kiwi-10.2.33-2.fc44

List of Findings

Error: SHELLCHECK_WARNING (CWE-569): [#def1]
/usr/lib/dracut/modules.d/55kiwi-dump/kiwi-dump-image.sh:209:18: warning[SC2048]: Use "${array[@]}" (with quotes) to prevent whitespace problems.
#  207|       # apply final sorting for the used disk_device names
#  208|       list_items_sorted=$(sort_disk_entries "${list_items}")
#  209|->     for entry in ${list_items_sorted[*]}; do
#  210|           echo -n "${entry} $(find_disk_entry "${list_items}" "${entry}") "
#  211|       done

Error: SHELLCHECK_WARNING (CWE-277): [#def2]
/usr/lib/dracut/modules.d/55kiwi-dump/kiwi-dump-image.sh:439:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  437|       local image_source
#  438|       local image_sha256
#  439|->     mkdir -m 0755 -p "${iso_mount_point}"
#  440|       if ! mount -n "${iso_device}" "${iso_mount_point}"; then
#  441|           report_and_quit "Failed to mount install ISO device"

Error: SHELLCHECK_WARNING (CWE-277): [#def3]
/usr/lib/dracut/modules.d/55kiwi-dump/kiwi-dump-image.sh:443:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  441|           report_and_quit "Failed to mount install ISO device"
#  442|       fi
#  443|->     mkdir -m 0755 -p "${image_mount_point}"
#  444|       if ! mount -n "${iso_mount_point}"/*.squashfs ${image_mount_point};then
#  445|           report_and_quit "Failed to mount install image squashfs filesystem"

Error: SHELLCHECK_WARNING (CWE-277): [#def4]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:175:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  173|       ln -s "${isodev}" "${overlay_base}/isodev"
#  174|       local iso_mount_point="${overlay_base}/live"
#  175|->     mkdir -m 0755 -p "${iso_mount_point}"
#  176|       if ! mount -o ro -n -t "${isofs_type}" "${isodev}" "${iso_mount_point}"; then
#  177|           die "Failed to mount live ISO device"

Error: SHELLCHECK_WARNING (CWE-277): [#def5]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:189:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  187|       local container_mount_point="${overlay_base}/squashfs_container"
#  188|       squashfs_container="${iso_mount_point}/${live_dir}/${squash_image}"
#  189|->     mkdir -m 0755 -p "${container_mount_point}"
#  190|       if ! mount -n "${squashfs_container}" "${container_mount_point}";then
#  191|           die "Failed to mount live ISO squashfs container"

Error: SHELLCHECK_WARNING (CWE-277): [#def6]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:202:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  200|       local rootfs_image="${container_mount_point}/LiveOS/rootfs.img"
#  201|       local root_mount_point="${overlay_base}/rootfsbase"
#  202|->     mkdir -m 0755 -p "${root_mount_point}"
#  203|   
#  204|       if ! [ -e "${rootfs_image}" ] && [ -d "${container_mount_point}/proc" ]; then

Error: SHELLCHECK_WARNING (CWE-277): [#def7]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:220:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  218|       local overlay_base
#  219|       overlay_base=$(getOverlayBaseDirectory)
#  220|->     mkdir -m 0755 -p "${overlay_base}/overlayfs/rw"
#  221|       mkdir -m 0755 -p "${overlay_base}/overlayfs/work"
#  222|   }

Error: SHELLCHECK_WARNING (CWE-277): [#def8]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:221:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  219|       overlay_base=$(getOverlayBaseDirectory)
#  220|       mkdir -m 0755 -p "${overlay_base}/overlayfs/rw"
#  221|->     mkdir -m 0755 -p "${overlay_base}/overlayfs/work"
#  222|   }
#  223|   

Error: SHELLCHECK_WARNING (CWE-277): [#def9]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:231:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  229|       overlay_base=$(getOverlayBaseDirectory)
#  230|       local overlay_mount_point="${overlay_base}/overlayfs"
#  231|->     mkdir -m 0755 -p "${overlay_mount_point}"
#  232|       if [ "${isodiskmode}" = "disk_boot" ];then
#  233|           if ! preparePersistentOverlayDiskBoot "${overlay_mount_point}"; then

Error: SHELLCHECK_WARNING (CWE-277): [#def10]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:241:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  239|           fi
#  240|       fi
#  241|->     mkdir -m 0755 -p "${overlay_mount_point}/rw"
#  242|       mkdir -m 0755 -p "${overlay_mount_point}/work"
#  243|   }

Error: SHELLCHECK_WARNING (CWE-277): [#def11]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:242:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  240|       fi
#  241|       mkdir -m 0755 -p "${overlay_mount_point}/rw"
#  242|->     mkdir -m 0755 -p "${overlay_mount_point}/work"
#  243|   }
#  244|   

Error: SHELLCHECK_WARNING (CWE-277): [#def12]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:254:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  252|       local isoscan_loop_mount=/run/initramfs/isoscan
#  253|       local cow_file_name="${isoscan_loop_mount}/${cow_file_path}"
#  254|->     mkdir -m 0755 -p "${overlay_mount_point}"
#  255|       if ! mount -o "remount,rw" "${isoscan_loop_mount}"; then
#  256|           return 1

Error: SHELLCHECK_WARNING (CWE-277): [#def13]
/usr/lib/dracut/modules.d/55kiwi-live/kiwi-live-lib.sh:279:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  277|       local overlay_mount_point=$1
#  278|       local partitions_before_cow_part
#  279|->     mkdir -m 0755 -p "${overlay_mount_point}"
#  280|       if ! mount -L cow "${overlay_mount_point}"; then
#  281|           partitions_before_cow_part=$(_partition_count)

Error: SHELLCHECK_WARNING (CWE-277): [#def14]
/usr/lib/dracut/modules.d/55kiwi-overlay/kiwi-overlay-root.sh:50:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#   48|       overlay_base=$(getOverlayBaseDirectory)
#   49|       local root_mount_point="${overlay_base}/rootfsbase"
#   50|->     mkdir -m 0755 -p "${root_mount_point}"
#   51|       unit_name=$(echo "${root_mount_point}" | cut -c 2- | tr / -)
#   52|       cat >/run/systemd/system/"${unit_name}".mount <<-EOF

Error: SHELLCHECK_WARNING (CWE-277): [#def15]
/usr/lib/dracut/modules.d/55kiwi-overlay/kiwi-overlay-root.sh:74:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#   72|       local overlay_base
#   73|       overlay_base=$(getOverlayBaseDirectory)
#   74|->     mkdir -m 0755 -p "${overlay_base}/overlayfs/rw"
#   75|       mkdir -m 0755 -p "${overlay_base}/overlayfs/work"
#   76|   }

Error: SHELLCHECK_WARNING (CWE-277): [#def16]
/usr/lib/dracut/modules.d/55kiwi-overlay/kiwi-overlay-root.sh:75:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#   73|       overlay_base=$(getOverlayBaseDirectory)
#   74|       mkdir -m 0755 -p "${overlay_base}/overlayfs/rw"
#   75|->     mkdir -m 0755 -p "${overlay_base}/overlayfs/work"
#   76|   }
#   77|   

Error: SHELLCHECK_WARNING (CWE-277): [#def17]
/usr/lib/dracut/modules.d/55kiwi-overlay/kiwi-overlay-root.sh:83:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#   81|       overlay_base=$(getOverlayBaseDirectory)
#   82|       local overlay_mount_point="${overlay_base}/overlayfs"
#   83|->     mkdir -m 0755 -p "${overlay_mount_point}"
#   84|       unit_name=$(echo "${overlay_mount_point}" | cut -c 2- | tr / -)
#   85|       cat >/run/systemd/system/"${unit_name}".mount <<-EOF

Error: SHELLCHECK_WARNING (CWE-277): [#def18]
/usr/lib/dracut/modules.d/55kiwi-overlay/kiwi-overlay-root.sh:101:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#   99|           die "Failed to mount overlay(rw) filesystem"
#  100|       fi
#  101|->     mkdir -m 0755 -p "${overlay_mount_point}/rw"
#  102|       mkdir -m 0755 -p "${overlay_mount_point}/work"
#  103|   }

Error: SHELLCHECK_WARNING (CWE-277): [#def19]
/usr/lib/dracut/modules.d/55kiwi-overlay/kiwi-overlay-root.sh:102:11: warning[SC2174]: When used with -p, -m only applies to the deepest directory.
#  100|       fi
#  101|       mkdir -m 0755 -p "${overlay_mount_point}/rw"
#  102|->     mkdir -m 0755 -p "${overlay_mount_point}/work"
#  103|   }
#  104|   

Error: SHELLCHECK_WARNING (CWE-569): [#def20]
/usr/lib/dracut/modules.d/59kiwi-lib/kiwi-partitions-lib.sh:56:16: warning[SC2048]: Use "${array[@]}" (with quotes) to prevent whitespace problems.
#   54|       # operate on index based cmd_list
#   55|       index=0
#   56|->     for cmd in ${cmd_list[*]};do
#   57|           case ${cmd} in
#   58|           "d")

Error: SHELLCHECK_WARNING (CWE-569): [#def21]
/usr/lib/dracut/modules.d/59kiwi-lib/kiwi-partitions-lib.sh:110:16: warning[SC2048]: Use "${array[@]}" (with quotes) to prevent whitespace problems.
#  108|       # operate on index based cmd_list
#  109|       index=0
#  110|->     for cmd in ${cmd_list[*]};do
#  111|           case ${cmd} in
#  112|           "d")

Error: SHELLCHECK_WARNING (CWE-569): [#def22]
/usr/lib/dracut/modules.d/59kiwi-lib/kiwi-partitions-lib.sh:298:26: warning[SC2048]: Use "${array[@]}" (with quotes) to prevent whitespace problems.
#  296|       );do
#  297|           current_part_uuid=$(get_partition_uuid "${part}")
#  298|->         for part_uuid in ${part_uuids[*]};do
#  299|               if [ "${current_part_uuid}" = "${part_uuid}" ];then
#  300|                   # this partition uuid was already handled. The device

Error: SHELLCHECK_WARNING (CWE-569): [#def23]
/usr/lib/python3.14/site-packages/kiwi/config/functions.sh:302:18: warning[SC2048]: Use "${array[@]}" (with quotes) to prevent whitespace problems.
#  300|               continue
#  301|           fi
#  302|->         for n in ${needlibs[*]};do
#  303|               if [ "$i" = "$n" ];then
#  304|                   found=1; break

Error: GCC_ANALYZER_WARNING (CWE-688): [#def24]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:448:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:448:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:448:13: danger: argument 1 (‘header.fstype’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  446|               break;
#  447|           case OUTPUT_FSTYPE:
#  448|->             printf("%s\n", header.fstype);
#  449|               break;
#  450|           case OUTPUT_ACCESS:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def25]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:451:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:451:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:451:13: danger: argument 1 (‘header.access’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  449|               break;
#  450|           case OUTPUT_ACCESS:
#  451|->             printf("%s\n", header.access);
#  452|               break;
#  453|           case OUTPUT_IDENTIFIER:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def26]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:454:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:454:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:454:13: danger: argument 1 (‘header.identifier’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  452|               break;
#  453|           case OUTPUT_IDENTIFIER:
#  454|->             printf("%s\n", header.identifier);
#  455|               break;
#  456|           case OUTPUT_HASH_TYPE:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def27]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:460:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:460:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:460:13: danger: argument 1 (‘metadata.data_blksize’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  458|               break;
#  459|           case OUTPUT_DATA_BLOCK_SIZE:
#  460|->             printf("%s\n", metadata.data_blksize);
#  461|               break;
#  462|           case OUTPUT_HASH_BLOCK_SIZE:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def28]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:463:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:463:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:463:13: danger: argument 1 (‘metadata.hash_blksize’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  461|               break;
#  462|           case OUTPUT_HASH_BLOCK_SIZE:
#  463|->             printf("%s\n", metadata.hash_blksize);
#  464|               break;
#  465|           case OUTPUT_DATA_BLOCKS:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def29]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:466:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:466:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:466:13: danger: argument 1 (‘metadata.data_blocks’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  464|               break;
#  465|           case OUTPUT_DATA_BLOCKS:
#  466|->             printf("%s\n", metadata.data_blocks);
#  467|               break;
#  468|           case OUTPUT_HASH_START_BLOCK:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def30]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:469:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:469:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:469:13: danger: argument 1 (‘metadata.hash_start_block’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  467|               break;
#  468|           case OUTPUT_HASH_START_BLOCK:
#  469|->             printf("%s\n", metadata.hash_start_block);
#  470|               break;
#  471|           case OUTPUT_ALGORITHM:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def31]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:472:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:472:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:472:13: danger: argument 1 (‘metadata.algorithm’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  470|               break;
#  471|           case OUTPUT_ALGORITHM:
#  472|->             printf("%s\n", metadata.algorithm);
#  473|               break;
#  474|           case OUTPUT_ROOT_HASH:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def32]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:475:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:475:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:475:13: danger: argument 1 (‘metadata.root_hash’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  473|               break;
#  474|           case OUTPUT_ROOT_HASH:
#  475|->             printf("%s\n", metadata.root_hash);
#  476|               break;
#  477|           case OUTPUT_SALT:

Error: GCC_ANALYZER_WARNING (CWE-688): [#def33]
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:478:13: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:390:5: enter_function: entry to ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:393:17: release_memory: ‘args.path’ is NULL
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: call_function: calling ‘parse_args’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:403:11: return_function: returning to ‘main’ from ‘parse_args’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:404:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:408:9: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:414:9: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: call_function: calling ‘kiwi_read_verity_info’ from ‘main’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:419:11: return_function: returning to ‘main’ from ‘kiwi_read_verity_info’
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:420:8: branch_false: following ‘false’ branch...
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:426:8: branch_false: ...to here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:478:13: release_memory: using NULL here
kiwi-10.2.33/dracut/modules.d/50kiwi-verity/kiwi-parse-verity.c:478:13: danger: argument 1 (‘metadata.salt’) NULL where non-null expected
#argument 1 of ‘__builtin_puts’ must be non-null
#  476|               break;
#  477|           case OUTPUT_SALT:
#  478|->             printf("%s\n", metadata.salt);
#  479|               break;
#  480|           default:

Scan Properties

analyzer-version-clippy1.90.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-110.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-gcc-latest-x86_64
project-namekiwi-10.2.33-2.fc44
store-results-to/tmp/tmpa3bddlwa/kiwi-10.2.33-2.fc44.tar.xz
time-created2025-10-28 18:44:57
time-finished2025-10-28 18:46:35
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpa3bddlwa/kiwi-10.2.33-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpa3bddlwa/kiwi-10.2.33-2.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9