libcamera-0.6.0-2.fc44

List of Findings

Error: CPPCHECK_WARNING (CWE-562): [#def1]
libcamera-v0.6.0/src/apps/cam/capture_script.cpp:586: error[returnDanglingLifetime]: Returning object that points to local variable 'values' that will be invalid when returning.
#  584|   	}
#  585|   
#  586|-> 	return value;
#  587|   }
#  588|   

Error: CPPCHECK_WARNING (CWE-628): [#def2]
libcamera-v0.6.0/src/libcamera/base/object.cpp:117: warning[eraseIteratorOutOfBoundsCond]: Either the condition 'it!=parent_->children_.end()' is redundant or function 'erase()' is called on the iterator 'it' which is out of bounds.
#  115|   				    parent_->children_.end(), this);
#  116|   		ASSERT(it != parent_->children_.end());
#  117|-> 		parent_->children_.erase(it);
#  118|   	}
#  119|   

Error: CPPCHECK_WARNING (CWE-476): [#def3]
libcamera-v0.6.0/src/libcamera/pipeline/ipu3/ipu3.cpp:594: warning[nullPointer]: Possible null pointer dereference: mainCfg
#  592|   	 */
#  593|   	if (!vfCfg) {
#  594|-> 		ret = imgu->configureViewfinder(*mainCfg, &outputFormat);
#  595|   		if (ret)
#  596|   			return ret;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def4]
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:44:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(argv[1], 0)’
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:32:12: branch_false: following ‘false’ branch (when ‘argc == 3’)...
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:37:17: branch_false: ...to here
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:37:17: acquire_resource: opened here
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:38:12: branch_false: following ‘false’ branch...
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:44:13: branch_false: ...to here
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:44:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:47:26: branch_false: ...to here
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:47:26: throw: if ‘open’ throws an exception...
libcamera-v0.6.0/utils/ipu3/ipu3-pack.c:44:13: danger: ‘open(argv[1], 0)’ leaks here; was opened at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   42|   	}
#   43|   
#   44|-> 	if (strcmp(argv[2], "-") == 0) {
#   45|   		out_fd = STDOUT_FILENO;
#   46|   	} else {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def5]
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:43:18: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(argv[1], 0)’
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:31:12: branch_false: following ‘false’ branch (when ‘argc == 3’)...
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:36:17: branch_false: ...to here
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:36:17: acquire_resource: opened here
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:37:12: branch_false: following ‘false’ branch...
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:43:18: branch_false: ...to here
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:43:18: throw: if ‘open’ throws an exception...
libcamera-v0.6.0/utils/ipu3/ipu3-unpack.c:43:18: danger: ‘open(argv[1], 0)’ leaks here; was opened at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   41|   	}
#   42|   
#   43|-> 	out_fd = open(argv[2], O_WRONLY | O_TRUNC | O_CREAT, 0644);
#   44|   	if (out_fd == -1) {
#   45|   		fprintf(stderr, "Failed to open output file '%s': %s\n",

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-146.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibcamera-0.6.0-2.fc44
store-results-to/tmp/tmpf3nwfbzb/libcamera-0.6.0-2.fc44.tar.xz
time-created2026-01-08 18:33:57
time-finished2026-01-08 18:37:23
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpf3nwfbzb/libcamera-0.6.0-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpf3nwfbzb/libcamera-0.6.0-2.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9