annobin-13.04-3.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
annobin-13.04/annocheck/annocheck.c:178:7: warning[-Wanalyzer-malloc-leak]: leak of ‘fdopendir(fd)’
annobin-13.04/annocheck/annocheck.c:1975:1: enter_function: entry to ‘annocheck_process_file’
annobin-13.04/annocheck/annocheck.c:2000:6: branch_false: following ‘false’ branch (when ‘fd != -1’)...
annobin-13.04/annocheck/annocheck.c:2024:9: branch_false: ...to here
annobin-13.04/annocheck/annocheck.c:2026:6: branch_false: following ‘false’ branch (when ‘res >= 0’)...
annobin-13.04/annocheck/annocheck.c:2042:7: branch_false: ...to here
annobin-13.04/annocheck/annocheck.c:2042:6: branch_true: following ‘true’ branch...
annobin-13.04/annocheck/annocheck.c:2044:19: branch_true: ...to here
annobin-13.04/annocheck/annocheck.c:2044:19: acquire_memory: allocated here
annobin-13.04/annocheck/annocheck.c:2046:10: branch_false: following ‘false’ branch...
annobin-13.04/annocheck/annocheck.c:2052:7: branch_false: ...to here
annobin-13.04/annocheck/annocheck.c:2052:7: call_function: calling ‘afinfo’ from ‘annocheck_process_file’
#  176|   anno_info (einfo_type type, uint index, const char * filename, const char * format, va_list args)
#  177|   {
#  178|->   if (in_libannocheck && ! libannocheck_debugging)
#  179|       return type == VERBOSE || type == VERBOSE2 || type == INFO || type == PARTIAL;
#  180|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def2]
annobin-13.04/annocheck/annocheck.c:222:3: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
annobin-13.04/annocheck/annocheck.c:1975:1: enter_function: entry to ‘annocheck_process_file’
annobin-13.04/annocheck/annocheck.c:2000:6: branch_true: following ‘true’ branch (when ‘fd == -1’)...
annobin-13.04/annocheck/annocheck.c:2002:11: branch_true: ...to here
annobin-13.04/annocheck/annocheck.c:2002:10: branch_true: following ‘true’ branch...
annobin-13.04/annocheck/annocheck.c:2004:11: branch_true: ...to here
annobin-13.04/annocheck/annocheck.c:2013:22: call_function: calling ‘afinfo’ from ‘annocheck_process_file’
#  220|       return res;
#  221|   
#  222|->   fflush (stderr);
#  223|     fflush (stdout);
#  224|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def3]
annobin-13.04/annocheck/annocheck.c:223:3: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
annobin-13.04/annocheck/annocheck.c:1975:1: enter_function: entry to ‘annocheck_process_file’
annobin-13.04/annocheck/annocheck.c:2000:6: branch_true: following ‘true’ branch (when ‘fd == -1’)...
annobin-13.04/annocheck/annocheck.c:2002:11: branch_true: ...to here
annobin-13.04/annocheck/annocheck.c:2002:10: branch_true: following ‘true’ branch...
annobin-13.04/annocheck/annocheck.c:2004:11: branch_true: ...to here
annobin-13.04/annocheck/annocheck.c:2013:22: call_function: calling ‘afinfo’ from ‘annocheck_process_file’
#  221|   
#  222|     fflush (stderr);
#  223|->   fflush (stdout);
#  224|   
#  225|     if (type != PARTIAL)

Error: CPPCHECK_WARNING (CWE-476): [#def4]
annobin-13.04/annocheck/annocheck.c:990: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: canon_dir
#  988|       }
#  989|   
#  990|->   for (canon_dirlen = strlen (canon_dir); canon_dirlen > 0; canon_dirlen--)
#  991|       if (canon_dir[canon_dirlen - 1] == '/')
#  992|         break;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def5]
annobin-13.04/annocheck/libiberty/concat.c:147:12: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
annobin-13.04/annocheck/libiberty/concat.c:146:3: acquire_resource: ‘va_start’ called here
annobin-13.04/annocheck/libiberty/concat.c:147:12: throw: if ‘xmalloc’ throws an exception...
annobin-13.04/annocheck/libiberty/concat.c:147:12: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  145|     /* First compute the size of the result and get sufficient memory.  */
#  146|     va_start (args, first);
#  147|->   newstr = XNEWVEC (char, vconcat_length (first, args) + 1);
#  148|     va_end (args);
#  149|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def6]
annobin-13.04/annocheck/libiberty/concat.c:184:12: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
annobin-13.04/annocheck/libiberty/concat.c:183:3: acquire_resource: ‘va_start’ called here
annobin-13.04/annocheck/libiberty/concat.c:184:12: throw: if ‘xmalloc’ throws an exception...
annobin-13.04/annocheck/libiberty/concat.c:184:12: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  182|     /* First compute the size of the result and get sufficient memory.  */
#  183|     va_start (args, first);
#  184|->   newstr = XNEWVEC (char, vconcat_length (first, args) + 1);
#  185|     va_end (args);
#  186|   

Error: CPPCHECK_WARNING (CWE-562): [#def7]
annobin-13.04/annocheck/libiberty/cp-demangle.c:5133: error[autoVariables]: Address of local auto-variable assigned to a function parameter.
# 5131|   
# 5132|   	    adpm[i].next = dpi->modifiers;
# 5133|-> 	    dpi->modifiers = &adpm[i];
# 5134|   	    adpm[i].mod = typed_name;
# 5135|   	    adpm[i].printed = 0;

Error: CPPCHECK_WARNING (CWE-562): [#def8]
annobin-13.04/annocheck/libiberty/cp-demangle.c:5171: error[autoVariables]: Address of local auto-variable assigned to a function parameter.
# 5169|   		adpm[i] = adpm[i - 1];
# 5170|   		adpm[i].next = &adpm[i - 1];
# 5171|-> 		dpi->modifiers = &adpm[i];
# 5172|   
# 5173|   		adpm[i - 1].mod = typed_name;

Error: CPPCHECK_WARNING (CWE-562): [#def9]
annobin-13.04/annocheck/libiberty/cp-demangle.c:5192: error[autoVariables]: Address of local auto-variable assigned to a function parameter.
# 5190|   	  {
# 5191|   	    dpt.next = dpi->templates;
# 5192|-> 	    dpi->templates = &dpt;
# 5193|   	    dpt.template_decl = typed_name;
# 5194|   	  }

Error: CPPCHECK_WARNING (CWE-562): [#def10]
annobin-13.04/annocheck/libiberty/cp-demangle.c:5651: error[autoVariables]: Address of local auto-variable assigned to a function parameter.
# 5649|   
# 5650|   	adpm[0].next = hold_modifiers;
# 5651|-> 	dpi->modifiers = &adpm[0];
# 5652|   	adpm[0].mod = dc;
# 5653|   	adpm[0].printed = 0;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def11]
annobin-13.04/annocheck/size.c:208:7: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(datafile, "r")’
annobin-13.04/annocheck/size.c:205:14: acquire_resource: opened here
annobin-13.04/annocheck/size.c:206:6: branch_true: following ‘true’ branch...
annobin-13.04/annocheck/size.c:208:7: branch_true: ...to here
annobin-13.04/annocheck/size.c:208:7: throw: if ‘einfo’ throws an exception...
annobin-13.04/annocheck/size.c:208:7: danger: ‘fopen(datafile, "r")’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  206|     if (f != NULL)
#  207|       {
#  208|->       einfo (VERBOSE2, "Loading recursed size data from %s", datafile);
#  209|   
#  210|         for (sec = sec_list; sec != NULL; sec = sec->next)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def12]
annobin-13.04/annocheck/size.c:208:7: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(datafile, "r")’
annobin-13.04/annocheck/size.c:205:14: acquire_memory: allocated here
annobin-13.04/annocheck/size.c:206:6: branch_true: following ‘true’ branch...
annobin-13.04/annocheck/size.c:208:7: branch_true: ...to here
annobin-13.04/annocheck/size.c:208:7: throw: if ‘einfo’ throws an exception...
annobin-13.04/annocheck/size.c:208:7: danger: ‘fopen(datafile, "r")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  206|     if (f != NULL)
#  207|       {
#  208|->       einfo (VERBOSE2, "Loading recursed size data from %s", datafile);
#  209|   
#  210|         for (sec = sec_list; sec != NULL; sec = sec->next)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def13]
annobin-13.04/annocheck/timing.c:171:7: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(datafile, "r")’
annobin-13.04/annocheck/timing.c:165:14: acquire_resource: opened here
annobin-13.04/annocheck/timing.c:166:6: branch_true: following ‘true’ branch...
annobin-13.04/annocheck/timing.c:168:27: branch_true: ...to here
annobin-13.04/annocheck/timing.c:171:7: throw: if ‘einfo’ throws an exception...
annobin-13.04/annocheck/timing.c:171:7: danger: ‘fopen(datafile, "r")’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  169|         unsigned long long  time_taken = 0;
#  170|         
#  171|->       einfo (VERBOSE2, "Loading recursed timing data from %s", datafile);
#  172|   
#  173|         if (fscanf (f, "%x %llx\n", & num, & time_taken) != 2)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
annobin-13.04/annocheck/timing.c:171:7: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(datafile, "r")’
annobin-13.04/annocheck/timing.c:165:14: acquire_memory: allocated here
annobin-13.04/annocheck/timing.c:166:6: branch_true: following ‘true’ branch...
annobin-13.04/annocheck/timing.c:168:27: branch_true: ...to here
annobin-13.04/annocheck/timing.c:171:7: throw: if ‘einfo’ throws an exception...
annobin-13.04/annocheck/timing.c:171:7: danger: ‘fopen(datafile, "r")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  169|         unsigned long long  time_taken = 0;
#  170|         
#  171|->       einfo (VERBOSE2, "Loading recursed timing data from %s", datafile);
#  172|   
#  173|         if (fscanf (f, "%x %llx\n", & num, & time_taken) != 2)

Scan Properties