gpgme-1.24.3-6.fc44

List of Findings

Error: SHELLCHECK_WARNING (CWE-156): [#def1]
/usr/bin/gpgme-config:2:28: warning[SC2046]: Quote this to prevent word splitting.
#    1|   #!/usr/bin/sh
#    2|-> exec /usr/bin/gpgme-config.$(arch) $@

Error: SHELLCHECK_WARNING (CWE-88): [#def2]
/usr/bin/gpgme-config:2:36: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
#    1|   #!/usr/bin/sh
#    2|-> exec /usr/bin/gpgme-config.$(arch) $@

Error: SHELLCHECK_WARNING (CWE-563): [#def3]
/usr/bin/gpgme-config.x86_64:41:1: warning[SC2034]: libs_pthread appears unused. Verify use (or export if used externally).
#   39|   # thread modules variable.
#   40|   thread_modules="$thread_modules pthread"
#   41|-> libs_pthread="-lpthread"
#   42|   cflags_pthread=""
#   43|   

Error: SHELLCHECK_WARNING (CWE-457): [#def4]
/usr/bin/gpgme-config.x86_64:128:37: warning[SC2154]: assuan_cflags is referenced but not assigned.
#  126|   	    esac
#  127|   	    test "x$with_glib" = "xyes" && tmp_g="$cflags_glib"
#  128|->             for i in $cflags $tmp_c $assuan_cflags $gpg_error_cflags $tmp_g ; do
#  129|                 skip=no
#  130|                 case $i in

Error: SHELLCHECK_WARNING (CWE-457): [#def5]
/usr/bin/gpgme-config.x86_64:164:35: warning[SC2154]: assuan_libs is referenced but not assigned.
#  162|   		    ;;
#  163|   	    esac
#  164|->             for i in $libs $tmp_l $assuan_libs $gpg_error_libs $tmp_x; do
#  165|                 skip=no
#  166|                 case $i in

Error: SHELLCHECK_WARNING (CWE-457): [#def6]
/usr/bin/gpgme-config.x86_64:164:48: warning[SC2154]: gpg_error_libs is referenced but not assigned.
#  162|   		    ;;
#  163|   	    esac
#  164|->             for i in $libs $tmp_l $assuan_libs $gpg_error_libs $tmp_x; do
#  165|                 skip=no
#  166|                 case $i in

Error: CPPCHECK_WARNING (CWE-457): [#def7]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:873: warning[uninitvar]: Uninitialized variable: buff
#  871|       *r = 0;
#  872|     }
#  873|->   return buff;
#  874|   }
#  875|   

Error: CPPCHECK_WARNING (CWE-476): [#def8]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:1902: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1900|       SwigPyClientData *data = (SwigPyClientData *)malloc(sizeof(SwigPyClientData));
# 1901|       /* the klass element */
# 1902|->     data->klass = obj;
# 1903|       SWIG_Py_INCREF(data->klass);
# 1904|       /* the newraw method and newargs arguments used to create a new raw instance */

Error: CPPCHECK_WARNING (CWE-476): [#def9]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:1903: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1901|       /* the klass element */
# 1902|       data->klass = obj;
# 1903|->     SWIG_Py_INCREF(data->klass);
# 1904|       /* the newraw method and newargs arguments used to create a new raw instance */
# 1905|       if (PyClass_Check(obj)) {

Error: COMPILER_WARNING (CWE-457): [#def10]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:4196:10: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
# 4196 |     *obj = value;
#      |     ~~~~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_error_t_p_assign’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:49246:17: note: ‘arg2’ was declared here
#49246 |   gpgme_error_t arg2 ;
#      |                 ^~~~
# 4194|   
# 4195|     static void gpgme_error_t_p_assign(gpgme_error_t *obj, gpgme_error_t value) {
# 4196|->     *obj = value;
# 4197|     }
# 4198|   

Error: COMPILER_WARNING (CWE-457): [#def11]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_data_seek’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:4394:14: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
# 4394 |     result = gpgme_data_seek(arg1,arg2,arg3);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:4355:9: note: ‘arg2’ was declared here
# 4355 |   off_t arg2 ;
#      |         ^~~~
# 4392|     {
# 4393|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 4394|->     result = gpgme_data_seek(arg1,arg2,arg3);
# 4395|       SWIG_PYTHON_THREAD_END_ALLOW;
# 4396|     }

Error: COMPILER_WARNING (CWE-457): [#def12]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_strerror’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:4954:22: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 4954 |     result = (char *)gpgme_strerror(arg1);
#      |                      ^~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:4935:17: note: ‘arg1’ was declared here
# 4935 |   gpgme_error_t arg1 ;
#      |                 ^~~~
# 4952|     {
# 4953|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 4954|->     result = (char *)gpgme_strerror(arg1);
# 4955|       SWIG_PYTHON_THREAD_END_ALLOW;
# 4956|     }

Error: COMPILER_WARNING (CWE-457): [#def13]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_strerror_r’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:5009:14: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5009 |     result = (int)gpgme_strerror_r(arg1,arg2,arg3);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:4966:15: note: ‘arg1’ was declared here
# 4966 |   gpg_error_t arg1 ;
#      |               ^~~~
# 5007|     {
# 5008|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5009|->     result = (int)gpgme_strerror_r(arg1,arg2,arg3);
# 5010|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5011|     }

Error: COMPILER_WARNING (CWE-457): [#def14]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_strsource’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:5050:22: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5050 |     result = (char *)gpgme_strsource(arg1);
#      |                      ^~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:5031:17: note: ‘arg1’ was declared here
# 5031 |   gpgme_error_t arg1 ;
#      |                 ^~~~
# 5048|     {
# 5049|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5050|->     result = (char *)gpgme_strsource(arg1);
# 5051|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5052|     }

Error: COMPILER_WARNING (CWE-457): [#def15]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_err_code_to_errno’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:5111:14: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5111 |     result = (int)gpgme_err_code_to_errno(arg1);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:5092:20: note: ‘arg1’ was declared here
# 5092 |   gpgme_err_code_t arg1 ;
#      |                    ^~~~
# 5109|     {
# 5110|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5111|->     result = (int)gpgme_err_code_to_errno(arg1);
# 5112|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5113|     }

Error: COMPILER_WARNING (CWE-457): [#def16]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_err_make_from_errno’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:5196:14: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5196 |     result = gpgme_err_make_from_errno(arg1,arg2);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:5170:22: note: ‘arg1’ was declared here
# 5170 |   gpgme_err_source_t arg1 ;
#      |                      ^~~~
# 5194|     {
# 5195|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5196|->     result = gpgme_err_make_from_errno(arg1,arg2);
# 5197|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5198|     }

Error: COMPILER_WARNING (CWE-457): [#def17]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_key_sig_status_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:9000:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
# 9000 |     if (arg1) (arg1)->status = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:8976:17: note: ‘arg2’ was declared here
# 8976 |   gpgme_error_t arg2 ;
#      |                 ^~~~
# 8998|     {
# 8999|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 9000|->     if (arg1) (arg1)->status = arg2;
# 9001|       SWIG_PYTHON_THREAD_END_ALLOW;
# 9002|     }

Error: COMPILER_WARNING (CWE-457): [#def18]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_invalid_key_reason_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:13272:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#13272 |     if (arg1) (arg1)->reason = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:13248:17: note: ‘arg2’ was declared here
#13248 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#13270|     {
#13271|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#13272|->     if (arg1) (arg1)->reason = arg2;
#13273|       SWIG_PYTHON_THREAD_END_ALLOW;
#13274|     }

Error: COMPILER_WARNING (CWE-457): [#def19]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_io_event_done_data_err_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:14948:27: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#14948 |     if (arg1) (arg1)->err = arg2;
#      |               ~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:14924:17: note: ‘arg2’ was declared here
#14924 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#14946|     {
#14947|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#14948|->     if (arg1) (arg1)->err = arg2;
#14949|       SWIG_PYTHON_THREAD_END_ALLOW;
#14950|     }

Error: COMPILER_WARNING (CWE-457): [#def20]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_io_event_done_data_op_err_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:15015:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#15015 |     if (arg1) (arg1)->op_err = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:14991:17: note: ‘arg2’ was declared here
#14991 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#15013|     {
#15014|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#15015|->     if (arg1) (arg1)->op_err = arg2;
#15016|       SWIG_PYTHON_THREAD_END_ALLOW;
#15017|     }

Error: CPPCHECK_WARNING (CWE-457): [#def21]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:16592: error[legacyUninitvar]: Uninitialized variable: arg2
#16590|     {
#16591|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#16592|->     result = gpgme_data_new_from_estream(arg1,arg2);
#16593|       SWIG_PYTHON_THREAD_END_ALLOW;
#16594|     }

Error: COMPILER_WARNING (CWE-457): [#def22]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_data_new_from_filepart’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:17004:14: warning[-Wmaybe-uninitialized]: ‘arg4’ may be used uninitialized
#17004 |     result = gpgme_data_new_from_filepart(arg1,(char const *)arg2,arg3,arg4,arg5);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:16940:9: note: ‘arg4’ was declared here
#16940 |   off_t arg4 ;
#      |         ^~~~
#17002|     {
#17003|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#17004|->     result = gpgme_data_new_from_filepart(arg1,(char const *)arg2,arg3,arg4,arg5);
#17005|       SWIG_PYTHON_THREAD_END_ALLOW;
#17006|     }

Error: COMPILER_WARNING (CWE-457): [#def23]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_recipient_status_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:21930:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#21930 |     if (arg1) (arg1)->status = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:21906:17: note: ‘arg2’ was declared here
#21906 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#21928|     {
#21929|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#21930|->     if (arg1) (arg1)->status = arg2;
#21931|       SWIG_PYTHON_THREAD_END_ALLOW;
#21932|     }

Error: COMPILER_WARNING (CWE-457): [#def24]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_signature_status_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:27621:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#27621 |     if (arg1) (arg1)->status = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:27597:17: note: ‘arg2’ was declared here
#27597 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#27619|     {
#27620|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#27621|->     if (arg1) (arg1)->status = arg2;
#27622|       SWIG_PYTHON_THREAD_END_ALLOW;
#27623|     }

Error: COMPILER_WARNING (CWE-457): [#def25]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_signature_validity_reason_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:28320:39: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#28320 |     if (arg1) (arg1)->validity_reason = arg2;
#      |               ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:28296:17: note: ‘arg2’ was declared here
#28296 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#28318|     {
#28319|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#28320|->     if (arg1) (arg1)->validity_reason = arg2;
#28321|       SWIG_PYTHON_THREAD_END_ALLOW;
#28322|     }

Error: COMPILER_WARNING (CWE-457): [#def26]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_import_status_result_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:31926:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#31926 |     if (arg1) (arg1)->result = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:31902:17: note: ‘arg2’ was declared here
#31902 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#31924|     {
#31925|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#31926|->     if (arg1) (arg1)->result = arg2;
#31927|       SWIG_PYTHON_THREAD_END_ALLOW;
#31928|     }

Error: COMPILER_WARNING (CWE-457): [#def27]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_receive_keys_start’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:33897:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#33897 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:33825:10: note: ‘size2’ was declared here
#33825 |   size_t size2 ;
#      |          ^~~~~
#33895|       size_t i;
#33896|       free(vector2);
#33897|->     for (i = 0; i < size2; i++)
#33898|       Py_XDECREF(pyVector2[i]);
#33899|     }

Error: COMPILER_WARNING (CWE-457): [#def28]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_receive_keys’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:33983:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#33983 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:33911:10: note: ‘size2’ was declared here
#33911 |   size_t size2 ;
#      |          ^~~~~
#33981|       size_t i;
#33982|       free(vector2);
#33983|->     for (i = 0; i < size2; i++)
#33984|       Py_XDECREF(pyVector2[i]);
#33985|     }

Error: COMPILER_WARNING (CWE-457): [#def29]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_export_ext_start’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:34776:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#34776 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:34571:10: note: ‘size2’ was declared here
#34571 |   size_t size2 ;
#      |          ^~~~~
#34774|       size_t i;
#34775|       free(vector2);
#34776|->     for (i = 0; i < size2; i++)
#34777|       Py_XDECREF(pyVector2[i]);
#34778|     }

Error: COMPILER_WARNING (CWE-457): [#def30]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_export_ext’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:35092:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#35092 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:34887:10: note: ‘size2’ was declared here
#34887 |   size_t size2 ;
#      |          ^~~~~
#35090|       size_t i;
#35091|       free(vector2);
#35092|->     for (i = 0; i < size2; i++)
#35093|       Py_XDECREF(pyVector2[i]);
#35094|     }

Error: COMPILER_WARNING (CWE-457): [#def31]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_keylist_ext_start’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:40428:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#40428 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:40342:10: note: ‘size2’ was declared here
#40342 |   size_t size2 ;
#      |          ^~~~~
#40426|       size_t i;
#40427|       free(vector2);
#40428|->     for (i = 0; i < size2; i++)
#40429|       Py_XDECREF(pyVector2[i]);
#40430|     }

Error: COMPILER_WARNING (CWE-457): [#def32]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_spawn_start’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:41997:19: warning[-Wmaybe-uninitialized]: ‘size3’ may be used uninitialized
#41997 |     for (i = 0; i < size3; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:41872:10: note: ‘size3’ was declared here
#41872 |   size_t size3 ;
#      |          ^~~~~
#41995|       size_t i;
#41996|       free(vector3);
#41997|->     for (i = 0; i < size3; i++)
#41998|       Py_XDECREF(pyVector3[i]);
#41999|     }

Error: COMPILER_WARNING (CWE-457): [#def33]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_spawn’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:42142:19: warning[-Wmaybe-uninitialized]: ‘size3’ may be used uninitialized
#42142 |     for (i = 0; i < size3; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:42017:10: note: ‘size3’ was declared here
#42017 |   size_t size3 ;
#      |          ^~~~~
#42140|       size_t i;
#42141|       free(vector3);
#42142|->     for (i = 0; i < size3; i++)
#42143|       Py_XDECREF(pyVector3[i]);
#42144|     }

Error: COMPILER_WARNING (CWE-457): [#def34]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_op_assuan_result_err_set’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:48533:27: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#48533 |     if (arg1) (arg1)->err = arg2;
#      |               ~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/gpgme_wrap.c:48509:17: note: ‘arg2’ was declared here
#48509 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#48531|     {
#48532|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#48533|->     if (arg1) (arg1)->err = arg2;
#48534|       SWIG_PYTHON_THREAD_END_ALLOW;
#48535|     }

Error: COMPILER_WARNING (CWE-477): [#def35]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/helpers.c: scope_hint: In function ‘_gpg_stash_callback_exception’
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/helpers.c:119:3: warning[-Wdeprecated-declarations]: ‘PyWeakref_GetObject’ is deprecated
#  119 |   self = PyWeakref_GetObject(weak_self);
#      |   ^~~~
/usr/include/python3.14/Python.h:123: included_from: Included from here.
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/helpers.c:30: included_from: Included from here.
/usr/include/python3.14/weakrefobject.h:30:44: note: declared here
#   30 | Py_DEPRECATED(3.13) PyAPI_FUNC(PyObject *) PyWeakref_GetObject(PyObject *ref);
#      |                                            ^~~~~~~~~~~~~~~~~~~
#  117|     }
#  118|   
#  119|->   self = PyWeakref_GetObject(weak_self);
#  120|     /* self only has a borrowed reference.  */
#  121|     if (self == Py_None) {

Error: COMPILER_WARNING (CWE-477): [#def36]
gpgme-1.24.3/build-qt6/lang/python/python3.14-gpg/helpers.c:119:3: warning[-Wdeprecated-declarations]: ‘PyWeakref_GetObject’ is deprecated
#  117|     }
#  118|   
#  119|->   self = PyWeakref_GetObject(weak_self);
#  120|     /* self only has a borrowed reference.  */
#  121|     if (self == Py_None) {

Error: CPPCHECK_WARNING (CWE-457): [#def37]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:873: warning[uninitvar]: Uninitialized variable: buff
#  871|       *r = 0;
#  872|     }
#  873|->   return buff;
#  874|   }
#  875|   

Error: CPPCHECK_WARNING (CWE-476): [#def38]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:1902: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1900|       SwigPyClientData *data = (SwigPyClientData *)malloc(sizeof(SwigPyClientData));
# 1901|       /* the klass element */
# 1902|->     data->klass = obj;
# 1903|       SWIG_Py_INCREF(data->klass);
# 1904|       /* the newraw method and newargs arguments used to create a new raw instance */

Error: CPPCHECK_WARNING (CWE-476): [#def39]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:1903: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1901|       /* the klass element */
# 1902|       data->klass = obj;
# 1903|->     SWIG_Py_INCREF(data->klass);
# 1904|       /* the newraw method and newargs arguments used to create a new raw instance */
# 1905|       if (PyClass_Check(obj)) {

Error: COMPILER_WARNING (CWE-457): [#def40]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:4196:10: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
# 4196 |     *obj = value;
#      |     ~~~~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_error_t_p_assign’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:49246:17: note: ‘arg2’ was declared here
#49246 |   gpgme_error_t arg2 ;
#      |                 ^~~~
# 4194|   
# 4195|     static void gpgme_error_t_p_assign(gpgme_error_t *obj, gpgme_error_t value) {
# 4196|->     *obj = value;
# 4197|     }
# 4198|   

Error: COMPILER_WARNING (CWE-457): [#def41]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_data_seek’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:4394:14: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
# 4394 |     result = gpgme_data_seek(arg1,arg2,arg3);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:4355:9: note: ‘arg2’ was declared here
# 4355 |   off_t arg2 ;
#      |         ^~~~
# 4392|     {
# 4393|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 4394|->     result = gpgme_data_seek(arg1,arg2,arg3);
# 4395|       SWIG_PYTHON_THREAD_END_ALLOW;
# 4396|     }

Error: COMPILER_WARNING (CWE-457): [#def42]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_strerror’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:4954:22: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 4954 |     result = (char *)gpgme_strerror(arg1);
#      |                      ^~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:4935:17: note: ‘arg1’ was declared here
# 4935 |   gpgme_error_t arg1 ;
#      |                 ^~~~
# 4952|     {
# 4953|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 4954|->     result = (char *)gpgme_strerror(arg1);
# 4955|       SWIG_PYTHON_THREAD_END_ALLOW;
# 4956|     }

Error: COMPILER_WARNING (CWE-457): [#def43]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_strerror_r’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:5009:14: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5009 |     result = (int)gpgme_strerror_r(arg1,arg2,arg3);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:4966:15: note: ‘arg1’ was declared here
# 4966 |   gpg_error_t arg1 ;
#      |               ^~~~
# 5007|     {
# 5008|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5009|->     result = (int)gpgme_strerror_r(arg1,arg2,arg3);
# 5010|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5011|     }

Error: COMPILER_WARNING (CWE-457): [#def44]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_strsource’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:5050:22: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5050 |     result = (char *)gpgme_strsource(arg1);
#      |                      ^~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:5031:17: note: ‘arg1’ was declared here
# 5031 |   gpgme_error_t arg1 ;
#      |                 ^~~~
# 5048|     {
# 5049|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5050|->     result = (char *)gpgme_strsource(arg1);
# 5051|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5052|     }

Error: COMPILER_WARNING (CWE-457): [#def45]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_err_code_to_errno’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:5111:14: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5111 |     result = (int)gpgme_err_code_to_errno(arg1);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:5092:20: note: ‘arg1’ was declared here
# 5092 |   gpgme_err_code_t arg1 ;
#      |                    ^~~~
# 5109|     {
# 5110|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5111|->     result = (int)gpgme_err_code_to_errno(arg1);
# 5112|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5113|     }

Error: COMPILER_WARNING (CWE-457): [#def46]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_err_make_from_errno’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:5196:14: warning[-Wmaybe-uninitialized]: ‘arg1’ may be used uninitialized
# 5196 |     result = gpgme_err_make_from_errno(arg1,arg2);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:5170:22: note: ‘arg1’ was declared here
# 5170 |   gpgme_err_source_t arg1 ;
#      |                      ^~~~
# 5194|     {
# 5195|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 5196|->     result = gpgme_err_make_from_errno(arg1,arg2);
# 5197|       SWIG_PYTHON_THREAD_END_ALLOW;
# 5198|     }

Error: COMPILER_WARNING (CWE-457): [#def47]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_key_sig_status_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:9000:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
# 9000 |     if (arg1) (arg1)->status = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:8976:17: note: ‘arg2’ was declared here
# 8976 |   gpgme_error_t arg2 ;
#      |                 ^~~~
# 8998|     {
# 8999|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
# 9000|->     if (arg1) (arg1)->status = arg2;
# 9001|       SWIG_PYTHON_THREAD_END_ALLOW;
# 9002|     }

Error: COMPILER_WARNING (CWE-457): [#def48]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_invalid_key_reason_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:13272:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#13272 |     if (arg1) (arg1)->reason = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:13248:17: note: ‘arg2’ was declared here
#13248 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#13270|     {
#13271|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#13272|->     if (arg1) (arg1)->reason = arg2;
#13273|       SWIG_PYTHON_THREAD_END_ALLOW;
#13274|     }

Error: COMPILER_WARNING (CWE-457): [#def49]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_io_event_done_data_err_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:14948:27: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#14948 |     if (arg1) (arg1)->err = arg2;
#      |               ~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:14924:17: note: ‘arg2’ was declared here
#14924 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#14946|     {
#14947|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#14948|->     if (arg1) (arg1)->err = arg2;
#14949|       SWIG_PYTHON_THREAD_END_ALLOW;
#14950|     }

Error: COMPILER_WARNING (CWE-457): [#def50]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_io_event_done_data_op_err_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:15015:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#15015 |     if (arg1) (arg1)->op_err = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:14991:17: note: ‘arg2’ was declared here
#14991 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#15013|     {
#15014|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#15015|->     if (arg1) (arg1)->op_err = arg2;
#15016|       SWIG_PYTHON_THREAD_END_ALLOW;
#15017|     }

Error: CPPCHECK_WARNING (CWE-457): [#def51]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:16592: error[legacyUninitvar]: Uninitialized variable: arg2
#16590|     {
#16591|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#16592|->     result = gpgme_data_new_from_estream(arg1,arg2);
#16593|       SWIG_PYTHON_THREAD_END_ALLOW;
#16594|     }

Error: COMPILER_WARNING (CWE-457): [#def52]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_data_new_from_filepart’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:17004:14: warning[-Wmaybe-uninitialized]: ‘arg4’ may be used uninitialized
#17004 |     result = gpgme_data_new_from_filepart(arg1,(char const *)arg2,arg3,arg4,arg5);
#      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:16940:9: note: ‘arg4’ was declared here
#16940 |   off_t arg4 ;
#      |         ^~~~
#17002|     {
#17003|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#17004|->     result = gpgme_data_new_from_filepart(arg1,(char const *)arg2,arg3,arg4,arg5);
#17005|       SWIG_PYTHON_THREAD_END_ALLOW;
#17006|     }

Error: COMPILER_WARNING (CWE-457): [#def53]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_recipient_status_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:21930:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#21930 |     if (arg1) (arg1)->status = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:21906:17: note: ‘arg2’ was declared here
#21906 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#21928|     {
#21929|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#21930|->     if (arg1) (arg1)->status = arg2;
#21931|       SWIG_PYTHON_THREAD_END_ALLOW;
#21932|     }

Error: COMPILER_WARNING (CWE-457): [#def54]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_signature_status_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:27621:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#27621 |     if (arg1) (arg1)->status = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:27597:17: note: ‘arg2’ was declared here
#27597 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#27619|     {
#27620|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#27621|->     if (arg1) (arg1)->status = arg2;
#27622|       SWIG_PYTHON_THREAD_END_ALLOW;
#27623|     }

Error: COMPILER_WARNING (CWE-457): [#def55]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_signature_validity_reason_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:28320:39: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#28320 |     if (arg1) (arg1)->validity_reason = arg2;
#      |               ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:28296:17: note: ‘arg2’ was declared here
#28296 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#28318|     {
#28319|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#28320|->     if (arg1) (arg1)->validity_reason = arg2;
#28321|       SWIG_PYTHON_THREAD_END_ALLOW;
#28322|     }

Error: COMPILER_WARNING (CWE-457): [#def56]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_import_status_result_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:31926:30: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#31926 |     if (arg1) (arg1)->result = arg2;
#      |               ~~~~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:31902:17: note: ‘arg2’ was declared here
#31902 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#31924|     {
#31925|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#31926|->     if (arg1) (arg1)->result = arg2;
#31927|       SWIG_PYTHON_THREAD_END_ALLOW;
#31928|     }

Error: COMPILER_WARNING (CWE-457): [#def57]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_receive_keys_start’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:33897:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#33897 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:33825:10: note: ‘size2’ was declared here
#33825 |   size_t size2 ;
#      |          ^~~~~
#33895|       size_t i;
#33896|       free(vector2);
#33897|->     for (i = 0; i < size2; i++)
#33898|       Py_XDECREF(pyVector2[i]);
#33899|     }

Error: COMPILER_WARNING (CWE-457): [#def58]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_receive_keys’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:33983:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#33983 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:33911:10: note: ‘size2’ was declared here
#33911 |   size_t size2 ;
#      |          ^~~~~
#33981|       size_t i;
#33982|       free(vector2);
#33983|->     for (i = 0; i < size2; i++)
#33984|       Py_XDECREF(pyVector2[i]);
#33985|     }

Error: COMPILER_WARNING (CWE-457): [#def59]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_export_ext_start’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:34776:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#34776 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:34571:10: note: ‘size2’ was declared here
#34571 |   size_t size2 ;
#      |          ^~~~~
#34774|       size_t i;
#34775|       free(vector2);
#34776|->     for (i = 0; i < size2; i++)
#34777|       Py_XDECREF(pyVector2[i]);
#34778|     }

Error: COMPILER_WARNING (CWE-457): [#def60]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_export_ext’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:35092:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#35092 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:34887:10: note: ‘size2’ was declared here
#34887 |   size_t size2 ;
#      |          ^~~~~
#35090|       size_t i;
#35091|       free(vector2);
#35092|->     for (i = 0; i < size2; i++)
#35093|       Py_XDECREF(pyVector2[i]);
#35094|     }

Error: COMPILER_WARNING (CWE-457): [#def61]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_keylist_ext_start’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:40428:19: warning[-Wmaybe-uninitialized]: ‘size2’ may be used uninitialized
#40428 |     for (i = 0; i < size2; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:40342:10: note: ‘size2’ was declared here
#40342 |   size_t size2 ;
#      |          ^~~~~
#40426|       size_t i;
#40427|       free(vector2);
#40428|->     for (i = 0; i < size2; i++)
#40429|       Py_XDECREF(pyVector2[i]);
#40430|     }

Error: COMPILER_WARNING (CWE-457): [#def62]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_spawn_start’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:41997:19: warning[-Wmaybe-uninitialized]: ‘size3’ may be used uninitialized
#41997 |     for (i = 0; i < size3; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:41872:10: note: ‘size3’ was declared here
#41872 |   size_t size3 ;
#      |          ^~~~~
#41995|       size_t i;
#41996|       free(vector3);
#41997|->     for (i = 0; i < size3; i++)
#41998|       Py_XDECREF(pyVector3[i]);
#41999|     }

Error: COMPILER_WARNING (CWE-457): [#def63]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap_gpgme_op_spawn’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:42142:19: warning[-Wmaybe-uninitialized]: ‘size3’ may be used uninitialized
#42142 |     for (i = 0; i < size3; i++)
#      |                 ~~^~~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:42017:10: note: ‘size3’ was declared here
#42017 |   size_t size3 ;
#      |          ^~~~~
#42140|       size_t i;
#42141|       free(vector3);
#42142|->     for (i = 0; i < size3; i++)
#42143|       Py_XDECREF(pyVector3[i]);
#42144|     }

Error: COMPILER_WARNING (CWE-457): [#def64]
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c: scope_hint: In function ‘_wrap__gpgme_op_assuan_result_err_set’
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:48533:27: warning[-Wmaybe-uninitialized]: ‘arg2’ may be used uninitialized
#48533 |     if (arg1) (arg1)->err = arg2;
#      |               ~~~~~~~~~~~~^~~~~~
gpgme-1.24.3/build/lang/python/python3.14-gpg/gpgme_wrap.c:48509:17: note: ‘arg2’ was declared here
#48509 |   gpgme_error_t arg2 ;
#      |                 ^~~~
#48531|     {
#48532|       SWIG_PYTHON_THREAD_BEGIN_ALLOW;
#48533|->     if (arg1) (arg1)->err = arg2;
#48534|       SWIG_PYTHON_THREAD_END_ALLOW;
#48535|     }

Error: COMPILER_WARNING (CWE-477): [#def65]
gpgme-1.24.3/build/lang/python/python3.14-gpg/helpers.c: scope_hint: In function ‘_gpg_stash_callback_exception’
gpgme-1.24.3/build/lang/python/python3.14-gpg/helpers.c:119:3: warning[-Wdeprecated-declarations]: ‘PyWeakref_GetObject’ is deprecated
#  119 |   self = PyWeakref_GetObject(weak_self);
#      |   ^~~~
/usr/include/python3.14/Python.h:123: included_from: Included from here.
gpgme-1.24.3/build/lang/python/python3.14-gpg/helpers.c:30: included_from: Included from here.
/usr/include/python3.14/weakrefobject.h:30:44: note: declared here
#   30 | Py_DEPRECATED(3.13) PyAPI_FUNC(PyObject *) PyWeakref_GetObject(PyObject *ref);
#      |                                            ^~~~~~~~~~~~~~~~~~~
#  117|     }
#  118|   
#  119|->   self = PyWeakref_GetObject(weak_self);
#  120|     /* self only has a borrowed reference.  */
#  121|     if (self == Py_None) {

Error: COMPILER_WARNING (CWE-477): [#def66]
gpgme-1.24.3/build/lang/python/python3.14-gpg/helpers.c:119:3: warning[-Wdeprecated-declarations]: ‘PyWeakref_GetObject’ is deprecated
#  117|     }
#  118|   
#  119|->   self = PyWeakref_GetObject(weak_self);
#  120|     /* self only has a borrowed reference.  */
#  121|     if (self == Py_None) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def67]
gpgme-1.24.3/doc/mkdefsinc.c:199:23: warning[-Wanalyzer-malloc-leak]: leak of ‘opt_date’
gpgme-1.24.3/doc/mkdefsinc.c:142:1: enter_function: entry to ‘main’
gpgme-1.24.3/doc/mkdefsinc.c:155:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/doc/mkdefsinc.c:158:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/doc/mkdefsinc.c:163:17: branch_false: ...to here
gpgme-1.24.3/doc/mkdefsinc.c:163:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/doc/mkdefsinc.c:174:17: branch_false: ...to here
gpgme-1.24.3/doc/mkdefsinc.c:198:26: call_function: calling ‘xstrdup’ from ‘main’
gpgme-1.24.3/doc/mkdefsinc.c:198:26: return_function: returning to ‘main’ from ‘xstrdup’
gpgme-1.24.3/doc/mkdefsinc.c:155:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/doc/mkdefsinc.c:158:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/doc/mkdefsinc.c:163:17: branch_false: ...to here
gpgme-1.24.3/doc/mkdefsinc.c:163:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/doc/mkdefsinc.c:174:17: branch_false: ...to here
gpgme-1.24.3/doc/mkdefsinc.c:198:26: call_function: calling ‘xstrdup’ from ‘main’
gpgme-1.24.3/doc/mkdefsinc.c:198:26: return_function: returning to ‘main’ from ‘xstrdup’
gpgme-1.24.3/doc/mkdefsinc.c:199:23: danger: ‘opt_date’ leaks here; was allocated at [(12)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/11)
#  197|               {
#  198|                 opt_date = xstrdup (*argv);
#  199|->               argc--; argv++;
#  200|               }
#  201|           }

Error: CPPCHECK_WARNING (CWE-457): [#def68]
gpgme-1.24.3/doc/mkdefsinc.c:289: warning[uninitvar]: Uninitialized variable: monthoff
#  287|   
#  288|     printf ("@set UPDATED %s\n", opt_date);
#  289|->   printf ("@set UPDATED-MONTH %s\n", opt_date + monthoff);
#  290|     printf ("@set EDITION %s\n", PACKAGE_VERSION);
#  291|     printf ("@set VERSION %s\n", PACKAGE_VERSION);

Error: COMPILER_WARNING (CWE-477): [#def69]
gpgme-1.24.3/lang/qt/src/qgpgmeaddexistingsubkeyjob.cpp: scope_hint: In function 'QGpgME::_detail::ThreadedJobMixin<QGpgME::AddExistingSubkeyJob>::result_type add_subkey(GpgME::Context*, const GpgME::Key&, const GpgME::Subkey&)'
gpgme-1.24.3/lang/qt/src/qgpgmeaddexistingsubkeyjob.cpp:67:58: warning[-Wdeprecated-declarations]: 'static QDateTime QDateTime::fromSecsSinceEpoch(qint64, Qt::TimeSpec, int)' is deprecated: Pass QTimeZone instead of time-spec, offset
#   67 |         const auto expiry = QDateTime::fromSecsSinceEpoch(uint_least32_t(subkey.expirationTime()),
#      |                             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#   68 |                                                           Qt::UTC).toString(u"yyyyMMdd'T'hhmmss").toStdString();
#      |                                                           ~~~~~~~~
/usr/include/qt6/QtCore/QDateTime:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/src/qgpgmeaddexistingsubkeyjob.cpp:42: included_from: Included from here.
/usr/include/qt6/QtCore/qdatetime.h:491:22: note: declared here
#  491 |     static QDateTime fromSecsSinceEpoch(qint64 secs, Qt::TimeSpec spec, int offsetFromUtc = 0);
#      |                      ^~~~~~~~~~~~~~~~~~
#   65|   
#   66|       if (!subkey.neverExpires()) {
#   67|->         const auto expiry = QDateTime::fromSecsSinceEpoch(uint_least32_t(subkey.expirationTime()),
#   68|                                                             Qt::UTC).toString(u"yyyyMMdd'T'hhmmss").toStdString();
#   69|           interactor->setExpiry(expiry);

Error: COMPILER_WARNING (CWE-477): [#def70]
gpgme-1.24.3/lang/qt/src/qgpgmenewcryptoconfig.cpp: scope_hint: In member function 'virtual void QGpgMENewCryptoConfig::sync(bool)'
gpgme-1.24.3/lang/qt/src/qgpgmenewcryptoconfig.cpp:130:77: warning[-Wdeprecated-declarations]: 'constexpr typename std::add_const<_Tp>::type& qAsConst(T&) [with T = QHash<QString, std::shared_ptr<QGpgMENewCryptoConfigComponent> >; typename std::add_const<_Tp>::type = const QHash<QString, std::shared_ptr<QGpgMENewCryptoConfigComponent> >]' is deprecated: Use std::as_const() instead.
#  130 |     for (const std::shared_ptr<QGpgMENewCryptoConfigComponent> &c : qAsConst(m_componentsByName)) {
#      |                                                                     ~~~~~~~~^~~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/qforeach.h:11: included_from: Included from here.
/usr/include/qt6/QtCore/qglobal.h:55: included_from: Included from here.
/usr/include/qt6/QtCore/qnamespace.h:12: included_from: Included from here.
/usr/include/qt6/QtCore/qbytearray.h:10: included_from: Included from here.
/usr/include/qt6/QtCore/qurl.h:9: included_from: Included from here.
/usr/include/qt6/QtCore/QUrl:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/src/cryptoconfig.h:43: included_from: Included from here.
gpgme-1.24.3/lang/qt/src/qgpgmenewcryptoconfig.h:39: included_from: Included from here.
gpgme-1.24.3/lang/qt/src/qgpgmenewcryptoconfig.cpp:39: included_from: Included from here.
/usr/include/qt6/QtCore/qttypetraits.h:40:45: note: declared here
#   40 | constexpr typename std::add_const<T>::type &qAsConst(T &t) noexcept { return t; }
#      |                                             ^~~~~~~~
#  128|   void QGpgMENewCryptoConfig::sync(bool runtime)
#  129|   {
#  130|->     for (const std::shared_ptr<QGpgMENewCryptoConfigComponent> &c : qAsConst(m_componentsByName)) {
#  131|           c->sync(runtime);
#  132|       }

Error: COMPILER_WARNING (CWE-252): [#def71]
gpgme-1.24.3/lang/qt/tests/run-decryptverifyjob.cpp: scope_hint: In function ‘int main(int, char**)’
gpgme-1.24.3/lang/qt/tests/run-decryptverifyjob.cpp:117:21: warning[-Wunused-result]: ignoring return value of ‘bool QFile::open(FILE*, QIODeviceBase::OpenMode, QFileDevice::FileHandleFlags)’, declared with attribute ‘nodiscard’
#  117 |         output->open(stdout, QIODevice::WriteOnly);
#      |         ~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/QFile:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/tests/run-decryptverifyjob.cpp:44: included_from: Included from here.
/usr/include/qt6/QtCore/qfile.h:293:32: note: declared here
#  293 |     QFILE_MAYBE_NODISCARD bool open(FILE *f, OpenMode ioFlags, FileHandleFlags handleFlags=DontCloseHandle);
#      |                                ^~~~
#  115|       if (options.outputFile.isEmpty() || options.outputFile == QLatin1String{"-"}) {
#  116|           output.reset(new QFile);
#  117|->         output->open(stdout, QIODevice::WriteOnly);
#  118|       } else {
#  119|           if (QFile::exists(options.outputFile)) {

Error: COMPILER_WARNING (CWE-252): [#def72]
gpgme-1.24.3/lang/qt/tests/run-encryptarchivejob.cpp: scope_hint: In function ‘int main(int, char**)’
gpgme-1.24.3/lang/qt/tests/run-encryptarchivejob.cpp:143:21: warning[-Wunused-result]: ignoring return value of ‘bool QFile::open(FILE*, QIODeviceBase::OpenMode, QFileDevice::FileHandleFlags)’, declared with attribute ‘nodiscard’
#  143 |         output->open(stdout, QIODevice::WriteOnly);
#      |         ~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/qdir.h:11: included_from: Included from here.
/usr/include/qt6/QtCore/QDir:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/tests/run-encryptarchivejob.cpp:45: included_from: Included from here.
/usr/include/qt6/QtCore/qfile.h:293:32: note: declared here
#  293 |     QFILE_MAYBE_NODISCARD bool open(FILE *f, OpenMode ioFlags, FileHandleFlags handleFlags=DontCloseHandle);
#      |                                ^~~~
#  141|       if (options.archiveName.isEmpty() || options.archiveName == QLatin1String{"-"}) {
#  142|           output.reset(new QFile);
#  143|->         output->open(stdout, QIODevice::WriteOnly);
#  144|       } else {
#  145|           outputFilePath = checkOutputFilePath(options.archiveName, options.baseDirectory);

Error: COMPILER_WARNING (CWE-252): [#def73]
gpgme-1.24.3/lang/qt/tests/run-encryptjob.cpp: scope_hint: In function ‘int main(int, char**)’
gpgme-1.24.3/lang/qt/tests/run-encryptjob.cpp:121:21: warning[-Wunused-result]: ignoring return value of ‘bool QFile::open(FILE*, QIODeviceBase::OpenMode, QFileDevice::FileHandleFlags)’, declared with attribute ‘nodiscard’
#  121 |         output->open(stdout, QIODevice::WriteOnly);
#      |         ~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/QFile:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/tests/run-encryptjob.cpp:45: included_from: Included from here.
/usr/include/qt6/QtCore/qfile.h:293:32: note: declared here
#  293 |     QFILE_MAYBE_NODISCARD bool open(FILE *f, OpenMode ioFlags, FileHandleFlags handleFlags=DontCloseHandle);
#      |                                ^~~~
#  119|       if (options.outputFile.isEmpty() || options.outputFile == QLatin1String{"-"}) {
#  120|           output.reset(new QFile);
#  121|->         output->open(stdout, QIODevice::WriteOnly);
#  122|       } else {
#  123|           if (QFile::exists(options.outputFile)) {

Error: COMPILER_WARNING (CWE-252): [#def74]
gpgme-1.24.3/lang/qt/tests/run-signarchivejob.cpp: scope_hint: In function ‘int main(int, char**)’
gpgme-1.24.3/lang/qt/tests/run-signarchivejob.cpp:137:21: warning[-Wunused-result]: ignoring return value of ‘bool QFile::open(FILE*, QIODeviceBase::OpenMode, QFileDevice::FileHandleFlags)’, declared with attribute ‘nodiscard’
#  137 |         output->open(stdout, QIODevice::WriteOnly);
#      |         ~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/qdir.h:11: included_from: Included from here.
/usr/include/qt6/QtCore/QDir:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/tests/run-signarchivejob.cpp:44: included_from: Included from here.
/usr/include/qt6/QtCore/qfile.h:293:32: note: declared here
#  293 |     QFILE_MAYBE_NODISCARD bool open(FILE *f, OpenMode ioFlags, FileHandleFlags handleFlags=DontCloseHandle);
#      |                                ^~~~
#  135|       if (options.archiveName.isEmpty() || options.archiveName == QLatin1String{"-"}) {
#  136|           output.reset(new QFile);
#  137|->         output->open(stdout, QIODevice::WriteOnly);
#  138|       } else {
#  139|           outputFilePath = checkOutputFilePath(options.archiveName, options.baseDirectory);

Error: COMPILER_WARNING (CWE-252): [#def75]
gpgme-1.24.3/lang/qt/tests/run-signjob.cpp: scope_hint: In function ‘int main(int, char**)’
gpgme-1.24.3/lang/qt/tests/run-signjob.cpp:124:21: warning[-Wunused-result]: ignoring return value of ‘bool QFile::open(FILE*, QIODeviceBase::OpenMode, QFileDevice::FileHandleFlags)’, declared with attribute ‘nodiscard’
#  124 |         output->open(stdout, QIODevice::WriteOnly);
#      |         ~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/QFile:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/tests/run-signjob.cpp:44: included_from: Included from here.
/usr/include/qt6/QtCore/qfile.h:293:32: note: declared here
#  293 |     QFILE_MAYBE_NODISCARD bool open(FILE *f, OpenMode ioFlags, FileHandleFlags handleFlags=DontCloseHandle);
#      |                                ^~~~
#  122|       if (options.outputFile.isEmpty() || options.outputFile == QLatin1String{"-"}) {
#  123|           output.reset(new QFile);
#  124|->         output->open(stdout, QIODevice::WriteOnly);
#  125|       } else {
#  126|           if (QFile::exists(options.outputFile) && !options.appendSignature) {

Error: COMPILER_WARNING (CWE-252): [#def76]
gpgme-1.24.3/lang/qt/tests/run-verifyopaquejob.cpp: scope_hint: In function ‘int main(int, char**)’
gpgme-1.24.3/lang/qt/tests/run-verifyopaquejob.cpp:116:21: warning[-Wunused-result]: ignoring return value of ‘bool QFile::open(FILE*, QIODeviceBase::OpenMode, QFileDevice::FileHandleFlags)’, declared with attribute ‘nodiscard’
#  116 |         output->open(stdout, QIODevice::WriteOnly);
#      |         ~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/qt6/QtCore/QFile:1: included_from: Included from here.
gpgme-1.24.3/lang/qt/tests/run-verifyopaquejob.cpp:44: included_from: Included from here.
/usr/include/qt6/QtCore/qfile.h:293:32: note: declared here
#  293 |     QFILE_MAYBE_NODISCARD bool open(FILE *f, OpenMode ioFlags, FileHandleFlags handleFlags=DontCloseHandle);
#      |                                ^~~~
#  114|       if (options.outputFile.isEmpty() || options.outputFile == QLatin1String{"-"}) {
#  115|           output.reset(new QFile);
#  116|->         output->open(stdout, QIODevice::WriteOnly);
#  117|       } else {
#  118|           if (QFile::exists(options.outputFile)) {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def77]
gpgme-1.24.3/src/argparse.c:315:13: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
gpgme-1.24.3/src/argparse.c:1391:1: enter_function: entry to ‘show_version’
gpgme-1.24.3/src/argparse.c:1397:3: call_function: calling ‘writestrings’ from ‘show_version’
#  313|           {
#  314|             if (custom_outfnc)
#  315|->             custom_outfnc (is_error? 2:1, s);
#  316|             else
#  317|               fputs (s, is_error? stderr : stdout);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def78]
gpgme-1.24.3/src/assuan-support.c:289:13: warning[-Wanalyzer-malloc-leak]: leak of 'fd_items'
gpgme-1.24.3/src/assuan-support.c:198:3: branch_true: following 'true' branch (when 'name' is non-NULL)...
gpgme-1.24.3/src/assuan-support.c:207:6: branch_true: ...to here
gpgme-1.24.3/src/assuan-support.c:214:14: acquire_memory: allocated here
gpgme-1.24.3/src/assuan-support.c:215:6: branch_false: following 'false' branch (when 'fd_items' is non-NULL)...
gpgme-1.24.3/src/assuan-support.c:218:6: branch_false: ...to here
gpgme-1.24.3/src/assuan-support.c:227:6: branch_false: following 'false' branch (when 'fd_in == -1')...
gpgme-1.24.3/src/assuan-support.c:233:6: branch_false: ...to here
gpgme-1.24.3/src/assuan-support.c:233:6: branch_false: following 'false' branch (when 'fd_out == -1')...
gpgme-1.24.3/src/assuan-support.c:239:11: branch_false: ...to here
gpgme-1.24.3/src/assuan-support.c:289:13: danger: 'fd_items' leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  287|     if (!err)
#  288|       {
#  289|->       err = _gpgme_io_spawn (name, (char*const*)argv,
#  290|                                (IOSPAWN_FLAG_NOCLOSE | IOSPAWN_FLAG_DETACHED),
#  291|                                fd_items, atfork, atforkvalue, r_pid);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def79]
gpgme-1.24.3/src/conversion.c:75:11: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gpgme-1.24.3/src/conversion.c:95:1: enter_function: entry to '_gpgme_strconcat'
gpgme-1.24.3/src/conversion.c:100:6: branch_false: following 'false' branch (when 's1' is non-NULL)...
gpgme-1.24.3/src/conversion.c:104:7: branch_false: ...to here
gpgme-1.24.3/src/conversion.c:104:7: acquire_resource: 'va_start' called here
gpgme-1.24.3/src/conversion.c:105:16: call_function: calling 'do_strconcat' from '_gpgme_strconcat'
#   73|         if (argc >= DIM (argv)-1)
#   74|           {
#   75|->           gpg_err_set_errno (EINVAL);
#   76|             return NULL;
#   77|           }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def80]
gpgme-1.24.3/src/data-compat.c:63:9: warning[-Wanalyzer-file-leak]: leak of FILE 'stream'
gpgme-1.24.3/src/data-compat.c:54:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-compat.c:57:6: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:57:6: branch_true: following 'true' branch (when 'fname' is non-NULL)...
gpgme-1.24.3/src/data-compat.c:58:14: branch_true: ...to here
gpgme-1.24.3/src/data-compat.c:58:14: acquire_resource: opened here
gpgme-1.24.3/src/data-compat.c:59:6: branch_false: following 'false' branch (when 'stream' is non-NULL)...
gpgme-1.24.3/src/data-compat.c:63:9: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:63:9: danger: 'stream' leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   61|   
#   62|   #ifdef HAVE_FSEEKO
#   63|->   res = fseeko (stream, offset, SEEK_SET);
#   64|   #else
#   65|     /* FIXME: Check for overflow, or at least bail at compilation.  */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def81]
gpgme-1.24.3/src/data-compat.c:63:9: warning[-Wanalyzer-malloc-leak]: leak of 'stream'
gpgme-1.24.3/src/data-compat.c:54:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-compat.c:57:6: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:57:6: branch_true: following 'true' branch (when 'fname' is non-NULL)...
gpgme-1.24.3/src/data-compat.c:58:14: branch_true: ...to here
gpgme-1.24.3/src/data-compat.c:58:14: acquire_memory: allocated here
gpgme-1.24.3/src/data-compat.c:59:6: branch_false: following 'false' branch (when 'stream' is non-NULL)...
gpgme-1.24.3/src/data-compat.c:63:9: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:63:9: danger: 'stream' leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#   61|   
#   62|   #ifdef HAVE_FSEEKO
#   63|->   res = fseeko (stream, offset, SEEK_SET);
#   64|   #else
#   65|     /* FIXME: Check for overflow, or at least bail at compilation.  */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def82]
gpgme-1.24.3/src/data-compat.c:101:9: warning[-Wanalyzer-malloc-leak]: leak of 'buf'
gpgme-1.24.3/src/data-compat.c:54:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-compat.c:57:6: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:59:6: branch_false: following 'false' branch (when 'stream' is non-NULL)...
gpgme-1.24.3/src/data-compat.c:63:9: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:69:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-compat.c:77:9: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:77:9: acquire_memory: allocated here
gpgme-1.24.3/src/data-compat.c:78:6: branch_false: following 'false' branch (when 'buf' is non-NULL)...
 branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:88:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-compat.c:98:6: branch_false: ...to here
gpgme-1.24.3/src/data-compat.c:101:9: danger: 'buf' leaks here; was allocated at [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
#   99|       fclose (stream);
#  100|   
#  101|->   err = gpgme_data_new (r_dh);
#  102|     if (err)
#  103|       {

Error: GCC_ANALYZER_WARNING (CWE-465): [#def83]
gpgme-1.24.3/src/data-identify.c:453:18: warning[-Wanalyzer-deref-before-check]: check of 'data' for NULL after already dereferencing it
gpgme-1.24.3/src/data-identify.c:316:6: branch_false: following 'false' branch (when 'datalen > 23')...
gpgme-1.24.3/src/data-identify.c:346:3: branch_false: ...to here
gpgme-1.24.3/src/data-identify.c:441:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-identify.c:453:8: branch_false: ...to here
gpgme-1.24.3/src/data-identify.c:453:18: danger: pointer 'data' is checked for NULL here but it was already dereferenced at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  451|   
#  452|     /* Now check whether there are armor lines.  */
#  453|->   for (s = data; s && *s; s = (*s=='\n')?(s+1):((s=strchr (s,'\n'))?(s+1):s))
#  454|       {
#  455|         if (!strncmp (s, "-----BEGIN ", 11))

Error: GCC_ANALYZER_WARNING (CWE-401): [#def84]
gpgme-1.24.3/src/data-identify.c:516:7: warning[-Wanalyzer-malloc-leak]: leak of 'sample'
gpgme-1.24.3/src/data-identify.c:509:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-identify.c:513:12: branch_false: ...to here
gpgme-1.24.3/src/data-identify.c:513:12: acquire_memory: allocated here
gpgme-1.24.3/src/data-identify.c:514:6: branch_false: following 'false' branch (when 'sample' is non-NULL)...
gpgme-1.24.3/src/data-identify.c:516:7: branch_false: ...to here
gpgme-1.24.3/src/data-identify.c:516:7: danger: 'sample' leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  514|     if (!sample)
#  515|       return GPGME_DATA_TYPE_INVALID; /* Ooops.  */
#  516|->   n = gpgme_data_read (dh, sample, SAMPLE_SIZE - 1);
#  517|     if (n < 0)
#  518|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def85]
gpgme-1.24.3/src/data-mem.c:284:3: warning[-Wanalyzer-malloc-leak]: leak of 'str'
gpgme-1.24.3/src/data-mem.c:237:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-mem.c:245:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-mem.c:252:3: branch_false: ...to here
gpgme-1.24.3/src/data-mem.c:257:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/data-mem.c:259:13: acquire_memory: allocated here
gpgme-1.24.3/src/data-mem.c:260:10: branch_false: following 'false' branch (when 'str' is non-NULL)...
gpgme-1.24.3/src/data-mem.c:267:10: branch_false: ...to here
gpgme-1.24.3/src/data-mem.c:284:3: danger: 'str' leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  282|       *r_len = len;
#  283|   
#  284|->   gpgme_data_release (dh);
#  285|   
#  286|     if (r_len)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def86]
gpgme-1.24.3/src/data-mem.c:287:5: warning[-Wanalyzer-malloc-leak]: leak of 'str'
gpgme-1.24.3/src/data-mem.c:237:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-mem.c:245:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-mem.c:252:3: branch_false: ...to here
gpgme-1.24.3/src/data-mem.c:257:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/data-mem.c:259:13: acquire_memory: allocated here
gpgme-1.24.3/src/data-mem.c:260:10: branch_false: following 'false' branch (when 'str' is non-NULL)...
gpgme-1.24.3/src/data-mem.c:267:10: branch_false: ...to here
gpgme-1.24.3/src/data-mem.c:286:6: branch_true: following 'true' branch (when 'r_len' is non-NULL)...
gpgme-1.24.3/src/data-mem.c:287:5: branch_true: ...to here
gpgme-1.24.3/src/data-mem.c:287:5: danger: 'str' leaks here; was allocated at [(7)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/6)
#  285|   
#  286|     if (r_len)
#  287|->     TRACE_SUC ("buffer=%p, len=%zu", str, *r_len);
#  288|     else
#  289|       TRACE_SUC ("buffer=%p", str);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def87]
gpgme-1.24.3/src/data-mem.c:289:5: warning[-Wanalyzer-malloc-leak]: leak of 'str'
gpgme-1.24.3/src/data-mem.c:237:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-mem.c:245:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data-mem.c:252:3: branch_false: ...to here
gpgme-1.24.3/src/data-mem.c:257:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/data-mem.c:259:13: acquire_memory: allocated here
gpgme-1.24.3/src/data-mem.c:260:10: branch_false: following 'false' branch (when 'str' is non-NULL)...
gpgme-1.24.3/src/data-mem.c:267:10: branch_false: ...to here
gpgme-1.24.3/src/data-mem.c:286:6: branch_false: following 'false' branch (when 'r_len' is NULL)...
gpgme-1.24.3/src/data-mem.c:289:5: branch_false: ...to here
gpgme-1.24.3/src/data-mem.c:289:5: danger: 'str' leaks here; was allocated at [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
#  287|       TRACE_SUC ("buffer=%p, len=%zu", str, *r_len);
#  288|     else
#  289|->     TRACE_SUC ("buffer=%p", str);
#  290|     return str;
#  291|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def88]
gpgme-1.24.3/src/data.c:80:3: warning[-Wanalyzer-malloc-leak]: leak of 'dh'
gpgme-1.24.3/src/data.c:302:1: enter_function: entry to '_gpgme_data_new'
gpgme-1.24.3/src/data.c:307:6: branch_false: following 'false' branch (when 'r_dh' is non-NULL)...
gpgme-1.24.3/src/data.c:310:3: branch_false: ...to here
gpgme-1.24.3/src/data.c:312:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data.c:315:8: branch_false: ...to here
gpgme-1.24.3/src/data.c:315:8: acquire_memory: allocated here
gpgme-1.24.3/src/data.c:316:6: branch_false: following 'false' branch (when 'dh' is non-NULL)...
gpgme-1.24.3/src/data.c:319:3: branch_false: ...to here
gpgme-1.24.3/src/data.c:321:9: call_function: calling 'insert_into_property_table' from '_gpgme_data_new'
#   78|     unsigned int idx;
#   79|   
#   80|->   LOCK (property_table_lock);
#   81|     if (!property_table)
#   82|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def89]
gpgme-1.24.3/src/data.c:130:3: warning[-Wanalyzer-malloc-leak]: leak of 'dh'
gpgme-1.24.3/src/data.c:302:1: enter_function: entry to '_gpgme_data_new'
gpgme-1.24.3/src/data.c:307:6: branch_false: following 'false' branch (when 'r_dh' is non-NULL)...
gpgme-1.24.3/src/data.c:310:3: branch_false: ...to here
gpgme-1.24.3/src/data.c:312:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/data.c:315:8: branch_false: ...to here
gpgme-1.24.3/src/data.c:315:8: acquire_memory: allocated here
gpgme-1.24.3/src/data.c:316:6: branch_false: following 'false' branch (when 'dh' is non-NULL)...
gpgme-1.24.3/src/data.c:319:3: branch_false: ...to here
gpgme-1.24.3/src/data.c:321:9: call_function: calling 'insert_into_property_table' from '_gpgme_data_new'
#  128|   
#  129|    leave:
#  130|->   UNLOCK (property_table_lock);
#  131|     return err;
#  132|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def90]
gpgme-1.24.3/src/data.c:624:14: warning[-Wanalyzer-malloc-leak]: leak of 'malloc((long unsigned int)*dh.io_buffer_size)'
gpgme-1.24.3/src/data.c:619:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/data.c:621:12: branch_true: ...to here
gpgme-1.24.3/src/data.c:621:10: branch_true: following 'true' branch...
gpgme-1.24.3/src/data.c:623:32: branch_true: ...to here
gpgme-1.24.3/src/data.c:623:32: acquire_memory: allocated here
gpgme-1.24.3/src/data.c:624:14: danger: 'malloc((long unsigned int)*dh.io_buffer_size)' leaks here; was allocated at [(5)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/4)
#  622|           {
#  623|             dh->inbound_buffer = malloc (dh->io_buffer_size);
#  624|->           if (!dh->inbound_buffer)
#  625|               return TRACE_ERR (gpg_error_from_syserror ());
#  626|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def91]
gpgme-1.24.3/src/data.c:684:14: warning[-Wanalyzer-malloc-leak]: leak of 'malloc((long unsigned int)*dh.io_buffer_size)'
gpgme-1.24.3/src/data.c:679:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/data.c:681:12: branch_true: ...to here
gpgme-1.24.3/src/data.c:681:10: branch_true: following 'true' branch...
gpgme-1.24.3/src/data.c:683:33: branch_true: ...to here
gpgme-1.24.3/src/data.c:683:33: acquire_memory: allocated here
gpgme-1.24.3/src/data.c:684:14: danger: 'malloc((long unsigned int)*dh.io_buffer_size)' leaks here; was allocated at [(5)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/4)
#  682|           {
#  683|             dh->outbound_buffer = malloc (dh->io_buffer_size);
#  684|->           if (!dh->outbound_buffer)
#  685|               return TRACE_ERR (gpg_error_from_syserror ());
#  686|             dh->outbound_pending = 0;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def92]
gpgme-1.24.3/src/debug.c:334:15: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gpgme-1.24.3/src/debug.c:309:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/debug.c:313:14: branch_false: ...to here
gpgme-1.24.3/src/debug.c:319:3: acquire_resource: 'va_start' called here
gpgme-1.24.3/src/debug.c:333:11: branch_true: following 'true' branch...
gpgme-1.24.3/src/debug.c:334:15: danger: missing call to 'va_end' to match 'va_start' at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  332|       stdinfo = NULL;
#  333|     else if (tagname && strcmp (tagname, XSTRINGIFY (NULL)))
#  334|->     stdinfo = gpgrt_bsprintf ("%s: %s: %s=%p ", func,modestr,tagname,tagvalue);
#  335|     else
#  336|       stdinfo = gpgrt_bsprintf ("%s: %s: ", func, modestr);

Error: GCC_ANALYZER_WARNING (CWE-404): [#def93]
gpgme-1.24.3/src/debug.c:336:15: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gpgme-1.24.3/src/debug.c:309:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/debug.c:313:14: branch_false: ...to here
gpgme-1.24.3/src/debug.c:319:3: acquire_resource: 'va_start' called here
gpgme-1.24.3/src/debug.c:336:15: danger: missing call to 'va_end' to match 'va_start' at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  334|       stdinfo = gpgrt_bsprintf ("%s: %s: %s=%p ", func,modestr,tagname,tagvalue);
#  335|     else
#  336|->     stdinfo = gpgrt_bsprintf ("%s: %s: ", func, modestr);
#  337|   
#  338|     if (format && *format)

Error: GCC_ANALYZER_WARNING (CWE-404): [#def94]
gpgme-1.24.3/src/debug.c:339:16: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gpgme-1.24.3/src/debug.c:309:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/debug.c:313:14: branch_false: ...to here
gpgme-1.24.3/src/debug.c:319:3: acquire_resource: 'va_start' called here
gpgme-1.24.3/src/debug.c:338:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/debug.c:339:16: danger: missing call to 'va_end' to match 'va_start' at [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
#  337|   
#  338|     if (format && *format)
#  339|->     userinfo = gpgrt_vbsprintf (format, arg_ptr);
#  340|     else
#  341|       {

Error: GCC_ANALYZER_WARNING (CWE-404): [#def95]
gpgme-1.24.3/src/debug.c:384:9: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
gpgme-1.24.3/src/debug.c:380:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/debug.c:383:3: branch_false: ...to here
gpgme-1.24.3/src/debug.c:383:3: acquire_resource: 'va_start' called here
gpgme-1.24.3/src/debug.c:384:9: danger: missing call to 'va_end' to match 'va_start' at [(3)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/2)
#  382|   
#  383|     va_start (arg_ptr, format);
#  384|->   res = gpgrt_vasprintf (&toadd, format, arg_ptr);
#  385|     va_end (arg_ptr);
#  386|     if (res < 0)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def96]
gpgme-1.24.3/src/debug.h:94:3: warning[-Wanalyzer-malloc-leak]: leak of 'fpr'
gpgme-1.24.3/src/verify.c:930:1: enter_function: entry to '_gpgme_verify_status_handler'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1019:10: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/verify.c:1021:13: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1021:13: call_function: calling 'parse_tofu_user' from '_gpgme_verify_status_handler'
#   92|   _gpgme_trace_gpgme_error (gpgme_error_t err, const char *file, int line)
#   93|   {
#   94|->   _gpgme_debug (NULL, DEBUG_ENGINE, -1, NULL, NULL, NULL,
#   95|                   "%s:%d: returning error: %s\n",
#   96|                   _gpgme_debug_srcname (file), line, gpgme_strerror (err));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def97]
gpgme-1.24.3/src/debug.h:151:5: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'res'
gpgme-1.24.3/src/posix-io.c:1028:1: enter_function: entry to '_gpgme_io_socket'
gpgme-1.24.3/src/posix-io.c:1035:9: acquire_resource: socket created here
gpgme-1.24.3/src/posix-io.c:1037:10: call_function: calling '_trace_sysres' from '_gpgme_io_socket'
#  149|   {
#  150|     if (res >= 0)
#  151|->     _gpgme_debug (NULL, lvl, 3, func, NULL, NULL, "result=%d", res);
#  152|     else
#  153|       _gpgme_debug (NULL, lvl, -1, NULL, NULL, NULL,

Error: CPPCHECK_WARNING (CWE-457): [#def98]
gpgme-1.24.3/src/decrypt-verify.c:48: warning[uninitvar]: Uninitialized variable: err2
#   46|         || (code == GPGME_STATUS_EOF && gpg_err_code (err) == GPG_ERR_NO_DATA))
#   47|       err2 = _gpgme_verify_status_handler (priv, code, args);
#   48|->   return err ? err : err2;
#   49|   }
#   50|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def99]
gpgme-1.24.3/src/decrypt.c:177:13: warning[-Wanalyzer-malloc-leak]: leak of 'args2'
gpgme-1.24.3/src/decrypt.c:360:1: enter_function: entry to '_gpgme_decrypt_status_handler'
gpgme-1.24.3/src/decrypt.c:374:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/decrypt.c:377:3: branch_false: ...to here
gpgme-1.24.3/src/decrypt.c:461:13: call_function: calling 'parse_status_error' from '_gpgme_decrypt_status_handler'
#  175|   
#  176|     args2 = strdup (args); /* Split modifies the input string. */
#  177|->   nfields = _gpgme_split_fields (args2, field, DIM (field));
#  178|     if (nfields < 1)
#  179|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def100]
gpgme-1.24.3/src/decrypt.c:295:7: warning[-Wanalyzer-malloc-leak]: leak of 'rec'
gpgme-1.24.3/src/decrypt.c:360:1: enter_function: entry to '_gpgme_decrypt_status_handler'
gpgme-1.24.3/src/decrypt.c:374:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/decrypt.c:377:3: branch_false: ...to here
gpgme-1.24.3/src/decrypt.c:467:13: call_function: calling 'parse_enc_to' from '_gpgme_decrypt_status_handler'
#  293|     if (*args)
#  294|       {
#  295|->       gpg_err_set_errno (0);
#  296|         rec->pubkey_algo = _gpgme_map_pk_algo (strtol (args, &tail, 0), protocol);
#  297|         if (errno || args == tail || *tail != ' ')

Error: GCC_ANALYZER_WARNING (CWE-401): [#def101]
gpgme-1.24.3/src/decrypt.c:296:26: warning[-Wanalyzer-malloc-leak]: leak of 'rec'
gpgme-1.24.3/src/decrypt.c:360:1: enter_function: entry to '_gpgme_decrypt_status_handler'
gpgme-1.24.3/src/decrypt.c:374:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/decrypt.c:377:3: branch_false: ...to here
gpgme-1.24.3/src/decrypt.c:467:13: call_function: calling 'parse_enc_to' from '_gpgme_decrypt_status_handler'
#  294|       {
#  295|         gpg_err_set_errno (0);
#  296|->       rec->pubkey_algo = _gpgme_map_pk_algo (strtol (args, &tail, 0), protocol);
#  297|         if (errno || args == tail || *tail != ' ')
#  298|   	{

Error: GCC_ANALYZER_WARNING (CWE-401): [#def102]
gpgme-1.24.3/src/decrypt.c:330:13: warning[-Wanalyzer-malloc-leak]: leak of 'args2'
gpgme-1.24.3/src/decrypt.c:360:1: enter_function: entry to '_gpgme_decrypt_status_handler'
gpgme-1.24.3/src/decrypt.c:374:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/decrypt.c:377:3: branch_false: ...to here
gpgme-1.24.3/src/decrypt.c:435:13: call_function: calling 'parse_decryption_info' from '_gpgme_decrypt_status_handler'
#  328|   
#  329|     args2 = strdup (args); /* Split modifies the input string. */
#  330|->   nfields = _gpgme_split_fields (args2, field, DIM (field));
#  331|     if (nfields < 2)
#  332|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def103]
gpgme-1.24.3/src/engine-assuan.c:249:9: warning[-Wanalyzer-malloc-leak]: leak of 'llass'
gpgme-1.24.3/src/engine-assuan.c:228:11: acquire_memory: allocated here
gpgme-1.24.3/src/engine-assuan.c:229:6: branch_false: following 'false' branch (when 'llass' is non-NULL)...
gpgme-1.24.3/src/engine-assuan.c:232:3: branch_false: ...to here
gpgme-1.24.3/src/engine-assuan.c:249:9: danger: 'llass' leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  247|       }
#  248|   
#  249|->   err = assuan_new_ext (&llass->assuan_ctx, GPG_ERR_SOURCE_GPGME,
#  250|   			&_gpgme_assuan_malloc_hooks, _gpgme_assuan_log_cb,
#  251|   			NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def104]
gpgme-1.24.3/src/engine-g13.c:240:37: warning[-Wanalyzer-malloc-leak]: leak of 'g13'
gpgme-1.24.3/src/engine-g13.c:231:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-g13.c:232:6: branch_false: following 'false' branch (when 'g13' is non-NULL)...
gpgme-1.24.3/src/engine-g13.c:235:3: branch_false: ...to here
gpgme-1.24.3/src/engine-g13.c:240:13: branch_true: following 'true' branch (when 'file_name' is NULL)...
gpgme-1.24.3/src/engine-g13.c:240:37: branch_true: ...to here
gpgme-1.24.3/src/engine-g13.c:240:37: danger: 'g13' leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  238|     g13->status_cb.data = g13;
#  239|   
#  240|->   pgmname = file_name ? file_name : _gpgme_get_default_g13_name ();
#  241|     argc = 0;
#  242|     argv[argc++] = _gpgme_get_basename (pgmname);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def105]
gpgme-1.24.3/src/engine-g13.c:242:18: warning[-Wanalyzer-malloc-leak]: leak of 'g13'
gpgme-1.24.3/src/engine-g13.c:231:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-g13.c:232:6: branch_false: following 'false' branch (when 'g13' is non-NULL)...
gpgme-1.24.3/src/engine-g13.c:235:3: branch_false: ...to here
gpgme-1.24.3/src/engine-g13.c:242:18: danger: 'g13' leaks here; was allocated at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#  240|     pgmname = file_name ? file_name : _gpgme_get_default_g13_name ();
#  241|     argc = 0;
#  242|->   argv[argc++] = _gpgme_get_basename (pgmname);
#  243|     if (home_dir)
#  244|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def106]
gpgme-1.24.3/src/engine-g13.c:251:9: warning[-Wanalyzer-malloc-leak]: leak of 'g13'
gpgme-1.24.3/src/engine-g13.c:231:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-g13.c:232:6: branch_false: following 'false' branch (when 'g13' is non-NULL)...
gpgme-1.24.3/src/engine-g13.c:235:3: branch_false: ...to here
gpgme-1.24.3/src/engine-g13.c:251:9: danger: 'g13' leaks here; was allocated at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  249|     argv[argc++] = NULL;
#  250|   
#  251|->   err = assuan_new_ext (&g13->assuan_ctx, GPG_ERR_SOURCE_GPGME,
#  252|   			&_gpgme_assuan_malloc_hooks, _gpgme_assuan_log_cb,
#  253|   			NULL);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def107]
gpgme-1.24.3/src/engine-gpgconf.c:276:19: warning[-Wanalyzer-malloc-leak]: leak of 'linebuf'
gpgme-1.24.3/src/engine-gpgconf.c:1024:1: enter_function: entry to 'gpgconf_conf_dir'
gpgme-1.24.3/src/engine-gpgconf.c:1031:9: call_function: calling 'gpgconf_read' from 'gpgconf_conf_dir'
#  274|     linelen = 0;
#  275|   
#  276|->   while ((nread = _gpgme_io_read (rp[0], linebuf + linelen,
#  277|                                     linebufsize - linelen - 1)))
#  278|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def108]
gpgme-1.24.3/src/engine-gpgconf.c:1185:19: warning[-Wanalyzer-malloc-leak]: leak of 'linebuf'
gpgme-1.24.3/src/engine-gpgconf.c:1144:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine-gpgconf.c:1148:18: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgconf.c:1162:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine-gpgconf.c:1165:15: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgconf.c:1169:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine-gpgconf.c:1177:13: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgconf.c:1177:13: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgconf.c:1178:6: branch_false: following 'false' branch (when 'linebuf' is non-NULL)...
 branch_false: ...to here
gpgme-1.24.3/src/engine-gpgconf.c:1185:19: danger: 'linebuf' leaks here; was allocated at [(7)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/6)
# 1183|     linelen = 0;
# 1184|   
# 1185|->   while ((nread = _gpgme_io_read (rp[0], linebuf + linelen,
# 1186|                                     linebufsize - linelen - 1)))
# 1187|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def109]
gpgme-1.24.3/src/engine-gpgsm.c:833:26: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export'
#  831|     /* We try to short-cut the communication by giving GPGSM direct
#  832|        access to the file descriptor, rather than using a pipe.  */
#  833|->   iocb_data->server_fd = _gpgme_data_get_fd (iocb_data->data);
#  834|     if (iocb_data->server_fd < 0)
#  835|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def110]
gpgme-1.24.3/src/engine-gpgsm.c:833:26: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export_ext'
#  831|     /* We try to short-cut the communication by giving GPGSM direct
#  832|        access to the file descriptor, rather than using a pipe.  */
#  833|->   iocb_data->server_fd = _gpgme_data_get_fd (iocb_data->data);
#  834|     if (iocb_data->server_fd < 0)
#  835|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def111]
gpgme-1.24.3/src/engine-gpgsm.c:838:11: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export'
#  836|         int fds[2];
#  837|   
#  838|->       if (_gpgme_io_pipe (fds, dir) < 0)
#  839|   	return gpg_error_from_syserror ();
#  840|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def112]
gpgme-1.24.3/src/engine-gpgsm.c:838:11: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export_ext'
#  836|         int fds[2];
#  837|   
#  838|->       if (_gpgme_io_pipe (fds, dir) < 0)
#  839|   	return gpg_error_from_syserror ();
#  840|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def113]
gpgme-1.24.3/src/engine-gpgsm.c:844:11: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export'
#  842|         iocb_data->server_fd = dir ? fds[1] : fds[0];
#  843|   
#  844|->       if (_gpgme_io_set_close_notify (iocb_data->fd,
#  845|   				      close_notify_handler, gpgsm))
#  846|   	{

Error: GCC_ANALYZER_WARNING (CWE-401): [#def114]
gpgme-1.24.3/src/engine-gpgsm.c:844:11: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export_ext'
#  842|         iocb_data->server_fd = dir ? fds[1] : fds[0];
#  843|   
#  844|->       if (_gpgme_io_set_close_notify (iocb_data->fd,
#  845|   				      close_notify_handler, gpgsm))
#  846|   	{

Error: GCC_ANALYZER_WARNING (CWE-401): [#def115]
gpgme-1.24.3/src/engine-gpgsm.c:852:9: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export'
#  850|       }
#  851|   
#  852|->   err = assuan_sendfd (gpgsm->assuan_ctx, iocb_data->server_fd);
#  853|     if (err)
#  854|       goto leave_set_fd;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def116]
gpgme-1.24.3/src/engine-gpgsm.c:852:9: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export_ext'
#  850|       }
#  851|   
#  852|->   err = assuan_sendfd (gpgsm->assuan_ctx, iocb_data->server_fd);
#  853|     if (err)
#  854|       goto leave_set_fd;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def117]
gpgme-1.24.3/src/engine-gpgsm.c:856:3: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export'
#  854|       goto leave_set_fd;
#  855|   
#  856|->   _gpgme_io_close (iocb_data->server_fd);
#  857|     iocb_data->server_fd = -1;
#  858|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def118]
gpgme-1.24.3/src/engine-gpgsm.c:856:3: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export_ext'
#  854|       goto leave_set_fd;
#  855|   
#  856|->   _gpgme_io_close (iocb_data->server_fd);
#  857|     iocb_data->server_fd = -1;
#  858|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def119]
gpgme-1.24.3/src/engine-gpgsm.c:860:5: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export'
#  858|   
#  859|     if (opt)
#  860|->     snprintf (line, COMMANDLINELEN, "%s FD %s", which, opt);
#  861|     else
#  862|       snprintf (line, COMMANDLINELEN, "%s FD", which);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def120]
gpgme-1.24.3/src/engine-gpgsm.c:860:5: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export_ext'
#  858|   
#  859|     if (opt)
#  860|->     snprintf (line, COMMANDLINELEN, "%s FD %s", which, opt);
#  861|     else
#  862|       snprintf (line, COMMANDLINELEN, "%s FD", which);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def121]
gpgme-1.24.3/src/engine-gpgsm.c:862:5: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: branch_false: following 'false' branch (when 'use_armor == 0')...
gpgme-1.24.3/src/engine-gpgsm.c:1626:25: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1626:25: call_function: calling 'map_data_enc' from 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1626:25: return_function: returning to 'gpgsm_export' from 'map_data_enc'
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export'
#  860|       snprintf (line, COMMANDLINELEN, "%s FD %s", which, opt);
#  861|     else
#  862|->     snprintf (line, COMMANDLINELEN, "%s FD", which);
#  863|   #else
#  864|     if (opt)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def122]
gpgme-1.24.3/src/engine-gpgsm.c:862:5: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: branch_false: following 'false' branch (when 'use_armor == 0')...
gpgme-1.24.3/src/engine-gpgsm.c:1733:25: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1733:25: call_function: calling 'map_data_enc' from 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1733:25: return_function: returning to 'gpgsm_export_ext' from 'map_data_enc'
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: call_function: calling 'gpgsm_set_fd' from 'gpgsm_export_ext'
#  860|       snprintf (line, COMMANDLINELEN, "%s FD %s", which, opt);
#  861|     else
#  862|->     snprintf (line, COMMANDLINELEN, "%s FD", which);
#  863|   #else
#  864|     if (opt)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def123]
gpgme-1.24.3/src/engine-gpgsm.c:895:11: warning[-Wanalyzer-malloc-leak]: leak of 'cmd'
gpgme-1.24.3/src/engine-gpgsm.c:1590:1: enter_function: entry to 'gpgsm_export'
gpgme-1.24.3/src/engine-gpgsm.c:1609:9: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1610:6: branch_false: following 'false' branch (when 'cmd' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1613:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1625:9: branch_false: following 'false' branch (when 'use_armor == 0')...
gpgme-1.24.3/src/engine-gpgsm.c:1626:25: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1626:25: call_function: calling 'map_data_enc' from 'gpgsm_export'
#  893|   map_data_enc (gpgme_data_t d)
#  894|   {
#  895|->   switch (gpgme_data_get_encoding (d))
#  896|       {
#  897|       case GPGME_DATA_ENCODING_NONE:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def124]
gpgme-1.24.3/src/engine-gpgsm.c:895:11: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-gpgsm.c:1640:1: enter_function: entry to 'gpgsm_export_ext'
gpgme-1.24.3/src/engine-gpgsm.c:1678:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-gpgsm.c:1679:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-gpgsm.c:1682:3: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1732:9: branch_false: following 'false' branch (when 'use_armor == 0')...
gpgme-1.24.3/src/engine-gpgsm.c:1733:25: branch_false: ...to here
gpgme-1.24.3/src/engine-gpgsm.c:1733:25: call_function: calling 'map_data_enc' from 'gpgsm_export_ext'
#  893|   map_data_enc (gpgme_data_t d)
#  894|   {
#  895|->   switch (gpgme_data_get_encoding (d))
#  896|       {
#  897|       case GPGME_DATA_ENCODING_NONE:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def125]
gpgme-1.24.3/src/engine-uiserver.c:482:9: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-uiserver.c:1019:1: enter_function: entry to 'set_recipients'
gpgme-1.24.3/src/engine-uiserver.c:1028:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-uiserver.c:1029:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-uiserver.c:1031:3: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1032:13: branch_true: following 'true' branch...
gpgme-1.24.3/src/engine-uiserver.c:1038:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine-uiserver.c:1045:10: branch_false: following 'false' branch (when 'linelen >= newlen')...
gpgme-1.24.3/src/engine-uiserver.c:1058:15: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1060:13: call_function: calling 'uiserver_assuan_simple_command' from 'set_recipients'
#  480|     size_t linelen;
#  481|   
#  482|->   err = assuan_write_line (ctx, cmd);
#  483|     if (err)
#  484|       return err;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def126]
gpgme-1.24.3/src/engine-uiserver.c:488:13: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-uiserver.c:1019:1: enter_function: entry to 'set_recipients'
gpgme-1.24.3/src/engine-uiserver.c:1028:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-uiserver.c:1029:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-uiserver.c:1031:3: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1032:13: branch_true: following 'true' branch...
gpgme-1.24.3/src/engine-uiserver.c:1038:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine-uiserver.c:1045:10: branch_false: following 'false' branch (when 'linelen >= newlen')...
gpgme-1.24.3/src/engine-uiserver.c:1058:15: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1060:13: call_function: calling 'uiserver_assuan_simple_command' from 'set_recipients'
#  486|     do
#  487|       {
#  488|->       err = assuan_read_line (ctx, &line, &linelen);
#  489|         if (err)
#  490|   	return err;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def127]
gpgme-1.24.3/src/engine-uiserver.c:515:15: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-uiserver.c:1019:1: enter_function: entry to 'set_recipients'
gpgme-1.24.3/src/engine-uiserver.c:1028:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-uiserver.c:1029:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-uiserver.c:1031:3: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1032:13: branch_true: following 'true' branch...
gpgme-1.24.3/src/engine-uiserver.c:1038:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine-uiserver.c:1045:10: branch_false: following 'false' branch (when 'linelen >= newlen')...
gpgme-1.24.3/src/engine-uiserver.c:1058:15: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1060:13: call_function: calling 'uiserver_assuan_simple_command' from 'set_recipients'
#  513|   	    *(rest++) = 0;
#  514|   
#  515|-> 	  r = _gpgme_parse_status (line + 2);
#  516|             if (uiserver->status.mon_cb && r != GPGME_STATUS_PROGRESS)
#  517|               {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def128]
gpgme-1.24.3/src/engine-uiserver.c:520:21: warning[-Wanalyzer-malloc-leak]: leak of 'line'
gpgme-1.24.3/src/engine-uiserver.c:1019:1: enter_function: entry to 'set_recipients'
gpgme-1.24.3/src/engine-uiserver.c:1028:10: acquire_memory: allocated here
gpgme-1.24.3/src/engine-uiserver.c:1029:6: branch_false: following 'false' branch (when 'line' is non-NULL)...
gpgme-1.24.3/src/engine-uiserver.c:1031:3: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1032:13: branch_true: following 'true' branch...
gpgme-1.24.3/src/engine-uiserver.c:1038:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine-uiserver.c:1045:10: branch_false: following 'false' branch (when 'linelen >= newlen')...
gpgme-1.24.3/src/engine-uiserver.c:1058:15: branch_false: ...to here
gpgme-1.24.3/src/engine-uiserver.c:1060:13: call_function: calling 'uiserver_assuan_simple_command' from 'set_recipients'
#  518|                 /* Note that we call the monitor even if we do
#  519|                  * not know the status code (r < 0).  */
#  520|->               err = uiserver->status.mon_cb (uiserver->status.mon_cb_value,
#  521|                                                line + 2, rest);
#  522|               }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def129]
gpgme-1.24.3/src/engine.c:110:12: warning[-Wanalyzer-malloc-leak]: leak of 'new_home_dir'
gpgme-1.24.3/src/engine.c:398:1: enter_function: entry to '_gpgme_set_engine_info'
gpgme-1.24.3/src/engine.c:409:10: branch_true: following 'true' branch (when 'info' is non-NULL)...
gpgme-1.24.3/src/engine.c:409:18: branch_true: ...to here
gpgme-1.24.3/src/engine.c:412:6: branch_false: following 'false' branch (when 'info' is non-NULL)...
gpgme-1.24.3/src/engine.c:416:6: branch_false: ...to here
gpgme-1.24.3/src/engine.c:424:6: branch_false: following 'false' branch (when 'new_file_name' is non-NULL)...
gpgme-1.24.3/src/engine.c:427:6: branch_false: ...to here
gpgme-1.24.3/src/engine.c:427:6: branch_true: following 'true' branch (when 'home_dir' is non-NULL)...
gpgme-1.24.3/src/engine.c:429:22: branch_true: ...to here
gpgme-1.24.3/src/engine.c:429:22: acquire_memory: allocated here
gpgme-1.24.3/src/engine.c:430:10: branch_false: following 'false' branch (when 'new_home_dir' is non-NULL)...
gpgme-1.24.3/src/engine.c:452:15: branch_false: ...to here
gpgme-1.24.3/src/engine.c:458:19: call_function: calling 'engine_get_version' from '_gpgme_set_engine_info'
#  108|   
#  109|     if (engine_ops[proto] && engine_ops[proto]->get_version)
#  110|->     return (*engine_ops[proto]->get_version) (file_name);
#  111|     else
#  112|       return NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def130]
gpgme-1.24.3/src/engine.c:259:19: warning[-Wanalyzer-malloc-leak]: leak of 'file_name'
gpgme-1.24.3/src/engine.c:491:1: enter_function: entry to 'gpgme_set_engine_info'
gpgme-1.24.3/src/engine.c:499:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/engine.c:502:7: branch_true: ...to here
gpgme-1.24.3/src/engine.c:503:13: call_function: calling 'gpgme_get_engine_info' from 'gpgme_set_engine_info'
#  257|             /* Check against the optional minimal engine version.  */
#  258|             if (!err && version && engine_minimal_version
#  259|->               && !_gpgme_compare_versions (version, engine_minimal_version))
#  260|               {
#  261|                 err = gpg_error (GPG_ERR_ENGINE_TOO_OLD);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def131]
gpgme-1.24.3/src/engine.c:259:19: warning[-Wanalyzer-malloc-leak]: leak of 'home_dir'
gpgme-1.24.3/src/engine.c:491:1: enter_function: entry to 'gpgme_set_engine_info'
gpgme-1.24.3/src/engine.c:499:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/engine.c:502:7: branch_true: ...to here
gpgme-1.24.3/src/engine.c:503:13: call_function: calling 'gpgme_get_engine_info' from 'gpgme_set_engine_info'
#  257|             /* Check against the optional minimal engine version.  */
#  258|             if (!err && version && engine_minimal_version
#  259|->               && !_gpgme_compare_versions (version, engine_minimal_version))
#  260|               {
#  261|                 err = gpg_error (GPG_ERR_ENGINE_TOO_OLD);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def132]
gpgme-1.24.3/src/engine.c:532:13: warning[-Wanalyzer-malloc-leak]: leak of 'engine'
gpgme-1.24.3/src/engine.c:521:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/engine.c:524:12: acquire_memory: allocated here
gpgme-1.24.3/src/engine.c:525:6: branch_false: following 'false' branch (when 'engine' is non-NULL)...
gpgme-1.24.3/src/engine.c:528:28: branch_false: ...to here
gpgme-1.24.3/src/engine.c:529:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/engine.c:533:51: branch_true: ...to here
gpgme-1.24.3/src/engine.c:532:13: danger: 'engine' leaks here; was allocated at [(3)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/2)
#  530|       {
#  531|         gpgme_error_t err;
#  532|->       err = (*engine->ops->new) (&engine->engine,
#  533|   				 info->file_name, info->home_dir,
#  534|                                    info->version);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def133]
gpgme-1.24.3/src/export.c:276:9: warning[-Wanalyzer-malloc-leak]: leak of 'pattern'
gpgme-1.24.3/src/export.c:382:1: enter_function: entry to 'export_keys_start'
gpgme-1.24.3/src/export.c:401:6: branch_false: following 'false' branch (when 'nkeys != 0')...
gpgme-1.24.3/src/export.c:404:21: branch_false: ...to here
gpgme-1.24.3/src/export.c:404:13: acquire_memory: allocated here
gpgme-1.24.3/src/export.c:405:6: branch_false: following 'false' branch (when 'pattern' is non-NULL)...
 branch_false: ...to here
gpgme-1.24.3/src/export.c:425:9: call_function: calling 'export_ext_start' from 'export_keys_start'
#  274|       return err;
#  275|   
#  276|->   err = _gpgme_op_reset (ctx, synchronous);
#  277|     if (err)
#  278|       return err;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def134]
gpgme-1.24.3/src/export.c:280:9: warning[-Wanalyzer-malloc-leak]: leak of 'pattern'
gpgme-1.24.3/src/export.c:382:1: enter_function: entry to 'export_keys_start'
gpgme-1.24.3/src/export.c:401:6: branch_false: following 'false' branch (when 'nkeys != 0')...
gpgme-1.24.3/src/export.c:404:21: branch_false: ...to here
gpgme-1.24.3/src/export.c:404:13: acquire_memory: allocated here
gpgme-1.24.3/src/export.c:405:6: branch_false: following 'false' branch (when 'pattern' is non-NULL)...
 branch_false: ...to here
gpgme-1.24.3/src/export.c:425:9: call_function: calling 'export_ext_start' from 'export_keys_start'
#  278|       return err;
#  279|   
#  280|->   err = _gpgme_op_data_lookup (ctx, OPDATA_EXPORT, &hook,
#  281|   			       sizeof (*opd), release_op_data);
#  282|     opd = hook;

Error: GCC_ANALYZER_WARNING (CWE-404): [#def135]
gpgme-1.24.3/src/gpgme-json.c:317:9: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
gpgme-1.24.3/src/gpgme-json.c:3755:1: enter_function: entry to ‘native_messaging_repl’
gpgme-1.24.3/src/gpgme-json.c:3774:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3780:11: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3780:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3782:10: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3782:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3787:11: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3787:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3798:17: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3799:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3807:11: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3807:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3813:11: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3813:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/src/gpgme-json.c:3816:11: branch_true: ...to here
gpgme-1.24.3/src/gpgme-json.c:3817:22: call_function: calling ‘error_object_string’ from ‘native_messaging_repl’
#  315|     char *msg;
#  316|   
#  317|->   msg = gpgrt_vbsprintf (message, arg_ptr);
#  318|     if (!msg)
#  319|       xoutofcore ("error_object");

Error: GCC_ANALYZER_WARNING (CWE-476): [#def136]
gpgme-1.24.3/src/gpgme-json.c:3597:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
gpgme-1.24.3/src/gpgme-json.c:3590:6: branch_true: following ‘true’ branch...
gpgme-1.24.3/src/gpgme-json.c:3592:16: branch_true: ...to here
gpgme-1.24.3/src/gpgme-json.c:3593:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/src/gpgme-json.c:3593:11: branch_true: following ‘true’ branch (when the strings are equal)...
gpgme-1.24.3/src/gpgme-json.c:3596:19: branch_true: ...to here
gpgme-1.24.3/src/gpgme-json.c:3597:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3597:24: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3597:24: danger: dereference of NULL ‘0’
# 3595|           {
# 3596|             j_msg = cJSON_GetObjectItem (json, "msg");
# 3597|->           if (j_msg || cjson_is_string (j_msg))
# 3598|               {
# 3599|                 msg = j_msg->valuestring;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def137]
gpgme-1.24.3/src/gpgme-json.c:3614:7: warning[-Wanalyzer-malloc-leak]: leak of ‘buffer’
gpgme-1.24.3/src/gpgme-json.c:3590:6: branch_true: following ‘true’ branch...
gpgme-1.24.3/src/gpgme-json.c:3592:16: branch_true: ...to here
gpgme-1.24.3/src/gpgme-json.c:3593:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/src/gpgme-json.c:3593:11: branch_true: following ‘true’ branch (when the strings are equal)...
gpgme-1.24.3/src/gpgme-json.c:3596:19: branch_true: ...to here
gpgme-1.24.3/src/gpgme-json.c:3597:14: branch_true: following ‘true’ branch...
gpgme-1.24.3/src/gpgme-json.c:3599:15: branch_true: ...to here
gpgme-1.24.3/src/gpgme-json.c:3600:24: acquire_memory: allocated here
gpgme-1.24.3/src/gpgme-json.c:3601:18: branch_true: following ‘true’ branch (when ‘buffer’ is non-NULL)...
 branch_true: ...to here
gpgme-1.24.3/src/gpgme-json.c:3603:34: branch_false: following ‘false’ branch...
gpgme-1.24.3/src/gpgme-json.c:3610:19: branch_false: ...to here
gpgme-1.24.3/src/gpgme-json.c:3614:7: danger: ‘buffer’ leaks here; was allocated at [(9)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/8)
# 3612|               }
# 3613|           }
# 3614|->       cJSON_Delete (json);
# 3615|       }
# 3616|     return buffer;

Error: CPPCHECK_WARNING (CWE-562): [#def138]
gpgme-1.24.3/src/gpgme-tool.c:3314: error[autoVariables]: Address of local auto-variable assigned to a function parameter.
# 3312|     server.gt = gt;
# 3313|     gt->write_status = server_write_status;
# 3314|->   gt->write_status_hook = &server;
# 3315|     gt->write_data = server_write_data;
# 3316|     gt->write_data_hook = &server;

Error: CPPCHECK_WARNING (CWE-562): [#def139]
gpgme-1.24.3/src/gpgme-tool.c:3316: error[autoVariables]: Address of local auto-variable assigned to a function parameter.
# 3314|     gt->write_status_hook = &server;
# 3315|     gt->write_data = server_write_data;
# 3316|->   gt->write_data_hook = &server;
# 3317|   
# 3318|     /* We use a pipe based server so that we can work from scripts.

Error: GCC_ANALYZER_WARNING (CWE-401): [#def140]
gpgme-1.24.3/src/gpgme.c:116:9: warning[-Wanalyzer-malloc-leak]: leak of 'ctx'
gpgme-1.24.3/src/gpgme.c:104:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/gpgme.c:107:6: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:107:6: branch_false: following 'false' branch (when 'r_ctx' is non-NULL)...
gpgme-1.24.3/src/gpgme.c:110:9: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:110:9: acquire_memory: allocated here
gpgme-1.24.3/src/gpgme.c:111:6: branch_false: following 'false' branch (when 'ctx' is non-NULL)...
gpgme-1.24.3/src/gpgme.c:114:3: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:116:9: danger: 'ctx' leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  114|     INIT_LOCK (ctx->lock);
#  115|   
#  116|->   err = _gpgme_engine_info_copy (&ctx->engine_info);
#  117|     if (!err && !ctx->engine_info)
#  118|       err = gpg_error (GPG_ERR_NO_ENGINE);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def141]
gpgme-1.24.3/src/gpgme.c:1146:5: warning[-Wanalyzer-malloc-leak]: leak of 'new_lc_ctype'
gpgme-1.24.3/src/gpgme.c:1110:3: branch_true: following 'true' branch...
gpgme-1.24.3/src/gpgme.c:1110:3: acquire_memory: allocated here
gpgme-1.24.3/src/gpgme.c:1110:3: branch_false: following 'false' branch (when 'new_lc_ctype' is non-NULL)...
gpgme-1.24.3/src/gpgme.c:1113:3: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:1113:3: branch_true: following 'true' branch...
gpgme-1.24.3/src/gpgme.c:1113:3: branch_true: ...to here
gpgme-1.24.3/src/gpgme.c:1113:3: branch_false: following 'false' branch...
gpgme-1.24.3/src/gpgme.c:1116:6: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:1116:6: branch_false: following 'false' branch (when 'failed == 0')...
gpgme-1.24.3/src/gpgme.c:1145:6: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:1145:6: branch_true: following 'true' branch (when 'ctx' is NULL)...
gpgme-1.24.3/src/gpgme.c:1146:5: branch_true: ...to here
gpgme-1.24.3/src/gpgme.c:1146:5: danger: 'new_lc_ctype' leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
# 1144|   
# 1145|     if (!ctx)
# 1146|->     LOCK (def_lc_lock);
# 1147|   #ifdef LC_CTYPE
# 1148|     SET_ONE_LOCALE (ctype, CTYPE);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def142]
gpgme-1.24.3/src/gpgme.c:1146:5: warning[-Wanalyzer-malloc-leak]: leak of 'new_lc_messages'
gpgme-1.24.3/src/gpgme.c:1110:3: branch_true: following 'true' branch (when 'value' is non-NULL)...
gpgme-1.24.3/src/gpgme.c:1110:3: branch_true: ...to here
gpgme-1.24.3/src/gpgme.c:1113:3: branch_true: following 'true' branch...
gpgme-1.24.3/src/gpgme.c:1113:3: acquire_memory: allocated here
gpgme-1.24.3/src/gpgme.c:1113:3: branch_false: following 'false' branch (when 'new_lc_messages' is non-NULL)...
gpgme-1.24.3/src/gpgme.c:1116:6: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:1116:6: branch_false: following 'false' branch (when 'failed == 0')...
gpgme-1.24.3/src/gpgme.c:1145:6: branch_false: ...to here
gpgme-1.24.3/src/gpgme.c:1145:6: branch_true: following 'true' branch (when 'ctx' is NULL)...
gpgme-1.24.3/src/gpgme.c:1146:5: branch_true: ...to here
gpgme-1.24.3/src/gpgme.c:1146:5: danger: 'new_lc_messages' leaks here; was allocated at [(5)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/4)
# 1144|   
# 1145|     if (!ctx)
# 1146|->     LOCK (def_lc_lock);
# 1147|   #ifdef LC_CTYPE
# 1148|     SET_ONE_LOCALE (ctype, CTYPE);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def143]
gpgme-1.24.3/src/import.c:133:3: warning[-Wanalyzer-malloc-leak]: leak of 'import'
gpgme-1.24.3/src/import.c:128:12: acquire_memory: allocated here
gpgme-1.24.3/src/import.c:129:6: branch_false: following 'false' branch (when 'import' is non-NULL)...
gpgme-1.24.3/src/import.c:131:3: branch_false: ...to here
gpgme-1.24.3/src/import.c:133:3: danger: 'import' leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  131|     import->next = NULL;
#  132|   
#  133|->   gpg_err_set_errno (0);
#  134|     nr = strtol (args, &tail, 0);
#  135|     if (errno || args == tail)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def144]
gpgme-1.24.3/src/key.c:238:18: warning[-Wanalyzer-malloc-leak]: leak of 'key'
gpgme-1.24.3/src/key.c:459:1: enter_function: entry to 'gpgme_key_from_uid'
gpgme-1.24.3/src/key.c:465:9: call_function: calling '_gpgme_key_new' from 'gpgme_key_from_uid'
gpgme-1.24.3/src/key.c:465:9: return_function: returning to 'gpgme_key_from_uid' from '_gpgme_key_new'
gpgme-1.24.3/src/key.c:466:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/key.c:470:9: branch_false: ...to here
gpgme-1.24.3/src/key.c:470:9: call_function: calling '_gpgme_key_append_name' from 'gpgme_key_from_uid'
#  236|   		   &uid->comment, dst);
#  237|   
#  238|->   uid->address = _gpgme_mailbox_from_userid (uid->uid);
#  239|     if ((!uid->email || !*uid->email) && uid->address && uid->name
#  240|         && !strcasecmp (uid->name, uid->address))

Error: GCC_ANALYZER_WARNING (CWE-401): [#def145]
gpgme-1.24.3/src/key.c:238:18: warning[-Wanalyzer-malloc-leak]: leak of 'uid'
gpgme-1.24.3/src/key.c:459:1: enter_function: entry to 'gpgme_key_from_uid'
gpgme-1.24.3/src/key.c:465:9: call_function: calling '_gpgme_key_new' from 'gpgme_key_from_uid'
gpgme-1.24.3/src/key.c:465:9: return_function: returning to 'gpgme_key_from_uid' from '_gpgme_key_new'
gpgme-1.24.3/src/key.c:466:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/key.c:470:9: branch_false: ...to here
gpgme-1.24.3/src/key.c:470:9: call_function: calling '_gpgme_key_append_name' from 'gpgme_key_from_uid'
#  236|   		   &uid->comment, dst);
#  237|   
#  238|->   uid->address = _gpgme_mailbox_from_userid (uid->uid);
#  239|     if ((!uid->email || !*uid->email) && uid->address && uid->name
#  240|         && !strcasecmp (uid->name, uid->address))

Error: GCC_ANALYZER_WARNING (CWE-401): [#def146]
gpgme-1.24.3/src/key.c:297:7: warning[-Wanalyzer-malloc-leak]: leak of 'sig'
gpgme-1.24.3/src/key.c:273:7: branch_true: following 'true' branch (when 'src' is non-NULL)...
gpgme-1.24.3/src/key.c:273:23: branch_true: ...to here
gpgme-1.24.3/src/key.c:277:3: branch_true: following 'true' branch (when 'key' is non-NULL)...
gpgme-1.24.3/src/key.c:279:3: branch_true: ...to here
gpgme-1.24.3/src/key.c:280:3: branch_true: following 'true' branch (when 'uid' is non-NULL)...
gpgme-1.24.3/src/key.c:285:33: branch_true: ...to here
gpgme-1.24.3/src/key.c:285:9: acquire_memory: allocated here
gpgme-1.24.3/src/key.c:286:6: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/key.c:288:3: branch_false: ...to here
gpgme-1.24.3/src/key.c:294:6: branch_true: following 'true' branch (when 'src' is non-NULL)...
gpgme-1.24.3/src/key.c:296:13: branch_true: ...to here
gpgme-1.24.3/src/key.c:297:7: danger: 'sig' leaks here; was allocated at [(7)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/6)
#  295|       {
#  296|         char *dst = sig->uid;
#  297|->       _gpgme_decode_c_string (src, &dst, src_len + 1);
#  298|         dst += strlen (dst) + 1;
#  299|         if (key->protocol == GPGME_PROTOCOL_CMS)

Error: GCC_ANALYZER_WARNING (CWE-457): [#def147]
gpgme-1.24.3/src/key.c:470:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'key'
gpgme-1.24.3/src/key.c:459:1: enter_function: entry to 'gpgme_key_from_uid'
gpgme-1.24.3/src/key.c:465:9: call_function: calling '_gpgme_key_new' from 'gpgme_key_from_uid'
gpgme-1.24.3/src/key.c:465:9: return_function: returning to 'gpgme_key_from_uid' from '_gpgme_key_new'
gpgme-1.24.3/src/key.c:466:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/key.c:470:9: branch_false: ...to here
gpgme-1.24.3/src/key.c:470:9: danger: use of uninitialized value 'key' here
#  468|   
#  469|     /* Note: protocol doesn't matter if only email is provided.  */
#  470|->   err = _gpgme_key_append_name (key, name, 0);
#  471|     if (err)
#  472|       gpgme_key_unref (key);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def148]
gpgme-1.24.3/src/keylist.c:493:9: warning[-Wanalyzer-malloc-leak]: leak of 'ti'
gpgme-1.24.3/src/keylist.c:480:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:484:6: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:484:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:487:8: acquire_memory: allocated here
gpgme-1.24.3/src/keylist.c:488:6: branch_false: following 'false' branch (when 'ti' is non-NULL)...
gpgme-1.24.3/src/keylist.c:493:9: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:493:9: danger: 'ti' leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  491|     /* Note that we allow a value of up to 7 which is what we can store
#  492|      * in the ti->validity.  */
#  493|->   err = _gpgme_strtoul_field (field[2], &uval);
#  494|     if (err || uval > 7)
#  495|       goto inv_engine;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def149]
gpgme-1.24.3/src/keylist.c:499:9: warning[-Wanalyzer-malloc-leak]: leak of 'ti'
gpgme-1.24.3/src/keylist.c:480:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:484:6: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:484:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:487:8: acquire_memory: allocated here
gpgme-1.24.3/src/keylist.c:488:6: branch_false: following 'false' branch (when 'ti' is non-NULL)...
gpgme-1.24.3/src/keylist.c:493:9: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:494:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:499:9: danger: 'ti' leaks here; was allocated at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#  497|   
#  498|     /* Parse the sign-count.  */
#  499|->   err = _gpgme_strtoul_field (field[3], &uval);
#  500|     if (err)
#  501|       goto inv_engine;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def150]
gpgme-1.24.3/src/keylist.c:507:9: warning[-Wanalyzer-malloc-leak]: leak of 'ti'
gpgme-1.24.3/src/keylist.c:480:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:484:6: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:484:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:487:8: acquire_memory: allocated here
gpgme-1.24.3/src/keylist.c:488:6: branch_false: following 'false' branch (when 'ti' is non-NULL)...
gpgme-1.24.3/src/keylist.c:493:9: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:494:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:500:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:502:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:507:9: danger: 'ti' leaks here; was allocated at [(5)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/4)
#  505|   
#  506|     /* Parse the encr-count.  */
#  507|->   err = _gpgme_strtoul_field (field[4], &uval);
#  508|     if (err)
#  509|       goto inv_engine;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def151]
gpgme-1.24.3/src/keylist.c:529:9: warning[-Wanalyzer-malloc-leak]: leak of 'ti'
gpgme-1.24.3/src/keylist.c:480:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:484:6: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:484:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:487:8: acquire_memory: allocated here
gpgme-1.24.3/src/keylist.c:488:6: branch_false: following 'false' branch (when 'ti' is non-NULL)...
gpgme-1.24.3/src/keylist.c:493:9: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:494:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:500:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:502:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:508:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:510:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:529:9: danger: 'ti' leaks here; was allocated at [(5)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/4)
#  527|   
#  528|     /* Parse first and last seen timestamps.  */
#  529|->   err = _gpgme_strtoul_field (field[6], &uval);
#  530|     if (err)
#  531|       goto inv_engine;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def152]
gpgme-1.24.3/src/keylist.c:533:9: warning[-Wanalyzer-malloc-leak]: leak of 'ti'
gpgme-1.24.3/src/keylist.c:480:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:484:6: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:484:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:487:8: acquire_memory: allocated here
gpgme-1.24.3/src/keylist.c:488:6: branch_false: following 'false' branch (when 'ti' is non-NULL)...
gpgme-1.24.3/src/keylist.c:493:9: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:494:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:500:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:502:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:508:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:510:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:530:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:532:3: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:533:9: danger: 'ti' leaks here; was allocated at [(5)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/4)
#  531|       goto inv_engine;
#  532|     ti->signfirst = uval;
#  533|->   err = _gpgme_strtoul_field (field[7], &uval);
#  534|     if (err)
#  535|       goto inv_engine;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def153]
gpgme-1.24.3/src/keylist.c:542:13: warning[-Wanalyzer-malloc-leak]: leak of 'ti'
gpgme-1.24.3/src/keylist.c:480:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:484:6: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:484:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:487:8: acquire_memory: allocated here
gpgme-1.24.3/src/keylist.c:488:6: branch_false: following 'false' branch (when 'ti' is non-NULL)...
gpgme-1.24.3/src/keylist.c:493:9: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:494:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:500:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:502:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:508:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:510:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:530:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:532:3: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:534:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:536:3: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:538:6: branch_true: following 'true' branch (when 'nfield > 9')...
gpgme-1.24.3/src/keylist.c:542:13: branch_true: ...to here
gpgme-1.24.3/src/keylist.c:542:13: danger: 'ti' leaks here; was allocated at [(5)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/4)
#  540|         /* This condition is only to allow for gpg 2.1.15 - can
#  541|          * eventually be removed.  */
#  542|->       err = _gpgme_strtoul_field (field[8], &uval);
#  543|         if (err)
#  544|           goto inv_engine;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def154]
gpgme-1.24.3/src/keylist.c:546:13: warning[-Wanalyzer-malloc-leak]: leak of 'ti'
gpgme-1.24.3/src/keylist.c:480:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:484:6: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:484:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:487:8: acquire_memory: allocated here
gpgme-1.24.3/src/keylist.c:488:6: branch_false: following 'false' branch (when 'ti' is non-NULL)...
gpgme-1.24.3/src/keylist.c:493:9: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:494:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:500:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:502:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:508:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:510:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:530:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:532:3: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:534:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:536:3: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:538:6: branch_true: following 'true' branch (when 'nfield > 9')...
gpgme-1.24.3/src/keylist.c:542:13: branch_true: ...to here
gpgme-1.24.3/src/keylist.c:543:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/keylist.c:545:7: branch_false: ...to here
gpgme-1.24.3/src/keylist.c:546:13: danger: 'ti' leaks here; was allocated at [(5)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/4)
#  544|           goto inv_engine;
#  545|         ti->encrfirst = uval;
#  546|->       err = _gpgme_strtoul_field (field[9], &uval);
#  547|         if (err)
#  548|           goto inv_engine;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def155]
gpgme-1.24.3/src/op-support.c:222:3: warning[-Wanalyzer-malloc-leak]: leak of 'inv_key'
gpgme-1.24.3/src/op-support.c:218:13: acquire_memory: allocated here
gpgme-1.24.3/src/op-support.c:219:6: branch_false: following 'false' branch (when 'inv_key' is non-NULL)...
gpgme-1.24.3/src/op-support.c:222:3: branch_false: ...to here
gpgme-1.24.3/src/op-support.c:222:3: danger: 'inv_key' leaks here; was allocated at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#  220|       return gpg_error_from_syserror ();
#  221|     inv_key->next = NULL;
#  222|->   gpg_err_set_errno (0);
#  223|     reason = strtol (args, &tail, 0);
#  224|     if (errno || args == tail || (*tail && *tail != ' '))

Error: GCC_ANALYZER_WARNING (CWE-775): [#def156]
gpgme-1.24.3/src/posix-io.c:635:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'res'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:603:23: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:608:19: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:620:18: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:623:21: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:623:21: acquire_resource: opened here
gpgme-1.24.3/src/posix-io.c:624:18: branch_false: following 'false' branch (when 'res >= 0')...
gpgme-1.24.3/src/posix-io.c:635:15: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:635:15: danger: 'res' leaks here; was opened at [(11)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/10)
#  633|   		}
#  634|   
#  635|-> 	      close (fd_list[i].fd);
#  636|   	    }
#  637|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def157]
gpgme-1.24.3/src/posix-io.c:640:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'res'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:603:23: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:608:19: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:623:21: acquire_resource: opened here
gpgme-1.24.3/src/posix-io.c:624:18: branch_false: following 'false' branch (when 'res >= 0')...
gpgme-1.24.3/src/posix-io.c:635:15: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:603:23: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:638:15: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:640:20: danger: 'res' leaks here; was opened at [(9)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/8)
#  638|   	  if (! seen_stdin || ! seen_stdout || !seen_stderr)
#  639|   	    {
#  640|-> 	      fd = open ("/dev/null", O_RDWR);
#  641|   	      if (fd == -1)
#  642|   		{

Error: GCC_ANALYZER_WARNING (CWE-775): [#def158]
gpgme-1.24.3/src/posix-io.c:648:35: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'open("/dev/null", 2)'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:640:20: acquire_resource: opened here
gpgme-1.24.3/src/posix-io.c:641:18: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:648:35: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:653:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:655:23: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:648:35: danger: 'open("/dev/null", 2)' leaks here; was opened at [(7)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/6)
#  646|   		}
#  647|   	      /* Make sure that the process has connected stdin.  */
#  648|-> 	      if (! seen_stdin && fd != 0)
#  649|   		{
#  650|   		  if (dup2 (fd, 0) == -1)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def159]
gpgme-1.24.3/src/posix-io.c:650:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dup2(open("/dev/null", 2), 0)'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:641:18: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:648:35: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:648:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:650:23: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:650:23: acquire_resource: opened here
gpgme-1.24.3/src/posix-io.c:650:22: danger: 'dup2(open("/dev/null", 2), 0)' leaks here; was opened at [(11)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/10)
#  648|   	      if (! seen_stdin && fd != 0)
#  649|   		{
#  650|-> 		  if (dup2 (fd, 0) == -1)
#  651|                       _exit (8);
#  652|   		}

Error: GCC_ANALYZER_WARNING: [#def160]
gpgme-1.24.3/src/posix-io.c:650:23: warning[-Wanalyzer-fd-use-without-check]: 'dup2' on possibly invalid file descriptor '0'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:593:24: branch_true: following 'true' branch (when 'max_fds > fd')...
 branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:598:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:599:17: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:599:17: release_resource: closed here
gpgme-1.24.3/src/posix-io.c:641:18: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:648:35: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:648:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:650:23: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:650:23: danger: '0' could be invalid
#  648|   	      if (! seen_stdin && fd != 0)
#  649|   		{
#  650|-> 		  if (dup2 (fd, 0) == -1)
#  651|                       _exit (8);
#  652|   		}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def161]
gpgme-1.24.3/src/posix-io.c:655:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dup2(open("/dev/null", 2), 1)'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:641:18: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:648:35: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:653:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:655:23: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:655:23: acquire_resource: opened here
gpgme-1.24.3/src/posix-io.c:655:22: danger: 'dup2(open("/dev/null", 2), 1)' leaks here; was opened at [(11)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/10)
#  653|   	      if (! seen_stdout && fd != 1)
#  654|                   {
#  655|->                   if (dup2 (fd, 1) == -1)
#  656|                       _exit (8);
#  657|                   }

Error: GCC_ANALYZER_WARNING: [#def162]
gpgme-1.24.3/src/posix-io.c:655:23: warning[-Wanalyzer-fd-use-without-check]: 'dup2' on possibly invalid file descriptor '1'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:593:24: branch_true: following 'true' branch (when 'max_fds > fd')...
 branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:598:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:599:17: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:593:24: branch_true: following 'true' branch (when 'max_fds > fd')...
 branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:598:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:599:17: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:599:17: release_resource: closed here
gpgme-1.24.3/src/posix-io.c:603:23: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:638:15: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:638:14: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:640:20: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:641:18: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:648:35: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:653:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:655:23: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:655:23: danger: '1' could be invalid
#  653|   	      if (! seen_stdout && fd != 1)
#  654|                   {
#  655|->                   if (dup2 (fd, 1) == -1)
#  656|                       _exit (8);
#  657|                   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def163]
gpgme-1.24.3/src/posix-io.c:660:22: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'dup2(open("/dev/null", 2), 2)'
gpgme-1.24.3/src/posix-io.c:549:6: branch_false: following 'false' branch (when 'pid != -1')...
gpgme-1.24.3/src/posix-io.c:552:6: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:552:6: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:555:18: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:555:10: branch_true: following 'true' branch (when 'pid == 0')...
gpgme-1.24.3/src/posix-io.c:564:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:641:18: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:648:35: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:655:22: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:658:19: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:658:18: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:660:23: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:660:23: acquire_resource: opened here
gpgme-1.24.3/src/posix-io.c:660:22: danger: 'dup2(open("/dev/null", 2), 2)' leaks here; was opened at [(13)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/12)
#  658|   	      if (! seen_stderr && fd != 2)
#  659|                   {
#  660|->                   if (dup2 (fd, 2) == -1)
#  661|                       _exit (8);
#  662|                   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def164]
gpgme-1.24.3/src/posix-io.c:726:3: warning[-Wanalyzer-malloc-leak]: leak of 'poll_fds'
gpgme-1.24.3/src/posix-io.c:720:14: acquire_memory: allocated here
gpgme-1.24.3/src/posix-io.c:721:6: branch_false: following 'false' branch (when 'poll_fds' is non-NULL)...
gpgme-1.24.3/src/posix-io.c:726:3: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:726:3: danger: 'poll_fds' leaks here; was allocated at [(1)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/0)
#  724|     poll_nfds = 0;
#  725|   
#  726|->   TRACE_SEQ (dbg_help, "poll on [ ");
#  727|   
#  728|     any = 0;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def165]
gpgme-1.24.3/src/posix-io.c:741:15: warning[-Wanalyzer-malloc-leak]: leak of 'poll_fds'
gpgme-1.24.3/src/posix-io.c:720:14: acquire_memory: allocated here
gpgme-1.24.3/src/posix-io.c:721:6: branch_false: following 'false' branch (when 'poll_fds' is non-NULL)...
gpgme-1.24.3/src/posix-io.c:726:3: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:729:15: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:731:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:731:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:733:11: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:738:14: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:740:15: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:741:15: danger: 'poll_fds' leaks here; was allocated at [(1)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/0)
#  739|               {
#  740|                 poll_fds[poll_nfds].events |= POLLIN;
#  741|->               TRACE_ADD1 (dbg_help, "r=%d ", fds[i].fd);
#  742|               }
#  743|             if (fds[i].for_write)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def166]
gpgme-1.24.3/src/posix-io.c:746:15: warning[-Wanalyzer-malloc-leak]: leak of 'poll_fds'
gpgme-1.24.3/src/posix-io.c:720:14: acquire_memory: allocated here
gpgme-1.24.3/src/posix-io.c:721:6: branch_false: following 'false' branch (when 'poll_fds' is non-NULL)...
gpgme-1.24.3/src/posix-io.c:726:3: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:729:15: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:731:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:731:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:733:11: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:733:11: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:735:19: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:743:14: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:745:15: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:746:15: danger: 'poll_fds' leaks here; was allocated at [(1)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/0)
#  744|               {
#  745|                 poll_fds[poll_nfds].events |= POLLOUT;
#  746|->               TRACE_ADD1 (dbg_help, "w=%d ", fds[i].fd);
#  747|               }
#  748|             poll_nfds++;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def167]
gpgme-1.24.3/src/posix-io.c:753:3: warning[-Wanalyzer-malloc-leak]: leak of 'poll_fds'
gpgme-1.24.3/src/posix-io.c:720:14: acquire_memory: allocated here
gpgme-1.24.3/src/posix-io.c:721:6: branch_false: following 'false' branch (when 'poll_fds' is non-NULL)...
gpgme-1.24.3/src/posix-io.c:726:3: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:753:3: danger: 'poll_fds' leaks here; was allocated at [(1)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/0)
#  751|         fds[i].signaled = 0;
#  752|       }
#  753|->   TRACE_END (dbg_help, "]");
#  754|     if (!any)
#  755|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def168]
gpgme-1.24.3/src/posix-io.c:761:13: warning[-Wanalyzer-malloc-leak]: leak of 'poll_fds'
gpgme-1.24.3/src/posix-io.c:720:14: acquire_memory: allocated here
gpgme-1.24.3/src/posix-io.c:721:6: branch_false: following 'false' branch (when 'poll_fds' is non-NULL)...
gpgme-1.24.3/src/posix-io.c:726:3: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:729:15: branch_true: following 'true' branch...
gpgme-1.24.3/src/posix-io.c:731:14: branch_true: ...to here
gpgme-1.24.3/src/posix-io.c:731:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/posix-io.c:733:11: branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:754:6: branch_false: following 'false' branch (when 'any != 0')...
 branch_false: ...to here
gpgme-1.24.3/src/posix-io.c:761:13: danger: 'poll_fds' leaks here; was allocated at [(1)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/0)
#  759|   
#  760|     do
#  761|->     count = poll (poll_fds, poll_nfds, timeout);
#  762|     while (count < 0 && (errno == EINTR || errno == EAGAIN));
#  763|     if (count < 0)

Error: GCC_ANALYZER_WARNING (CWE-775): [#def169]
gpgme-1.24.3/src/posix-io.c:1021:3: warning[-Wanalyzer-fd-leak]: leak of file descriptor 'new_fd'
gpgme-1.24.3/src/posix-io.c:1018:14: acquire_resource: opened here
gpgme-1.24.3/src/posix-io.c:1021:3: danger: 'new_fd' leaks here; was opened at [(1)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/0)
# 1019|     while (new_fd == -1 && errno == EINTR);
# 1020|   
# 1021|->   TRACE (DEBUG_SYSIO, "_gpgme_io_dup", NULL, "fd=%d -> fd=%d", fd, new_fd);
# 1022|   
# 1023|     return new_fd;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def170]
gpgme-1.24.3/src/progress.c:86:5: warning[-Wanalyzer-malloc-leak]: leak of 'args_cpy'
gpgme-1.24.3/src/progress.c:47:6: branch_false: following 'false' branch (when 'code != 88')...
gpgme-1.24.3/src/progress.c:53:6: branch_false: ...to here
gpgme-1.24.3/src/progress.c:53:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/progress.c:56:14: acquire_memory: allocated here
gpgme-1.24.3/src/progress.c:57:6: branch_false: following 'false' branch (when 'args_cpy' is non-NULL)...
gpgme-1.24.3/src/progress.c:60:7: branch_false: ...to here
gpgme-1.24.3/src/progress.c:61:6: branch_false: following 'false' branch (when 'p' is NULL)...
 branch_false: ...to here
gpgme-1.24.3/src/progress.c:86:5: danger: 'args_cpy' leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#   84|   
#   85|     if (type != 'X')
#   86|->     ctx->progress_cb (ctx->progress_cb_value, args_cpy, type, current, total);
#   87|   
#   88|     free (args_cpy);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def171]
gpgme-1.24.3/src/sign.c:207:12: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>'
gpgme-1.24.3/src/sign.c:310:1: enter_function: entry to '_gpgme_sign_status_handler'
gpgme-1.24.3/src/sign.c:323:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:326:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:330:13: call_function: calling 'parse_sig_created' from '_gpgme_sign_status_handler'
#  205|     sig = malloc (sizeof (*sig));
#  206|     if (!sig)
#  207|->     return gpg_error_from_syserror ();
#  208|   
#  209|     sig->next = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def172]
gpgme-1.24.3/src/sign.c:207:12: warning[-Wanalyzer-malloc-leak]: leak of 'sig'
gpgme-1.24.3/src/sign.c:310:1: enter_function: entry to '_gpgme_sign_status_handler'
gpgme-1.24.3/src/sign.c:323:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:326:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:330:13: call_function: calling 'parse_sig_created' from '_gpgme_sign_status_handler'
#  205|     sig = malloc (sizeof (*sig));
#  206|     if (!sig)
#  207|->     return gpg_error_from_syserror ();
#  208|   
#  209|     sig->next = NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def173]
gpgme-1.24.3/src/sign.c:237:3: warning[-Wanalyzer-malloc-leak]: leak of 'sig'
gpgme-1.24.3/src/sign.c:205:9: acquire_memory: allocated here
gpgme-1.24.3/src/sign.c:206:6: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/sign.c:209:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:231:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:237:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:237:3: danger: 'sig' leaks here; was allocated at [(1)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/0)
#  235|       }
#  236|   
#  237|->   gpg_err_set_errno (0);
#  238|     sig->pubkey_algo = _gpgme_map_pk_algo (strtol (args, &tail, 0), protocol);
#  239|     if (errno || args == tail || *tail != ' ')

Error: GCC_ANALYZER_WARNING (CWE-401): [#def174]
gpgme-1.24.3/src/sign.c:238:22: warning[-Wanalyzer-malloc-leak]: leak of 'sig'
gpgme-1.24.3/src/sign.c:205:9: acquire_memory: allocated here
gpgme-1.24.3/src/sign.c:206:6: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/sign.c:209:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:231:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:237:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:238:22: danger: 'sig' leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
#  236|   
#  237|     gpg_err_set_errno (0);
#  238|->   sig->pubkey_algo = _gpgme_map_pk_algo (strtol (args, &tail, 0), protocol);
#  239|     if (errno || args == tail || *tail != ' ')
#  240|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def175]
gpgme-1.24.3/src/sign.c:276:20: warning[-Wanalyzer-malloc-leak]: leak of 'sig'
gpgme-1.24.3/src/sign.c:205:9: acquire_memory: allocated here
gpgme-1.24.3/src/sign.c:206:6: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/sign.c:209:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:231:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:237:3: branch_false: ...to here
gpgme-1.24.3/src/sign.c:239:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:248:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:260:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/sign.c:260:17: branch_true: ...to here
gpgme-1.24.3/src/sign.c:268:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/sign.c:276:20: danger: 'sig' leaks here; was allocated at [(1)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/0)
#  274|     args = tail;
#  275|   
#  276|->   sig->timestamp = _gpgme_parse_timestamp (args, &tail);
#  277|     if (sig->timestamp == -1 || args == tail || *tail != ' ')
#  278|       {

Error: GCC_ANALYZER_WARNING (CWE-787): [#def176]
gpgme-1.24.3/src/signers.c:85:9: warning[-Wanalyzer-out-of-bounds]: buffer overflow
gpgme-1.24.3/src/signers.c:72:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/signers.c:75:7: branch_false: ...to here
gpgme-1.24.3/src/signers.c:75:6: branch_true: following 'true' branch...
gpgme-1.24.3/src/signers.c:78:15: branch_true: ...to here
gpgme-1.24.3/src/signers.c:82:10: branch_false: following 'false' branch (when 'newarr' is non-NULL)...
gpgme-1.24.3/src/signers.c:84:16: branch_false: ...to here
gpgme-1.24.3/src/signers.c:84:35: branch_true: following 'true' branch (when 'j < n')...
gpgme-1.24.3/src/signers.c:85:15: branch_true: ...to here
gpgme-1.24.3/src/signers.c:84:35: branch_true: following 'true' branch (when 'j < n')...
gpgme-1.24.3/src/signers.c:85:15: branch_true: ...to here
gpgme-1.24.3/src/signers.c:84:35: branch_true: following 'true' branch (when 'j < n')...
gpgme-1.24.3/src/signers.c:85:15: branch_true: ...to here
gpgme-1.24.3/src/signers.c:84:35: branch_true: following 'true' branch (when 'j < n')...
gpgme-1.24.3/src/signers.c:85:15: branch_true: ...to here
gpgme-1.24.3/src/signers.c:84:35: branch_true: following 'true' branch (when 'j < n')...
gpgme-1.24.3/src/signers.c:85:15: branch_true: ...to here
gpgme-1.24.3/src/signers.c:84:35: branch_true: following 'true' branch (when 'j < n')...
gpgme-1.24.3/src/signers.c:85:15: branch_true: ...to here
gpgme-1.24.3/src/signers.c:85:9: danger: write of 8 bytes at offset '(long unsigned int)j * 8' exceeds '*newarr'
#   83|   	return TRACE_ERR (gpg_error_from_syserror ());
#   84|         for (j = ctx->signers_size; j < n; j++)
#   85|-> 	newarr[j] = NULL;
#   86|         ctx->signers = newarr;
#   87|         ctx->signers_size = n;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def177]
gpgme-1.24.3/src/verify.c:429:6: warning[-Wanalyzer-malloc-leak]: leak of '*sig.fpr'
gpgme-1.24.3/src/verify.c:930:1: enter_function: entry to '_gpgme_verify_status_handler'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:969:14: branch_true: following 'true' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/verify.c:969:20: branch_true: ...to here
gpgme-1.24.3/src/verify.c:969:20: call_function: calling 'parse_valid_sig' from '_gpgme_verify_status_handler'
#  427|       free (sig->fpr);
#  428|     sig->fpr = strdup (args);
#  429|->   if (!sig->fpr)
#  430|       return gpg_error_from_syserror ();
#  431|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def178]
gpgme-1.24.3/src/verify.c:433:9: warning[-Wanalyzer-null-argument]: use of NULL 'end' where non-null expected
gpgme-1.24.3/src/verify.c:930:1: enter_function: entry to '_gpgme_verify_status_handler'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:969:14: branch_true: following 'true' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/verify.c:969:20: branch_true: ...to here
gpgme-1.24.3/src/verify.c:969:20: call_function: calling 'parse_valid_sig' from '_gpgme_verify_status_handler'
#argument 1 of '__builtin_strchr' must be non-null
#  431|   
#  432|     /* Skip the creation date.  */
#  433|->   end = strchr (end, ' ');
#  434|     if (end)
#  435|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def179]
gpgme-1.24.3/src/verify.c:719:9: warning[-Wanalyzer-malloc-leak]: leak of 'fpr'
gpgme-1.24.3/src/verify.c:930:1: enter_function: entry to '_gpgme_verify_status_handler'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1019:10: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/verify.c:1021:13: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1021:13: call_function: calling 'parse_tofu_user' from '_gpgme_verify_status_handler'
#  717|       *tail = 0;
#  718|   
#  719|->   err = _gpgme_decode_percent_string (args, &address, 0, 0);
#  720|     if (err)
#  721|       goto leave;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def180]
gpgme-1.24.3/src/verify.c:725:13: warning[-Wanalyzer-malloc-leak]: leak of 'fpr'
gpgme-1.24.3/src/verify.c:930:1: enter_function: entry to '_gpgme_verify_status_handler'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1019:10: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/verify.c:1021:13: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1021:13: call_function: calling 'parse_tofu_user' from '_gpgme_verify_status_handler'
#  723|     if (!sig->key)
#  724|       {
#  725|->       err = _gpgme_key_new (&sig->key);
#  726|         if (err)
#  727|           goto leave;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def181]
gpgme-1.24.3/src/verify.c:738:9: warning[-Wanalyzer-malloc-leak]: leak of 'fpr'
gpgme-1.24.3/src/verify.c:930:1: enter_function: entry to '_gpgme_verify_status_handler'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1019:10: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/verify.c:1021:13: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1021:13: call_function: calling 'parse_tofu_user' from '_gpgme_verify_status_handler'
#  736|       }
#  737|   
#  738|->   err = _gpgme_key_append_name (sig->key, address, 0);
#  739|     if (err)
#  740|       goto leave;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def182]
gpgme-1.24.3/src/verify.c:757:10: warning[-Wanalyzer-malloc-leak]: leak of 'fpr'
gpgme-1.24.3/src/verify.c:930:1: enter_function: entry to '_gpgme_verify_status_handler'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1019:10: branch_false: following 'false' branch (when 'sig' is non-NULL)...
gpgme-1.24.3/src/verify.c:1021:13: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1021:13: call_function: calling 'parse_tofu_user' from '_gpgme_verify_status_handler'
#  755|     free (fpr);
#  756|     free (address);
#  757|->   return err;
#  758|   }
#  759|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def183]
gpgme-1.24.3/src/verify.c:1014:7: warning[-Wanalyzer-malloc-leak]: leak of '*sig.pka_address'
gpgme-1.24.3/src/verify.c:941:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:944:3: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1008:10: branch_false: following 'false' branch...
gpgme-1.24.3/src/verify.c:1012:10: branch_false: following 'false' branch (when 'end' is NULL)...
gpgme-1.24.3/src/verify.c:1014:26: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1014:26: acquire_memory: allocated here
gpgme-1.24.3/src/verify.c:1014:7: danger: '*sig.pka_address' leaks here; was allocated at [(10)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/9)
# 1012|         if (end)
# 1013|           *end = 0;
# 1014|->       sig->pka_address = strdup (args);
# 1015|         break;
# 1016|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def184]
gpgme-1.24.3/src/verify.c:1239:3: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
gpgme-1.24.3/src/verify.c:1230:1: enter_function: entry to 'gpgme_get_sig_key'
gpgme-1.24.3/src/verify.c:1235:6: branch_false: following 'false' branch (when 'ctx' is non-NULL)...
gpgme-1.24.3/src/verify.c:1238:12: branch_false: ...to here
gpgme-1.24.3/src/verify.c:1238:12: call_function: calling 'gpgme_op_verify_result' from 'gpgme_get_sig_key'
gpgme-1.24.3/src/verify.c:1238:12: return_function: returning to 'gpgme_get_sig_key' from 'gpgme_op_verify_result'
gpgme-1.24.3/src/verify.c:1239:3: danger: dereference of NULL 'gpgme_op_verify_result(ctx)'
# 1237|   
# 1238|     result = gpgme_op_verify_result (ctx);
# 1239|->   sig = result->signatures;
# 1240|   
# 1241|     while (sig && idx)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def185]
gpgme-1.24.3/src/verify.c:1265:3: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
gpgme-1.24.3/src/verify.c:1258:1: enter_function: entry to 'gpgme_get_sig_status'
gpgme-1.24.3/src/verify.c:1264:12: call_function: calling 'gpgme_op_verify_result' from 'gpgme_get_sig_status'
gpgme-1.24.3/src/verify.c:1264:12: return_function: returning to 'gpgme_get_sig_status' from 'gpgme_op_verify_result'
gpgme-1.24.3/src/verify.c:1265:3: danger: dereference of NULL 'gpgme_op_verify_result(ctx)'
# 1263|   
# 1264|     result = gpgme_op_verify_result (ctx);
# 1265|->   sig = result->signatures;
# 1266|   
# 1267|     while (sig && idx)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def186]
gpgme-1.24.3/src/verify.c:1328:3: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
gpgme-1.24.3/src/verify.c:1319:1: enter_function: entry to 'gpgme_get_sig_ulong_attr'
gpgme-1.24.3/src/verify.c:1327:12: call_function: calling 'gpgme_op_verify_result' from 'gpgme_get_sig_ulong_attr'
gpgme-1.24.3/src/verify.c:1327:12: return_function: returning to 'gpgme_get_sig_ulong_attr' from 'gpgme_op_verify_result'
gpgme-1.24.3/src/verify.c:1328:3: danger: dereference of NULL 'gpgme_op_verify_result(ctx)'
# 1326|   
# 1327|     result = gpgme_op_verify_result (ctx);
# 1328|->   sig = result->signatures;
# 1329|   
# 1330|     while (sig && idx)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def187]
gpgme-1.24.3/src/verify.c:1392:3: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
gpgme-1.24.3/src/verify.c:1385:1: enter_function: entry to 'gpgme_get_sig_string_attr'
gpgme-1.24.3/src/verify.c:1391:12: call_function: calling 'gpgme_op_verify_result' from 'gpgme_get_sig_string_attr'
gpgme-1.24.3/src/verify.c:1391:12: return_function: returning to 'gpgme_get_sig_string_attr' from 'gpgme_op_verify_result'
gpgme-1.24.3/src/verify.c:1392:3: danger: dereference of NULL 'gpgme_op_verify_result(ctx)'
# 1390|   
# 1391|     result = gpgme_op_verify_result (ctx);
# 1392|->   sig = result->signatures;
# 1393|   
# 1394|     while (sig && idx)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def188]
gpgme-1.24.3/src/wait-global.c:288:7: warning[-Wanalyzer-malloc-leak]: leak of 'malloc((long unsigned int)i * 24)'
gpgme-1.24.3/src/wait-global.c:267:34: branch_false: following 'false' branch (when 'li' is NULL)...
gpgme-1.24.3/src/wait-global.c:269:17: branch_false: ...to here
gpgme-1.24.3/src/wait-global.c:269:17: acquire_memory: allocated here
gpgme-1.24.3/src/wait-global.c:270:10: branch_false: following 'false' branch...
 branch_false: ...to here
gpgme-1.24.3/src/wait-global.c:282:34: branch_false: following 'false' branch (when 'li' is NULL)...
gpgme-1.24.3/src/wait-global.c:288:7: branch_false: ...to here
gpgme-1.24.3/src/wait-global.c:288:7: danger: 'malloc((long unsigned int)i * 24)' leaks here; was allocated at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#  286|   	  i += li->ctx->fdt.size;
#  287|   	}
#  288|->       UNLOCK (ctx_list_lock);
#  289|   
#  290|         nr = _gpgme_io_select (fdt.fds, fdt.size, 0);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def189]
gpgme-1.24.3/src/wait-global.c:290:12: warning[-Wanalyzer-malloc-leak]: leak of 'malloc((long unsigned int)i * 24)'
gpgme-1.24.3/src/wait-global.c:267:34: branch_false: following 'false' branch (when 'li' is NULL)...
gpgme-1.24.3/src/wait-global.c:269:17: branch_false: ...to here
gpgme-1.24.3/src/wait-global.c:269:17: acquire_memory: allocated here
gpgme-1.24.3/src/wait-global.c:270:10: branch_false: following 'false' branch...
 branch_false: ...to here
gpgme-1.24.3/src/wait-global.c:282:34: branch_false: following 'false' branch (when 'li' is NULL)...
gpgme-1.24.3/src/wait-global.c:288:7: branch_false: ...to here
gpgme-1.24.3/src/wait-global.c:290:12: danger: 'malloc((long unsigned int)i * 24)' leaks here; was allocated at [(3)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/2)
#  288|         UNLOCK (ctx_list_lock);
#  289|   
#  290|->       nr = _gpgme_io_select (fdt.fds, fdt.size, 0);
#  291|         if (nr < 0)
#  292|   	{

Error: GCC_ANALYZER_WARNING (CWE-401): [#def190]
gpgme-1.24.3/src/wait.c:139:3: warning[-Wanalyzer-malloc-leak]: leak of 'item'
gpgme-1.24.3/src/wait.c:99:1: enter_function: entry to '_gpgme_add_io_cb'
gpgme-1.24.3/src/wait.c:108:3: branch_true: following 'true' branch (when 'fnc' is non-NULL)...
gpgme-1.24.3/src/wait.c:109:3: branch_true: ...to here
gpgme-1.24.3/src/wait.c:109:3: branch_true: following 'true' branch (when 'data' is non-NULL)...
gpgme-1.24.3/src/wait.c:111:3: branch_true: ...to here
gpgme-1.24.3/src/wait.c:115:6: branch_false: following 'false' branch (when 'tag' is non-NULL)...
gpgme-1.24.3/src/wait.c:117:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:120:10: acquire_memory: allocated here
gpgme-1.24.3/src/wait.c:121:6: branch_false: following 'false' branch (when 'item' is non-NULL)...
gpgme-1.24.3/src/wait.c:126:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:131:9: call_function: calling 'fd_table_put' from '_gpgme_add_io_cb'
gpgme-1.24.3/src/wait.c:131:9: return_function: returning to '_gpgme_add_io_cb' from 'fd_table_put'
gpgme-1.24.3/src/wait.c:132:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/wait.c:139:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:139:3: danger: 'item' leaks here; was allocated at [(8)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/7)
#  137|       }
#  138|   
#  139|->   TRACE (DEBUG_CTX, "_gpgme_add_io_cb", ctx,
#  140|   	  "fd=%d, dir=%d -> tag=%p", fd, dir, tag);
#  141|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def191]
gpgme-1.24.3/src/wait.c:139:3: warning[-Wanalyzer-malloc-leak]: leak of 'tag'
gpgme-1.24.3/src/wait.c:108:3: branch_true: following 'true' branch (when 'fnc' is non-NULL)...
gpgme-1.24.3/src/wait.c:109:3: branch_true: ...to here
gpgme-1.24.3/src/wait.c:109:3: branch_true: following 'true' branch (when 'data' is non-NULL)...
gpgme-1.24.3/src/wait.c:111:3: branch_true: ...to here
gpgme-1.24.3/src/wait.c:114:9: acquire_memory: allocated here
gpgme-1.24.3/src/wait.c:115:6: branch_false: following 'false' branch (when 'tag' is non-NULL)...
gpgme-1.24.3/src/wait.c:117:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:121:6: branch_false: following 'false' branch (when 'item' is non-NULL)...
gpgme-1.24.3/src/wait.c:126:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:132:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/wait.c:139:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:139:3: danger: 'tag' leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  137|       }
#  138|   
#  139|->   TRACE (DEBUG_CTX, "_gpgme_add_io_cb", ctx,
#  140|   	  "fd=%d, dir=%d -> tag=%p", fd, dir, tag);
#  141|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def192]
gpgme-1.24.3/src/wait.c:142:3: warning[-Wanalyzer-malloc-leak]: leak of 'item'
gpgme-1.24.3/src/wait.c:99:1: enter_function: entry to '_gpgme_add_io_cb'
gpgme-1.24.3/src/wait.c:108:3: branch_true: following 'true' branch (when 'fnc' is non-NULL)...
gpgme-1.24.3/src/wait.c:109:3: branch_true: ...to here
gpgme-1.24.3/src/wait.c:109:3: branch_true: following 'true' branch (when 'data' is non-NULL)...
gpgme-1.24.3/src/wait.c:111:3: branch_true: ...to here
gpgme-1.24.3/src/wait.c:115:6: branch_false: following 'false' branch (when 'tag' is non-NULL)...
gpgme-1.24.3/src/wait.c:117:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:120:10: acquire_memory: allocated here
gpgme-1.24.3/src/wait.c:121:6: branch_false: following 'false' branch (when 'item' is non-NULL)...
gpgme-1.24.3/src/wait.c:126:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:131:9: call_function: calling 'fd_table_put' from '_gpgme_add_io_cb'
gpgme-1.24.3/src/wait.c:131:9: return_function: returning to '_gpgme_add_io_cb' from 'fd_table_put'
gpgme-1.24.3/src/wait.c:132:6: branch_false: following 'false' branch...
gpgme-1.24.3/src/wait.c:139:3: branch_false: ...to here
gpgme-1.24.3/src/wait.c:142:3: danger: 'item' leaks here; was allocated at [(8)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/7)
#  140|   	  "fd=%d, dir=%d -> tag=%p", fd, dir, tag);
#  141|   
#  142|->   *r_tag = tag;
#  143|     return 0;
#  144|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def193]
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:124:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:124:9: danger: ‘make_filename("cipher-2.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/3)
#  122|     init_gpgme (GPGME_PROTOCOL_OpenPGP);
#  123|   
#  124|->   err = gpgme_new (&ctx);
#  125|     fail_if_err (err);
#  126|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def194]
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:125:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:125:3: danger: ‘make_filename("cipher-2.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/3)
#  123|   
#  124|     err = gpgme_new (&ctx);
#  125|->   fail_if_err (err);
#  126|   
#  127|     agent_info = getenv("GPG_AGENT_INFO");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def195]
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:129:5: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:125:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:127:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:129:5: danger: ‘make_filename("cipher-2.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/3)
#  127|     agent_info = getenv("GPG_AGENT_INFO");
#  128|     if (!(agent_info && strchr (agent_info, ':')))
#  129|->     gpgme_set_passphrase_cb (ctx, passphrase_cb, NULL);
#  130|   
#  131|     err = gpgme_data_new_from_file (&in, cipher_2_asc, 1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def196]
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:131:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:125:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:127:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:131:9: danger: ‘make_filename("cipher-2.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/3)
#  129|       gpgme_set_passphrase_cb (ctx, passphrase_cb, NULL);
#  130|   
#  131|->   err = gpgme_data_new_from_file (&in, cipher_2_asc, 1);
#  132|     free (cipher_2_asc);
#  133|     fail_if_err (err);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def197]
gpgme-1.24.3/tests/gpg/t-decrypt.c:54:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt.c:54:9: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/3)
#   52|     init_gpgme (GPGME_PROTOCOL_OpenPGP);
#   53|   
#   54|->   err = gpgme_new (&ctx);
#   55|     fail_if_err (err);
#   56|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def198]
gpgme-1.24.3/tests/gpg/t-decrypt.c:55:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt.c:55:3: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/3)
#   53|   
#   54|     err = gpgme_new (&ctx);
#   55|->   fail_if_err (err);
#   56|   
#   57|     agent_info = getenv("GPG_AGENT_INFO");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def199]
gpgme-1.24.3/tests/gpg/t-decrypt.c:59:5: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt.c:55:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-decrypt.c:57:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-decrypt.c:59:5: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/3)
#   57|     agent_info = getenv("GPG_AGENT_INFO");
#   58|     if (!(agent_info && strchr (agent_info, ':')))
#   59|->     gpgme_set_passphrase_cb (ctx, passphrase_cb, NULL);
#   60|   
#   61|     err = gpgme_data_new_from_file (&in, cipher_1_asc, 1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def200]
gpgme-1.24.3/tests/gpg/t-decrypt.c:61:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-decrypt.c:55:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-decrypt.c:57:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-decrypt.c:61:9: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/3)
#   59|       gpgme_set_passphrase_cb (ctx, passphrase_cb, NULL);
#   60|   
#   61|->   err = gpgme_data_new_from_file (&in, cipher_1_asc, 1);
#   62|     free (cipher_1_asc);
#   63|     fail_if_err (err);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def201]
gpgme-1.24.3/tests/gpg/t-import.c:227:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:227:9: danger: ‘make_filename("pubkey-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/3)
#  225|     init_gpgme (GPGME_PROTOCOL_OpenPGP);
#  226|   
#  227|->   err = gpgme_new (&ctx);
#  228|     fail_if_err (err);
#  229|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def202]
gpgme-1.24.3/tests/gpg/t-import.c:227:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:227:9: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/8)
#  225|     init_gpgme (GPGME_PROTOCOL_OpenPGP);
#  226|   
#  227|->   err = gpgme_new (&ctx);
#  228|     fail_if_err (err);
#  229|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def203]
gpgme-1.24.3/tests/gpg/t-import.c:228:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: danger: ‘make_filename("pubkey-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/3)
#  226|   
#  227|     err = gpgme_new (&ctx);
#  228|->   fail_if_err (err);
#  229|   
#  230|     err = gpgme_set_ctx_flag (ctx, "key-origin", "wkd,https://openpgpkey.gnupg.org");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def204]
gpgme-1.24.3/tests/gpg/t-import.c:228:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/8)
#  226|   
#  227|     err = gpgme_new (&ctx);
#  228|->   fail_if_err (err);
#  229|   
#  230|     err = gpgme_set_ctx_flag (ctx, "key-origin", "wkd,https://openpgpkey.gnupg.org");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def205]
gpgme-1.24.3/tests/gpg/t-import.c:230:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:230:9: danger: ‘make_filename("pubkey-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/3)
#  228|     fail_if_err (err);
#  229|   
#  230|->   err = gpgme_set_ctx_flag (ctx, "key-origin", "wkd,https://openpgpkey.gnupg.org");
#  231|     fail_if_err (err);
#  232|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def206]
gpgme-1.24.3/tests/gpg/t-import.c:230:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:230:9: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/8)
#  228|     fail_if_err (err);
#  229|   
#  230|->   err = gpgme_set_ctx_flag (ctx, "key-origin", "wkd,https://openpgpkey.gnupg.org");
#  231|     fail_if_err (err);
#  232|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def207]
gpgme-1.24.3/tests/gpg/t-import.c:233:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:231:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:233:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:233:9: danger: ‘make_filename("pubkey-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/22/codeFlows/0/threadFlows/0/locations/3)
#  231|     fail_if_err (err);
#  232|   
#  233|->   err = gpgme_data_new_from_file (&in, pubkey_1_asc, 1);
#  234|     free (pubkey_1_asc);
#  235|     fail_if_err (err);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def208]
gpgme-1.24.3/tests/gpg/t-import.c:233:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:231:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:233:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:233:9: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/8)
#  231|     fail_if_err (err);
#  232|   
#  233|->   err = gpgme_data_new_from_file (&in, pubkey_1_asc, 1);
#  234|     free (pubkey_1_asc);
#  235|     fail_if_err (err);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def209]
gpgme-1.24.3/tests/gpg/t-import.c:237:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:231:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:233:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:235:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:237:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:237:9: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/24/codeFlows/0/threadFlows/0/locations/8)
#  235|     fail_if_err (err);
#  236|   
#  237|->   err = gpgme_op_import (ctx, in);
#  238|     fail_if_err (err);
#  239|     result = gpgme_op_import_result (ctx);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def210]
gpgme-1.24.3/tests/gpg/t-import.c:239:12: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:231:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:233:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:235:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:237:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:238:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:239:12: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:239:12: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/25/codeFlows/0/threadFlows/0/locations/8)
#  237|     err = gpgme_op_import (ctx, in);
#  238|     fail_if_err (err);
#  239|->   result = gpgme_op_import_result (ctx);
#  240|     check_result (result, "ADAB7FCC1F4DE2616ECFA402AF82244F9CD9FD55", 0);
#  241|     gpgme_data_release (in);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def211]
gpgme-1.24.3/tests/gpg/t-import.c:241:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:231:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:233:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:235:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:237:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:238:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:239:12: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:240:3: call_function: calling ‘check_result’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:240:3: return_function: returning to ‘main’ from ‘check_result’
gpgme-1.24.3/tests/gpg/t-import.c:241:3: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/26/codeFlows/0/threadFlows/0/locations/8)
#  239|     result = gpgme_op_import_result (ctx);
#  240|     check_result (result, "ADAB7FCC1F4DE2616ECFA402AF82244F9CD9FD55", 0);
#  241|->   gpgme_data_release (in);
#  242|   
#  243|     err = gpgme_data_new_from_file (&in, seckey_1_asc, 1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def212]
gpgme-1.24.3/tests/gpg/t-import.c:243:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:231:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:233:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:235:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:237:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:238:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:239:12: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:240:3: call_function: calling ‘check_result’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:240:3: return_function: returning to ‘main’ from ‘check_result’
gpgme-1.24.3/tests/gpg/t-import.c:243:9: danger: ‘make_filename("seckey-1.asc")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/8)
#  241|     gpgme_data_release (in);
#  242|   
#  243|->   err = gpgme_data_new_from_file (&in, seckey_1_asc, 1);
#  244|     free (seckey_1_asc);
#  245|     fail_if_err (err);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def213]
gpgme-1.24.3/tests/gpg/t-import.c:245:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-import.c:228:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:230:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:231:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:233:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:235:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:237:9: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:238:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-import.c:239:12: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-import.c:240:3: call_function: calling ‘check_result’ from ‘main’
#  243|     err = gpgme_data_new_from_file (&in, seckey_1_asc, 1);
#  244|     free (seckey_1_asc);
#  245|->   fail_if_err (err);
#  246|   
#  247|     err = gpgme_op_import (ctx, in);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def214]
gpgme-1.24.3/tests/gpg/t-support.h:211:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
#  209|     gpgme_error_t err;
#  210|   
#  211|->   gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def215]
gpgme-1.24.3/tests/gpg/t-support.h:211:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
#  209|     gpgme_error_t err;
#  210|   
#  211|->   gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def216]
gpgme-1.24.3/tests/gpg/t-support.h:211:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  209|     gpgme_error_t err;
#  210|   
#  211|->   gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def217]
gpgme-1.24.3/tests/gpg/t-support.h:211:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  209|     gpgme_error_t err;
#  210|   
#  211|->   gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def218]
gpgme-1.24.3/tests/gpg/t-support.h:213:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
#  211|     gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def219]
gpgme-1.24.3/tests/gpg/t-support.h:213:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
#  211|     gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def220]
gpgme-1.24.3/tests/gpg/t-support.h:213:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  211|     gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def221]
gpgme-1.24.3/tests/gpg/t-support.h:213:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  211|     gpgme_check_version (NULL);
#  212|     setlocale (LC_ALL, "");
#  213|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def222]
gpgme-1.24.3/tests/gpg/t-support.h:215:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  216|   #endif
#  217|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def223]
gpgme-1.24.3/tests/gpg/t-support.h:215:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  216|   #endif
#  217|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def224]
gpgme-1.24.3/tests/gpg/t-support.h:215:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  216|   #endif
#  217|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def225]
gpgme-1.24.3/tests/gpg/t-support.h:215:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  213|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  214|   #ifndef HAVE_W32_SYSTEM
#  215|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  216|   #endif
#  217|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def226]
gpgme-1.24.3/tests/gpg/t-support.h:218:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
#  216|   #endif
#  217|   
#  218|->   err = gpgme_engine_check_version (proto);
#  219|     fail_if_err (err);
#  220|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def227]
gpgme-1.24.3/tests/gpg/t-support.h:218:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
#  216|   #endif
#  217|   
#  218|->   err = gpgme_engine_check_version (proto);
#  219|     fail_if_err (err);
#  220|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def228]
gpgme-1.24.3/tests/gpg/t-support.h:218:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  216|   #endif
#  217|   
#  218|->   err = gpgme_engine_check_version (proto);
#  219|     fail_if_err (err);
#  220|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def229]
gpgme-1.24.3/tests/gpg/t-support.h:218:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  216|   #endif
#  217|   
#  218|->   err = gpgme_engine_check_version (proto);
#  219|     fail_if_err (err);
#  220|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def230]
gpgme-1.24.3/tests/gpg/t-support.h:219:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt.c:40:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt.c:46:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt.c:52:3: call_function: calling ‘init_gpgme’ from ‘main’
#  217|   
#  218|     err = gpgme_engine_check_version (proto);
#  219|->   fail_if_err (err);
#  220|   }
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def231]
gpgme-1.24.3/tests/gpg/t-support.h:219:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-2.asc")’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:109:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:116:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-decrypt-verify.c:122:3: call_function: calling ‘init_gpgme’ from ‘main’
#  217|   
#  218|     err = gpgme_engine_check_version (proto);
#  219|->   fail_if_err (err);
#  220|   }
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def232]
gpgme-1.24.3/tests/gpg/t-support.h:219:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("pubkey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  217|   
#  218|     err = gpgme_engine_check_version (proto);
#  219|->   fail_if_err (err);
#  220|   }
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def233]
gpgme-1.24.3/tests/gpg/t-support.h:219:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("seckey-1.asc")’
gpgme-1.24.3/tests/gpg/t-import.c:212:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:219:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpg/t-import.c:220:24: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-import.c:225:3: call_function: calling ‘init_gpgme’ from ‘main’
#  217|   
#  218|     err = gpgme_engine_check_version (proto);
#  219|->   fail_if_err (err);
#  220|   }
#  221|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def234]
gpgme-1.24.3/tests/gpg/t-thread1.c:111:13: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:111:13: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/3)
#  109|         init_gpgme (GPGME_PROTOCOL_OpenPGP);
#  110|   
#  111|->       err = gpgme_new (&ctx);
#  112|         fail_if_err (err);
#  113|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def235]
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/3)
#  110|   
#  111|         err = gpgme_new (&ctx);
#  112|->       fail_if_err (err);
#  113|   
#  114|         if (!(agent_info && strchr (agent_info, ':')))

Error: GCC_ANALYZER_WARNING (CWE-401): [#def236]
gpgme-1.24.3/tests/gpg/t-thread1.c:115:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:115:9: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/3)
#  113|   
#  114|         if (!(agent_info && strchr (agent_info, ':')))
#  115|-> 	gpgme_set_passphrase_cb (ctx, passphrase_cb, NULL);
#  116|   
#  117|         err = gpgme_data_new_from_file (&in, cipher_1_asc, 1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def237]
gpgme-1.24.3/tests/gpg/t-thread1.c:117:13: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:117:13: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/3)
#  115|   	gpgme_set_passphrase_cb (ctx, passphrase_cb, NULL);
#  116|   
#  117|->       err = gpgme_data_new_from_file (&in, cipher_1_asc, 1);
#  118|         fail_if_err (err);
#  119|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def238]
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:118:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/3)
#  118|         fail_if_err (err);
#  119|   
#  120|->       err = gpgme_data_new (&out);
#  121|         fail_if_err (err);
#  122|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def239]
gpgme-1.24.3/tests/gpg/t-thread1.c:123:13: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:118:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:121:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:123:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:123:13: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/3)
#  121|         fail_if_err (err);
#  122|   
#  123|->       err = gpgme_op_decrypt (ctx, in, out);
#  124|         fail_if_err (err);
#  125|         result = gpgme_op_decrypt_result (ctx);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def240]
gpgme-1.24.3/tests/gpg/t-thread1.c:125:16: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:118:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:121:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:123:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:124:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:125:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:125:16: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/3)
#  123|         err = gpgme_op_decrypt (ctx, in, out);
#  124|         fail_if_err (err);
#  125|->       result = gpgme_op_decrypt_result (ctx);
#  126|         if (result->unsupported_algorithm)
#  127|   	{

Error: GCC_ANALYZER_WARNING (CWE-401): [#def241]
gpgme-1.24.3/tests/gpg/t-thread1.c:134:7: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:118:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:121:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:123:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:124:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:125:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:126:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:132:7: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:134:7: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/3)
#  132|         printf ("Decrypt %s %i\n", (char *) name, i);
#  133|   
#  134|->       gpgme_data_release (in);
#  135|         gpgme_data_release (out);
#  136|         gpgme_release (ctx);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def242]
gpgme-1.24.3/tests/gpg/t-thread1.c:135:7: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:118:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:121:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:123:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:124:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:125:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:126:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:132:7: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:135:7: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/18/codeFlows/0/threadFlows/0/locations/3)
#  133|   
#  134|         gpgme_data_release (in);
#  135|->       gpgme_data_release (out);
#  136|         gpgme_release (ctx);
#  137|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def243]
gpgme-1.24.3/tests/gpg/t-thread1.c:136:7: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cipher-1.asc")’
gpgme-1.24.3/tests/gpg/t-thread1.c:94:1: enter_function: entry to ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: call_function: calling ‘make_filename’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:97:24: return_function: returning to ‘thread_two’ from ‘make_filename’
gpgme-1.24.3/tests/gpg/t-thread1.c:102:15: branch_true: following ‘true’ branch (when ‘i != 20’)...
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: branch_true: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: call_function: calling ‘init_gpgme’ from ‘thread_two’
gpgme-1.24.3/tests/gpg/t-thread1.c:109:7: return_function: returning to ‘thread_two’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpg/t-thread1.c:112:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:114:10: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:118:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:120:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:121:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:123:13: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:124:7: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:125:16: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:126:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpg/t-thread1.c:132:7: branch_false: ...to here
gpgme-1.24.3/tests/gpg/t-thread1.c:136:7: danger: ‘make_filename("cipher-1.asc")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/19/codeFlows/0/threadFlows/0/locations/3)
#  134|         gpgme_data_release (in);
#  135|         gpgme_data_release (out);
#  136|->       gpgme_release (ctx);
#  137|       }
#  138|     free (cipher_1_asc);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def244]
gpgme-1.24.3/tests/gpgsm/t-import.c:152:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:152:9: danger: ‘make_filename("cert_dfn_pca01.der")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/3)
#  150|     init_gpgme (GPGME_PROTOCOL_CMS);
#  151|   
#  152|->   err = gpgme_new (&ctx);
#  153|     fail_if_err (err);
#  154|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def245]
gpgme-1.24.3/tests/gpgsm/t-import.c:152:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:152:9: danger: ‘make_filename("cert_dfn_pca15.der")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/8)
#  150|     init_gpgme (GPGME_PROTOCOL_CMS);
#  151|   
#  152|->   err = gpgme_new (&ctx);
#  153|     fail_if_err (err);
#  154|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def246]
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: danger: ‘make_filename("cert_dfn_pca01.der")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/3)
#  151|   
#  152|     err = gpgme_new (&ctx);
#  153|->   fail_if_err (err);
#  154|   
#  155|     gpgme_set_protocol (ctx, GPGME_PROTOCOL_CMS);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def247]
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: danger: ‘make_filename("cert_dfn_pca15.der")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/8)
#  151|   
#  152|     err = gpgme_new (&ctx);
#  153|->   fail_if_err (err);
#  154|   
#  155|     gpgme_set_protocol (ctx, GPGME_PROTOCOL_CMS);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def248]
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: danger: ‘make_filename("cert_dfn_pca01.der")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/3)
#  153|     fail_if_err (err);
#  154|   
#  155|->   gpgme_set_protocol (ctx, GPGME_PROTOCOL_CMS);
#  156|   
#  157|     err = gpgme_data_new_from_file (&in, cert_1, 1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def249]
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: danger: ‘make_filename("cert_dfn_pca15.der")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/8)
#  153|     fail_if_err (err);
#  154|   
#  155|->   gpgme_set_protocol (ctx, GPGME_PROTOCOL_CMS);
#  156|   
#  157|     err = gpgme_data_new_from_file (&in, cert_1, 1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def250]
gpgme-1.24.3/tests/gpgsm/t-import.c:157:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:157:9: danger: ‘make_filename("cert_dfn_pca01.der")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/21/codeFlows/0/threadFlows/0/locations/3)
#  155|     gpgme_set_protocol (ctx, GPGME_PROTOCOL_CMS);
#  156|   
#  157|->   err = gpgme_data_new_from_file (&in, cert_1, 1);
#  158|     free (cert_1);
#  159|     fail_if_err (err);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def251]
gpgme-1.24.3/tests/gpgsm/t-import.c:157:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:157:9: danger: ‘make_filename("cert_dfn_pca15.der")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/20/codeFlows/0/threadFlows/0/locations/8)
#  155|     gpgme_set_protocol (ctx, GPGME_PROTOCOL_CMS);
#  156|   
#  157|->   err = gpgme_data_new_from_file (&in, cert_1, 1);
#  158|     free (cert_1);
#  159|     fail_if_err (err);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def252]
gpgme-1.24.3/tests/gpgsm/t-import.c:161:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:159:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:161:9: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:161:9: danger: ‘make_filename("cert_dfn_pca15.der")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/22/codeFlows/0/threadFlows/0/locations/8)
#  159|     fail_if_err (err);
#  160|   
#  161|->   err = gpgme_op_import (ctx, in);
#  162|     fail_if_err (err);
#  163|     result = gpgme_op_import_result (ctx);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def253]
gpgme-1.24.3/tests/gpgsm/t-import.c:163:12: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-import.c:153:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:155:3: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:159:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:161:9: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:162:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-import.c:163:12: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-import.c:163:12: danger: ‘make_filename("cert_dfn_pca15.der")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/8)
#  161|     err = gpgme_op_import (ctx, in);
#  162|     fail_if_err (err);
#  163|->   result = gpgme_op_import_result (ctx);
#  164|     check_result (result, "DFA56FB5FC41E3A8921F77AD1622EEFD9152A5AD", 1, 1);
#  165|     gpgme_data_release (in);

Error: GCC_ANALYZER_WARNING (CWE-465): [#def254]
gpgme-1.24.3/tests/gpgsm/t-keylist.c:214:10: warning[-Wanalyzer-deref-before-check]: check of ‘*key.subkeys’ for NULL after already dereferencing it
gpgme-1.24.3/tests/gpgsm/t-keylist.c:84:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-keylist.c:92:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-keylist.c:92:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/gpgsm/t-keylist.c:95:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:96:3: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:99:3: branch_false: following ‘false’ branch...
 branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:101:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:103:12: branch_true: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:103:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:109:22: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:120:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:125:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:125:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:130:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:130:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:135:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:135:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:140:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:140:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:146:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:146:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:152:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:152:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:157:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:157:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:163:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:163:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:169:12: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:169:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:174:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:174:10: branch_false: following ‘false’ branch (when the strings are equal)...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:180:12: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:180:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:185:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:185:10: branch_false: following ‘false’ branch (when the strings are equal)...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:191:11: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:197:11: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:202:10: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:208:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/gpgsm/t-keylist.c:214:12: branch_false: ...to here
gpgme-1.24.3/tests/gpgsm/t-keylist.c:214:10: danger: pointer ‘*key.subkeys’ is checked for NULL here but it was already dereferenced at [(15)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/14)
#  212|   	  exit (1);
#  213|   	}
#  214|->       if (!key->subkeys || key->subkeys->next)
#  215|   	{
#  216|   	  fprintf (stderr, "Key has unexpected number of subkeys\n");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def255]
gpgme-1.24.3/tests/gpgsm/t-support.h:114:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  112|     gpgme_error_t err;
#  113|   
#  114|->   gpgme_check_version (NULL);
#  115|   #ifndef HAVE_W32_SYSTEM
#  116|     setlocale (LC_ALL, "");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def256]
gpgme-1.24.3/tests/gpgsm/t-support.h:114:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  112|     gpgme_error_t err;
#  113|   
#  114|->   gpgme_check_version (NULL);
#  115|   #ifndef HAVE_W32_SYSTEM
#  116|     setlocale (LC_ALL, "");

Error: GCC_ANALYZER_WARNING (CWE-401): [#def257]
gpgme-1.24.3/tests/gpgsm/t-support.h:117:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  115|   #ifndef HAVE_W32_SYSTEM
#  116|     setlocale (LC_ALL, "");
#  117|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  118|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  119|   #endif

Error: GCC_ANALYZER_WARNING (CWE-401): [#def258]
gpgme-1.24.3/tests/gpgsm/t-support.h:117:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  115|   #ifndef HAVE_W32_SYSTEM
#  116|     setlocale (LC_ALL, "");
#  117|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  118|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  119|   #endif

Error: GCC_ANALYZER_WARNING (CWE-401): [#def259]
gpgme-1.24.3/tests/gpgsm/t-support.h:118:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  116|     setlocale (LC_ALL, "");
#  117|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  118|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  119|   #endif
#  120|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def260]
gpgme-1.24.3/tests/gpgsm/t-support.h:118:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  116|     setlocale (LC_ALL, "");
#  117|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  118|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  119|   #endif
#  120|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def261]
gpgme-1.24.3/tests/gpgsm/t-support.h:121:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  119|   #endif
#  120|   
#  121|->   err = gpgme_engine_check_version (proto);
#  122|     fail_if_err (err);
#  123|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def262]
gpgme-1.24.3/tests/gpgsm/t-support.h:121:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  119|   #endif
#  120|   
#  121|->   err = gpgme_engine_check_version (proto);
#  122|     fail_if_err (err);
#  123|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def263]
gpgme-1.24.3/tests/gpgsm/t-support.h:122:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca01.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  120|   
#  121|     err = gpgme_engine_check_version (proto);
#  122|->   fail_if_err (err);
#  123|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def264]
gpgme-1.24.3/tests/gpgsm/t-support.h:122:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("cert_dfn_pca15.der")’
gpgme-1.24.3/tests/gpgsm/t-import.c:141:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:147:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/gpgsm/t-import.c:148:18: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/gpgsm/t-import.c:150:3: call_function: calling ‘init_gpgme’ from ‘main’
#  120|   
#  121|     err = gpgme_engine_check_version (proto);
#  122|->   fail_if_err (err);
#  123|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def265]
gpgme-1.24.3/tests/json/t-json.c:89:7: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
gpgme-1.24.3/tests/json/t-json.c:274:1: enter_function: entry to ‘run_test’
gpgme-1.24.3/tests/json/t-json.c:289:6: branch_false: following ‘false’ branch (when ‘top_srcdir’ is non-NULL)...
gpgme-1.24.3/tests/json/t-json.c:295:3: branch_false: ...to here
gpgme-1.24.3/tests/json/t-json.c:302:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/json/t-json.c:304:3: branch_false: ...to here
gpgme-1.24.3/tests/json/t-json.c:306:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/json/t-json.c:307:3: branch_false: ...to here
gpgme-1.24.3/tests/json/t-json.c:307:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/json/t-json.c:308:3: branch_false: ...to here
gpgme-1.24.3/tests/json/t-json.c:308:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/json/t-json.c:310:3: branch_false: ...to here
gpgme-1.24.3/tests/json/t-json.c:314:3: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/json/t-json.c:319:14: branch_false: ...to here
gpgme-1.24.3/tests/json/t-json.c:321:6: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/json/t-json.c:323:18: branch_true: ...to here
gpgme-1.24.3/tests/json/t-json.c:323:18: call_function: calling ‘get_file’ from ‘run_test’
#   87|       }
#   88|   
#   89|->   if (gpgrt_fread (buf, buflen, 1, fp) != 1)
#   90|       {
#   91|         err = gpg_error_from_syserror ();

Error: GCC_ANALYZER_WARNING (CWE-401): [#def266]
gpgme-1.24.3/tests/run-import.c:151:9: warning[-Wanalyzer-malloc-leak]: leak of ‘import_options’
gpgme-1.24.3/tests/run-import.c:60:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/run-import.c:75:6: branch_true: following ‘true’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-import.c:76:7: branch_true: ...to here
gpgme-1.24.3/tests/run-import.c:77:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-import.c:80:12: branch_true: ...to here
gpgme-1.24.3/tests/run-import.c:80:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-import.c:85:17: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:85:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-import.c:87:17: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:115:14: branch_false: following ‘false’ branch (when ‘argc != 1’)...
gpgme-1.24.3/tests/run-import.c:117:28: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:117:28: acquire_memory: allocated here
gpgme-1.24.3/tests/run-import.c:146:6: branch_false: following ‘false’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-import.c:149:3: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:149:3: call_function: calling ‘init_gpgme’ from ‘main’
gpgme-1.24.3/tests/run-import.c:149:3: return_function: returning to ‘main’ from ‘init_gpgme’
gpgme-1.24.3/tests/run-import.c:151:9: danger: ‘import_options’ leaks here; was allocated at [(12)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/11)
#  149|     init_gpgme (protocol);
#  150|   
#  151|->   err = gpgme_new (&ctx);
#  152|     fail_if_err (err);
#  153|     gpgme_set_protocol (ctx, protocol);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def267]
gpgme-1.24.3/tests/run-keylist.c:239:11: warning[-Wanalyzer-malloc-leak]: leak of ‘trust_model’
gpgme-1.24.3/tests/run-keylist.c:131:6: branch_true: following ‘true’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-keylist.c:132:7: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:134:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-keylist.c:137:12: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:137:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:142:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:142:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:144:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:251:14: branch_false: following ‘false’ branch (when ‘argc != 1’)...
gpgme-1.24.3/tests/run-keylist.c:253:25: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:253:25: acquire_memory: allocated here
gpgme-1.24.3/tests/run-keylist.c:134:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-keylist.c:137:12: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:137:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:142:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:142:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:144:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:144:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:149:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:149:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:154:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:154:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:159:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:159:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:164:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:164:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:169:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:169:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:174:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:174:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:179:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:179:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:184:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:184:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:189:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:189:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:194:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:194:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:199:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:199:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:204:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:204:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:209:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:209:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:214:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:214:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:219:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:219:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:224:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:224:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:229:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:229:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:234:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:234:15: branch_true: following ‘true’ branch (when the strings are equal)...
gpgme-1.24.3/tests/run-keylist.c:237:14: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:237:14: branch_false: following ‘false’ branch (when ‘argc != 1’)...
gpgme-1.24.3/tests/run-keylist.c:239:11: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:239:11: danger: ‘trust_model’ leaks here; was allocated at [(11)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/10)
#  237|             if (!argc)
#  238|               show_usage (1);
#  239|->           gpgme_set_global_flag ("require-gnupg", *argv);
#  240|             argc--; argv++;
#  241|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def268]
gpgme-1.24.3/tests/run-keylist.c:254:19: warning[-Wanalyzer-malloc-leak]: leak of ‘trust_model’
gpgme-1.24.3/tests/run-keylist.c:131:6: branch_true: following ‘true’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-keylist.c:132:7: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:134:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-keylist.c:137:12: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:137:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:142:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:142:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:144:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:251:14: branch_false: following ‘false’ branch (when ‘argc != 1’)...
gpgme-1.24.3/tests/run-keylist.c:253:25: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:253:25: acquire_memory: allocated here
gpgme-1.24.3/tests/run-keylist.c:134:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-keylist.c:137:12: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:137:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:142:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:142:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:144:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:144:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:149:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:149:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:154:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:154:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:159:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:159:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:164:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:164:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:169:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:169:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:174:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:174:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:179:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:179:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:184:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:184:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:189:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:189:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:194:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:194:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:199:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:199:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:204:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:204:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:209:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:209:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:214:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:214:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:219:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:219:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:224:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:224:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:229:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:229:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:234:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:234:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:242:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:242:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-keylist.c:248:17: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:248:15: branch_true: following ‘true’ branch (when the strings are equal)...
gpgme-1.24.3/tests/run-keylist.c:251:14: branch_true: ...to here
gpgme-1.24.3/tests/run-keylist.c:251:14: branch_false: following ‘false’ branch (when ‘argc != 1’)...
gpgme-1.24.3/tests/run-keylist.c:253:25: branch_false: ...to here
gpgme-1.24.3/tests/run-keylist.c:254:19: danger: ‘trust_model’ leaks here; was allocated at [(11)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/10)
#  252|               show_usage (1);
#  253|             trust_model = strdup (*argv);
#  254|->           argc--; argv++;
#  255|           }
#  256|         else if (!strncmp (*argv, "--", 2))

Error: GCC_ANALYZER_WARNING (CWE-401): [#def269]
gpgme-1.24.3/tests/run-support.h:138:3: warning[-Wanalyzer-malloc-leak]: leak of ‘import_options’
gpgme-1.24.3/tests/run-import.c:60:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/run-import.c:75:6: branch_true: following ‘true’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-import.c:76:7: branch_true: ...to here
gpgme-1.24.3/tests/run-import.c:77:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-import.c:80:12: branch_true: ...to here
gpgme-1.24.3/tests/run-import.c:80:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-import.c:85:17: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:85:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-import.c:87:17: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:115:14: branch_false: following ‘false’ branch (when ‘argc != 1’)...
gpgme-1.24.3/tests/run-import.c:117:28: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:117:28: acquire_memory: allocated here
gpgme-1.24.3/tests/run-import.c:146:6: branch_false: following ‘false’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-import.c:149:3: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:149:3: call_function: calling ‘init_gpgme’ from ‘main’
#  136|   init_gpgme_basic (void)
#  137|   {
#  138|->   gpgme_check_version (NULL);
#  139|     setlocale (LC_ALL, "");
#  140|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def270]
gpgme-1.24.3/tests/run-support.h:138:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:187:3: call_function: calling ‘init_gpgme_basic’ from ‘main’
#  136|   init_gpgme_basic (void)
#  137|   {
#  138|->   gpgme_check_version (NULL);
#  139|     setlocale (LC_ALL, "");
#  140|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def271]
gpgme-1.24.3/tests/run-support.h:138:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:187:3: call_function: calling ‘init_gpgme_basic’ from ‘main’
#  136|   init_gpgme_basic (void)
#  137|   {
#  138|->   gpgme_check_version (NULL);
#  139|     setlocale (LC_ALL, "");
#  140|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def272]
gpgme-1.24.3/tests/run-support.h:140:3: warning[-Wanalyzer-malloc-leak]: leak of ‘import_options’
gpgme-1.24.3/tests/run-import.c:60:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/run-import.c:75:6: branch_true: following ‘true’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-import.c:76:7: branch_true: ...to here
gpgme-1.24.3/tests/run-import.c:77:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-import.c:80:12: branch_true: ...to here
gpgme-1.24.3/tests/run-import.c:80:10: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-import.c:85:17: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:85:15: branch_false: following ‘false’ branch (when the strings are non-equal)...
gpgme-1.24.3/tests/run-import.c:87:17: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:115:14: branch_false: following ‘false’ branch (when ‘argc != 1’)...
gpgme-1.24.3/tests/run-import.c:117:28: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:117:28: acquire_memory: allocated here
gpgme-1.24.3/tests/run-import.c:146:6: branch_false: following ‘false’ branch (when ‘argc != 0’)...
gpgme-1.24.3/tests/run-import.c:149:3: branch_false: ...to here
gpgme-1.24.3/tests/run-import.c:149:3: call_function: calling ‘init_gpgme’ from ‘main’
#  138|     gpgme_check_version (NULL);
#  139|     setlocale (LC_ALL, "");
#  140|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  141|   #ifndef HAVE_W32_SYSTEM
#  142|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def273]
gpgme-1.24.3/tests/run-support.h:140:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:187:3: call_function: calling ‘init_gpgme_basic’ from ‘main’
#  138|     gpgme_check_version (NULL);
#  139|     setlocale (LC_ALL, "");
#  140|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  141|   #ifndef HAVE_W32_SYSTEM
#  142|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def274]
gpgme-1.24.3/tests/run-support.h:140:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:187:3: call_function: calling ‘init_gpgme_basic’ from ‘main’
#  138|     gpgme_check_version (NULL);
#  139|     setlocale (LC_ALL, "");
#  140|->   gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  141|   #ifndef HAVE_W32_SYSTEM
#  142|     gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def275]
gpgme-1.24.3/tests/run-support.h:142:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:187:3: call_function: calling ‘init_gpgme_basic’ from ‘main’
#  140|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  141|   #ifndef HAVE_W32_SYSTEM
#  142|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  143|   #endif
#  144|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def276]
gpgme-1.24.3/tests/run-support.h:142:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:187:3: call_function: calling ‘init_gpgme_basic’ from ‘main’
#  140|     gpgme_set_locale (NULL, LC_CTYPE, setlocale (LC_CTYPE, NULL));
#  141|   #ifndef HAVE_W32_SYSTEM
#  142|->   gpgme_set_locale (NULL, LC_MESSAGES, setlocale (LC_MESSAGES, NULL));
#  143|   #endif
#  144|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def277]
gpgme-1.24.3/tests/run-threaded.c:232:8: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:283:1: enter_function: entry to ‘random_data_new’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_true: following ‘true’ branch (when ‘data_rand == 2’)...
gpgme-1.24.3/tests/run-threaded.c:328:13: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:328:13: call_function: calling ‘get_file’ from ‘random_data_new’
#  230|     size_t buflen;
#  231|   
#  232|->   fp = gpgrt_fopen (fname, "r");
#  233|     if (!fp)
#  234|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def278]
gpgme-1.24.3/tests/run-threaded.c:236:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:283:1: enter_function: entry to ‘random_data_new’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_true: following ‘true’ branch (when ‘data_rand == 2’)...
gpgme-1.24.3/tests/run-threaded.c:328:13: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:328:13: call_function: calling ‘get_file’ from ‘random_data_new’
#  234|       {
#  235|         err = gpg_error_from_syserror ();
#  236|->       fprintf (stderr, "Error: can't open '%s': %s\n", fname,
#  237|                  gpg_strerror (err));
#  238|         return NULL;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def279]
gpgme-1.24.3/tests/run-threaded.c:241:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:283:1: enter_function: entry to ‘random_data_new’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_true: following ‘true’ branch (when ‘data_rand == 2’)...
gpgme-1.24.3/tests/run-threaded.c:328:13: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:328:13: call_function: calling ‘get_file’ from ‘random_data_new’
#  239|       }
#  240|   
#  241|->   if (fstat (gpgrt_fileno(fp), &st))
#  242|       {
#  243|         err = gpg_error_from_syserror ();

Error: GCC_ANALYZER_WARNING (CWE-401): [#def280]
gpgme-1.24.3/tests/run-threaded.c:244:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:283:1: enter_function: entry to ‘random_data_new’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_true: following ‘true’ branch (when ‘data_rand == 2’)...
gpgme-1.24.3/tests/run-threaded.c:328:13: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:328:13: call_function: calling ‘get_file’ from ‘random_data_new’
#  242|       {
#  243|         err = gpg_error_from_syserror ();
#  244|->       fprintf (stderr, "Error: can't stat '%s': %s\n", fname,
#  245|                  gpg_strerror (err));
#  246|         gpgrt_fclose (fp);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def281]
gpgme-1.24.3/tests/run-threaded.c:246:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:283:1: enter_function: entry to ‘random_data_new’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_true: following ‘true’ branch (when ‘data_rand == 2’)...
gpgme-1.24.3/tests/run-threaded.c:328:13: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:328:13: call_function: calling ‘get_file’ from ‘random_data_new’
#  244|         fprintf (stderr, "Error: can't stat '%s': %s\n", fname,
#  245|                  gpg_strerror (err));
#  246|->       gpgrt_fclose (fp);
#  247|         return NULL;
#  248|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def282]
gpgme-1.24.3/tests/run-threaded.c:255:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:283:1: enter_function: entry to ‘random_data_new’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_true: following ‘true’ branch (when ‘data_rand == 2’)...
gpgme-1.24.3/tests/run-threaded.c:328:13: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:328:13: call_function: calling ‘get_file’ from ‘random_data_new’
#  253|       {
#  254|         fprintf (stderr, "Error: no mem\n");
#  255|->       gpgrt_fclose (fp);
#  256|         return NULL;
#  257|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def283]
gpgme-1.24.3/tests/run-threaded.c:259:7: warning[-Wanalyzer-malloc-leak]: leak of ‘buf’
gpgme-1.24.3/tests/run-threaded.c:233:6: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:241:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:241:6: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:250:12: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:251:9: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:252:6: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
gpgme-1.24.3/tests/run-threaded.c:259:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:259:7: danger: ‘buf’ leaks here; was allocated at [(5)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/4)
#  257|       }
#  258|   
#  259|->   if (gpgrt_fread (buf, buflen, 1, fp) != 1)
#  260|       {
#  261|         err = gpg_error_from_syserror ();

Error: CPPCHECK_WARNING (CWE-476): [#def284]
gpgme-1.24.3/tests/run-threaded.c:288: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ret
#  286|     int data_rand;
#  287|   
#  288|->   ret->fd = -1;
#  289|   
#  290|     if (data_type)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def285]
gpgme-1.24.3/tests/run-threaded.c:288:3: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: this call could return NULL
gpgme-1.24.3/tests/run-threaded.c:288:3: danger: ‘ret’ could be NULL: unchecked value from [(1)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/0)
#  286|     int data_rand;
#  287|   
#  288|->   ret->fd = -1;
#  289|   
#  290|     if (data_type)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def286]
gpgme-1.24.3/tests/run-threaded.c:304:11: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_true: following ‘true’ branch (when ‘data_rand == 0’)...
gpgme-1.24.3/tests/run-threaded.c:301:24: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:302:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-threaded.c:304:11: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:304:11: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/0)
#  302|         if (!f_stream)
#  303|           {
#  304|->           errpoint;
#  305|           }
#  306|         fail_if_err (gpgme_data_new_from_stream (&(ret->dh), f_stream));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def287]
gpgme-1.24.3/tests/run-threaded.c:306:7: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(fname, "rb")’
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_true: following ‘true’ branch (when ‘data_rand == 0’)...
gpgme-1.24.3/tests/run-threaded.c:301:24: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:301:24: acquire_resource: opened here
gpgme-1.24.3/tests/run-threaded.c:302:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:306:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:306:7: danger: ‘fopen(fname, "rb")’ leaks here; was opened at [(3)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/2)
#  304|             errpoint;
#  305|           }
#  306|->       fail_if_err (gpgme_data_new_from_stream (&(ret->dh), f_stream));
#  307|         ret->file = f_stream;
#  308|         return ret;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def288]
gpgme-1.24.3/tests/run-threaded.c:306:7: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(fname, "rb")’
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_true: following ‘true’ branch (when ‘data_rand == 0’)...
gpgme-1.24.3/tests/run-threaded.c:301:24: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:301:24: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:302:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:306:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:306:7: danger: ‘fopen(fname, "rb")’ leaks here; was allocated at [(3)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/2)
#  304|             errpoint;
#  305|           }
#  306|->       fail_if_err (gpgme_data_new_from_stream (&(ret->dh), f_stream));
#  307|         ret->file = f_stream;
#  308|         return ret;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def289]
gpgme-1.24.3/tests/run-threaded.c:306:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_true: following ‘true’ branch (when ‘data_rand == 0’)...
gpgme-1.24.3/tests/run-threaded.c:301:24: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:302:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:306:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:306:7: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/0)
#  304|             errpoint;
#  305|           }
#  306|->       fail_if_err (gpgme_data_new_from_stream (&(ret->dh), f_stream));
#  307|         ret->file = f_stream;
#  308|         return ret;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def290]
gpgme-1.24.3/tests/run-threaded.c:312:16: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_true: following ‘true’ branch (when ‘data_rand == 1’)...
gpgme-1.24.3/tests/run-threaded.c:312:16: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:312:16: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/0)
#  310|     if (data_rand == 1) /* fd */
#  311|       {
#  312|->       int fd = open (fname, O_RDONLY);
#  313|         gpgme_data_t dh;
#  314|         if (fd == -1)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def291]
gpgme-1.24.3/tests/run-threaded.c:316:11: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_true: following ‘true’ branch (when ‘data_rand == 1’)...
gpgme-1.24.3/tests/run-threaded.c:312:16: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:314:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-threaded.c:316:11: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:316:11: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/0)
#  314|         if (fd == -1)
#  315|           {
#  316|->           errpoint;
#  317|           }
#  318|         fail_if_err (gpgme_data_new_from_fd (&dh, fd));

Error: GCC_ANALYZER_WARNING (CWE-775): [#def292]
gpgme-1.24.3/tests/run-threaded.c:318:7: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(fname, 0)’
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_true: following ‘true’ branch (when ‘data_rand == 1’)...
gpgme-1.24.3/tests/run-threaded.c:312:16: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:312:16: acquire_resource: opened here
gpgme-1.24.3/tests/run-threaded.c:314:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:318:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:318:7: danger: ‘open(fname, 0)’ leaks here; was opened at [(5)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/4)
#  316|             errpoint;
#  317|           }
#  318|->       fail_if_err (gpgme_data_new_from_fd (&dh, fd));
#  319|         ret->fd = fd;
#  320|         ret->dh = dh;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def293]
gpgme-1.24.3/tests/run-threaded.c:318:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_true: following ‘true’ branch (when ‘data_rand == 1’)...
gpgme-1.24.3/tests/run-threaded.c:312:16: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:314:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:318:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:318:7: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/0)
#  316|             errpoint;
#  317|           }
#  318|->       fail_if_err (gpgme_data_new_from_fd (&dh, fd));
#  319|         ret->fd = fd;
#  320|         ret->dh = dh;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def294]
gpgme-1.24.3/tests/run-threaded.c:341:31: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: following ‘false’ branch (when ‘data_rand != 2’)...
gpgme-1.24.3/tests/run-threaded.c:339:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:339:6: branch_true: following ‘true’ branch (when ‘data_rand == 3’)...
gpgme-1.24.3/tests/run-threaded.c:341:31: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:341:31: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/22/codeFlows/0/threadFlows/0/locations/0)
#  339|     if (data_rand == 3) /* estream */
#  340|       {
#  341|->       gpgrt_stream_t stream = gpgrt_fopen (fname, "rb");
#  342|   
#  343|         if (!stream)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def295]
gpgme-1.24.3/tests/run-threaded.c:345:11: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: following ‘false’ branch (when ‘data_rand != 2’)...
gpgme-1.24.3/tests/run-threaded.c:339:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:339:6: branch_true: following ‘true’ branch (when ‘data_rand == 3’)...
gpgme-1.24.3/tests/run-threaded.c:341:31: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:343:10: branch_true: following ‘true’ branch...
gpgme-1.24.3/tests/run-threaded.c:345:11: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:345:11: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/23/codeFlows/0/threadFlows/0/locations/0)
#  343|         if (!stream)
#  344|           {
#  345|->           errpoint;
#  346|           }
#  347|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def296]
gpgme-1.24.3/tests/run-threaded.c:348:7: warning[-Wanalyzer-malloc-leak]: leak of ‘ret’
gpgme-1.24.3/tests/run-threaded.c:285:16: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:299:6: branch_false: following ‘false’ branch (when ‘data_rand != 0’)...
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:310:6: branch_false: following ‘false’ branch (when ‘data_rand != 1’)...
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:323:6: branch_false: following ‘false’ branch (when ‘data_rand != 2’)...
gpgme-1.24.3/tests/run-threaded.c:339:6: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:339:6: branch_true: following ‘true’ branch (when ‘data_rand == 3’)...
gpgme-1.24.3/tests/run-threaded.c:341:31: branch_true: ...to here
gpgme-1.24.3/tests/run-threaded.c:343:10: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:348:7: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:348:7: danger: ‘ret’ leaks here; was allocated at [(1)](sarif:/runs/0/results/25/codeFlows/0/threadFlows/0/locations/0)
#  346|           }
#  347|   
#  348|->       fail_if_err (gpgme_data_new_from_estream (&(ret->dh), stream));
#  349|         ret->stream = stream;
#  350|         return ret;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def297]
gpgme-1.24.3/tests/run-threaded.c:571:3: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(file_name, "rb")’
gpgme-1.24.3/tests/run-threaded.c:562:13: acquire_resource: opened here
gpgme-1.24.3/tests/run-threaded.c:565:6: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:571:3: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:571:3: danger: ‘fopen(file_name, "rb")’ leaks here; was opened at [(1)](sarif:/runs/0/results/26/codeFlows/0/threadFlows/0/locations/0)
#  569|       }
#  570|   
#  571|->   fail_if_err (gpgme_data_new_from_stream (&data, f));
#  572|   
#  573|     type = gpgme_data_identify (data, 0);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def298]
gpgme-1.24.3/tests/run-threaded.c:571:3: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(file_name, "rb")’
gpgme-1.24.3/tests/run-threaded.c:562:13: acquire_memory: allocated here
gpgme-1.24.3/tests/run-threaded.c:565:6: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/run-threaded.c:571:3: branch_false: ...to here
gpgme-1.24.3/tests/run-threaded.c:571:3: danger: ‘fopen(file_name, "rb")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/0)
#  569|       }
#  570|   
#  571|->   fail_if_err (gpgme_data_new_from_stream (&data, f));
#  572|   
#  573|     type = gpgme_data_identify (data, 0);

Error: CPPCHECK_WARNING (CWE-476): [#def299]
gpgme-1.24.3/tests/run-threaded.c:762: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: msg_it
#  760|             msg_it = msg_it->next;
#  761|           }
#  762|->       msg_it->file_name = *argv;
#  763|         argc--; argv++;
#  764|       }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def300]
gpgme-1.24.3/tests/t-data.c:100:10: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#   98|     size_t read;
#   99|   
#  100|->   read = gpgme_data_read (data, buffer, sizeof (buffer));
#  101|   
#  102|     if (read != strlen (text) || strncmp (buffer, text, strlen (text)))

Error: GCC_ANALYZER_WARNING (CWE-401): [#def301]
gpgme-1.24.3/tests/t-data.c:100:10: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#   98|     size_t read;
#   99|   
#  100|->   read = gpgme_data_read (data, buffer, sizeof (buffer));
#  101|   
#  102|     if (read != strlen (text) || strncmp (buffer, text, strlen (text)))

Error: GCC_ANALYZER_WARNING (CWE-401): [#def302]
gpgme-1.24.3/tests/t-data.c:109:10: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#  107|       }
#  108|   
#  109|->   read = gpgme_data_read (data, buffer, sizeof (buffer));
#  110|     if (read)
#  111|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def303]
gpgme-1.24.3/tests/t-data.c:109:10: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#  107|       }
#  108|   
#  109|->   read = gpgme_data_read (data, buffer, sizeof (buffer));
#  110|     if (read)
#  111|       {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def304]
gpgme-1.24.3/tests/t-data.c:126:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#  124|     if (round == TEST_INOUT_NONE)
#  125|       {
#  126|->       read = gpgme_data_read (data, buffer, sizeof (buffer));
#  127|         if (read > 0)
#  128|   	{

Error: GCC_ANALYZER_WARNING (CWE-401): [#def305]
gpgme-1.24.3/tests/t-data.c:126:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#  124|     if (round == TEST_INOUT_NONE)
#  125|       {
#  126|->       read = gpgme_data_read (data, buffer, sizeof (buffer));
#  127|         if (read > 0)
#  128|   	{

Error: GCC_ANALYZER_WARNING (CWE-401): [#def306]
gpgme-1.24.3/tests/t-data.c:137:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#  135|   
#  136|     read_once_test (round, data);
#  137|->   gpgme_data_seek (data, 0, SEEK_SET);
#  138|     read_once_test (round, data);
#  139|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def307]
gpgme-1.24.3/tests/t-data.c:137:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
#  135|   
#  136|     read_once_test (round, data);
#  137|->   gpgme_data_seek (data, 0, SEEK_SET);
#  138|     read_once_test (round, data);
#  139|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def308]
gpgme-1.24.3/tests/t-data.c:147:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
gpgme-1.24.3/tests/t-data.c:266:7: return_function: returning to ‘main’ from ‘read_test’
gpgme-1.24.3/tests/t-data.c:267:7: call_function: calling ‘write_test’ from ‘main’
#  145|     size_t amt;
#  146|   
#  147|->   amt = gpgme_data_write (data, text, strlen (text));
#  148|     if (amt != strlen (text))
#  149|       fail_if_err (gpgme_error_from_errno (errno));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def309]
gpgme-1.24.3/tests/t-data.c:147:9: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
gpgme-1.24.3/tests/t-data.c:266:7: return_function: returning to ‘main’ from ‘read_test’
gpgme-1.24.3/tests/t-data.c:267:7: call_function: calling ‘write_test’ from ‘main’
#  145|     size_t amt;
#  146|   
#  147|->   amt = gpgme_data_write (data, text, strlen (text));
#  148|     if (amt != strlen (text))
#  149|       fail_if_err (gpgme_error_from_errno (errno));

Error: GCC_ANALYZER_WARNING (CWE-401): [#def310]
gpgme-1.24.3/tests/t-data.c:149:5: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
gpgme-1.24.3/tests/t-data.c:266:7: return_function: returning to ‘main’ from ‘read_test’
gpgme-1.24.3/tests/t-data.c:267:7: call_function: calling ‘write_test’ from ‘main’
#  147|     amt = gpgme_data_write (data, text, strlen (text));
#  148|     if (amt != strlen (text))
#  149|->     fail_if_err (gpgme_error_from_errno (errno));
#  150|   
#  151|     gpgme_data_seek (data, 0, SEEK_SET);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def311]
gpgme-1.24.3/tests/t-data.c:149:5: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
gpgme-1.24.3/tests/t-data.c:266:7: return_function: returning to ‘main’ from ‘read_test’
gpgme-1.24.3/tests/t-data.c:267:7: call_function: calling ‘write_test’ from ‘main’
#  147|     amt = gpgme_data_write (data, text, strlen (text));
#  148|     if (amt != strlen (text))
#  149|->     fail_if_err (gpgme_error_from_errno (errno));
#  150|   
#  151|     gpgme_data_seek (data, 0, SEEK_SET);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def312]
gpgme-1.24.3/tests/t-data.c:151:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
gpgme-1.24.3/tests/t-data.c:266:7: return_function: returning to ‘main’ from ‘read_test’
gpgme-1.24.3/tests/t-data.c:267:7: call_function: calling ‘write_test’ from ‘main’
#  149|       fail_if_err (gpgme_error_from_errno (errno));
#  150|   
#  151|->   gpgme_data_seek (data, 0, SEEK_SET);
#  152|   
#  153|     if (round == TEST_INOUT_NONE)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def313]
gpgme-1.24.3/tests/t-data.c:151:3: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: branch_false: following ‘false’ branch (when ‘err == 0’)...
gpgme-1.24.3/tests/t-data.c:266:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:266:7: call_function: calling ‘read_test’ from ‘main’
gpgme-1.24.3/tests/t-data.c:266:7: return_function: returning to ‘main’ from ‘read_test’
gpgme-1.24.3/tests/t-data.c:267:7: call_function: calling ‘write_test’ from ‘main’
#  149|       fail_if_err (gpgme_error_from_errno (errno));
#  150|   
#  151|->   gpgme_data_seek (data, 0, SEEK_SET);
#  152|   
#  153|     if (round == TEST_INOUT_NONE)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def314]
gpgme-1.24.3/tests/t-data.c:194:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:194:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/25/codeFlows/0/threadFlows/0/locations/3)
#  192|   	{
#  193|   	case TEST_INVALID_ARGUMENT:
#  194|-> 	  err = gpgme_data_new (NULL);
#  195|   	  if (!err)
#  196|   	    {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def315]
gpgme-1.24.3/tests/t-data.c:194:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:194:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/24/codeFlows/0/threadFlows/0/locations/8)
#  192|   	{
#  193|   	case TEST_INVALID_ARGUMENT:
#  194|-> 	  err = gpgme_data_new (NULL);
#  195|   	  if (!err)
#  196|   	    {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def316]
gpgme-1.24.3/tests/t-data.c:195:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/26/codeFlows/0/threadFlows/0/locations/3)
#  193|   	case TEST_INVALID_ARGUMENT:
#  194|   	  err = gpgme_data_new (NULL);
#  195|-> 	  if (!err)
#  196|   	    {
#  197|   	      fprintf (stderr, "%s:%d: gpgme_data_new on NULL pointer succeeded "

Error: GCC_ANALYZER_WARNING (CWE-401): [#def317]
gpgme-1.24.3/tests/t-data.c:195:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/27/codeFlows/0/threadFlows/0/locations/8)
#  193|   	case TEST_INVALID_ARGUMENT:
#  194|   	  err = gpgme_data_new (NULL);
#  195|-> 	  if (!err)
#  196|   	    {
#  197|   	      fprintf (stderr, "%s:%d: gpgme_data_new on NULL pointer succeeded "

Error: GCC_ANALYZER_WARNING (CWE-401): [#def318]
gpgme-1.24.3/tests/t-data.c:203:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:203:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/29/codeFlows/0/threadFlows/0/locations/3)
#  201|   	  continue;
#  202|   	case TEST_INOUT_NONE:
#  203|-> 	  err = gpgme_data_new (&data);
#  204|   	  break;
#  205|   	case TEST_INOUT_MEM_NO_COPY:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def319]
gpgme-1.24.3/tests/t-data.c:203:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:203:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/28/codeFlows/0/threadFlows/0/locations/8)
#  201|   	  continue;
#  202|   	case TEST_INOUT_NONE:
#  203|-> 	  err = gpgme_data_new (&data);
#  204|   	  break;
#  205|   	case TEST_INOUT_MEM_NO_COPY:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def320]
gpgme-1.24.3/tests/t-data.c:206:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:206:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/30/codeFlows/0/threadFlows/0/locations/3)
#  204|   	  break;
#  205|   	case TEST_INOUT_MEM_NO_COPY:
#  206|-> 	  err = gpgme_data_new_from_mem (&data, text, strlen (text), 0);
#  207|   	  break;
#  208|   	case TEST_INOUT_MEM_COPY:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def321]
gpgme-1.24.3/tests/t-data.c:206:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:206:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/31/codeFlows/0/threadFlows/0/locations/8)
#  204|   	  break;
#  205|   	case TEST_INOUT_MEM_NO_COPY:
#  206|-> 	  err = gpgme_data_new_from_mem (&data, text, strlen (text), 0);
#  207|   	  break;
#  208|   	case TEST_INOUT_MEM_COPY:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def322]
gpgme-1.24.3/tests/t-data.c:209:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:209:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/33/codeFlows/0/threadFlows/0/locations/3)
#  207|   	  break;
#  208|   	case TEST_INOUT_MEM_COPY:
#  209|-> 	  err = gpgme_data_new_from_mem (&data, text, strlen (text), 1);
#  210|   	  break;
#  211|   	case TEST_INOUT_MEM_FROM_FILE_COPY:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def323]
gpgme-1.24.3/tests/t-data.c:209:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:209:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/32/codeFlows/0/threadFlows/0/locations/8)
#  207|   	  break;
#  208|   	case TEST_INOUT_MEM_COPY:
#  209|-> 	  err = gpgme_data_new_from_mem (&data, text, strlen (text), 1);
#  210|   	  break;
#  211|   	case TEST_INOUT_MEM_FROM_FILE_COPY:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def324]
gpgme-1.24.3/tests/t-data.c:212:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:212:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/35/codeFlows/0/threadFlows/0/locations/3)
#  210|   	  break;
#  211|   	case TEST_INOUT_MEM_FROM_FILE_COPY:
#  212|-> 	  err = gpgme_data_new_from_file (&data, text_filename, 1);
#  213|   	  break;
#  214|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def325]
gpgme-1.24.3/tests/t-data.c:212:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:212:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/34/codeFlows/0/threadFlows/0/locations/8)
#  210|   	  break;
#  211|   	case TEST_INOUT_MEM_FROM_FILE_COPY:
#  212|-> 	  err = gpgme_data_new_from_file (&data, text_filename, 1);
#  213|   	  break;
#  214|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE:

Error: GCC_ANALYZER_WARNING (CWE-401): [#def326]
gpgme-1.24.3/tests/t-data.c:215:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:215:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/36/codeFlows/0/threadFlows/0/locations/3)
#  213|   	  break;
#  214|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE:
#  215|-> 	  err = gpgme_data_new_from_file (&data, missing_filename, 1);
#  216|   	  if (!err)
#  217|   	    {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def327]
gpgme-1.24.3/tests/t-data.c:215:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:215:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/37/codeFlows/0/threadFlows/0/locations/8)
#  213|   	  break;
#  214|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE:
#  215|-> 	  err = gpgme_data_new_from_file (&data, missing_filename, 1);
#  216|   	  if (!err)
#  217|   	    {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def328]
gpgme-1.24.3/tests/t-data.c:216:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:216:14: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/38/codeFlows/0/threadFlows/0/locations/3)
#  214|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE:
#  215|   	  err = gpgme_data_new_from_file (&data, missing_filename, 1);
#  216|-> 	  if (!err)
#  217|   	    {
#  218|   	      fprintf (stderr, "%s:%d: gpgme_data_new_from_file on inexistant "

Error: GCC_ANALYZER_WARNING (CWE-401): [#def329]
gpgme-1.24.3/tests/t-data.c:216:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:216:14: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/39/codeFlows/0/threadFlows/0/locations/8)
#  214|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE:
#  215|   	  err = gpgme_data_new_from_file (&data, missing_filename, 1);
#  216|-> 	  if (!err)
#  217|   	    {
#  218|   	      fprintf (stderr, "%s:%d: gpgme_data_new_from_file on inexistant "

Error: GCC_ANALYZER_WARNING (CWE-401): [#def330]
gpgme-1.24.3/tests/t-data.c:224:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:224:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/40/codeFlows/0/threadFlows/0/locations/3)
#  222|   	  continue;
#  223|   	case TEST_INOUT_MEM_FROM_FILE_NO_COPY:
#  224|-> 	  err = gpgme_data_new_from_file (&data, text_filename, 0);
#  225|   	  /* This is not implemented yet.  */
#  226|   	  if (gpgme_err_code (err) == GPG_ERR_NOT_IMPLEMENTED

Error: GCC_ANALYZER_WARNING (CWE-401): [#def331]
gpgme-1.24.3/tests/t-data.c:224:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:224:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/41/codeFlows/0/threadFlows/0/locations/8)
#  222|   	  continue;
#  223|   	case TEST_INOUT_MEM_FROM_FILE_NO_COPY:
#  224|-> 	  err = gpgme_data_new_from_file (&data, text_filename, 0);
#  225|   	  /* This is not implemented yet.  */
#  226|   	  if (gpgme_err_code (err) == GPG_ERR_NOT_IMPLEMENTED

Error: GCC_ANALYZER_WARNING (CWE-401): [#def332]
gpgme-1.24.3/tests/t-data.c:231:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:231:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/42/codeFlows/0/threadFlows/0/locations/3)
#  229|   	  break;
#  230|   	case TEST_INOUT_MEM_FROM_FILE_PART_BY_NAME:
#  231|-> 	  err = gpgme_data_new_from_filepart (&data, longer_text_filename, 0,
#  232|   					      strlen (text), strlen (text));
#  233|   	  break;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def333]
gpgme-1.24.3/tests/t-data.c:231:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:231:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/43/codeFlows/0/threadFlows/0/locations/8)
#  229|   	  break;
#  230|   	case TEST_INOUT_MEM_FROM_FILE_PART_BY_NAME:
#  231|-> 	  err = gpgme_data_new_from_filepart (&data, longer_text_filename, 0,
#  232|   					      strlen (text), strlen (text));
#  233|   	  break;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def334]
gpgme-1.24.3/tests/t-data.c:235:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:235:17: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/45/codeFlows/0/threadFlows/0/locations/3)
#  233|   	  break;
#  234|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE_PART:
#  235|-> 	  err = gpgme_data_new_from_filepart (&data, missing_filename, 0,
#  236|   					      strlen (text), strlen (text));
#  237|   	  if (!err)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def335]
gpgme-1.24.3/tests/t-data.c:235:17: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:235:17: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/44/codeFlows/0/threadFlows/0/locations/8)
#  233|   	  break;
#  234|   	case TEST_INOUT_MEM_FROM_INEXISTANT_FILE_PART:
#  235|-> 	  err = gpgme_data_new_from_filepart (&data, missing_filename, 0,
#  236|   					      strlen (text), strlen (text));
#  237|   	  if (!err)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def336]
gpgme-1.24.3/tests/t-data.c:237:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:237:14: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/47/codeFlows/0/threadFlows/0/locations/3)
#  235|   	  err = gpgme_data_new_from_filepart (&data, missing_filename, 0,
#  236|   					      strlen (text), strlen (text));
#  237|-> 	  if (!err)
#  238|   	    {
#  239|   	      fprintf (stderr, "%s:%d: gpgme_data_new_from_file on inexistant "

Error: GCC_ANALYZER_WARNING (CWE-401): [#def337]
gpgme-1.24.3/tests/t-data.c:237:14: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:237:14: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/46/codeFlows/0/threadFlows/0/locations/8)
#  235|   	  err = gpgme_data_new_from_filepart (&data, missing_filename, 0,
#  236|   					      strlen (text), strlen (text));
#  237|-> 	  if (!err)
#  238|   	    {
#  239|   	      fprintf (stderr, "%s:%d: gpgme_data_new_from_file on inexistant "

Error: GCC_ANALYZER_WARNING (CWE-401): [#def338]
gpgme-1.24.3/tests/t-data.c:247:16: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:247:16: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/48/codeFlows/0/threadFlows/0/locations/3)
#  245|   	  {
#  246|   	    FILE *fp = fopen (longer_text_filename, "rb");
#  247|-> 	    if (! fp)
#  248|   	      {
#  249|   		fprintf (stderr, "%s:%d: fopen: %s\n", __FILE__, __LINE__,

Error: GCC_ANALYZER_WARNING (CWE-401): [#def339]
gpgme-1.24.3/tests/t-data.c:247:16: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:247:16: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/49/codeFlows/0/threadFlows/0/locations/8)
#  245|   	  {
#  246|   	    FILE *fp = fopen (longer_text_filename, "rb");
#  247|-> 	    if (! fp)
#  248|   	      {
#  249|   		fprintf (stderr, "%s:%d: fopen: %s\n", __FILE__, __LINE__,

Error: GCC_ANALYZER_WARNING (CWE-775): [#def340]
gpgme-1.24.3/tests/t-data.c:253:19: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(make_filename("t-data-2.txt"), "rb")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:246:24: acquire_resource: opened here
gpgme-1.24.3/tests/t-data.c:247:16: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:253:19: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:253:19: danger: ‘fopen(make_filename("t-data-2.txt"), "rb")’ leaks here; was opened at [(20)](sarif:/runs/0/results/50/codeFlows/0/threadFlows/0/locations/19)
#  251|   		exit (1);
#  252|   	      }
#  253|-> 	    err = gpgme_data_new_from_filepart (&data, 0, fp,
#  254|   						strlen (text), strlen (text));
#  255|   	  }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def341]
gpgme-1.24.3/tests/t-data.c:253:19: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(make_filename("t-data-2.txt"), "rb")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:246:24: acquire_memory: allocated here
gpgme-1.24.3/tests/t-data.c:247:16: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:253:19: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:253:19: danger: ‘fopen(make_filename("t-data-2.txt"), "rb")’ leaks here; was allocated at [(20)](sarif:/runs/0/results/52/codeFlows/0/threadFlows/0/locations/19)
#  251|   		exit (1);
#  252|   	      }
#  253|-> 	    err = gpgme_data_new_from_filepart (&data, 0, fp,
#  254|   						strlen (text), strlen (text));
#  255|   	  }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def342]
gpgme-1.24.3/tests/t-data.c:253:19: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:247:16: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:253:19: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:253:19: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/53/codeFlows/0/threadFlows/0/locations/3)
#  251|   		exit (1);
#  252|   	      }
#  253|-> 	    err = gpgme_data_new_from_filepart (&data, 0, fp,
#  254|   						strlen (text), strlen (text));
#  255|   	  }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def343]
gpgme-1.24.3/tests/t-data.c:253:19: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:247:16: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:253:19: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:253:19: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/51/codeFlows/0/threadFlows/0/locations/8)
#  251|   		exit (1);
#  252|   	      }
#  253|-> 	    err = gpgme_data_new_from_filepart (&data, 0, fp,
#  254|   						strlen (text), strlen (text));
#  255|   	  }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def344]
gpgme-1.24.3/tests/t-data.c:264:7: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-1.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: danger: ‘make_filename("t-data-1.txt")’ leaks here; was allocated at [(4)](sarif:/runs/0/results/55/codeFlows/0/threadFlows/0/locations/3)
#  262|   	  exit (1);
#  263|   	}
#  264|->       fail_if_err (err);
#  265|   
#  266|         read_test (round, data);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def345]
gpgme-1.24.3/tests/t-data.c:264:7: warning[-Wanalyzer-malloc-leak]: leak of ‘make_filename("t-data-2.txt")’
gpgme-1.24.3/tests/t-data.c:178:1: enter_function: entry to ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:181:25: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:182:32: call_function: calling ‘make_filename’ from ‘main’
gpgme-1.24.3/tests/t-data.c:182:32: return_function: returning to ‘main’ from ‘make_filename’
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:195:14: branch_false: following ‘false’ branch...
gpgme-1.24.3/tests/t-data.c:191:7: branch_false: ...to here
gpgme-1.24.3/tests/t-data.c:189:10: branch_true: following ‘true’ branch (when ‘round != 0’)...
gpgme-1.24.3/tests/t-data.c:191:7: branch_true: ...to here
gpgme-1.24.3/tests/t-data.c:264:7: danger: ‘make_filename("t-data-2.txt")’ leaks here; was allocated at [(9)](sarif:/runs/0/results/54/codeFlows/0/threadFlows/0/locations/8)
#  262|   	  exit (1);
#  263|   	}
#  264|->       fail_if_err (err);
#  265|   
#  266|         read_test (round, data);

Scan Properties

analyzer-version-clippy1.90.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-45.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-gcc-latest-x86_64
project-namegpgme-1.24.3-6.fc44
store-results-to/tmp/tmp8l057b2i/gpgme-1.24.3-6.fc44.tar.xz
time-created2025-10-28 18:16:06
time-finished2025-10-28 18:23:54
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmp8l057b2i/gpgme-1.24.3-6.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmp8l057b2i/gpgme-1.24.3-6.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9