epiphany-49.2-1.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
epiphany-49.2/embed/ephy-client-certificate-manager.c:284:79: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
epiphany-49.2/embed/ephy-client-certificate-manager.c:269:1: enter_function: entry to ‘certificate_pin_response’
epiphany-49.2/embed/ephy-client-certificate-manager.c:277:6: branch_false: following ‘false’ branch (when the strings are non-equal)...
epiphany-49.2/embed/ephy-client-certificate-manager.c:282:3: branch_false: ...to here
epiphany-49.2/embed/ephy-client-certificate-manager.c:282:3: branch_true: following ‘true’ branch...
epiphany-49.2/embed/ephy-client-certificate-manager.c:283:20: call_function: inlined call to ‘g_strdup_inline’ from ‘certificate_pin_response’
epiphany-49.2/embed/ephy-client-certificate-manager.c:283:3: release_memory: using NULL here
epiphany-49.2/embed/ephy-client-certificate-manager.c:284:79: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#  282|     g_assert (!self->password);
#  283|     self->password = g_strdup (password);
#  284|->   gck_session_login_async (self->session, CKU_USER, (guint8 *)self->password, strlen (self->password), self->cancellable, logged_in_cb, self);
#  285|   }
#  286|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
epiphany-49.2/embed/ephy-download.h:30:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘download’
epiphany-49.2/src/webextension/api/downloads.c:36:1: enter_function: entry to ‘downloads_handler_download’
epiphany-49.2/src/webextension/api/downloads.c:50:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/webextension/api/downloads.c:55:9: branch_false: ...to here
epiphany-49.2/src/webextension/api/downloads.c:56:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/webextension/api/downloads.c:61:14: branch_false: ...to here
epiphany-49.2/src/webextension/api/downloads.c:44:20: call_function: inlined call to ‘g_autoptr_cleanup_generic_gfree’ from ‘downloads_handler_download’
epiphany-49.2/src/webextension/api/downloads.c:43:28: call_function: inlined call to ‘glib_autoptr_cleanup_EphyDownload’ from ‘downloads_handler_download’
#   28|   #define EPHY_TYPE_DOWNLOAD (ephy_download_get_type ())
#   29|   
#   30|-> G_DECLARE_FINAL_TYPE (EphyDownload, ephy_download, EPHY, DOWNLOAD, GObject)
#   31|   
#   32|   typedef enum

Error: COMPILER_WARNING (CWE-704): [#def3]
epiphany-49.2/embed/ephy-file-monitor.c: scope_hint: In function ‘ephy_file_monitor_update_location’
epiphany-49.2/embed/ephy-file-monitor.c:184:10: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  184 |   anchor = strchr (address, '#');
#      |          ^
#  182|   
#  183|     /* strip off anchors */
#  184|->   anchor = strchr (address, '#');
#  185|     if (anchor != NULL)
#  186|       url = g_strndup (address, anchor - address);

Error: COMPILER_WARNING (CWE-704): [#def4]
epiphany-49.2/embed/ephy-file-monitor.c:184:10: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  182|   
#  183|     /* strip off anchors */
#  184|->   anchor = strchr (address, '#');
#  185|     if (anchor != NULL)
#  186|       url = g_strndup (address, anchor - address);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
epiphany-49.2/embed/ephy-find-toolbar.c:195:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘*toolbar.find_string’
epiphany-49.2/embed/ephy-find-toolbar.c:188:1: enter_function: entry to ‘update_find_string’
epiphany-49.2/embed/ephy-find-toolbar.c:193:3: branch_false: following ‘false’ branch (when ‘_handle_id == 0’)...
epiphany-49.2/embed/ephy-find-toolbar.c:195:15: branch_false: ...to here
epiphany-49.2/embed/ephy-find-toolbar.c:195:15: release_memory: ‘*toolbar.find_string’ is NULL
epiphany-49.2/embed/ephy-find-toolbar.c:195:7: danger: dereference of NULL ‘*toolbar.find_string’
#  193|     g_clear_handle_id (&toolbar->find_source_id, g_source_remove);
#  194|   
#  195|->   if (strlen (toolbar->find_string) == 0) {
#  196|       clear_status (toolbar);
#  197|       return;

Error: CPPCHECK_WARNING (CWE-476): [#def6]
epiphany-49.2/embed/ephy-reader-handler.c:97: warning[nullPointer]: Possible null pointer dereference: data
#   95|       webkit_uri_scheme_request_finish_error (request->scheme_request, error);
#   96|     } else {
#   97|->     data_length = MIN (strlen (data), G_MAXSSIZE);
#   98|       stream = g_memory_input_stream_new_from_data (data, data_length, g_free);
#   99|       webkit_uri_scheme_request_finish (request->scheme_request, stream, data_length, "text/html");

Error: CPPCHECK_WARNING (CWE-476): [#def7]
epiphany-49.2/embed/ephy-view-source-handler.c:94: warning[nullPointer]: Possible null pointer dereference: data
#   92|       webkit_uri_scheme_request_finish_error (request->scheme_request, error);
#   93|     } else {
#   94|->     data_length = MIN (strlen (data), G_MAXSSIZE);
#   95|       stream = g_memory_input_stream_new_from_data (data, data_length, g_free);
#   96|       webkit_uri_scheme_request_finish (request->scheme_request, stream, data_length, "text/html");

Error: GCC_ANALYZER_WARNING (CWE-688): [#def8]
epiphany-49.2/lib/contrib/gnome-languages.c:326:28: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
epiphany-49.2/lib/contrib/gnome-languages.c:613:1: enter_function: entry to ‘get_territory_count’
epiphany-49.2/lib/contrib/gnome-languages.c:615:12: branch_true: following ‘true’ branch...
epiphany-49.2/lib/contrib/gnome-languages.c:616:17: branch_true: ...to here
epiphany-49.2/lib/contrib/gnome-languages.c:616:17: call_function: calling ‘collect_locales’ from ‘get_territory_count’
#  324|                   g_autofree char *normalized_codeset = normalize_codeset (codeset);
#  325|   
#  326|->                 *is_utf8 = strcmp (normalized_codeset, "UTF-8") == 0;
#  327|           }
#  328|   

Error: COMPILER_WARNING (CWE-704): [#def9]
epiphany-49.2/lib/ephy-debug.c: scope_hint: In function ‘ephy_should_profile’
epiphany-49.2/lib/ephy-debug.c:166:9: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  166 |   slash = strrchr (module, '/');
#      |         ^
#  164|     guint i;
#  165|   
#  166|->   slash = strrchr (module, '/');
#  167|   
#  168|     /* Happens on builddir != srcdir builds */

Error: COMPILER_WARNING (CWE-704): [#def10]
epiphany-49.2/lib/ephy-debug.c:166:9: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  164|     guint i;
#  165|   
#  166|->   slash = strrchr (module, '/');
#  167|   
#  168|     /* Happens on builddir != srcdir builds */

Error: GCC_ANALYZER_WARNING (CWE-688): [#def11]
epiphany-49.2/lib/ephy-file-helpers.c:238:5: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
epiphany-49.2/lib/ephy-file-helpers.c:229:1: enter_function: entry to ‘ephy_file_tmp_filename’
epiphany-49.2/lib/ephy-file-helpers.c:237:6: branch_true: following ‘true’ branch...
epiphany-49.2/lib/ephy-file-helpers.c:238:5: branch_true: ...to here
epiphany-49.2/lib/ephy-file-helpers.c:238:5: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#  236|   
#  237|     if (fd != -1) {
#  238|->     unlink (name);
#  239|       close (fd);
#  240|     } else {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def12]
epiphany-49.2/lib/ephy-search-engine.h:33:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>’
epiphany-49.2/src/ephy-suggestion-model.c:417:1: enter_function: entry to ‘query_collection_done’
epiphany-49.2/src/ephy-suggestion-model.c:427:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/ephy-suggestion-model.c:430:3: branch_false: ...to here
epiphany-49.2/src/ephy-suggestion-model.c:443:6: branch_true: following ‘true’ branch...
epiphany-49.2/src/ephy-suggestion-model.c:451:32: branch_true: ...to here
epiphany-49.2/src/ephy-suggestion-model.c:458:93: branch_false: following ‘false’ branch...
epiphany-49.2/src/ephy-suggestion-model.c:467:32: branch_false: ...to here
epiphany-49.2/src/ephy-suggestion-model.c:467:77: branch_false: following ‘false’ branch...
epiphany-49.2/src/ephy-suggestion-model.c:476:32: branch_false: ...to here
epiphany-49.2/src/ephy-suggestion-model.c:476:75: branch_false: following ‘false’ branch...
epiphany-49.2/src/ephy-suggestion-model.c:485:9: branch_false: ...to here
epiphany-49.2/src/ephy-suggestion-model.c:485:8: branch_true: following ‘true’ branch...
epiphany-49.2/src/ephy-suggestion-model.c:486:16: call_function: calling ‘add_search_engines’ from ‘query_collection_done’
#   31|   #define EPHY_TYPE_SEARCH_ENGINE (ephy_search_engine_get_type())
#   32|   
#   33|-> G_DECLARE_FINAL_TYPE (EphySearchEngine, ephy_search_engine, EPHY, SEARCH_ENGINE, GObject)
#   34|   
#   35|   /* It's intended that there's no ephy_search_engine_new() as that just can't be

Error: GCC_ANALYZER_WARNING (CWE-457): [#def13]
epiphany-49.2/lib/ephy-search-engine.h:33:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘opensearch’
epiphany-49.2/tests/ephy-search-engine-manager-test.c:280:1: enter_function: entry to ‘test_opensearch’
epiphany-49.2/tests/ephy-search-engine-manager-test.c:284:20: call_function: inlined call to ‘g_autoptr_cleanup_generic_gfree’ from ‘test_opensearch’
epiphany-49.2/tests/ephy-search-engine-manager-test.c:283:32: call_function: inlined call to ‘glib_autoptr_cleanup_EphySearchEngine’ from ‘test_opensearch’
#   31|   #define EPHY_TYPE_SEARCH_ENGINE (ephy_search_engine_get_type())
#   32|   
#   33|-> G_DECLARE_FINAL_TYPE (EphySearchEngine, ephy_search_engine, EPHY, SEARCH_ENGINE, GObject)
#   34|   
#   35|   /* It's intended that there's no ephy_search_engine_new() as that just can't be

Error: GCC_ANALYZER_WARNING (CWE-457): [#def14]
epiphany-49.2/lib/ephy-search-engine.h:33:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘search_engine’
epiphany-49.2/lib/ephy-search-engine-manager.c:189:1: enter_function: entry to ‘ephy_search_engine_manager_init’
epiphany-49.2/lib/ephy-search-engine-manager.c:199:3: call_function: calling ‘load_search_engines_from_settings’ from ‘ephy_search_engine_manager_init’
#   31|   #define EPHY_TYPE_SEARCH_ENGINE (ephy_search_engine_get_type())
#   32|   
#   33|-> G_DECLARE_FINAL_TYPE (EphySearchEngine, ephy_search_engine, EPHY, SEARCH_ENGINE, GObject)
#   34|   
#   35|   /* It's intended that there's no ephy_search_engine_new() as that just can't be

Error: GCC_ANALYZER_WARNING (CWE-457): [#def15]
epiphany-49.2/lib/ephy-sqlite-connection.h:32:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘connection’
epiphany-49.2/lib/sync/ephy-password-import.c:109:1: enter_function: entry to ‘ephy_password_import_from_chrome’
epiphany-49.2/lib/sync/ephy-password-import.c:129:6: branch_false: following ‘false’ branch...
epiphany-49.2/lib/sync/ephy-password-import.c:137:8: branch_false: ...to here
epiphany-49.2/lib/sync/ephy-password-import.c:137:6: branch_false: following ‘false’ branch...
epiphany-49.2/lib/sync/ephy-password-import.c:146:15: branch_false: ...to here
epiphany-49.2/lib/sync/ephy-password-import.c:147:6: branch_true: following ‘true’ branch...
epiphany-49.2/lib/sync/ephy-password-import.c:148:5: branch_true: ...to here
epiphany-49.2/lib/sync/ephy-password-import.c:114:35: call_function: inlined call to ‘glib_autoptr_cleanup_EphySQLiteStatement’ from ‘ephy_password_import_from_chrome’
epiphany-49.2/lib/sync/ephy-password-import.c:113:36: call_function: inlined call to ‘glib_autoptr_cleanup_EphySQLiteConnection’ from ‘ephy_password_import_from_chrome’
#   30|   #define EPHY_TYPE_SQLITE_CONNECTION (ephy_sqlite_connection_get_type ())
#   31|   
#   32|-> G_DECLARE_FINAL_TYPE (EphySQLiteConnection, ephy_sqlite_connection, EPHY, SQLITE_CONNECTION, GObject)
#   33|   
#   34|   typedef enum {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def16]
epiphany-49.2/lib/ephy-sqlite-statement.h:30:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘statement’
epiphany-49.2/lib/sync/ephy-password-import.c:109:1: enter_function: entry to ‘ephy_password_import_from_chrome’
epiphany-49.2/lib/sync/ephy-password-import.c:129:6: branch_false: following ‘false’ branch...
epiphany-49.2/lib/sync/ephy-password-import.c:137:8: branch_false: ...to here
epiphany-49.2/lib/sync/ephy-password-import.c:115:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘ephy_password_import_from_chrome’
epiphany-49.2/lib/sync/ephy-password-import.c:114:35: call_function: inlined call to ‘glib_autoptr_cleanup_EphySQLiteStatement’ from ‘ephy_password_import_from_chrome’
#   28|   #define EPHY_TYPE_SQLITE_STATEMENT (ephy_sqlite_statement_get_type ())
#   29|   
#   30|-> G_DECLARE_FINAL_TYPE (EphySQLiteStatement, ephy_sqlite_statement, EPHY, SQLITE_STATEMENT, GObject)
#   31|   
#   32|   gboolean                 ephy_sqlite_statement_bind_null             (EphySQLiteStatement *statement, int column, GError **error);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def17]
epiphany-49.2/lib/ephy-suggestion.h:28:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘suggestion’
epiphany-49.2/src/ephy-location-entry.c:608:1: enter_function: entry to ‘compute_prefix’
epiphany-49.2/src/ephy-location-entry.c:614:21: branch_true: following ‘true’ branch (when ‘idx < n_items’)...
epiphany-49.2/src/ephy-location-entry.c:619:18: branch_true: ...to here
epiphany-49.2/src/ephy-location-entry.c:616:22: call_function: inlined call to ‘g_autoptr_cleanup_generic_gfree’ from ‘compute_prefix’
epiphany-49.2/src/ephy-location-entry.c:615:32: call_function: inlined call to ‘glib_autoptr_cleanup_EphySuggestion’ from ‘compute_prefix’
#   26|   #define EPHY_TYPE_SUGGESTION (ephy_suggestion_get_type())
#   27|   
#   28|-> G_DECLARE_FINAL_TYPE (EphySuggestion, ephy_suggestion, EPHY, SUGGESTION, DzlSuggestion)
#   29|   
#   30|   EphySuggestion *ephy_suggestion_new                      (const char *title_markup,

Error: GCC_ANALYZER_WARNING (CWE-688): [#def18]
epiphany-49.2/lib/ephy-web-app-utils.c:434:7: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
epiphany-49.2/lib/ephy-web-app-utils.c:423:1: enter_function: entry to ‘ephy_web_application_ensure_for_app_info’
epiphany-49.2/lib/ephy-web-app-utils.c:431:17: call_function: calling ‘ephy_web_application_get_profile_directory’ from ‘ephy_web_application_ensure_for_app_info’
epiphany-49.2/lib/ephy-web-app-utils.c:431:17: return_function: returning to ‘ephy_web_application_ensure_for_app_info’ from ‘ephy_web_application_get_profile_directory’
epiphany-49.2/lib/ephy-web-app-utils.c:434:7: danger: argument 1 (‘ephy_web_application_get_profile_directory(ephy_web_application_get_app_id_from_name(g_app_info_get_name(app_info)))’) NULL where non-null expected
#  432|   
#  433|     /* Create the profile directory, populate it. */
#  434|->   if (g_mkdir (profile_dir, 488) == -1) {
#  435|       if (errno == EEXIST)
#  436|         return g_steal_pointer (&profile_dir);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def19]
epiphany-49.2/lib/ephy-web-app-utils.h:129:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘app’
epiphany-49.2/lib/ephy-web-app-utils.c:643:1: enter_function: entry to ‘ephy_web_application_for_profile_directory’
epiphany-49.2/lib/ephy-web-app-utils.c:657:8: call_function: calling ‘get_app_id_from_profile_directory’ from ‘ephy_web_application_for_profile_directory’
epiphany-49.2/lib/ephy-web-app-utils.c:657:8: return_function: returning to ‘ephy_web_application_for_profile_directory’ from ‘get_app_id_from_profile_directory’
epiphany-49.2/lib/ephy-web-app-utils.c:658:6: branch_false: following ‘false’ branch...
epiphany-49.2/lib/ephy-web-app-utils.c:661:9: branch_false: ...to here
epiphany-49.2/lib/ephy-web-app-utils.c:664:23: call_function: calling ‘ephy_web_application_get_desktop_path’ from ‘ephy_web_application_for_profile_directory’
epiphany-49.2/lib/ephy-web-app-utils.c:664:23: return_function: returning to ‘ephy_web_application_for_profile_directory’ from ‘ephy_web_application_get_desktop_path’
epiphany-49.2/lib/ephy-web-app-utils.c:665:6: branch_false: following ‘false’ branch...
epiphany-49.2/lib/ephy-web-app-utils.c:695:7: branch_false: ...to here
epiphany-49.2/lib/ephy-web-app-utils.c:695:6: branch_false: following ‘false’ branch...
epiphany-49.2/lib/ephy-web-app-utils.c:700:56: branch_false: ...to here
epiphany-49.2/lib/ephy-web-app-utils.c:701:6: branch_false: following ‘false’ branch...
epiphany-49.2/lib/ephy-web-app-utils.c:706:15: branch_false: ...to here
epiphany-49.2/lib/ephy-web-app-utils.c:648:31: call_function: inlined call to ‘glib_autoptr_cleanup_GDesktopAppInfo’ from ‘ephy_web_application_for_profile_directory’
epiphany-49.2/lib/ephy-web-app-utils.c:646:34: call_function: inlined call to ‘glib_autoptr_cleanup_EphyWebApplication’ from ‘ephy_web_application_for_profile_directory’
#  127|   gboolean            ephy_web_application_is_system (EphyWebApplication *app);
#  128|   
#  129|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (EphyWebApplication, ephy_web_application_free)
#  130|   
#  131|   G_END_DECLS

Error: GCC_ANALYZER_WARNING (CWE-404): [#def20]
epiphany-49.2/lib/sync/ephy-sync-crypto.c:520:11: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
epiphany-49.2/lib/sync/ephy-sync-crypto.c:517:3: acquire_resource: ‘va_start’ called here
epiphany-49.2/lib/sync/ephy-sync-crypto.c:518:10: branch_true: following ‘true’ branch (when ‘next’ is non-NULL)...
epiphany-49.2/lib/sync/ephy-sync-crypto.c:519:5: branch_true: ...to here
epiphany-49.2/lib/sync/ephy-sync-crypto.c:520:11: throw: if ‘g_realloc’ throws an exception...
epiphany-49.2/lib/sync/ephy-sync-crypto.c:520:11: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  518|     while ((next = va_arg (args, guint8 *)) != NULL) {
#  519|       next_len = va_arg (args, gsize);
#  520|->     out = g_realloc (out, out_len + next_len);
#  521|       memcpy (out + out_len, next, next_len);
#  522|       out_len += next_len;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def21]
epiphany-49.2/src/bookmarks/ephy-bookmark.h:30:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘bookmark’
epiphany-49.2/src/bookmarks/ephy-bookmark-properties.c:573:1: enter_function: entry to ‘ephy_bookmark_properties_new_for_link’
epiphany-49.2/src/bookmarks/ephy-bookmark-properties.c:583:6: branch_true: following ‘true’ branch...
epiphany-49.2/src/bookmarks/ephy-bookmark-properties.c:589:10: branch_true: ...to here
epiphany-49.2/src/bookmarks/ephy-bookmark-properties.c:584:22: call_function: inlined call to ‘g_autoptr_cleanup_generic_gfree’ from ‘ephy_bookmark_properties_new_for_link’
epiphany-49.2/src/bookmarks/ephy-bookmark-properties.c:576:28: call_function: inlined call to ‘glib_autoptr_cleanup_EphyBookmark’ from ‘ephy_bookmark_properties_new_for_link’
#   28|   #define EPHY_TYPE_BOOKMARK (ephy_bookmark_get_type ())
#   29|   
#   30|-> G_DECLARE_FINAL_TYPE (EphyBookmark, ephy_bookmark, EPHY, BOOKMARK, GObject)
#   31|   
#   32|   EphyBookmark        *ephy_bookmark_new                    (const char *url,

Error: CPPCHECK_WARNING (CWE-457): [#def22]
epiphany-49.2/src/ephy-action-bar-start.c:349: error[legacyUninitvar]: Uninitialized variable: direction
#  347|       g_assert_not_reached ();
#  348|   
#  349|->   build_history_menu (action_bar_start, widget, direction);
#  350|   
#  351|     gtk_popover_popup (GTK_POPOVER (action_bar_start->history_menu));

Error: CPPCHECK_WARNING (CWE-457): [#def23]
epiphany-49.2/src/ephy-action-bar-start.c:420: error[legacyUninitvar]: Uninitialized variable: action_name
#  418|     window = EPHY_WINDOW (gtk_widget_get_root (widget));
#  419|     action_group = ephy_window_get_action_group (window, "toolbar");
#  420|->   action = g_action_map_lookup_action (G_ACTION_MAP (action_group), action_name);
#  421|     g_action_activate (action, NULL);
#  422|   }

Error: CPPCHECK_WARNING (CWE-457): [#def24]
epiphany-49.2/src/ephy-action-bar.c:363: error[legacyUninitvar]: Uninitialized variable: direction
#  361|       g_assert_not_reached ();
#  362|   
#  363|->   build_history_menu (action_bar, widget, direction);
#  364|   
#  365|     gtk_popover_popup (GTK_POPOVER (action_bar->history_menu));

Error: CPPCHECK_WARNING (CWE-457): [#def25]
epiphany-49.2/src/ephy-action-bar.c:428: error[legacyUninitvar]: Uninitialized variable: action_name
#  426|     window = EPHY_WINDOW (gtk_widget_get_root (widget));
#  427|     action_group = ephy_window_get_action_group (window, "toolbar");
#  428|->   action = g_action_map_lookup_action (G_ACTION_MAP (action_group), action_name);
#  429|     g_action_activate (action, NULL);
#  430|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def26]
epiphany-49.2/src/ephy-history-dialog.c:764:48: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
epiphany-49.2/src/ephy-history-dialog.c:746:1: enter_function: entry to ‘handle_selection_row_activated_event’
epiphany-49.2/src/ephy-history-dialog.c:749:36: call_function: calling ‘get_checked_rows’ from ‘handle_selection_row_activated_event’
epiphany-49.2/src/ephy-history-dialog.c:749:36: return_function: returning to ‘handle_selection_row_activated_event’ from ‘get_checked_rows’
epiphany-49.2/src/ephy-history-dialog.c:754:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/ephy-history-dialog.c:760:7: branch_false: ...to here
epiphany-49.2/src/ephy-history-dialog.c:760:6: branch_true: following ‘true’ branch...
epiphany-49.2/src/ephy-history-dialog.c:763:20: branch_true: ...to here
epiphany-49.2/src/ephy-history-dialog.c:764:48: danger: dereference of NULL ‘get_checked_rows(self)’
#  762|        * that one and the currently clicked row */
#  763|       gint index_a = gtk_list_box_row_get_index (activated_row);
#  764|->     gint index_b = gtk_list_box_row_get_index (checked_rows->data);
#  765|   
#  766|       check_rows_interval (GTK_LIST_BOX (self->listbox), index_a, index_b);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def27]
epiphany-49.2/src/ephy-location-entry.c:360:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
epiphany-49.2/src/ephy-location-entry.c:1292:1: enter_function: entry to ‘ephy_location_entry_do_set_address’
epiphany-49.2/src/ephy-location-entry.c:1316:3: call_function: calling ‘update_url_button_style’ from ‘ephy_location_entry_do_set_address’
#  358|     base_domain = ephy_uri_get_base_domain (host);
#  359|     if (!base_domain) {
#  360|->     LOG ("Failed to update URL button style: failed to get base domain for URL %s: %s", text, error->message);
#  361|       goto out;
#  362|     }

Error: CPPCHECK_WARNING (CWE-457): [#def28]
epiphany-49.2/src/ephy-window.c:2808: error[legacyUninitvar]: Uninitialized variable: n_pinned_pages
# 2806|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),
# 2807|                                          "close-left");
# 2808|->   g_simple_action_set_enabled (G_SIMPLE_ACTION (action), !page || position > n_pinned_pages);
# 2809|   
# 2810|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),

Error: CPPCHECK_WARNING (CWE-457): [#def29]
epiphany-49.2/src/ephy-window.c:2808: error[legacyUninitvar]: Uninitialized variable: position
# 2806|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),
# 2807|                                          "close-left");
# 2808|->   g_simple_action_set_enabled (G_SIMPLE_ACTION (action), !page || position > n_pinned_pages);
# 2809|   
# 2810|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),

Error: CPPCHECK_WARNING (CWE-457): [#def30]
epiphany-49.2/src/ephy-window.c:2812: error[legacyUninitvar]: Uninitialized variable: n_pages
# 2810|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),
# 2811|                                          "close-right");
# 2812|->   g_simple_action_set_enabled (G_SIMPLE_ACTION (action), !page || (position < n_pages - 1 && !pinned));
# 2813|   
# 2814|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),

Error: CPPCHECK_WARNING (CWE-457): [#def31]
epiphany-49.2/src/ephy-window.c:2812: error[legacyUninitvar]: Uninitialized variable: pinned
# 2810|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),
# 2811|                                          "close-right");
# 2812|->   g_simple_action_set_enabled (G_SIMPLE_ACTION (action), !page || (position < n_pages - 1 && !pinned));
# 2813|   
# 2814|     action = g_action_map_lookup_action (G_ACTION_MAP (action_group),

Error: GCC_ANALYZER_WARNING (CWE-688): [#def32]
epiphany-49.2/src/webextension/ephy-web-extension.c:1583:7: warning[-Wanalyzer-null-argument]: use of NULL ‘permission_path’ where non-null expected
epiphany-49.2/src/webextension/ephy-web-extension.c:1639:1: enter_function: entry to ‘ephy_web_extension_rule_matches_uri’
epiphany-49.2/src/webextension/ephy-web-extension.c:1650:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/webextension/ephy-web-extension.c:1655:17: branch_false: ...to here
epiphany-49.2/src/webextension/ephy-web-extension.c:1663:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/webextension/ephy-web-extension.c:1666:37: branch_false: ...to here
epiphany-49.2/src/webextension/ephy-web-extension.c:1666:8: call_function: calling ‘scheme_matches’ from ‘ephy_web_extension_rule_matches_uri’
epiphany-49.2/src/webextension/ephy-web-extension.c:1666:8: return_function: returning to ‘ephy_web_extension_rule_matches_uri’ from ‘scheme_matches’
epiphany-49.2/src/webextension/ephy-web-extension.c:1666:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/webextension/ephy-web-extension.c:1669:49: branch_false: ...to here
epiphany-49.2/src/webextension/ephy-web-extension.c:1669:6: branch_false: following ‘false’ branch...
epiphany-49.2/src/webextension/ephy-web-extension.c:1672:25: branch_false: ...to here
epiphany-49.2/src/webextension/ephy-web-extension.c:1672:25: call_function: calling ‘join_path_and_query’ from ‘ephy_web_extension_rule_matches_uri’
epiphany-49.2/src/webextension/ephy-web-extension.c:1672:25: return_function: returning to ‘ephy_web_extension_rule_matches_uri’ from ‘join_path_and_query’
epiphany-49.2/src/webextension/ephy-web-extension.c:1675:8: call_function: calling ‘path_matches’ from ‘ephy_web_extension_rule_matches_uri’
# 1581|   
# 1582|     /* https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Match_patterns#path */
# 1583|->   if (strcmp (permission_path, "*") == 0)
# 1584|       return TRUE;
# 1585|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def33]
epiphany-49.2/src/webextension/ephy-web-extension.h:37:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘web_extension’
epiphany-49.2/src/webextension/ephy-web-extension.c:1127:1: enter_function: entry to ‘load_directory_or_xpi_ready_cb’
epiphany-49.2/src/webextension/ephy-web-extension.c:1133:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘load_directory_or_xpi_ready_cb’
epiphany-49.2/src/webextension/ephy-web-extension.c:1131:32: call_function: inlined call to ‘glib_autoptr_cleanup_EphyWebExtension’ from ‘load_directory_or_xpi_ready_cb’
#   35|   #define EPHY_TYPE_WEB_EXTENSION (ephy_web_extension_get_type ())
#   36|   
#   37|-> G_DECLARE_FINAL_TYPE (EphyWebExtension, ephy_web_extension, EPHY, WEB_EXTENSION, GObject)
#   38|   
#   39|   /**

Error: GCC_ANALYZER_WARNING (CWE-476): [#def34]
epiphany-49.2/src/window-commands.c:458:61: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
epiphany-49.2/src/window-commands.c:457:6: branch_true: following ‘true’ branch (when ‘num_profiles == 1’)...
epiphany-49.2/src/window-commands.c:458:61: branch_true: ...to here
epiphany-49.2/src/window-commands.c:458:61: danger: dereference of NULL ‘get_firefox_profiles()’
#  456|     num_profiles = g_slist_length (profiles);
#  457|     if (num_profiles == 1) {
#  458|->     imported = ephy_bookmarks_import_from_firefox (manager, profiles->data, &error);
#  459|   
#  460|       show_import_export_result (parent, FALSE, imported, error,

Error: COMPILER_WARNING (CWE-704): [#def35]
epiphany-49.2/src/window-commands.c: scope_hint: In function ‘get_suggested_filename’
epiphany-49.2/src/window-commands.c:2384:24: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 2384 |     char *last_slash = strrchr (path, '/');
#      |                        ^~~~~~~
# 2382|     if (!suggested_filename) {
# 2383|       const char *path = g_uri_get_path (uri);
# 2384|->     char *last_slash = strrchr (path, '/');
# 2385|       if (last_slash)
# 2386|         path = last_slash + 1;

Error: COMPILER_WARNING (CWE-704): [#def36]
epiphany-49.2/src/window-commands.c:2384:24: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 2382|     if (!suggested_filename) {
# 2383|       const char *path = g_uri_get_path (uri);
# 2384|->     char *last_slash = strrchr (path, '/');
# 2385|       if (last_slash)
# 2386|         path = last_slash + 1;

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-173.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameepiphany-49.2-1.fc44
store-results-to/tmp/tmp4yggnphb/epiphany-49.2-1.fc44.tar.xz
time-created2026-01-08 16:12:09
time-finished2026-01-08 16:20:52
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp4yggnphb/epiphany-49.2-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp4yggnphb/epiphany-49.2-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9