Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
imlib2-1.12.5/src/lib/image.c:429:17: warning[-Wanalyzer-null-dereference]: dereference of NULL 'p'
imlib2-1.12.5/src/lib/image.c:737:1: enter_function: entry to '__imlib_LoadImageData'
imlib2-1.12.5/src/lib/image.c:741:8: branch_false: following 'false' branch...
imlib2-1.12.5/src/lib/image.c:745:10: branch_false: ...to here
imlib2-1.12.5/src/lib/image.c:745:8: branch_false: following 'false' branch...
imlib2-1.12.5/src/lib/image.c:748:11: branch_false: ...to here
imlib2-1.12.5/src/lib/image.c:748:11: call_function: calling '__imlib_FileContextOpen' from '__imlib_LoadImageData'
imlib2-1.12.5/src/lib/image.c:748:11: return_function: returning to '__imlib_LoadImageData' from '__imlib_FileContextOpen'
imlib2-1.12.5/src/lib/image.c:749:8: branch_false: following 'false' branch...
imlib2-1.12.5/src/lib/image.c:751:36: branch_false: ...to here
imlib2-1.12.5/src/lib/image.c:751:11: call_function: calling '__imlib_LoadImageWrapper' from '__imlib_LoadImageData'
#  427|           for (x = 0; x < im->w; x++, p++)
#  428|           {
#  429|->             if (A_VAL(p) != 0xff)
#  430|                   return;
#  431|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:293:5: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:256:1: enter_function: entry to '_save'
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:270:11: acquire_memory: allocated here
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:271:8: branch_false: following 'false' branch...
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:277:15: call_function: inlined call to '_jdata_init' from '_save'
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:278:9: setjmp: 'sigsetjmp' called here
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:278:8: branch_false: following 'false' branch...
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:282:5: branch_false: ...to here
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:293:5: throw: if 'get_saver_params' throws an exception...
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:293:5: danger: 'buf' leaks here; was allocated at [(2)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/1)
#  291|       /* saver modules */
#  292|   
#  293|->     get_saver_params(im, &imsp);
#  294|   
#  295|       /* set up jepg compression parameters */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:297:5: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:256:1: enter_function: entry to '_save'
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:270:11: acquire_memory: allocated here
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:271:8: branch_false: following 'false' branch...
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:277:15: call_function: inlined call to '_jdata_init' from '_save'
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:278:9: setjmp: 'sigsetjmp' called here
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:278:8: branch_false: following 'false' branch...
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:282:5: branch_false: ...to here
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:297:5: throw: if 'jpeg_set_quality' throws an exception...
imlib2-1.12.5/src/modules/loaders/loader_jpeg.c:297:5: danger: 'buf' leaks here; was allocated at [(2)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/1)
#  295|       /* set up jepg compression parameters */
#  296|       jpeg_set_defaults(&jcs);
#  297|->     jpeg_set_quality(&jcs, imsp.quality, TRUE);
#  298|   
#  299|       /* progressive */

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-136.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameimlib2-1.12.3-3.fc43
diffbase-store-results-to/tmp/tmpwkyc9sa2/imlib2-1.12.3-3.fc43.tar.xz
diffbase-time-created2026-01-08 17:05:25
diffbase-time-finished2026-01-08 17:07:56
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpwkyc9sa2/imlib2-1.12.3-3.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpwkyc9sa2/imlib2-1.12.3-3.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-136.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameimlib2-1.12.5-1.fc44
store-results-to/tmp/tmp_up4eco2/imlib2-1.12.5-1.fc44.tar.xz
time-created2026-01-08 17:08:09
time-finished2026-01-08 17:10:10
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp_up4eco2/imlib2-1.12.5-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp_up4eco2/imlib2-1.12.5-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9