Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:73:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*ptr.stream’
nss-3_119_1/nss/lib/freebl/leancrypto/ml_dsa_44_signature_c.c:56:1: enter_function: entry to ‘lc_dilithium_44_sign_c’
nss-3_119_1/nss/lib/freebl/leancrypto/ml_dsa_44_signature_c.c:61:12: call_function: calling ‘lc_dilithium_sign_impl’ from ‘lc_dilithium_44_sign_c’
#   71|   lc_hash_init(struct lc_hash_ctx *ptr)
#   72|   {
#   73|->     if (ptr->stream) {
#   74|           /* if we already have a context, just reset it, This is
#   75|            * what the caller wanted, saving a destroy and create */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:177:9: warning[-Wanalyzer-malloc-leak]: leak of ‘newBuf’
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:154:8: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:165:15: branch_false: ...to here
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:166:8: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:171:8: branch_false: ...to here
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:171:8: branch_true: following ‘true’ branch...
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:172:33: branch_true: ...to here
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:172:33: acquire_memory: allocated here
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:173:12: branch_false: following ‘false’ branch (when ‘newBuf’ is non-NULL)...
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:177:9: branch_false: ...to here
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:177:9: throw: if ‘SHAKE_128_HashBuf’ throws an exception...
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:177:9: danger: ‘newBuf’ leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  175|               return;
#  176|           }
#  177|->         lc_xof(ptr->hash, ptr->buf, ptr->current_input, newBuf, len);
#  178|           memcpy(output, newBuf + ptr->current_output, outLen);
#  179|           memset(newBuf, 0, len);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def3]
nss-3_119_1/nss/lib/freebl/leancrypto/lc_sha3.h:194:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*ptr.stream’
nss-3_119_1/nss/lib/freebl/leancrypto/dilithium_signature_impl.h:957:1: enter_function: entry to ‘lc_dilithium_verify_impl’
nss-3_119_1/nss/lib/freebl/leancrypto/dilithium_signature_impl.h:962:15: call_function: calling ‘lc_dilithium_verify_ctx_impl’ from ‘lc_dilithium_verify_impl’
nss-3_119_1/nss/lib/freebl/leancrypto/dilithium_signature_impl.h:962:15: return_function: returning to ‘lc_dilithium_verify_impl’ from ‘lc_dilithium_verify_ctx_impl’
nss-3_119_1/nss/lib/freebl/leancrypto/dilithium_signature_impl.h:964:5: call_function: inlined call to ‘lc_dilithium_44_ctx_zero’ from ‘lc_dilithium_verify_impl’
#  192|   lc_hash_zero(struct lc_hash_ctx *ptr)
#  193|   {
#  194|->     if (ptr->stream) {
#  195|           if (ptr->u.ctx_ptr != NULL) {
#  196|               switch (ptr->hash) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2823:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pubKeyData’
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2053:1: enter_function: entry to ‘SECKEY_SetPublicValue’
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2062:8: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2063:9: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2062:9: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2063:38: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2062:9: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2068:5: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2077:8: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2081:5: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2143:8: branch_true: following ‘true’ branch (when ‘rv == 0’)...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2144:14: branch_true: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2144:14: call_function: calling ‘PK11_ImportPublicKey’ from ‘SECKEY_SetPublicValue’
# 2821|       SECStatus rv;
# 2822|   
# 2823|->     if (pubKeyData->len <= SHA1_LENGTH) {
# 2824|           /* probably an already hashed value. The strongest known public
# 2825|            * key values <= 160 bits would be less than 40 bit symetric in

Error: GCC_ANALYZER_WARNING (CWE-457): [#def5]
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2823:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*pubKeyData.len’
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2053:1: enter_function: entry to ‘SECKEY_SetPublicValue’
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2062:8: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2063:9: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2062:9: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2063:38: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2062:9: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2068:5: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2077:8: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2081:5: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2131:16: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2135:39: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2136:16: branch_false: following ‘false’ branch...
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2144:14: branch_false: ...to here
nss-3_119_1/nss/lib/pk11wrap/pk11akey.c:2144:14: call_function: calling ‘PK11_ImportPublicKey’ from ‘SECKEY_SetPublicValue’
# 2821|       SECStatus rv;
# 2822|   
# 2823|->     if (pubKeyData->len <= SHA1_LENGTH) {
# 2824|           /* probably an already hashed value. The strongest known public
# 2825|            * key values <= 160 bits would be less than 40 bit symetric in

Scan Properties