Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
evolution-data-server-3.58.0/iconv-detect.c:139:21: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen("/builddir/build/BUILD/evolution-data-server-3.58.0/redhat-linux-build/iconv-detect.h", "w")’
evolution-data-server-3.58.0/iconv-detect.c:127:12: branch_false: following ‘false’ branch...
evolution-data-server-3.58.0/iconv-detect.c:130:14: branch_false: ...to here
evolution-data-server-3.58.0/iconv-detect.c:130:14: acquire_resource: opened here
evolution-data-server-3.58.0/iconv-detect.c:131:12: branch_false: following ‘false’ branch...
evolution-data-server-3.58.0/iconv-detect.c:134:9: branch_false: ...to here
evolution-data-server-3.58.0/iconv-detect.c:139:21: branch_true: following ‘true’ branch...
evolution-data-server-3.58.0/iconv-detect.c:140:38: branch_true: ...to here
evolution-data-server-3.58.0/iconv-detect.c:140:22: throw: if ‘iconv_open’ throws an exception...
evolution-data-server-3.58.0/iconv-detect.c:139:21: danger: ‘fopen("/builddir/build/BUILD/evolution-data-server-3.58.0/redhat-linux-build/iconv-detect.h", "w")’ leaks here; was opened at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#  137|   	info = iso8859_tests;
#  138|   	/*printf ("#define DEFAULT_ISO_FORMAT(iso,codepage)\t");*/
#  139|-> 	for (i = 0; i < num_iso8859_tests; i++) {
#  140|   		cd = iconv_open (info[i].charset, "UTF-8");
#  141|   		if (cd != (iconv_t) -1) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
evolution-data-server-3.58.0/iconv-detect.c:139:21: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen("/builddir/build/BUILD/evolution-data-server-3.58.0/redhat-linux-build/iconv-detect.h", "w")’
evolution-data-server-3.58.0/iconv-detect.c:127:12: branch_false: following ‘false’ branch...
evolution-data-server-3.58.0/iconv-detect.c:130:14: branch_false: ...to here
evolution-data-server-3.58.0/iconv-detect.c:130:14: acquire_memory: allocated here
evolution-data-server-3.58.0/iconv-detect.c:131:12: branch_false: following ‘false’ branch...
evolution-data-server-3.58.0/iconv-detect.c:134:9: branch_false: ...to here
evolution-data-server-3.58.0/iconv-detect.c:139:21: branch_true: following ‘true’ branch...
evolution-data-server-3.58.0/iconv-detect.c:140:38: branch_true: ...to here
evolution-data-server-3.58.0/iconv-detect.c:140:22: throw: if ‘iconv_open’ throws an exception...
evolution-data-server-3.58.0/iconv-detect.c:139:21: danger: ‘fopen("/builddir/build/BUILD/evolution-data-server-3.58.0/redhat-linux-build/iconv-detect.h", "w")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#  137|   	info = iso8859_tests;
#  138|   	/*printf ("#define DEFAULT_ISO_FORMAT(iso,codepage)\t");*/
#  139|-> 	for (i = 0; i < num_iso8859_tests; i++) {
#  140|   		cd = iconv_open (info[i].charset, "UTF-8");
#  141|   		if (cd != (iconv_t) -1) {

Error: COMPILER_WARNING (CWE-704): [#def3]
evolution-data-server-3.58.0/src/addressbook/libebook-contacts/e-contact.c: scope_hint: In function ‘e_contact_date_from_string’
evolution-data-server-3.58.0/src/addressbook/libebook-contacts/e-contact.c:2323:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2323 |         if ((t = strchr (str, 'T')) != NULL)
#      |                ^
# 2321|   	date = e_contact_date_new ();
# 2322|   	/* ignore time part */
# 2323|-> 	if ((t = strchr (str, 'T')) != NULL)
# 2324|   		length = t - str;
# 2325|   	else

Error: COMPILER_WARNING (CWE-704): [#def4]
evolution-data-server-3.58.0/src/addressbook/libebook-contacts/e-contact.c:2323:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2321|   	date = e_contact_date_new ();
# 2322|   	/* ignore time part */
# 2323|-> 	if ((t = strchr (str, 'T')) != NULL)
# 2324|   		length = t - str;
# 2325|   	else

Error: GCC_ANALYZER_WARNING (CWE-404): [#def5]
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:737:33: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:729:9: acquire_resource: ‘va_start’ called here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:733:28: branch_true: following ‘true’ branch (when ‘any_set != 0’)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:735:41: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:737:33: throw: if ‘g_strcmp0’ throws an exception...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:737:33: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/0)
#  735|   				GError *local_error = NULL;
#  736|   
#  737|-> 				g_assert_cmpstr (record.uid, !=, NULL);
#  738|   				record.folder_id = 0;
#  739|   				success = camel_store_db_write_message (sdb, folder_name, &record, &local_error);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def6]
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:739:43: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:729:9: acquire_resource: ‘va_start’ called here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:733:28: branch_true: following ‘true’ branch (when ‘any_set != 0’)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:735:41: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:739:43: throw: if ‘camel_store_db_write_message’ throws an exception...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:739:43: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/0)
#  737|   				g_assert_cmpstr (record.uid, !=, NULL);
#  738|   				record.folder_id = 0;
#  739|-> 				success = camel_store_db_write_message (sdb, folder_name, &record, &local_error);
#  740|   				g_assert_no_error (local_error);
#  741|   				g_assert_true (success);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def7]
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:740:33: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:729:9: acquire_resource: ‘va_start’ called here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:733:28: branch_true: following ‘true’ branch (when ‘any_set != 0’)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:735:41: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:740:33: throw: if ‘g_assertion_message_error’ throws an exception...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:740:33: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/0)
#  738|   				record.folder_id = 0;
#  739|   				success = camel_store_db_write_message (sdb, folder_name, &record, &local_error);
#  740|-> 				g_assert_no_error (local_error);
#  741|   				g_assert_true (success);
#  742|   			}

Error: GCC_ANALYZER_WARNING (CWE-404): [#def8]
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:741:33: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:729:9: acquire_resource: ‘va_start’ called here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:731:48: branch_true: following ‘true’ branch (when ‘tmp’ is non-NULL)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:732:22: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:733:28: branch_true: following ‘true’ branch (when ‘any_set != 0’)...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:735:41: branch_true: ...to here
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:741:33: throw: if ‘g_assertion_message’ throws an exception...
evolution-data-server-3.58.0/src/camel/tests/misc/lib-camel-test-utils.c:741:33: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/0)
#  739|   				success = camel_store_db_write_message (sdb, folder_name, &record, &local_error);
#  740|   				g_assert_no_error (local_error);
#  741|-> 				g_assert_true (success);
#  742|   			}
#  743|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def9]
evolution-data-server-3.58.0/src/services/evolution-source-registry/evolution-source-registry-migrate-sources.c:1034:29: warning[-Wanalyzer-null-argument]: use of NULL ‘value’ where non-null expected
evolution-data-server-3.58.0/src/services/evolution-source-registry/evolution-source-registry-migrate-sources.c:977:22: branch_true: following ‘true’ branch (when ‘ii != 41’)...
evolution-data-server-3.58.0/src/services/evolution-source-registry/evolution-source-registry-migrate-sources.c:981:17: branch_true: ...to here
evolution-data-server-3.58.0/src/services/evolution-source-registry/evolution-source-registry-migrate-sources.c:1029:20: branch_true: following ‘true’ branch (when the strings are equal)...
evolution-data-server-3.58.0/src/services/evolution-source-registry/evolution-source-registry-migrate-sources.c:1034:29: branch_true: ...to here
evolution-data-server-3.58.0/src/services/evolution-source-registry/evolution-source-registry-migrate-sources.c:1034:29: danger: argument 1 (‘value’) NULL where non-null expected
# 1032|   			GEnumValue *enum_value;
# 1033|   
# 1034|-> 			if (strcmp (value, "always") == 0)
# 1035|   				method = CAMEL_NETWORK_SECURITY_METHOD_SSL_ON_ALTERNATE_PORT;
# 1036|   			else if (strcmp (value, "1") == 0)

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-124.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameevolution-data-server-3.59.1-1.fc44
diffbase-store-results-to/tmp/tmp73wl1e9z/evolution-data-server-3.59.1-1.fc44.tar.xz
diffbase-time-created2026-01-08 16:17:00
diffbase-time-finished2026-01-08 16:30:00
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp73wl1e9z/evolution-data-server-3.59.1-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp73wl1e9z/evolution-data-server-3.59.1-1.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-124.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameevolution-data-server-3.58.0-1.fc43
store-results-to/tmp/tmph6r4eplz/evolution-data-server-3.58.0-1.fc43.tar.xz
time-created2026-01-08 16:02:36
time-finished2026-01-08 16:16:05
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmph6r4eplz/evolution-data-server-3.58.0-1.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmph6r4eplz/evolution-data-server-3.58.0-1.fc43.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9