sqlite-3.50.4-1.fc44

List of Findings

Error: CPPCHECK_WARNING (CWE-457): [#def1]
sqlite-src-3500400/autosetup/jimsh0.c:21498: warning[uninitvar]: Uninitialized variable: params
#21496|       len += extra;
#21497|       buf = Jim_Alloc(len + 1);
#21498|->     len = snprintf(buf, len + 1, format, params[0], params[1], params[2], params[3], params[4]);
#21499|   
#21500|       va_end(args);

Error: COMPILER_WARNING (CWE-686): [#def2]
sqlite-src-3500400/conftest__.c:1:13: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘ceil’; expected ‘double(double)’
#    1 | extern void ceil(void);
#      |             ^~~~
sqlite-src-3500400/conftest__.c:1:1: note: ‘ceil’ is declared in header ‘<math.h>’
#  +++ |+#include <math.h>
#    1 | extern void ceil(void);

Error: COMPILER_WARNING (CWE-686): [#def3]
sqlite-src-3500400/conftest__.c:1:13: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘ceil’; expected ‘double(double)’

Error: COMPILER_WARNING (CWE-686): [#def4]
sqlite-src-3500400/conftest__.c:1:13: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘isnan’; expected ‘int()’
#    1 | extern void isnan(void);
#      |             ^~~~~
sqlite-src-3500400/conftest__.c:1:1: note: ‘isnan’ is declared in header ‘<math.h>’
#  +++ |+#include <math.h>
#    1 | extern void isnan(void);

Error: COMPILER_WARNING (CWE-686): [#def5]
sqlite-src-3500400/conftest__.c:1:13: warning[-Wbuiltin-declaration-mismatch]: conflicting types for built-in function ‘isnan’; expected ‘int()’

Error: COMPILER_WARNING (CWE-563): [#def6]
sqlite-src-3500400/conftest__.c: scope_hint: In function ‘main’
sqlite-src-3500400/conftest__.c:3:8: warning[-Wunused-variable]: unused variable ‘_x’
#    3 | int8_t _x;
#      |        ^~

Error: COMPILER_WARNING (CWE-563): [#def7]
sqlite-src-3500400/conftest__.c: scope_hint: In function ‘main’
sqlite-src-3500400/conftest__.c:3:9: warning[-Wunused-variable]: unused variable ‘_x’
#    3 | int16_t _x;
#      |         ^~

Error: COMPILER_WARNING (CWE-563): [#def8]
sqlite-src-3500400/conftest__.c: scope_hint: In function ‘main’
sqlite-src-3500400/conftest__.c:3:10: warning[-Wunused-variable]: unused variable ‘_x’
#    3 | intptr_t _x;
#      |          ^~

Error: COMPILER_WARNING (CWE-563): [#def9]
sqlite-src-3500400/conftest__.c: scope_hint: In function ‘main’
sqlite-src-3500400/conftest__.c:3:11: warning[-Wunused-variable]: unused variable ‘_x’
#    3 | uintptr_t _x;
#      |           ^~

Error: COMPILER_WARNING (CWE-563): [#def10]
sqlite-src-3500400/conftest__.c:3:12: warning[-Wunused-variable]: unused variable ‘_x’

Error: COMPILER_WARNING (CWE-1164): [#def11]
sqlite-src-3500400/sqlite3_analyzer.c:188001:21: warning[-Wunused-function]: ‘sqlite3ConnectionBlocked’ defined but not used
#188001 | SQLITE_PRIVATE void sqlite3ConnectionBlocked(sqlite3 *db, sqlite3 *pBlocker){
#       |                     ^~~~~~~~~~~~~~~~~~~~~~~~
#187999|   ** until connection pBlocker concludes its current transaction.
#188000|   */
#188001|-> SQLITE_PRIVATE void sqlite3ConnectionBlocked(sqlite3 *db, sqlite3 *pBlocker){
#188002|     enterMutex();
#188003|     if( db->pBlockingConnection==0 && db->pUnlockConnection==0 ){

Error: GCC_ANALYZER_WARNING (CWE-476): [#def12]
sqlite-src-3500400/src/tclsqlite.c:1708:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘apColName’
sqlite-src-3500400/src/tclsqlite.c:1683:5: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:1684:27: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:1690:7: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:1690:9: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:1690:9: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:1702:7: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:1703:28: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:1707:16: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:1708:61: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:1708:61: release_memory: ‘apColName’ is NULL
sqlite-src-3500400/src/tclsqlite.c:1708:9: danger: dereference of NULL ‘apColName + (long unsigned int)i * 8’
# 1706|   
# 1707|         for(i=0; i<nCol; i++){
# 1708|->         Tcl_ListObjAppendElement(interp, pColList, apColName[i]);
# 1709|         }
# 1710|         Tcl_IncrRefCount(pStar);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def13]
sqlite-src-3500400/src/tclsqlite.c:1962:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ppHook’
sqlite-src-3500400/src/tclsqlite.c:1998:26: enter_function: entry to ‘DbObjCmd’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:3697:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:3698:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:3698:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:3699:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:3699:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:3700:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:3700:7: branch_false: following ‘false’ branch (when ‘objc <= 3’)...
sqlite-src-3500400/src/tclsqlite.c:3705:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:3705:5: branch_false: following ‘false’ branch (when ‘objc != 3’)...
sqlite-src-3500400/src/tclsqlite.c:3705:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:3705:5: call_function: calling ‘DbHookCmd’ from ‘DbObjCmd’
# 1960|     sqlite3 *db = pDb->db;
# 1961|   
# 1962|->   if( *ppHook ){
# 1963|       Tcl_SetObjResult(interp, *ppHook);
# 1964|       if( pArg ){

Error: GCC_ANALYZER_WARNING (CWE-401): [#def14]
sqlite-src-3500400/src/tclsqlite.c:2593:5: warning[-Wanalyzer-malloc-leak]: leak of ‘zSql’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2588:12: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2593:5: danger: ‘zSql’ leaks here; was allocated at [(15)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/14)
# 2591|         return TCL_ERROR;
# 2592|       }
# 2593|->     sqlite3_snprintf(nByte+50, zSql, "INSERT OR %q INTO '%q' VALUES(?",
# 2594|            zConflict, zTable);
# 2595|       j = strlen30(zSql);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def15]
sqlite-src-3500400/src/tclsqlite.c:2621:11: warning[-Wanalyzer-malloc-leak]: leak of ‘azCol’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2615:13: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2621:11: danger: ‘azCol’ leaks here; was allocated at [(21)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/20)
# 2619|         return TCL_ERROR;
# 2620|       }
# 2621|->     str = Tcl_NewObj();
# 2622|       Tcl_IncrRefCount(str);
# 2623|       (void)sqlite3_exec(pDb->db, "BEGIN", 0, 0, 0);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def16]
sqlite-src-3500400/src/tclsqlite.c:2623:11: warning[-Wanalyzer-malloc-leak]: leak of ‘azCol’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2615:13: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2623:11: danger: ‘azCol’ leaks here; was allocated at [(21)](sarif:/runs/0/results/4/codeFlows/0/threadFlows/0/locations/20)
# 2621|       str = Tcl_NewObj();
# 2622|       Tcl_IncrRefCount(str);
# 2623|->     (void)sqlite3_exec(pDb->db, "BEGIN", 0, 0, 0);
# 2624|       zCommit = "COMMIT";
# 2625|       while( Tcl_GetsObj(in, str)>=0 ) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def17]
sqlite-src-3500400/src/tclsqlite.c:2625:12: warning[-Wanalyzer-malloc-leak]: leak of ‘azCol’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2615:13: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2625:12: danger: ‘azCol’ leaks here; was allocated at [(21)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/20)
# 2623|       (void)sqlite3_exec(pDb->db, "BEGIN", 0, 0, 0);
# 2624|       zCommit = "COMMIT";
# 2625|->     while( Tcl_GetsObj(in, str)>=0 ) {
# 2626|         char *z;
# 2627|         Tcl_Size byteLen;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def18]
sqlite-src-3500400/src/tclsqlite.c:2646:11: warning[-Wanalyzer-malloc-leak]: leak of ‘azCol’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2615:13: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2625:12: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:2628:7: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2641:9: branch_true: following ‘true’ branch...
 branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2645:11: branch_true: following ‘true’ branch (when ‘zErr’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2646:11: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2646:11: danger: ‘azCol’ leaks here; was allocated at [(21)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/20)
# 2644|           zErr = malloc(nErr);
# 2645|           if( zErr ){
# 2646|->           sqlite3_snprintf(nErr, zErr,
# 2647|                "Error: %s line %d: expected %d columns of data but found %d",
# 2648|                zFile, lineno, nCol, i+1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def19]
sqlite-src-3500400/src/tclsqlite.c:2646:11: warning[-Wanalyzer-malloc-leak]: leak of ‘zErr’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2625:12: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:2628:7: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2641:9: branch_true: following ‘true’ branch...
 branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2644:16: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2645:11: branch_true: following ‘true’ branch (when ‘zErr’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2646:11: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2646:11: danger: ‘zErr’ leaks here; was allocated at [(27)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/26)
# 2644|           zErr = malloc(nErr);
# 2645|           if( zErr ){
# 2646|->           sqlite3_snprintf(nErr, zErr,
# 2647|                "Error: %s line %d: expected %d columns of data but found %d",
# 2648|                zFile, lineno, nCol, i+1);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def20]
sqlite-src-3500400/src/tclsqlite.c:2649:11: warning[-Wanalyzer-malloc-leak]: leak of ‘azCol’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2615:13: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2625:12: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:2628:7: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2641:9: branch_true: following ‘true’ branch...
 branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2645:11: branch_true: following ‘true’ branch (when ‘zErr’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2646:11: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2649:11: danger: ‘azCol’ leaks here; was allocated at [(21)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/20)
# 2647|                "Error: %s line %d: expected %d columns of data but found %d",
# 2648|                zFile, lineno, nCol, i+1);
# 2649|->           Tcl_AppendResult(interp, zErr, (char*)0);
# 2650|             free(zErr);
# 2651|           }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def21]
sqlite-src-3500400/src/tclsqlite.c:2660:11: warning[-Wanalyzer-malloc-leak]: leak of ‘azCol’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2615:13: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2625:12: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:2628:7: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2641:9: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2655:16: branch_true: following ‘true’ branch (when ‘nCol > i’)...
sqlite-src-3500400/src/tclsqlite.c:2657:11: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2660:11: danger: ‘azCol’ leaks here; was allocated at [(21)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/20)
# 2658|             || strlen30(azCol[i])==0
# 2659|           ){
# 2660|->           sqlite3_bind_null(pStmt, i+1);
# 2661|           }else{
# 2662|             sqlite3_bind_text(pStmt, i+1, azCol[i], -1, SQLITE_STATIC);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def22]
sqlite-src-3500400/src/tclsqlite.c:2662:11: warning[-Wanalyzer-malloc-leak]: leak of ‘azCol’
sqlite-src-3500400/src/tclsqlite.c:2042:5: branch_false: following ‘false’ branch (when ‘objc > 1’)...
sqlite-src-3500400/src/tclsqlite.c:2046:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2046:5: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2050:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2535:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2540:7: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2555:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2560:8: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2571:7: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2585:7: branch_false: following ‘false’ branch (when ‘nCol != 0’)...
sqlite-src-3500400/src/tclsqlite.c:2588:20: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2589:7: branch_false: following ‘false’ branch (when ‘zSql’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2593:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2604:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2609:10: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2610:7: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2614:5: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2615:13: acquire_memory: allocated here
sqlite-src-3500400/src/tclsqlite.c:2616:7: branch_false: following ‘false’ branch (when ‘azCol’ is non-NULL)...
sqlite-src-3500400/src/tclsqlite.c:2621:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2625:12: branch_true: following ‘true’ branch...
sqlite-src-3500400/src/tclsqlite.c:2628:7: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2641:9: branch_false: following ‘false’ branch...
 branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2655:16: branch_true: following ‘true’ branch (when ‘nCol > i’)...
sqlite-src-3500400/src/tclsqlite.c:2657:11: branch_true: ...to here
sqlite-src-3500400/src/tclsqlite.c:2657:13: branch_false: following ‘false’ branch...
sqlite-src-3500400/src/tclsqlite.c:2662:11: branch_false: ...to here
sqlite-src-3500400/src/tclsqlite.c:2662:11: danger: ‘azCol’ leaks here; was allocated at [(21)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/20)
# 2660|             sqlite3_bind_null(pStmt, i+1);
# 2661|           }else{
# 2662|->           sqlite3_bind_text(pStmt, i+1, azCol[i], -1, SQLITE_STATIC);
# 2663|           }
# 2664|         }

Error: GCC_ANALYZER_WARNING (CWE-404): [#def23]
sqlite-src-3500400/tool/sqldiff.c:65:3: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
sqlite-src-3500400/tool/sqldiff.c:64:3: acquire_resource: ‘va_start’ called here
sqlite-src-3500400/tool/sqldiff.c:65:3: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/0)
#   63|     va_list ap;
#   64|     va_start(ap, zFormat);
#   65|->   sqlite3_str_vappendf(pOut, zFormat, ap);
#   66|     va_end(ap);
#   67|     sqlite3_fprintf(stderr, "%s: %s\n", g.zArgv0, sqlite3_str_value(pOut));

Error: GCC_ANALYZER_WARNING (CWE-404): [#def24]
sqlite-src-3500400/tool/sqldiff.c:81:3: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
sqlite-src-3500400/tool/sqldiff.c:80:3: acquire_resource: ‘va_start’ called here
sqlite-src-3500400/tool/sqldiff.c:81:3: danger: missing call to ‘va_end’ to match ‘va_start’ at [(1)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/0)
#   79|     va_list ap;
#   80|     va_start(ap, zFormat);
#   81|->   sqlite3_str_vappendf(pOut, zFormat, ap);
#   82|     va_end(ap);
#   83|     sqlite3_fprintf(stderr, "%s: %s\n", g.zArgv0, sqlite3_str_value(pOut));

Error: GCC_ANALYZER_WARNING (CWE-404): [#def25]
sqlite-src-3500400/tool/sqldiff.c:124:10: warning[-Wanalyzer-va-list-leak]: missing call to ‘va_end’
sqlite-src-3500400/tool/sqldiff.c:134:22: enter_function: entry to ‘db_prepare’
sqlite-src-3500400/tool/sqldiff.c:137:3: acquire_resource: ‘va_start’ called here
sqlite-src-3500400/tool/sqldiff.c:138:11: call_function: calling ‘db_vprepare’ from ‘db_prepare’
#  122|     sqlite3_stmt *pStmt;
#  123|   
#  124|->   zSql = sqlite3_vmprintf(zFormat, ap);
#  125|     if( zSql==0 ) runtimeError("out of memory");
#  126|     rc = sqlite3_prepare_v2(g.db, zSql, -1, &pStmt, 0);

Error: COMPILER_WARNING (CWE-563): [#def26]
sqlite-src-3500400/tool/sqldiff.c: scope_hint: In function ‘all_tables_sql’
sqlite-src-3500400/tool/sqldiff.c:1823:9: warning[-Wunused-but-set-variable]: variable ‘rc’ set but not used
# 1823 |     int rc;
#      |         ^~
# 1821|   const char *all_tables_sql(){
# 1822|     if( g.bHandleVtab ){
# 1823|->     int rc;
# 1824|     
# 1825|       rc = sqlite3_exec(g.db,

Scan Properties

analyzer-version-clippy1.90.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-181.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-gcc-latest-x86_64
project-namesqlite-3.50.4-1.fc44
store-results-to/tmp/tmp3pwkcnn7/sqlite-3.50.4-1.fc44.tar.xz
time-created2025-10-28 20:37:11
time-finished2025-10-28 20:43:28
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmp3pwkcnn7/sqlite-3.50.4-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmp3pwkcnn7/sqlite-3.50.4-1.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9