luksmeta-10-1.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
luksmeta-10/luksmeta.c:246:9: warning[-Wanalyzer-malloc-leak]: leak of ‘in’
luksmeta-10/luksmeta.c:221:12: branch_true: following ‘true’ branch...
luksmeta-10/luksmeta.c:224:15: branch_true: ...to here
luksmeta-10/luksmeta.c:225:12: branch_false: following ‘false’ branch (when ‘tmp’ is non-NULL)...
luksmeta-10/luksmeta.c:232:13: branch_false: ...to here
luksmeta-10/luksmeta.c:221:12: branch_false: following ‘false’ branch...
luksmeta-10/luksmeta.c:241:8: branch_false: ...to here
luksmeta-10/luksmeta.c:241:8: branch_false: following ‘false’ branch (when ‘in’ is non-NULL)...
luksmeta-10/luksmeta.c:246:39: branch_false: ...to here
luksmeta-10/luksmeta.c:246:9: throw: if ‘luksmeta_save’ throws an exception...
luksmeta-10/luksmeta.c:246:9: danger: ‘in’ leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  244|       }
#  245|   
#  246|->     r = luksmeta_save(cd, opts->slot, opts->uuid, in, inl);
#  247|       memset(in, 0, inl);
#  248|       free(in);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
luksmeta-10/luksmeta.c:317:13: warning[-Wanalyzer-malloc-leak]: leak of ‘out’
luksmeta-10/luksmeta.c:292:8: branch_false: following ‘false’ branch...
luksmeta-10/luksmeta.c:297:9: branch_false: ...to here
luksmeta-10/luksmeta.c:298:8: branch_true: following ‘true’ branch...
luksmeta-10/luksmeta.c:301:13: branch_true: ...to here
luksmeta-10/luksmeta.c:311:15: acquire_memory: allocated here
luksmeta-10/luksmeta.c:312:12: branch_false: following ‘false’ branch (when ‘out’ is non-NULL)...
luksmeta-10/luksmeta.c:317:31: branch_false: ...to here
luksmeta-10/luksmeta.c:317:13: throw: if ‘luksmeta_load’ throws an exception...
luksmeta-10/luksmeta.c:317:13: danger: ‘out’ leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#  315|           }
#  316|   
#  317|->         r = luksmeta_load(cd, opts->slot, uuid, out, r);
#  318|           if (r >= 0) {
#  319|               fwrite(out, 1, r, stdout);

Scan Properties