gnome-remote-desktop-49.2-1.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
gnome-remote-desktop-49.2/redhat-linux-build/src/grd-dbus-mutter-screen-cast.h:559:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘stream_proxy’
gnome-remote-desktop-49.2/src/grd-session.c:278:1: enter_function: entry to ‘on_screen_cast_stream_proxy_acquired’
gnome-remote-desktop-49.2/src/grd-session.c:290:18: throw: if ‘grd_dbus_mutter_screen_cast_stream_proxy_new_finish’ throws an exception...
gnome-remote-desktop-49.2/src/grd-session.c:287:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘on_screen_cast_stream_proxy_acquired’
gnome-remote-desktop-49.2/src/grd-session.c:283:45: call_function: inlined call to ‘glib_autoptr_cleanup_GrdDBusMutterScreenCastStream’ from ‘on_screen_cast_stream_proxy_acquired’
#  557|   
#  558|   #if GLIB_CHECK_VERSION(2, 44, 0)
#  559|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (GrdDBusMutterScreenCastStream, g_object_unref)
#  560|   #endif
#  561|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
gnome-remote-desktop-49.2/redhat-linux-build/src/grd-dbus-remote-desktop.h:831:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘proxy’
gnome-remote-desktop-49.2/src/grd-daemon-handover.c:608:1: enter_function: entry to ‘on_remote_desktop_rdp_dispatcher_proxy_acquired’
gnome-remote-desktop-49.2/src/grd-daemon-handover.c:618:5: throw: if ‘grd_dbus_remote_desktop_rdp_dispatcher_proxy_new_finish’ throws an exception...
gnome-remote-desktop-49.2/src/grd-daemon-handover.c:613:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘on_remote_desktop_rdp_dispatcher_proxy_acquired’
gnome-remote-desktop-49.2/src/grd-daemon-handover.c:612:49: call_function: inlined call to ‘glib_autoptr_cleanup_GrdDBusRemoteDesktopRdpDispatcher’ from ‘on_remote_desktop_rdp_dispatcher_proxy_acquired’
#  829|   
#  830|   #if GLIB_CHECK_VERSION(2, 44, 0)
#  831|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (GrdDBusRemoteDesktopRdpDispatcher, g_object_unref)
#  832|   #endif
#  833|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
gnome-remote-desktop-49.2/src/grd-clipboard-rdp.c:2437:3: warning[-Wanalyzer-malloc-leak]: leak of ‘cliprdr_server_context_new(vcm)’
gnome-remote-desktop-49.2/src/grd-clipboard-rdp.c:2426:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-clipboard-rdp.c:2427:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-clipboard-rdp.c:2433:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-clipboard-rdp.c:2437:3: throw: if ‘grd_clipboard_initialize’ throws an exception...
gnome-remote-desktop-49.2/src/grd-clipboard-rdp.c:2437:3: danger: ‘cliprdr_server_context_new(vcm)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/0)
# 2435|   
# 2436|     clipboard = GRD_CLIPBOARD (clipboard_rdp);
# 2437|->   grd_clipboard_initialize (clipboard, GRD_SESSION (session_rdp));
# 2438|   
# 2439|     cliprdr_context->useLongFormatNames = TRUE;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def4]
gnome-remote-desktop-49.2/src/grd-configuration.c:84:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘locker’
gnome-remote-desktop-49.2/src/grd-configuration.c:515:1: enter_function: entry to ‘on_authorize_method’
gnome-remote-desktop-49.2/src/grd-configuration.c:527:12: call_function: calling ‘timeout_locker_new’ from ‘on_authorize_method’
gnome-remote-desktop-49.2/src/grd-configuration.c:523:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘on_authorize_method’
gnome-remote-desktop-49.2/src/grd-configuration.c:521:29: call_function: inlined call to ‘glib_autoptr_cleanup_TimeoutLocker’ from ‘on_authorize_method’
#   82|   timeout_locker_free (TimeoutLocker *locker);
#   83|   
#   84|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (TimeoutLocker, timeout_locker_free)
#   85|   
#   86|   #ifdef HAVE_RDP

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
gnome-remote-desktop-49.2/src/grd-configuration.c:87:1: warning[-Wanalyzer-malloc-leak]: leak of ‘rdp_certificate’
gnome-remote-desktop-49.2/src/grd-configuration.c:332:1: enter_function: entry to ‘on_handle_import_certificate’
gnome-remote-desktop-49.2/src/grd-configuration.c:356:8: branch_false: following ‘false’ branch (when ‘fd_list’ is non-NULL)...
gnome-remote-desktop-49.2/src/grd-configuration.c:356:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:365:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:366:31: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:365:7: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:374:7: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:374:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:375:23: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:374:7: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:384:20: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:385:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:391:13: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:393:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:400:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:400:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:409:12: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:410:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:416:13: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:418:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:425:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:425:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:434:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:437:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:444:21: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:444:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-configuration.c:446:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:455:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:340:29: call_function: inlined call to ‘glib_autoptr_cleanup_rdpPrivateKey’ from ‘on_handle_import_certificate’
gnome-remote-desktop-49.2/src/grd-configuration.c:339:30: call_function: inlined call to ‘glib_autoptr_cleanup_rdpCertificate’ from ‘on_handle_import_certificate’
#   85|   
#   86|   #ifdef HAVE_RDP
#   87|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (rdpCertificate, freerdp_certificate_free)
#   88|   G_DEFINE_AUTOPTR_CLEANUP_FUNC (rdpPrivateKey, freerdp_key_free)
#   89|   #endif

Error: GCC_ANALYZER_WARNING (CWE-457): [#def6]
gnome-remote-desktop-49.2/src/grd-configuration.c:88:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘rdp_private_key’
gnome-remote-desktop-49.2/src/grd-configuration.c:332:1: enter_function: entry to ‘on_handle_import_certificate’
gnome-remote-desktop-49.2/src/grd-configuration.c:342:20: call_function: calling ‘g_autoptr_cleanup_generic_gfree’ from ‘on_handle_import_certificate’
gnome-remote-desktop-49.2/src/grd-configuration.c:341:20: call_function: calling ‘g_autoptr_cleanup_generic_gfree’ from ‘on_handle_import_certificate’
gnome-remote-desktop-49.2/src/grd-configuration.c:340:29: call_function: inlined call to ‘glib_autoptr_cleanup_rdpPrivateKey’ from ‘on_handle_import_certificate’
#   86|   #ifdef HAVE_RDP
#   87|   G_DEFINE_AUTOPTR_CLEANUP_FUNC (rdpCertificate, freerdp_certificate_free)
#   88|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (rdpPrivateKey, freerdp_key_free)
#   89|   #endif
#   90|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
gnome-remote-desktop-49.2/src/grd-configuration.c:455:3: warning[-Wanalyzer-malloc-leak]: leak of ‘freerdp_certificate_new_from_file(certificate_filename)’
gnome-remote-desktop-49.2/src/grd-configuration.c:356:8: branch_false: following ‘false’ branch (when ‘fd_list’ is non-NULL)...
gnome-remote-desktop-49.2/src/grd-configuration.c:356:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:365:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:366:31: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:365:7: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:374:7: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:374:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:375:23: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:374:7: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:384:20: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:385:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:391:13: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:393:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:400:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:400:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:409:12: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:410:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:416:13: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:418:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:425:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:425:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:434:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:437:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:444:21: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:444:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-configuration.c:446:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:455:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:455:3: throw: if ‘grd_rewrite_path_to_user_data_dir’ throws an exception...
gnome-remote-desktop-49.2/src/grd-configuration.c:455:3: danger: ‘freerdp_certificate_new_from_file(certificate_filename)’ leaks here; was allocated at [(25)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/24)
#  453|       }
#  454|   
#  455|->   grd_rewrite_path_to_user_data_dir (&key_filename,
#  456|                                        GRD_SERVER_USER_CERT_SUBDIR,
#  457|                                        "rdp-tls.key");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def8]
gnome-remote-desktop-49.2/src/grd-configuration.c:458:8: warning[-Wanalyzer-malloc-leak]: leak of ‘freerdp_certificate_new_from_file(certificate_filename)’
gnome-remote-desktop-49.2/src/grd-configuration.c:356:8: branch_false: following ‘false’ branch (when ‘fd_list’ is non-NULL)...
gnome-remote-desktop-49.2/src/grd-configuration.c:356:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:365:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:366:31: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:365:7: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:374:7: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:374:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:375:23: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:374:7: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:384:20: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:385:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:391:13: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:393:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:400:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:400:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:409:12: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:410:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:416:13: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:418:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:425:8: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:425:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:434:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:437:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:444:21: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:444:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-configuration.c:446:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-configuration.c:455:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-configuration.c:458:8: throw: if ‘grd_write_fd_to_file’ throws an exception...
gnome-remote-desktop-49.2/src/grd-configuration.c:458:8: danger: ‘freerdp_certificate_new_from_file(certificate_filename)’ leaks here; was allocated at [(25)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/24)
#  456|                                        GRD_SERVER_USER_CERT_SUBDIR,
#  457|                                        "rdp-tls.key");
#  458|->   if (!grd_write_fd_to_file (key_fd, key_filename, NULL, &error))
#  459|       {
#  460|         g_dbus_method_invocation_return_gerror (invocation, error);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def9]
gnome-remote-desktop-49.2/src/grd-credentials-file.h:28:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘credentials_file’
gnome-remote-desktop-49.2/src/grd-credentials-file.c:144:1: enter_function: entry to ‘grd_credentials_file_new’
gnome-remote-desktop-49.2/src/grd-credentials-file.c:157:8: throw: if ‘g_file_query_exists’ throws an exception...
gnome-remote-desktop-49.2/src/grd-credentials-file.c:148:21: call_function: inlined call to ‘glib_autoptr_cleanup_GFile’ from ‘grd_credentials_file_new’
gnome-remote-desktop-49.2/src/grd-credentials-file.c:147:20: call_function: calling ‘g_autoptr_cleanup_generic_gfree’ from ‘grd_credentials_file_new’
gnome-remote-desktop-49.2/src/grd-credentials-file.c:146:34: call_function: inlined call to ‘glib_autoptr_cleanup_GrdCredentialsFile’ from ‘grd_credentials_file_new’
#   26|   
#   27|   #define GRD_TYPE_CREDENTIALS_FILE (grd_credentials_file_get_type ())
#   28|-> G_DECLARE_FINAL_TYPE (GrdCredentialsFile, grd_credentials_file, GRD,
#   29|                         CREDENTIALS_FILE, GrdCredentials)
#   30|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def10]
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:64:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/urandom", 0)’
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:54:8: acquire_resource: opened here
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:55:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:64:11: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:64:11: throw: if ‘g_malloc’ throws an exception...
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:64:11: danger: ‘open("/dev/urandom", 0)’ leaks here; was opened at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   62|       }
#   63|   
#   64|->   bytes = g_malloc (size);
#   65|     do
#   66|       ret = read (fd, bytes, size);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def11]
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:69:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open("/dev/urandom", 0)’
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:54:8: acquire_resource: opened here
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:55:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:64:11: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:69:10: danger: ‘open("/dev/urandom", 0)’ leaks here; was opened at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#   67|     while ((ret == -1 &&
#   68|            (errno == EINTR || errno == EAGAIN || errno == EWOULDBLOCK)) ||
#   69|->          ret < size);
#   70|   
#   71|     close (fd);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def12]
gnome-remote-desktop-49.2/src/grd-credentials-one-time.h:28:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘credentials_one_time’
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:182:1: enter_function: entry to ‘grd_credentials_one_time_new’
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:187:26: call_function: calling ‘grd_credentials_one_time_get_type’ from ‘grd_credentials_one_time_new’
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:185:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘grd_credentials_one_time_new’
gnome-remote-desktop-49.2/src/grd-credentials-one-time.c:184:37: call_function: inlined call to ‘glib_autoptr_cleanup_GrdCredentialsOneTime’ from ‘grd_credentials_one_time_new’
#   26|   
#   27|   #define GRD_TYPE_CREDENTIALS_ONE_TIME (grd_credentials_one_time_get_type ())
#   28|-> G_DECLARE_FINAL_TYPE (GrdCredentialsOneTime, grd_credentials_one_time,
#   29|                         GRD, CREDENTIALS_ONE_TIME, GrdCredentials)
#   30|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def13]
gnome-remote-desktop-49.2/src/grd-ctl.c:485:7: warning[-Wanalyzer-null-argument]: use of NULL ‘password’ where non-null expected
gnome-remote-desktop-49.2/src/grd-ctl.c:466:1: enter_function: entry to ‘vnc_set_credentials’
gnome-remote-desktop-49.2/src/grd-ctl.c:471:20: release_memory: ‘password’ is NULL
gnome-remote-desktop-49.2/src/grd-ctl.c:473:6: branch_false: following ‘false’ branch (when ‘argc > 0’)...
gnome-remote-desktop-49.2/src/grd-ctl.c:482:18: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-ctl.c:485:7: release_memory: ‘password’ is NULL
gnome-remote-desktop-49.2/src/grd-ctl.c:485:7: danger: argument 1 (‘password’) NULL where non-null expected
#  483|       }
#  484|   
#  485|->   if (strlen (password) > MAX_VNC_PASSWORD_SIZE)
#  486|       {
#  487|         g_set_error (error, G_IO_ERROR, G_IO_ERROR_INVALID_DATA,

Error: CPPCHECK_WARNING (CWE-664): [#def14]
gnome-remote-desktop-49.2/src/grd-daemon.c:958: error[va_end_missing]: va_list 'booleans' was opened but not closed by va_end().
#  956|       booleans_count += va_arg (booleans, gboolean) ? 1 : 0;
#  957|   
#  958|->   return booleans_count;
#  959|   }
#  960|   

Error: GCC_ANALYZER_WARNING (CWE-404): [#def15]
gnome-remote-desktop-49.2/src/grd-daemon.c:959:1: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
gnome-remote-desktop-49.2/src/grd-daemon.c:953:3: acquire_resource: ‘va_start’ called here
gnome-remote-desktop-49.2/src/grd-daemon.c:955:19: branch_false: following ‘false’ branch (when ‘i >= n_args’)...
gnome-remote-desktop-49.2/src/grd-daemon.c:959:1: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-daemon.c:959:1: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  957|   
#  958|     return booleans_count;
#  959|-> }
#  960|   
#  961|   int

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:295:23: warning[-Wanalyzer-malloc-leak]: leak of ‘Stream_New(0, 16384)’
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:281:15: branch_true: following ‘true’ branch (when ‘i != 4’)...
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:285:17: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:291:15: branch_true: following ‘true’ branch (when ‘i != 2’)...
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:295:23: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:295:23: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:296:10: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:302:7: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:291:15: branch_true: following ‘true’ branch (when ‘i != 2’)...
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:295:23: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:295:23: throw: if ‘Stream_New’ throws an exception...
gnome-remote-desktop-49.2/src/grd-encode-session-ca-sw.c:295:23: danger: ‘Stream_New(0, 16384)’ leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  293|         wStream *encode_stream;
#  294|   
#  295|->       encode_stream = Stream_New (NULL, INITIAL_STREAM_SIZE);
#  296|         if (!encode_stream)
#  297|           {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def17]
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:156:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘h264_frame’
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1225:1: enter_function: entry to ‘grd_encode_session_vaapi_encode_frame’
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1236:3: branch_true: following ‘true’ branch...
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1238:3: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1240:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1245:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1245:3: branch_true: following ‘true’ branch...
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1247:16: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-encode-session-vaapi.c:1247:16: call_function: calling ‘encode_frame’ from ‘grd_encode_session_vaapi_encode_frame’
#  154|   
#  155|   G_DEFINE_AUTOPTR_CLEANUP_FUNC (VAAPIPicture, vaapi_picture_free)
#  156|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (H264Frame, h264_frame_free)
#  157|   G_DEFINE_AUTOPTR_CLEANUP_FUNC (NV12VkVASurface, nv12_vkva_surface_free)
#  158|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def18]
gnome-remote-desktop-49.2/src/grd-encode-session.h:28:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘encode_session’
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:415:1: enter_function: entry to ‘try_create_vaapi_session’
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:435:3: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:435:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:435:3: throw: if ‘g_assertion_message_expr’ throws an exception...
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:431:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘try_create_vaapi_session’
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:427:32: call_function: inlined call to ‘glib_autoptr_cleanup_GrdEncodeSession’ from ‘try_create_vaapi_session’
#   26|   
#   27|   #define GRD_TYPE_ENCODE_SESSION (grd_encode_session_get_type ())
#   28|-> G_DECLARE_DERIVABLE_TYPE (GrdEncodeSession, grd_encode_session,
#   29|                             GRD, ENCODE_SESSION, GObject)
#   30|   

Error: GCC_ANALYZER_WARNING (CWE-1335): [#def19]
gnome-remote-desktop-49.2/src/grd-nal-writer.c:150:39: warning[-Wanalyzer-shift-count-overflow]: shift by count (‘32’) >= precision of type (‘32’)
gnome-remote-desktop-49.2/src/grd-nal-writer.c:838:1: enter_function: entry to ‘grd_nal_writer_get_slice_header_bitstream’
gnome-remote-desktop-49.2/src/grd-nal-writer.c:850:3: call_function: calling ‘start_bitstream’ from ‘grd_nal_writer_get_slice_header_bitstream’
gnome-remote-desktop-49.2/src/grd-nal-writer.c:850:3: return_function: returning to ‘grd_nal_writer_get_slice_header_bitstream’ from ‘start_bitstream’
gnome-remote-desktop-49.2/src/grd-nal-writer.c:851:3: call_function: inlined call to ‘write_nal_start_code_prefix’ from ‘grd_nal_writer_get_slice_header_bitstream’
#  148|     if (bits_left > n_bits)
#  149|       {
#  150|->       nal_bitstream->buffer[byte_pos] <<= n_bits;
#  151|         nal_bitstream->buffer[byte_pos] |= value;
#  152|         return;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def20]
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:760:3: warning[-Wanalyzer-malloc-leak]: leak of ‘rdpsnd_server_context_new(vcm)’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:754:20: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:755:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:758:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:760:3: throw: if ‘grd_rdp_dvc_initialize_base’ throws an exception...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:760:3: danger: ‘rdpsnd_server_context_new(vcm)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  758|     audio_playback->rdpsnd_context = rdpsnd_context;
#  759|   
#  760|->   grd_rdp_dvc_initialize_base (GRD_RDP_DVC (audio_playback),
#  761|                                  dvc_handler, session_rdp,
#  762|                                  GRD_RDP_CHANNEL_AUDIO_PLAYBACK);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def21]
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1230:11: warning[-Wanalyzer-null-argument]: use of NULL ‘*item.value’ where non-null expected
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1203:1: enter_function: entry to ‘registry_event_global’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1219:6: branch_false: following ‘false’ branch (when the strings are equal)...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1222:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1222:3: branch_true: following ‘true’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1224:19: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1224:10: branch_true: following ‘true’ branch (when the strings are equal)...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1226:11: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1226:11: branch_false: following ‘false’ branch (when ‘_ptr’ is NULL)...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1227:23: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1227:11: release_memory: ‘*item.value’ is NULL
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1229:10: branch_true: following ‘true’ branch (when the strings are equal)...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1230:19: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:1230:11: danger: argument 1 (‘*item.value’) NULL where non-null expected
# 1228|           }
# 1229|         if (strcmp (item->key, "media.class") == 0 &&
# 1230|->           strcmp (item->value, "Audio/Sink") == 0)
# 1231|           found_audio_sink = TRUE;
# 1232|       }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def22]
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.h:25:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘audio_playback’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:743:1: enter_function: entry to ‘grd_rdp_dvc_audio_playback_new’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:753:20: call_function: calling ‘grd_rdp_dvc_audio_playback_get_type’ from ‘grd_rdp_dvc_audio_playback_new’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:751:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘grd_rdp_dvc_audio_playback_new’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-audio-playback.c:748:38: call_function: inlined call to ‘glib_autoptr_cleanup_GrdRdpDvcAudioPlayback’ from ‘grd_rdp_dvc_audio_playback_new’
#   23|   
#   24|   #define GRD_TYPE_RDP_DVC_AUDIO_PLAYBACK (grd_rdp_dvc_audio_playback_get_type ())
#   25|-> G_DECLARE_FINAL_TYPE (GrdRdpDvcAudioPlayback, grd_rdp_dvc_audio_playback,
#   26|                         GRD, RDP_DVC_AUDIO_PLAYBACK, GrdRdpDvc)
#   27|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def23]
gnome-remote-desktop-49.2/src/grd-rdp-dvc-display-control.c:170:3: warning[-Wanalyzer-malloc-leak]: leak of ‘disp_server_context_new(vcm)’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-display-control.c:162:18: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-display-control.c:163:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-display-control.c:166:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-display-control.c:170:3: throw: if ‘grd_rdp_dvc_initialize_base’ throws an exception...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-display-control.c:170:3: danger: ‘disp_server_context_new(vcm)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  168|     display_control->session_rdp = session_rdp;
#  169|   
#  170|->   grd_rdp_dvc_initialize_base (GRD_RDP_DVC (display_control),
#  171|                                  dvc_handler, session_rdp,
#  172|                                  GRD_RDP_CHANNEL_DISPLAY_CONTROL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def24]
gnome-remote-desktop-49.2/src/grd-rdp-dvc-graphics-pipeline.c:2153:3: warning[-Wanalyzer-malloc-leak]: leak of ‘rdpgfx_server_context_new(vcm)’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-graphics-pipeline.c:2142:20: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-graphics-pipeline.c:2143:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-graphics-pipeline.c:2146:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-graphics-pipeline.c:2153:3: throw: if ‘grd_rdp_dvc_initialize_base’ throws an exception...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-graphics-pipeline.c:2153:3: danger: ‘rdpgfx_server_context_new(vcm)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
# 2151|     graphics_pipeline->rfx_context = rfx_context;
# 2152|   
# 2153|->   grd_rdp_dvc_initialize_base (GRD_RDP_DVC (graphics_pipeline),
# 2154|                                  dvc_handler, session_rdp,
# 2155|                                  GRD_RDP_CHANNEL_GRAPHICS_PIPELINE);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def25]
gnome-remote-desktop-49.2/src/grd-rdp-dvc-telemetry.c:134:3: warning[-Wanalyzer-malloc-leak]: leak of ‘telemetry_server_context_new(vcm)’
gnome-remote-desktop-49.2/src/grd-rdp-dvc-telemetry.c:128:23: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-telemetry.c:129:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-telemetry.c:132:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-dvc-telemetry.c:134:3: throw: if ‘grd_rdp_dvc_initialize_base’ throws an exception...
gnome-remote-desktop-49.2/src/grd-rdp-dvc-telemetry.c:134:3: danger: ‘telemetry_server_context_new(vcm)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  132|     telemetry->telemetry_context = telemetry_context;
#  133|   
#  134|->   grd_rdp_dvc_initialize_base (GRD_RDP_DVC (telemetry),
#  135|                                  dvc_handler, session_rdp,
#  136|                                  GRD_RDP_CHANNEL_TELEMETRY);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def26]
gnome-remote-desktop-49.2/src/grd-rdp-fuse-clipboard.c:366:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘entry’
gnome-remote-desktop-49.2/src/grd-rdp-fuse-clipboard.c:350:7: branch_true: following ‘true’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-fuse-clipboard.c:355:7: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-fuse-clipboard.c:358:14: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-fuse-clipboard.c:366:7: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-fuse-clipboard.c:366:7: danger: dereference of NULL ‘entry’
#  364|           }
#  365|   
#  366|->       g_debug ("[FUSE Clipboard] Force clearing selection with clipDataId %u",
#  367|                  entry->clip_data_id);
#  368|         clear_entry_selection (rdp_fuse_clipboard, entry);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def27]
gnome-remote-desktop-49.2/src/grd-rdp-render-context.h:28:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘render_context’
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:660:1: enter_function: entry to ‘grd_rdp_render_context_new’
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:670:3: branch_false: following ‘false’ branch (when ‘graphics_pipeline’ is NULL)...
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:670:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:670:3: throw: if ‘g_assertion_message_expr’ throws an exception...
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:668:22: call_function: inlined call to ‘glib_autoptr_cleanup_GError’ from ‘grd_rdp_render_context_new’
gnome-remote-desktop-49.2/src/grd-rdp-render-context.c:667:35: call_function: inlined call to ‘glib_autoptr_cleanup_GrdRdpRenderContext’ from ‘grd_rdp_render_context_new’
#   26|   
#   27|   #define GRD_TYPE_RDP_RENDER_CONTEXT (grd_rdp_render_context_get_type ())
#   28|-> G_DECLARE_FINAL_TYPE (GrdRdpRenderContext, grd_rdp_render_context,
#   29|                         GRD, RDP_RENDER_CONTEXT, GObject)
#   30|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def28]
gnome-remote-desktop-49.2/src/grd-rdp-routing-token.c:54:3: warning[-Wanalyzer-malloc-leak]: leak of ‘s’
gnome-remote-desktop-49.2/src/grd-rdp-routing-token.c:171:1: enter_function: entry to ‘peek_routing_token’
gnome-remote-desktop-49.2/src/grd-rdp-routing-token.c:197:7: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-rdp-routing-token.c:198:3: branch_true: following ‘true’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-routing-token.c:200:24: call_function: inlined call to ‘Stream_Buffer’ from ‘peek_routing_token’
gnome-remote-desktop-49.2/src/grd-rdp-routing-token.c:200:8: call_function: calling ‘peek_bytes’ from ‘peek_routing_token’
gnome-remote-desktop-49.2/src/grd-rdp-routing-token.c:177:23: call_function: calling ‘glib_autoptr_cleanup_wStream’ from ‘peek_routing_token’
#   52|   wstream_free_full (wStream *s)
#   53|   {
#   54|->   Stream_Free (s, TRUE);
#   55|   }
#   56|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def29]
gnome-remote-desktop-49.2/src/grd-rdp-sw-encoder-ca.c:239:3: warning[-Wanalyzer-malloc-leak]: leak of ‘rfx_context_new(1)’
gnome-remote-desktop-49.2/src/grd-rdp-sw-encoder-ca.c:231:29: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-rdp-sw-encoder-ca.c:232:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-rdp-sw-encoder-ca.c:239:3: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-rdp-sw-encoder-ca.c:239:3: danger: ‘rfx_context_new(1)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  237|       }
#  238|   #if G_BYTE_ORDER == G_LITTLE_ENDIAN
#  239|->   rfx_context_set_pixel_format (encoder_ca->rfx_context,
#  240|                                   PIXEL_FORMAT_BGRX32);
#  241|   #else

Error: GCC_ANALYZER_WARNING (CWE-401): [#def30]
gnome-remote-desktop-49.2/src/grd-settings.c:95:1: warning[-Wanalyzer-malloc-leak]: leak of ‘rdp_certificate’
gnome-remote-desktop-49.2/src/grd-settings.c:440:1: enter_function: entry to ‘update_rdp_server_fingerprint’
gnome-remote-desktop-49.2/src/grd-settings.c:448:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-settings.c:453:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:459:17: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:460:6: branch_true: following ‘true’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:462:7: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:444:30: call_function: inlined call to ‘glib_autoptr_cleanup_rdpCertificate’ from ‘update_rdp_server_fingerprint’
#   93|   
#   94|   #ifdef HAVE_RDP
#   95|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (rdpCertificate, freerdp_certificate_free)
#   96|   #endif
#   97|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def31]
gnome-remote-desktop-49.2/src/grd-settings.c:95:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘rdp_certificate’
gnome-remote-desktop-49.2/src/grd-settings.c:440:1: enter_function: entry to ‘update_rdp_server_fingerprint’
gnome-remote-desktop-49.2/src/grd-settings.c:446:20: call_function: calling ‘g_autoptr_cleanup_generic_gfree’ from ‘update_rdp_server_fingerprint’
gnome-remote-desktop-49.2/src/grd-settings.c:444:30: call_function: inlined call to ‘glib_autoptr_cleanup_rdpCertificate’ from ‘update_rdp_server_fingerprint’
#   93|   
#   94|   #ifdef HAVE_RDP
#   95|-> G_DEFINE_AUTOPTR_CLEANUP_FUNC (rdpCertificate, freerdp_certificate_free)
#   96|   #endif
#   97|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def32]
gnome-remote-desktop-49.2/src/grd-settings.c:459:17: warning[-Wanalyzer-malloc-leak]: leak of ‘freerdp_certificate_new_from_file(*(GrdSettingsPrivate *)<unknown>.rdp.server_cert_path)’
gnome-remote-desktop-49.2/src/grd-settings.c:448:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-settings.c:453:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:459:17: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:459:17: throw: if ‘freerdp_certificate_get_fingerprint’ throws an exception...
gnome-remote-desktop-49.2/src/grd-settings.c:459:17: danger: ‘freerdp_certificate_new_from_file(*(GrdSettingsPrivate *)<unknown>.rdp.server_cert_path)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/2)
#  457|       }
#  458|   
#  459|->   fingerprint = freerdp_certificate_get_fingerprint (rdp_certificate);
#  460|     if (!fingerprint)
#  461|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def33]
gnome-remote-desktop-49.2/src/grd-settings.c:462:7: warning[-Wanalyzer-malloc-leak]: leak of ‘freerdp_certificate_new_from_file(*(GrdSettingsPrivate *)<unknown>.rdp.server_cert_path)’
gnome-remote-desktop-49.2/src/grd-settings.c:448:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-settings.c:453:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:459:17: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:460:6: branch_true: following ‘true’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:462:7: branch_true: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:462:7: throw: if ‘g_log’ throws an exception...
gnome-remote-desktop-49.2/src/grd-settings.c:462:7: danger: ‘freerdp_certificate_new_from_file(*(GrdSettingsPrivate *)<unknown>.rdp.server_cert_path)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/2)
#  460|     if (!fingerprint)
#  461|       {
#  462|->       g_warning ("Could not compute RDP server certificate fingerprint");
#  463|         return;
#  464|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def34]
gnome-remote-desktop-49.2/src/grd-settings.c:468:5: warning[-Wanalyzer-malloc-leak]: leak of ‘freerdp_certificate_new_from_file(*(GrdSettingsPrivate *)<unknown>.rdp.server_cert_path)’
gnome-remote-desktop-49.2/src/grd-settings.c:448:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:452:21: acquire_memory: allocated here
gnome-remote-desktop-49.2/src/grd-settings.c:453:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:459:17: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:460:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-settings.c:468:5: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-settings.c:468:5: throw: if ‘g_object_set’ throws an exception...
gnome-remote-desktop-49.2/src/grd-settings.c:468:5: danger: ‘freerdp_certificate_new_from_file(*(GrdSettingsPrivate *)<unknown>.rdp.server_cert_path)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/2)
#  466|   
#  467|     if (fingerprint)
#  468|->     g_object_set (G_OBJECT (settings), "rdp-server-fingerprint", fingerprint, NULL);
#  469|   }
#  470|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def35]
gnome-remote-desktop-49.2/src/grd-settings.h:30:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘settings’
gnome-remote-desktop-49.2/src/grd-ctl.c:959:1: enter_function: entry to ‘main’
gnome-remote-desktop-49.2/src/grd-ctl.c:972:6: branch_false: following ‘false’ branch (when ‘argc > 1’)...
gnome-remote-desktop-49.2/src/grd-ctl.c:975:6: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-ctl.c:1055:6: branch_false: following ‘false’ branch...
gnome-remote-desktop-49.2/src/grd-ctl.c:1063:19: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-ctl.c:1065:19: call_function: inlined call to ‘process_rdp_options’ from ‘main’
gnome-remote-desktop-49.2/src/grd-ctl.c:962:27: call_function: inlined call to ‘glib_autoptr_cleanup_GrdSettings’ from ‘main’
#   28|   
#   29|   #define GRD_TYPE_SETTINGS (grd_settings_get_type ())
#   30|-> G_DECLARE_DERIVABLE_TYPE (GrdSettings, grd_settings,
#   31|                             GRD, SETTINGS, GObject)
#   32|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def36]
gnome-remote-desktop-49.2/src/grd-tpm.h:35:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tpm’
gnome-remote-desktop-49.2/src/grd-credentials-tpm.c:125:1: enter_function: entry to ‘grd_credentials_tpm_lookup’
gnome-remote-desktop-49.2/src/grd-credentials-tpm.c:135:24: call_function: inlined call to ‘glib_autoptr_cleanup_GVariant’ from ‘grd_credentials_tpm_lookup’
gnome-remote-desktop-49.2/src/grd-credentials-tpm.c:134:27: branch_false: ...to here
gnome-remote-desktop-49.2/src/grd-credentials-tpm.c:133:34: call_function: calling ‘g_autoptr_cleanup_generic_gfree’ from ‘grd_credentials_tpm_lookup’
gnome-remote-desktop-49.2/src/grd-credentials-tpm.c:132:20: call_function: calling ‘g_autoptr_cleanup_generic_gfree’ from ‘grd_credentials_tpm_lookup’
gnome-remote-desktop-49.2/src/grd-credentials-tpm.c:131:20: call_function: calling ‘g_autoptr_cleanup_generic_gfree’ from ‘grd_credentials_tpm_lookup’
gnome-remote-desktop-49.2/src/grd-credentials-tpm.c:129:22: call_function: inlined call to ‘glib_autoptr_cleanup_GrdTpm’ from ‘grd_credentials_tpm_lookup’
#   33|   
#   34|   #define GRD_TYPE_TPM (grd_tpm_get_type ())
#   35|-> G_DECLARE_FINAL_TYPE (GrdTpm, grd_tpm, GRD, TPM, GObject)
#   36|   
#   37|   GrdTpm * grd_tpm_new (GrdTpmMode   mode,

Scan Properties