Newly introduced findings

List of Findings

Error: COMPILER_WARNING: [#def1]
zlib-ng-2.3.2/arch/x86/adler32_avx2.c:46:19: warning[-Wpsabi]: AVX vector return without AVX enabled changes the ABI
#   44|       __m256i vs1, vs2, vs2_0;
#   45|   
#   46|->     const __m256i dot2v = _mm256_setr_epi8(64, 63, 62, 61, 60, 59, 58, 57, 56, 55, 54, 53, 52, 51, 50, 49, 48, 47,
#   47|                                              46, 45, 44, 43, 42, 41, 40, 39, 38, 37, 36, 35, 34, 33);
#   48|       const __m256i dot2v_0 = _mm256_setr_epi8(32, 31, 30, 29, 28, 27, 26, 25, 24, 23, 22, 21, 20, 19, 18, 17, 16, 15,

Error: COMPILER_WARNING: [#def2]
zlib-ng-2.3.2/arch/x86/chorba_sse41.c:112:9: note[note]: called from here
#  110|           }
#  111|   
#  112|->         REALIGN_CHORBA(in12, in34, in56, in78,
#  113|                          in_1, in23, in45, in67, in8_, 8);
#  114|   

Error: COMPILER_WARNING: [#def3]
zlib-ng-2.3.2/arch/x86/chorba_sse41.c:136:9: note[note]: called from here
#  134|           READ4(in12, in34, in56, in78, inptr);
#  135|   
#  136|->         REALIGN_CHORBA(in12, in34, in56, in78,
#  137|                          in_1, in23, in45, in67, in8_, 8);
#  138|   

Error: COMPILER_WARNING: [#def4]
zlib-ng-2.3.2/arch/x86/chorba_sse41.c:161:9: note[note]: called from here
#  159|           READ4(in12, in34, in56, in78, inptr);
#  160|   
#  161|->         REALIGN_CHORBA(in12, in34, in56, in78,
#  162|                          in_1, in23, in45, in67, in8_, 8);
#  163|   

Error: COMPILER_WARNING: [#def5]
zlib-ng-2.3.2/arch/x86/chorba_sse41.c:197:9: note[note]: called from here
#  195|   
#  196|           /* Pre Penryn CPUs the unpack should be faster */
#  197|->         REALIGN_CHORBA(in12, in34, in56, in78,
#  198|                          in_1, in23, in45, in67, in8_, 8);
#  199|   

Error: COMPILER_WARNING: [#def6]
zlib-ng-2.3.2/arch/x86/chorba_sse41.c:278:24: note[note]: called from here
#  276|           NEXT_ROUND(in3in4, cd1, cd2, cd3, cd4);
#  277|   
#  278|->         __m128i b2c2 = _mm_alignr_epi8(cd2, ab2, 8);
#  279|           __m128i a4_ = _mm_slli_si128(ab4, 8);
#  280|           a4_ = _mm_xor_si128(b2c2, a4_);

Error: COMPILER_WARNING: [#def7]
zlib-ng-2.3.2/arch/x86/chorba_sse41.c:285:24: note[note]: called from here
#  283|   
#  284|           __m128i d2_ = _mm_srli_si128(cd2, 8);
#  285|->         __m128i b4c4 = _mm_alignr_epi8(cd4, ab4, 8);
#  286|           next12 = _mm_xor_si128(next12, next56);
#  287|           next34 = _mm_xor_si128(cd3, _mm_xor_si128(b4c4, d2_));

Error: COMPILER_WARNING: [#def8]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:36:24: note[note]: called from here
#   34|       xmm_src0_0 = _mm_loadu_si128((__m128i*)src0);
#   35|       xmm_src1_0 = _mm_loadu_si128((__m128i*)src1);
#   36|->     mask_0 = (uint32_t)_mm_cmpeq_epu8_mask(xmm_src0_0, xmm_src1_0); // zero-extended to use __builtin_ctz
#   37|       if (mask_0 != 0x0000FFFF) {
#   38|           // There is potential for using __builtin_ctzg/__builtin_ctzs/_tzcnt_u16/__tzcnt_u16 here

Error: COMPILER_WARNING: [#def9]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:44:5: warning[-Wpsabi]: AVX512F vector return without AVX512F enabled changes the ABI
#   42|   
#   43|       // 64 bytes
#   44|->     zmm_src0_1 = _mm512_loadu_si512((__m512i*)(src0 + 16));
#   45|       zmm_src1_1 = _mm512_loadu_si512((__m512i*)(src1 + 16));
#   46|       mask_1 = _mm512_cmpeq_epu8_mask(zmm_src0_1, zmm_src1_1);

Error: COMPILER_WARNING: [#def10]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:44:18: note[note]: called from here
#   42|   
#   43|       // 64 bytes
#   44|->     zmm_src0_1 = _mm512_loadu_si512((__m512i*)(src0 + 16));
#   45|       zmm_src1_1 = _mm512_loadu_si512((__m512i*)(src1 + 16));
#   46|       mask_1 = _mm512_cmpeq_epu8_mask(zmm_src0_1, zmm_src1_1);

Error: COMPILER_WARNING: [#def11]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:45:18: note[note]: called from here
#   43|       // 64 bytes
#   44|       zmm_src0_1 = _mm512_loadu_si512((__m512i*)(src0 + 16));
#   45|->     zmm_src1_1 = _mm512_loadu_si512((__m512i*)(src1 + 16));
#   46|       mask_1 = _mm512_cmpeq_epu8_mask(zmm_src0_1, zmm_src1_1);
#   47|       if (mask_1 != 0xFFFFFFFFFFFFFFFF) {

Error: COMPILER_WARNING: [#def12]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:46:14: note[note]: called from here
#   44|       zmm_src0_1 = _mm512_loadu_si512((__m512i*)(src0 + 16));
#   45|       zmm_src1_1 = _mm512_loadu_si512((__m512i*)(src1 + 16));
#   46|->     mask_1 = _mm512_cmpeq_epu8_mask(zmm_src0_1, zmm_src1_1);
#   47|       if (mask_1 != 0xFFFFFFFFFFFFFFFF) {
#   48|           uint32_t match_byte = (uint32_t)__builtin_ctzll(~mask_1);

Error: COMPILER_WARNING: [#def13]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:53:18: note[note]: called from here
#   51|   
#   52|       // 64 bytes
#   53|->     zmm_src0_2 = _mm512_loadu_si512((__m512i*)(src0 + 80));
#   54|       zmm_src1_2 = _mm512_loadu_si512((__m512i*)(src1 + 80));
#   55|       mask_2 = _mm512_cmpeq_epu8_mask(zmm_src0_2, zmm_src1_2);

Error: COMPILER_WARNING: [#def14]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:54:18: note[note]: called from here
#   52|       // 64 bytes
#   53|       zmm_src0_2 = _mm512_loadu_si512((__m512i*)(src0 + 80));
#   54|->     zmm_src1_2 = _mm512_loadu_si512((__m512i*)(src1 + 80));
#   55|       mask_2 = _mm512_cmpeq_epu8_mask(zmm_src0_2, zmm_src1_2);
#   56|       if (mask_2 != 0xFFFFFFFFFFFFFFFF) {

Error: COMPILER_WARNING: [#def15]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:55:14: note[note]: called from here
#   53|       zmm_src0_2 = _mm512_loadu_si512((__m512i*)(src0 + 80));
#   54|       zmm_src1_2 = _mm512_loadu_si512((__m512i*)(src1 + 80));
#   55|->     mask_2 = _mm512_cmpeq_epu8_mask(zmm_src0_2, zmm_src1_2);
#   56|       if (mask_2 != 0xFFFFFFFFFFFFFFFF) {
#   57|           uint32_t match_byte = (uint32_t)__builtin_ctzll(~mask_2);

Error: COMPILER_WARNING: [#def16]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:62:18: note[note]: called from here
#   60|   
#   61|       // 64 bytes
#   62|->     zmm_src0_3 = _mm512_loadu_si512((__m512i*)(src0 + 144));
#   63|       zmm_src1_3 = _mm512_loadu_si512((__m512i*)(src1 + 144));
#   64|       mask_3 = _mm512_cmpeq_epu8_mask(zmm_src0_3, zmm_src1_3);

Error: COMPILER_WARNING: [#def17]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:63:18: note[note]: called from here
#   61|       // 64 bytes
#   62|       zmm_src0_3 = _mm512_loadu_si512((__m512i*)(src0 + 144));
#   63|->     zmm_src1_3 = _mm512_loadu_si512((__m512i*)(src1 + 144));
#   64|       mask_3 = _mm512_cmpeq_epu8_mask(zmm_src0_3, zmm_src1_3);
#   65|       if (mask_3 != 0xFFFFFFFFFFFFFFFF) {

Error: COMPILER_WARNING: [#def18]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:64:14: note[note]: called from here
#   62|       zmm_src0_3 = _mm512_loadu_si512((__m512i*)(src0 + 144));
#   63|       zmm_src1_3 = _mm512_loadu_si512((__m512i*)(src1 + 144));
#   64|->     mask_3 = _mm512_cmpeq_epu8_mask(zmm_src0_3, zmm_src1_3);
#   65|       if (mask_3 != 0xFFFFFFFFFFFFFFFF) {
#   66|           uint32_t match_byte = (uint32_t)__builtin_ctzll(~mask_3);

Error: COMPILER_WARNING: [#def19]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:71:18: note[note]: called from here
#   69|   
#   70|       // 64 bytes (overlaps the previous 16 bytes for fast tail processing)
#   71|->     zmm_src0_4 = _mm512_loadu_si512((__m512i*)(src0 + 192));
#   72|       zmm_src1_4 = _mm512_loadu_si512((__m512i*)(src1 + 192));
#   73|       mask_4 = _mm512_cmpeq_epu8_mask(zmm_src0_4, zmm_src1_4);

Error: COMPILER_WARNING: [#def20]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:72:18: note[note]: called from here
#   70|       // 64 bytes (overlaps the previous 16 bytes for fast tail processing)
#   71|       zmm_src0_4 = _mm512_loadu_si512((__m512i*)(src0 + 192));
#   72|->     zmm_src1_4 = _mm512_loadu_si512((__m512i*)(src1 + 192));
#   73|       mask_4 = _mm512_cmpeq_epu8_mask(zmm_src0_4, zmm_src1_4);
#   74|       if (mask_4 != 0xFFFFFFFFFFFFFFFF) {

Error: COMPILER_WARNING: [#def21]
zlib-ng-2.3.2/arch/x86/compare256_avx512.c:73:14: note[note]: called from here
#   71|       zmm_src0_4 = _mm512_loadu_si512((__m512i*)(src0 + 192));
#   72|       zmm_src1_4 = _mm512_loadu_si512((__m512i*)(src1 + 192));
#   73|->     mask_4 = _mm512_cmpeq_epu8_mask(zmm_src0_4, zmm_src1_4);
#   74|       if (mask_4 != 0xFFFFFFFFFFFFFFFF) {
#   75|           uint32_t match_byte = (uint32_t)__builtin_ctzll(~mask_4);

Error: COMPILER_WARNING: [#def22]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:180:17: note[note]: called from here
#  178|       x_tmp3 = *xmm_crc3;
#  179|   
#  180|->     *xmm_crc0 = _mm_clmulepi64_si128(*xmm_crc0, xmm_fold12, 0x01);
#  181|       x_tmp0 = _mm_clmulepi64_si128(x_tmp0, xmm_fold12, 0x10);
#  182|       ps_crc0 = _mm_castsi128_ps(*xmm_crc0);

Error: COMPILER_WARNING: [#def23]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:181:14: note[note]: called from here
#  179|   
#  180|       *xmm_crc0 = _mm_clmulepi64_si128(*xmm_crc0, xmm_fold12, 0x01);
#  181|->     x_tmp0 = _mm_clmulepi64_si128(x_tmp0, xmm_fold12, 0x10);
#  182|       ps_crc0 = _mm_castsi128_ps(*xmm_crc0);
#  183|       ps_t0 = _mm_castsi128_ps(x_tmp0);

Error: COMPILER_WARNING: [#def24]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:186:17: note[note]: called from here
#  184|       ps_res0 = _mm_xor_ps(ps_crc0, ps_t0);
#  185|   
#  186|->     *xmm_crc1 = _mm_clmulepi64_si128(*xmm_crc1, xmm_fold12, 0x01);
#  187|       x_tmp1 = _mm_clmulepi64_si128(x_tmp1, xmm_fold12, 0x10);
#  188|       ps_crc1 = _mm_castsi128_ps(*xmm_crc1);

Error: COMPILER_WARNING: [#def25]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:187:14: note[note]: called from here
#  185|   
#  186|       *xmm_crc1 = _mm_clmulepi64_si128(*xmm_crc1, xmm_fold12, 0x01);
#  187|->     x_tmp1 = _mm_clmulepi64_si128(x_tmp1, xmm_fold12, 0x10);
#  188|       ps_crc1 = _mm_castsi128_ps(*xmm_crc1);
#  189|       ps_t1 = _mm_castsi128_ps(x_tmp1);

Error: COMPILER_WARNING: [#def26]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:192:17: note[note]: called from here
#  190|       ps_res1 = _mm_xor_ps(ps_crc1, ps_t1);
#  191|   
#  192|->     *xmm_crc2 = _mm_clmulepi64_si128(*xmm_crc2, xmm_fold12, 0x01);
#  193|       x_tmp2 = _mm_clmulepi64_si128(x_tmp2, xmm_fold12, 0x10);
#  194|       ps_crc2 = _mm_castsi128_ps(*xmm_crc2);

Error: COMPILER_WARNING: [#def27]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:193:14: note[note]: called from here
#  191|   
#  192|       *xmm_crc2 = _mm_clmulepi64_si128(*xmm_crc2, xmm_fold12, 0x01);
#  193|->     x_tmp2 = _mm_clmulepi64_si128(x_tmp2, xmm_fold12, 0x10);
#  194|       ps_crc2 = _mm_castsi128_ps(*xmm_crc2);
#  195|       ps_t2 = _mm_castsi128_ps(x_tmp2);

Error: COMPILER_WARNING: [#def28]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:198:17: note[note]: called from here
#  196|       ps_res2 = _mm_xor_ps(ps_crc2, ps_t2);
#  197|   
#  198|->     *xmm_crc3 = _mm_clmulepi64_si128(*xmm_crc3, xmm_fold12, 0x01);
#  199|       x_tmp3 = _mm_clmulepi64_si128(x_tmp3, xmm_fold12, 0x10);
#  200|       ps_crc3 = _mm_castsi128_ps(*xmm_crc3);

Error: COMPILER_WARNING: [#def29]
zlib-ng-2.3.2/arch/x86/crc32_pclmulqdq_tpl.h:199:14: note[note]: called from here
#  197|   
#  198|       *xmm_crc3 = _mm_clmulepi64_si128(*xmm_crc3, xmm_fold12, 0x01);
#  199|->     x_tmp3 = _mm_clmulepi64_si128(x_tmp3, xmm_fold12, 0x10);
#  200|       ps_crc3 = _mm_castsi128_ps(*xmm_crc3);
#  201|       ps_t3 = _mm_castsi128_ps(x_tmp3);

Error: COMPILER_WARNING: [#def30]
zlib-ng-2.3.2/arch/x86/slide_hash_avx2.c:24:17: note[note]: called from here
#   22|           __m256i value, result;
#   23|   
#   24|->         value = _mm256_load_si256((__m256i *)table);
#   25|           result = _mm256_subs_epu16(value, wsize);
#   26|           _mm256_store_si256((__m256i *)table, result);

Error: COMPILER_WARNING: [#def31]
zlib-ng-2.3.2/arch/x86/slide_hash_avx2.c:26:9: note[note]: called from here
#   24|           value = _mm256_load_si256((__m256i *)table);
#   25|           result = _mm256_subs_epu16(value, wsize);
#   26|->         _mm256_store_si256((__m256i *)table, result);
#   27|   
#   28|           table -= 16;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def32]
zlib-ng-2.3.2/gzlib.c:130:12: warning[-Wanalyzer-malloc-leak]: leak of ‘gz_state_init()’
zlib-ng-2.3.2/gzlib.c:109:15: enter_function: entry to ‘gz_open’
zlib-ng-2.3.2/gzlib.c:121:8: branch_false: following ‘false’ branch (when ‘path’ is non-NULL)...
zlib-ng-2.3.2/gzlib.c:125:25: branch_false: ...to here
zlib-ng-2.3.2/gzlib.c:125:25: call_function: calling ‘gz_state_init’ from ‘gz_open’
zlib-ng-2.3.2/gzlib.c:125:25: return_function: returning to ‘gz_open’ from ‘gz_state_init’
zlib-ng-2.3.2/gzlib.c:126:8: branch_false: following ‘false’ branch...
zlib-ng-2.3.2/gzlib.c:126:8: branch_false: ...to here
zlib-ng-2.3.2/gzlib.c:184:8: branch_false: following ‘false’ branch...
zlib-ng-2.3.2/gzlib.c:190:8: branch_false: ...to here
zlib-ng-2.3.2/gzlib.c:191:12: branch_false: following ‘false’ branch...
zlib-ng-2.3.2/gzlib.c:195:9: branch_false: ...to here
zlib-ng-2.3.2/gzlib.c:208:8: branch_false: following ‘false’ branch...
zlib-ng-2.3.2/gzlib.c:221:15: branch_false: ...to here
zlib-ng-2.3.2/gzlib.c:226:9: branch_false: following ‘false’ branch (when ‘cloexec == 0’)...
zlib-ng-2.3.2/gzlib.c:226:9: branch_false: ...to here
zlib-ng-2.3.2/gzlib.c:245:17: branch_true: following ‘true’ branch (when ‘fd < 0’)...
zlib-ng-2.3.2/gzlib.c:245:32: branch_true: ...to here
zlib-ng-2.3.2/gzlib.c:245:32: throw: if ‘open’ throws an exception...
zlib-ng-2.3.2/gzlib.c:130:12: danger: ‘gz_state_init()’ leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  128|   
#  129|       /* interpret mode */
#  130|->     while (*mode) {
#  131|           if (*mode >= '0' && *mode <= '9') {
#  132|               state->level = *mode - '0';

Error: COMPILER_WARNING: [#def33] [important]
zlib-ng-2.3.2/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-TsX5gS/src.c:2:10: error[fatal error]: intrin.h: No such file or directory

Error: COMPILER_WARNING: [#def34]
zlib-ng-2.3.2/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-pYUqJQ/src.c:4:29: note[note]: called from here

Error: COMPILER_WARNING: [#def35]
zlib-ng-2.3.2/redhat-linux-build/CMakeFiles/CMakeScratch/TryCompile-pYUqJQ/src.c:5:24: note[note]: called from here

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.19.1
analyzer-version-gcc16.0.0
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.19.1
diffbase-analyzer-version-gcc16.0.0
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-156.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namezlib-ng-2.2.5-2.fc43
diffbase-store-results-to/tmp/tmps6qq32zo/zlib-ng-2.2.5-2.fc43.tar.xz
diffbase-time-created2026-01-08 22:13:59
diffbase-time-finished2026-01-08 22:16:46
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmps6qq32zo/zlib-ng-2.2.5-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmps6qq32zo/zlib-ng-2.2.5-2.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-156.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namezlib-ng-2.3.2-2.fc44
store-results-to/tmp/tmp24n8152d/zlib-ng-2.3.2-2.fc44.tar.xz
time-created2026-01-08 22:17:04
time-finished2026-01-08 22:19:20
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,cppcheck,clippy,shellcheck,unicontrol' '-o' '/tmp/tmp24n8152d/zlib-ng-2.3.2-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp24n8152d/zlib-ng-2.3.2-2.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9