Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
zix-0.8.0/test/test_filesystem.c:72:11: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(path, "wb")’
zix-0.8.0/test/test_filesystem.c:69:21: acquire_resource: opened here
zix-0.8.0/test/test_filesystem.c:70:6: branch_true: following ‘true’ branch...
zix-0.8.0/test/test_filesystem.c:71:5: branch_true: ...to here
zix-0.8.0/test/test_filesystem.c:72:11: throw: if ‘fflush’ throws an exception...
zix-0.8.0/test/test_filesystem.c:72:11: danger: ‘fopen(path, "wb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   70|     if (f) {
#   71|       fwrite(contents, 1, strlen(contents), f);
#   72|->     ret = fflush(f) ? errno : ferror(f) ? EBADF : 0;
#   73|       ret = (fclose(f) && !ret) ? errno : ret;
#   74|     }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def2]
zix-0.8.0/test/test_filesystem.c:312:18: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(zix_path_join(0, create_temp_dir("zixXXXXXX"), "zix_test_file"), "a+b")’
zix-0.8.0/test/test_filesystem.c:300:1: enter_function: entry to ‘test_flock’
zix-0.8.0/test/test_filesystem.c:302:27: call_function: calling ‘create_temp_dir’ from ‘test_flock’
zix-0.8.0/test/test_filesystem.c:302:27: return_function: returning to ‘test_flock’ from ‘create_temp_dir’
zix-0.8.0/test/test_filesystem.c:304:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:306:20: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:307:20: acquire_resource: opened here
zix-0.8.0/test/test_filesystem.c:309:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:310:3: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:310:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:312:18: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:312:18: throw: if ‘zix_file_lock’ throws an exception...
zix-0.8.0/test/test_filesystem.c:312:18: danger: ‘fopen(zix_path_join(0, create_temp_dir("zixXXXXXX"), "zix_test_file"), "a+b")’ leaks here; was opened at [(16)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/15)
#  310|     assert(f2);
#  311|   
#  312|->   ZixStatus st = zix_file_lock(f1, ZIX_FILE_LOCK_TRY);
#  313|     assert(!st || st == ZIX_STATUS_NOT_SUPPORTED);
#  314|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def3]
zix-0.8.0/test/test_filesystem.c:312:18: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(zix_path_join(0, create_temp_dir("zixXXXXXX"), "zix_test_file"), "wb")’
zix-0.8.0/test/test_filesystem.c:300:1: enter_function: entry to ‘test_flock’
zix-0.8.0/test/test_filesystem.c:302:27: call_function: calling ‘create_temp_dir’ from ‘test_flock’
zix-0.8.0/test/test_filesystem.c:302:27: return_function: returning to ‘test_flock’ from ‘create_temp_dir’
zix-0.8.0/test/test_filesystem.c:304:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:306:20: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:306:20: acquire_resource: opened here
zix-0.8.0/test/test_filesystem.c:309:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:310:3: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:310:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:312:18: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:312:18: throw: if ‘zix_file_lock’ throws an exception...
zix-0.8.0/test/test_filesystem.c:312:18: danger: ‘fopen(zix_path_join(0, create_temp_dir("zixXXXXXX"), "zix_test_file"), "wb")’ leaks here; was opened at [(16)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/15)
#  310|     assert(f2);
#  311|   
#  312|->   ZixStatus st = zix_file_lock(f1, ZIX_FILE_LOCK_TRY);
#  313|     assert(!st || st == ZIX_STATUS_NOT_SUPPORTED);
#  314|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def4]
zix-0.8.0/test/test_filesystem.c:313:3: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(zix_path_join(0, create_temp_dir("zixXXXXXX"), "zix_test_file"), "a+b")’
zix-0.8.0/test/test_filesystem.c:300:1: enter_function: entry to ‘test_flock’
zix-0.8.0/test/test_filesystem.c:302:27: call_function: calling ‘create_temp_dir’ from ‘test_flock’
zix-0.8.0/test/test_filesystem.c:302:27: return_function: returning to ‘test_flock’ from ‘create_temp_dir’
zix-0.8.0/test/test_filesystem.c:304:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:306:20: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:307:20: acquire_resource: opened here
zix-0.8.0/test/test_filesystem.c:309:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:310:3: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:310:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:312:18: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:313:3: branch_false: following ‘false’ branch...
zix-0.8.0/test/test_filesystem.c:315:6: branch_false: ...to here
zix-0.8.0/test/test_filesystem.c:315:6: branch_true: following ‘true’ branch...
zix-0.8.0/test/test_filesystem.c:316:5: branch_true: ...to here
zix-0.8.0/test/test_filesystem.c:316:5: throw: if ‘zix_file_lock’ throws an exception...
zix-0.8.0/test/test_filesystem.c:313:3: danger: ‘fopen(zix_path_join(0, create_temp_dir("zixXXXXXX"), "zix_test_file"), "a+b")’ leaks here; was opened at [(16)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/15)
#  311|   
#  312|     ZixStatus st = zix_file_lock(f1, ZIX_FILE_LOCK_TRY);
#  313|->   assert(!st || st == ZIX_STATUS_NOT_SUPPORTED);
#  314|   
#  315|     if (!st) {

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-213.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namezix-0.6.2-2.fc43
diffbase-store-results-to/tmp/tmp2x637yka/zix-0.6.2-2.fc43.tar.xz
diffbase-time-created2026-01-08 22:13:48
diffbase-time-finished2026-01-08 22:15:46
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp2x637yka/zix-0.6.2-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp2x637yka/zix-0.6.2-2.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-213.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namezix-0.8.0-1.fc44
store-results-to/tmp/tmp_7mk0ddk/zix-0.8.0-1.fc44.tar.xz
time-created2026-01-08 22:16:11
time-finished2026-01-08 22:17:40
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp_7mk0ddk/zix-0.8.0-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp_7mk0ddk/zix-0.8.0-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9