Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
xkbcomp-1.5.0/alias.c:118:9: warning[-Wanalyzer-malloc-leak]: leak of ‘info’
xkbcomp-1.5.0/alias.c:106:12: acquire_memory: allocated here
xkbcomp-1.5.0/alias.c:107:8: branch_false: following ‘false’ branch (when ‘info’ is non-NULL)...
xkbcomp-1.5.0/alias.c:112:5: branch_false: ...to here
xkbcomp-1.5.0/alias.c:118:9: branch_false: following ‘false’ branch (when ‘info’ is NULL)...
xkbcomp-1.5.0/alias.c:118:9: branch_false: ...to here
xkbcomp-1.5.0/alias.c:118:9: throw: if ‘AddCommonInfo’ throws an exception...
xkbcomp-1.5.0/alias.c:118:9: danger: ‘info’ leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  116|       memcpy(info->real, def->real, XkbKeyNameLength);
#  117|       *info_in = (AliasInfo *)
#  118|->         AddCommonInfo(((*info_in) ? &(*info_in)->def : NULL), &info->def);
#  119|       return True;
#  120|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
xkbcomp-1.5.0/compat.c:173:13: warning[-Wanalyzer-malloc-leak]: leak of ‘si’
xkbcomp-1.5.0/compat.c:353:1: enter_function: entry to ‘MergeIncludedCompatMaps’
xkbcomp-1.5.0/compat.c:369:45: branch_true: following ‘true’ branch (when ‘si’ is non-NULL)...
xkbcomp-1.5.0/compat.c:372:12: branch_true: ...to here
xkbcomp-1.5.0/compat.c:372:12: branch_false: following ‘false’ branch (when ‘merge == 0’)...
xkbcomp-1.5.0/compat.c:374:14: branch_false: ...to here
xkbcomp-1.5.0/compat.c:374:14: call_function: calling ‘AddInterp’ from ‘MergeIncludedCompatMaps’
#  171|       {
#  172|           info->interps = (SymInterpInfo *)
#  173|->             AddCommonInfo((info->interps ? &info->interps->defs : NULL),
#  174|                             (CommonInfo *) si);
#  175|           info->nInterps++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
xkbcomp-1.5.0/keycodes.c:125:13: warning[-Wanalyzer-malloc-leak]: leak of ‘ii’
xkbcomp-1.5.0/keycodes.c:426:1: enter_function: entry to ‘MergeIncludedKeycodes’
xkbcomp-1.5.0/keycodes.c:455:8: branch_true: following ‘true’ branch...
xkbcomp-1.5.0/keycodes.c:455:8: branch_true: ...to here
xkbcomp-1.5.0/keycodes.c:458:32: branch_true: following ‘true’ branch (when ‘led’ is non-NULL)...
xkbcomp-1.5.0/keycodes.c:460:16: branch_true: ...to here
xkbcomp-1.5.0/keycodes.c:460:16: branch_false: following ‘false’ branch (when ‘merge == 0’)...
xkbcomp-1.5.0/keycodes.c:462:18: branch_false: ...to here
xkbcomp-1.5.0/keycodes.c:462:18: call_function: calling ‘AddIndicatorName’ from ‘MergeIncludedKeycodes’
#  123|           InitIndicatorNameInfo(ii, info);
#  124|           info->leds = (IndicatorNameInfo *)
#  125|->             AddCommonInfo((info->leds ? &info->leds->defs : NULL),
#  126|                             (CommonInfo *) ii);
#  127|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
xkbcomp-1.5.0/keytypes.c:228:13: warning[-Wanalyzer-malloc-leak]: leak of ‘type’
xkbcomp-1.5.0/keytypes.c:341:1: enter_function: entry to ‘MergeIncludedKeyTypes’
xkbcomp-1.5.0/keytypes.c:354:43: branch_true: following ‘true’ branch (when ‘type’ is non-NULL)...
xkbcomp-1.5.0/keytypes.c:357:12: branch_true: ...to here
xkbcomp-1.5.0/keytypes.c:357:12: branch_false: following ‘false’ branch (when ‘merge == 0’)...
xkbcomp-1.5.0/keytypes.c:359:14: branch_false: ...to here
xkbcomp-1.5.0/keytypes.c:359:14: call_function: calling ‘AddKeyType’ from ‘MergeIncludedKeyTypes’
#  226|           type->dpy = info->dpy;
#  227|           info->types = (KeyTypeInfo *)
#  228|->             AddCommonInfo((info->types ? &info->types->defs : NULL),
#  229|                             (CommonInfo *) type);
#  230|           info->nTypes++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
xkbcomp-1.5.0/keytypes.c:574:9: warning[-Wanalyzer-malloc-leak]: leak of ‘old’
xkbcomp-1.5.0/keytypes.c:1172:1: enter_function: entry to ‘CompileKeyTypes’
xkbcomp-1.5.0/keytypes.c:1178:5: call_function: calling ‘InitKeyTypesInfo’ from ‘CompileKeyTypes’
xkbcomp-1.5.0/keytypes.c:1178:5: return_function: returning to ‘CompileKeyTypes’ from ‘InitKeyTypesInfo’
xkbcomp-1.5.0/keytypes.c:1180:5: call_function: calling ‘HandleKeyTypesFile’ from ‘CompileKeyTypes’
#  572|       old->matchingMapIndex = -1;
#  573|       type->preserve = (PreserveInfo *)
#  574|->         AddCommonInfo((type->preserve ? &type->preserve->defs : NULL),
#  575|                         &old->defs);
#  576|       return True;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
xkbcomp-1.5.0/symbols.c:701:9: warning[-Wanalyzer-malloc-leak]: leak of ‘mm’
xkbcomp-1.5.0/symbols.c:709:1: enter_function: entry to ‘MergeIncludedSymbols’
xkbcomp-1.5.0/symbols.c:720:8: branch_false: following ‘false’ branch...
xkbcomp-1.5.0/symbols.c:725:5: branch_false: ...to here
xkbcomp-1.5.0/symbols.c:725:17: branch_true: following ‘true’ branch (when ‘i != 4’)...
xkbcomp-1.5.0/symbols.c:727:13: branch_true: ...to here
xkbcomp-1.5.0/symbols.c:727:12: branch_true: following ‘true’ branch...
xkbcomp-1.5.0/symbols.c:729:16: branch_true: ...to here
xkbcomp-1.5.0/symbols.c:729:16: branch_true: following ‘true’ branch (when ‘merge != 1’)...
xkbcomp-1.5.0/symbols.c:730:17: branch_true: ...to here
xkbcomp-1.5.0/symbols.c:727:12: branch_true: following ‘true’ branch...
xkbcomp-1.5.0/symbols.c:729:16: branch_true: ...to here
xkbcomp-1.5.0/symbols.c:729:16: branch_true: following ‘true’ branch (when ‘merge != 1’)...
xkbcomp-1.5.0/symbols.c:730:17: branch_true: ...to here
xkbcomp-1.5.0/symbols.c:733:35: branch_false: following ‘false’ branch...
xkbcomp-1.5.0/symbols.c:740:9: branch_false: ...to here
xkbcomp-1.5.0/symbols.c:740:8: branch_true: following ‘true’ branch...
xkbcomp-1.5.0/symbols.c:740:8: branch_true: ...to here
xkbcomp-1.5.0/symbols.c:743:33: branch_true: following ‘true’ branch (when ‘mm’ is non-NULL)...
xkbcomp-1.5.0/symbols.c:745:16: branch_true: ...to here
xkbcomp-1.5.0/symbols.c:745:16: branch_false: following ‘false’ branch (when ‘merge == 0’)...
xkbcomp-1.5.0/symbols.c:747:18: branch_false: ...to here
xkbcomp-1.5.0/symbols.c:747:18: call_function: calling ‘AddModMapEntry’ from ‘MergeIncludedSymbols’
#  699|       *mm = *new;
#  700|       info->modMap = (ModMapEntry *)
#  701|->         AddCommonInfo((info->modMap ? &info->modMap->defs : NULL),
#  702|                         &mm->defs);
#  703|       return True;

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-48.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namexkbcomp-1.4.7-4.fc43
diffbase-store-results-to/tmp/tmpcl965mmv/xkbcomp-1.4.7-4.fc43.tar.xz
diffbase-time-created2026-01-08 22:10:38
diffbase-time-finished2026-01-08 22:12:37
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpcl965mmv/xkbcomp-1.4.7-4.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpcl965mmv/xkbcomp-1.4.7-4.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-48.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namexkbcomp-1.5.0-1.fc44
store-results-to/tmp/tmp59xb617d/xkbcomp-1.5.0-1.fc44.tar.xz
time-created2026-01-08 22:13:02
time-finished2026-01-08 22:14:31
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp59xb617d/xkbcomp-1.5.0-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp59xb617d/xkbcomp-1.5.0-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9