vulkan-tools-1.4.321.0-5.fc44

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:1049:15: warning[-Wanalyzer-malloc-leak]: leak of ‘past’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3349:13: enter_function: entry to ‘demo_run_display’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3350:12: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3351:9: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3351:9: call_function: calling ‘demo_draw’ from ‘demo_run_display’
# 1047|           past = (VkPastPresentationTimingGOOGLE *)malloc(sizeof(VkPastPresentationTimingGOOGLE) * count);
# 1048|           assert(past);
# 1049|->         err = vkGetPastPresentationTimingGOOGLE(demo->device, demo->swapchain, &count, past);
# 1050|           assert(!err);
# 1051|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:1387:11: warning[-Wanalyzer-malloc-leak]: leak of ‘presentModes’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:2663:13: enter_function: entry to ‘demo_resize’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:2685:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:2706:5: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:2706:5: call_function: calling ‘demo_prepare_swapchain’ from ‘demo_resize’
# 1385|       VkPresentModeKHR *presentModes = (VkPresentModeKHR *)malloc(presentModeCount * sizeof(VkPresentModeKHR));
# 1386|       assert(presentModes);
# 1387|->     err = vkGetPhysicalDeviceSurfacePresentModesKHR(demo->gpu, demo->surface, &presentModeCount, presentModes);
# 1388|       assert(!err);
# 1389|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:1543:11: warning[-Wanalyzer-malloc-leak]: leak of ‘swapchainImages’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:2663:13: enter_function: entry to ‘demo_resize’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:2706:5: call_function: calling ‘demo_prepare_swapchain’ from ‘demo_resize’
# 1541|       VkImage *swapchainImages = (VkImage *)malloc(demo->swapchainImageCount * sizeof(VkImage));
# 1542|       assert(swapchainImages);
# 1543|->     err = vkGetSwapchainImagesKHR(demo->device, demo->swapchain, &demo->swapchainImageCount, swapchainImages);
# 1544|       assert(!err);
# 1545|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3268:11: warning[-Wanalyzer-malloc-leak]: leak of ‘plane_props’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3245:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3251:5: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3259:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3265:19: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3265:19: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3268:11: danger: ‘plane_props’ leaks here; was allocated at [(5)](sarif:/runs/0/results/5/codeFlows/0/threadFlows/0/locations/4)
# 3266|       assert(plane_props);
# 3267|   
# 3268|->     err = vkGetPhysicalDeviceDisplayPlanePropertiesKHR(demo->gpu, &plane_count, plane_props);
# 3269|       assert(!err);
# 3270|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3291:15: warning[-Wanalyzer-malloc-leak]: leak of ‘supported_displays’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3245:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3251:5: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3259:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3265:19: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3272:27: branch_true: following ‘true’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3277:25: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3284:12: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3288:30: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3288:30: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3291:15: danger: ‘supported_displays’ leaks here; was allocated at [(9)](sarif:/runs/0/results/6/codeFlows/0/threadFlows/0/locations/8)
# 3289|           assert(supported_displays);
# 3290|   
# 3291|->         err = vkGetDisplayPlaneSupportedDisplaysKHR(demo->gpu, plane_index, &supported_count, supported_displays);
# 3292|           assert(!err);
# 3293|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3939:19: warning[-Wanalyzer-malloc-leak]: leak of ‘instance_layers’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3914:13: enter_function: entry to ‘demo_init_vk’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3924:11: call_function: calling ‘load_vulkan_library’ from ‘demo_init_vk’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3924:11: return_function: returning to ‘demo_init_vk’ from ‘load_vulkan_library’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3925:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3933:9: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3933:8: branch_true: following ‘true’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3934:15: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3937:12: branch_true: following ‘true’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3938:50: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3938:50: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3939:19: danger: ‘instance_layers’ leaks here; was allocated at [(13)](sarif:/runs/0/results/7/codeFlows/0/threadFlows/0/locations/12)
# 3937|           if (instance_layer_count > 0) {
# 3938|               VkLayerProperties *instance_layers = malloc(sizeof(VkLayerProperties) * instance_layer_count);
# 3939|->             err = vkEnumerateInstanceLayerProperties(&instance_layer_count, instance_layers);
# 3940|               assert(!err);
# 3941|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3970:15: warning[-Wanalyzer-malloc-leak]: leak of ‘instance_extensions’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3914:13: enter_function: entry to ‘demo_init_vk’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3924:11: call_function: calling ‘load_vulkan_library’ from ‘demo_init_vk’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3924:11: return_function: returning to ‘demo_init_vk’ from ‘load_vulkan_library’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3925:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3933:9: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3968:8: branch_true: following ‘true’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3969:54: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3969:54: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3970:15: danger: ‘instance_extensions’ leaks here; was allocated at [(11)](sarif:/runs/0/results/8/codeFlows/0/threadFlows/0/locations/10)
# 3968|       if (instance_extension_count > 0) {
# 3969|           VkExtensionProperties *instance_extensions = malloc(sizeof(VkExtensionProperties) * instance_extension_count);
# 3970|->         err = vkEnumerateInstanceExtensionProperties(NULL, &instance_extension_count, instance_extensions);
# 3971|           assert(!err);
# 3972|           for (uint32_t i = 0; i < instance_extension_count; i++) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def8]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4241:11: warning[-Wanalyzer-malloc-leak]: leak of ‘physical_devices’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4232:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4240:42: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4240:42: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4241:11: danger: ‘physical_devices’ leaks here; was allocated at [(3)](sarif:/runs/0/results/9/codeFlows/0/threadFlows/0/locations/2)
# 4239|   
# 4240|       VkPhysicalDevice *physical_devices = malloc(sizeof(VkPhysicalDevice) * gpu_count);
# 4241|->     err = vkEnumeratePhysicalDevices(demo->inst, &gpu_count, physical_devices);
# 4242|       assert(!err);
# 4243|       if (demo->invalid_gpu_selection || (demo->gpu_number >= 0 && !((uint32_t)demo->gpu_number < gpu_count))) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4326:15: warning[-Wanalyzer-malloc-leak]: leak of ‘device_extensions’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4232:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4240:42: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4243:8: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4243:41: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4324:8: branch_true: following ‘true’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4325:52: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4325:52: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4326:15: danger: ‘device_extensions’ leaks here; was allocated at [(7)](sarif:/runs/0/results/10/codeFlows/0/threadFlows/0/locations/6)
# 4324|       if (device_extension_count > 0) {
# 4325|           VkExtensionProperties *device_extensions = malloc(sizeof(VkExtensionProperties) * device_extension_count);
# 4326|->         err = vkEnumerateDeviceExtensionProperties(demo->gpu, NULL, &device_extension_count, device_extensions);
# 4327|           assert(!err);
# 4328|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def10]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4604:9: warning[-Wanalyzer-malloc-leak]: leak of ‘supportsPresent’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4602:45: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4603:26: branch_true: following ‘true’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4604:9: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4604:9: danger: ‘supportsPresent’ leaks here; was allocated at [(1)](sarif:/runs/0/results/11/codeFlows/0/threadFlows/0/locations/0)
# 4602|       VkBool32 *supportsPresent = (VkBool32 *)malloc(demo->queue_family_count * sizeof(VkBool32));
# 4603|       for (uint32_t i = 0; i < demo->queue_family_count; i++) {
# 4604|->         vkGetPhysicalDeviceSurfaceSupportKHR(demo->gpu, i, demo->surface, &supportsPresent[i]);
# 4605|       }
# 4606|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def11]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4638:9: warning[-Wanalyzer-malloc-leak]: leak of ‘supportsPresent’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4602:45: acquire_memory: allocated here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4603:26: branch_false: following ‘false’ branch...
 branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4611:26: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4625:8: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4625:8: branch_true: following ‘true’ branch (when ‘presentQueueFamilyIndex == 4294967295’)...
 branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4628:30: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4637:9: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4637:8: branch_true: following ‘true’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4638:9: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4638:9: danger: ‘supportsPresent’ leaks here; was allocated at [(1)](sarif:/runs/0/results/12/codeFlows/0/threadFlows/0/locations/0)
# 4636|       // Generate error if could not find both a graphics and a present queue
# 4637|       if (graphicsQueueFamilyIndex == UINT32_MAX || presentQueueFamilyIndex == UINT32_MAX) {
# 4638|->         ERR_EXIT("Could not find both graphics and present queues\n", "Swapchain Initialization Failure");
# 4639|       }
# 4640|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def12]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4787:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘available_wsi_platforms’ where non-null expected
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4690:21: branch_true: following ‘true’ branch (when ‘i < argc’)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4691:24: branch_true: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4691:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4695:14: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4700:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4704:13: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4704:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4708:13: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4708:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4712:13: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4717:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4728:13: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4728:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4739:13: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4739:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4743:13: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4743:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4747:13: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4747:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4751:14: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4757:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4761:14: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4786:49: acquire_memory: this call could return NULL
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:4787:9: danger: argument 1 (‘available_wsi_platforms’) from [(23)](sarif:/runs/0/results/13/codeFlows/0/threadFlows/0/locations/22) could be NULL where non-null expected
#argument 1 of ‘__builtin_memset’ must be non-null
# 4785|           size_t max_str_len = 100;
# 4786|           char *available_wsi_platforms = (char *)malloc(max_str_len);
# 4787|->         memset(available_wsi_platforms, 0, max_str_len);
# 4788|   #if defined(VK_USE_PLATFORM_XCB_KHR)
# 4789|           strncat(available_wsi_platforms, "xcb", max_str_len);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def13]
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/linmath.h:73:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3349:13: enter_function: entry to ‘demo_run_display’
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3350:12: branch_false: following ‘false’ branch...
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3351:9: branch_false: ...to here
Vulkan-Tools-vulkan-sdk-1.4.321.0/cube/cube.c:3351:9: call_function: calling ‘demo_draw’ from ‘demo_run_display’
#   71|   
#   72|   LINMATH_H_DEFINE_VEC(2)
#   73|-> LINMATH_H_DEFINE_VEC(3)
#   74|   LINMATH_H_DEFINE_VEC(4)
#   75|   

Scan Properties

analyzer-version-clippy1.90.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer16.0.0
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-184.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-gcc-latest-x86_64
project-namevulkan-tools-1.4.321.0-5.fc44
store-results-to/tmp/tmpmznacazo/vulkan-tools-1.4.321.0-5.fc44.tar.xz
time-created2025-10-28 20:39:46
time-finished2025-10-28 20:41:33
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-gcc-latest-x86_64' '-t' 'gcc,cppcheck,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpmznacazo/vulkan-tools-1.4.321.0-5.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--install=gcc-latest' '--gcc-analyzer-bin=/opt/gcc-latest/bin/gcc' '/tmp/tmpmznacazo/vulkan-tools-1.4.321.0-5.fc44.src.rpm'
tool-versioncsmock-3.8.3.20251027.143044.ge6b947b-1.el9