pc);
#  191|           free(cxstat->residencies);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def583]
xen-4.19.2/tools/misc/xenpm.c:190:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  188|       {
#  189|           free(cxstat->cc);
#  190|->         free(cxstat->pc);
#  191|           free(cxstat->residencies);
#  192|           free(cxstat->triggers);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def584]
xen-4.19.2/tools/misc/xenpm.c:191:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  189|           free(cxstat->cc);
#  190|           free(cxstat->pc);
#  191|->         free(cxstat->residencies);
#  192|           free(cxstat->triggers);
#  193|           return -ENOMEM;

Error: GCC_ANALYZER_WARNING (CWE-479): [#def585]
xen-4.19.2/tools/misc/xenpm.c:192:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  190|           free(cxstat->pc);
#  191|           free(cxstat->residencies);
#  192|->         free(cxstat->triggers);
#  193|           return -ENOMEM;
#  194|       }

Error: GCC_ANALYZER_WARNING (CWE-479): [#def586]
xen-4.19.2/tools/misc/xenpm.c:204:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  202|       {
#  203|           ret = -errno;
#  204|->         free(cxstat->triggers);
#  205|           free(cxstat->residencies);
#  206|           free(cxstat->pc);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def587]
xen-4.19.2/tools/misc/xenpm.c:205:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  203|           ret = -errno;
#  204|           free(cxstat->triggers);
#  205|->         free(cxstat->residencies);
#  206|           free(cxstat->pc);
#  207|           free(cxstat->cc);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def588]
xen-4.19.2/tools/misc/xenpm.c:206:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  204|           free(cxstat->triggers);
#  205|           free(cxstat->residencies);
#  206|->         free(cxstat->pc);
#  207|           free(cxstat->cc);
#  208|           cxstat->triggers = NULL;

Error: GCC_ANALYZER_WARNING (CWE-479): [#def589]
xen-4.19.2/tools/misc/xenpm.c:207:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:10: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:474:10: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
#  205|           free(cxstat->residencies);
#  206|           free(cxstat->pc);
#  207|->         free(cxstat->cc);
#  208|           cxstat->triggers = NULL;
#  209|           cxstat->residencies = NULL;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def590]
xen-4.19.2/tools/misc/xenpm.c:300:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pxstatinfo.pt’
xen-4.19.2/tools/misc/xenpm.c:358:12: enter_function: entry to ‘show_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:363:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘show_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:363:11: return_function: returning to ‘show_pxstat_by_cpuid’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:364:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:375:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:375:5: call_function: calling ‘print_pxstat’ from ‘show_pxstat_by_cpuid’
#  298|           else
#  299|               printf("P%-10d", i);
#  300|->         printf("[%4"PRIu64" MHz]", pxstat->pt[i].freq);
#  301|           printf(": transition [%20"PRIu64"]\n",
#  302|                  pxstat->pt[i].count);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def591]
xen-4.19.2/tools/misc/xenpm.c:322:24: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘malloc’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
#  320|           return -EINVAL;
#  321|   
#  322|->     pxstat->trans_pt = malloc(max_px_num * max_px_num *
#  323|                                 sizeof(uint64_t));
#  324|       if ( !pxstat->trans_pt )

Error: GCC_ANALYZER_WARNING (CWE-479): [#def592]
xen-4.19.2/tools/misc/xenpm.c:326:18: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘malloc’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
#  324|       if ( !pxstat->trans_pt )
#  325|           return -ENOMEM;
#  326|->     pxstat->pt = malloc(max_px_num * sizeof(struct xc_px_val));
#  327|       if ( !pxstat->pt )
#  328|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def593]
xen-4.19.2/tools/misc/xenpm.c:327:8: warning[-Wanalyzer-malloc-leak]: leak of ‘*pxstat.pt’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:493:19: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:493:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:492:38: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
#  325|           return -ENOMEM;
#  326|       pxstat->pt = malloc(max_px_num * sizeof(struct xc_px_val));
#  327|->     if ( !pxstat->pt )
#  328|       {
#  329|           free(pxstat->trans_pt);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def594]
xen-4.19.2/tools/misc/xenpm.c:327:8: warning[-Wanalyzer-malloc-leak]: leak of ‘*pxstat.trans_pt’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:493:19: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:493:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:492:38: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
#  325|           return -ENOMEM;
#  326|       pxstat->pt = malloc(max_px_num * sizeof(struct xc_px_val));
#  327|->     if ( !pxstat->pt )
#  328|       {
#  329|           free(pxstat->trans_pt);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def595]
xen-4.19.2/tools/misc/xenpm.c:329:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
#  327|       if ( !pxstat->pt )
#  328|       {
#  329|->         free(pxstat->trans_pt);
#  330|           return -ENOMEM;
#  331|       }

Error: GCC_ANALYZER_WARNING (CWE-479): [#def596]
xen-4.19.2/tools/misc/xenpm.c:337:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
#  335|       {
#  336|           ret = -errno;
#  337|->         free(pxstat->trans_pt);
#  338|           free(pxstat->pt);
#  339|           pxstat->trans_pt = NULL;

Error: GCC_ANALYZER_WARNING (CWE-479): [#def597]
xen-4.19.2/tools/misc/xenpm.c:338:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
#  336|           ret = -errno;
#  337|           free(pxstat->trans_pt);
#  338|->         free(pxstat->pt);
#  339|           pxstat->trans_pt = NULL;
#  340|           pxstat->pt = NULL;

Error: GCC_ANALYZER_WARNING (CWE-479): [#def598]
xen-4.19.2/tools/misc/xenpm.c:455:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘fprintf’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:456:26: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:455:9: danger: call to ‘fprintf’ from within signal handler
#  453|       if ( xc_cputopoinfo(xc_handle, &max_cpus, NULL) != 0 )
#  454|       {
#  455|->         fprintf(stderr, "failed to discover number of CPUs: %s\n",
#  456|                   strerror(errno));
#  457|           goto out;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def599]
xen-4.19.2/tools/misc/xenpm.c:481:45: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:474:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:478:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:478:19: call_function: calling ‘get_cxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:478:19: return_function: returning to ‘signal_int_handler’ from ‘get_cxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:478:16: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:479:30: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:481:45: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:481:45: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:481:70: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:481:45: danger: dereference of NULL ‘*<unknown>.residencies + (long unsigned int)j * 8’
#  479|                   for ( j = 0; j < cxstat_end[i].nr; j++ )
#  480|                   {
#  481|->                     int64_t diff = (int64_t)cxstat_end[i].residencies[j] -
#  482|                           (int64_t)cxstat_start[i].residencies[j];
#  483|                       if ( diff >=0 )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def600]
xen-4.19.2/tools/misc/xenpm.c:495:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:477:22: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:488:11: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:488:11: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:488:11: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:489:8: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:492:22: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:493:19: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:493:19: call_function: calling ‘get_pxstat_by_cpuid’ from ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:493:19: return_function: returning to ‘signal_int_handler’ from ‘get_pxstat_by_cpuid’
xen-4.19.2/tools/misc/xenpm.c:493:16: branch_true: following ‘true’ branch...
 branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:494:30: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:495:21: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:495:34: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:495:50: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:495:34: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:495:50: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:495:34: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:495:50: release_memory: ‘0’ is NULL
xen-4.19.2/tools/misc/xenpm.c:495:34: danger: dereference of NULL ‘*<unknown>.pt + (long unsigned int)j * 24’
#  493|               if ( !get_pxstat_by_cpuid(xc_handle, i , &pxstat_end[i]) )
#  494|                   for ( j = 0; j < pxstat_end[i].total; j++ )
#  495|->                     sum_px[i] += pxstat_end[i].pt[j].residency -
#  496|                                    pxstat_start[i].pt[j].residency;
#  497|       }

Error: GCC_ANALYZER_WARNING (CWE-479): [#def601]
xen-4.19.2/tools/misc/xenpm.c:502:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘printf’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:502:5: danger: call to ‘printf’ from within signal handler
#  500|           get_avgfreq_by_cpuid(xc_handle, i, &avgfreq[i]);
#  501|   
#  502|->     printf("Elapsed time (ms): %"PRIu64"\n", (usec_end - usec_start) / 1000UL);
#  503|       for ( i = 0; i < max_cpu_nr; i++ )
#  504|       {

Error: GCC_ANALYZER_WARNING (CWE-479): [#def602]
xen-4.19.2/tools/misc/xenpm.c:508:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘printf’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:500:9: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:508:9: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:508:9: danger: call to ‘printf’ from within signal handler
#  506|           double avg_res;
#  507|   
#  508|->         printf("\nCPU%d:\tResidency(ms)\t\tAvg Res(ms)\n",i);
#  509|           if ( cx_cap && sum_cx[i] > 0 )
#  510|           {

Error: GCC_ANALYZER_WARNING (CWE-479): [#def603]
xen-4.19.2/tools/misc/xenpm.c:637:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:637:20: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:637:9: danger: call to ‘free’ from within signal handler
#  635|       for ( i = 0; i < 2 * max_cpu_nr; i++ )
#  636|       {
#  637|->         free(cxstat[i].triggers);
#  638|           free(cxstat[i].residencies);
#  639|           free(cxstat[i].pc);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def604]
xen-4.19.2/tools/misc/xenpm.c:638:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:637:20: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:638:9: danger: call to ‘free’ from within signal handler
#  636|       {
#  637|           free(cxstat[i].triggers);
#  638|->         free(cxstat[i].residencies);
#  639|           free(cxstat[i].pc);
#  640|           free(cxstat[i].cc);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def605]
xen-4.19.2/tools/misc/xenpm.c:639:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:637:20: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:639:9: danger: call to ‘free’ from within signal handler
#  637|           free(cxstat[i].triggers);
#  638|           free(cxstat[i].residencies);
#  639|->         free(cxstat[i].pc);
#  640|           free(cxstat[i].cc);
#  641|           free(pxstat[i].trans_pt);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def606]
xen-4.19.2/tools/misc/xenpm.c:640:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:637:20: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:640:9: danger: call to ‘free’ from within signal handler
#  638|           free(cxstat[i].residencies);
#  639|           free(cxstat[i].pc);
#  640|->         free(cxstat[i].cc);
#  641|           free(pxstat[i].trans_pt);
#  642|           free(pxstat[i].pt);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def607]
xen-4.19.2/tools/misc/xenpm.c:641:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:637:20: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:641:9: danger: call to ‘free’ from within signal handler
#  639|           free(cxstat[i].pc);
#  640|           free(cxstat[i].cc);
#  641|->         free(pxstat[i].trans_pt);
#  642|           free(pxstat[i].pt);
#  643|       }

Error: GCC_ANALYZER_WARNING (CWE-479): [#def608]
xen-4.19.2/tools/misc/xenpm.c:642:9: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_true: following ‘true’ branch...
xen-4.19.2/tools/misc/xenpm.c:637:20: branch_true: ...to here
xen-4.19.2/tools/misc/xenpm.c:642:9: danger: call to ‘free’ from within signal handler
#  640|           free(cxstat[i].cc);
#  641|           free(pxstat[i].trans_pt);
#  642|->         free(pxstat[i].pt);
#  643|       }
#  644|       free(cxstat);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def609]
xen-4.19.2/tools/misc/xenpm.c:644:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:644:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:644:5: danger: call to ‘free’ from within signal handler
#  642|           free(pxstat[i].pt);
#  643|       }
#  644|->     free(cxstat);
#  645|       free(pxstat);
#  646|       free(sum);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def610]
xen-4.19.2/tools/misc/xenpm.c:645:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:644:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:645:5: danger: call to ‘free’ from within signal handler
#  643|       }
#  644|       free(cxstat);
#  645|->     free(pxstat);
#  646|       free(sum);
#  647|       free(avgfreq);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def611]
xen-4.19.2/tools/misc/xenpm.c:646:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:644:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:646:5: danger: call to ‘free’ from within signal handler
#  644|       free(cxstat);
#  645|       free(pxstat);
#  646|->     free(sum);
#  647|       free(avgfreq);
#  648|   out:

Error: GCC_ANALYZER_WARNING (CWE-479): [#def612]
xen-4.19.2/tools/misc/xenpm.c:647:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:453:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:460:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:461:8: branch_false: following ‘false’ branch (when ‘cputopo’ is non-NULL)...
xen-4.19.2/tools/misc/xenpm.c:467:10: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:467:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:472:16: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:499:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:502:46: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:503:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:546:8: branch_false: following ‘false’ branch (when ‘cx_cap == 0’)...
 branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:635:18: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:644:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:647:5: danger: call to ‘free’ from within signal handler
#  645|       free(pxstat);
#  646|       free(sum);
#  647|->     free(avgfreq);
#  648|   out:
#  649|       free(cputopo);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def613]
xen-4.19.2/tools/misc/xenpm.c:649:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘free’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:649:5: danger: call to ‘free’ from within signal handler
#  647|       free(avgfreq);
#  648|   out:
#  649|->     free(cputopo);
#  650|       xc_interface_close(xc_handle);
#  651|       exit(0);

Error: GCC_ANALYZER_WARNING (CWE-479): [#def614]
xen-4.19.2/tools/misc/xenpm.c:651:5: warning[-Wanalyzer-unsafe-call-within-signal-handler]: call to ‘exit’ from within signal handler
xen-4.19.2/tools/misc/xenpm.c:654:6: enter_function: entry to ‘start_gather_func’
xen-4.19.2/tools/misc/xenpm.c:669:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:674:18: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:677:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:679:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:680:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:685:14: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:686:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:692:15: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:693:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/misc/xenpm.c:700:5: branch_false: ...to here
xen-4.19.2/tools/misc/xenpm.c:445:13: enter_function: entry to ‘signal_int_handler’
xen-4.19.2/tools/misc/xenpm.c:651:5: danger: call to ‘exit’ from within signal handler
#  649|       free(cputopo);
#  650|       xc_interface_close(xc_handle);
#  651|->     exit(0);
#  652|   }
#  653|   

Error: CPPCHECK_WARNING (CWE-768): [#def615]
xen-4.19.2/tools/tests/cpu-policy/test-cpu-policy.c:319: error[unknownEvaluationOrder]: Expression '.leaf={.leaf=(0xdu+1)}' depends on order of evaluation of side effects
#  317|           {
#  318|               .name = "OoB basic leaf",
#  319|->             .leaf = { .leaf = CPUID_GUEST_NR_BASIC },
#  320|           },
#  321|           {

Error: CPPCHECK_WARNING (CWE-768): [#def616]
xen-4.19.2/tools/tests/cpu-policy/test-cpu-policy.c:339: error[unknownEvaluationOrder]: Expression '.leaf={.leaf=0x80000000|((0x8u+1)>(0x21u+1)?(0x8u+1):(0x21u+1))}' depends on order of evaluation of side effects
#  337|           {
#  338|               .name = "OoB extd leaf",
#  339|->             .leaf = { .leaf = 0x80000000 | CPUID_GUEST_NR_EXTD },
#  340|           },
#  341|       };

Error: GCC_ANALYZER_WARNING: [#def617]
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:497:52: warning[-Wanalyzer-fd-type-mismatch]: ‘accept’ on non-stream-socket file descriptor ‘socket_fd’
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:429:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:432:22: branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:436:8: branch_false: following ‘false’ branch (when ‘is_server == 0’)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:443:13: branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:443:12: branch_true: following ‘true’ branch (when the strings are equal)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:444:13: branch_true: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:455:8: branch_false: following ‘false’ branch (when ‘state_path’ is NULL)...
 branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:473:12: branch_false: following ‘false’ branch (when ‘is_server == 0’)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:496:17: branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:496:16: branch_true: following ‘true’ branch (when the strings are non-equal)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:497:52: branch_true: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:497:52: danger: ‘accept’ expects a socket file descriptor but ‘socket_fd’ is not a socket
#  495|               /* wait for local socket connection */
#  496|               if (strcmp(socket_path, "-") != 0)
#  497|->                 state.input_fd = state.output_fd = accept(socket_fd,
#  498|                                                             NULL, NULL);
#  499|               if (state.input_fd == -1) {

Error: GCC_ANALYZER_WARNING: [#def618]
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:497:52: warning[-Wanalyzer-fd-use-without-check]: ‘accept’ on possibly invalid file descriptor ‘socket_fd’
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:429:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:432:22: branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:436:8: branch_false: following ‘false’ branch (when ‘is_server == 0’)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:443:13: branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:443:12: branch_true: following ‘true’ branch (when the strings are equal)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:444:13: branch_true: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:455:8: branch_false: following ‘false’ branch (when ‘state_path’ is NULL)...
 branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:473:12: branch_false: following ‘false’ branch (when ‘is_server == 0’)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:496:17: branch_false: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:496:16: branch_true: following ‘true’ branch (when the strings are non-equal)...
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:497:52: branch_true: ...to here
xen-4.19.2/tools/vchan/vchan-socket-proxy.c:497:52: danger: ‘socket_fd’ could be invalid
#  495|               /* wait for local socket connection */
#  496|               if (strcmp(socket_path, "-") != 0)
#  497|->                 state.input_fd = state.output_fd = accept(socket_fd,
#  498|                                                             NULL, NULL);
#  499|               if (state.input_fd == -1) {

Error: CPPCHECK_WARNING (CWE-457): [#def619]
xen-4.19.2/tools/xenmon/xenbaked.c:413: warning[uninitvar]: Uninitialized variable: pfn_list
#  411|           tbufs.meta[i] = xc_map_foreign_pages(xc_handle, DOMID_XEN,
#  412|                                                PROT_READ | PROT_WRITE,
#  413|->                                              pfn_list,
#  414|                                                tbufs.t_info->tbuf_size);
#  415|           if ( tbufs.meta[i] == NULL )

Error: GCC_ANALYZER_WARNING (CWE-688): [#def620]
xen-4.19.2/tools/xentrace/xenalyze.c:312:12: warning[-Wanalyzer-null-argument]: use of NULL ‘fopen(fn, "rb")’ where non-null expected
xen-4.19.2/tools/xentrace/xenalyze.c:10923:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xentrace/xenalyze.c:10929:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10932:18: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10944:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: branch_true: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: call_function: calling ‘parse_symbol_file’ from ‘main’
#  310|           error(ERR_SYSTEM, NULL);
#  311|       }
#  312|->     while(!feof(symbol_file)) {
#  313|           /* Allocate a new struct if we need it */
#  314|           if(!*p) {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def621]
xen-4.19.2/tools/xentrace/xenalyze.c:314:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(fn, "rb")’
xen-4.19.2/tools/xentrace/xenalyze.c:10923:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xentrace/xenalyze.c:10929:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10932:18: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10941:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10944:9: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10944:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: branch_true: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: call_function: calling ‘parse_symbol_file’ from ‘main’
#  312|       while(!feof(symbol_file)) {
#  313|           /* Allocate a new struct if we need it */
#  314|->         if(!*p) {
#  315|               *p = malloc(sizeof(**p));
#  316|               if(!*p) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def622]
xen-4.19.2/tools/xentrace/xenalyze.c:314:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(fn, "rb")’
xen-4.19.2/tools/xentrace/xenalyze.c:10923:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xentrace/xenalyze.c:10929:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10932:18: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10941:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10944:9: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10944:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: branch_true: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: call_function: calling ‘parse_symbol_file’ from ‘main’
#  312|       while(!feof(symbol_file)) {
#  313|           /* Allocate a new struct if we need it */
#  314|->         if(!*p) {
#  315|               *p = malloc(sizeof(**p));
#  316|               if(!*p) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def623]
xen-4.19.2/tools/xentrace/xenalyze.c:320:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘G.symbols’
xen-4.19.2/tools/xentrace/xenalyze.c:10923:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xentrace/xenalyze.c:10929:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10932:18: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10941:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10944:9: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10944:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: branch_true: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10945:9: call_function: calling ‘parse_symbol_file’ from ‘main’
#  318|                   error(ERR_SYSTEM, NULL);
#  319|               }
#  320|->             (*p)->count=0;
#  321|               (*p)->next=NULL;
#  322|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def624]
xen-4.19.2/tools/xentrace/xenalyze.c:2474:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
xen-4.19.2/tools/xentrace/xenalyze.c:10923:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xentrace/xenalyze.c:10929:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10932:18: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10941:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:10944:9: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:10950:5: call_function: calling ‘init_pcpus’ from ‘main’
# 2472|       bzero(p, sizeof(*p));
# 2473|   
# 2474|->     p->elem = e;
# 2475|       strncpy(p->desc, desc, INTERVAL_DESC_MAX);
# 2476|   

Error: CPPCHECK_WARNING (CWE-476): [#def625]
xen-4.19.2/tools/xentrace/xenalyze.c:2561: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 2559|   
# 2560|       for(i=0, p=P.cr3.head; p; p=p->gnext, i++)
# 2561|->         qsort_array[i]=p;
# 2562|   
# 2563|       qsort(qsort_array, N, sizeof(struct eip_list_struct *),

Error: CPPCHECK_WARNING (CWE-476): [#def626]
xen-4.19.2/tools/xentrace/xenalyze.c:2563: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 2561|           qsort_array[i]=p;
# 2562|   
# 2563|->     qsort(qsort_array, N, sizeof(struct eip_list_struct *),
# 2564|             cr3_time_compare);
# 2565|   

Error: CPPCHECK_WARNING (CWE-476): [#def627]
xen-4.19.2/tools/xentrace/xenalyze.c:2569: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 2567|   
# 2568|       for(i=0; i<N; i++) {
# 2569|->         p = qsort_array[i];
# 2570|           /* Rounding down means this will get ..1]% */
# 2571|           if(p->total_time.interval.cycles > 0) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def628]
xen-4.19.2/tools/xentrace/xenalyze.c:2828:9: warning[-Wanalyzer-null-argument]: use of NULL ‘p’ where non-null expected
xen-4.19.2/tools/xentrace/xenalyze.c:3290:6: enter_function: entry to ‘hvm_pf_xen_postprocess’
xen-4.19.2/tools/xentrace/xenalyze.c:3302:13: call_function: calling ‘update_eip’ from ‘hvm_pf_xen_postprocess’
#argument 1 of ‘__builtin_memset’ must be non-null
# 2826|           }
# 2827|   
# 2828|->         bzero(p, sizeof(*p));
# 2829|   
# 2830|           p->eip=eip;

Error: CPPCHECK_WARNING (CWE-476): [#def629]
xen-4.19.2/tools/xentrace/xenalyze.c:2884: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 2882|   
# 2883|       for(i=0, p=head; p; p=p->next, i++)
# 2884|->         qsort_array[i]=p;
# 2885|   
# 2886|       qsort(qsort_array, N, sizeof(struct eip_list_struct *),

Error: CPPCHECK_WARNING (CWE-476): [#def630]
xen-4.19.2/tools/xentrace/xenalyze.c:2886: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 2884|           qsort_array[i]=p;
# 2885|   
# 2886|->     qsort(qsort_array, N, sizeof(struct eip_list_struct *),
# 2887|             eip_compare);
# 2888|   

Error: CPPCHECK_WARNING (CWE-476): [#def631]
xen-4.19.2/tools/xentrace/xenalyze.c:2898: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 2896|   
# 2897|       for(i=0; i<N; i++) {
# 2898|->         p = qsort_array[i];
# 2899|           if ( p->summary.cycles )
# 2900|               PRINT_SUMMARY(p->summary, "   %12llx%-45s: ",

Error: CPPCHECK_WARNING (CWE-476): [#def632]
xen-4.19.2/tools/xentrace/xenalyze.c:3004: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p
# 3002|               error(ERR_SYSTEM, NULL);
# 3003|           }
# 3004|->         p->handler=s;
# 3005|           p->data = d;
# 3006|           p->next=*q;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def633]
xen-4.19.2/tools/xentrace/xenalyze.c:3004:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
xen-4.19.2/tools/xentrace/xenalyze.c:4321:6: enter_function: entry to ‘hvm_vmcall_postprocess’
xen-4.19.2/tools/xentrace/xenalyze.c:4333:9: call_function: calling ‘__hvm_set_summary_handler’ from ‘hvm_vmcall_postprocess’
# 3002|               error(ERR_SYSTEM, NULL);
# 3003|           }
# 3004|->         p->handler=s;
# 3005|           p->data = d;
# 3006|           p->next=*q;

Error: CPPCHECK_WARNING (CWE-476): [#def634]
xen-4.19.2/tools/xentrace/xenalyze.c:3005: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p
# 3003|           }
# 3004|           p->handler=s;
# 3005|->         p->data = d;
# 3006|           p->next=*q;
# 3007|           *q=p;

Error: CPPCHECK_WARNING (CWE-476): [#def635]
xen-4.19.2/tools/xentrace/xenalyze.c:3006: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p
# 3004|           p->handler=s;
# 3005|           p->data = d;
# 3006|->         p->next=*q;
# 3007|           *q=p;
# 3008|           return 0;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def636]
xen-4.19.2/tools/xentrace/xenalyze.c:3793:9: warning[-Wanalyzer-null-argument]: use of NULL ‘p’ where non-null expected
xen-4.19.2/tools/xentrace/xenalyze.c:3831:6: enter_function: entry to ‘hvm_io_write_postprocess’
xen-4.19.2/tools/xentrace/xenalyze.c:3834:9: call_function: calling ‘update_io_address’ from ‘hvm_io_write_postprocess’
#argument 1 of ‘__builtin_memset’ must be non-null
# 3791|           }
# 3792|   
# 3793|->         bzero(p, sizeof(*p));
# 3794|   
# 3795|           p->pa=pa;

Error: CPPCHECK_WARNING (CWE-476): [#def637]
xen-4.19.2/tools/xentrace/xenalyze.c:4034: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 4032|       /* Point the array into it */
# 4033|       for(i=0, p=head; p; p=p->next, i++)
# 4034|->         qsort_array[i]=p;
# 4035|   
# 4036|       /* Sort the array by time */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def638]
xen-4.19.2/tools/xentrace/xenalyze.c:4034:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘qsort_array’
xen-4.19.2/tools/xentrace/xenalyze.c:4030:19: acquire_memory: this call could return NULL
xen-4.19.2/tools/xentrace/xenalyze.c:4033:22: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
xen-4.19.2/tools/xentrace/xenalyze.c:4034:20: branch_true: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:4034:9: danger: ‘qsort_array + (long unsigned int)i * 8’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/0)
# 4032|       /* Point the array into it */
# 4033|       for(i=0, p=head; p; p=p->next, i++)
# 4034|->         qsort_array[i]=p;
# 4035|   
# 4036|       /* Sort the array by time */

Error: CPPCHECK_WARNING (CWE-476): [#def639]
xen-4.19.2/tools/xentrace/xenalyze.c:4037: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 4035|   
# 4036|       /* Sort the array by time */
# 4037|->     qsort(qsort_array, N, sizeof(struct eip_list_struct *),
# 4038|             cr3_compare_start);
# 4039|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def640]
xen-4.19.2/tools/xentrace/xenalyze.c:4037:5: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘qsort_array’ where non-null expected
xen-4.19.2/tools/xentrace/xenalyze.c:4030:19: acquire_memory: this call could return NULL
xen-4.19.2/tools/xentrace/xenalyze.c:4033:22: branch_false: following ‘false’ branch (when ‘p’ is NULL)...
xen-4.19.2/tools/xentrace/xenalyze.c:4037:5: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:4037:5: danger: argument 1 (‘qsort_array’) from [(1)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/0) could be NULL where non-null expected
# 4035|   
# 4036|       /* Sort the array by time */
# 4037|->     qsort(qsort_array, N, sizeof(struct eip_list_struct *),
# 4038|             cr3_compare_start);
# 4039|   

Error: CPPCHECK_WARNING (CWE-476): [#def641]
xen-4.19.2/tools/xentrace/xenalyze.c:4052: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: qsort_array
# 4050|           struct time_struct first, last;
# 4051|   
# 4052|->         p = qsort_array[i];
# 4053|   
# 4054|           abs_cycles_to_time(p->first_time, &first);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def642]
xen-4.19.2/tools/xentrace/xenalyze.c:6704:5: warning[-Wanalyzer-null-argument]: use of NULL ‘v’ where non-null expected
xen-4.19.2/tools/xentrace/xenalyze.c:8971:6: enter_function: entry to ‘process_lost_records_end’
xen-4.19.2/tools/xentrace/xenalyze.c:8991:9: call_function: calling ‘update_cycles’ from ‘process_lost_records_end’
xen-4.19.2/tools/xentrace/xenalyze.c:8991:9: return_function: returning to ‘process_lost_records_end’ from ‘update_cycles’
xen-4.19.2/tools/xentrace/xenalyze.c:8993:11: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:8994:23: branch_true: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:8997:15: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:9001:16: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:9001:15: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:9010:16: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:9010:15: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:9013:13: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:9013:13: call_function: calling ‘vcpu_find’ from ‘process_lost_records_end’
#argument 1 of ‘__builtin_memset’ must be non-null
# 6702|       }
# 6703|   
# 6704|->     bzero(v, sizeof(*v));
# 6705|   
# 6706|       v->vid = vid;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def643]
xen-4.19.2/tools/xentrace/xenalyze.c:6725:5: warning[-Wanalyzer-null-argument]: use of NULL ‘d’ where non-null expected
xen-4.19.2/tools/xentrace/xenalyze.c:8971:6: enter_function: entry to ‘process_lost_records_end’
xen-4.19.2/tools/xentrace/xenalyze.c:8991:9: call_function: calling ‘update_cycles’ from ‘process_lost_records_end’
xen-4.19.2/tools/xentrace/xenalyze.c:8991:9: return_function: returning to ‘process_lost_records_end’ from ‘update_cycles’
xen-4.19.2/tools/xentrace/xenalyze.c:8993:11: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:8994:23: branch_true: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:8997:15: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:9001:16: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:9001:15: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:9010:16: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:9010:15: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xentrace/xenalyze.c:9013:13: branch_false: ...to here
xen-4.19.2/tools/xentrace/xenalyze.c:9013:13: call_function: calling ‘vcpu_find’ from ‘process_lost_records_end’
#argument 1 of ‘__builtin_memset’ must be non-null
# 6723|   void domain_init(struct domain_data *d, int did)
# 6724|   {
# 6725|->     bzero(d, sizeof(*d));
# 6726|   
# 6727|       d->did = did;

Error: CPPCHECK_WARNING (CWE-457): [#def644]
xen-4.19.2/tools/xentrace/xentrace.c:520: warning[uninitvar]: Uninitialized variable: pfn_list
#  518|           tbufs.meta[i] = xc_map_foreign_pages(xc_handle, DOMID_XEN,
#  519|                                                PROT_READ | PROT_WRITE,
#  520|->                                              pfn_list,
#  521|                                                tbufs.t_info->tbuf_size);
#  522|           if ( tbufs.meta[i] == NULL )

Error: GCC_ANALYZER_WARNING (CWE-457): [#def645]
xen-4.19.2/tools/xl/xl_parse.c:840:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘resolution’
xen-4.19.2/tools/xl/xl_parse.c:1287:6: enter_function: entry to ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1313:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1319:5: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1322:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1327:8: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1328:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1333:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1392:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1397:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1472:5: call_function: calling ‘parse_vnuma_config’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1472:5: return_function: returning to ‘parse_config_data’ from ‘parse_vnuma_config’
xen-4.19.2/tools/xl/xl_parse.c:1479:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1482:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1482:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1487:5: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1528:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1528:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1528:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1533:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1535:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1535:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1535:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1540:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1542:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1542:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1542:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1548:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1550:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1550:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1550:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1555:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1557:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1557:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1557:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1564:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1577:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1580:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1580:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1588:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1690:23: call_function: calling ‘parse_cmdline’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1690:23: return_function: returning to ‘parse_config_data’ from ‘parse_cmdline’
xen-4.19.2/tools/xl/xl_parse.c:2024:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:2039:14: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:2315:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xl/xl_parse.c:2316:9: branch_true: ...to here
xen-4.19.2/tools/xl/xl_parse.c:2318:16: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xl/xl_parse.c:2320:27: branch_true: ...to here
xen-4.19.2/tools/xl/xl_parse.c:2326:20: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
 branch_true: ...to here
xen-4.19.2/tools/xl/xl_parse.c:2329:21: call_function: calling ‘parse_vdispl_config’ from ‘parse_config_data’
#  838|                                           &resolution, NULL);
#  839|   
#  840|->             rc= sscanf(resolution, "%ux%u", &vdispl->connectors[i].width,
#  841|                          &vdispl->connectors[i].height);
#  842|               free(resolution);

Error: CPPCHECK_WARNING (CWE-476): [#def646]
xen-4.19.2/tools/xl/xl_parse.c:1260: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: str
# 1258|                           str = malloc(strlen(p) + strlen(p2) + 2);
# 1259|   
# 1260|->                         strcpy(str, p);
# 1261|                           strcat(str, ",");
# 1262|                           strcat(str, p2);

Error: CPPCHECK_WARNING (CWE-476): [#def647]
xen-4.19.2/tools/xl/xl_parse.c:1261: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: str
# 1259|   
# 1260|                           strcpy(str, p);
# 1261|->                         strcat(str, ",");
# 1262|                           strcat(str, p2);
# 1263|                           p = str;

Error: CPPCHECK_WARNING (CWE-476): [#def648]
xen-4.19.2/tools/xl/xl_parse.c:1262: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: str
# 1260|                           strcpy(str, p);
# 1261|                           strcat(str, ",");
# 1262|->                         strcat(str, p2);
# 1263|                           p = str;
# 1264|                       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def649]
xen-4.19.2/tools/xl/xl_parse.c:1629:16: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(buf)’
xen-4.19.2/tools/xl/xl_parse.c:1287:6: enter_function: entry to ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1313:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1319:5: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1322:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1327:8: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1328:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1333:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1392:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1397:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1398:12: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1406:5: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1472:5: call_function: calling ‘parse_vnuma_config’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1472:5: return_function: returning to ‘parse_config_data’ from ‘parse_vnuma_config’
xen-4.19.2/tools/xl/xl_parse.c:1479:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1482:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1482:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1487:5: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1528:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1528:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1528:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1533:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1535:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1535:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1535:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1540:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1542:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1542:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1542:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1548:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1550:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1550:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1550:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1555:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1557:10: call_function: calling ‘parse_action_on_shutdown’ from ‘parse_config_data’
xen-4.19.2/tools/xl/xl_parse.c:1557:10: return_function: returning to ‘parse_config_data’ from ‘parse_action_on_shutdown’
xen-4.19.2/tools/xl/xl_parse.c:1557:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1564:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1577:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1580:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1580:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1588:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1618:8: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1619:9: branch_true: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1621:21: branch_true: following ‘true’ branch...
xen-4.19.2/tools/xl/xl_parse.c:1624:21: branch_true: ...to here
xen-4.19.2/tools/xl/xl_parse.c:1628:27: acquire_memory: allocated here
xen-4.19.2/tools/xl/xl_parse.c:1629:16: danger: ‘strdup(buf)’ leaks here; was allocated at [(64)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/63)
# 1627|   
# 1628|               dtdev->path = strdup(buf);
# 1629|->             if (dtdev->path == NULL) {
# 1630|                   fprintf(stderr, "unable to duplicate string for dtdevs\n");
# 1631|                   exit(-1);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def650]
xen-4.19.2/tools/xl/xl_vcpu.c:253:30: warning[-Wanalyzer-null-argument]: use of NULL ‘soft_str’ where non-null expected
xen-4.19.2/tools/xl/xl_vcpu.c:211:16: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_vcpu.c:214:14: branch_false: ...to here
xen-4.19.2/tools/xl/xl_vcpu.c:227:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_vcpu.c:228:9: branch_false: ...to here
xen-4.19.2/tools/xl/xl_vcpu.c:227:9: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_vcpu.c:245:10: branch_false: ...to here
xen-4.19.2/tools/xl/xl_vcpu.c:245:8: branch_true: following ‘true’ branch (when the strings are equal)...
xen-4.19.2/tools/xl/xl_vcpu.c:253:17: branch_true: ...to here
xen-4.19.2/tools/xl/xl_vcpu.c:253:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xl/xl_vcpu.c:253:30: branch_false: ...to here
xen-4.19.2/tools/xl/xl_vcpu.c:253:30: danger: argument 1 (‘soft_str’) NULL where non-null expected
#  251|        * to pass NULL to libxl_set_vcpuaffinity() if it is not specified.
#  252|        */
#  253|->     if (argc <= optind+3 || !strcmp(soft_str, "-"))
#  254|           soft = NULL;
#  255|       else if (parse_cpurange(soft_str, soft))

Error: CPPCHECK_WARNING (CWE-909): [#def651]
xen-4.19.2/tools/xl/xl_vmcontrol.c:805: error[uninitStructMember]: Uninitialized struct member: hdr.mandatory_flags
#  803|           }
#  804|           config_source = "<saved>";
#  805|->         config_in_json = !!(hdr.mandatory_flags & XL_MANDATORY_FLAG_JSON);
#  806|       }
#  807|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def652]
xen-4.19.2/tools/xs-clients/xenstore_control.c:20:5: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
xen-4.19.2/tools/xs-clients/xenstore_control.c:318:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xs-clients/xenstore_control.c:326:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
xen-4.19.2/tools/xs-clients/xenstore_control.c:333:11: branch_false: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:334:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xs-clients/xenstore_control.c:340:10: branch_false: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:340:8: branch_true: following ‘true’ branch (when the strings are equal)...
xen-4.19.2/tools/xs-clients/xenstore_control.c:341:14: branch_true: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:341:14: call_function: calling ‘live_update’ from ‘main’
#   18|           return -1;
#   19|   
#   20|->     *buf = realloc(*buf, len + vallen);
#   21|       if (!*buf)
#   22|           return -1;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def653]
xen-4.19.2/tools/xs-clients/xenstore_control.c:36:16: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
xen-4.19.2/tools/xs-clients/xenstore_control.c:318:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xs-clients/xenstore_control.c:326:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
xen-4.19.2/tools/xs-clients/xenstore_control.c:333:11: branch_false: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:334:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xs-clients/xenstore_control.c:340:10: branch_false: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:340:8: branch_true: following ‘true’ branch (when the strings are equal)...
xen-4.19.2/tools/xs-clients/xenstore_control.c:341:14: branch_true: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:341:14: call_function: calling ‘live_update’ from ‘main’
#   34|   
#   35|       if (asprintf(&ret, "%u", to) < 0)
#   36|->         return 1;
#   37|       len = add_to_buf(&buf, "-s", len);
#   38|       len = add_to_buf(&buf, "-t", len);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def654]
xen-4.19.2/tools/xs-clients/xenstore_control.c:113:16: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
xen-4.19.2/tools/xs-clients/xenstore_control.c:318:5: enter_function: entry to ‘main’
xen-4.19.2/tools/xs-clients/xenstore_control.c:326:8: branch_false: following ‘false’ branch (when ‘argc > 1’)...
xen-4.19.2/tools/xs-clients/xenstore_control.c:333:11: branch_false: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:334:8: branch_false: following ‘false’ branch...
xen-4.19.2/tools/xs-clients/xenstore_control.c:340:10: branch_false: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:340:8: branch_true: following ‘true’ branch (when the strings are equal)...
xen-4.19.2/tools/xs-clients/xenstore_control.c:341:14: branch_true: ...to here
xen-4.19.2/tools/xs-clients/xenstore_control.c:341:14: call_function: calling ‘live_update’ from ‘main’
#  111|       if (!xch) {
#  112|           fprintf(stderr, "xc_interface_open() failed\n");
#  113|->         return 1;
#  114|       }
#  115|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def655]
xen-4.19.2/xen/./arch/x86/include/asm/shared.h:81:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘v’
xen-4.19.2/xen/arch/x86/x86_64/traps.c:126:6: enter_function: entry to ‘show_registers’
xen-4.19.2/xen/arch/x86/x86_64/traps.c:131:22: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/x86_64/traps.c:133:10: call_function: inlined call to ‘get_cpu_info’ from ‘show_registers’
xen-4.19.2/xen/arch/x86/x86_64/traps.c:133:10: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/x86_64/traps.c:142:14: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/x86_64/traps.c:145:28: call_function: inlined call to ‘arch_get_cr2’ from ‘show_registers’
#   79|   GET_SET_SHARED(unsigned long, nmi_reason)
#   80|   
#   81|-> GET_SET_VCPU(unsigned long, cr2)
#   82|   
#   83|   #undef GET_SET_VCPU

Error: GCC_ANALYZER_WARNING (CWE-121): [#def656]
xen-4.19.2/xen/./arch/x86/include/asm/uaccess.h:310:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:677:21: enter_function: entry to ‘rep_outs’
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:692:8: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:695:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:695:10: call_function: calling ‘read_segment’ from ‘rep_outs’
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:695:10: return_function: returning to ‘rep_outs’ from ‘read_segment’
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:696:8: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:699:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:699:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:701:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:701:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:702:12: branch_false: ...to here
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:712:13: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:714:22: branch_true: ...to here
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:717:14: call_function: calling ‘pv_emul_virt_to_linear’ from ‘rep_outs’
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:717:14: return_function: returning to ‘rep_outs’ from ‘pv_emul_virt_to_linear’
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:719:12: branch_false: following ‘false’ branch (when ‘rc == 0’)...
xen-4.19.2/xen/arch/x86/pv/emul-priv-op.c:722:20: branch_false: ...to here
#  308|               return ret;
#  309|           case 8:
#  310|->             get_guest_size(*(uint64_t *)to, from, 8, ret, 8);
#  311|               return ret;
#  312|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def657]
xen-4.19.2/xen/./include/xen/iocap.h:18:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:686:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:689:15: call_function: inlined call to ‘get_cpu_info’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:689:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:693:17: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:693:17: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:694:19: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:694:19: call_function: calling ‘iomem_permit_access’ from ‘do_domctl’
#   16|                                         unsigned long e)
#   17|   {
#   18|->     bool flush = cache_flush_permitted(d);
#   19|       int ret = rangeset_add_range(d->iomem_caps, s, e);
#   20|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def658]
xen-4.19.2/xen/./include/xen/iocap.h:35:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:686:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:689:15: call_function: inlined call to ‘get_cpu_info’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:689:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:693:17: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:693:17: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:696:19: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:696:19: call_function: calling ‘iomem_deny_access’ from ‘do_domctl’
#   33|                                       unsigned long e)
#   34|   {
#   35|->     int ret = rangeset_remove_range(d->iomem_caps, s, e);
#   36|   
#   37|       if ( !ret && !is_iommu_enabled(d) && !cache_flush_permitted(d) )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def659]
xen-4.19.2/xen/./include/xen/sched.h:1170:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/xen/arch/x86/emul-i8254.c:549:17: enter_function: entry to ‘speaker_ioport_read’
xen-4.19.2/xen/arch/x86/emul-i8254.c:555:14: call_function: calling ‘pit_get_out’ from ‘speaker_ioport_read’
# 1168|   static always_inline bool is_hvm_vcpu(const struct vcpu *v)
# 1169|   {
# 1170|->     return is_hvm_domain(v->domain);
# 1171|   }
# 1172|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def660]
xen-4.19.2/xen/./include/xen/sched.h:1170:26: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘v’
xen-4.19.2/xen/arch/x86/x86_64/traps.c:126:6: enter_function: entry to ‘show_registers’
xen-4.19.2/xen/arch/x86/x86_64/traps.c:131:22: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/x86_64/traps.c:133:10: call_function: inlined call to ‘get_cpu_info’ from ‘show_registers’
xen-4.19.2/xen/arch/x86/x86_64/traps.c:133:30: call_function: inlined call to ‘is_hvm_vcpu’ from ‘show_registers’
# 1168|   static always_inline bool is_hvm_vcpu(const struct vcpu *v)
# 1169|   {
# 1170|->     return is_hvm_domain(v->domain);
# 1171|   }
# 1172|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def661]
xen-4.19.2/xen/arch/x86/domain_page.c:192:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘v’
xen-4.19.2/xen/arch/x86/domain_page.c:176:6: enter_function: entry to ‘unmap_domain_page’
xen-4.19.2/xen/arch/x86/domain_page.c:184:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/domain_page.c:189:9: branch_false: ...to here
xen-4.19.2/xen/arch/x86/domain_page.c:189:9: call_function: calling ‘mapcache_current_vcpu’ from ‘unmap_domain_page’
xen-4.19.2/xen/arch/x86/domain_page.c:189:9: return_function: return of NULL to ‘unmap_domain_page’ from ‘mapcache_current_vcpu’
xen-4.19.2/xen/arch/x86/domain_page.c:192:15: danger: dereference of NULL ‘v’
#  190|       ASSERT(v && is_pv_vcpu(v));
#  191|   
#  192|->     dcache = &v->domain->arch.pv.mapcache;
#  193|       ASSERT(dcache->inuse);
#  194|   

Error: GCC_ANALYZER_WARNING (CWE-469): [#def662]
xen-4.19.2/xen/arch/x86/extable.c:55:22: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/xen/arch/x86/extable.c:59:13: enter_function: entry to ‘sort_exception_tables’
xen-4.19.2/xen/arch/x86/extable.c:61:5: call_function: calling ‘sort_exception_table’ from ‘sort_exception_tables’
#   53|                                    const struct exception_table_entry *stop)
#   54|   {
#   55|->     sort(start, stop - start,
#   56|            sizeof(struct exception_table_entry), cmp_ex, swap_ex);
#   57|   }

Error: GCC_ANALYZER_WARNING (CWE-469): [#def663]
xen-4.19.2/xen/arch/x86/extable.c:76:21: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/xen/arch/x86/extable.c:219:26: enter_function: entry to ‘search_pre_exception_table’
xen-4.19.2/xen/arch/x86/extable.c:222:27: call_function: calling ‘search_one_extable’ from ‘search_pre_exception_table’
#   74|       while ( first <= last )
#   75|       {
#   76|->         mid = (last - first) / 2 + first;
#   77|           diff = ex_addr(mid) - value;
#   78|           if (diff == 0)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def664]
xen-4.19.2/xen/arch/x86/hvm/rtc.c:151:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘v’
xen-4.19.2/xen/arch/x86/hvm/rtc.c:699:21: enter_function: entry to ‘handle_rtc_io’
xen-4.19.2/xen/arch/x86/hvm/rtc.c:704:8: branch_false: following ‘false’ branch (when ‘bytes == 1’)...
xen-4.19.2/xen/arch/x86/hvm/rtc.c:711:8: branch_false: ...to here
xen-4.19.2/xen/arch/x86/hvm/rtc.c:711:8: branch_true: following ‘true’ branch (when ‘dir == 0’)...
xen-4.19.2/xen/arch/x86/hvm/rtc.c:713:52: branch_true: ...to here
xen-4.19.2/xen/arch/x86/hvm/rtc.c:713:14: call_function: calling ‘rtc_ioport_write’ from ‘handle_rtc_io’
#  149|   
#  150|                   s->period = period;
#  151|->                 if ( v->domain->arch.hvm.params[HVM_PARAM_VPT_ALIGN] )
#  152|                       delta = 0;
#  153|                   else

Error: GCC_ANALYZER_WARNING (CWE-476): [#def665]
xen-4.19.2/xen/arch/x86/hvm/vioapic.c:340:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘vioapic’
xen-4.19.2/xen/arch/x86/hvm/vioapic.c:354:21: enter_function: entry to ‘vioapic_write’
xen-4.19.2/xen/arch/x86/hvm/vioapic.c:370:9: call_function: calling ‘vioapic_write_indirect’ from ‘vioapic_write’
#  338|                       redir_index, vioapic->ioregsel & 1 ? "hi" : "lo", val);
#  339|   
#  340|->         if ( redir_index >= vioapic->nr_pins )
#  341|           {
#  342|               gdprintk(XENLOG_WARNING, "vioapic_write_indirect "

Error: GCC_ANALYZER_WARNING (CWE-457): [#def666]
xen-4.19.2/xen/arch/x86/irq.c:276:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘desc’
xen-4.19.2/xen/arch/x86/irq.c:2150:5: enter_function: entry to ‘map_domain_pirq’
xen-4.19.2/xen/arch/x86/irq.c:2163:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2166:8: branch_true: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2166:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2176:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2177:11: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2176:10: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2193:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2207:8: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
xen-4.19.2/xen/arch/x86/irq.c:2209:8: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2214:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2224:15: call_function: inlined call to ‘boot_cpu_has’ from ‘map_domain_pirq’
xen-4.19.2/xen/arch/x86/irq.c:2224:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2227:16: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2228:12: branch_false: following ‘false’ branch (when ‘pdev’ is non-NULL)...
xen-4.19.2/xen/arch/x86/irq.c:2231:15: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2232:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
xen-4.19.2/xen/arch/x86/irq.c:2242:9: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2244:12: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2256:17: branch_true: following ‘true’ branch (when ‘ret == 0’)...
xen-4.19.2/xen/arch/x86/irq.c:2258:18: branch_true: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2270:16: branch_false: following ‘false’ branch (when ‘type != 0’)...
xen-4.19.2/xen/arch/x86/irq.c:2271:26: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2270:18: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2270:18: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2270:18: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/irq.c:2275:13: branch_false: ...to here
xen-4.19.2/xen/arch/x86/irq.c:2280:19: call_function: calling ‘create_irq’ from ‘map_domain_pirq’
#  274|            return -ENOSPC;
#  275|   
#  276|->     ret = init_one_irq_desc(desc);
#  277|       if (!ret)
#  278|       {

Error: GCC_ANALYZER_WARNING (CWE-469): [#def667]
xen-4.19.2/xen/arch/x86/machine_kexec.c:120:5: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
#  118|   
#  119|       code_page = __map_domain_page(image->control_code_page);
#  120|->     memcpy(code_page, kexec_reloc, kexec_reloc_end - (char *)kexec_reloc);
#  121|       unmap_domain_page(code_page);
#  122|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def668]
xen-4.19.2/xen/arch/x86/mm/p2m.c:2127:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘order’
xen-4.19.2/xen/arch/x86/mm/p2m.c:2084:5: enter_function: entry to ‘relinquish_p2m_mapping’
xen-4.19.2/xen/arch/x86/mm/p2m.c:2090:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/mm/p2m.c:2093:5: branch_false: ...to here
xen-4.19.2/xen/arch/x86/mm/p2m.c:2093:5: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/mm/p2m.c:2095:5: call_function: inlined call to ‘p2m_lock’ from ‘relinquish_p2m_mapping’
xen-4.19.2/xen/arch/x86/mm/p2m.c:2100:13: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/mm/p2m.c:2101:42: branch_true: ...to here
xen-4.19.2/xen/arch/x86/mm/p2m.c:2100:13: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/mm/p2m.c:2107:9: branch_true: ...to here
xen-4.19.2/xen/arch/x86/mm/p2m.c:2107:9: call_function: calling ‘_get_gfn_type_access’ from ‘relinquish_p2m_mapping’
xen-4.19.2/xen/arch/x86/mm/p2m.c:2107:9: return_function: returning to ‘relinquish_p2m_mapping’ from ‘_get_gfn_type_access’
xen-4.19.2/xen/arch/x86/mm/p2m.c:2110:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/mm/p2m.c:2127:16: branch_false: ...to here
xen-4.19.2/xen/arch/x86/mm/p2m.c:2127:16: danger: use of uninitialized value ‘order’ here
# 2125|           }
# 2126|   
# 2127|->         gfn += 1UL << order;
# 2128|   
# 2129|           if ( !(++count & 0xff) && hypercall_preempt_check() )

Error: GCC_ANALYZER_WARNING (CWE-457): [#def669]
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:114:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘addr’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:98:1: enter_function: entry to ‘hvm_read’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:109:10: call_function: calling ‘hvm_translate_virtual_addr’ from ‘hvm_read’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:109:10: return_function: returning to ‘hvm_read’ from ‘hvm_translate_virtual_addr’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:111:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:114:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:114:10: danger: use of uninitialized value ‘addr’ here
#  112|           return rc;
#  113|   
#  114|->     rc = hvm_copy_from_guest_linear(p_data, addr, bytes,
#  115|                                       (access_type == hvm_access_insn_fetch
#  116|                                        ? PFEC_insn_fetch : 0),

Error: GCC_ANALYZER_WARNING (CWE-457): [#def670]
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:352:11: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘addr’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:315:31: enter_function: entry to ‘shadow_init_emulation’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:349:11: call_function: calling ‘hvm_translate_virtual_addr’ from ‘shadow_init_emulation’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:349:11: return_function: returning to ‘shadow_init_emulation’ from ‘hvm_translate_virtual_addr’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:348:5: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:352:11: branch_true: ...to here
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:352:11: danger: use of uninitialized value ‘addr’ here
#  350|               x86_seg_cs, regs->rip, sizeof(sh_ctxt->insn_buf),
#  351|               hvm_access_insn_fetch, sh_ctxt, &addr) &&
#  352|->          !hvm_copy_from_guest_linear(
#  353|                sh_ctxt->insn_buf, addr, sizeof(sh_ctxt->insn_buf),
#  354|                PFEC_insn_fetch, NULL))

Error: GCC_ANALYZER_WARNING (CWE-457): [#def671]
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:383:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘addr’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:364:6: enter_function: entry to ‘shadow_continue_emulation’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:376:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:380:15: branch_true: ...to here
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:380:15: call_function: calling ‘hvm_translate_virtual_addr’ from ‘shadow_continue_emulation’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:380:15: return_function: returning to ‘shadow_continue_emulation’ from ‘hvm_translate_virtual_addr’
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:379:9: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:383:15: branch_true: ...to here
xen-4.19.2/xen/arch/x86/mm/shadow/hvm.c:383:15: danger: use of uninitialized value ‘addr’ here
#  381|                   x86_seg_cs, regs->rip, sizeof(sh_ctxt->insn_buf),
#  382|                   hvm_access_insn_fetch, sh_ctxt, &addr) &&
#  383|->              !hvm_copy_from_guest_linear(
#  384|                    sh_ctxt->insn_buf, addr, sizeof(sh_ctxt->insn_buf),
#  385|                    PFEC_insn_fetch, NULL))

Error: GCC_ANALYZER_WARNING (CWE-469): [#def672]
xen-4.19.2/xen/arch/x86/percpu.c:33:35: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/xen/arch/x86/percpu.c:30:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/percpu.c:33:35: branch_false: ...to here
xen-4.19.2/xen/arch/x86/percpu.c:33:35: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
#   31|           return 0;
#   32|   
#   33|->     if ( (p = alloc_xenheap_pages(PERCPU_ORDER, 0)) == NULL )
#   34|           return -ENOMEM;
#   35|   

Error: GCC_ANALYZER_WARNING (CWE-469): [#def673]
xen-4.19.2/xen/arch/x86/percpu.c:54:27: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
#   52|       char *p = __per_cpu_start + __per_cpu_offset[cpu];
#   53|   
#   54|->     free_xenheap_pages(p, PERCPU_ORDER);
#   55|       __per_cpu_offset[cpu] = INVALID_PERCPU_AREA;
#   56|   }

Error: GCC_ANALYZER_WARNING (CWE-835): [#def674]
xen-4.19.2/xen/arch/x86/physdev.c:58:13: warning[-Wanalyzer-infinite-loop]: infinite loop
xen-4.19.2/xen/arch/x86/physdev.c:30:12: enter_function: entry to ‘physdev_hvm_map_pirq’
xen-4.19.2/xen/arch/x86/physdev.c:58:13: danger: infinite loop here
xen-4.19.2/xen/arch/x86/physdev.c:58:13: branch_true: if it ever follows ‘true’ branch, it will always do so...
xen-4.19.2/xen/arch/x86/physdev.c:61:31: branch_true: ...to here
#   56|   
#   57|               BUILD_BUG_ON(ARRAY_SIZE(hvm_irq_dpci->girq) < NR_HVM_DOMU_IRQS);
#   58|->             list_for_each_entry ( girq,
#   59|                                     &hvm_irq_dpci->girq[*index],
#   60|                                     list )

Error: GCC_ANALYZER_WARNING (CWE-469): [#def675]
xen-4.19.2/xen/arch/x86/setup.c:496:5: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/xen/arch/x86/setup.c:968:33: enter_function: entry to ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1028:8: branch_false: following ‘false’ branch (when ‘kextra’ is NULL)...
xen-4.19.2/xen/arch/x86/setup.c:1039:5: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1343:5: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1343:5: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/xen/arch/x86/setup.c:1366:35: branch_true: following ‘true’ branch (when ‘i >= 0’)...
xen-4.19.2/xen/arch/x86/setup.c:1371:14: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1371:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1375:14: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1378:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1381:12: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1395:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1409:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1416:13: call_function: calling ‘move_xen’ from ‘__start_xen’
#  494|        * This includes a snapshot of the current stack.
#  495|        */
#  496|->     memcpy(__va(__pa(_start)), _start, _end - _start);
#  497|   
#  498|       /*

Error: GCC_ANALYZER_WARNING (CWE-469): [#def676]
xen-4.19.2/xen/arch/x86/setup.c:1339:40: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1028:8: branch_false: following ‘false’ branch (when ‘kextra’ is NULL)...
xen-4.19.2/xen/arch/x86/setup.c:1039:5: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1329:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1338:42: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1339:40: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
# 1337|            */
# 1338|           mod[mbi->mods_count].mod_start = virt_to_mfn(_stext);
# 1339|->         mod[mbi->mods_count].mod_end = __2M_rwdata_end - _stext;
# 1340|       }
# 1341|   

Error: GCC_ANALYZER_WARNING (CWE-127): [#def677]
xen-4.19.2/xen/arch/x86/setup.c:1556:25: warning[-Wanalyzer-out-of-bounds]: buffer under-read
xen-4.19.2/xen/arch/x86/setup.c:968:33: enter_function: entry to ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1028:8: branch_false: following ‘false’ branch (when ‘kextra’ is NULL)...
xen-4.19.2/xen/arch/x86/setup.c:1039:5: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1342:24: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1342:24: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/xen/arch/x86/setup.c:1343:5: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1343:5: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/xen/arch/x86/setup.c:1477:18: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1484:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1484:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1488:10: call_function: inlined call to ‘using_2M_mapping’ from ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1511:18: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1516:14: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1516:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1520:14: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1523:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1526:14: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1546:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1548:18: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1548:16: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1550:23: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1552:24: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1556:25: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1556:25: danger: out-of-bounds read from byte -16 till byte -9 but ‘boot_e820’ starts at byte 0
# 1554|                       ASSERT(j);
# 1555|                   }
# 1556|->                 map_e = boot_e820.map[j].addr + boot_e820.map[j].size;
# 1557|                   for ( j = 0; j < mbi->mods_count; ++j )
# 1558|                   {

Error: GCC_ANALYZER_WARNING (CWE-127): [#def678]
xen-4.19.2/xen/arch/x86/setup.c:1556:49: warning[-Wanalyzer-out-of-bounds]: buffer under-read
xen-4.19.2/xen/arch/x86/setup.c:968:33: enter_function: entry to ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1021:14: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1025:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1028:8: branch_false: following ‘false’ branch (when ‘kextra’ is NULL)...
xen-4.19.2/xen/arch/x86/setup.c:1039:5: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1128:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1342:24: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1342:24: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/xen/arch/x86/setup.c:1343:5: call_function: calling ‘bootstrap_map’ from ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1343:5: return_function: returning to ‘__start_xen’ from ‘bootstrap_map’
xen-4.19.2/xen/arch/x86/setup.c:1477:18: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1484:10: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1484:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1488:10: call_function: inlined call to ‘using_2M_mapping’ from ‘__start_xen’
xen-4.19.2/xen/arch/x86/setup.c:1511:18: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1516:14: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1516:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1520:14: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1523:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1526:14: branch_false: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1546:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1548:18: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1548:16: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1550:23: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1552:24: branch_true: following ‘true’ branch...
xen-4.19.2/xen/arch/x86/setup.c:1556:25: branch_true: ...to here
xen-4.19.2/xen/arch/x86/setup.c:1556:49: danger: out-of-bounds read from byte -8 till byte -1 but ‘boot_e820’ starts at byte 0
# 1554|                       ASSERT(j);
# 1555|                   }
# 1556|->                 map_e = boot_e820.map[j].addr + boot_e820.map[j].size;
# 1557|                   for ( j = 0; j < mbi->mods_count; ++j )
# 1558|                   {

Error: COMPILER_WARNING: [#def679]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c: scope_hint: Assembler messages
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:34: Error: bad expression
#   32|   {
#   33|       OFFSET(UREGS_r15, struct cpu_user_regs, r15);
#   34|->     OFFSET(UREGS_r14, struct cpu_user_regs, r14);
#   35|       OFFSET(UREGS_r13, struct cpu_user_regs, r13);
#   36|       OFFSET(UREGS_r12, struct cpu_user_regs, r12);

Error: COMPILER_WARNING: [#def680]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:34: Error: junk at end of line, first unrecognized character is `#'
#   32|   {
#   33|       OFFSET(UREGS_r15, struct cpu_user_regs, r15);
#   34|->     OFFSET(UREGS_r14, struct cpu_user_regs, r14);
#   35|       OFFSET(UREGS_r13, struct cpu_user_regs, r13);
#   36|       OFFSET(UREGS_r12, struct cpu_user_regs, r12);

Error: COMPILER_WARNING: [#def681]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:35: Error: symbol `.ascii' is already defined
#   33|       OFFSET(UREGS_r15, struct cpu_user_regs, r15);
#   34|       OFFSET(UREGS_r14, struct cpu_user_regs, r14);
#   35|->     OFFSET(UREGS_r13, struct cpu_user_regs, r13);
#   36|       OFFSET(UREGS_r12, struct cpu_user_regs, r12);
#   37|       OFFSET(UREGS_rbp, struct cpu_user_regs, rbp);

Error: COMPILER_WARNING: [#def682]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:36: Error: symbol `.ascii' is already defined
#   34|       OFFSET(UREGS_r14, struct cpu_user_regs, r14);
#   35|       OFFSET(UREGS_r13, struct cpu_user_regs, r13);
#   36|->     OFFSET(UREGS_r12, struct cpu_user_regs, r12);
#   37|       OFFSET(UREGS_rbp, struct cpu_user_regs, rbp);
#   38|       OFFSET(UREGS_rbx, struct cpu_user_regs, rbx);

Error: COMPILER_WARNING: [#def683]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:37: Error: symbol `.ascii' is already defined
#   35|       OFFSET(UREGS_r13, struct cpu_user_regs, r13);
#   36|       OFFSET(UREGS_r12, struct cpu_user_regs, r12);
#   37|->     OFFSET(UREGS_rbp, struct cpu_user_regs, rbp);
#   38|       OFFSET(UREGS_rbx, struct cpu_user_regs, rbx);
#   39|       OFFSET(UREGS_r11, struct cpu_user_regs, r11);

Error: COMPILER_WARNING: [#def684]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:38: Error: symbol `.ascii' is already defined
#   36|       OFFSET(UREGS_r12, struct cpu_user_regs, r12);
#   37|       OFFSET(UREGS_rbp, struct cpu_user_regs, rbp);
#   38|->     OFFSET(UREGS_rbx, struct cpu_user_regs, rbx);
#   39|       OFFSET(UREGS_r11, struct cpu_user_regs, r11);
#   40|       OFFSET(UREGS_r10, struct cpu_user_regs, r10);

Error: COMPILER_WARNING: [#def685]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:39: Error: symbol `.ascii' is already defined
#   37|       OFFSET(UREGS_rbp, struct cpu_user_regs, rbp);
#   38|       OFFSET(UREGS_rbx, struct cpu_user_regs, rbx);
#   39|->     OFFSET(UREGS_r11, struct cpu_user_regs, r11);
#   40|       OFFSET(UREGS_r10, struct cpu_user_regs, r10);
#   41|       OFFSET(UREGS_r9, struct cpu_user_regs, r9);

Error: COMPILER_WARNING: [#def686]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:40: Error: symbol `.ascii' is already defined
#   38|       OFFSET(UREGS_rbx, struct cpu_user_regs, rbx);
#   39|       OFFSET(UREGS_r11, struct cpu_user_regs, r11);
#   40|->     OFFSET(UREGS_r10, struct cpu_user_regs, r10);
#   41|       OFFSET(UREGS_r9, struct cpu_user_regs, r9);
#   42|       OFFSET(UREGS_r8, struct cpu_user_regs, r8);

Error: COMPILER_WARNING: [#def687]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:41: Error: symbol `.ascii' is already defined
#   39|       OFFSET(UREGS_r11, struct cpu_user_regs, r11);
#   40|       OFFSET(UREGS_r10, struct cpu_user_regs, r10);
#   41|->     OFFSET(UREGS_r9, struct cpu_user_regs, r9);
#   42|       OFFSET(UREGS_r8, struct cpu_user_regs, r8);
#   43|       OFFSET(UREGS_rax, struct cpu_user_regs, rax);

Error: COMPILER_WARNING: [#def688]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:42: Error: symbol `.ascii' is already defined
#   40|       OFFSET(UREGS_r10, struct cpu_user_regs, r10);
#   41|       OFFSET(UREGS_r9, struct cpu_user_regs, r9);
#   42|->     OFFSET(UREGS_r8, struct cpu_user_regs, r8);
#   43|       OFFSET(UREGS_rax, struct cpu_user_regs, rax);
#   44|       OFFSET(UREGS_rcx, struct cpu_user_regs, rcx);

Error: COMPILER_WARNING: [#def689]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:43: Error: symbol `.ascii' is already defined
#   41|       OFFSET(UREGS_r9, struct cpu_user_regs, r9);
#   42|       OFFSET(UREGS_r8, struct cpu_user_regs, r8);
#   43|->     OFFSET(UREGS_rax, struct cpu_user_regs, rax);
#   44|       OFFSET(UREGS_rcx, struct cpu_user_regs, rcx);
#   45|       OFFSET(UREGS_rdx, struct cpu_user_regs, rdx);

Error: COMPILER_WARNING: [#def690]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:44: Error: symbol `.ascii' is already defined
#   42|       OFFSET(UREGS_r8, struct cpu_user_regs, r8);
#   43|       OFFSET(UREGS_rax, struct cpu_user_regs, rax);
#   44|->     OFFSET(UREGS_rcx, struct cpu_user_regs, rcx);
#   45|       OFFSET(UREGS_rdx, struct cpu_user_regs, rdx);
#   46|       OFFSET(UREGS_rsi, struct cpu_user_regs, rsi);

Error: COMPILER_WARNING: [#def691]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:45: Error: symbol `.ascii' is already defined
#   43|       OFFSET(UREGS_rax, struct cpu_user_regs, rax);
#   44|       OFFSET(UREGS_rcx, struct cpu_user_regs, rcx);
#   45|->     OFFSET(UREGS_rdx, struct cpu_user_regs, rdx);
#   46|       OFFSET(UREGS_rsi, struct cpu_user_regs, rsi);
#   47|       OFFSET(UREGS_rdi, struct cpu_user_regs, rdi);

Error: COMPILER_WARNING: [#def692]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:46: Error: symbol `.ascii' is already defined
#   44|       OFFSET(UREGS_rcx, struct cpu_user_regs, rcx);
#   45|       OFFSET(UREGS_rdx, struct cpu_user_regs, rdx);
#   46|->     OFFSET(UREGS_rsi, struct cpu_user_regs, rsi);
#   47|       OFFSET(UREGS_rdi, struct cpu_user_regs, rdi);
#   48|       OFFSET(UREGS_error_code, struct cpu_user_regs, error_code);

Error: COMPILER_WARNING: [#def693]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:47: Error: symbol `.ascii' is already defined
#   45|       OFFSET(UREGS_rdx, struct cpu_user_regs, rdx);
#   46|       OFFSET(UREGS_rsi, struct cpu_user_regs, rsi);
#   47|->     OFFSET(UREGS_rdi, struct cpu_user_regs, rdi);
#   48|       OFFSET(UREGS_error_code, struct cpu_user_regs, error_code);
#   49|       OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector);

Error: COMPILER_WARNING: [#def694]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:48: Error: symbol `.ascii' is already defined
#   46|       OFFSET(UREGS_rsi, struct cpu_user_regs, rsi);
#   47|       OFFSET(UREGS_rdi, struct cpu_user_regs, rdi);
#   48|->     OFFSET(UREGS_error_code, struct cpu_user_regs, error_code);
#   49|       OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector);
#   50|       OFFSET(UREGS_rip, struct cpu_user_regs, rip);

Error: COMPILER_WARNING: [#def695]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:49: Error: symbol `.ascii' is already defined
#   47|       OFFSET(UREGS_rdi, struct cpu_user_regs, rdi);
#   48|       OFFSET(UREGS_error_code, struct cpu_user_regs, error_code);
#   49|->     OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector);
#   50|       OFFSET(UREGS_rip, struct cpu_user_regs, rip);
#   51|       OFFSET(UREGS_cs, struct cpu_user_regs, cs);

Error: COMPILER_WARNING: [#def696]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:50: Error: symbol `.ascii' is already defined
#   48|       OFFSET(UREGS_error_code, struct cpu_user_regs, error_code);
#   49|       OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector);
#   50|->     OFFSET(UREGS_rip, struct cpu_user_regs, rip);
#   51|       OFFSET(UREGS_cs, struct cpu_user_regs, cs);
#   52|       OFFSET(UREGS_eflags, struct cpu_user_regs, rflags);

Error: COMPILER_WARNING: [#def697]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:51: Error: symbol `.ascii' is already defined
#   49|       OFFSET(UREGS_entry_vector, struct cpu_user_regs, entry_vector);
#   50|       OFFSET(UREGS_rip, struct cpu_user_regs, rip);
#   51|->     OFFSET(UREGS_cs, struct cpu_user_regs, cs);
#   52|       OFFSET(UREGS_eflags, struct cpu_user_regs, rflags);
#   53|       OFFSET(UREGS_rsp, struct cpu_user_regs, rsp);

Error: COMPILER_WARNING: [#def698]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:52: Error: symbol `.ascii' is already defined
#   50|       OFFSET(UREGS_rip, struct cpu_user_regs, rip);
#   51|       OFFSET(UREGS_cs, struct cpu_user_regs, cs);
#   52|->     OFFSET(UREGS_eflags, struct cpu_user_regs, rflags);
#   53|       OFFSET(UREGS_rsp, struct cpu_user_regs, rsp);
#   54|       OFFSET(UREGS_ss, struct cpu_user_regs, ss);

Error: COMPILER_WARNING: [#def699]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:53: Error: symbol `.ascii' is already defined
#   51|       OFFSET(UREGS_cs, struct cpu_user_regs, cs);
#   52|       OFFSET(UREGS_eflags, struct cpu_user_regs, rflags);
#   53|->     OFFSET(UREGS_rsp, struct cpu_user_regs, rsp);
#   54|       OFFSET(UREGS_ss, struct cpu_user_regs, ss);
#   55|       OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es);

Error: COMPILER_WARNING: [#def700]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:54: Error: symbol `.ascii' is already defined
#   52|       OFFSET(UREGS_eflags, struct cpu_user_regs, rflags);
#   53|       OFFSET(UREGS_rsp, struct cpu_user_regs, rsp);
#   54|->     OFFSET(UREGS_ss, struct cpu_user_regs, ss);
#   55|       OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es);
#   56|       BLANK();

Error: COMPILER_WARNING: [#def701]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:55: Error: symbol `.ascii' is already defined
#   53|       OFFSET(UREGS_rsp, struct cpu_user_regs, rsp);
#   54|       OFFSET(UREGS_ss, struct cpu_user_regs, ss);
#   55|->     OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es);
#   56|       BLANK();
#   57|   

Error: COMPILER_WARNING: [#def702]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:56: Error: symbol `.ascii' is already defined
#   54|       OFFSET(UREGS_ss, struct cpu_user_regs, ss);
#   55|       OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es);
#   56|->     BLANK();
#   57|   
#   58|       /*

Error: COMPILER_WARNING: [#def703]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:57: Error: symbol `.ascii' is already defined
#   55|       OFFSET(UREGS_kernel_sizeof, struct cpu_user_regs, es);
#   56|       BLANK();
#   57|-> 
#   58|       /*
#   59|        * EFRAME_* is for the entry/exit logic where %rsp is pointing at

Error: COMPILER_WARNING: [#def704]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:67: Error: symbol `.ascii' is already defined
#   65|   
#   66|       OFFSET_EF(EFRAME_entry_vector,    entry_vector);
#   67|->     OFFSET_EF(EFRAME_rip,             rip);
#   68|       OFFSET_EF(EFRAME_cs,              cs);
#   69|       OFFSET_EF(EFRAME_eflags,          eflags);

Error: COMPILER_WARNING: [#def705]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:68: Error: symbol `.ascii' is already defined
#   66|       OFFSET_EF(EFRAME_entry_vector,    entry_vector);
#   67|       OFFSET_EF(EFRAME_rip,             rip);
#   68|->     OFFSET_EF(EFRAME_cs,              cs);
#   69|       OFFSET_EF(EFRAME_eflags,          eflags);
#   70|   

Error: COMPILER_WARNING: [#def706]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:69: Error: symbol `.ascii' is already defined
#   67|       OFFSET_EF(EFRAME_rip,             rip);
#   68|       OFFSET_EF(EFRAME_cs,              cs);
#   69|->     OFFSET_EF(EFRAME_eflags,          eflags);
#   70|   
#   71|       /*

Error: COMPILER_WARNING: [#def707]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:70: Error: symbol `.ascii' is already defined
#   68|       OFFSET_EF(EFRAME_cs,              cs);
#   69|       OFFSET_EF(EFRAME_eflags,          eflags);
#   70|-> 
#   71|       /*
#   72|        * These aren't real fields.  They're spare space, used by the IST

Error: COMPILER_WARNING: [#def708]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:76: Error: symbol `.ascii' is already defined
#   74|        */
#   75|       OFFSET_EF(EFRAME_shadow_scf,      eflags, +4);
#   76|->     OFFSET_EF(EFRAME_shadow_sel,      eflags, +6);
#   77|   
#   78|       OFFSET_EF(EFRAME_rsp,             rsp);

Error: COMPILER_WARNING: [#def709]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:77: Error: symbol `.ascii' is already defined
#   75|       OFFSET_EF(EFRAME_shadow_scf,      eflags, +4);
#   76|       OFFSET_EF(EFRAME_shadow_sel,      eflags, +6);
#   77|-> 
#   78|       OFFSET_EF(EFRAME_rsp,             rsp);
#   79|       BLANK();

Error: COMPILER_WARNING: [#def710]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:79: Error: symbol `.ascii' is already defined
#   77|   
#   78|       OFFSET_EF(EFRAME_rsp,             rsp);
#   79|->     BLANK();
#   80|   
#   81|   #undef OFFSET_EF

Error: COMPILER_WARNING: [#def711]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:80: Error: symbol `.ascii' is already defined
#   78|       OFFSET_EF(EFRAME_rsp,             rsp);
#   79|       BLANK();
#   80|-> 
#   81|   #undef OFFSET_EF
#   82|   

Error: COMPILER_WARNING: [#def712]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:84: Error: symbol `.ascii' is already defined
#   82|   
#   83|       OFFSET(VCPU_processor, struct vcpu, processor);
#   84|->     OFFSET(VCPU_domain, struct vcpu, domain);
#   85|       OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map);
#   86|       OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce);

Error: COMPILER_WARNING: [#def713]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:85: Error: symbol `.ascii' is already defined
#   83|       OFFSET(VCPU_processor, struct vcpu, processor);
#   84|       OFFSET(VCPU_domain, struct vcpu, domain);
#   85|->     OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map);
#   86|       OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce);
#   87|       OFFSET(VCPU_thread_flags, struct vcpu, arch.flags);

Error: COMPILER_WARNING: [#def714]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:86: Error: symbol `.ascii' is already defined
#   84|       OFFSET(VCPU_domain, struct vcpu, domain);
#   85|       OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map);
#   86|->     OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce);
#   87|       OFFSET(VCPU_thread_flags, struct vcpu, arch.flags);
#   88|       OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip);

Error: COMPILER_WARNING: [#def715]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:87: Error: symbol `.ascii' is already defined
#   85|       OFFSET(VCPU_vcpu_info, struct vcpu, vcpu_info_area.map);
#   86|       OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce);
#   87|->     OFFSET(VCPU_thread_flags, struct vcpu, arch.flags);
#   88|       OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip);
#   89|       OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs);

Error: COMPILER_WARNING: [#def716]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:88: Error: symbol `.ascii' is already defined
#   86|       OFFSET(VCPU_trap_bounce, struct vcpu, arch.pv.trap_bounce);
#   87|       OFFSET(VCPU_thread_flags, struct vcpu, arch.flags);
#   88|->     OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip);
#   89|       OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs);
#   90|       OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip);

Error: COMPILER_WARNING: [#def717]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:89: Error: symbol `.ascii' is already defined
#   87|       OFFSET(VCPU_thread_flags, struct vcpu, arch.flags);
#   88|       OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip);
#   89|->     OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs);
#   90|       OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip);
#   91|       OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip);

Error: COMPILER_WARNING: [#def718]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:90: Error: symbol `.ascii' is already defined
#   88|       OFFSET(VCPU_event_addr, struct vcpu, arch.pv.event_callback_eip);
#   89|       OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs);
#   90|->     OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip);
#   91|       OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip);
#   92|       OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs);

Error: COMPILER_WARNING: [#def719]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:91: Error: symbol `.ascii' is already defined
#   89|       OFFSET(VCPU_event_sel, struct vcpu, arch.pv.event_callback_cs);
#   90|       OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip);
#   91|->     OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip);
#   92|       OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs);
#   93|       OFFSET(VCPU_syscall32_disables_events,

Error: COMPILER_WARNING: [#def720]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:92: Error: symbol `.ascii' is already defined
#   90|       OFFSET(VCPU_syscall_addr, struct vcpu, arch.pv.syscall_callback_eip);
#   91|       OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip);
#   92|->     OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs);
#   93|       OFFSET(VCPU_syscall32_disables_events,
#   94|              struct vcpu, arch.pv.syscall32_disables_events);

Error: COMPILER_WARNING: [#def721]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:93: Error: symbol `.ascii' is already defined
#   91|       OFFSET(VCPU_syscall32_addr, struct vcpu, arch.pv.syscall32_callback_eip);
#   92|       OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs);
#   93|->     OFFSET(VCPU_syscall32_disables_events,
#   94|              struct vcpu, arch.pv.syscall32_disables_events);
#   95|       OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip);

Error: COMPILER_WARNING: [#def722]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:94: Error: symbol `.ascii' is already defined
#   92|       OFFSET(VCPU_syscall32_sel, struct vcpu, arch.pv.syscall32_callback_cs);
#   93|       OFFSET(VCPU_syscall32_disables_events,
#   94|->            struct vcpu, arch.pv.syscall32_disables_events);
#   95|       OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip);
#   96|       OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs);

Error: COMPILER_WARNING: [#def723]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:96: Error: symbol `.ascii' is already defined
#   94|              struct vcpu, arch.pv.syscall32_disables_events);
#   95|       OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip);
#   96|->     OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs);
#   97|       OFFSET(VCPU_sysenter_disables_events,
#   98|              struct vcpu, arch.pv.sysenter_disables_events);

Error: COMPILER_WARNING: [#def724]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:97: Error: symbol `.ascii' is already defined
#   95|       OFFSET(VCPU_sysenter_addr, struct vcpu, arch.pv.sysenter_callback_eip);
#   96|       OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs);
#   97|->     OFFSET(VCPU_sysenter_disables_events,
#   98|              struct vcpu, arch.pv.sysenter_disables_events);
#   99|       OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt);

Error: COMPILER_WARNING: [#def725]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:98: Error: symbol `.ascii' is already defined
#   96|       OFFSET(VCPU_sysenter_sel, struct vcpu, arch.pv.sysenter_callback_cs);
#   97|       OFFSET(VCPU_sysenter_disables_events,
#   98|->            struct vcpu, arch.pv.sysenter_disables_events);
#   99|       OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt);
#  100|       OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp);

Error: COMPILER_WARNING: [#def726]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:100: Error: symbol `.ascii' is already defined
#   98|              struct vcpu, arch.pv.sysenter_disables_events);
#   99|       OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt);
#  100|->     OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp);
#  101|       OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss);
#  102|       OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl);

Error: COMPILER_WARNING: [#def727]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:101: Error: symbol `.ascii' is already defined
#   99|       OFFSET(VCPU_trap_ctxt, struct vcpu, arch.pv.trap_ctxt);
#  100|       OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp);
#  101|->     OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss);
#  102|       OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl);
#  103|       OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags);

Error: COMPILER_WARNING: [#def728]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:102: Error: symbol `.ascii' is already defined
#  100|       OFFSET(VCPU_kernel_sp, struct vcpu, arch.pv.kernel_sp);
#  101|       OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss);
#  102|->     OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl);
#  103|       OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags);
#  104|       OFFSET(VCPU_cr3, struct vcpu, arch.cr3);

Error: COMPILER_WARNING: [#def729]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:103: Error: symbol `.ascii' is already defined
#  101|       OFFSET(VCPU_kernel_ss, struct vcpu, arch.pv.kernel_ss);
#  102|       OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl);
#  103|->     OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags);
#  104|       OFFSET(VCPU_cr3, struct vcpu, arch.cr3);
#  105|       OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs);

Error: COMPILER_WARNING: [#def730]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:104: Error: symbol `.ascii' is already defined
#  102|       OFFSET(VCPU_iopl, struct vcpu, arch.pv.iopl);
#  103|       OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags);
#  104|->     OFFSET(VCPU_cr3, struct vcpu, arch.cr3);
#  105|       OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs);
#  106|       OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending);

Error: COMPILER_WARNING: [#def731]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:105: Error: symbol `.ascii' is already defined
#  103|       OFFSET(VCPU_guest_context_flags, struct vcpu, arch.pv.vgc_flags);
#  104|       OFFSET(VCPU_cr3, struct vcpu, arch.cr3);
#  105|->     OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs);
#  106|       OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending);
#  107|       OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending);

Error: COMPILER_WARNING: [#def732]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:106: Error: symbol `.ascii' is already defined
#  104|       OFFSET(VCPU_cr3, struct vcpu, arch.cr3);
#  105|       OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs);
#  106|->     OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending);
#  107|       OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending);
#  108|       OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask);

Error: COMPILER_WARNING: [#def733]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:107: Error: symbol `.ascii' is already defined
#  105|       OFFSET(VCPU_arch_msrs, struct vcpu, arch.msrs);
#  106|       OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending);
#  107|->     OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending);
#  108|       OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask);
#  109|       OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask);

Error: COMPILER_WARNING: [#def734]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:108: Error: symbol `.ascii' is already defined
#  106|       OFFSET(VCPU_nmi_pending, struct vcpu, arch.nmi_pending);
#  107|       OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending);
#  108|->     OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask);
#  109|       OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask);
#  110|       OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask);

Error: COMPILER_WARNING: [#def735]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:109: Error: symbol `.ascii' is already defined
#  107|       OFFSET(VCPU_mce_pending, struct vcpu, arch.mce_pending);
#  108|       OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask);
#  109|->     OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask);
#  110|       OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask);
#  111|       DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI);

Error: COMPILER_WARNING: [#def736]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:110: Error: symbol `.ascii' is already defined
#  108|       OFFSET(VCPU_nmi_old_mask, struct vcpu, arch.nmi_state.old_mask);
#  109|       OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask);
#  110|->     OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask);
#  111|       DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI);
#  112|       DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE);

Error: COMPILER_WARNING: [#def737]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:111: Error: symbol `.ascii' is already defined
#  109|       OFFSET(VCPU_mce_old_mask, struct vcpu, arch.mce_state.old_mask);
#  110|       OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask);
#  111|->     DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI);
#  112|       DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE);
#  113|       DEFINE(_VGCF_syscall_disables_events,  _VGCF_syscall_disables_events);

Error: COMPILER_WARNING: [#def738]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:112: Error: symbol `.ascii' is already defined
#  110|       OFFSET(VCPU_async_exception_mask, struct vcpu, arch.async_exception_mask);
#  111|       DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI);
#  112|->     DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE);
#  113|       DEFINE(_VGCF_syscall_disables_events,  _VGCF_syscall_disables_events);
#  114|       BLANK();

Error: COMPILER_WARNING: [#def739]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:113: Error: symbol `.ascii' is already defined
#  111|       DEFINE(VCPU_TRAP_NMI, VCPU_TRAP_NMI);
#  112|       DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE);
#  113|->     DEFINE(_VGCF_syscall_disables_events,  _VGCF_syscall_disables_events);
#  114|       BLANK();
#  115|   

Error: COMPILER_WARNING: [#def740]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:114: Error: symbol `.ascii' is already defined
#  112|       DEFINE(VCPU_TRAP_MCE, VCPU_TRAP_MCE);
#  113|       DEFINE(_VGCF_syscall_disables_events,  _VGCF_syscall_disables_events);
#  114|->     BLANK();
#  115|   
#  116|   #ifdef CONFIG_HVM

Error: COMPILER_WARNING: [#def741]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:115: Error: symbol `.ascii' is already defined
#  113|       DEFINE(_VGCF_syscall_disables_events,  _VGCF_syscall_disables_events);
#  114|       BLANK();
#  115|-> 
#  116|   #ifdef CONFIG_HVM
#  117|       OFFSET(VCPU_svm_vmcb_pa, struct vcpu, arch.hvm.svm.vmcb_pa);

Error: COMPILER_WARNING: [#def742]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:118: Error: symbol `.ascii' is already defined
#  116|   #ifdef CONFIG_HVM
#  117|       OFFSET(VCPU_svm_vmcb_pa, struct vcpu, arch.hvm.svm.vmcb_pa);
#  118|->     OFFSET(VCPU_svm_vmcb, struct vcpu, arch.hvm.svm.vmcb);
#  119|       BLANK();
#  120|   

Error: COMPILER_WARNING: [#def743]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:119: Error: symbol `.ascii' is already defined
#  117|       OFFSET(VCPU_svm_vmcb_pa, struct vcpu, arch.hvm.svm.vmcb_pa);
#  118|       OFFSET(VCPU_svm_vmcb, struct vcpu, arch.hvm.svm.vmcb);
#  119|->     BLANK();
#  120|   
#  121|       OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched);

Error: COMPILER_WARNING: [#def744]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:120: Error: symbol `.ascii' is already defined
#  118|       OFFSET(VCPU_svm_vmcb, struct vcpu, arch.hvm.svm.vmcb);
#  119|       BLANK();
#  120|-> 
#  121|       OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched);
#  122|       OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode);

Error: COMPILER_WARNING: [#def745]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:122: Error: symbol `.ascii' is already defined
#  120|   
#  121|       OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched);
#  122|->     OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode);
#  123|       OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate);
#  124|       OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask);

Error: COMPILER_WARNING: [#def746]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:123: Error: symbol `.ascii' is already defined
#  121|       OFFSET(VCPU_vmx_launched, struct vcpu, arch.hvm.vmx.launched);
#  122|       OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode);
#  123|->     OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate);
#  124|       OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask);
#  125|       OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]);

Error: COMPILER_WARNING: [#def747]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:124: Error: symbol `.ascii' is already defined
#  122|       OFFSET(VCPU_vmx_realmode, struct vcpu, arch.hvm.vmx.vmx_realmode);
#  123|       OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate);
#  124|->     OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask);
#  125|       OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]);
#  126|       BLANK();

Error: COMPILER_WARNING: [#def748]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:125: Error: symbol `.ascii' is already defined
#  123|       OFFSET(VCPU_vmx_emulate, struct vcpu, arch.hvm.vmx.vmx_emulate);
#  124|       OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask);
#  125|->     OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]);
#  126|       BLANK();
#  127|   

Error: COMPILER_WARNING: [#def749]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:126: Error: symbol `.ascii' is already defined
#  124|       OFFSET(VCPU_vm86_seg_mask, struct vcpu, arch.hvm.vmx.vm86_segment_mask);
#  125|       OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]);
#  126|->     BLANK();
#  127|   
#  128|       OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode);

Error: COMPILER_WARNING: [#def750]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:127: Error: symbol `.ascii' is already defined
#  125|       OFFSET(VCPU_hvm_guest_cr2, struct vcpu, arch.hvm.guest_cr[2]);
#  126|       BLANK();
#  127|-> 
#  128|       OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode);
#  129|       OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m);

Error: COMPILER_WARNING: [#def751]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:129: Error: symbol `.ascii' is already defined
#  127|   
#  128|       OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode);
#  129|->     OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m);
#  130|       OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled);
#  131|       BLANK();

Error: COMPILER_WARNING: [#def752]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:130: Error: symbol `.ascii' is already defined
#  128|       OFFSET(VCPU_nhvm_guestmode, struct vcpu, arch.hvm.nvcpu.nv_guestmode);
#  129|       OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m);
#  130|->     OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled);
#  131|       BLANK();
#  132|   #endif

Error: COMPILER_WARNING: [#def753]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:131: Error: symbol `.ascii' is already defined
#  129|       OFFSET(VCPU_nhvm_p2m, struct vcpu, arch.hvm.nvcpu.nv_p2m);
#  130|       OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled);
#  131|->     BLANK();
#  132|   #endif
#  133|   

Error: COMPILER_WARNING: [#def754]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:132: Error: symbol `.ascii' is already defined
#  130|       OFFSET(VCPU_nsvm_hap_enabled, struct vcpu, arch.hvm.nvcpu.u.nsvm.ns_hap_enabled);
#  131|       BLANK();
#  132|-> #endif
#  133|   
#  134|   #ifdef CONFIG_PV32

Error: COMPILER_WARNING: [#def755]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:136: Error: symbol `.ascii' is already defined
#  134|   #ifdef CONFIG_PV32
#  135|       OFFSET(DOMAIN_is_32bit_pv, struct domain, arch.pv.is_32bit);
#  136|->     BLANK();
#  137|   
#  138|       OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending);

Error: COMPILER_WARNING: [#def756]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:137: Error: symbol `.ascii' is already defined
#  135|       OFFSET(DOMAIN_is_32bit_pv, struct domain, arch.pv.is_32bit);
#  136|       BLANK();
#  137|-> 
#  138|       OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending);
#  139|       OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask);

Error: COMPILER_WARNING: [#def757]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:139: Error: symbol `.ascii' is already defined
#  137|   
#  138|       OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending);
#  139|->     OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask);
#  140|       BLANK();
#  141|   #endif

Error: COMPILER_WARNING: [#def758]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:140: Error: symbol `.ascii' is already defined
#  138|       OFFSET(COMPAT_VCPUINFO_upcall_pending, struct compat_vcpu_info, evtchn_upcall_pending);
#  139|       OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask);
#  140|->     BLANK();
#  141|   #endif
#  142|   

Error: COMPILER_WARNING: [#def759]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:141: Error: symbol `.ascii' is already defined
#  139|       OFFSET(COMPAT_VCPUINFO_upcall_mask, struct compat_vcpu_info, evtchn_upcall_mask);
#  140|       BLANK();
#  141|-> #endif
#  142|   
#  143|   #ifdef CONFIG_PV

Error: COMPILER_WARNING: [#def760]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:145: Error: symbol `.ascii' is already defined
#  143|   #ifdef CONFIG_PV
#  144|       OFFSET(VCPUINFO_upcall_pending, struct vcpu_info, evtchn_upcall_pending);
#  145|->     OFFSET(VCPUINFO_upcall_mask, struct vcpu_info, evtchn_upcall_mask);
#  146|       BLANK();
#  147|   #endif

Error: COMPILER_WARNING: [#def761]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:146: Error: symbol `.ascii' is already defined
#  144|       OFFSET(VCPUINFO_upcall_pending, struct vcpu_info, evtchn_upcall_pending);
#  145|       OFFSET(VCPUINFO_upcall_mask, struct vcpu_info, evtchn_upcall_mask);
#  146|->     BLANK();
#  147|   #endif
#  148|   

Error: COMPILER_WARNING: [#def762]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:147: Error: symbol `.ascii' is already defined
#  145|       OFFSET(VCPUINFO_upcall_mask, struct vcpu_info, evtchn_upcall_mask);
#  146|       BLANK();
#  147|-> #endif
#  148|   
#  149|       OFFSET(CPUINFO_guest_cpu_user_regs, struct cpu_info, guest_cpu_user_regs);

Error: COMPILER_WARNING: [#def763]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:150: Error: symbol `.ascii' is already defined
#  148|   
#  149|       OFFSET(CPUINFO_guest_cpu_user_regs, struct cpu_info, guest_cpu_user_regs);
#  150|->     OFFSET(CPUINFO_error_code, struct cpu_info, guest_cpu_user_regs.error_code);
#  151|       OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip);
#  152|       OFFSET(CPUINFO_processor_id, struct cpu_info, processor_id);

Error: COMPILER_WARNING: [#def764]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:151: Error: symbol `.ascii' is already defined
#  149|       OFFSET(CPUINFO_guest_cpu_user_regs, struct cpu_info, guest_cpu_user_regs);
#  150|       OFFSET(CPUINFO_error_code, struct cpu_info, guest_cpu_user_regs.error_code);
#  151|->     OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip);
#  152|       OFFSET(CPUINFO_processor_id, struct cpu_info, processor_id);
#  153|       OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel);

Error: COMPILER_WARNING: [#def765]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:152: Error: symbol `.ascii' is already defined
#  150|       OFFSET(CPUINFO_error_code, struct cpu_info, guest_cpu_user_regs.error_code);
#  151|       OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip);
#  152|->     OFFSET(CPUINFO_processor_id, struct cpu_info, processor_id);
#  153|       OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel);
#  154|       OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu);

Error: COMPILER_WARNING: [#def766]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:153: Error: symbol `.ascii' is already defined
#  151|       OFFSET(CPUINFO_rip, struct cpu_info, guest_cpu_user_regs.rip);
#  152|       OFFSET(CPUINFO_processor_id, struct cpu_info, processor_id);
#  153|->     OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel);
#  154|       OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu);
#  155|       OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset);

Error: COMPILER_WARNING: [#def767]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:154: Error: symbol `.ascii' is already defined
#  152|       OFFSET(CPUINFO_processor_id, struct cpu_info, processor_id);
#  153|       OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel);
#  154|->     OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu);
#  155|       OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset);
#  156|       OFFSET(CPUINFO_cr4, struct cpu_info, cr4);

Error: COMPILER_WARNING: [#def768]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:155: Error: symbol `.ascii' is already defined
#  153|       OFFSET(CPUINFO_verw_sel, struct cpu_info, verw_sel);
#  154|       OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu);
#  155|->     OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset);
#  156|       OFFSET(CPUINFO_cr4, struct cpu_info, cr4);
#  157|       OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3);

Error: COMPILER_WARNING: [#def769]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:156: Error: symbol `.ascii' is already defined
#  154|       OFFSET(CPUINFO_current_vcpu, struct cpu_info, current_vcpu);
#  155|       OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset);
#  156|->     OFFSET(CPUINFO_cr4, struct cpu_info, cr4);
#  157|       OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3);
#  158|       OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3);

Error: COMPILER_WARNING: [#def770]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:157: Error: symbol `.ascii' is already defined
#  155|       OFFSET(CPUINFO_per_cpu_offset, struct cpu_info, per_cpu_offset);
#  156|       OFFSET(CPUINFO_cr4, struct cpu_info, cr4);
#  157|->     OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3);
#  158|       OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3);
#  159|       OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl);

Error: COMPILER_WARNING: [#def771]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:158: Error: symbol `.ascii' is already defined
#  156|       OFFSET(CPUINFO_cr4, struct cpu_info, cr4);
#  157|       OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3);
#  158|->     OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3);
#  159|       OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl);
#  160|       OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl);

Error: COMPILER_WARNING: [#def772]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:159: Error: symbol `.ascii' is already defined
#  157|       OFFSET(CPUINFO_xen_cr3, struct cpu_info, xen_cr3);
#  158|       OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3);
#  159|->     OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl);
#  160|       OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl);
#  161|       OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl);

Error: COMPILER_WARNING: [#def773]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:160: Error: symbol `.ascii' is already defined
#  158|       OFFSET(CPUINFO_pv_cr3, struct cpu_info, pv_cr3);
#  159|       OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl);
#  160|->     OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl);
#  161|       OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl);
#  162|       OFFSET(CPUINFO_scf, struct cpu_info, scf);

Error: COMPILER_WARNING: [#def774]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:161: Error: symbol `.ascii' is already defined
#  159|       OFFSET(CPUINFO_shadow_spec_ctrl, struct cpu_info, shadow_spec_ctrl);
#  160|       OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl);
#  161|->     OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl);
#  162|       OFFSET(CPUINFO_scf, struct cpu_info, scf);
#  163|       OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed);

Error: COMPILER_WARNING: [#def775]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:162: Error: symbol `.ascii' is already defined
#  160|       OFFSET(CPUINFO_xen_spec_ctrl, struct cpu_info, xen_spec_ctrl);
#  161|       OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl);
#  162|->     OFFSET(CPUINFO_scf, struct cpu_info, scf);
#  163|       OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed);
#  164|       OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3);

Error: COMPILER_WARNING: [#def776]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:163: Error: symbol `.ascii' is already defined
#  161|       OFFSET(CPUINFO_last_spec_ctrl, struct cpu_info, last_spec_ctrl);
#  162|       OFFSET(CPUINFO_scf, struct cpu_info, scf);
#  163|->     OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed);
#  164|       OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3);
#  165|       DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info));

Error: COMPILER_WARNING: [#def777]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:164: Error: symbol `.ascii' is already defined
#  162|       OFFSET(CPUINFO_scf, struct cpu_info, scf);
#  163|       OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed);
#  164|->     OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3);
#  165|       DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info));
#  166|       BLANK();

Error: COMPILER_WARNING: [#def778]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:165: Error: symbol `.ascii' is already defined
#  163|       OFFSET(CPUINFO_root_pgt_changed, struct cpu_info, root_pgt_changed);
#  164|       OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3);
#  165|->     DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info));
#  166|       BLANK();
#  167|   

Error: COMPILER_WARNING: [#def779]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:166: Error: symbol `.ascii' is already defined
#  164|       OFFSET(CPUINFO_use_pv_cr3, struct cpu_info, use_pv_cr3);
#  165|       DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info));
#  166|->     BLANK();
#  167|   
#  168|   #ifdef CONFIG_PV

Error: COMPILER_WARNING: [#def780]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:167: Error: symbol `.ascii' is already defined
#  165|       DEFINE(CPUINFO_sizeof, sizeof(struct cpu_info));
#  166|       BLANK();
#  167|-> 
#  168|   #ifdef CONFIG_PV
#  169|       OFFSET(TRAPINFO_eip, struct trap_info, address);

Error: COMPILER_WARNING: [#def781]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:170: Error: symbol `.ascii' is already defined
#  168|   #ifdef CONFIG_PV
#  169|       OFFSET(TRAPINFO_eip, struct trap_info, address);
#  170|->     OFFSET(TRAPINFO_cs, struct trap_info, cs);
#  171|       OFFSET(TRAPINFO_flags, struct trap_info, flags);
#  172|       DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info));

Error: COMPILER_WARNING: [#def782]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:171: Error: symbol `.ascii' is already defined
#  169|       OFFSET(TRAPINFO_eip, struct trap_info, address);
#  170|       OFFSET(TRAPINFO_cs, struct trap_info, cs);
#  171|->     OFFSET(TRAPINFO_flags, struct trap_info, flags);
#  172|       DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info));
#  173|       BLANK();

Error: COMPILER_WARNING: [#def783]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:172: Error: symbol `.ascii' is already defined
#  170|       OFFSET(TRAPINFO_cs, struct trap_info, cs);
#  171|       OFFSET(TRAPINFO_flags, struct trap_info, flags);
#  172|->     DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info));
#  173|       BLANK();
#  174|   

Error: COMPILER_WARNING: [#def784]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:173: Error: symbol `.ascii' is already defined
#  171|       OFFSET(TRAPINFO_flags, struct trap_info, flags);
#  172|       DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info));
#  173|->     BLANK();
#  174|   
#  175|       OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code);

Error: COMPILER_WARNING: [#def785]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:174: Error: symbol `.ascii' is already defined
#  172|       DEFINE(TRAPINFO_sizeof, sizeof(struct trap_info));
#  173|       BLANK();
#  174|-> 
#  175|       OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code);
#  176|       OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags);

Error: COMPILER_WARNING: [#def786]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:176: Error: symbol `.ascii' is already defined
#  174|   
#  175|       OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code);
#  176|->     OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags);
#  177|       OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs);
#  178|       OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip);

Error: COMPILER_WARNING: [#def787]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:177: Error: symbol `.ascii' is already defined
#  175|       OFFSET(TRAPBOUNCE_error_code, struct trap_bounce, error_code);
#  176|       OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags);
#  177|->     OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs);
#  178|       OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip);
#  179|       BLANK();

Error: COMPILER_WARNING: [#def788]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:178: Error: symbol `.ascii' is already defined
#  176|       OFFSET(TRAPBOUNCE_flags, struct trap_bounce, flags);
#  177|       OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs);
#  178|->     OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip);
#  179|       BLANK();
#  180|   #endif

Error: COMPILER_WARNING: [#def789]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:179: Error: symbol `.ascii' is already defined
#  177|       OFFSET(TRAPBOUNCE_cs, struct trap_bounce, cs);
#  178|       OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip);
#  179|->     BLANK();
#  180|   #endif
#  181|   

Error: COMPILER_WARNING: [#def790]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:180: Error: symbol `.ascii' is already defined
#  178|       OFFSET(TRAPBOUNCE_eip, struct trap_bounce, eip);
#  179|       BLANK();
#  180|-> #endif
#  181|   
#  182|       OFFSET(VCPUMSR_spec_ctrl_raw, struct vcpu_msrs, spec_ctrl.raw);

Error: COMPILER_WARNING: [#def791]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:183: Error: symbol `.ascii' is already defined
#  181|   
#  182|       OFFSET(VCPUMSR_spec_ctrl_raw, struct vcpu_msrs, spec_ctrl.raw);
#  183|->     BLANK();
#  184|   
#  185|   #ifdef CONFIG_PERF_COUNTERS

Error: COMPILER_WARNING: [#def792]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:184: Error: symbol `.ascii' is already defined
#  182|       OFFSET(VCPUMSR_spec_ctrl_raw, struct vcpu_msrs, spec_ctrl.raw);
#  183|       BLANK();
#  184|-> 
#  185|   #ifdef CONFIG_PERF_COUNTERS
#  186|       DEFINE(ASM_PERFC_exceptions, PERFC_exceptions);

Error: COMPILER_WARNING: [#def793]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:191: Error: symbol `.ascii' is already defined
#  189|   
#  190|       DEFINE(IRQSTAT_shift, ilog2(sizeof(irq_cpustat_t)));
#  191|->     OFFSET(IRQSTAT_softirq_pending, irq_cpustat_t, __softirq_pending);
#  192|       BLANK();
#  193|   

Error: COMPILER_WARNING: [#def794]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:192: Error: symbol `.ascii' is already defined
#  190|       DEFINE(IRQSTAT_shift, ilog2(sizeof(irq_cpustat_t)));
#  191|       OFFSET(IRQSTAT_softirq_pending, irq_cpustat_t, __softirq_pending);
#  192|->     BLANK();
#  193|   
#  194|       OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability);

Error: COMPILER_WARNING: [#def795]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:193: Error: symbol `.ascii' is already defined
#  191|       OFFSET(IRQSTAT_softirq_pending, irq_cpustat_t, __softirq_pending);
#  192|       BLANK();
#  193|-> 
#  194|       OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability);
#  195|       BLANK();

Error: COMPILER_WARNING: [#def796]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:195: Error: symbol `.ascii' is already defined
#  193|   
#  194|       OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability);
#  195|->     BLANK();
#  196|   
#  197|       OFFSET(MB_flags, multiboot_info_t, flags);

Error: COMPILER_WARNING: [#def797]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:196: Error: symbol `.ascii' is already defined
#  194|       OFFSET(CPUINFO_features, struct cpuinfo_x86, x86_capability);
#  195|       BLANK();
#  196|-> 
#  197|       OFFSET(MB_flags, multiboot_info_t, flags);
#  198|       OFFSET(MB_cmdline, multiboot_info_t, cmdline);

Error: COMPILER_WARNING: [#def798]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:198: Error: symbol `.ascii' is already defined
#  196|   
#  197|       OFFSET(MB_flags, multiboot_info_t, flags);
#  198|->     OFFSET(MB_cmdline, multiboot_info_t, cmdline);
#  199|       OFFSET(MB_mem_lower, multiboot_info_t, mem_lower);
#  200|       BLANK();

Error: COMPILER_WARNING: [#def799]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:199: Error: symbol `.ascii' is already defined
#  197|       OFFSET(MB_flags, multiboot_info_t, flags);
#  198|       OFFSET(MB_cmdline, multiboot_info_t, cmdline);
#  199|->     OFFSET(MB_mem_lower, multiboot_info_t, mem_lower);
#  200|       BLANK();
#  201|   

Error: COMPILER_WARNING: [#def800]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:200: Error: symbol `.ascii' is already defined
#  198|       OFFSET(MB_cmdline, multiboot_info_t, cmdline);
#  199|       OFFSET(MB_mem_lower, multiboot_info_t, mem_lower);
#  200|->     BLANK();
#  201|   
#  202|       DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t));

Error: COMPILER_WARNING: [#def801]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:201: Error: symbol `.ascii' is already defined
#  199|       OFFSET(MB_mem_lower, multiboot_info_t, mem_lower);
#  200|       BLANK();
#  201|-> 
#  202|       DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t));
#  203|       OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size);

Error: COMPILER_WARNING: [#def802]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:203: Error: symbol `.ascii' is already defined
#  201|   
#  202|       DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t));
#  203|->     OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size);
#  204|       OFFSET(MB2_tag_type, multiboot2_tag_t, type);
#  205|       OFFSET(MB2_tag_size, multiboot2_tag_t, size);

Error: COMPILER_WARNING: [#def803]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:204: Error: symbol `.ascii' is already defined
#  202|       DEFINE(MB2_fixed_sizeof, sizeof(multiboot2_fixed_t));
#  203|       OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size);
#  204|->     OFFSET(MB2_tag_type, multiboot2_tag_t, type);
#  205|       OFFSET(MB2_tag_size, multiboot2_tag_t, size);
#  206|       OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr);

Error: COMPILER_WARNING: [#def804]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:205: Error: symbol `.ascii' is already defined
#  203|       OFFSET(MB2_fixed_total_size, multiboot2_fixed_t, total_size);
#  204|       OFFSET(MB2_tag_type, multiboot2_tag_t, type);
#  205|->     OFFSET(MB2_tag_size, multiboot2_tag_t, size);
#  206|       OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr);
#  207|       OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower);

Error: COMPILER_WARNING: [#def805]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:206: Error: symbol `.ascii' is already defined
#  204|       OFFSET(MB2_tag_type, multiboot2_tag_t, type);
#  205|       OFFSET(MB2_tag_size, multiboot2_tag_t, size);
#  206|->     OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr);
#  207|       OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower);
#  208|       OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer);

Error: COMPILER_WARNING: [#def806]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:207: Error: symbol `.ascii' is already defined
#  205|       OFFSET(MB2_tag_size, multiboot2_tag_t, size);
#  206|       OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr);
#  207|->     OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower);
#  208|       OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer);
#  209|       OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer);

Error: COMPILER_WARNING: [#def807]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:208: Error: symbol `.ascii' is already defined
#  206|       OFFSET(MB2_load_base_addr, multiboot2_tag_load_base_addr_t, load_base_addr);
#  207|       OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower);
#  208|->     OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer);
#  209|       OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer);
#  210|       OFFSET(MB2_tag_string, multiboot2_tag_string_t, string);

Error: COMPILER_WARNING: [#def808]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:209: Error: symbol `.ascii' is already defined
#  207|       OFFSET(MB2_mem_lower, multiboot2_tag_basic_meminfo_t, mem_lower);
#  208|       OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer);
#  209|->     OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer);
#  210|       OFFSET(MB2_tag_string, multiboot2_tag_string_t, string);
#  211|       BLANK();

Error: COMPILER_WARNING: [#def809]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:210: Error: symbol `.ascii' is already defined
#  208|       OFFSET(MB2_efi64_st, multiboot2_tag_efi64_t, pointer);
#  209|       OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer);
#  210|->     OFFSET(MB2_tag_string, multiboot2_tag_string_t, string);
#  211|       BLANK();
#  212|   

Error: COMPILER_WARNING: [#def810]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:211: Error: symbol `.ascii' is already defined
#  209|       OFFSET(MB2_efi64_ih, multiboot2_tag_efi64_ih_t, pointer);
#  210|       OFFSET(MB2_tag_string, multiboot2_tag_string_t, string);
#  211|->     BLANK();
#  212|   
#  213|       OFFSET(DOMAIN_vm_assist, struct domain, vm_assist);

Error: COMPILER_WARNING: [#def811]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:212: Error: symbol `.ascii' is already defined
#  210|       OFFSET(MB2_tag_string, multiboot2_tag_string_t, string);
#  211|       BLANK();
#  212|-> 
#  213|       OFFSET(DOMAIN_vm_assist, struct domain, vm_assist);
#  214|       BLANK();

Error: COMPILER_WARNING: [#def812]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:214: Error: symbol `.ascii' is already defined
#  212|   
#  213|       OFFSET(DOMAIN_vm_assist, struct domain, vm_assist);
#  214|->     BLANK();
#  215|   
#  216|   #ifdef CONFIG_VIDEO

Error: COMPILER_WARNING: [#def813]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:215: Error: symbol `.ascii' is already defined
#  213|       OFFSET(DOMAIN_vm_assist, struct domain, vm_assist);
#  214|       BLANK();
#  215|-> 
#  216|   #ifdef CONFIG_VIDEO
#  217|       OFFSET(BVI_cursor_pos,      struct boot_video_info, orig_x);

Error: COMPILER_WARNING: [#def814]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:218: Error: symbol `.ascii' is already defined
#  216|   #ifdef CONFIG_VIDEO
#  217|       OFFSET(BVI_cursor_pos,      struct boot_video_info, orig_x);
#  218|->     OFFSET(BVI_video_mode,      struct boot_video_info, orig_video_mode);
#  219|       OFFSET(BVI_video_cols,      struct boot_video_info, orig_video_cols);
#  220|       OFFSET(BVI_video_lines,     struct boot_video_info, orig_video_lines);

Error: COMPILER_WARNING: [#def815]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:219: Error: symbol `.ascii' is already defined
#  217|       OFFSET(BVI_cursor_pos,      struct boot_video_info, orig_x);
#  218|       OFFSET(BVI_video_mode,      struct boot_video_info, orig_video_mode);
#  219|->     OFFSET(BVI_video_cols,      struct boot_video_info, orig_video_cols);
#  220|       OFFSET(BVI_video_lines,     struct boot_video_info, orig_video_lines);
#  221|       OFFSET(BVI_have_vga,        struct boot_video_info, orig_video_isVGA);

Error: COMPILER_WARNING: [#def816]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:220: Error: symbol `.ascii' is already defined
#  218|       OFFSET(BVI_video_mode,      struct boot_video_info, orig_video_mode);
#  219|       OFFSET(BVI_video_cols,      struct boot_video_info, orig_video_cols);
#  220|->     OFFSET(BVI_video_lines,     struct boot_video_info, orig_video_lines);
#  221|       OFFSET(BVI_have_vga,        struct boot_video_info, orig_video_isVGA);
#  222|       OFFSET(BVI_font_points,     struct boot_video_info, orig_video_points);

Error: COMPILER_WARNING: [#def817]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:221: Error: symbol `.ascii' is already defined
#  219|       OFFSET(BVI_video_cols,      struct boot_video_info, orig_video_cols);
#  220|       OFFSET(BVI_video_lines,     struct boot_video_info, orig_video_lines);
#  221|->     OFFSET(BVI_have_vga,        struct boot_video_info, orig_video_isVGA);
#  222|       OFFSET(BVI_font_points,     struct boot_video_info, orig_video_points);
#  223|       OFFSET(BVI_capabilities,    struct boot_video_info, capabilities);

Error: COMPILER_WARNING: [#def818]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:222: Error: symbol `.ascii' is already defined
#  220|       OFFSET(BVI_video_lines,     struct boot_video_info, orig_video_lines);
#  221|       OFFSET(BVI_have_vga,        struct boot_video_info, orig_video_isVGA);
#  222|->     OFFSET(BVI_font_points,     struct boot_video_info, orig_video_points);
#  223|       OFFSET(BVI_capabilities,    struct boot_video_info, capabilities);
#  224|       OFFSET(BVI_lfb_linelength,  struct boot_video_info, lfb_linelength);

Error: COMPILER_WARNING: [#def819]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:223: Error: symbol `.ascii' is already defined
#  221|       OFFSET(BVI_have_vga,        struct boot_video_info, orig_video_isVGA);
#  222|       OFFSET(BVI_font_points,     struct boot_video_info, orig_video_points);
#  223|->     OFFSET(BVI_capabilities,    struct boot_video_info, capabilities);
#  224|       OFFSET(BVI_lfb_linelength,  struct boot_video_info, lfb_linelength);
#  225|       OFFSET(BVI_lfb_width,       struct boot_video_info, lfb_width);

Error: COMPILER_WARNING: [#def820]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:224: Error: symbol `.ascii' is already defined
#  222|       OFFSET(BVI_font_points,     struct boot_video_info, orig_video_points);
#  223|       OFFSET(BVI_capabilities,    struct boot_video_info, capabilities);
#  224|->     OFFSET(BVI_lfb_linelength,  struct boot_video_info, lfb_linelength);
#  225|       OFFSET(BVI_lfb_width,       struct boot_video_info, lfb_width);
#  226|       OFFSET(BVI_lfb_height,      struct boot_video_info, lfb_height);

Error: COMPILER_WARNING: [#def821]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:225: Error: symbol `.ascii' is already defined
#  223|       OFFSET(BVI_capabilities,    struct boot_video_info, capabilities);
#  224|       OFFSET(BVI_lfb_linelength,  struct boot_video_info, lfb_linelength);
#  225|->     OFFSET(BVI_lfb_width,       struct boot_video_info, lfb_width);
#  226|       OFFSET(BVI_lfb_height,      struct boot_video_info, lfb_height);
#  227|       OFFSET(BVI_lfb_depth,       struct boot_video_info, lfb_depth);

Error: COMPILER_WARNING: [#def822]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:226: Error: symbol `.ascii' is already defined
#  224|       OFFSET(BVI_lfb_linelength,  struct boot_video_info, lfb_linelength);
#  225|       OFFSET(BVI_lfb_width,       struct boot_video_info, lfb_width);
#  226|->     OFFSET(BVI_lfb_height,      struct boot_video_info, lfb_height);
#  227|       OFFSET(BVI_lfb_depth,       struct boot_video_info, lfb_depth);
#  228|       OFFSET(BVI_lfb_base,        struct boot_video_info, lfb_base);

Error: COMPILER_WARNING: [#def823]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:227: Error: symbol `.ascii' is already defined
#  225|       OFFSET(BVI_lfb_width,       struct boot_video_info, lfb_width);
#  226|       OFFSET(BVI_lfb_height,      struct boot_video_info, lfb_height);
#  227|->     OFFSET(BVI_lfb_depth,       struct boot_video_info, lfb_depth);
#  228|       OFFSET(BVI_lfb_base,        struct boot_video_info, lfb_base);
#  229|       OFFSET(BVI_lfb_size,        struct boot_video_info, lfb_size);

Error: COMPILER_WARNING: [#def824]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:228: Error: symbol `.ascii' is already defined
#  226|       OFFSET(BVI_lfb_height,      struct boot_video_info, lfb_height);
#  227|       OFFSET(BVI_lfb_depth,       struct boot_video_info, lfb_depth);
#  228|->     OFFSET(BVI_lfb_base,        struct boot_video_info, lfb_base);
#  229|       OFFSET(BVI_lfb_size,        struct boot_video_info, lfb_size);
#  230|       OFFSET(BVI_lfb_colors,      struct boot_video_info, colors);

Error: COMPILER_WARNING: [#def825]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:229: Error: symbol `.ascii' is already defined
#  227|       OFFSET(BVI_lfb_depth,       struct boot_video_info, lfb_depth);
#  228|       OFFSET(BVI_lfb_base,        struct boot_video_info, lfb_base);
#  229|->     OFFSET(BVI_lfb_size,        struct boot_video_info, lfb_size);
#  230|       OFFSET(BVI_lfb_colors,      struct boot_video_info, colors);
#  231|       OFFSET(BVI_vesapm_seg,      struct boot_video_info, vesapm.seg);

Error: COMPILER_WARNING: [#def826]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:230: Error: symbol `.ascii' is already defined
#  228|       OFFSET(BVI_lfb_base,        struct boot_video_info, lfb_base);
#  229|       OFFSET(BVI_lfb_size,        struct boot_video_info, lfb_size);
#  230|->     OFFSET(BVI_lfb_colors,      struct boot_video_info, colors);
#  231|       OFFSET(BVI_vesapm_seg,      struct boot_video_info, vesapm.seg);
#  232|       OFFSET(BVI_vesapm_off,      struct boot_video_info, vesapm.off);

Error: COMPILER_WARNING: [#def827]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:231: Error: symbol `.ascii' is already defined
#  229|       OFFSET(BVI_lfb_size,        struct boot_video_info, lfb_size);
#  230|       OFFSET(BVI_lfb_colors,      struct boot_video_info, colors);
#  231|->     OFFSET(BVI_vesapm_seg,      struct boot_video_info, vesapm.seg);
#  232|       OFFSET(BVI_vesapm_off,      struct boot_video_info, vesapm.off);
#  233|       OFFSET(BVI_vesa_attrib,     struct boot_video_info, vesa_attrib);

Error: COMPILER_WARNING: [#def828]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:232: Error: symbol `.ascii' is already defined
#  230|       OFFSET(BVI_lfb_colors,      struct boot_video_info, colors);
#  231|       OFFSET(BVI_vesapm_seg,      struct boot_video_info, vesapm.seg);
#  232|->     OFFSET(BVI_vesapm_off,      struct boot_video_info, vesapm.off);
#  233|       OFFSET(BVI_vesa_attrib,     struct boot_video_info, vesa_attrib);
#  234|       DEFINE(BVI_size,            sizeof(struct boot_video_info));

Error: COMPILER_WARNING: [#def829]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:233: Error: symbol `.ascii' is already defined
#  231|       OFFSET(BVI_vesapm_seg,      struct boot_video_info, vesapm.seg);
#  232|       OFFSET(BVI_vesapm_off,      struct boot_video_info, vesapm.off);
#  233|->     OFFSET(BVI_vesa_attrib,     struct boot_video_info, vesa_attrib);
#  234|       DEFINE(BVI_size,            sizeof(struct boot_video_info));
#  235|       BLANK();

Error: COMPILER_WARNING: [#def830]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:234: Error: symbol `.ascii' is already defined
#  232|       OFFSET(BVI_vesapm_off,      struct boot_video_info, vesapm.off);
#  233|       OFFSET(BVI_vesa_attrib,     struct boot_video_info, vesa_attrib);
#  234|->     DEFINE(BVI_size,            sizeof(struct boot_video_info));
#  235|       BLANK();
#  236|   #endif /* CONFIG_VIDEO */

Error: COMPILER_WARNING: [#def831]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:235: Error: symbol `.ascii' is already defined
#  233|       OFFSET(BVI_vesa_attrib,     struct boot_video_info, vesa_attrib);
#  234|       DEFINE(BVI_size,            sizeof(struct boot_video_info));
#  235|->     BLANK();
#  236|   #endif /* CONFIG_VIDEO */
#  237|   }

Error: COMPILER_WARNING: [#def832]
xen-4.19.2/xen/arch/x86/x86_64/asm-offsets.c:236: Error: symbol `.ascii' is already defined
#  234|       DEFINE(BVI_size,            sizeof(struct boot_video_info));
#  235|       BLANK();
#  236|-> #endif /* CONFIG_VIDEO */
#  237|   }

Error: GCC_ANALYZER_WARNING (CWE-469): [#def833]
xen-4.19.2/xen/arch/x86/x86_64/mm.c:725:22: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/xen/arch/x86/x86_64/mm.c:715:13: enter_function: entry to ‘zap_low_mappings’
xen-4.19.2/xen/arch/x86/x86_64/mm.c:717:5: branch_false: following ‘false’ branch...
xen-4.19.2/xen/arch/x86/x86_64/mm.c:720:5: call_function: inlined call to ‘write_u64_atomic’ from ‘zap_low_mappings’
xen-4.19.2/xen/arch/x86/x86_64/mm.c:725:22: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
#  723|       /* Replace with mapping of the boot trampoline only. */
#  724|       map_pages_to_xen(trampoline_phys, maddr_to_mfn(trampoline_phys),
#  725|->                      PFN_UP(trampoline_end - trampoline_start),
#  726|                        __PAGE_HYPERVISOR_RX);
#  727|   }

Error: CPPCHECK_WARNING (CWE-758): [#def834]
xen-4.19.2/xen/arch/x86/x86_emulate/0f01.c:294: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
#  292|                                 &base, mode_64bit() ? 8 : 4, ctxt, ops)) )
#  293|               goto done;
#  294|->         generate_exception_if(!is_canonical_address(base), X86_EXC_GP, 0);
#  295|           sreg.base = base;
#  296|           sreg.limit = limit;

Error: CPPCHECK_WARNING (CWE-758): [#def835]
xen-4.19.2/xen/arch/x86/x86_emulate/0fae.c:193: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
#  191|               {
#  192|                   sreg.base = *dst->reg;
#  193|->                 generate_exception_if(!is_canonical_address(sreg.base),
#  194|                                         X86_EXC_GP, 0);
#  195|               }

Error: CPPCHECK_WARNING (CWE-758): [#def836]
xen-4.19.2/xen/arch/x86/x86_emulate/x86_emulate.c:1014: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
# 1012|               if ( (desc_hi.b & 0x00001f00) ||
# 1013|                    (seg != x86_seg_none &&
# 1014|->                   !is_canonical_address((uint64_t)desc_hi.a << 32)) )
# 1015|                   goto raise_exn;
# 1016|           }

Error: CPPCHECK_WARNING (CWE-758): [#def837]
xen-4.19.2/xen/arch/x86/x86_emulate/x86_emulate.c:2051: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
# 2049|           if ( (rc = ops->read_segment(x86_seg_cs, &sreg, ctxt)) ||
# 2050|                (rc = load_seg(x86_seg_cs, imm2, 0, &cs, ctxt, ops)) ||
# 2051|->              (validate_far_branch(&cs, imm1),
# 2052|                 src.val = sreg.sel,
# 2053|                 rc = ops->write(x86_seg_ss, sp_pre_dec(op_bytes),

Error: CPPCHECK_WARNING (CWE-758): [#def838]
xen-4.19.2/xen/arch/x86/x86_emulate/x86_emulate.c:2381: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
# 2379|                                 &src.val, op_bytes, ctxt, ops)) ||
# 2380|                (rc = load_seg(x86_seg_cs, src.val, 1, &cs, ctxt, ops)) ||
# 2381|->              (rc = commit_far_branch(&cs, dst.val)) )
# 2382|               goto done;
# 2383|           break;

Error: CPPCHECK_WARNING (CWE-758): [#def839]
xen-4.19.2/xen/arch/x86/x86_emulate/x86_emulate.c:2556: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
# 2554|       far_jmp:
# 2555|           if ( (rc = load_seg(x86_seg_cs, imm2, 0, &cs, ctxt, ops)) ||
# 2556|->              (rc = commit_far_branch(&cs, imm1)) )
# 2557|               goto done;
# 2558|           break;

Error: CPPCHECK_WARNING (CWE-758): [#def840]
xen-4.19.2/xen/arch/x86/x86_emulate/x86_emulate.c:3101: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
# 3099|            * XSA-7 (CVE-2012-0217).
# 3100|            */
# 3101|->         generate_exception_if(ctxt->cpuid->x86_vendor == X86_VENDOR_INTEL &&
# 3102|                                 op_bytes == 8 && !is_canonical_address(_regs.rcx),
# 3103|                                 X86_EXC_GP, 0);

Error: CPPCHECK_WARNING (CWE-758): [#def841]
xen-4.19.2/xen/arch/x86/x86_emulate/x86_emulate.c:3901: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
# 3899|   
# 3900|           generate_exception_if(!(msr_val & 0xfffc), X86_EXC_GP, 0);
# 3901|->         generate_exception_if(op_bytes == 8 &&
# 3902|                                 (!is_canonical_address(_regs.r(dx)) ||
# 3903|                                  !is_canonical_address(_regs.r(cx))),

Error: CPPCHECK_WARNING (CWE-758): [#def842]
xen-4.19.2/xen/arch/x86/x86_emulate/x86_emulate.c:6319: error[shiftTooManyBitsSigned]: Shifting signed 64-bit value by 63 bits is undefined behaviour
# 6317|           {
# 6318|           case X86_INVPCID_INDIV_ADDR:
# 6319|->              generate_exception_if(!is_canonical_address(mmvalp->xmm[1]),
# 6320|                                      X86_EXC_GP, 0);
# 6321|                /* fall through */

Error: CPPCHECK_WARNING (CWE-190): [#def843]
xen-4.19.2/xen/common/bunzip2.c:140: error[integerOverflow]: Signed integer overflow for expression '1<<bits_wanted'.
#  138|   	/* Calculate result */
#  139|   	bd->inbufBitCount -= bits_wanted;
#  140|-> 	bits |= (bd->inbufBits >> bd->inbufBitCount)&((1 << bits_wanted)-1);
#  141|   
#  142|   	return bits;

Error: CPPCHECK_WARNING (CWE-758): [#def844]
xen-4.19.2/xen/common/bunzip2.c:140: error[shiftTooManyBits]: Shifting 32-bit value by 32 bits is undefined behaviour
#  138|   	/* Calculate result */
#  139|   	bd->inbufBitCount -= bits_wanted;
#  140|-> 	bits |= (bd->inbufBits >> bd->inbufBitCount)&((1 << bits_wanted)-1);
#  141|   
#  142|   	return bits;

Error: GCC_ANALYZER_WARNING (CWE-1335): [#def845]
xen-4.19.2/xen/common/bunzip2.c:140:55: warning[-Wanalyzer-shift-count-overflow]: shift by count (‘32’) >= precision of type (‘32’)
xen-4.19.2/xen/common/bunzip2.c:518:19: enter_function: entry to ‘read_bunzip’
xen-4.19.2/xen/common/bunzip2.c:524:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/bunzip2.c:528:9: branch_false: ...to here
xen-4.19.2/xen/common/bunzip2.c:536:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/bunzip2.c:605:20: branch_false: ...to here
xen-4.19.2/xen/common/bunzip2.c:605:20: call_function: calling ‘get_next_block’ from ‘read_bunzip’
#  138|   	/* Calculate result */
#  139|   	bd->inbufBitCount -= bits_wanted;
#  140|-> 	bits |= (bd->inbufBits >> bd->inbufBitCount)&((1 << bits_wanted)-1);
#  141|   
#  142|   	return bits;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def846]
xen-4.19.2/xen/common/domain.c:672:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘config’
xen-4.19.2/xen/common/domain.c:820:13: enter_function: entry to ‘setup_system_domains’
xen-4.19.2/xen/common/domain.c:829:15: call_function: calling ‘domain_create’ from ‘setup_system_domains’
#  670|       {
#  671|           err = -ENOMEM;
#  672|->         d->vcpu = xzalloc_array(struct vcpu *, config->max_vcpus);
#  673|           if ( !d->vcpu )
#  674|               goto fail;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def847]
xen-4.19.2/xen/common/domain.c:734:36: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘config’
xen-4.19.2/xen/common/domain.c:820:13: enter_function: entry to ‘setup_system_domains’
xen-4.19.2/xen/common/domain.c:829:15: call_function: calling ‘domain_create’ from ‘setup_system_domains’
#  732|           atomic_inc(&d->pause_count);
#  733|   
#  734|->         if ( (err = evtchn_init(d, config->max_evtchn_port)) != 0 )
#  735|               goto fail;
#  736|           init_status |= INIT_evtchn;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def848]
xen-4.19.2/xen/common/domctl.c:74:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:546:9: call_function: calling ‘getdomaininfo’ from ‘do_domctl’
#   72|       memset(info, 0, sizeof(*info));
#   73|   
#   74|->     info->domain = d->domain_id;
#   75|       info->max_vcpu_id = XEN_INVALID_MAX_VCPU_ID;
#   76|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def849]
xen-4.19.2/xen/common/domctl.c:226:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:826:17: call_function: calling ‘vnuma_init’ from ‘do_domctl’
#  224|       nr_vnodes = uinfo->nr_vnodes;
#  225|   
#  226|->     if ( uinfo->nr_vcpus != d->max_vcpus || uinfo->pad != 0 )
#  227|           return ERR_PTR(ret);
#  228|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def850]
xen-4.19.2/xen/common/domctl.c:350:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:349:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:350:23: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:350:23: danger: dereference of NULL ‘d’
#  348|           ret = -EINVAL;
#  349|           if ( (d == current->domain) || /* no domain_pause() */
#  350|->              (vcpu >= d->max_vcpus) || ((v = d->vcpu[vcpu]) == NULL) )
#  351|               break;
#  352|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def851]
xen-4.19.2/xen/common/domctl.c:464:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:463:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:464:22: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:464:22: danger: dereference of NULL ‘d’
#  462|           ret = -EINVAL;
#  463|           if ( (d == current->domain) || /* no domain_pause() */
#  464|->              (max != d->max_vcpus) )   /* max_vcpus set up in createdomain */
#  465|               break;
#  466|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def852]
xen-4.19.2/xen/common/domctl.c:558:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:558:40: danger: dereference of NULL ‘d’
#  556|   
#  557|           ret = -EINVAL;
#  558|->         if ( op->u.vcpucontext.vcpu >= d->max_vcpus ||
#  559|                (v = d->vcpu[op->u.vcpucontext.vcpu]) == NULL ||
#  560|                v == current ) /* no vcpu_pause() */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def853]
xen-4.19.2/xen/common/domctl.c:607:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:607:40: danger: dereference of NULL ‘d’
#  605|   
#  606|           ret = -EINVAL;
#  607|->         if ( op->u.getvcpuinfo.vcpu >= d->max_vcpus )
#  608|               break;
#  609|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def854]
xen-4.19.2/xen/common/domctl.c:636:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:636:9: danger: dereference of NULL ‘d’
#  634|            * the meantime, while tot > max, all new allocations are disallowed.
#  635|            */
#  636|->         d->max_pages = min(new_max, (uint64_t)(typeof(d->max_pages))-1);
#  637|           nrspin_unlock(&d->page_alloc_lock);
#  638|           break;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def855]
xen-4.19.2/xen/common/domctl.c:642:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:642:9: danger: dereference of NULL ‘d’
#  640|   
#  641|       case XEN_DOMCTL_setdomainhandle:
#  642|->         memcpy(d->handle, op->u.setdomainhandle.handle,
#  643|                  sizeof(xen_domain_handle_t));
#  644|           break;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def856]
xen-4.19.2/xen/common/domctl.c:652:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:647:14: call_function: inlined call to ‘get_cpu_info’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:647:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:651:13: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:652:13: danger: dereference of NULL ‘d’
#  650|           {
#  651|               domain_pause(d);
#  652|->             d->debugger_attached = !!op->u.setdebugging.enable;
#  653|               domain_unpause(d); /* causes guest to latch new status */
#  654|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def857]
xen-4.19.2/xen/common/domctl.c:672:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:663:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:668:15: call_function: inlined call to ‘get_cpu_info’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:668:15: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:671:17: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:672:19: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:672:19: danger: dereference of NULL ‘d’
#  670|               ret = -EPERM;
#  671|           else if ( allow )
#  672|->             ret = irq_permit_access(d, irq);
#  673|           else
#  674|               ret = irq_deny_access(d, irq);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def858]
xen-4.19.2/xen/common/domctl.c:674:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:663:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:668:15: call_function: inlined call to ‘get_cpu_info’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:668:15: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:671:17: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:674:19: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:674:19: danger: dereference of NULL ‘d’
#  672|               ret = irq_permit_access(d, irq);
#  673|           else
#  674|->             ret = irq_deny_access(d, irq);
#  675|           break;
#  676|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def859]
xen-4.19.2/xen/common/domctl.c:723:15: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:709:12: branch_false: following ‘false’ branch (when ‘mfn <= mfn_end’)...
xen-4.19.2/xen/common/domctl.c:710:15: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:709:14: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:711:15: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:709:14: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:722:15: call_function: inlined call to ‘get_cpu_info’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:722:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:723:15: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:723:15: danger: dereference of NULL ‘d’
#  721|           ret = -EPERM;
#  722|           if ( !iomem_access_permitted(current->domain, mfn, mfn_end) ||
#  723|->              !iomem_access_permitted(d, mfn, mfn_end) )
#  724|               break;
#  725|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def860]
xen-4.19.2/xen/common/domctl.c:774:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:770:12: branch_false: following ‘false’ branch (when ‘e’ is non-NULL)...
xen-4.19.2/xen/common/domctl.c:774:12: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:774:12: branch_false: following ‘false’ branch (when ‘d != e’)...
xen-4.19.2/xen/common/domctl.c:774:27: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:774:27: danger: dereference of NULL ‘d’
#  772|   
#  773|           ret = -EINVAL;
#  774|->         if ( (d == e) || (d->target != NULL) )
#  775|           {
#  776|               put_domain(e);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def861]
xen-4.19.2/xen/common/domctl.c:795:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘d’
xen-4.19.2/xen/common/domctl.c:281:6: enter_function: entry to ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:288:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:291:10: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:291:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/domctl.c:294:14: branch_false: ...to here
xen-4.19.2/xen/common/domctl.c:325:11: call_function: inlined call to ‘xsm_domctl’ from ‘do_domctl’
xen-4.19.2/xen/common/domctl.c:331:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/domctl.c:339:14: branch_true: ...to here
xen-4.19.2/xen/common/domctl.c:795:9: danger: dereference of NULL ‘d’
#  793|   
#  794|       case XEN_DOMCTL_subscribe:
#  795|->         d->suspend_evtchn = op->u.subscribe.port;
#  796|           break;
#  797|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def862]
xen-4.19.2/xen/common/earlycpio.c:123:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ch[12]’
xen-4.19.2/xen/common/earlycpio.c:84:16: branch_true: following ‘true’ branch (when ‘len > 110’)...
xen-4.19.2/xen/common/earlycpio.c:85:22: branch_true: ...to here
xen-4.19.2/xen/common/earlycpio.c:85:20: branch_false: following ‘false’ branch...
 branch_false: ...to here
xen-4.19.2/xen/common/earlycpio.c:94:37: branch_true: following ‘true’ branch (when ‘i != 0’)...
 branch_true: ...to here
xen-4.19.2/xen/common/earlycpio.c:96:32: branch_true: following ‘true’ branch (when ‘j != 0’)...
xen-4.19.2/xen/common/earlycpio.c:97:33: branch_true: ...to here
xen-4.19.2/xen/common/earlycpio.c:96:32: branch_true: following ‘true’ branch (when ‘j != 0’)...
xen-4.19.2/xen/common/earlycpio.c:97:33: branch_true: ...to here
xen-4.19.2/xen/common/earlycpio.c:94:37: branch_false: following ‘false’ branch (when ‘i == 0’)...
xen-4.19.2/xen/common/earlycpio.c:118:22: branch_false: ...to here
xen-4.19.2/xen/common/earlycpio.c:118:20: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/earlycpio.c:121:17: branch_false: ...to here
xen-4.19.2/xen/common/earlycpio.c:123:24: danger: use of uninitialized value ‘ch[12]’ here
#  121|   		len -= cpio_header_len;
#  122|   
#  123|-> 		dptr = PTR_ALIGN(p + ch[C_NAMESIZE], 4);
#  124|   		nptr = PTR_ALIGN(dptr + ch[C_FILESIZE], 4);
#  125|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def863]
xen-4.19.2/xen/common/grant_table.c:2218:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘raw_shah’
xen-4.19.2/xen/common/compat/grant_table.c:63:5: enter_function: entry to ‘compat_grant_table_op’
xen-4.19.2/xen/common/compat/grant_table.c:135:16: call_function: calling ‘do_grant_table_op’ from ‘compat_grant_table_op’
# 2216|       /* This call also ensures the above check cannot be passed speculatively */
# 2217|       raw_shah = (uint32_t *)shared_entry_header(rgt, ref);
# 2218|->     scombo.raw = ACCESS_ONCE(*raw_shah);
# 2219|   
# 2220|       for ( ; ; )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def864]
xen-4.19.2/xen/common/grant_table.c:4323:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sha’
xen-4.19.2/xen/common/grant_table.c:4286:13: enter_function: entry to ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4296:5: call_function: inlined call to ‘grant_read_lock’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4296:5: call_function: inlined call to ‘grant_read_lock’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4305:20: branch_true: following ‘true’ branch (when ‘ref != nr_ents’)...
xen-4.19.2/xen/common/grant_table.c:4312:15: call_function: inlined call to ‘active_entry_acquire’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4313:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/grant_table.c:4319:15: branch_false: ...to here
xen-4.19.2/xen/common/grant_table.c:4319:15: call_function: calling ‘shared_entry_header’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4319:15: return_function: return of NULL to ‘gnttab_usage_print’ from ‘shared_entry_header’
xen-4.19.2/xen/common/grant_table.c:4321:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/grant_table.c:4323:13: branch_true: ...to here
xen-4.19.2/xen/common/grant_table.c:4323:13: danger: dereference of NULL ‘sha’
# 4321|           if ( gt->gt_version == 1 )
# 4322|           {
# 4323|->             status = sha->flags;
# 4324|               frame = shared_entry_v1(gt, ref).frame;
# 4325|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def865]
xen-4.19.2/xen/common/grant_table.c:4337:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sha’
xen-4.19.2/xen/common/grant_table.c:4286:13: enter_function: entry to ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4296:5: call_function: inlined call to ‘grant_read_lock’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4296:5: call_function: inlined call to ‘grant_read_lock’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4305:20: branch_true: following ‘true’ branch (when ‘ref != nr_ents’)...
xen-4.19.2/xen/common/grant_table.c:4312:15: call_function: inlined call to ‘active_entry_acquire’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4313:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/grant_table.c:4319:15: branch_false: ...to here
xen-4.19.2/xen/common/grant_table.c:4319:15: call_function: calling ‘shared_entry_header’ from ‘gnttab_usage_print’
xen-4.19.2/xen/common/grant_table.c:4319:15: return_function: return of NULL to ‘gnttab_usage_print’ from ‘shared_entry_header’
xen-4.19.2/xen/common/grant_table.c:4321:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/grant_table.c:4328:21: branch_false: ...to here
xen-4.19.2/xen/common/grant_table.c:4337:16: danger: dereference of NULL ‘sha’
# 4335|           printk("[0x%03x]  %5d 0x%"PRI_mfn" 0x%08x      %5d 0x%06"PRIx64" 0x%02x\n",
# 4336|                  ref, act->domid, mfn_x(act->mfn), act->pin,
# 4337|->                sha->domid, frame, status);
# 4338|           active_entry_release(act);
# 4339|       }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def866]
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:194:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 1 of ‘__builtin_strcmp’ must be non-null
#  192|           break;
#  193|       case XEN_ELFNOTE_PAE_MODE:
#  194|->         if ( !strcmp(str, "yes") )
#  195|               parms->pae = XEN_PAE_EXTCR3;
#  196|           if ( strstr(str, "bimodal") )

Error: GCC_ANALYZER_WARNING (CWE-688): [#def867]
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:200:15: warning[-Wanalyzer-null-argument]: use of NULL ‘str’ where non-null expected
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:560:17: enter_function: entry to ‘elf_xen_parse’
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:584:18: branch_true: following ‘true’ branch (when ‘i < count’)...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:586:16: branch_true: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:587:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:590:14: branch_true: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:590:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:597:13: branch_false: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:597:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:600:22: branch_false: ...to here
xen-4.19.2/xen/common/libelf/libelf-dominfo.c:600:22: call_function: calling ‘elf_xen_parse_notes’ from ‘elf_xen_parse’
#argument 1 of ‘__builtin_strcmp’ must be non-null
#  198|           break;
#  199|       case XEN_ELFNOTE_BSD_SYMTAB:
#  200|->         if ( !strcmp(str, "yes") )
#  201|               parms->bsd_symtab = 1;
#  202|           break;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def868]
xen-4.19.2/xen/common/rangeset.c:152:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  150|           {
#  151|               x = first_range(r);
#  152|->             x->s = s;
#  153|           }
#  154|           else if ( (x->e < s) && ((x->e + 1) != s) )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def869]
xen-4.19.2/xen/common/rangeset.c:152:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’
xen-4.19.2/xen/common/rangeset.c:394:5: enter_function: entry to ‘rangeset_merge’
xen-4.19.2/xen/common/rangeset.c:396:12: call_function: calling ‘rangeset_report_ranges’ from ‘rangeset_merge’
#  150|           {
#  151|               x = first_range(r);
#  152|->             x->s = s;
#  153|           }
#  154|           else if ( (x->e < s) && ((x->e + 1) != s) )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def870]
xen-4.19.2/xen/common/rangeset.c:157:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  155|           {
#  156|               x = next_range(r, x);
#  157|->             x->s = s;
#  158|           }
#  159|           

Error: GCC_ANALYZER_WARNING (CWE-476): [#def871]
xen-4.19.2/xen/common/rangeset.c:157:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’
xen-4.19.2/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  155|           {
#  156|               x = next_range(r, x);
#  157|->             x->s = s;
#  158|           }
#  159|           

Error: GCC_ANALYZER_WARNING (CWE-476): [#def872]
xen-4.19.2/xen/common/rangeset.c:160:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘x’
xen-4.19.2/xen/common/rangeset.c:387:21: enter_function: entry to ‘merge’
xen-4.19.2/xen/common/rangeset.c:391:12: call_function: calling ‘rangeset_add_range’ from ‘merge’
#  158|           }
#  159|           
#  160|->         x->e = (y->e > e) ? y->e : e;
#  161|   
#  162|           for ( ; ; )

Error: GCC_ANALYZER_WARNING (CWE-835): [#def873]
xen-4.19.2/xen/common/sched/cpupool.c:137:16: warning[-Wanalyzer-infinite-loop]: infinite loop
xen-4.19.2/xen/common/sched/cpupool.c:1298:28: enter_function: entry to ‘cpupool_init’
#  135|       while ( gran == 0 )
#  136|       {
#  137|->         gran = cpupool_check_granularity(opt_sched_granularity);
#  138|   
#  139|           if ( gran == 0 )

Error: GCC_ANALYZER_WARNING (CWE-476): [#def874]
xen-4.19.2/xen/drivers/passthrough/pci.c:1547:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pdev’
xen-4.19.2/xen/drivers/passthrough/pci.c:1527:12: enter_function: entry to ‘assign_device’
xen-4.19.2/xen/drivers/passthrough/pci.c:1533:11: call_function: inlined call to ‘is_iommu_enabled’ from ‘assign_device’
xen-4.19.2/xen/drivers/passthrough/pci.c:1536:8: branch_true: following ‘true’ branch...
xen-4.19.2/xen/drivers/passthrough/pci.c:1541:31: branch_true: ...to here
xen-4.19.2/xen/drivers/passthrough/pci.c:1541:12: call_function: calling ‘pci_get_pdev’ from ‘assign_device’
xen-4.19.2/xen/drivers/passthrough/pci.c:1541:12: return_function: return of NULL to ‘assign_device’ from ‘pci_get_pdev’
xen-4.19.2/xen/drivers/passthrough/pci.c:1547:10: danger: dereference of NULL ‘pdev’
# 1545|       /* Do not allow broken devices to be assigned to guests. */
# 1546|       rc = -EBADF;
# 1547|->     if ( pdev->broken && d != hardware_domain && d != dom_io )
# 1548|           goto done;
# 1549|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def875]
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:752:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pirqs[i]’
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:748:22: branch_true: following ‘true’ branch (when ‘i < n’)...
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:750:47: branch_true: ...to here
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:752:20: danger: dereference of NULL ‘pirqs[i]’
#  750|               struct hvm_pirq_dpci *pirq_dpci = pirq_dpci(pirqs[i]);
#  751|   
#  752|->             pirq = pirqs[i]->pirq;
#  753|               if ( (pirq_dpci->flags & HVM_IRQ_DPCI_MAPPED) )
#  754|               {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def876]
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:753:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:734:5: enter_function: entry to ‘pt_pirq_iterate’
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:748:22: branch_true: following ‘true’ branch (when ‘i < n’)...
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:750:47: branch_true: ...to here
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:750:47: call_function: inlined call to ‘_pirq_dpci’ from ‘pt_pirq_iterate’
xen-4.19.2/xen/drivers/passthrough/x86/hvm.c:753:19: danger: dereference of NULL ‘<unknown>’
#  751|   
#  752|               pirq = pirqs[i]->pirq;
#  753|->             if ( (pirq_dpci->flags & HVM_IRQ_DPCI_MAPPED) )
#  754|               {
#  755|                   rc = cb(d, pirq_dpci, arg);

Error: GCC_ANALYZER_WARNING (CWE-469): [#def877]
xen-4.19.2/xen/drivers/vpci/vpci.c:162:22: warning[-Wanalyzer-undefined-behavior-ptrdiff]: undefined behavior when subtracting pointers
xen-4.19.2/xen/drivers/vpci/vpci.c:137:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/drivers/vpci/vpci.c:144:29: branch_false: ...to here
xen-4.19.2/xen/drivers/vpci/vpci.c:149:8: branch_false: following ‘false’ branch...
xen-4.19.2/xen/drivers/vpci/vpci.c:152:5: branch_false: ...to here
xen-4.19.2/xen/drivers/vpci/vpci.c:162:22: danger: subtraction of pointers has undefined behavior if they do not point into the same array object
#  160|   #endif
#  161|   
#  162|->     for ( i = 0; i < NUM_VPCI_INIT; i++ )
#  163|       {
#  164|           rc = __start_vpci_array[i](pdev);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def878]
xen-4.19.2/xen/lib/list-sort.c:92:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘list’
xen-4.19.2/xen/lib/list-sort.c:114:6: enter_function: entry to ‘list_sort’
xen-4.19.2/xen/lib/list-sort.c:124:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/lib/list-sort.c:127:9: branch_false: ...to here
xen-4.19.2/xen/lib/list-sort.c:129:9: release_memory: ‘0’ is NULL
xen-4.19.2/xen/lib/list-sort.c:132:16: branch_false: following ‘false’ branch (when ‘list’ is NULL)...
 branch_false: ...to here
xen-4.19.2/xen/lib/list-sort.c:152:23: branch_false: following ‘false’ branch (when ‘lev >= max_lev’)...
xen-4.19.2/xen/lib/list-sort.c:156:9: branch_false: ...to here
xen-4.19.2/xen/lib/list-sort.c:156:9: release_memory: ‘list’ is NULL
xen-4.19.2/xen/lib/list-sort.c:156:9: call_function: calling ‘merge_and_restore_back_links’ from ‘list_sort’
#   90|   			(*cmp)(priv, tail->next, tail->next);
#   91|   
#   92|-> 		tail->next->prev = tail;
#   93|   		tail = tail->next;
#   94|   	} while (tail->next);

Error: CPPCHECK_WARNING (CWE-457): [#def879]
xen-4.19.2/xen/lib/x86/cpuid.c:468: error[uninitvar]: Uninitialized variable: data.leaf
#  466|           l = (struct cpuid_leaf){ data.a, data.b, data.c, data.d };
#  467|   
#  468|->         switch ( data.leaf )
#  469|           {
#  470|           case 0 ... ARRAY_SIZE(p->basic.raw) - 1:

Error: CPPCHECK_WARNING (CWE-457): [#def880]
xen-4.19.2/xen/lib/x86/msr.c:80: error[uninitvar]: Uninitialized variable: data.flags
#   78|               return -EFAULT;
#   79|   
#   80|->         if ( data.flags ) /* .flags MBZ */
#   81|           {
#   82|               rc = -EINVAL;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def881]
xen-4.19.2/xen/tools/fixdep.c:327:30: warning[-Wanalyzer-out-of-bounds]: heap-based buffer under-read
xen-4.19.2/xen/tools/fixdep.c:385:5: enter_function: entry to ‘main’
xen-4.19.2/xen/tools/fixdep.c:390:12: branch_false: following ‘false’ branch (when ‘argc == 4’)...
xen-4.19.2/xen/tools/fixdep.c:393:9: branch_false: ...to here
xen-4.19.2/xen/tools/fixdep.c:397:9: call_function: calling ‘xprintf’ from ‘main’
xen-4.19.2/xen/tools/fixdep.c:397:9: return_function: returning to ‘main’ from ‘xprintf’
xen-4.19.2/xen/tools/fixdep.c:399:15: call_function: calling ‘read_file’ from ‘main’
xen-4.19.2/xen/tools/fixdep.c:399:15: return_function: returning to ‘main’ from ‘read_file’
xen-4.19.2/xen/tools/fixdep.c:400:9: call_function: calling ‘parse_dep_file’ from ‘main’
#  325|   		is_last = (*p == '\0');
#  326|   		/* Is the token we found a target name? */
#  327|-> 		is_target = (*(p-1) == ':');
#  328|   		/* Don't write any target names into the dependency file */
#  329|   		if (is_target) {

Error: GCC_ANALYZER_WARNING (CWE-126): [#def882]
xen-4.19.2/xen/tools/kconfig/confdata.c:96:9: warning[-Wanalyzer-out-of-bounds]: buffer over-read
xen-4.19.2/xen/tools/kconfig/confdata.c:988:12: enter_function: entry to ‘conf_touch_deps’
xen-4.19.2/xen/tools/kconfig/confdata.c:1001:9: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/confdata.c:1003:20: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/confdata.c:1043:27: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/confdata.c:1052:38: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/confdata.c:1052:23: call_function: calling ‘conf_touch_dep’ from ‘conf_touch_deps’
#   94|   	char *p;
#   95|   
#   96|-> 	strncpy(tmp, path, sizeof(tmp));
#   97|   	tmp[sizeof(tmp) - 1] = 0;
#   98|   

Error: CPPCHECK_WARNING (CWE-404): [#def883]
xen-4.19.2/xen/tools/kconfig/confdata.c:1090: error[resourceLeak]: Resource leak: tristate
# 1088|   		fclose(out);
# 1089|   		fclose(tristate);
# 1090|-> 		return 1;
# 1091|   	}
# 1092|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def884]
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:3338:33: warning[-Wanalyzer-malloc-leak]: leak of ‘*b.yy_ch_buf’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4156:14: enter_function: entry to ‘expand_token’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4167:21: call_function: calling ‘input’ from ‘expand_token’
# 3336|   					b->yy_buf_size *= 2;
# 3337|   
# 3338|-> 				b->yy_ch_buf = (char *)
# 3339|   					/* Include room in for 2 EOB chars. */
# 3340|   					yyrealloc( (void *) b->yy_ch_buf,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def885]
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:3594:12: warning[-Wanalyzer-file-leak]: leak of FILE
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: return_function: returning to ‘zconf_nextfile’ from ‘yy_create_buffer’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_switch_to_buffer’ from ‘zconf_nextfile’
# 3592|        */
# 3593|   	yyensure_buffer_stack ();
# 3594|-> 	if ( YY_CURRENT_BUFFER == new_buffer )
# 3595|   		return;
# 3596|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def886]
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:3594:12: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: return_function: returning to ‘zconf_nextfile’ from ‘yy_create_buffer’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_switch_to_buffer’ from ‘zconf_nextfile’
# 3592|        */
# 3593|   	yyensure_buffer_stack ();
# 3594|-> 	if ( YY_CURRENT_BUFFER == new_buffer )
# 3595|   		return;
# 3596|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def887]
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:3644:12: warning[-Wanalyzer-malloc-leak]: leak of ‘malloc(64)’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:30: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:20: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
# 3642|   	 */
# 3643|   	b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2)  );
# 3644|-> 	if ( ! b->yy_ch_buf )
# 3645|   		YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );
# 3646|   

Error: CPPCHECK_WARNING (CWE-476): [#def888]
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:3684: warning[nullPointer]: Possible null pointer dereference: b
# 3682|   	yy_flush_buffer( b );
# 3683|   
# 3684|-> 	b->yy_input_file = file;
# 3685|   	b->yy_fill_buffer = 1;
# 3686|   

Error: CPPCHECK_WARNING (CWE-476): [#def889]
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:3685: warning[nullPointer]: Possible null pointer dereference: b
# 3683|   
# 3684|   	b->yy_input_file = file;
# 3685|-> 	b->yy_fill_buffer = 1;
# 3686|   
# 3687|       /* If b is the current buffer, then yy_init_buffer was _probably_

Error: GCC_ANALYZER_WARNING (CWE-401): [#def890]
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:3724:19: warning[-Wanalyzer-malloc-leak]: leak of ‘yy_create_buffer(zconf_fopen(*file.name), 16384)’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4261:6: enter_function: entry to ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4268:30: branch_true: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: call_function: calling ‘zconf_fopen’ from ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4269:16: return_function: returning to ‘zconf_nextfile’ from ‘zconf_fopen’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4270:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_create_buffer’ from ‘zconf_nextfile’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: return_function: returning to ‘zconf_nextfile’ from ‘yy_create_buffer’
xen-4.19.2/xen/tools/kconfig/lexer.lex.c:4275:9: call_function: calling ‘yy_switch_to_buffer’ from ‘zconf_nextfile’
# 3722|   	b->yy_buffer_status = YY_BUFFER_NEW;
# 3723|   
# 3724|-> 	if ( b == YY_CURRENT_BUFFER )
# 3725|   		yy_load_buffer_state(  );
# 3726|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def891]
xen-4.19.2/xen/tools/kconfig/symbol.c:1073:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘prop’
xen-4.19.2/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1250:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1251:17: branch_true: ...to here
xen-4.19.2/xen/tools/kconfig/symbol.c:1251:17: call_function: calling ‘sym_check_print_recursive’ from ‘sym_check_deps’
# 1071|   		}
# 1072|   		if (stack->sym == last_sym)
# 1073|-> 			fprintf(stderr, "%s:%d:error: recursive dependency detected!\n",
# 1074|   				prop->file->name, prop->lineno);
# 1075|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def892]
xen-4.19.2/xen/tools/kconfig/symbol.c:1218:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1250:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1254:13: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/symbol.c:1254:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1257:13: call_function: inlined call to ‘sym_is_choice_value’ from ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1257:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1261:17: branch_true: ...to here
xen-4.19.2/xen/tools/kconfig/symbol.c:1262:24: call_function: inlined call to ‘sym_get_choice_prop’ from ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1263:24: call_function: calling ‘sym_check_deps’ from ‘sym_check_deps’
# 1216|   
# 1217|   	prop = sym_get_choice_prop(choice);
# 1218|-> 	expr_list_for_each_sym(prop->expr, e, sym)
# 1219|   		sym->flags |= (SYMBOL_CHECK | SYMBOL_CHECKED);
# 1220|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def893]
xen-4.19.2/xen/tools/kconfig/symbol.c:1250:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sym’
xen-4.19.2/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1250:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1254:13: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/symbol.c:1254:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1257:13: call_function: inlined call to ‘sym_is_choice_value’ from ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1257:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1261:17: branch_true: ...to here
xen-4.19.2/xen/tools/kconfig/symbol.c:1262:24: call_function: inlined call to ‘sym_get_choice_prop’ from ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1263:24: call_function: calling ‘sym_check_deps’ from ‘sym_check_deps’
# 1248|   	struct property *prop;
# 1249|   
# 1250|-> 	if (sym->flags & SYMBOL_CHECK) {
# 1251|   		sym_check_print_recursive(sym);
# 1252|   		return sym;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def894]
xen-4.19.2/xen/tools/kconfig/symbol.c:1300:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
xen-4.19.2/xen/tools/kconfig/symbol.c:1245:16: enter_function: entry to ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1250:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1254:13: branch_false: ...to here
xen-4.19.2/xen/tools/kconfig/symbol.c:1254:12: branch_false: following ‘false’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1257:13: call_function: inlined call to ‘sym_is_choice_value’ from ‘sym_check_deps’
xen-4.19.2/xen/tools/kconfig/symbol.c:1257:12: branch_true: following ‘true’ branch...
xen-4.19.2/xen/tools/kconfig/symbol.c:1261:17: branch_true: ...to here
xen-4.19.2/xen/tools/kconfig/symbol.c:1263:24: call_function: inlined call to ‘prop_get_symbol’ from ‘sym_check_deps’
# 1298|   struct symbol *prop_get_symbol(struct property *prop)
# 1299|   {
# 1300|-> 	if (prop->expr && (prop->expr->type == E_SYMBOL ||
# 1301|   			   prop->expr->type == E_LIST))
# 1302|   		return prop->expr->left.sym;

Error: GCC_ANALYZER_WARNING (CWE-415): [#def895]
xen-4.19.2/xen/tools/symbols.c:120:17: warning[-Wanalyzer-double-free]: double-‘free’ of ‘0’
xen-4.19.2/xen/tools/symbols.c:584:5: enter_function: entry to ‘main’
xen-4.19.2/xen/tools/symbols.c:614:19: branch_false: following ‘false’ branch (when ‘argc == 1’)...
xen-4.19.2/xen/tools/symbols.c:617:9: branch_false: ...to here
xen-4.19.2/xen/tools/symbols.c:617:9: call_function: calling ‘read_map’ from ‘main’
#  118|   	     input_format == fmt_sysv && !*type && stype == '?' && sym &&
#  119|   	     sym[1] && strchr("cSsoh", sym[1]) && !sym[2])) {
#  120|-> 		free(filename);
#  121|   		filename = *str ? strdup(str) : NULL;
#  122|   		goto skip_tail;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def896]
xen-4.19.2/xen/tools/symbols.c:175:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*s.sym’
xen-4.19.2/xen/tools/symbols.c:584:5: enter_function: entry to ‘main’
xen-4.19.2/xen/tools/symbols.c:614:19: branch_false: following ‘false’ branch (when ‘argc == 1’)...
xen-4.19.2/xen/tools/symbols.c:617:9: branch_false: ...to here
xen-4.19.2/xen/tools/symbols.c:617:9: call_function: calling ‘read_map’ from ‘main’
#  173|   		s->type = stype; /* As s->sym[0] ends mangled. */
#  174|   	}
#  175|-> 	s->sym[0] = stype;
#  176|   	rc = 0;
#  177|   

Error: CPPCHECK_WARNING (CWE-476): [#def897]
xen-4.19.2/xen/tools/symbols.c:352: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: markers
#  350|   	output_label("symbols_markers");
#  351|   	for (i = 0; i < ((table_cnt + 255) >> 8); i++)
#  352|-> 		printf("\t.long\t%d\n", markers[i]);
#  353|   	printf("\n");
#  354|