Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
xz-5.8.1/src/xzdec/xzdec.c:356:23: warning[-Wanalyzer-file-leak]: leak of FILE ‘src_file’
xz-5.8.1/src/xzdec/xzdec.c:385:1: enter_function: entry to ‘main’
xz-5.8.1/src/xzdec/xzdec.c:439:12: branch_false: following ‘false’ branch...
xz-5.8.1/src/xzdec/xzdec.c:439:12: branch_false: ...to here
xz-5.8.1/src/xzdec/xzdec.c:452:28: branch_false: following ‘false’ branch (when the strings are non-equal)...
xz-5.8.1/src/xzdec/xzdec.c:457:44: branch_false: ...to here
xz-5.8.1/src/xzdec/xzdec.c:457:44: acquire_resource: opened here
xz-5.8.1/src/xzdec/xzdec.c:458:36: branch_false: following ‘false’ branch...
xz-5.8.1/src/xzdec/xzdec.c:472:39: branch_false: ...to here
xz-5.8.1/src/xzdec/xzdec.c:472:28: branch_true: following ‘true’ branch...
xz-5.8.1/src/xzdec/xzdec.c:473:33: branch_true: ...to here
xz-5.8.1/src/xzdec/xzdec.c:473:33: call_function: calling ‘sandbox_enter’ from ‘main’
#  354|   			goto error;
#  355|   
#  356|-> 		(void)close(ruleset_fd);
#  357|   	}
#  358|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
xz-5.8.1/src/xzdec/xzdec.c:356:23: warning[-Wanalyzer-malloc-leak]: leak of ‘src_file’
xz-5.8.1/src/xzdec/xzdec.c:385:1: enter_function: entry to ‘main’
xz-5.8.1/src/xzdec/xzdec.c:439:12: branch_false: following ‘false’ branch...
xz-5.8.1/src/xzdec/xzdec.c:439:12: branch_false: ...to here
xz-5.8.1/src/xzdec/xzdec.c:452:28: branch_false: following ‘false’ branch (when the strings are non-equal)...
xz-5.8.1/src/xzdec/xzdec.c:457:44: branch_false: ...to here
xz-5.8.1/src/xzdec/xzdec.c:457:44: acquire_memory: allocated here
xz-5.8.1/src/xzdec/xzdec.c:458:36: branch_false: following ‘false’ branch...
xz-5.8.1/src/xzdec/xzdec.c:472:39: branch_false: ...to here
xz-5.8.1/src/xzdec/xzdec.c:472:28: branch_true: following ‘true’ branch...
xz-5.8.1/src/xzdec/xzdec.c:473:33: branch_true: ...to here
xz-5.8.1/src/xzdec/xzdec.c:473:33: call_function: calling ‘sandbox_enter’ from ‘main’
#  354|   			goto error;
#  355|   
#  356|-> 		(void)close(ruleset_fd);
#  357|   	}
#  358|

Scan Properties

analyzer-version-clippy	1.92.0
analyzer-version-cppcheck	2.19.1
analyzer-version-gcc	16.0.0
analyzer-version-gcc-analyzer	16.0.0
analyzer-version-shellcheck	0.11.0
analyzer-version-unicontrol	0.0.2
diffbase-analyzer-version-clippy	1.92.0
diffbase-analyzer-version-cppcheck	2.19.1
diffbase-analyzer-version-gcc	16.0.0
diffbase-analyzer-version-gcc-analyzer	16.0.0
diffbase-analyzer-version-shellcheck	0.11.0
diffbase-analyzer-version-unicontrol	0.0.2
diffbase-enabled-plugins	clippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code	0
diffbase-host	ip-172-16-1-40.us-west-2.compute.internal
diffbase-known-false-positives	/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpm	known-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-config	fedora-rawhide-x86_64
diffbase-project-name	xz-5.8.2-1.fc44
diffbase-store-results-to	/tmp/tmpav2myqib/xz-5.8.2-1.fc44.tar.xz
diffbase-time-created	2026-01-08 22:16:56
diffbase-time-finished	2026-01-08 22:18:54
diffbase-tool	csmock
diffbase-tool-args	'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmpav2myqib/xz-5.8.2-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpav2myqib/xz-5.8.2-1.fc44.src.rpm'
diffbase-tool-version	csmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-plugins	clippy, cppcheck, gcc, shellcheck, unicontrol
exit-code	0
host	ip-172-16-1-40.us-west-2.compute.internal
known-false-positives	/usr/share/csmock/known-false-positives.js
known-false-positives-rpm	known-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-config	fedora-rawhide-x86_64
project-name	xz-5.8.1-2.fc43
store-results-to	/tmp/tmptyy26y_i/xz-5.8.1-2.fc43.tar.xz
time-created	2026-01-08 22:14:12
time-finished	2026-01-08 22:16:37
title	Fixed findings
tool	csmock
tool-args	'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmptyy26y_i/xz-5.8.1-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmptyy26y_i/xz-5.8.1-2.fc43.src.rpm'
tool-version	csmock-3.8.3.20251215.161544.g62de9a5-1.el9