Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
imlib2-1.12.3/src/lib/image.c:627:23: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
imlib2-1.12.3/src/lib/image.c:490:1: enter_function: entry to '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:500:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:544:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:550:13: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:550:13: branch_false: following 'false' branch (when 'fp' is NULL)...
imlib2-1.12.3/src/lib/image.c:556:14: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:557:12: branch_true: following 'true' branch...
imlib2-1.12.3/src/lib/image.c:559:22: branch_true: ...to here
imlib2-1.12.3/src/lib/image.c:560:16: branch_true: following 'true' branch...
imlib2-1.12.3/src/lib/image.c:562:27: branch_true: ...to here
imlib2-1.12.3/src/lib/image.c:576:8: branch_false: following 'false' branch (when 'err == 0')...
imlib2-1.12.3/src/lib/image.c:588:10: call_function: inlined call to '__imlib_ProduceImage' from '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:589:16: acquire_memory: allocated here
imlib2-1.12.3/src/lib/image.c:593:9: branch_false: following 'false' branch (when 'im_file' is non-NULL)...
imlib2-1.12.3/src/lib/image.c:593:9: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:593:9: call_function: calling '__imlib_ImageFileContextPush' from '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:593:9: return_function: returning to '__imlib_LoadImage' from '__imlib_ImageFileContextPush'
imlib2-1.12.3/src/lib/image.c:593:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:594:57: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:594:9: call_function: calling '__imlib_FileContextOpen' from '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:594:9: return_function: returning to '__imlib_LoadImage' from '__imlib_FileContextOpen'
imlib2-1.12.3/src/lib/image.c:593:9: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:601:23: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:607:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:614:42: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:621:12: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:625:17: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:625:17: branch_true: following 'true' branch (when 'loaders' is NULL)...
imlib2-1.12.3/src/lib/image.c:627:23: branch_true: ...to here
imlib2-1.12.3/src/lib/image.c:627:23: throw: if '__imlib_GetLoaderList' throws an exception...
imlib2-1.12.3/src/lib/image.c:627:23: danger: '<unknown>' leaks here; was allocated at [(15)](sarif:/runs/0/results/21/codeFlows/0/threadFlows/0/locations/14)
#  625|           else if (!loaders)
#  626|           {
#  627|->             loaders = __imlib_GetLoaderList();
#  628|               l = *loaders;
#  629|               if (best_loader && l == best_loader)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
imlib2-1.12.3/src/lib/image.c:627:23: warning[-Wanalyzer-malloc-leak]: leak of 'im'
imlib2-1.12.3/src/lib/image.c:490:1: enter_function: entry to '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:500:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:544:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:550:13: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:550:13: branch_false: following 'false' branch (when 'fp' is NULL)...
imlib2-1.12.3/src/lib/image.c:556:14: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:557:12: branch_true: following 'true' branch...
imlib2-1.12.3/src/lib/image.c:559:22: branch_true: ...to here
imlib2-1.12.3/src/lib/image.c:560:16: branch_true: following 'true' branch...
imlib2-1.12.3/src/lib/image.c:562:27: branch_true: ...to here
imlib2-1.12.3/src/lib/image.c:576:8: branch_false: following 'false' branch (when 'err == 0')...
imlib2-1.12.3/src/lib/image.c:588:10: call_function: inlined call to '__imlib_ProduceImage' from '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:593:9: branch_false: following 'false' branch (when 'im_file' is non-NULL)...
imlib2-1.12.3/src/lib/image.c:593:9: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:593:9: call_function: calling '__imlib_ImageFileContextPush' from '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:593:9: return_function: returning to '__imlib_LoadImage' from '__imlib_ImageFileContextPush'
imlib2-1.12.3/src/lib/image.c:593:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:594:57: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:594:9: call_function: calling '__imlib_FileContextOpen' from '__imlib_LoadImage'
imlib2-1.12.3/src/lib/image.c:594:9: return_function: returning to '__imlib_LoadImage' from '__imlib_FileContextOpen'
imlib2-1.12.3/src/lib/image.c:593:9: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:601:23: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:607:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:614:42: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:621:12: branch_false: following 'false' branch...
imlib2-1.12.3/src/lib/image.c:625:17: branch_false: ...to here
imlib2-1.12.3/src/lib/image.c:625:17: branch_true: following 'true' branch (when 'loaders' is NULL)...
imlib2-1.12.3/src/lib/image.c:627:23: branch_true: ...to here
imlib2-1.12.3/src/lib/image.c:627:23: throw: if '__imlib_GetLoaderList' throws an exception...
imlib2-1.12.3/src/lib/image.c:627:23: danger: 'im' leaks here; was allocated at [(15)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/14)
#  625|           else if (!loaders)
#  626|           {
#  627|->             loaders = __imlib_GetLoaderList();
#  628|               l = *loaders;
#  629|               if (best_loader && l == best_loader)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:294:11: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:255:1: enter_function: entry to '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:269:11: acquire_memory: allocated here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:270:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:276:15: call_function: inlined call to '_jdata_init' from '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:9: setjmp: 'sigsetjmp' called here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:281:5: branch_false: ...to here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:294:11: throw: if '__imlib_GetTag' throws an exception...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:294:11: danger: 'buf' leaks here; was allocated at [(2)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/1)
#  292|       /* compression */
#  293|       compression = 2;
#  294|->     tag = __imlib_GetTag(im, "compression");
#  295|       if (tag)
#  296|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:307:11: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:255:1: enter_function: entry to '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:269:11: acquire_memory: allocated here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:270:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:276:15: call_function: inlined call to '_jdata_init' from '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:9: setjmp: 'sigsetjmp' called here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:281:5: branch_false: ...to here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:307:11: throw: if '__imlib_GetTag' throws an exception...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:307:11: danger: 'buf' leaks here; was allocated at [(2)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/1)
#  305|       quality = quality * 10 / 9;
#  306|       /* quality */
#  307|->     tag = __imlib_GetTag(im, "quality");
#  308|       if (tag)
#  309|           quality = tag->val;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:317:5: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:255:1: enter_function: entry to '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:269:11: acquire_memory: allocated here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:270:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:276:15: call_function: inlined call to '_jdata_init' from '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:9: setjmp: 'sigsetjmp' called here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:281:5: branch_false: ...to here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:317:5: throw: if 'jpeg_set_quality' throws an exception...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:317:5: danger: 'buf' leaks here; was allocated at [(2)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/1)
#  315|       /* set up jepg compression parameters */
#  316|       jpeg_set_defaults(&jcs);
#  317|->     jpeg_set_quality(&jcs, quality, TRUE);
#  318|   
#  319|       /* progressive */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:320:16: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:255:1: enter_function: entry to '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:269:11: acquire_memory: allocated here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:270:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:276:15: call_function: inlined call to '_jdata_init' from '_save'
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:9: setjmp: 'sigsetjmp' called here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:277:8: branch_false: following 'false' branch...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:281:5: branch_false: ...to here
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:320:16: throw: if '__imlib_GetTag' throws an exception...
imlib2-1.12.3/src/modules/loaders/loader_jpeg.c:320:16: danger: 'buf' leaks here; was allocated at [(2)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/1)
#  318|   
#  319|       /* progressive */
#  320|->     if ((tag = __imlib_GetTag(im, "interlacing")) && tag->val)
#  321|           jpeg_simple_progression(&jcs);
#  322|   

Error: COMPILER_WARNING: [#def7]
imlib2-1.12.3/src/modules/loaders/loader_qoi.c: scope_hint: In function 'qoi_dec_init'
imlib2-1.12.3/src/modules/loaders/loader_qoi.c:52:37: warning[-Wunterminated-string-initialization]: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (5 chars into 4 available)
#   52 |     static const uint8_t magic[4] = "qoif";
#      |                                     ^~~~~~
#   50|   qoi_dec_init(QoiDecCtx *ctx, const void *buffer, ptrdiff_t size)
#   51|   {
#   52|->     static const uint8_t magic[4] = "qoif";
#   53|   
#   54|       QOIDEC_ASSERT(size >= 0);

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-136.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameimlib2-1.12.5-1.fc44
diffbase-store-results-to/tmp/tmp_up4eco2/imlib2-1.12.5-1.fc44.tar.xz
diffbase-time-created2026-01-08 17:08:09
diffbase-time-finished2026-01-08 17:10:10
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp_up4eco2/imlib2-1.12.5-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp_up4eco2/imlib2-1.12.5-1.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-136.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameimlib2-1.12.3-3.fc43
store-results-to/tmp/tmpwkyc9sa2/imlib2-1.12.3-3.fc43.tar.xz
time-created2026-01-08 17:05:25
time-finished2026-01-08 17:07:56
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpwkyc9sa2/imlib2-1.12.3-3.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpwkyc9sa2/imlib2-1.12.3-3.fc43.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9