Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
libpcap-1.10.6/nametoaddr.c:941:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:941:28: danger: use of uninitialized value ‘sep’ here
#  939|   			goto reject;
#  940|   		case BYTE1_X:
#  941|-> 			if (*s == sep) {
#  942|   				fsm_state = BYTE1_SEP_BYTE2;
#  943|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
libpcap-1.10.6/nametoaddr.c:952:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:952:28: danger: use of uninitialized value ‘sep’ here
#  950|   			goto reject;
#  951|   		case BYTE1_XX:
#  952|-> 			if (*s == sep) {
#  953|   				fsm_state = BYTE1_SEP_BYTE2;
#  954|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def3]
libpcap-1.10.6/nametoaddr.c:965:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:965:28: danger: use of uninitialized value ‘sep’ here
#  963|   			goto reject;
#  964|   		case BYTE2_X:
#  965|-> 			if (*s == sep) {
#  966|   				fsm_state = BYTE2_SEP_BYTE3;
#  967|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def4]
libpcap-1.10.6/nametoaddr.c:976:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:976:28: danger: use of uninitialized value ‘sep’ here
#  974|   			goto reject;
#  975|   		case BYTE2_XX:
#  976|-> 			if (*s == sep) {
#  977|   				fsm_state = BYTE2_SEP_BYTE3;
#  978|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def5]
libpcap-1.10.6/nametoaddr.c:989:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:989:28: danger: use of uninitialized value ‘sep’ here
#  987|   			goto reject;
#  988|   		case BYTE3_X:
#  989|-> 			if (*s == sep) {
#  990|   				fsm_state = BYTE3_SEP_BYTE4;
#  991|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def6]
libpcap-1.10.6/nametoaddr.c:1000:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:1000:28: danger: use of uninitialized value ‘sep’ here
#  998|   			goto reject;
#  999|   		case BYTE3_XX:
# 1000|-> 			if (*s == sep) {
# 1001|   				fsm_state = BYTE3_SEP_BYTE4;
# 1002|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def7]
libpcap-1.10.6/nametoaddr.c:1013:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:1013:28: danger: use of uninitialized value ‘sep’ here
# 1011|   			goto reject;
# 1012|   		case BYTE4_X:
# 1013|-> 			if (*s == sep) {
# 1014|   				fsm_state = BYTE4_SEP_BYTE5;
# 1015|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def8]
libpcap-1.10.6/nametoaddr.c:1024:28: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘sep’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:1024:28: danger: use of uninitialized value ‘sep’ here
# 1022|   			goto reject;
# 1023|   		case BYTE4_XX:
# 1024|-> 			if (*s == sep) {
# 1025|   				fsm_state = BYTE4_SEP_BYTE5;
# 1026|   				break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def9]
libpcap-1.10.6/nametoaddr.c:1051:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘buf[1]’
libpcap-1.10.6/nametoaddr.c:879:1: enter_function: entry to ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:905:16: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:906:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:909:42: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:915:28: branch_false: following ‘false’ branch...
libpcap-1.10.6/nametoaddr.c:920:29: branch_false: ...to here
libpcap-1.10.6/nametoaddr.c:921:56: call_function: inlined call to ‘pcapint_xdtoi’ from ‘pcapint_atomac48_x_xx_6_times’
libpcap-1.10.6/nametoaddr.c:1049:12: branch_true: following ‘true’ branch...
libpcap-1.10.6/nametoaddr.c:1051:17: branch_true: ...to here
libpcap-1.10.6/nametoaddr.c:1051:17: danger: use of uninitialized value ‘buf[1]’ here
# 1049|   	if (fsm_state == BYTE5_X || fsm_state == BYTE5_XX) {
# 1050|   		// accept
# 1051|-> 		memcpy(addr, buf, sizeof(buf));
# 1052|   		return 1;
# 1053|   	}

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-183.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelibpcap-1.10.5-3.fc43
diffbase-store-results-to/tmp/tmpgphezz_k/libpcap-1.10.5-3.fc43.tar.xz
diffbase-time-created2026-01-08 18:59:27
diffbase-time-finished2026-01-08 19:01:18
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpgphezz_k/libpcap-1.10.5-3.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpgphezz_k/libpcap-1.10.5-3.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-183.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibpcap-1.10.6-1.fc44
store-results-to/tmp/tmpqozkgwfd/libpcap-1.10.6-1.fc44.tar.xz
time-created2026-01-08 19:01:30
time-finished2026-01-08 19:02:56
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpqozkgwfd/libpcap-1.10.6-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpqozkgwfd/libpcap-1.10.6-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9