libvncserver-0.9.15-5.fc44

List of Findings

Error: COMPILER_WARNING (CWE-686): [#def1]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-HMqC0F/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘fork’; expected ‘int(void)’

Error: COMPILER_WARNING (CWE-686): [#def2]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-JuNkZs/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘memset’; expected ‘void *(void *, int,  long unsigned int)’

Error: COMPILER_WARNING (CWE-686): [#def3]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-Ndw5WU/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘memmove’; expected ‘void *(void *, const void *, long unsigned int)’

Error: COMPILER_WARNING (CWE-686): [#def4]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-a30Wgh/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘strcspn’; expected ‘long unsigned int(const char *, const char *)’

Error: COMPILER_WARNING (CWE-686): [#def5]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-kLfyml/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘strdup’; expected ‘char *(const char *)’

Error: COMPILER_WARNING (CWE-686): [#def6]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-msyGbM/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘strstr’; expected ‘char *(const char *, const char *)’

Error: COMPILER_WARNING (CWE-686): [#def7]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-ppog0b/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘strchr’; expected ‘char *(const char *, int)’

Error: COMPILER_WARNING (CWE-686): [#def8]
libvncserver-LibVNCServer-0.9.15/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-yytwxH/CheckFunctionExists.c:7:3: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘vprintf’; expected ‘int(const char *, __va_list_tag *)’

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:464:25: warning[-Wanalyzer-malloc-leak]: leak of ‘this’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:485:28: enter_function: entry to ‘tjInitCompress’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:488:32: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:488:11: branch_false: following ‘false’ branch (when ‘this’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:494:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:495:16: call_function: calling ‘_tjInitCompress’ from ‘tjInitCompress’
#  462|   {
#  463|   	/* This is also straight out of example.c */
#  464|-> 	this->cinfo.err=jpeg_std_error(&this->jerr.pub);
#  465|   	this->jerr.pub.error_exit=my_error_exit;
#  466|   	this->jerr.pub.output_message=my_output_message;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:599:17: warning[-Wanalyzer-malloc-leak]: leak of ‘row_pointer’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:539:23: enter_function: entry to ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:548:9: branch_false: following ‘false’ branch (when ‘handle’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:548:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:549:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:553:62: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:557:12: setjmp: ‘setjmp’ called here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:557:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:564:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:583:12: call_function: calling ‘setCompDefaults’ from ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:583:12: return_function: returning to ‘tjCompress2’ from ‘setCompDefaults’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:587:35: call_function: calling ‘tjBufSize’ from ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:587:35: return_function: returning to ‘tjCompress2’ from ‘tjBufSize’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:37: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:11: branch_false: following ‘false’ branch (when ‘row_pointer’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:592:18: branch_true: following ‘true’ branch (when ‘i < height’)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:20: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:19: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:67: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:597:15: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:599:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:599:17: throw: if ‘jpeg_write_scanlines’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:599:17: danger: ‘row_pointer’ leaks here; was allocated at [(25)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/24)
#  597|   	while(cinfo->next_scanline<cinfo->image_height)
#  598|   	{
#  599|-> 		jpeg_write_scanlines(cinfo, &row_pointer[cinfo->next_scanline],
#  600|   			cinfo->image_height-cinfo->next_scanline);
#  601|   	}

Error: GCC_ANALYZER_WARNING (CWE-401): [#def11]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:602:9: warning[-Wanalyzer-malloc-leak]: leak of ‘row_pointer’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:539:23: enter_function: entry to ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:548:9: branch_false: following ‘false’ branch (when ‘handle’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:548:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:549:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:553:62: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:557:12: setjmp: ‘setjmp’ called here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:557:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:564:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:583:12: call_function: calling ‘setCompDefaults’ from ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:583:12: return_function: returning to ‘tjCompress2’ from ‘setCompDefaults’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:587:35: call_function: calling ‘tjBufSize’ from ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:587:35: return_function: returning to ‘tjCompress2’ from ‘tjBufSize’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:37: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:11: branch_false: following ‘false’ branch (when ‘row_pointer’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:592:18: branch_true: following ‘true’ branch (when ‘i < height’)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:20: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:19: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:67: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:597:15: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:602:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:602:9: throw: if ‘jpeg_finish_compress’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:602:9: danger: ‘row_pointer’ leaks here; was allocated at [(25)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/24)
#  600|   			cinfo->image_height-cinfo->next_scanline);
#  601|   	}
#  602|-> 	jpeg_finish_compress(cinfo);
#  603|    	*jpegSize=tjBufSize(width, height, jpegSubsamp)
#  604|   		-(unsigned long)(this->jdst.free_in_buffer);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def12]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:607:46: warning[-Wanalyzer-malloc-leak]: leak of ‘row_pointer’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:539:23: enter_function: entry to ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:548:9: branch_false: following ‘false’ branch (when ‘handle’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:548:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:549:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:553:62: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:552:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:557:12: setjmp: ‘setjmp’ called here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:557:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:564:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:583:12: call_function: calling ‘setCompDefaults’ from ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:583:12: return_function: returning to ‘tjCompress2’ from ‘setCompDefaults’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:587:35: call_function: calling ‘tjBufSize’ from ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:587:35: return_function: returning to ‘tjCompress2’ from ‘tjBufSize’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:37: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:11: branch_false: following ‘false’ branch (when ‘row_pointer’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:590:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:592:18: branch_true: following ‘true’ branch (when ‘i < height’)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:20: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:19: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:594:67: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:597:15: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:602:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:603:19: call_function: calling ‘tjBufSize’ from ‘tjCompress2’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:603:19: return_function: returning to ‘tjCompress2’ from ‘tjBufSize’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:607:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:607:46: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:607:46: throw: if ‘jpeg_abort_compress’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:607:46: danger: ‘row_pointer’ leaks here; was allocated at [(25)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/24)
#  605|   
#  606|   	bailout:
#  607|-> 	if(cinfo->global_state>CSTATE_START) jpeg_abort_compress(cinfo);
#  608|   	#ifndef JCS_EXTENSIONS
#  609|   	if(rgbBuf) free(rgbBuf);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def13]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:649:25: warning[-Wanalyzer-malloc-leak]: leak of ‘this’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:672:28: enter_function: entry to ‘tjInitDecompress’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:675:32: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:675:11: branch_false: following ‘false’ branch (when ‘this’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:681:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:682:16: call_function: calling ‘_tjInitDecompress’ from ‘tjInitDecompress’
#  647|   {
#  648|   	/* This is also straight out of example.c */
#  649|-> 	this->dinfo.err=jpeg_std_error(&this->jerr.pub);
#  650|   	this->jerr.pub.error_exit=my_error_exit;
#  651|   	this->jerr.pub.output_message=my_output_message;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:834:17: warning[-Wanalyzer-malloc-leak]: leak of ‘row_pointer’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:759:9: branch_false: following ‘false’ branch (when ‘handle’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:759:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:760:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:771:12: setjmp: ‘setjmp’ called here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:771:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:778:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:781:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:786:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:791:18: branch_true: following ‘true’ branch (when ‘i != 4’)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:793:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:798:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:803:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:37: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:11: branch_false: following ‘false’ branch (when ‘row_pointer’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:832:15: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:834:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:834:17: throw: if ‘jpeg_read_scanlines’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:834:17: danger: ‘row_pointer’ leaks here; was allocated at [(18)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/17)
#  832|   	while(dinfo->output_scanline<dinfo->output_height)
#  833|   	{
#  834|-> 		jpeg_read_scanlines(dinfo, &row_pointer[dinfo->output_scanline],
#  835|   			dinfo->output_height-dinfo->output_scanline);
#  836|   	}

Error: GCC_ANALYZER_WARNING (CWE-401): [#def15]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:837:9: warning[-Wanalyzer-malloc-leak]: leak of ‘row_pointer’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:759:9: branch_false: following ‘false’ branch (when ‘handle’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:759:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:760:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:771:12: setjmp: ‘setjmp’ called here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:771:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:778:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:781:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:786:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:791:18: branch_true: following ‘true’ branch (when ‘i != 4’)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:793:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:798:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:803:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:37: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:11: branch_false: following ‘false’ branch (when ‘row_pointer’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:832:15: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:837:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:837:9: throw: if ‘jpeg_finish_decompress’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:837:9: danger: ‘row_pointer’ leaks here; was allocated at [(18)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/17)
#  835|   			dinfo->output_height-dinfo->output_scanline);
#  836|   	}
#  837|-> 	jpeg_finish_decompress(dinfo);
#  838|   
#  839|   	#ifndef JCS_EXTENSIONS

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:844:46: warning[-Wanalyzer-malloc-leak]: leak of ‘row_pointer’
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:759:9: branch_false: following ‘false’ branch (when ‘handle’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:759:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:760:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:763:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:771:12: setjmp: ‘setjmp’ called here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:771:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:778:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:781:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:786:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:791:18: branch_true: following ‘true’ branch (when ‘i != 4’)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:793:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:798:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:803:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:37: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:11: branch_false: following ‘false’ branch (when ‘row_pointer’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:823:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:832:15: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:837:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:844:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:844:46: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:844:46: throw: if ‘jpeg_abort_decompress’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/turbojpeg.c:844:46: danger: ‘row_pointer’ leaks here; was allocated at [(18)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/17)
#  842|   
#  843|   	bailout:
#  844|-> 	if(dinfo->global_state>DSTATE_START) jpeg_abort_decompress(dinfo);
#  845|   	#ifndef JCS_EXTENSIONS
#  846|   	if(rgbBuf) free(rgbBuf);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def17]
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:96:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(fname, "w")’
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:86:15: acquire_resource: opened here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:86:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:90:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:95:17: branch_true: following ‘true’ branch (when ‘i != 8’)...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:96:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:105:5: throw: if ‘encrypt_rfbdes’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:96:13: danger: ‘fopen(fname, "w")’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   94|   
#   95|       for (i = 0; i < 8; i++) {
#   96|-> 	if (i < strlen(passwd)) {
#   97|   	    encryptedPasswd[i] = passwd[i];
#   98|   	} else {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def18]
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:96:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(fname, "w")’
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:86:15: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:86:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:90:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:95:17: branch_true: following ‘true’ branch (when ‘i != 8’)...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:96:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:105:5: throw: if ‘encrypt_rfbdes’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:96:13: danger: ‘fopen(fname, "w")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   94|   
#   95|       for (i = 0; i < 8; i++) {
#   96|-> 	if (i < strlen(passwd)) {
#   97|   	    encryptedPasswd[i] = passwd[i];
#   98|   	} else {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def19]
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:147:9: warning[-Wanalyzer-malloc-leak]: leak of ‘passwd’
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:127:46: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:130:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:135:17: branch_true: following ‘true’ branch (when ‘i != 8’)...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:136:14: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:137:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:142:15: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:137:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:142:15: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:147:9: throw: if ‘decrypt_rfbdes’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/common/vncauth.c:147:9: danger: ‘passwd’ leaks here; was allocated at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  145|       fclose(fp);
#  146|   
#  147|->     if(!decrypt_rfbdes(passwd, &out_len, fixedkey, passwd, 8))
#  148|   	return NULL;
#  149|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def20]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:81:10: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:56:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:63:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:67:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:71:6: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_true: following ‘true’ branch (when ‘enc == 4294967056’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:81:10: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:81:10: throw: if ‘ReadFromRFBServer’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:81:10: danger: ‘buf’ leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#   79|     if (enc == rfbEncodingXCursor) {
#   80|       /* Read and convert background and foreground colors. */
#   81|->     if (!ReadFromRFBServer(client, (char *)&rgb, sz_rfbXCursorColors)) {
#   82|         free(client->rcSource);
#   83|         client->rcSource = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def21]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:91:10: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:56:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:63:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:67:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:71:6: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_true: following ‘true’ branch (when ‘enc == 4294967056’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:81:10: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:81:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:87:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:91:10: throw: if ‘ReadFromRFBServer’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:91:10: danger: ‘buf’ leaks here; was allocated at [(7)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/6)
#   89|   
#   90|       /* Read 1bpp pixel data into a temporary buffer. */
#   91|->     if (!ReadFromRFBServer(client, buf, bytesMaskData)) {
#   92|         free(client->rcSource);
#   93|         client->rcSource = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def22]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:131:10: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:56:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:63:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:67:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:71:6: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_false: following ‘false’ branch (when ‘enc != 4294967056’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:131:62: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:131:10: throw: if ‘ReadFromRFBServer’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:131:10: danger: ‘buf’ leaks here; was allocated at [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
#  129|     } else {			/* enc == rfbEncodingRichCursor */
#  130|   
#  131|->     if (!ReadFromRFBServer(client, (char *)client->rcSource, width * height * bytesPerPixel)) {
#  132|         free(client->rcSource);
#  133|         client->rcSource = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def23]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:142:8: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:56:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:59:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:63:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:67:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:70:9: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:71:6: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:79:6: branch_false: following ‘false’ branch (when ‘enc != 4294967056’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:131:62: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:131:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:142:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:142:8: throw: if ‘ReadFromRFBServer’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/cursor.c:142:8: danger: ‘buf’ leaks here; was allocated at [(7)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/6)
#  140|     /* Read and decode mask data. */
#  141|   
#  142|->   if (!ReadFromRFBServer(client, buf, bytesMaskData)) {
#  143|       free(client->rcSource);
#  144|       client->rcSource = NULL;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def24]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:61: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:344:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:345:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:353:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:353:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:7: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:61: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:61: throw: if ‘sock_wait_for_connected’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:61: danger: ‘sock’ leaks here
#  358|       errno=WSAGetLastError();
#  359|   #endif
#  360|->     if (!((errno == EWOULDBLOCK || errno == EINPROGRESS) && sock_wait_for_connected(sock, timeout))) {
#  361|         rfbClientErr("ConnectToTcpAddr: connect\n");
#  362|         rfbCloseSocket(sock);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def25]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:361:7: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:344:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:345:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:353:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:353:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:7: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:361:7: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:361:7: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:361:7: danger: ‘sock’ leaks here
#  359|   #endif
#  360|       if (!((errno == EWOULDBLOCK || errno == EINPROGRESS) && sock_wait_for_connected(sock, timeout))) {
#  361|->       rfbClientErr("ConnectToTcpAddr: connect\n");
#  362|         rfbCloseSocket(sock);
#  363|         return RFB_INVALID_SOCKET;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def26]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:362:7: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:344:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:345:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:353:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:353:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:7: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:356:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:360:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:361:7: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:362:7: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:362:7: danger: ‘sock’ leaks here
#  360|       if (!((errno == EWOULDBLOCK || errno == EINPROGRESS) && sock_wait_for_connected(sock, timeout))) {
#  361|         rfbClientErr("ConnectToTcpAddr: connect\n");
#  362|->       rfbCloseSocket(sock);
#  363|         return RFB_INVALID_SOCKET;
#  364|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def27]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:422:65: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:402:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:408:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:410:10: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:412:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:412:12: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:413:8: branch_true: following ‘true’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:415:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:415:10: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:416:44: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:416:13: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:416:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:422:16: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:422:14: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:422:65: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:422:65: throw: if ‘sock_wait_for_connected’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:422:65: danger: ‘sock’ leaks here
#  420|             errno=WSAGetLastError();
#  421|   #endif
#  422|->           if ((errno == EWOULDBLOCK || errno == EINPROGRESS) && sock_wait_for_connected(sock, timeout))
#  423|               break;
#  424|             rfbCloseSocket(sock);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def28]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:424:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:402:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:408:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:410:10: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:412:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:412:12: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:413:8: branch_true: following ‘true’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:415:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:416:13: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:416:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:422:16: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:424:11: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:424:11: danger: ‘sock’ leaks here
#  422|             if ((errno == EWOULDBLOCK || errno == EINPROGRESS) && sock_wait_for_connected(sock, timeout))
#  423|               break;
#  424|->           rfbCloseSocket(sock);
#  425|             sock = RFB_INVALID_SOCKET;
#  426|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def29]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:496:33: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:480:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:484:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:486:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:487:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:73: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:7: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:496:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:7: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:496:33: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:496:33: throw: if ‘sock_wait_for_connected’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:496:33: danger: ‘sock’ leaks here
#  494|   
#  495|     if (connect(sock, (struct sockaddr *)&addr, sizeof(addr.sun_family) + strlen(addr.sun_path)) < 0 &&
#  496|->       !(errno == EINPROGRESS && sock_wait_for_connected(sock, timeout))) {
#  497|       rfbClientErr("ConnectToUnixSock: connect\n");
#  498|       rfbCloseSocket(sock);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def30]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:497:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:480:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:484:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:486:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:487:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:73: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:7: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:496:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:7: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:497:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:497:5: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:497:5: danger: ‘sock’ leaks here
#  495|     if (connect(sock, (struct sockaddr *)&addr, sizeof(addr.sun_family) + strlen(addr.sun_path)) < 0 &&
#  496|         !(errno == EINPROGRESS && sock_wait_for_connected(sock, timeout))) {
#  497|->     rfbClientErr("ConnectToUnixSock: connect\n");
#  498|       rfbCloseSocket(sock);
#  499|       return RFB_INVALID_SOCKET;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def31]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:498:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:480:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:484:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:486:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:487:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:73: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:7: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:496:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:495:7: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:497:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:498:5: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:498:5: danger: ‘sock’ leaks here
#  496|         !(errno == EINPROGRESS && sock_wait_for_connected(sock, timeout))) {
#  497|       rfbClientErr("ConnectToUnixSock: connect\n");
#  498|->     rfbCloseSocket(sock);
#  499|       return RFB_INVALID_SOCKET;
#  500|     }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def32]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:532:7: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:523:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:524:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:524:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:529:40: branch_true: following ‘true’ branch (when ‘port != 5500’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:530:21: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:531:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:532:7: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:532:7: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:532:7: danger: ‘sock’ leaks here
#  530|       addr.sin_port = htons((unsigned short)port);
#  531|       if (bind(sock, (struct sockaddr *)&addr, sizeof(addr)) == 0) {
#  532|->       rfbCloseSocket(sock);
#  533|         return port;
#  534|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def33]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:635:7: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:606:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:612:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:612:21: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:17: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:8: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:619:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:627:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:634:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:634:9: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:634:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:635:7: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:635:7: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:635:7: danger: ‘sock’ leaks here
#  633|   
#  634|       if (bind(sock, p->ai_addr, p->ai_addrlen) < 0) {
#  635|->       rfbCloseSocket(sock);
#  636|         continue;
#  637|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def34]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:652:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:606:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:612:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:612:21: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:17: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:8: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:619:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:627:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:634:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:634:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:642:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:642:6: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:648:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:651:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:652:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:652:5: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:652:5: danger: ‘sock’ leaks here
#  650|   
#  651|     if (listen(sock, 5) < 0) {
#  652|->     rfbClientErr("ListenAtTcpPort: listen\n");
#  653|       rfbCloseSocket(sock);
#  654|       return RFB_INVALID_SOCKET;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def35]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:653:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:606:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:612:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:612:21: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:17: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:613:8: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:619:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:627:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:634:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:634:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:642:6: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:642:6: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:648:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:651:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:652:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:653:5: branch_true: following ‘true’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:653:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:653:5: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:653:5: danger: ‘sock’ leaks here
#  651|     if (listen(sock, 5) < 0) {
#  652|       rfbClientErr("ListenAtTcpPort: listen\n");
#  653|->     rfbCloseSocket(sock);
#  654|       return RFB_INVALID_SOCKET;
#  655|     }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def36]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:697:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:471:1: enter_function: entry to ‘ConnectClientToUnixSockWithTimeout’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:480:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:484:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:486:10: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:487:6: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/sockets.c:492:8: call_function: calling ‘SetNonBlocking’ from ‘ConnectClientToUnixSockWithTimeout’
#  695|   SetNonBlocking(rfbSocket sock)
#  696|   {
#  697|->     return sock_set_nonblocking(sock, TRUE, rfbClientErr);
#  698|   }
#  699|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def37]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:153:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘palette[<unknown>]’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:81:16: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:81:16: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:89:10: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:92:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:257:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:260:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:263:14: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:263:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:267:23: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:271:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:141:14: branch_true: following ‘true’ branch (when ‘last_type <= 16’)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:145:37: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:144:16: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:149:26: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:149:41: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:151:27: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:151:44: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:153:30: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:153:21: danger: use of uninitialized value ‘palette[<unknown>]’ here
#  151|                 for (i = x, shift = 8 - bpp; i < x + w; i++) {
#  152|                   ((CARDBPP *)client->frameBuffer)[j + i] =
#  153|->                     palette[((*buffer) >> shift) & mask];
#  154|                   shift -= bpp;
#  155|                   if (shift < 0) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def38]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:218:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘palette[<unknown>]’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:81:16: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:81:16: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:89:10: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:92:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:213:16: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:216:16: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:216:14: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:218:27: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/trle.c:218:19: danger: use of uninitialized value ‘palette[<unknown>]’ here
#  216|             if (!ReadFromRFBServer(client, (char *)buffer, 1))
#  217|               return FALSE;
#  218|->           color = palette[(*buffer) & 0x7f];
#  219|             length = 1;
#  220|             if (*buffer & 0x80) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def39]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:69:9: warning[-Wanalyzer-malloc-leak]: leak of ‘p’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:60:17: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:61:12: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:64:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:64:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:65:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:66:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:68:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:69:9: throw: if ‘fflush’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:69:9: danger: ‘p’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   67|   #endif
#   68|   	fprintf(stderr,"Password: ");
#   69|-> 	fflush(stderr);
#   70|   	i=0;
#   71|   	while(1) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def40]
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:72:23: warning[-Wanalyzer-malloc-leak]: leak of ‘p’
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:60:17: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:61:12: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:64:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:64:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:65:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:66:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:68:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:72:23: throw: if ‘fgetc’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncclient/vncviewer.c:72:23: danger: ‘p’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   70|   	i=0;
#   71|   	while(1) {
#   72|-> 		int c=fgetc(stdin);
#   73|   		if(c=='\n')
#   74|   			break;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def41]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:48:46: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*src.subspan’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:838:5: enter_function: entry to ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:845:12: call_function: calling ‘sraRgnCreateRect’ from ‘main’
#   46|     sraSpan *span;
#   47|     if (!src) return NULL;
#   48|->   span = sraSpanCreate(src->start, src->end, src->subspan);
#   49|     return span;
#   50|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def42]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:55:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*after._next’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:838:5: enter_function: entry to ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:845:12: call_function: calling ‘sraRgnCreateRect’ from ‘main’
#   53|   sraSpanInsertAfter(sraSpan *newspan, sraSpan *after) {
#   54|     if(newspan && after) {
#   55|->     newspan->_next = after->_next;
#   56|       newspan->_prev = after;
#   57|       after->_next->_prev = newspan;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def43]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:66:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*before._prev’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:838:5: enter_function: entry to ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:845:12: call_function: calling ‘sraRgnCreateRect’ from ‘main’
#   64|     if(newspan && before) {
#   65|       newspan->_next = before;
#   66|->     newspan->_prev = before->_prev;
#   67|       before->_prev->_next = newspan;
#   68|       before->_prev = newspan;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def44]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:119:33: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*s.end’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:838:5: enter_function: entry to ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:845:12: call_function: calling ‘sraRgnCreateRect’ from ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:845:12: return_function: returning to ‘main’ from ‘sraRgnCreateRect’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:846:13: call_function: calling ‘sraRgnCreateRect’ from ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:846:13: return_function: returning to ‘main’ from ‘sraRgnCreateRect’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:847:13: call_function: calling ‘sraRgnCreateRect’ from ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:847:13: return_function: returning to ‘main’ from ‘sraRgnCreateRect’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:849:3: call_function: inlined call to ‘sraRgnPrint’ from ‘main’
#  117|   void
#  118|   sraSpanPrint(const sraSpan *s) {
#  119|->   printf("(%d-%d)", (s->start), (s->end));
#  120|     if (s->subspan)
#  121|       sraSpanListPrint(s->subspan);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def45]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:155:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*list.front._next’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:838:5: enter_function: entry to ‘main’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:845:12: call_function: calling ‘sraRgnCreateRect’ from ‘main’
#  153|   sraSpanListDestroy(sraSpanList *list) {
#  154|     sraSpan *curr;
#  155|->   while (list->front._next != &(list->back)) {
#  156|       curr = list->front._next;
#  157|       sraSpanRemove(curr);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def46]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:719:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:718:5: branch_true: following ‘true’ branch (when ‘reverseY != 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:719:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:719:5: danger: dereference of NULL ‘sraRgnGetIterator(s)’
#  717|     sraRectangleIterator *i = sraRgnGetIterator(s);
#  718|     if(reverseY) {
#  719|->     i->sPtrs[1] = &(s->front);
#  720|       i->sPtrs[0] = &(s->back);
#  721|     }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def47]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:722:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:718:5: branch_false: following ‘false’ branch (when ‘reverseY == 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:722:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:722:3: danger: dereference of NULL ‘sraRgnGetIterator(s)’
#  720|       i->sPtrs[0] = &(s->back);
#  721|     }
#  722|->   i->reverseX = reverseX;
#  723|     i->reverseY = reverseY;
#  724|     return(i);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def48]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:756:7: warning[-Wanalyzer-malloc-leak]: leak of ‘*i.sPtrs’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:753:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:754:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:754:7: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:755:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:753:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:754:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:754:7: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:755:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/../libvncserver/rfbregion.c:756:7: danger: ‘*i.sPtrs’ leaks here; was allocated at [(5)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/4)
#  754|       if(i->ptrPos+2 > i->ptrSize) { /* array is too small */
#  755|         i->ptrSize += DEFSTEP;
#  756|->       i->sPtrs = (sraSpan**)realloc(i->sPtrs, sizeof(sraSpan*)*i->ptrSize);
#  757|       }
#  758|       i->ptrPos += 2;

Error: COMPILER_WARNING (CWE-1023): [#def49]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:432:5: warning[-Wswitch]: enumeration value ‘RFB_AUTHENTICATION’ not handled in switch
#  430|       }
#  431|   
#  432|->     switch (cl->state) {
#  433|       case RFB_CHANNEL_SECURITY_TYPE:
#  434|           handlerListHead = channelSecurityHandlers;

Error: COMPILER_WARNING (CWE-1023): [#def50]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:432:5: warning[-Wswitch]: enumeration value ‘RFB_INITIALISATION_SHARED’ not handled in switch
#  430|       }
#  431|   
#  432|->     switch (cl->state) {
#  433|       case RFB_CHANNEL_SECURITY_TYPE:
#  434|           handlerListHead = channelSecurityHandlers;

Error: COMPILER_WARNING (CWE-1023): [#def51]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:432:5: warning[-Wswitch]: enumeration value ‘RFB_INITIALISATION’ not handled in switch
#  430|       }
#  431|   
#  432|->     switch (cl->state) {
#  433|       case RFB_CHANNEL_SECURITY_TYPE:
#  434|           handlerListHead = channelSecurityHandlers;

Error: COMPILER_WARNING (CWE-1023): [#def52]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:432:5: warning[-Wswitch]: enumeration value ‘RFB_NORMAL’ not handled in switch
#  430|       }
#  431|   
#  432|->     switch (cl->state) {
#  433|       case RFB_CHANNEL_SECURITY_TYPE:
#  434|           handlerListHead = channelSecurityHandlers;

Error: COMPILER_WARNING (CWE-1023): [#def53]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c: scope_hint: In function ‘rfbProcessClientSecurityType’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:432:5: warning[-Wswitch]: enumeration value ‘RFB_PROTOCOL_VERSION’ not handled in switch
#  432 |     switch (cl->state) {
#      |     ^~~~~~
#  430|       }
#  431|   
#  432|->     switch (cl->state) {
#  433|       case RFB_CHANNEL_SECURITY_TYPE:
#  434|           handlerListHead = channelSecurityHandlers;

Error: COMPILER_WARNING (CWE-1023): [#def54]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:432:5: warning[-Wswitch]: enumeration value ‘RFB_SHUTDOWN’ not handled in switch
#  430|       }
#  431|   
#  432|->     switch (cl->state) {
#  433|       case RFB_CHANNEL_SECURITY_TYPE:
#  434|           handlerListHead = channelSecurityHandlers;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def55]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:442:37: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘handler’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:423:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:432:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:442:37: danger: use of uninitialized value ‘handler’ here
#  440|   
#  441|       /* Make sure it was present in the list sent by the server. */
#  442|->     for (handler = handlerListHead; handler; handler = handler->next) {
#  443|   	if (chosenType == handler->type) {
#  444|   	      rfbLog("rfbProcessClientSecurityType: executing handler for type %d\n", chosenType);

Error: COMPILER_WARNING (CWE-457): [#def56]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:442:37: warning[-Wmaybe-uninitialized]: ‘handlerListHead’ may be used uninitialized
#  442 |     for (handler = handlerListHead; handler; handler = handler->next) {
#      |                                     ^~~~~~~
libvncserver-LibVNCServer-0.9.15/src/libvncserver/auth.c:419:25: note: ‘handlerListHead’ was declared here
#  419 |     rfbSecurityHandler* handlerListHead;
#      |                         ^~~~~~~~~~~~~~~
#  440|   
#  441|       /* Make sure it was present in the list sent by the server. */
#  442|->     for (handler = handlerListHead; handler; handler = handler->next) {
#  443|   	if (chosenType == handler->type) {
#  444|   	      rfbLog("rfbProcessClientSecurityType: executing handler for type %d\n", chosenType);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def57]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:64:19: warning[-Wanalyzer-malloc-leak]: leak of ‘passwds’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:81:1: enter_function: entry to ‘rfbProcessArguments’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:85:7: branch_false: following ‘false’ branch (when ‘argc’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:87:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:87:22: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:88:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:88:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:98:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:105:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:105:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:111:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:111:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:118:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:118:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:120:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:120:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:126:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:126:19: branch_true: following ‘true’ branch (when the strings are equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:127:30: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:127:30: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:16: branch_false: following ‘false’ branch (when ‘passwds’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:17: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:129:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:129:17: call_function: calling ‘rfbUsage’ from ‘rfbProcessArguments’
#   62|   #endif
#   63|   
#   64|->     for(extension=rfbGetExtensionIterator();extension;extension=extension->next)
#   65|   	if(extension->usage)
#   66|   		extension->usage();

Error: GCC_ANALYZER_WARNING (CWE-401): [#def58]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:66:17: warning[-Wanalyzer-malloc-leak]: leak of ‘passwds’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:81:1: enter_function: entry to ‘rfbProcessArguments’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:85:7: branch_false: following ‘false’ branch (when ‘argc’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:87:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:87:22: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:88:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:88:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:98:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:105:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:105:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:111:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:111:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:118:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:118:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:120:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:120:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:126:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:126:19: branch_true: following ‘true’ branch (when the strings are equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:127:30: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:127:30: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:16: branch_false: following ‘false’ branch (when ‘passwds’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:17: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:129:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:129:17: call_function: calling ‘rfbUsage’ from ‘rfbProcessArguments’
#   64|       for(extension=rfbGetExtensionIterator();extension;extension=extension->next)
#   65|   	if(extension->usage)
#   66|-> 		extension->usage();
#   67|       rfbReleaseExtensionIterator();
#   68|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def59]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:67:5: warning[-Wanalyzer-malloc-leak]: leak of ‘passwds’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:81:1: enter_function: entry to ‘rfbProcessArguments’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:85:7: branch_false: following ‘false’ branch (when ‘argc’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:87:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:87:22: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:88:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:88:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:98:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:105:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:105:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:111:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:111:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:118:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:118:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:120:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:120:19: branch_false: following ‘false’ branch (when the strings are non-equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:126:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:126:19: branch_true: following ‘true’ branch (when the strings are equal)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:127:30: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:127:30: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:16: branch_false: following ‘false’ branch (when ‘passwds’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:128:17: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:129:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cargs.c:129:17: call_function: calling ‘rfbUsage’ from ‘rfbProcessArguments’
#   65|   	if(extension->usage)
#   66|   		extension->usage();
#   67|->     rfbReleaseExtensionIterator();
#   68|   }
#   69|   

Error: CPPCHECK_WARNING (CWE-401): [#def60]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:294: error[memleak]: Memory leak: cursor.source
#  292|      cursor->cleanupMask = TRUE;
#  293|   
#  294|->    return(cursor);
#  295|   }
#  296|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def61]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:596:23: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘dest’ where non-null expected
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:557:6: branch_false: following ‘false’ branch (when ‘c’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:562:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:564:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:565:10: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:567:28: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:577:14: branch_false: following ‘false’ branch (when ‘x2 > 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:582:7: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:586:14: branch_false: following ‘false’ branch (when ‘y2 > 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:586:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:592:12: branch_true: following ‘true’ branch (when ‘j < y2’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:593:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:596:8: branch_false: following ‘false’ branch (when ‘wasChanged == 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:596:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/cursor.c:596:23: danger: argument 1 (‘dest’) from [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4) could be NULL where non-null expected
#  594|        const char* src=s->frameBuffer+(y1+j)*rowstride+x1*bpp;
#  595|        unsigned int count=x2*bpp;
#  596|->      if(wasChanged || memcmp(dest,src,count)) {
#  597|          wasChanged=TRUE;
#  598|          memcpy(dest,src,count);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def62]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:356:41: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:289:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:294:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:304:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:311:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:313:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:329:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:333:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:340:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:340:7: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:342:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:342:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:356:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:356:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:356:49: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:356:41: danger: argument 1 (‘strchr(&buf, 47)’) NULL where non-null expected
#  354|   	    return;
#  355|   	}
#  356|-> 	if (!strncmp(buf, "GET ",4) && !strncmp(strchr(buf,'/'),"/proxied.connection HTTP/1.", 27)) {
#  357|   	    /* proxy connection */
#  358|   	    rfbLog("httpd: client asked for /proxied.connection\n");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def63]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&fullFname, "r")’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:289:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:294:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:304:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:311:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:313:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:329:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:333:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:340:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:366:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:372:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:375:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:395:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:413:8: branch_false: following ‘false’ branch (when ‘ptr’ is NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:432:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:15: acquire_resource: opened here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: danger: ‘fopen(&fullFname, "r")’ leaks here; was opened at [(24)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/23)
#  450|       }
#  451|   
#  452|->     rfbWriteExact(&cl, OK_STR, strlen(OK_STR));
#  453|       char *ext = strrchr(fname, '.');
#  454|       char *contentType = "";

Error: GCC_ANALYZER_WARNING (CWE-401): [#def64]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&fullFname, "r")’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:289:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:294:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:304:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:311:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:313:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:329:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:333:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:340:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:366:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:372:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:375:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:395:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:413:8: branch_false: following ‘false’ branch (when ‘ptr’ is NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:432:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:15: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: danger: ‘fopen(&fullFname, "r")’ leaks here; was allocated at [(24)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/23)
#  450|       }
#  451|   
#  452|->     rfbWriteExact(&cl, OK_STR, strlen(OK_STR));
#  453|       char *ext = strrchr(fname, '.');
#  454|       char *contentType = "";

Error: GCC_ANALYZER_WARNING (CWE-775): [#def65]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:463:5: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(&fullFname, "r")’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:289:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:294:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:304:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:311:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:313:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:329:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:333:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:340:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:366:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:372:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:375:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:395:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:413:8: branch_false: following ‘false’ branch (when ‘ptr’ is NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:432:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:15: acquire_resource: opened here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:463:5: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:463:5: danger: ‘fopen(&fullFname, "r")’ leaks here; was opened at [(24)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/23)
#  461|       else if(ext && strcasecmp(ext, ".js") == 0)
#  462|   	contentType = "Content-Type: application/javascript\r\n";
#  463|->     rfbWriteExact(&cl, contentType, strlen(contentType));
#  464|       /* end the header */
#  465|       rfbWriteExact(&cl, "\r\n", 2);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def66]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:463:5: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(&fullFname, "r")’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:289:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:294:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:304:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:311:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:313:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:329:20: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:333:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:340:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:366:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:372:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:375:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:381:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:387:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:395:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:413:8: branch_false: following ‘false’ branch (when ‘ptr’ is NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:423:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:432:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:15: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:445:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:452:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:463:5: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/httpd.c:463:5: danger: ‘fopen(&fullFname, "r")’ leaks here; was allocated at [(24)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/23)
#  461|       else if(ext && strcasecmp(ext, ".js") == 0)
#  462|   	contentType = "Content-Type: application/javascript\r\n";
#  463|->     rfbWriteExact(&cl, contentType, strlen(contentType));
#  464|       /* end the header */
#  465|       rfbWriteExact(&cl, "\r\n", 2);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def67]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:257:5: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:241:7: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:244:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:250:5: acquire_resource: ‘va_start’ called here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:257:5: throw: if ‘fflush’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:257:5: danger: missing call to ‘va_end’ to match ‘va_start’ at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  255|   
#  256|       vfprintf(stderr, format, args);
#  257|->     fflush(stderr);
#  258|   
#  259|       va_end(args);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def68]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:939:6: warning[-Wanalyzer-malloc-leak]: leak of ‘screen’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:928:28: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:929:7: branch_false: following ‘false’ branch (when ‘screen’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:932:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:938:6: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:939:6: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:939:6: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:939:6: danger: ‘screen’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  937|   
#  938|      if(width&3)
#  939|->      rfbErr("WARNING: Width (%d) is not a multiple of 4. VncViewer has problems with that.\n",width);
#  940|   
#  941|      screen->autoPort=FALSE;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def69]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:1005:8: warning[-Wanalyzer-malloc-leak]: leak of ‘screen’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:928:28: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:929:7: branch_false: following ‘false’ branch (when ‘screen’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:932:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:1005:8: throw: if ‘rfbProcessArguments’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:1005:8: danger: ‘screen’ leaks here; was allocated at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
# 1003|      screen->permitFileTransfer = FALSE;
# 1004|   
# 1005|->    if(!rfbProcessArguments(screen,argc,argv)) {
# 1006|        free(screen);
# 1007|        return NULL;

Error: COMPILER_WARNING (CWE-252): [#def70]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c: scope_hint: In function ‘rfbShutdownServer’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/main.c:1242:7: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
# 1242 |       write(screen->pipe_notify_listener_thread[1], "\x00", 1);
#      |       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1240|   	in listenerRun, the loop in there will then break because the rfbShutdownSockets() above has set screen->socketState.
# 1241|         */
# 1242|->       write(screen->pipe_notify_listener_thread[1], "\x00", 1);
# 1243|         /* And wait for it to finish. */
# 1244|         pthread_join(screen->listener_thread, NULL);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def71]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:48:46: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*src.subspan’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:591:12: enter_function: entry to ‘sraRgnBBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:595:5: branch_false: following ‘false’ branch (when ‘src’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:598:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:599:10: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:600:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:617:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:620:10: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:620:10: call_function: calling ‘sraRgnCreateRect’ from ‘sraRgnBBox’
#   46|     sraSpan *span;
#   47|     if (!src) return NULL;
#   48|->   span = sraSpanCreate(src->start, src->end, src->subspan);
#   49|     return span;
#   50|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def72]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:55:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*after._next’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:591:12: enter_function: entry to ‘sraRgnBBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:595:5: branch_false: following ‘false’ branch (when ‘src’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:598:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:599:10: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:600:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:617:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:620:10: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:620:10: call_function: calling ‘sraRgnCreateRect’ from ‘sraRgnBBox’
#   53|   sraSpanInsertAfter(sraSpan *newspan, sraSpan *after) {
#   54|     if(newspan && after) {
#   55|->     newspan->_next = after->_next;
#   56|       newspan->_prev = after;
#   57|       after->_next->_prev = newspan;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def73]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:66:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*before._prev’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:567:1: enter_function: entry to ‘sraRgnSubtract’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:568:10: call_function: calling ‘sraSpanListSubtract’ from ‘sraRgnSubtract’
#   64|     if(newspan && before) {
#   65|       newspan->_next = before;
#   66|->     newspan->_prev = before->_prev;
#   67|       before->_prev->_next = newspan;
#   68|       before->_prev = newspan;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def74]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:155:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*list.front._next’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:591:12: enter_function: entry to ‘sraRgnBBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:595:5: branch_false: following ‘false’ branch (when ‘src’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:598:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:599:10: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:600:8: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:617:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:620:10: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:620:10: call_function: calling ‘sraRgnCreateRect’ from ‘sraRgnBBox’
#  153|   sraSpanListDestroy(sraSpanList *list) {
#  154|     sraSpan *curr;
#  155|->   while (list->front._next != &(list->back)) {
#  156|       curr = list->front._next;
#  157|       sraSpanRemove(curr);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def75]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:719:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:718:5: branch_true: following ‘true’ branch (when ‘reverseY != 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:719:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:719:5: danger: dereference of NULL ‘sraRgnGetIterator(s)’
#  717|     sraRectangleIterator *i = sraRgnGetIterator(s);
#  718|     if(reverseY) {
#  719|->     i->sPtrs[1] = &(s->front);
#  720|       i->sPtrs[0] = &(s->back);
#  721|     }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def76]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:722:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:718:5: branch_false: following ‘false’ branch (when ‘reverseY == 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:722:3: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbregion.c:722:3: danger: dereference of NULL ‘sraRgnGetIterator(s)’
#  720|       i->sPtrs[0] = &(s->back);
#  721|     }
#  722|->   i->reverseX = reverseX;
#  723|     i->reverseY = reverseY;
#  724|     return(i);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def77]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:212:6: warning[-Wanalyzer-malloc-leak]: leak of ‘rfbGetClientIterator(*cl.screen)’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2219:1: enter_function: entry to ‘rfbProcessClientNormalMessage’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2238:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2245:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3022:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3030:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3030:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3035:60: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3036:12: branch_false: following ‘false’ branch (when ‘extDesktopScreens’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3042:18: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3042:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3050:60: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3068:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3070:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3070:24: call_function: calling ‘rfbGetClientIterator’ from ‘rfbProcessClientNormalMessage’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3070:24: return_function: returning to ‘rfbProcessClientNormalMessage’ from ‘rfbGetClientIterator’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3071:27: call_function: calling ‘rfbClientIteratorNext’ from ‘rfbProcessClientNormalMessage’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3071:27: return_function: returning to ‘rfbProcessClientNormalMessage’ from ‘rfbClientIteratorNext’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:212:6: danger: ‘rfbGetClientIterator(*cl.screen)’ leaks here; was allocated at [(18)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/17)
#  210|     if (!i)
#  211|       return NULL;
#  212|->   if(i->next == 0) {
#  213|       LOCK(rfbClientListMutex);
#  214|       i->next = i->screen->clientHead;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def78]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:212:6: warning[-Wanalyzer-malloc-leak]: leak of ‘rfbGetClientIterator(rfbScreen)’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3991:1: enter_function: entry to ‘rfbSendBell’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3997:9: call_function: calling ‘rfbGetClientIterator’ from ‘rfbSendBell’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3997:9: return_function: returning to ‘rfbSendBell’ from ‘rfbGetClientIterator’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3998:15: call_function: calling ‘rfbClientIteratorNext’ from ‘rfbSendBell’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3998:15: return_function: returning to ‘rfbSendBell’ from ‘rfbClientIteratorNext’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:4007:5: throw: if ‘rfbStatRecordMessageSent’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:212:6: danger: ‘rfbGetClientIterator(rfbScreen)’ leaks here; was allocated at [(4)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/3)
#  210|     if (!i)
#  211|       return NULL;
#  212|->   if(i->next == 0) {
#  213|       LOCK(rfbClientListMutex);
#  214|       i->next = i->screen->clientHead;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def79]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:767:13: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:762:19: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:763:8: branch_true: following ‘true’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:764:32: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:767:13: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:767:13: danger: ‘buf’ leaks here; was allocated at [(1)](sarif:/runs/0/results/34/codeFlows/0/threadFlows/0/locations/0)
#  765|           memcpy(buf + 4, reason, len);
#  766|   
#  767|->         if (rfbWriteExact(cl, buf, 4 + len) < 0)
#  768|               rfbLogPerror("rfbClientSendString: write");
#  769|           free(buf);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def80]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:768:13: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:762:19: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:763:8: branch_true: following ‘true’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:764:32: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:767:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:768:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:768:13: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:768:13: danger: ‘buf’ leaks here; was allocated at [(1)](sarif:/runs/0/results/35/codeFlows/0/threadFlows/0/locations/0)
#  766|   
#  767|           if (rfbWriteExact(cl, buf, 4 + len) < 0)
#  768|->             rfbLogPerror("rfbClientSendString: write");
#  769|           free(buf);
#  770|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def81]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:795:13: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:789:19: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:790:8: branch_true: following ‘true’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:791:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:795:13: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:795:13: danger: ‘buf’ leaks here; was allocated at [(1)](sarif:/runs/0/results/36/codeFlows/0/threadFlows/0/locations/0)
#  793|           memcpy(buf + 8, reason, len);
#  794|   
#  795|->         if (rfbWriteExact(cl, buf, 8 + len) < 0)
#  796|               rfbLogPerror("rfbClientConnFailed: write");
#  797|           free(buf);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def82]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:796:13: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:789:19: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:790:8: branch_true: following ‘true’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:791:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:795:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:796:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:796:13: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:796:13: danger: ‘buf’ leaks here; was allocated at [(1)](sarif:/runs/0/results/37/codeFlows/0/threadFlows/0/locations/0)
#  794|   
#  795|           if (rfbWriteExact(cl, buf, 8 + len) < 0)
#  796|->             rfbLogPerror("rfbClientConnFailed: write");
#  797|           free(buf);
#  798|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def83]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1420:9: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir(&path)’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:676:1: enter_function: entry to ‘rfbProcessClientMessage’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:694:9: call_function: calling ‘rfbProcessClientNormalMessage’ from ‘rfbProcessClientMessage’
# 1418|   
# 1419|       /* send back the path name (necessary for links) */
# 1420|->     if (rfbSendFileTransferMessage(cl, rfbDirPacket, rfbADirectory, 0, length, buffer)==FALSE) return FALSE;
# 1421|   
# 1422|   #ifdef WIN32

Error: GCC_ANALYZER_WARNING (CWE-401): [#def84]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1538:22: warning[-Wanalyzer-malloc-leak]: leak of ‘buffer’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1518:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1529:30: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1529:7: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1535:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1535:8: branch_true: following ‘true’ branch (when ‘length != 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1536:23: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1536:16: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1537:12: branch_true: following ‘true’ branch (when ‘buffer’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1538:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1538:22: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1538:22: danger: ‘buffer’ leaks here; was allocated at [(7)](sarif:/runs/0/results/45/codeFlows/0/threadFlows/0/locations/6)
# 1536|           buffer=malloc((size_t)length+1);
# 1537|           if (buffer!=NULL) {
# 1538|->             if ((n = rfbReadExact(cl, (char *)buffer, length)) <= 0) {
# 1539|                   if (n != 0)
# 1540|                       rfbLogPerror("rfbProcessFileTransferReadBuffer: read");

Error: CPPCHECK_WARNING (CWE-401): [#def85]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1762: error[memleakOnRealloc]: Common realloc mistake: 'buffer' nulled but not freed upon failure
# 1760|                 /* Add the File Time Stamp to the filename */
# 1761|                 strftime(timespec, sizeof(timespec), "%m/%d/%Y %H:%M",gmtime(&statbuf.st_ctime));
# 1762|->               buffer=realloc(buffer, length + strlen(timespec) + 2); /* comma, and Null term */
# 1763|                 if (buffer==NULL) {
# 1764|                     rfbLog("rfbProcessFileTransfer() rfbFileTransferRequest: Failed to malloc %d bytes\n", length + strlen(timespec) + 2);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def86]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:1770:23: warning[-Wanalyzer-malloc-leak]: leak of ‘buffer’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:676:1: enter_function: entry to ‘rfbProcessClientMessage’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:694:9: call_function: calling ‘rfbProcessClientNormalMessage’ from ‘rfbProcessClientMessage’
# 1768|                 strcat(buffer, timespec);
# 1769|                 length = strlen(buffer);
# 1770|->               if (DB) rfbLog("rfbProcessFileTransfer() buffer is now: \"%s\"\n", buffer);
# 1771|               }
# 1772|           } else {

Error: COMPILER_WARNING (CWE-563): [#def87]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c: scope_hint: In function ‘rfbSendExtendedServerCutTextData’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2088:9: warning[-Wunused-variable]: unused variable ‘i’
# 2088 |     int i;
#      |         ^
# 2086|   static rfbBool
# 2087|   rfbSendExtendedServerCutTextData(rfbClientPtr cl, const char *data, int len) {
# 2088|->     int i;
# 2089|       unsigned long size;
# 2090|       uint32_t tmpInt;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def88]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2102:12: warning[-Wanalyzer-malloc-leak]: leak of ‘bufBeforeZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2093:29: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2102:12: throw: if ‘compressBound’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2102:12: danger: ‘bufBeforeZlib’ leaks here; was allocated at [(1)](sarif:/runs/0/results/47/codeFlows/0/threadFlows/0/locations/0)
# 2100|       memcpy(bufBeforeZlib, &tmpInt, 4);
# 2101|       memcpy(bufBeforeZlib + 4, data, len);
# 2102|->     size = compressBound(len + 4);
# 2103|       bufAfterZlib = (char *)malloc(12 + size);
# 2104|       if (bufAfterZlib == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def89]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2105:9: warning[-Wanalyzer-malloc-leak]: leak of ‘bufBeforeZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2093:29: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2104:8: branch_true: following ‘true’ branch (when ‘bufAfterZlib’ is NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2105:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2105:9: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2105:9: danger: ‘bufBeforeZlib’ leaks here; was allocated at [(1)](sarif:/runs/0/results/48/codeFlows/0/threadFlows/0/locations/0)
# 2103|       bufAfterZlib = (char *)malloc(12 + size);
# 2104|       if (bufAfterZlib == NULL) {
# 2105|->         rfbLogPerror("rfbSendExtendedClipboardCapability: failed to allocate memory");
# 2106|           free(bufBeforeZlib);
# 2107|           rfbCloseClient(cl);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def90]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: warning[-Wanalyzer-malloc-leak]: leak of ‘bufAfterZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2103:28: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2104:8: branch_false: following ‘false’ branch (when ‘bufAfterZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: throw: if ‘compress’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: danger: ‘bufAfterZlib’ leaks here; was allocated at [(3)](sarif:/runs/0/results/50/codeFlows/0/threadFlows/0/locations/2)
# 2108|           return FALSE;
# 2109|       }
# 2110|->     if (compress((unsigned char *)bufAfterZlib + 12, &size, (unsigned char *)bufBeforeZlib, len + 4) != Z_OK) {
# 2111|           rfbLogPerror("rfbSendExtendedClipboardCapability: zlib deflation error");
# 2112|           free(bufBeforeZlib);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def91]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: warning[-Wanalyzer-malloc-leak]: leak of ‘bufBeforeZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2093:29: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2104:8: branch_false: following ‘false’ branch (when ‘bufAfterZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: throw: if ‘compress’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: danger: ‘bufBeforeZlib’ leaks here; was allocated at [(1)](sarif:/runs/0/results/49/codeFlows/0/threadFlows/0/locations/0)
# 2108|           return FALSE;
# 2109|       }
# 2110|->     if (compress((unsigned char *)bufAfterZlib + 12, &size, (unsigned char *)bufBeforeZlib, len + 4) != Z_OK) {
# 2111|           rfbLogPerror("rfbSendExtendedClipboardCapability: zlib deflation error");
# 2112|           free(bufBeforeZlib);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def92]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2111:9: warning[-Wanalyzer-malloc-leak]: leak of ‘bufBeforeZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2093:29: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2104:8: branch_false: following ‘false’ branch (when ‘bufAfterZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2111:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2111:9: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2111:9: danger: ‘bufBeforeZlib’ leaks here; was allocated at [(1)](sarif:/runs/0/results/51/codeFlows/0/threadFlows/0/locations/0)
# 2109|       }
# 2110|       if (compress((unsigned char *)bufAfterZlib + 12, &size, (unsigned char *)bufBeforeZlib, len + 4) != Z_OK) {
# 2111|->         rfbLogPerror("rfbSendExtendedClipboardCapability: zlib deflation error");
# 2112|           free(bufBeforeZlib);
# 2113|           free(bufAfterZlib);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def93]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2125:9: warning[-Wanalyzer-malloc-leak]: leak of ‘bufBeforeZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2093:29: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2104:8: branch_false: following ‘false’ branch (when ‘bufAfterZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2117:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2125:9: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2125:9: danger: ‘bufBeforeZlib’ leaks here; was allocated at [(1)](sarif:/runs/0/results/52/codeFlows/0/threadFlows/0/locations/0)
# 2123|       tmpInt = Swap32IfLE(rfbExtendedClipboard_Provide | rfbExtendedClipboard_Text);
# 2124|       memcpy(bufAfterZlib + 8, &tmpInt, 4);
# 2125|->     if (rfbWriteExact(cl, bufAfterZlib, 12 + size) < 0) {
# 2126|           rfbLogPerror("rfbSendExtendedClipboardCapability: write");
# 2127|           free(bufBeforeZlib);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def94]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2126:9: warning[-Wanalyzer-malloc-leak]: leak of ‘bufBeforeZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2093:29: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2104:8: branch_false: following ‘false’ branch (when ‘bufAfterZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2117:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2125:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2126:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2126:9: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2126:9: danger: ‘bufBeforeZlib’ leaks here; was allocated at [(1)](sarif:/runs/0/results/53/codeFlows/0/threadFlows/0/locations/0)
# 2124|       memcpy(bufAfterZlib + 8, &tmpInt, 4);
# 2125|       if (rfbWriteExact(cl, bufAfterZlib, 12 + size) < 0) {
# 2126|->         rfbLogPerror("rfbSendExtendedClipboardCapability: write");
# 2127|           free(bufBeforeZlib);
# 2128|           free(bufAfterZlib);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def95]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2132:5: warning[-Wanalyzer-malloc-leak]: leak of ‘bufBeforeZlib’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2093:29: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2094:8: branch_false: following ‘false’ branch (when ‘bufBeforeZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2099:14: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2104:8: branch_false: following ‘false’ branch (when ‘bufAfterZlib’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2110:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2117:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2125:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2132:63: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2132:5: throw: if ‘rfbStatRecordMessageSent’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2132:5: danger: ‘bufBeforeZlib’ leaks here; was allocated at [(1)](sarif:/runs/0/results/54/codeFlows/0/threadFlows/0/locations/0)
# 2130|           return FALSE;
# 2131|       }
# 2132|->     rfbStatRecordMessageSent(cl, rfbServerCutText, 12 + size, 12 + size);
# 2133|       free(bufBeforeZlib);
# 2134|       free(bufAfterZlib);

Error: COMPILER_WARNING (CWE-704): [#def96]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c: scope_hint: In function ‘rfbProcessExtendedServerCutTextData’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2155:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2155 |     stream.next_in = data;
#      |                    ^
# 2153|       }
# 2154|       stream.avail_in = len;
# 2155|->     stream.next_in = data;
# 2156|       for (i = 0; i < 16; i++) {
# 2157|           if (!(flags & (1 << i))) {

Error: COMPILER_WARNING (CWE-704): [#def97]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2155:20: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
# 2153|       }
# 2154|       stream.avail_in = len;
# 2155|->     stream.next_in = data;
# 2156|       for (i = 0; i < 16; i++) {
# 2157|           if (!(flags & (1 << i))) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def98]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2192:15: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2149:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2154:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2156:17: branch_true: following ‘true’ branch (when ‘i != 16’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2157:23: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2163:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2172:16: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2173:12: branch_false: following ‘false’ branch (when ‘buf’ is NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2177:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2177:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2183:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2183:23: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2184:12: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2190:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2192:15: throw: if ‘inflate’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2192:15: danger: ‘buf’ leaks here; was allocated at [(11)](sarif:/runs/0/results/55/codeFlows/0/threadFlows/0/locations/10)
# 2190|           stream.avail_out = size;
# 2191|           stream.next_out = (unsigned char *)buf;
# 2192|->         err = inflate(&stream, Z_NO_FLUSH);
# 2193|           if (err != Z_OK && err != Z_STREAM_END) {
# 2194|               rfbLogPerror("rfbProcessExtendedServerCutTextData: zlib inflation error");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def99]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2801:26: warning[-Wanalyzer-malloc-leak]: leak of ‘str’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2238:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2245:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2771:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2779:25: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2782:9: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2791:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2792:16: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2794:31: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2794:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2795:20: branch_false: following ‘false’ branch (when ‘str’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2801:26: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2801:26: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2801:26: danger: ‘str’ leaks here; was allocated at [(11)](sarif:/runs/0/results/56/codeFlows/0/threadFlows/0/locations/10)
# 2799|                       return;
# 2800|                   }
# 2801|->                 if ((n = rfbReadExact(cl, str, msg.tc.length)) <= 0) {
# 2802|                       if (n != 0)
# 2803|                           rfbLogPerror("rfbProcessClientNormalMessage: read");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def100]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2873:18: warning[-Wanalyzer-malloc-leak]: leak of ‘str’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2238:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2245:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2831:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2839:26: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2859:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2866:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2866:23: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2867:12: branch_false: following ‘false’ branch (when ‘str’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2873:18: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2873:18: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2873:18: danger: ‘str’ leaks here; was allocated at [(9)](sarif:/runs/0/results/57/codeFlows/0/threadFlows/0/locations/8)
# 2871|   	}
# 2872|   
# 2873|-> 	if ((n = rfbReadExact(cl, str, msg.cct.length)) <= 0) {
# 2874|   	    if (n != 0)
# 2875|   	        rfbLogPerror("rfbProcessClientNormalMessage: read");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def101]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3042:18: warning[-Wanalyzer-malloc-leak]: leak of ‘extDesktopScreens’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2238:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:2245:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3022:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3030:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3030:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3035:60: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3035:53: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3036:12: branch_false: following ‘false’ branch (when ‘extDesktopScreens’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3042:18: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3042:18: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3042:18: danger: ‘extDesktopScreens’ leaks here; was allocated at [(9)](sarif:/runs/0/results/58/codeFlows/0/threadFlows/0/locations/8)
# 3040|           }
# 3041|   
# 3042|->         if ((n = rfbReadExact(cl, ((char *)extDesktopScreens), msg.sdm.numberOfScreens * sz_rfbExtDesktopScreen)) <= 0) {
# 3043|               if (n != 0)
# 3044|                   rfbLogPerror("rfbProcessClientNormalMessage: read");

Error: CPPCHECK_WARNING (CWE-476): [#def102]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3948: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scme
# 3946|       rgb = (uint16_t *)(&wbuf[sz_rfbSetColourMapEntriesMsg]);
# 3947|   
# 3948|->     scme->type = rfbSetColourMapEntries;
# 3949|   
# 3950|       scme->firstColour = Swap16IfLE(firstColour);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def103]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3948:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘wbuf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3940:8: branch_true: following ‘true’ branch (when ‘nColours > 256’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:32: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:25: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3948:5: danger: ‘wbuf’ could be NULL: unchecked value from [(3)](sarif:/runs/0/results/59/codeFlows/0/threadFlows/0/locations/2)
# 3946|       rgb = (uint16_t *)(&wbuf[sz_rfbSetColourMapEntriesMsg]);
# 3947|   
# 3948|->     scme->type = rfbSetColourMapEntries;
# 3949|   
# 3950|       scme->firstColour = Swap16IfLE(firstColour);

Error: CPPCHECK_WARNING (CWE-476): [#def104]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scme
# 3948|       scme->type = rfbSetColourMapEntries;
# 3949|   
# 3950|->     scme->firstColour = Swap16IfLE(firstColour);
# 3951|       scme->nColours = Swap16IfLE(nColours);
# 3952|   

Error: CPPCHECK_WARNING (CWE-476): [#def105]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: scme
# 3949|   
# 3950|       scme->firstColour = Swap16IfLE(firstColour);
# 3951|->     scme->nColours = Swap16IfLE(nColours);
# 3952|   
# 3953|       len = sz_rfbSetColourMapEntriesMsg;

Error: CPPCHECK_WARNING (CWE-457): [#def106]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3972: warning[uninitvar]: Uninitialized variable: wbuf
# 3970|   
# 3971|       LOCK(cl->sendMutex);
# 3972|->     if (rfbWriteExact(cl, wbuf, len) < 0) {
# 3973|   	rfbLogPerror("rfbSendSetColourMapEntries: write");
# 3974|   	rfbCloseClient(cl);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def107]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3972:9: warning[-Wanalyzer-malloc-leak]: leak of ‘wbuf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3940:8: branch_true: following ‘true’ branch (when ‘nColours > 256’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:32: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3955:17: branch_true: following ‘true’ branch (when ‘i < nColours’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3972:9: throw: if ‘rfbWriteExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3972:9: danger: ‘wbuf’ leaks here; was allocated at [(3)](sarif:/runs/0/results/60/codeFlows/0/threadFlows/0/locations/2)
# 3970|   
# 3971|       LOCK(cl->sendMutex);
# 3972|->     if (rfbWriteExact(cl, wbuf, len) < 0) {
# 3973|   	rfbLogPerror("rfbSendSetColourMapEntries: write");
# 3974|   	rfbCloseClient(cl);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def108]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3973:9: warning[-Wanalyzer-malloc-leak]: leak of ‘wbuf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3940:8: branch_true: following ‘true’ branch (when ‘nColours > 256’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:32: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3955:17: branch_true: following ‘true’ branch (when ‘i < nColours’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3972:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3973:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3973:9: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3973:9: danger: ‘wbuf’ leaks here; was allocated at [(3)](sarif:/runs/0/results/61/codeFlows/0/threadFlows/0/locations/2)
# 3971|       LOCK(cl->sendMutex);
# 3972|       if (rfbWriteExact(cl, wbuf, len) < 0) {
# 3973|-> 	rfbLogPerror("rfbSendSetColourMapEntries: write");
# 3974|   	rfbCloseClient(cl);
# 3975|           if (wbuf != buf) free(wbuf);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def109]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3974:9: warning[-Wanalyzer-malloc-leak]: leak of ‘wbuf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3940:8: branch_true: following ‘true’ branch (when ‘nColours > 256’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:32: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3955:17: branch_true: following ‘true’ branch (when ‘i < nColours’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3972:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3973:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3974:9: throw: if ‘rfbCloseClient’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3974:9: danger: ‘wbuf’ leaks here; was allocated at [(3)](sarif:/runs/0/results/62/codeFlows/0/threadFlows/0/locations/2)
# 3972|       if (rfbWriteExact(cl, wbuf, len) < 0) {
# 3973|   	rfbLogPerror("rfbSendSetColourMapEntries: write");
# 3974|-> 	rfbCloseClient(cl);
# 3975|           if (wbuf != buf) free(wbuf);
# 3976|           UNLOCK(cl->sendMutex);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def110]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3981:5: warning[-Wanalyzer-malloc-leak]: leak of ‘wbuf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3940:8: branch_true: following ‘true’ branch (when ‘nColours > 256’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:32: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3942:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3950:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3951:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3955:17: branch_true: following ‘true’ branch (when ‘i < nColours’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3956:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:12: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3957:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3958:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3959:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3960:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3972:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3979:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3981:5: throw: if ‘rfbStatRecordMessageSent’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbserver.c:3981:5: danger: ‘wbuf’ leaks here; was allocated at [(3)](sarif:/runs/0/results/63/codeFlows/0/threadFlows/0/locations/2)
# 3979|       UNLOCK(cl->sendMutex);
# 3980|   
# 3981|->     rfbStatRecordMessageSent(cl, rfbSetColourMapEntries, len, len);
# 3982|       if (wbuf != buf) free(wbuf);
# 3983|       return TRUE;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def111]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:94:43: warning[-Wanalyzer-malloc-leak]: leak of ‘ctx’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:92:24: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:92:8: branch_false: following ‘false’ branch (when ‘ctx’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:94:43: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:94:43: throw: if ‘gnutls_global_init’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:94:43: danger: ‘ctx’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   92|       if (NULL == (ctx = malloc(sizeof(struct rfbssl_ctx)))) {
#   93|   	return NULL;
#   94|->     } else if (GNUTLS_E_SUCCESS != (ret = gnutls_global_init())) {
#   95|   	/* */
#   96|       } else if (GNUTLS_E_SUCCESS != (ret = gnutls_certificate_allocate_credentials(&ctx->x509_cred))) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def112]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:96:43: warning[-Wanalyzer-malloc-leak]: leak of ‘ctx’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:92:24: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:92:8: branch_false: following ‘false’ branch (when ‘ctx’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:94:43: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:94:15: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:96:43: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:96:43: throw: if ‘gnutls_certificate_allocate_credentials’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/rfbssl_gnutls.c:96:43: danger: ‘ctx’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   94|       } else if (GNUTLS_E_SUCCESS != (ret = gnutls_global_init())) {
#   95|   	/* */
#   96|->     } else if (GNUTLS_E_SUCCESS != (ret = gnutls_certificate_allocate_credentials(&ctx->x509_cred))) {
#   97|   	/* */
#   98|       } else if ((ret = gnutls_certificate_set_x509_trust_file(ctx->x509_cred, cert, GNUTLS_X509_FMT_PEM)) < 0) {

Error: COMPILER_WARNING: [#def113]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/scale.c: scope_hint: In function ‘rfbScaledScreenUpdate’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/scale.c:264:9: warning[-Wunused-but-set-variable=]: variable ‘count’ set but not used
#  264 |     int count=0;
#      |         ^~~~~
#  262|        */
#  263|       rfbScreenInfoPtr ptr;
#  264|->     int count=0;
#  265|   
#  266|       /* We don't point to cl->screen as it is the original */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def114]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:31:3: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:203:5: enter_function: entry to ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: call_function: calling ‘selPaintButtons’ from ‘rfbSelectBox’
#   29|     rfbPixel colour = m->colour;
#   30|   
#   31|->   rfbFillRect(s,m->x1,m->okY-m->textH,m->x2,m->okY,bcolour);
#   32|   
#   33|     if(invertOk) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def115]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:39:5: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:203:5: enter_function: entry to ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: call_function: calling ‘selPaintButtons’ from ‘rfbSelectBox’
#   37|   			  bcolour,colour);
#   38|     } else
#   39|->     rfbDrawString(s,m->font,m->okX+m->xhot,m->okY-1+m->yhot,okStr,colour);
#   40|       
#   41|     if(invertCancel) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def116]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:48:5: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:203:5: enter_function: entry to ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: call_function: calling ‘selPaintButtons’ from ‘rfbSelectBox’
#   46|   			  bcolour,colour);
#   47|     } else
#   48|->     rfbDrawString(s,m->font,m->cancelX+m->xhot,m->okY-1+m->yhot,cancelStr,colour);
#   49|   
#   50|     m->okInverted = invertOk;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def117]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:60:3: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:203:5: enter_function: entry to ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: call_function: calling ‘selPaintButtons’ from ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: return_function: returning to ‘rfbSelectBox’ from ‘selPaintButtons’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:279:4: call_function: calling ‘selSelect’ from ‘rfbSelectBox’
#   58|     if(y2>m->y2)
#   59|       y2=m->y2;
#   60|->   rfbFillRect(m->screen,m->x1,y1,m->x2,y2,invert?m->colour:m->backColour);
#   61|     if(m->displayStart+line<m->listSize)
#   62|       rfbDrawStringWithClip(m->screen,m->font,m->x1+m->xhot,y2-1+m->yhot,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def118]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:62:5: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:203:5: enter_function: entry to ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: call_function: calling ‘selPaintButtons’ from ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: return_function: returning to ‘rfbSelectBox’ from ‘selPaintButtons’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:279:4: call_function: calling ‘selSelect’ from ‘rfbSelectBox’
#   60|     rfbFillRect(m->screen,m->x1,y1,m->x2,y2,invert?m->colour:m->backColour);
#   61|     if(m->displayStart+line<m->listSize)
#   62|->     rfbDrawStringWithClip(m->screen,m->font,m->x1+m->xhot,y2-1+m->yhot,
#   63|   			  m->list[m->displayStart+line],
#   64|   			  m->x1,y1,m->x2,y2,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def119]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:97:9: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:203:5: enter_function: entry to ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: call_function: calling ‘selPaintButtons’ from ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: return_function: returning to ‘rfbSelectBox’ from ‘selPaintButtons’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:279:4: call_function: calling ‘selSelect’ from ‘rfbSelectBox’
#   95|   	lineStart = m->pageH-delta;
#   96|   	lineEnd = m->pageH;
#   97|-> 	rfbDoCopyRect(m->screen,m->x1,m->y1,m->x2,m->y1+lineStart*m->textH,
#   98|   		      0,-delta*m->textH);
#   99|         } else {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def120]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:102:9: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:203:5: enter_function: entry to ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:271:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:273:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: call_function: calling ‘selPaintButtons’ from ‘rfbSelectBox’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:278:4: return_function: returning to ‘rfbSelectBox’ from ‘selPaintButtons’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:279:4: call_function: calling ‘selSelect’ from ‘rfbSelectBox’
#  100|   	lineStart = 0;
#  101|   	lineEnd = -delta;
#  102|-> 	rfbDoCopyRect(m->screen,
#  103|   		      m->x1,m->y1+lineEnd*m->textH,m->x2,m->y2,
#  104|   		      0,-delta*m->textH);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def121]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:277:4: warning[-Wanalyzer-malloc-leak]: leak of ‘frameBufferBackup’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:220:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:226:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:228:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:240:6: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:242:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:247:31: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:248:7: branch_false: following ‘false’ branch (when ‘frameBufferBackup’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:251:4: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:277:4: throw: if ‘rfbFillRect’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/selbox.c:277:4: danger: ‘frameBufferBackup’ leaks here; was allocated at [(7)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/6)
#  275|   
#  276|      /* paint list and buttons */
#  277|->    rfbFillRect(rfbScreen,x1,y1,x2,y2,colour);
#  278|      selPaintButtons(&selData,FALSE,FALSE);
#  279|      selSelect(&selData,0);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def122]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:532:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘accept(chosen_listen_sock, 0, 0)’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:495:5: branch_true: following ‘true’ branch (when ‘__i != 16’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:495:5: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:500:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:504:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:529:7: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:530:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:532:9: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:532:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:532:9: danger: ‘accept(chosen_listen_sock, 0, 0)’ leaks here
#  530|   	rfbErr("rfbProcessNewconnection: open fd count of %lu exceeds quota %.1f of limit %lu, denying connection\n", curfds, rfbScreen->fdQuota, maxfds);
#  531|   	sock = accept(chosen_listen_sock, NULL, NULL);
#  532|-> 	rfbCloseSocket(sock);
#  533|   	return FALSE;
#  534|       }

Error: COMPILER_WARNING (CWE-252): [#def123]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c: scope_hint: In function ‘rfbCloseClient’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:602:9: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  602 |         write(cl->pipe_notify_client_thread[1], "\x00", 1);
#      |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  600|   	  RFB_SHUTDOWN. Client socket closing will be done by the thread.
#  601|   	*/
#  602|-> 	write(cl->pipe_notify_client_thread[1], "\x00", 1);
#  603|   	/*
#  604|   	  No joining of threads here, this is fire and forget.

Error: COMPILER_WARNING (CWE-758): [#def124]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c: scope_hint: In function ‘rfbReadExactTimeout’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:757:32: warning[-Wrestrict]: passing argument 2 to ‘restrict’-qualified parameter aliases with argument 4
#  757 |             n = select(sock+1, &fds, NULL, &fds, &tv);
#      |                                ^~~~        ~~~~
#  755|               tv.tv_sec = timeout / 1000;
#  756|               tv.tv_usec = (timeout % 1000) * 1000;
#  757|->             n = select(sock+1, &fds, NULL, &fds, &tv);
#  758|               if (n < 0) {
#  759|                   rfbLogPerror("ReadExact: select");

Error: CPPCHECK_WARNING (CWE-758): [#def125]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:798: error[missingReturn]: Found an exit path from function with non-void return type that has missing return statement
#  796|   rfbPeekAtSocket(rfbClientPtr cl, char *buf, int len)
#  797|   {
#  798|->     cl->peekAtSocket(cl, buf, len);
#  799|   }
#  800|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def126]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:799:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<return-value>’
#  797|   {
#  798|       cl->peekAtSocket(cl, buf, len);
#  799|-> }
#  800|   
#  801|   /*

Error: COMPILER_WARNING (CWE-393): [#def127]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c: scope_hint: In function ‘rfbPeekAtSocket’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:799:1: warning[-Wreturn-type]: control reaches end of non-void function
#  799 | }
#      | ^
#  797|   {
#  798|       cl->peekAtSocket(cl, buf, len);
#  799|-> }
#  800|   
#  801|   /*

Error: COMPILER_WARNING (CWE-758): [#def128]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c: scope_hint: In function ‘rfbPeekExactTimeout’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:863:32: warning[-Wrestrict]: passing argument 2 to ‘restrict’-qualified parameter aliases with argument 4
#  863 |             n = select(sock+1, &fds, NULL, &fds, &tv);
#      |                                ^~~~        ~~~~
#  861|               tv.tv_sec = timeout / 1000;
#  862|               tv.tv_usec = (timeout % 1000) * 1000;
#  863|->             n = select(sock+1, &fds, NULL, &fds, &tv);
#  864|               if (n < 0) {
#  865|                   rfbLogPerror("PeekExact: select");

Error: GCC_ANALYZER_WARNING (CWE-775): [#def129]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1062:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1053:17: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1053:8: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1056:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1056:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1061:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1061:9: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1061:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1062:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1062:9: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1062:9: danger: ‘sock’ leaks here
# 1060|       }
# 1061|       if (bind(sock, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
# 1062|-> 	rfbCloseSocket(sock);
# 1063|   	return RFB_INVALID_SOCKET;
# 1064|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def130]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1066:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1053:17: acquire_resource: stream socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1053:8: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1056:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1056:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1061:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1061:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1065:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1065:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1066:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1066:9: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1066:9: danger: ‘sock’ leaks here
# 1064|       }
# 1065|       if (listen(sock, 32) < 0) {
# 1066|-> 	rfbCloseSocket(sock);
# 1067|   	return RFB_INVALID_SOCKET;
# 1068|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def131]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1124:11: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1095:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1101:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1101:23: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:21: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:21: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:12: branch_false: following ‘false’ branch (when ‘sock >= 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1108:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1108:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1116:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1116:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1123:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1123:13: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1123:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1124:11: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1124:11: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1124:11: danger: ‘sock’ leaks here
# 1122|   
# 1123|   	if (bind(sock, p->ai_addr, p->ai_addrlen) < 0) {
# 1124|-> 	  rfbCloseSocket(sock);
# 1125|   	  continue;
# 1126|   	}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def132]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1141:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1095:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1101:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1101:23: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:21: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:21: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:12: branch_false: following ‘false’ branch (when ‘sock >= 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1108:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1108:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1116:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1116:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1123:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1123:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1131:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1131:8: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1138:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1140:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1141:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1141:9: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1141:9: danger: ‘sock’ leaks here
# 1139|   
# 1140|       if (listen(sock, 32) < 0) {
# 1141|->         rfbLogPerror("rfbListenOnTCP6Port: error in listen on IPv6 socket");
# 1142|   	rfbCloseSocket(sock);
# 1143|   	return RFB_INVALID_SOCKET;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def133]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1142:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1095:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1101:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1101:23: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:21: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:21: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1102:12: branch_false: following ‘false’ branch (when ‘sock >= 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1108:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1108:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1116:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1116:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1123:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1123:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1131:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1131:8: branch_false: following ‘false’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1138:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1140:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1141:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1142:9: branch_true: following ‘true’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1142:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1142:9: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1142:9: danger: ‘sock’ leaks here
# 1140|       if (listen(sock, 32) < 0) {
# 1141|           rfbLogPerror("rfbListenOnTCP6Port: error in listen on IPv6 socket");
# 1142|-> 	rfbCloseSocket(sock);
# 1143|   	return RFB_INVALID_SOCKET;
# 1144|       }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def134]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1177:13: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1167:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1173:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1173:23: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:21: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:21: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:12: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1177:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1177:13: throw: if ‘sock_set_nonblocking’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1177:13: danger: ‘sock’ leaks here
# 1175|               continue;
# 1176|   
# 1177|-> 	if (sock_set_nonblocking(sock, TRUE, rfbErr)) {
# 1178|   	    if (connect(sock, p->ai_addr, p->ai_addrlen) == 0) {
# 1179|   		break;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def135]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1184:71: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1167:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1173:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1173:23: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:21: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:21: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:12: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1177:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1178:17: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1178:16: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1184:22: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1184:71: throw: if ‘sock_wait_for_connected’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1184:71: danger: ‘sock’ leaks here
# 1182|   		errno=WSAGetLastError();
# 1183|   #endif
# 1184|-> 		if ((errno == EWOULDBLOCK || errno == EINPROGRESS) && sock_wait_for_connected(sock, rfbMaxClientWait/1000))
# 1185|   		    break;
# 1186|   		rfbCloseSocket(sock);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def136]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1186:17: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1167:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1173:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1173:23: branch_true: following ‘true’ branch (when ‘p’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:21: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:21: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1174:12: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1177:13: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1178:17: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1178:16: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1184:22: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1186:17: throw: if ‘close’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1186:17: danger: ‘sock’ leaks here
# 1184|   		if ((errno == EWOULDBLOCK || errno == EINPROGRESS) && sock_wait_for_connected(sock, rfbMaxClientWait/1000))
# 1185|   		    break;
# 1186|-> 		rfbCloseSocket(sock);
# 1187|   	    }
# 1188|   	} else {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def137]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1276:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘sock’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1264:17: acquire_resource: datagram socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1264:8: branch_false: following ‘false’ branch (when ‘sock != -1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1267:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1267:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1271:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1271:9: acquire_resource: socket created here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1271:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1272:16: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/sockets.c:1276:1: danger: ‘sock’ leaks here
# 1274|   
# 1275|       return sock;
# 1276|-> }
# 1277|   
# 1278|   /*

Error: GCC_ANALYZER_WARNING (CWE-476): [#def138]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:60:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*table’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:41:22: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:44:17: branch_true: following ‘true’ branch (when ‘i < nEntries’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:46:16: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:60:9: danger: ‘malloc((long unsigned int)((3 << (int)*in.bitsPerPixel) + 1)) + (sizetype)(i * 3)’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/0)
#   58|                   (((g * (1 + out->greenMax)) >> shift) << out->greenShift) |
#   59|                   (((b * (1 + out->blueMax)) >> shift) << out->blueShift));
#   60|-> 	*(uint32_t*)&t[3*i] = outValue;
#   61|   	if(!rfbEndianTest)
#   62|   	  memmove(t+3*i,t+3*i+1,3);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def139]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:100:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*table’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:85:22: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:88:17: branch_true: following ‘true’ branch (when ‘i < nEntries’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:89:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:100:9: danger: ‘malloc((long unsigned int)((3 << (int)*in.bitsPerPixel) + 1)) + (sizetype)(i * 3)’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/0)
#   98|                   (outGreen << out->greenShift) |
#   99|                   (outBlue  << out->blueShift));
#  100|-> 	*(uint32_t*)&t[3*i] = outValue;
#  101|   	if(!rfbEndianTest)
#  102|   	  memmove(t+3*i,t+3*i+1,3);

Error: CPPCHECK_WARNING (CWE-682): [#def140]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:127: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer.
#  125|                               * 3 + 1);
#  126|       redTable = (uint8_t *)*table;
#  127|->     greenTable = redTable + 3*(in->redMax + 1);
#  128|       blueTable = greenTable + 3*(in->greenMax + 1);
#  129|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def141]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:149:7: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘table’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:116:1: enter_function: entry to ‘rfbInitTrueColourRGBTables24’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:124:22: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:130:5: call_function: calling ‘rfbInitOneRGBTable24’ from ‘rfbInitTrueColourRGBTables24’
#  147|       for (i = 0; i < nEntries; i++) {
#  148|         outValue = ((i * outMax + inMax / 2) / inMax) << outShift;
#  149|->       *(uint32_t *)&table[3*i] = outValue;
#  150|         if(!rfbEndianTest) {
#  151|   	memmove(table+3*i,table+3*i+1,3);

Error: CPPCHECK_WARNING (CWE-476): [#def142]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:154: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: table
#  152|         }
#  153|         if (swap) {
#  154|->         c = table[3*i]; table[3*i] = table[3*i+2];
#  155|           table[3*i+2] = c;
#  156|         }

Error: CPPCHECK_WARNING (CWE-476): [#def143]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinit24.c:155: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: table
#  153|         if (swap) {
#  154|           c = table[3*i]; table[3*i] = table[3*i+2];
#  155|->         table[3*i+2] = c;
#  156|         }
#  157|       }

Error: CPPCHECK_WARNING (CWE-476): [#def144]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinitcmtemplate.c:71: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: t
#   69|   	  }
#   70|   	}
#   71|->         t[i] = ((((r * (1 + out->redMax)) >> shift) << out->redShift) |
#   72|                   (((g * (1 + out->greenMax)) >> shift) << out->greenShift) |
#   73|                   (((b * (1 + out->blueMax)) >> shift) << out->blueShift));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def145]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinitcmtemplate.c:71:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*table’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinitcmtemplate.c:55:22: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinitcmtemplate.c:58:17: branch_true: following ‘true’ branch (when ‘i < nEntries’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinitcmtemplate.c:60:16: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinitcmtemplate.c:71:9: danger: ‘malloc((long unsigned int)nEntries) + (sizetype)i’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   69|   	  }
#   70|   	}
#   71|->         t[i] = ((((r * (1 + out->redMax)) >> shift) << out->redShift) |
#   72|                   (((g * (1 + out->greenMax)) >> shift) << out->greenShift) |
#   73|                   (((b * (1 + out->blueMax)) >> shift) << out->blueShift));

Error: CPPCHECK_WARNING (CWE-476): [#def146]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:81: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: t
#   79|           outBlue  = (inBlue  * out->blueMax  + in->blueMax / 2)  / in->blueMax;
#   80|   
#   81|->         t[i] = ((outRed   << out->redShift)   |
#   82|                   (outGreen << out->greenShift) |
#   83|                   (outBlue  << out->blueShift));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def147]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:81:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘*table’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:69:22: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:72:17: branch_true: following ‘true’ branch (when ‘i < nEntries’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:73:25: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:81:9: danger: ‘malloc((long unsigned int)nEntries) + (sizetype)i’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   79|           outBlue  = (inBlue  * out->blueMax  + in->blueMax / 2)  / in->blueMax;
#   80|   
#   81|->         t[i] = ((outRed   << out->redShift)   |
#   82|                   (outGreen << out->greenShift) |
#   83|                   (outBlue  << out->blueShift));

Error: CPPCHECK_WARNING (CWE-682): [#def148]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:110: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer.
#  108|                               * sizeof(OUT_T));
#  109|       redTable = (OUT_T *)*table;
#  110|->     greenTable = redTable + in->redMax + 1;
#  111|       blueTable = greenTable + in->greenMax + 1;
#  112|   

Error: CPPCHECK_WARNING (CWE-476): [#def149]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:130: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: table
#  128|       for (i = 0; i < nEntries; i++) {
#  129|           if (outShift < 32) {
#  130|->             table[i] = ((OUT_T)((i * outMax + inMax / 2) / inMax)) << outShift;
#  131|           } else {
#  132|               table[i] = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def150]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:130:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘table’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:99:1: enter_function: entry to ‘rfbInitTrueColourRGBTables8’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:107:22: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:113:5: call_function: calling ‘rfbInitOneRGBTable8’ from ‘rfbInitTrueColourRGBTables8’
#  128|       for (i = 0; i < nEntries; i++) {
#  129|           if (outShift < 32) {
#  130|->             table[i] = ((OUT_T)((i * outMax + inMax / 2) / inMax)) << outShift;
#  131|           } else {
#  132|               table[i] = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def151]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:132: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: table
#  130|               table[i] = ((OUT_T)((i * outMax + inMax / 2) / inMax)) << outShift;
#  131|           } else {
#  132|->             table[i] = 0;
#  133|           }
#  134|   #if (OUT != 8)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def152]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:132:13: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘table’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:99:1: enter_function: entry to ‘rfbInitTrueColourRGBTables8’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:107:22: acquire_memory: this call could return NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:113:5: call_function: calling ‘rfbInitOneRGBTable8’ from ‘rfbInitTrueColourRGBTables8’
#  130|               table[i] = ((OUT_T)((i * outMax + inMax / 2) / inMax)) << outShift;
#  131|           } else {
#  132|->             table[i] = 0;
#  133|           }
#  134|   #if (OUT != 8)

Error: CPPCHECK_WARNING (CWE-476): [#def153]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tableinittctemplate.c:136: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: table
#  134|   #if (OUT != 8)
#  135|           if (swap) {
#  136|->             table[i] = SwapOUT(table[i]);
#  137|           }
#  138|   #endif

Error: GCC_ANALYZER_WARNING (CWE-476): [#def154]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1585:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘dst2’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1534:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1537:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1537:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1541:10: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1548:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1564:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1569:46: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1569:39: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1569:11: release_memory: assuming ‘tmpbuf’ is NULL
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1569:11: branch_true: following ‘true’ branch (when ‘tmpbuf’ is NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1570:13: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1574:20: branch_true: following ‘true’ branch (when ‘j < h’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1574:20: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1577:25: branch_true: following ‘true’ branch (when ‘i < w’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1578:24: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1585:17: danger: dereference of NULL ‘dst2’
# 1583|                   inBlue  = (int) (pix >> cl->screen->serverFormat.blueShift
# 1584|                                    & cl->screen->serverFormat.blueMax);
# 1585|->                 *dst2++ = (uint8_t)((inRed * 255
# 1586|                                        + cl->screen->serverFormat.redMax / 2)
# 1587|                                       / cl->screen->serverFormat.redMax);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def155]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1614:9: warning[-Wanalyzer-malloc-leak]: leak of ‘srcbuf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1534:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1537:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1537:8: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1541:10: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1556:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1561:31: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1564:8: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1569:46: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1569:39: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1569:11: branch_false: following ‘false’ branch (when ‘tmpbuf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1571:31: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1574:20: branch_false: following ‘false’ branch (when ‘j >= h’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1599:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1614:9: throw: if ‘tjCompress’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tight.c:1614:9: danger: ‘srcbuf’ leaks here; was allocated at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8)
# 1612|       }
# 1613|   
# 1614|->     if (tjCompress(cl->tightTJ, srcbuf, w, pitch, h, ps, (unsigned char *)cl->afterEncBuf,
# 1615|                      &size, subsamp, quality, flags) == -1) {
# 1616|           rfbLog("JPEG Error: %s\n", tjGetErrorStr());

Error: GCC_ANALYZER_WARNING (CWE-401): [#def156]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:275:26: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir(path)’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:260:11: branch_false: following ‘false’ branch (when ‘path’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:264:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:269:20: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:269:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:269:11: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:275:26: throw: if ‘readdir’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:275:26: danger: ‘opendir(path)’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  273|   	}
#  274|   
#  275|-> 	while((pDirent = readdir(pDir))) {
#  276|   		if(strcmp(pDirent->d_name, ".") && strcmp(pDirent->d_name, "..")) {
#  277|   			struct stat stat_buf;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def157]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:383:37: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:372:24: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:373:11: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:378:28: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:37: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:383:5: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:383:37: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:383:37: throw: if ‘GetSumOfFileNamesLength’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:383:37: danger: ‘data’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  381|       pFLD->flags 		  = flags & 0xF0;
#  382|       pFLD->numFiles 		  = Swap16IfLE(fileListInfo.numEntries);
#  383|->     pFLD->dataSize 		  = Swap16IfLE(GetSumOfFileNamesLength(fileListInfo) + 
#  384|       									fileListInfo.numEntries);
#  385|       pFLD->compressedSize  = pFLD->dataSize;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def158]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:372:24: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:373:11: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:378:28: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:387:19: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: throw: if ‘GetFileSizeAt’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: danger: ‘data’ leaks here; was allocated at [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  386|   
#  387|   	for(i =0; i <fileListInfo.numEntries; i++) {
#  388|-> 		pFileListItemSize[i].size = Swap32IfLE(GetFileSizeAt(fileListInfo, i));
#  389|   		pFileListItemSize[i].data = Swap32IfLE(GetFileDataAt(fileListInfo, i));
#  390|   		strcpy(pFileNames, GetFileNameAt(fileListInfo, i));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def159]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:389:45: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:372:24: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:373:11: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:378:28: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:387:19: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:389:45: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:389:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:389:45: throw: if ‘GetFileDataAt’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:389:45: danger: ‘data’ leaks here; was allocated at [(1)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/0)
#  387|   	for(i =0; i <fileListInfo.numEntries; i++) {
#  388|   		pFileListItemSize[i].size = Swap32IfLE(GetFileSizeAt(fileListInfo, i));
#  389|-> 		pFileListItemSize[i].data = Swap32IfLE(GetFileDataAt(fileListInfo, i));
#  390|   		strcpy(pFileNames, GetFileNameAt(fileListInfo, i));
#  391|   		

Error: GCC_ANALYZER_WARNING (CWE-401): [#def160]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:390:36: warning[-Wanalyzer-malloc-leak]: leak of ‘data’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:372:24: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:373:11: branch_false: following ‘false’ branch (when ‘data’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:378:28: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:5: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:382:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:387:19: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:388:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:389:45: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:389:45: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:390:36: throw: if ‘GetFileNameAt’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:390:36: danger: ‘data’ leaks here; was allocated at [(1)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/0)
#  388|   		pFileListItemSize[i].size = Swap32IfLE(GetFileSizeAt(fileListInfo, i));
#  389|   		pFileListItemSize[i].data = Swap32IfLE(GetFileDataAt(fileListInfo, i));
#  390|-> 		strcpy(pFileNames, GetFileNameAt(fileListInfo, i));
#  391|   		
#  392|   		if(i+1 < fileListInfo.numEntries)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def161]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:750:25: warning[-Wanalyzer-malloc-leak]: leak of ‘ftm.data’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:661:1: enter_function: entry to ‘ChkFileUploadWriteErr’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:670:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:671:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:673:23: call_function: calling ‘CreateFileUploadErrMsg’ from ‘ChkFileUploadWriteErr’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:673:23: return_function: returning to ‘ChkFileUploadWriteErr’ from ‘CreateFileUploadErrMsg’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:674:17: call_function: calling ‘CloseUndoneFileUpload’ from ‘ChkFileUploadWriteErr’
#  748|   
#  749|   		if(rtcp->rcft.rcfu.uploadFD != -1) {
#  750|-> 			close(rtcp->rcft.rcfu.uploadFD);
#  751|   			rtcp->rcft.rcfu.uploadFD = -1;
#  752|   		}

Error: GCC_ANALYZER_WARNING (CWE-401): [#def162]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:755:25: warning[-Wanalyzer-malloc-leak]: leak of ‘ftm.data’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:661:1: enter_function: entry to ‘ChkFileUploadWriteErr’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:670:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:671:22: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:673:23: call_function: calling ‘CreateFileUploadErrMsg’ from ‘ChkFileUploadWriteErr’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:673:23: return_function: returning to ‘ChkFileUploadWriteErr’ from ‘CreateFileUploadErrMsg’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/filetransfermsg.c:674:17: call_function: calling ‘CloseUndoneFileUpload’ from ‘ChkFileUploadWriteErr’
#  753|   
#  754|   		if(unlink(rtcp->rcft.rcfu.fName) == -1) {
#  755|-> 			rfbLog("File [%s]: Method [%s]: Delete operation on file <%s> failed\n", 
#  756|   					__FILE__, __FUNCTION__, rtcp->rcft.rcfu.fName);
#  757|   		}

Error: GCC_ANALYZER_WARNING (CWE-401): [#def163]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:147:17: warning[-Wanalyzer-malloc-leak]: leak of ‘opendir(path)’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:123:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:129:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:135:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:135:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:141:19: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:141:19: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:141:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:147:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:147:17: danger: ‘opendir(path)’ leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  145|   	}
#  146|   	else {
#  147|-> 		closedir(dir);
#  148|   		dir = NULL;
#  149|   	}

Error: GCC_ANALYZER_WARNING (CWE-401): [#def164]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:202:12: warning[-Wanalyzer-malloc-leak]: leak of ‘GetHomeDir(uid)’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:80:1: enter_function: entry to ‘InitFileTransfer’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:89:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:92:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:96:20: call_function: calling ‘GetHomeDir’ from ‘InitFileTransfer’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:96:20: return_function: returning to ‘InitFileTransfer’ from ‘GetHomeDir’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:98:11: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:98:34: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:202:12: danger: ‘GetHomeDir(uid)’ leaks here; was allocated at [(10)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/9)
#  200|   		return NULL;
#  201|   
#  202|-> 	if(pwEnt->pw_dir != NULL) {
#  203|   		homedir = strdup (pwEnt->pw_dir);
#  204|   	}

Error: GCC_ANALYZER_WARNING (CWE-401): [#def165]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:460:17: warning[-Wanalyzer-malloc-leak]: leak of ‘path’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:455:28: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:455:11: branch_false: following ‘false’ branch (when ‘path’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:460:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:460:17: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:460:17: danger: ‘path’ leaks here; was allocated at [(1)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/0)
#  458|   		return;
#  459|   	}
#  460|-> 	if((n = rfbReadExact(cl, path, fNameSize)) <= 0) {
#  461|   		
#  462|   		if (n < 0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def166]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:617:17: warning[-Wanalyzer-malloc-leak]: leak of ‘reason’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:592:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:602:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:604:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:610:33: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:610:26: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:611:11: branch_false: following ‘false’ branch (when ‘reason’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:617:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:617:17: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:617:17: danger: ‘reason’ leaks here; was allocated at [(5)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/4)
#  615|   	}
#  616|   
#  617|-> 	if((n = rfbReadExact(cl, reason, msg.fdc.reasonLen)) <= 0) {
#  618|   		
#  619|   		if (n < 0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def167]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:730:17: warning[-Wanalyzer-malloc-leak]: leak of ‘path’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:725:28: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:725:11: branch_false: following ‘false’ branch (when ‘path’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:730:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:730:17: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:730:17: danger: ‘path’ leaks here; was allocated at [(1)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/0)
#  728|   		return;
#  729|   	}
#  730|-> 	if((n = rfbReadExact(cl, path, fNameSize)) <= 0) {
#  731|   		
#  732|   		if (n < 0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def168]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:852:17: warning[-Wanalyzer-malloc-leak]: leak of ‘pBuf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:814:11: branch_false: following ‘false’ branch (when ‘cl’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:820:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:820:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:830:28: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:847:24: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:848:11: branch_false: following ‘false’ branch (when ‘pBuf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:852:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:852:17: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:852:17: danger: ‘pBuf’ leaks here; was allocated at [(5)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/4)
#  850|   		return;
#  851|   	}
#  852|-> 	if((n = rfbReadExact(cl, pBuf, msg.fud.compressedSize)) <= 0) {
#  853|   		
#  854|   		if (n < 0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def169]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:963:17: warning[-Wanalyzer-malloc-leak]: leak of ‘reason’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:933:11: branch_false: following ‘false’ branch (when ‘cl’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:939:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:939:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:949:29: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:950:11: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:957:33: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:957:26: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:958:11: branch_false: following ‘false’ branch (when ‘reason’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:963:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:963:17: throw: if ‘rfbReadExact’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/handlefiletransferrequest.c:963:17: danger: ‘reason’ leaks here; was allocated at [(7)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/6)
#  961|   	}
#  962|   	
#  963|-> 	if((n = rfbReadExact(cl, reason, msg.fuf.reasonLen)) <= 0) {
#  964|   		
#  965|   		if (n < 0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def170]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:502:5: warning[-Wanalyzer-malloc-leak]: leak of ‘rtcp’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:500:50: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:502:5: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:502:5: danger: ‘rtcp’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  500|       rfbTightClientPtr rtcp = (rfbTightClientPtr) malloc(sizeof(rfbTightClientRec));
#  501|   
#  502|->     rfbLog("tightvnc-filetransfer/rfbHandleSecTypeTight\n");
#  503|   
#  504|       if(rtcp == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def171]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:515:5: warning[-Wanalyzer-malloc-leak]: leak of ‘rtcp’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:500:50: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:504:7: branch_false: following ‘false’ branch (when ‘rtcp’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:512:5: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:515:5: throw: if ‘rfbEnableExtension’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/tightvnc-filetransfer/rfbtightserver.c:515:5: danger: ‘rtcp’ leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  513|       rtcp->rcft.rcfd.downloadFD = -1;
#  514|       rtcp->rcft.rcfu.uploadFD = -1;
#  515|->     rfbEnableExtension(cl, &tightVncFileTransferExtension, rtcp);
#  516|   
#  517|       rfbSendTunnelingCaps(cl);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def172]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:173:20: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:174:8: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: following ‘false’ branch (when ‘response’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:185:12: branch_true: following ‘true’ branch (when ‘len <= 4094’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: throw: if ‘rfbReadExactTimeout’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: danger: ‘buf’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  184|   
#  185|       while (len < WEBSOCKETS_MAX_HANDSHAKE_LEN-1) {
#  186|->         if ((n = rfbReadExactTimeout(cl, buf+len, 1,
#  187|                                        WEBSOCKETS_CLIENT_SEND_WAIT_MS)) <= 0) {
#  188|               if ((n < 0) && (errno == ETIMEDOUT)) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def173]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: warning[-Wanalyzer-malloc-leak]: leak of ‘response’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:174:8: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: following ‘false’ branch (when ‘response’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:185:12: branch_true: following ‘true’ branch (when ‘len <= 4094’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: throw: if ‘rfbReadExactTimeout’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: danger: ‘response’ leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  184|   
#  185|       while (len < WEBSOCKETS_MAX_HANDSHAKE_LEN-1) {
#  186|->         if ((n = rfbReadExactTimeout(cl, buf+len, 1,
#  187|                                        WEBSOCKETS_CLIENT_SEND_WAIT_MS)) <= 0) {
#  188|               if ((n < 0) && (errno == ETIMEDOUT)) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def174]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:192:17: warning[-Wanalyzer-malloc-leak]: leak of ‘response’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:174:8: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: following ‘false’ branch (when ‘response’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:185:12: branch_true: following ‘true’ branch (when ‘len <= 4094’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:191:16: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:192:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:192:17: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:192:17: danger: ‘response’ leaks here; was allocated at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#  190|               }
#  191|               if (n == 0) {
#  192|->                 rfbLog("webSocketsHandshake: client gone\n");
#  193|               }
#  194|               else {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def175]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:195:17: warning[-Wanalyzer-malloc-leak]: leak of ‘response’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:174:8: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: following ‘false’ branch (when ‘response’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:185:12: branch_true: following ‘true’ branch (when ‘len <= 4094’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:188:17: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:191:16: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:191:16: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:195:17: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:195:17: throw: if ‘rfbLogPerror’ throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:195:17: danger: ‘response’ leaks here; was allocated at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#  193|               }
#  194|               else {
#  195|->                 rfbLogPerror("webSocketsHandshake: read");
#  196|               }
#  197|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def176]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:253:17: warning[-Wanalyzer-malloc-leak]: leak of ‘response’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:162:1: enter_function: entry to ‘webSocketsHandshake’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:174:8: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: following ‘false’ branch (when ‘response’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:185:12: branch_true: following ‘true’ branch (when ‘len <= 4094’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:203:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:205:12: branch_false: following ‘false’ branch (when ‘llen <= 1’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:205:12: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:185:12: branch_true: following ‘true’ branch (when ‘len <= 4094’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:12: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:203:9: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:205:12: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:207:17: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:226:23: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:226:23: branch_false: following ‘false’ branch (when ‘llen <= 15’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:232:53: call_function: inlined call to ‘min’ from ‘webSocketsHandshake’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:232:23: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:236:55: call_function: inlined call to ‘min’ from ‘webSocketsHandshake’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:236:23: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:240:67: call_function: inlined call to ‘min’ from ‘webSocketsHandshake’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:240:23: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:244:24: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:244:23: branch_false: following ‘false’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:250:71: call_function: inlined call to ‘min’ from ‘webSocketsHandshake’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:250:23: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:251:17: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:253:17: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:253:17: danger: ‘response’ leaks here; was allocated at [(4)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/3)
#  251|                   protocol = line+24;
#  252|                   buf[len-2] = '\0';
#  253|->                 rfbLog("Got protocol: %s\n", protocol);
#  254|               } else if ((strncasecmp("sec-websocket-origin: ", line, min(llen,22))) == 0) {
#  255|                   sec_ws_origin = line+22;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def177]
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:272:9: warning[-Wanalyzer-malloc-leak]: leak of ‘response’
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:174:8: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:178:25: acquire_memory: allocated here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: following ‘false’ branch (when ‘response’ is non-NULL)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:179:8: branch_false: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:185:12: branch_true: following ‘true’ branch (when ‘len <= 4094’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:186:18: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:188:16: branch_true: following ‘true’ branch...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:271:8: branch_true: following ‘true’ branch (when ‘sec_ws_version == 0’)...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:272:9: branch_true: ...to here
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:272:9: throw: if the called function throws an exception...
libvncserver-LibVNCServer-0.9.15/src/libvncserver/websockets.c:272:9: danger: ‘response’ leaks here; was allocated at [(3)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/2)
#  270|        * a final standard is established -- removed now */
#  271|       if (!sec_ws_version) {
#  272|->         rfbErr("Hixie no longer supported\n");
#  273|           free(response);
#  274|           free(buf);

Scan Properties