Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-404): [#def1]
openssl-3.5.4/apps/storeutl.c:341:12: warning[-Wanalyzer-va-list-leak]: missing call to 'va_end'
openssl-3.5.4/apps/storeutl.c:352:12: enter_function: entry to 'process'
openssl-3.5.4/apps/storeutl.c:360:8: branch_false: following 'false' branch...
openssl-3.5.4/apps/storeutl.c:368:8: branch_false: ...to here
openssl-3.5.4/apps/storeutl.c:375:8: branch_false: following 'false' branch (when 'criterion == 0')...
 branch_false: ...to here
openssl-3.5.4/apps/storeutl.c:398:12: branch_false: following 'false' branch...
openssl-3.5.4/apps/storeutl.c:422:12: branch_false: ...to here
openssl-3.5.4/apps/storeutl.c:422:12: branch_false: following 'false' branch (when 'type != 1')...
openssl-3.5.4/apps/storeutl.c:430:13: branch_false: ...to here
openssl-3.5.4/apps/storeutl.c:430:13: call_function: calling 'indent_printf' from 'process'
#  339|   
#  340|       va_start(args, format);
#  341|->     vret = BIO_vprintf(bio, format, args);
#  342|       va_end(args);
#  343|   

Error: COMPILER_WARNING (CWE-1164): [#def2]
openssl-3.5.4/providers/fips/self_test_kats.c:943:12: warning[-Wunused-function]: 'self_test_asym_ciphers' defined but not used
#  943 | static int self_test_asym_ciphers(OSSL_SELF_TEST *st, OSSL_LIB_CTX *libctx)
#      |            ^~~~~~~~~~~~~~~~~~~~~~
#  941|   }
#  942|   
#  943|-> static int self_test_asym_ciphers(OSSL_SELF_TEST *st, OSSL_LIB_CTX *libctx)
#  944|   {
#  945|       int i, ret = 1;

Scan Properties

analyzer-version-clippy1.90.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.90.0
diffbase-analyzer-version-cppcheck2.18.3
diffbase-analyzer-version-gcc15.2.1
diffbase-analyzer-version-gcc-analyzer16.0.0
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-253.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-gcc-latest-x86_64
diffbase-project-nameopenssl-3.5.1-2.fc43
diffbase-store-results-to/tmp/tmpjcd5bg85/openssl-3.5.1-2.fc43.tar.xz
diffbase-time-created2025-10-28 19:32:37
diffbase-time-finished2025-10-28 20:14:25
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpjcd5bg85/openssl-3.5.1-2.fc43.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpjcd5bg85/openssl-3.5.1-2.fc43.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-253.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-gcc-latest-x86_64
project-nameopenssl-3.5.4-1.fc44
store-results-to/tmp/tmp9ux4irij/openssl-3.5.4-1.fc44.tar.xz
time-created2025-10-28 20:14:59
time-finished2025-10-28 20:31:53
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmp9ux4irij/openssl-3.5.4-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmp9ux4irij/openssl-3.5.4-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9