liblc3-1.1.3-5.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
liblc3-1.1.3/src/ltpf.c:498:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘r[0]’
liblc3-1.1.3/src/ltpf.c:660:6: enter_function: entry to ‘lc3_ltpf_analyse’
liblc3-1.1.3/src/ltpf.c:688:5: call_function: calling ‘resample_6k4’ from ‘lc3_ltpf_analyse’
liblc3-1.1.3/src/ltpf.c:688:5: return_function: returning to ‘lc3_ltpf_analyse’ from ‘resample_6k4’
liblc3-1.1.3/src/ltpf.c:692:8: branch_true: following ‘true’ branch (when ‘dt == 0’)...
liblc3-1.1.3/src/ltpf.c:693:9: branch_true: ...to here
liblc3-1.1.3/src/ltpf.c:702:26: call_function: calling ‘detect_pitch’ from ‘lc3_ltpf_analyse’
#  496|       int arg;
#  497|   
#  498|->     float xw_max = (*x_max = x[arg = 0]);
#  499|       float w = 1 + w_incr;
#  500|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
liblc3-1.1.3/src/ltpf.c:502:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
liblc3-1.1.3/src/ltpf.c:660:6: enter_function: entry to ‘lc3_ltpf_analyse’
liblc3-1.1.3/src/ltpf.c:688:5: call_function: calling ‘resample_6k4’ from ‘lc3_ltpf_analyse’
liblc3-1.1.3/src/ltpf.c:688:5: return_function: returning to ‘lc3_ltpf_analyse’ from ‘resample_6k4’
liblc3-1.1.3/src/ltpf.c:692:8: branch_false: following ‘false’ branch (when ‘dt != 0’)...
liblc3-1.1.3/src/ltpf.c:699:13: branch_false: ...to here
liblc3-1.1.3/src/ltpf.c:702:26: call_function: calling ‘detect_pitch’ from ‘lc3_ltpf_analyse’
#  500|   
#  501|       for (int i = 1; i < n; i++, w += w_incr)
#  502|->         if (xw_max < x[i] * w)
#  503|               xw_max = (*x_max = x[arg = i]) * w;
#  504|   

Error: CPPCHECK_WARNING (CWE-562): [#def3]
liblc3-1.1.3/src/mdct.c:440: error[danglingLifetime]: Non-local variable '.z' will use object that points to local variable 'buffer'.
#  438|       struct lc3_complex buffer[LC3_MAX_NS / 2];
#  439|       struct lc3_complex *z = (struct lc3_complex *)y;
#  440|->     union { float *f; struct lc3_complex *z; } u = { .z = buffer };
#  441|   
#  442|       mdct_window(dt, sr, x, d, u.f);

Error: CPPCHECK_WARNING (CWE-562): [#def4]
liblc3-1.1.3/src/mdct.c:465: error[danglingLifetime]: Non-local variable '.z' will use object that points to local variable 'buffer'.
#  463|       struct lc3_complex buffer[LC3_MAX_NS / 2];
#  464|       struct lc3_complex *z = (struct lc3_complex *)y;
#  465|->     union { float *f; struct lc3_complex *z; } u = { .z = buffer };
#  466|   
#  467|       imdct_pre_fft(rot, x, z);

Error: GCC_ANALYZER_WARNING (CWE-835): [#def5]
liblc3-1.1.3/src/sns.c:648:52: warning[-Wanalyzer-infinite-loop]: infinite loop
liblc3-1.1.3/src/sns.c:693:13: enter_function: entry to ‘deenumerate’
#  646|           int ci = 0;
#  647|   
#  648|->         for (ci = 0; idx < lc3_sns_mpvq_offsets[i][npulses - ci]; ci++);
#  649|           idx -= lc3_sns_mpvq_offsets[i][npulses - ci];
#  650|   

Error: CPPCHECK_WARNING (CWE-457): [#def6]
liblc3-1.1.3/tools/elc3.c:270: warning[uninitvar]: Uninitialized variable: out
#  268|           }
#  269|   
#  270|->         lc3bin_write_data(fp_out, out, block_bytes);
#  271|       }
#  272|   

Scan Properties

analyzer-version-clippy1.90.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-200.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-gcc-latest-x86_64
project-nameliblc3-1.1.3-5.fc44
store-results-to/tmp/tmpd3198ue2/liblc3-1.1.3-5.fc44.tar.xz
time-created2025-10-28 19:01:43
time-finished2025-10-28 19:02:58
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpd3198ue2/liblc3-1.1.3-5.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpd3198ue2/liblc3-1.1.3-5.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9