libheif-1.20.2-6.fc44

List of Findings

Error: CPPCHECK_WARNING (CWE-476): [#def1]
libheif-1.20.2/heifio/decoder_png.cc:320: error[nullPointer]: Null pointer dereference: pa
#  318|   
#  319|             py[x + y * y_stride] = vp;
#  320|->           pa[x + y * y_stride] = va;
#  321|   
#  322|             p += 4;

Error: CPPCHECK_WARNING (CWE-909): [#def2]
libheif-1.20.2/libheif/box.cc:3141: error[uninitStructMember]: Uninitialized struct member: entry.group_description_index
# 3139|       }
# 3140|   
# 3141|->     m_entries.push_back(entry);
# 3142|     }
# 3143|   

Error: CPPCHECK_WARNING (CWE-909): [#def3]
libheif-1.20.2/libheif/box.cc:3141: error[uninitStructMember]: Uninitialized struct member: entry.sample_count
# 3139|       }
# 3140|   
# 3141|->     m_entries.push_back(entry);
# 3142|     }
# 3143|   

Error: CPPCHECK_WARNING (CWE-909): [#def4]
libheif-1.20.2/libheif/box.cc:3191: error[uninitStructMember]: Uninitialized struct member: entry.group_description_index
# 3189|       Entry entry;
# 3190|       entry.item_ID = itemID;
# 3191|->     m_entries.push_back(entry);
# 3192|     }
# 3193|   

Error: CPPCHECK_WARNING (CWE-909): [#def5]
libheif-1.20.2/libheif/box.cc:3191: error[uninitStructMember]: Uninitialized struct member: entry.sample_count
# 3189|       Entry entry;
# 3190|       entry.item_ID = itemID;
# 3191|->     m_entries.push_back(entry);
# 3192|     }
# 3193|   

Error: CPPCHECK_WARNING (CWE-909): [#def6]
libheif-1.20.2/libheif/box.cc:3866: error[uninitStructMember]: Uninitialized struct member: ref.reference_type
# 3864|     assert(to_ids.size() <= 0xFFFF);
# 3865|   
# 3866|->   m_references.push_back(ref);
# 3867|   }
# 3868|   

Error: CPPCHECK_WARNING (CWE-909): [#def7]
libheif-1.20.2/libheif/codecs/uncompressed/unc_boxes.cc:167: error[uninitStructMember]: Uninitialized struct member: component.component_align_size
#  165|         component.component_type_uri = std::string();
#  166|       }
#  167|->     m_components.push_back(component);
#  168|     }
#  169|   

Error: CPPCHECK_WARNING (CWE-909): [#def8]
libheif-1.20.2/libheif/codecs/uncompressed/unc_boxes.cc:167: error[uninitStructMember]: Uninitialized struct member: component.component_bit_depth
#  165|         component.component_type_uri = std::string();
#  166|       }
#  167|->     m_components.push_back(component);
#  168|     }
#  169|   

Error: CPPCHECK_WARNING (CWE-909): [#def9]
libheif-1.20.2/libheif/codecs/uncompressed/unc_boxes.cc:167: error[uninitStructMember]: Uninitialized struct member: component.component_format
#  165|         component.component_type_uri = std::string();
#  166|       }
#  167|->     m_components.push_back(component);
#  168|     }
#  169|   

Error: CPPCHECK_WARNING (CWE-909): [#def10]
libheif-1.20.2/libheif/codecs/uncompressed/unc_boxes.cc:167: error[uninitStructMember]: Uninitialized struct member: component.component_index
#  165|         component.component_type_uri = std::string();
#  166|       }
#  167|->     m_components.push_back(component);
#  168|     }
#  169|   

Error: CPPCHECK_WARNING (CWE-909): [#def11]
libheif-1.20.2/libheif/codecs/uncompressed/unc_boxes.cc:269: error[uninitStructMember]: Uninitialized struct member: component.component_type
#  267|         component.component_format = range.read8();
#  268|         component.component_align_size = range.read8();
#  269|->       m_components.push_back(component);
#  270|   
#  271|         if (!is_valid_component_format(component.component_format)) {

Error: CPPCHECK_WARNING (CWE-909): [#def12]
libheif-1.20.2/libheif/sequences/seq_boxes.cc:1857: error[uninitStructMember]: Uninitialized struct member: ref.from_item_ID
# 1855|       }
# 1856|   
# 1857|->     m_references.push_back(ref);
# 1858|     }
# 1859|   

Error: CPPCHECK_WARNING (CWE-909): [#def13]
libheif-1.20.2/libheif/sequences/seq_boxes.cc:1984: error[uninitStructMember]: Uninitialized struct member: ref.from_item_ID
# 1982|     ref.to_track_id = {to_track_id};
# 1983|   
# 1984|->   m_references.push_back(ref);
# 1985|   }

Scan Properties

analyzer-version-clippy1.90.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-106.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-gcc-latest-x86_64
project-namelibheif-1.20.2-6.fc44
store-results-to/tmp/tmpa80qtola/libheif-1.20.2-6.fc44.tar.xz
time-created2025-10-28 19:03:20
time-finished2025-10-28 19:07:17
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpa80qtola/libheif-1.20.2-6.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpa80qtola/libheif-1.20.2-6.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9