satyr-0.43-9.fc44

List of Findings

Error: COMPILER_WARNING (CWE-704): [#def1]
satyr-0.43/lib/abrt.c: scope_hint: In function 'sr_abrt_parse_dso_list'
satyr-0.43/lib/abrt.c:221:21: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  221 |         char *end = strchr(pos, ' ');
#      |                     ^~~~~~
#  219|   
#  220|           // Find the package NEVRA.
#  221|->         char *end = strchr(pos, ' ');
#  222|           if (!end || end - pos <= 1)
#  223|           {

Error: COMPILER_WARNING (CWE-704): [#def2]
satyr-0.43/lib/abrt.c:221:21: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  219|   
#  220|           // Find the package NEVRA.
#  221|->         char *end = strchr(pos, ' ');
#  222|           if (!end || end - pos <= 1)
#  223|           {

Error: COMPILER_WARNING (CWE-704): [#def3]
satyr-0.43/lib/abrt.c:249:21: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  249 |         char *eol = strchr(pos, '\n');
#      |                     ^~~~~~
#  247|   
#  248|           // Find the package install time.
#  249|->         char *eol = strchr(pos, '\n');
#  250|           if (!eol)
#  251|           {

Error: COMPILER_WARNING (CWE-704): [#def4]
satyr-0.43/lib/abrt.c:249:21: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  247|   
#  248|           // Find the package install time.
#  249|->         char *eol = strchr(pos, '\n');
#  250|           if (!eol)
#  251|           {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def5]
satyr-0.43/lib/core_unwind.c:103:18: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
satyr-0.43/lib/core_unwind.c:99:8: branch_false: following 'false' branch (when 'error_msg' is non-NULL)...
satyr-0.43/lib/core_unwind.c:102:5: branch_false: ...to here
satyr-0.43/lib/core_unwind.c:102:5: acquire_resource: 'va_start' called here
satyr-0.43/lib/core_unwind.c:103:18: throw: if 'g_strdup_vprintf' throws an exception...
satyr-0.43/lib/core_unwind.c:103:18: danger: missing call to 'va_end' to match 'va_start' at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  101|   
#  102|       va_start(ap, fmt);
#  103|->     *error_msg = g_strdup_vprintf(fmt, ap);
#  104|       va_end(ap);
#  105|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def6]
satyr-0.43/lib/core_unwind.c:144:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(executable_file, 0)'
satyr-0.43/lib/core_unwind.c:140:18: acquire_resource: opened here
satyr-0.43/lib/core_unwind.c:141:12: branch_false: following 'false' branch...
satyr-0.43/lib/core_unwind.c:144:22: branch_false: ...to here
satyr-0.43/lib/core_unwind.c:145:17: throw: if 'elf_begin' throws an exception...
satyr-0.43/lib/core_unwind.c:144:22: danger: 'open(executable_file, 0)' leaks here; was opened at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  142|               return -1;
#  143|   
#  144|->         *file_name = realpath(executable_file, NULL);
#  145|           *elfp = elf_begin(fd, ELF_C_READ_MMAP, NULL);
#  146|           if (*elfp == NULL)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def7]
satyr-0.43/lib/core_unwind.c:224:14: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(elf_file, 0)'
satyr-0.43/lib/core_unwind.c:210:8: branch_false: following 'false' branch...
satyr-0.43/lib/core_unwind.c:217:14: branch_false: ...to here
satyr-0.43/lib/core_unwind.c:217:14: acquire_resource: opened here
satyr-0.43/lib/core_unwind.c:218:8: branch_false: following 'false' branch...
satyr-0.43/lib/core_unwind.c:224:14: branch_false: ...to here
satyr-0.43/lib/core_unwind.c:224:14: danger: 'open(elf_file, 0)' leaks here; was opened at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#  222|       }
#  223|   
#  224|->     ch->eh = elf_begin(ch->fd, ELF_C_READ_MMAP, NULL);
#  225|       if (ch->eh == NULL)
#  226|       {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def8]
satyr-0.43/lib/elves.c:135:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(filename, 0)'
satyr-0.43/lib/elves.c:124:14: acquire_resource: opened here
satyr-0.43/lib/elves.c:125:8: branch_false: following 'false' branch...
satyr-0.43/lib/elves.c:135:16: branch_false: ...to here
satyr-0.43/lib/elves.c:135:16: throw: if 'elf_begin' throws an exception...
satyr-0.43/lib/elves.c:135:16: danger: 'open(filename, 0)' leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  133|   
#  134|       /* Initialize libelf on the opened file. */
#  135|->     Elf *elf = elf_begin(fd, ELF_C_READ, NULL);
#  136|       if (!elf)
#  137|       {

Error: GCC_ANALYZER_WARNING (CWE-775): [#def9]
satyr-0.43/lib/elves.c:515:16: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open(filename, 0)'
satyr-0.43/lib/elves.c:505:14: acquire_resource: opened here
satyr-0.43/lib/elves.c:506:8: branch_false: following 'false' branch...
satyr-0.43/lib/elves.c:515:16: branch_false: ...to here
satyr-0.43/lib/elves.c:515:16: throw: if 'elf_begin' throws an exception...
satyr-0.43/lib/elves.c:515:16: danger: 'open(filename, 0)' leaks here; was opened at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  513|   
#  514|       /* Initialize libelf on the opened file. */
#  515|->     Elf *elf = elf_begin(fd, ELF_C_READ, NULL);
#  516|       if (!elf)
#  517|       {

Error: COMPILER_WARNING (CWE-704): [#def10]
satyr-0.43/lib/gdb_sharedlib.c: scope_hint: In function 'find_sharedlib_section_start'
satyr-0.43/lib/gdb_sharedlib.c:129:20: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  129 |     char *result = strstr(input, "From");
#      |                    ^~~~~~
#  127|          From      To      Syms Read      Shared Object Library
#  128|       */
#  129|->     char *result = strstr(input, "From");
#  130|       for (; result; result = strstr(result + 1, "From"))
#  131|       {

Error: COMPILER_WARNING (CWE-704): [#def11]
satyr-0.43/lib/gdb_sharedlib.c:129:20: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  127|          From      To      Syms Read      Shared Object Library
#  128|       */
#  129|->     char *result = strstr(input, "From");
#  130|       for (; result; result = strstr(result + 1, "From"))
#  131|       {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def12]
satyr-0.43/lib/js_stacktrace.c:192:13: warning[-Wanalyzer-null-dereference]: dereference of NULL 'last_frame'
satyr-0.43/lib/js_stacktrace.c:145:8: branch_false: following 'false' branch...
satyr-0.43/lib/js_stacktrace.c:151:8: branch_false: ...to here
satyr-0.43/lib/js_stacktrace.c:151:8: branch_true: following 'true' branch...
satyr-0.43/lib/js_stacktrace.c:157:5: branch_true: ...to here
satyr-0.43/lib/js_stacktrace.c:163:8: branch_false: following 'false' branch...
satyr-0.43/lib/js_stacktrace.c:175:10: branch_false: ...to here
satyr-0.43/lib/js_stacktrace.c:175:8: branch_true: following 'true' branch...
satyr-0.43/lib/js_stacktrace.c:175:8: branch_true: ...to here
satyr-0.43/lib/js_stacktrace.c:182:12: branch_true: following 'true' branch...
satyr-0.43/lib/js_stacktrace.c:184:45: branch_true: ...to here
satyr-0.43/lib/js_stacktrace.c:186:12: branch_false: following 'false' branch...
satyr-0.43/lib/js_stacktrace.c:189:13: branch_false: ...to here
satyr-0.43/lib/js_stacktrace.c:189:12: branch_false: following 'false' branch...
satyr-0.43/lib/js_stacktrace.c:192:13: branch_false: ...to here
satyr-0.43/lib/js_stacktrace.c:192:13: danger: dereference of NULL 'last_frame'
#  190|               stacktrace->frames = current_frame;
#  191|           else
#  192|->             last_frame->next = current_frame;
#  193|   
#  194|           /* Eat newline (except at the end of file). */

Error: COMPILER_WARNING (CWE-704): [#def13]
satyr-0.43/lib/rpm.c: scope_hint: In function 'sr_rpm_package_parse_nvr'
satyr-0.43/lib/rpm.c:668:23: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  668 |     char *last_dash = strrchr(text, '-');
#      |                       ^~~~~~~
#  666|                            char **release)
#  667|   {
#  668|->     char *last_dash = strrchr(text, '-');
#  669|       if (!last_dash)
#  670|           return false;

Error: COMPILER_WARNING (CWE-704): [#def14]
satyr-0.43/lib/rpm.c:668:23: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  666|                            char **release)
#  667|   {
#  668|->     char *last_dash = strrchr(text, '-');
#  669|       if (!last_dash)
#  670|           return false;

Error: COMPILER_WARNING (CWE-704): [#def15]
satyr-0.43/lib/rpm.c: scope_hint: In function 'sr_rpm_package_parse_nevra'
satyr-0.43/lib/rpm.c:710:22: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  710 |     char *last_dot = strrchr(text, '.');
#      |                      ^~~~~~~
#  708|                              char **architecture)
#  709|   {
#  710|->     char *last_dot = strrchr(text, '.');
#  711|       if (!last_dot || 0 == strlen(last_dot))
#  712|           return false;

Error: COMPILER_WARNING (CWE-704): [#def16]
satyr-0.43/lib/rpm.c:710:22: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  708|                              char **architecture)
#  709|   {
#  710|->     char *last_dot = strrchr(text, '.');
#  711|       if (!last_dot || 0 == strlen(last_dot))
#  712|           return false;

Error: COMPILER_WARNING (CWE-704): [#def17]
satyr-0.43/lib/rpm.c:714:23: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  714 |     char *last_dash = strrchr(text, '-');
#      |                       ^~~~~~~
#  712|           return false;
#  713|   
#  714|->     char *last_dash = strrchr(text, '-');
#  715|       if (!last_dash || last_dot - last_dash <= 1)
#  716|           return false;

Error: COMPILER_WARNING (CWE-704): [#def18]
satyr-0.43/lib/rpm.c:714:23: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  712|           return false;
#  713|   
#  714|->     char *last_dash = strrchr(text, '-');
#  715|       if (!last_dash || last_dot - last_dash <= 1)
#  716|           return false;

Error: GCC_ANALYZER_WARNING: [#def19]
satyr-0.43/tests/dump_core.c:64:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘fd’
satyr-0.43/tests/dump_core.c:98:1: enter_function: entry to ‘main’
satyr-0.43/tests/dump_core.c:106:10: call_function: calling ‘dump_core’ from ‘main’
#   62|           fd = open("/dev/null", O_WRONLY);
#   63|   
#   64|->         dup2(fd, STDOUT_FILENO);
#   65|           dup2(fd, STDERR_FILENO);
#   66|   

Error: GCC_ANALYZER_WARNING: [#def20]
satyr-0.43/tests/dump_core.c:65:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘fd’
satyr-0.43/tests/dump_core.c:98:1: enter_function: entry to ‘main’
satyr-0.43/tests/dump_core.c:106:10: call_function: calling ‘dump_core’ from ‘main’
#   63|   
#   64|           dup2(fd, STDOUT_FILENO);
#   65|->         dup2(fd, STDERR_FILENO);
#   66|   
#   67|           close(fd);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def21]
satyr-0.43/tests/dump_core.c:95:1: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘fd’
satyr-0.43/tests/dump_core.c:98:1: enter_function: entry to ‘main’
satyr-0.43/tests/dump_core.c:106:10: call_function: calling ‘dump_core’ from ‘main’
#   93|   
#   94|       return true;
#   95|-> }
#   96|   
#   97|   int

Scan Properties