fwupd-efi-1.8-1.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
fwupd-efi-1.8/efi/fwup-common.c:17:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<return-value>’
#   15|   {
#   16|   	BS->Stall(msecs);
#   17|-> }
#   18|   
#   19|   /*

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
fwupd-efi-1.8/efi/fwup-debug.c:26:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<return-value>’
#   24|   {
#   25|   	debugging = val;
#   26|-> }
#   27|   
#   28|   static VOID

Error: GCC_ANALYZER_WARNING (CWE-457): [#def3]
fwupd-efi-1.8/efi/fwup-debug.c:43:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<return-value>’
#   41|   	}
#   42|   	fwup_set_variable(name, &fwupdate_guid, out1, StrSize(out1) - sizeof(CHAR16), attrs);
#   43|-> }
#   44|   
#   45|   VOID

Error: GCC_ANALYZER_WARNING (CWE-404): [#def4]
fwupd-efi-1.8/efi/fwup-debug.c:52:15: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
fwupd-efi-1.8/efi/fwup-debug.c:51:9: acquire_resource: ‘va_start’ called here
fwupd-efi-1.8/efi/fwup-debug.c:52:15: throw: if ‘VPoolPrint’ throws an exception...
fwupd-efi-1.8/efi/fwup-debug.c:52:15: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#   50|   
#   51|   	va_start(args, fmt);
#   52|-> 	tmp = VPoolPrint(fmt, args);
#   53|   	va_end(args);
#   54|   	if (tmp == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def5]
fwupd-efi-1.8/efi/fwup-debug.c:80:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<return-value>’
fwupd-efi-1.8/efi/fwup-debug.c:46:1: enter_function: entry to ‘fwup_log’
fwupd-efi-1.8/efi/fwup-debug.c:54:12: branch_true: following ‘true’ branch...
fwupd-efi-1.8/efi/fwup-debug.c:55:17: branch_true: ...to here
fwupd-efi-1.8/efi/fwup-debug.c:49:31: call_function: inlined call to ‘_FreePool_p’ from ‘fwup_log’
fwupd-efi-1.8/efi/fwup-debug.c:80:1: branch_false: ...to here
fwupd-efi-1.8/efi/fwup-debug.c:80:1: danger: use of uninitialized value ‘<return-value>’ here
#   78|   		}
#   79|   	}
#   80|-> }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def6]
fwupd-efi-1.8/efi/fwupdate.c:42:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<return-value>’
#   40|   	FreePool(update->name);
#   41|   	FreePool(update);
#   42|-> }
#   43|   
#   44|   _DEFINE_CLEANUP_FUNCTION0(FWUP_UPDATE_TABLE *, _fwup_update_table_free_p, fwup_update_table_free)

Error: GCC_ANALYZER_WARNING (CWE-457): [#def7]
fwupd-efi-1.8/efi/fwupdate.c:546:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<return-value>’
#  544|   		  L"fwupdate.efi.debug %p -s .data %p",
#  545|   		  &_text, &_data);
#  546|-> }
#  547|   
#  548|   EFI_STATUS

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-130.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namefwupd-efi-1.8-1.fc44
store-results-to/tmp/tmpd2zwo304/fwupd-efi-1.8-1.fc44.tar.xz
time-created2026-01-08 16:23:43
time-finished2026-01-08 16:24:52
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpd2zwo304/fwupd-efi-1.8-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpd2zwo304/fwupd-efi-1.8-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9