Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
util-linux-2.43.devel/misc-utils/blkid.c: scope_hint: In function ‘main’
util-linux-2.43.devel/misc-utils/blkid.c:882:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)(argc - optind), 8)’
util-linux-2.43.devel/misc-utils/blkid.c:49: included_from: Included from here.
util-linux-2.43.devel/misc-utils/blkid.c:18: included_from: Included from here.
#  880|   				continue;
#  881|   
#  882|-> 			devices[numdev++] = dev;
#  883|   		}
#  884|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
util-linux-2.43.devel/misc-utils/cal.c: scope_hint: In function ‘monthly’
util-linux-2.43.devel/misc-utils/cal.c:1099:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)*ctl.months_in_row, 208)’
util-linux-2.43.devel/misc-utils/cal.c:79: included_from: Included from here.
# 1097|   
# 1098|   	for (i = 0; i < ctl->months_in_row - 1; i++)
# 1099|-> 		ms[i].next = &ms[i + 1];
# 1100|   
# 1101|   	rows = (ctl->num_months - 1) / ctl->months_in_row;

Error: COMPILER_WARNING: [#def3]
util-linux-2.43.devel/term-utils/agetty.c: scope_hint: In function ‘cred_to_bool’
util-linux-2.43.devel/term-utils/agetty.c:3137:27: warning[-Wduplicate-decl-specifier]: duplicate ‘const’ declaration specifier
# 3137 |         static const char const *pos_bool_val[] = {
#      |                           ^~~~~
# 3135|   static int cred_to_bool(const char *str)
# 3136|   {
# 3137|-> 	static const char const *pos_bool_val[] = {
# 3138|   		"true", "t", "yes",
# 3139|   		"y", "on", "1", };

Error: COMPILER_WARNING: [#def4]
util-linux-2.43.devel/term-utils/agetty.c:3140:27: warning[-Wduplicate-decl-specifier]: duplicate ‘const’ declaration specifier
# 3140 |         static const char const *neg_bool_val[] = {
#      |                           ^~~~~
# 3138|   		"true", "t", "yes",
# 3139|   		"y", "on", "1", };
# 3140|-> 	static const char const *neg_bool_val[] = {
# 3141|   		"false", "f", "no",
# 3142|   		"n", "off", "0", };

Error: COMPILER_WARNING (CWE-681): [#def5]
util-linux-2.43.devel/term-utils/agetty.c: scope_hint: In function ‘load_credentials’
util-linux-2.43.devel/term-utils/agetty.c:3230:47: warning[-Wpointer-sign]: pointer targets in passing argument 2 of ‘ul_strtou32’ differ in signedness
# 3230 |                         rc = ul_strtou32(str, &num, 10);
#      |                                               ^~~~
#      |                                               |
#      |                                               int *
util-linux-2.43.devel/term-utils/agetty.c:38: included_from: Included from here.
util-linux-2.43.devel/include/strutils.h:31:51: note: expected ‘uint32_t *’ {aka ‘unsigned int *’} but argument is of type ‘int *’
#   31 | extern int ul_strtou32(const char *str, uint32_t *num, int base);
#      |                                         ~~~~~~~~~~^~~
# 3228|   		if (strcmp(d->d_name, "agetty.delay") == 0) {
# 3229|   			ul_path_read_string(pc, &str, d->d_name);
# 3230|-> 			rc = ul_strtou32(str, &num, 10);
# 3231|   			if (rc)
# 3232|   				log_warn(_("invalid 'delay' argument provided by credential"));

Scan Properties

analyzer-version-clippy1.94.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.0.1
analyzer-version-gcc-analyzer16.0.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.94.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.0.1
diffbase-analyzer-version-gcc-analyzer16.0.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-80.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260308.181716.g94c371b.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameutil-linux-2.43.devel-7.20260318110610137118.master.90.g7deea2d01
diffbase-store-results-to/tmp/tmpu_ogs6zl/util-linux-2.43.devel-7.20260318110610137118.master.90.g7deea2d01.tar.xz
diffbase-time-created2026-03-18 11:58:48
diffbase-time-finished2026-03-18 12:07:46
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,clippy,cppcheck,shellcheck,gcc' '-o' '/tmp/tmpu_ogs6zl/util-linux-2.43.devel-7.20260318110610137118.master.90.g7deea2d01.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpu_ogs6zl/util-linux-2.43.devel-7.20260318110610137118.master.90.g7deea2d01.src.rpm'
diffbase-tool-versioncsmock-3.8.4.20260302.153719.g8203630-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-80.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260308.181716.g94c371b.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameutil-linux-2.43.devel-7.20260318113638461389.pr4057.92.geeb79f744
store-results-to/tmp/tmpcvq28au7/util-linux-2.43.devel-7.20260318113638461389.pr4057.92.geeb79f744.tar.xz
time-created2026-03-18 12:08:08
time-finished2026-03-18 12:16:23
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,clippy,cppcheck,shellcheck,gcc' '-o' '/tmp/tmpcvq28au7/util-linux-2.43.devel-7.20260318113638461389.pr4057.92.geeb79f744.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpcvq28au7/util-linux-2.43.devel-7.20260318113638461389.pr4057.92.geeb79f744.src.rpm'
tool-versioncsmock-3.8.4.20260302.153719.g8203630-1.el9