Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
dav1d-1.5.1/tools/dav1d.c:100:20: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*elapsed’
dav1d-1.5.1/tools/dav1d.c:190:5: enter_function: entry to ‘main’
dav1d-1.5.1/tools/dav1d.c:209:8: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:219:5: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:225:8: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:225:8: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:262:8: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:265:9: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:265:8: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:268:9: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:295:12: branch_false: following ‘false’ branch (when ‘res == 0’)...
dav1d-1.5.1/tools/dav1d.c:297:9: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:298:12: branch_true: following ‘true’ branch...
dav1d-1.5.1/tools/dav1d.c:299:16: branch_true: ...to here
dav1d-1.5.1/tools/dav1d.c:299:16: branch_true: following ‘true’ branch...
dav1d-1.5.1/tools/dav1d.c:300:17: branch_true: ...to here
dav1d-1.5.1/tools/dav1d.c:303:20: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:307:20: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:307:12: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:315:16: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:315:16: branch_true: following ‘true’ branch (when ‘n_out == 0’)...
dav1d-1.5.1/tools/dav1d.c:316:28: branch_true: ...to here
dav1d-1.5.1/tools/dav1d.c:316:20: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:324:24: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:324:16: branch_false: following ‘false’ branch...
dav1d-1.5.1/tools/dav1d.c:326:13: branch_false: ...to here
dav1d-1.5.1/tools/dav1d.c:328:17: call_function: calling ‘synchronize’ from ‘main’
#   98|   {
#   99|       const uint64_t tcurr = get_time_nanos();
#  100|->     const uint64_t last = *elapsed;
#  101|       *elapsed = tcurr - tfirst;
#  102|       if (realtime) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
dav1d-1.5.1/tools/input/input.c:126:1: warning[-Wanalyzer-malloc-leak]: leak of ‘probe_data’
dav1d-1.5.1/tools/input/input.c:65:8: branch_false: following ‘false’ branch (when ‘name’ is NULL)...
dav1d-1.5.1/tools/input/input.c:65:8: branch_false: ...to here
dav1d-1.5.1/tools/input/input.c:78:21: branch_true: following ‘true’ branch...
dav1d-1.5.1/tools/input/input.c:79:24: branch_true: ...to here
dav1d-1.5.1/tools/input/input.c:80:37: acquire_memory: allocated here
dav1d-1.5.1/tools/input/input.c:81:12: branch_false: following ‘false’ branch (when ‘probe_data’ is non-NULL)...
dav1d-1.5.1/tools/input/input.c:85:19: branch_false: ...to here
dav1d-1.5.1/tools/input/input.c:86:12: branch_true: following ‘true’ branch...
dav1d-1.5.1/tools/input/input.c:87:86: branch_true: ...to here
dav1d-1.5.1/tools/input/input.c:126:1: danger: ‘probe_data’ leaks here; was allocated at [(5)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/4)
#  124|   
#  125|       return 0;
#  126|-> }
#  127|   
#  128|   int input_read(DemuxerContext *const ctx, Dav1dData *const data) {

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-225.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namedav1d-1.5.2-1.fc44
diffbase-store-results-to/tmp/tmp91mrq4c_/dav1d-1.5.2-1.fc44.tar.xz
diffbase-time-created2026-01-08 16:02:18
diffbase-time-finished2026-01-08 16:04:43
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp91mrq4c_/dav1d-1.5.2-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp91mrq4c_/dav1d-1.5.2-1.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-225.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namedav1d-1.5.1-2.fc43
store-results-to/tmp/tmp5v1ik73_/dav1d-1.5.1-2.fc43.tar.xz
time-created2026-01-08 15:59:13
time-finished2026-01-08 16:02:07
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp5v1ik73_/dav1d-1.5.1-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp5v1ik73_/dav1d-1.5.1-2.fc43.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9