Fixed findings

List of Findings

Error: COMPILER_WARNING (CWE-9001): [#def1]
gst-plugins-bad-1.26.6/ext/curl/curltask.h:66:8: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#   66 |     if(curl_easy_setopt(handle,type,option) != CURLE_OK) { \
#      |        ^~~~~~~~~~~~~~~~
#   64|   #define gst_curl_setopt_int(s,handle, type, option) \
#   65|     if((option >= GSTCURL_HANDLE_MIN_##type) && (option <= GSTCURL_HANDLE_MAX_##type)) { \
#   66|->     if(curl_easy_setopt(handle,type,option) != CURLE_OK) { \
#   67|         GST_WARNING_OBJECT (s, "Cannot set unsupported option %s", #type ); \
#   68|       } \

Error: COMPILER_WARNING (CWE-9001): [#def2]
gst-plugins-bad-1.26.6/ext/curl/curltask.h:92:8: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#   92 |     if(curl_easy_setopt(handle,type,GSTCURL_HANDLE_DEFAULT_##type) != CURLE_OK) { \
#      |        ^~~~~~~~~~~~~~~~
#   90|       GST_WARNING_OBJECT(s, "Value of %ld out of acceptable range for %s", option, \
#   91|                          #type ); \
#   92|->     if(curl_easy_setopt(handle,type,GSTCURL_HANDLE_DEFAULT_##type) != CURLE_OK) { \
#   93|         GST_WARNING_OBJECT(s, "Cannot set unsupported option %s,", #type ); \
#   94|       } \

Error: COMPILER_WARNING (CWE-9001): [#def3]
gst-plugins-bad-1.26.6/ext/curl/gstcurlbasesink.c:624:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  624 |   res = curl_easy_setopt (sink->curl, CURLOPT_VERBOSE, 1);
#      |         ^~~~~~~~~~~~~~~~
#  622|   
#  623|   #ifndef GST_DISABLE_GST_DEBUG
#  624|->   res = curl_easy_setopt (sink->curl, CURLOPT_VERBOSE, 1);
#  625|     if (res != CURLE_OK) {
#  626|       sink->error = g_strdup_printf ("failed to set verbose: %s",

Error: COMPILER_WARNING (CWE-9001): [#def4]
gst-plugins-bad-1.26.6/ext/curl/gstcurlbasesink.c:624:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  622|   
#  623|   #ifndef GST_DISABLE_GST_DEBUG
#  624|->   res = curl_easy_setopt (sink->curl, CURLOPT_VERBOSE, 1);
#  625|     if (res != CURLE_OK) {
#  626|       sink->error = g_strdup_printf ("failed to set verbose: %s",

Error: COMPILER_WARNING (CWE-9001): [#def5]
gst-plugins-bad-1.26.6/ext/curl/gstcurlbasesink.c:652:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  652 |   res = curl_easy_setopt (sink->curl, CURLOPT_CONNECTTIMEOUT, sink->timeout);
#      |         ^~~~~~~~~~~~~~~~
#  650|     }
#  651|   
#  652|->   res = curl_easy_setopt (sink->curl, CURLOPT_CONNECTTIMEOUT, sink->timeout);
#  653|     if (res != CURLE_OK) {
#  654|       sink->error = g_strdup_printf ("failed to set connection timeout: %s",

Error: COMPILER_WARNING (CWE-9001): [#def6]
gst-plugins-bad-1.26.6/ext/curl/gstcurlbasesink.c:652:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  650|     }
#  651|   
#  652|->   res = curl_easy_setopt (sink->curl, CURLOPT_CONNECTTIMEOUT, sink->timeout);
#  653|     if (res != CURLE_OK) {
#  654|       sink->error = g_strdup_printf ("failed to set connection timeout: %s",

Error: COMPILER_WARNING (CWE-9001): [#def7]
gst-plugins-bad-1.26.6/ext/curl/gstcurlbasesink.c:660:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  660 |   res = curl_easy_setopt (sink->curl, CURLOPT_NOSIGNAL, 1);
#      |         ^~~~~~~~~~~~~~~~
#  658|   
#  659|     /* using signals in a multi-threaded application is dangerous */
#  660|->   res = curl_easy_setopt (sink->curl, CURLOPT_NOSIGNAL, 1);
#  661|     if (res != CURLE_OK) {
#  662|       sink->error = g_strdup_printf ("failed to set no signalling: %s",

Error: COMPILER_WARNING (CWE-9001): [#def8]
gst-plugins-bad-1.26.6/ext/curl/gstcurlbasesink.c:660:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  658|   
#  659|     /* using signals in a multi-threaded application is dangerous */
#  660|->   res = curl_easy_setopt (sink->curl, CURLOPT_NOSIGNAL, 1);
#  661|     if (res != CURLE_OK) {
#  662|       sink->error = g_strdup_printf ("failed to set no signalling: %s",

Error: COMPILER_WARNING (CWE-9001): [#def9]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsink.c:584:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  584 |   res = curl_easy_setopt (bcsink->curl, CURLOPT_PROXYPORT, sink->proxy_port);
#      |         ^~~~~~~~~~~~~~~~
#  582|     }
#  583|   
#  584|->   res = curl_easy_setopt (bcsink->curl, CURLOPT_PROXYPORT, sink->proxy_port);
#  585|     if (res != CURLE_OK) {
#  586|       bcsink->error = g_strdup_printf ("failed to set proxy port: %s",

Error: COMPILER_WARNING (CWE-9001): [#def10]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsink.c:584:9: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
#  582|     }
#  583|   
#  584|->   res = curl_easy_setopt (bcsink->curl, CURLOPT_PROXYPORT, sink->proxy_port);
#  585|     if (res != CURLE_OK) {
#  586|       bcsink->error = g_strdup_printf ("failed to set proxy port: %s",

Error: COMPILER_WARNING (CWE-9001): [#def11]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:773:5: warning[-Wattribute-warning]: call to ‘Wcurl_multi_setopt_err_long’ declared with attribute warning: curl_multi_setopt expects a long argument
#  773 |     curl_multi_setopt (klass->multi_task_context.multi_handle,
#      |     ^~~~~~~~~~~~~~~~~
#  771|       klass->multi_task_context.multi_handle = curl_multi_init ();
#  772|   
#  773|->     curl_multi_setopt (klass->multi_task_context.multi_handle,
#  774|           CURLMOPT_PIPELINING, 1);
#  775|   #ifdef CURLMOPT_MAX_HOST_CONNECTIONS

Error: COMPILER_WARNING (CWE-9001): [#def12]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:773:5: warning[-Wattribute-warning]: call to ‘Wcurl_multi_setopt_err_long’ declared with attribute warning: curl_multi_setopt expects a long argument
#  771|       klass->multi_task_context.multi_handle = curl_multi_init ();
#  772|   
#  773|->     curl_multi_setopt (klass->multi_task_context.multi_handle,
#  774|           CURLMOPT_PIPELINING, 1);
#  775|   #ifdef CURLMOPT_MAX_HOST_CONNECTIONS

Error: COMPILER_WARNING (CWE-9001): [#def13]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:1102:7: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
# 1102 |   if (curl_easy_setopt (handle, CURLOPT_VERBOSE, 1) != CURLE_OK) {
#      |       ^~~~~~~~~~~~~~~~
# 1100|   
# 1101|   #ifndef GST_DISABLE_GST_DEBUG
# 1102|->   if (curl_easy_setopt (handle, CURLOPT_VERBOSE, 1) != CURLE_OK) {
# 1103|       GST_WARNING_OBJECT (s, "Failed to set verbose!");
# 1104|     }

Error: COMPILER_WARNING (CWE-9001): [#def14]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:1102:7: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
# 1100|   
# 1101|   #ifndef GST_DISABLE_GST_DEBUG
# 1102|->   if (curl_easy_setopt (handle, CURLOPT_VERBOSE, 1) != CURLE_OK) {
# 1103|       GST_WARNING_OBJECT (s, "Failed to set verbose!");
# 1104|     }

Error: COMPILER_WARNING (CWE-9001): [#def15]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:1151:3: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
# 1151 |   gst_curl_setopt_int_default (s, handle, CURLOPT_MAXREDIRS,
#      |   ^
# 1149|     gst_curl_setopt_int (s, handle, CURLOPT_FOLLOWLOCATION,
# 1150|         s->allow_3xx_redirect);
# 1151|->   gst_curl_setopt_int_default (s, handle, CURLOPT_MAXREDIRS,
# 1152|         s->max_3xx_redirects);
# 1153|     gst_curl_setopt_bool (s, handle, CURLOPT_TCP_KEEPALIVE, s->keep_alive);

Error: COMPILER_WARNING (CWE-9001): [#def16]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:1151:3: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
# 1149|     gst_curl_setopt_int (s, handle, CURLOPT_FOLLOWLOCATION,
# 1150|         s->allow_3xx_redirect);
# 1151|->   gst_curl_setopt_int_default (s, handle, CURLOPT_MAXREDIRS,
# 1152|         s->max_3xx_redirects);
# 1153|     gst_curl_setopt_bool (s, handle, CURLOPT_TCP_KEEPALIVE, s->keep_alive);

Error: COMPILER_WARNING (CWE-9001): [#def17]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:1154:3: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
# 1154 |   gst_curl_setopt_int (s, handle, CURLOPT_TIMEOUT, s->timeout_secs);
#      |   ^
# 1152|         s->max_3xx_redirects);
# 1153|     gst_curl_setopt_bool (s, handle, CURLOPT_TCP_KEEPALIVE, s->keep_alive);
# 1154|->   gst_curl_setopt_int (s, handle, CURLOPT_TIMEOUT, s->timeout_secs);
# 1155|     gst_curl_setopt_bool (s, handle, CURLOPT_SSL_VERIFYPEER, s->strict_ssl);
# 1156|     gst_curl_setopt_str (s, handle, CURLOPT_CAINFO, s->custom_ca_file);

Error: COMPILER_WARNING (CWE-9001): [#def18]
gst-plugins-bad-1.26.6/ext/curl/gstcurlhttpsrc.c:1154:3: warning[-Wattribute-warning]: call to ‘Wcurl_easy_setopt_err_long’ declared with attribute warning: curl_easy_setopt expects a long argument
# 1152|         s->max_3xx_redirects);
# 1153|     gst_curl_setopt_bool (s, handle, CURLOPT_TCP_KEEPALIVE, s->keep_alive);
# 1154|->   gst_curl_setopt_int (s, handle, CURLOPT_TIMEOUT, s->timeout_secs);
# 1155|     gst_curl_setopt_bool (s, handle, CURLOPT_SSL_VERIFYPEER, s->strict_ssl);
# 1156|     gst_curl_setopt_str (s, handle, CURLOPT_CAINFO, s->custom_ca_file);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def19]
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:550:10: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:519:1: enter_function: entry to ‘gst_webrtc_nice_add_stream’
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:527:10: call_function: inlined call to ‘_nice_stream_item_find’ from ‘gst_webrtc_nice_add_stream’
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:528:6: branch_false: following ‘false’ branch...
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:534:7: branch_false: ...to here
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:534:6: branch_false: following ‘false’ branch...
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:538:10: branch_false: ...to here
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:538:10: call_function: calling ‘_create_nice_stream_item’ from ‘gst_webrtc_nice_add_stream’
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:538:10: return_function: returning to ‘gst_webrtc_nice_add_stream’ from ‘_create_nice_stream_item’
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:540:6: branch_false: following ‘false’ branch...
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:544:3: branch_false: ...to here
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:545:3: release_memory: ‘add_data.item’ is NULL
gst-plugins-bad-1.26.6/gst-libs/gst/webrtc/nice/nice.c:550:10: danger: dereference of NULL ‘_create_nice_stream_item(ice,  session_id)’
#  548|         (GHFunc) _add_turn_server_func, &add_data);
#  549|   
#  550|->   return item->stream;
#  551|   }
#  552|   

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-121.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namegstreamer1-plugins-bad-free-1.26.10-1.fc44
diffbase-store-results-to/tmp/tmp2hguf5gi/gstreamer1-plugins-bad-free-1.26.10-1.fc44.tar.xz
diffbase-time-created2026-01-08 17:16:18
diffbase-time-finished2026-01-08 17:29:14
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp2hguf5gi/gstreamer1-plugins-bad-free-1.26.10-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp2hguf5gi/gstreamer1-plugins-bad-free-1.26.10-1.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-121.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegstreamer1-plugins-bad-free-1.26.6-2.fc43
store-results-to/tmp/tmpn5l_f4qa/gstreamer1-plugins-bad-free-1.26.6-2.fc43.tar.xz
time-created2026-01-08 17:00:54
time-finished2026-01-08 17:14:47
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpn5l_f4qa/gstreamer1-plugins-bad-free-1.26.6-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpn5l_f4qa/gstreamer1-plugins-bad-free-1.26.6-2.fc43.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9