Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-415): [#def1]
util-linux-2.43.devel/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints'
util-linux-2.43.devel/libblkid/src/probe.c:2618:17: warning[-Wanalyzer-double-free]: double-'free' of '((struct blkid_hint *)((char *)MEM[(struct list_head *)pr_9(D) + 128B].next + 16))[576460752303423487].name'
util-linux-2.43.devel/libblkid/src/blkidP.h:355:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libblkid/src/probe.c:2148:17: note: in expansion of macro 'DBG'
util-linux-2.43.devel/libblkid/src/blkidP.h:355:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libblkid/src/probe.c:150:9: note: in expansion of macro 'DBG'
util-linux-2.43.devel/include/list.h:39:24: note: in definition of macro 'INIT_LIST_HEAD'
util-linux-2.43.devel/libblkid/src/blkidP.h:355:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libblkid/src/probe.c:2451:17: note: in expansion of macro 'DBG'
util-linux-2.43.devel/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints'
util-linux-2.43.devel/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints'
util-linux-2.43.devel/libblkid/src/probe.c: scope_hint: In function 'blkid_probe_reset_hints'
util-linux-2.43.devel/libblkid/src/probe.c:675:9: note: in expansion of macro 'list_for_each_safe'
util-linux-2.43.devel/libblkid/src/blkidP.h:355:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libblkid/src/probe.c:2612:9: note: in expansion of macro 'DBG'
util-linux-2.43.devel/libblkid/src/blkidP.h:355:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libblkid/src/probe.c:2612:9: note: in expansion of macro 'DBG'
util-linux-2.43.devel/libblkid/src/blkidP.h:355:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libblkid/src/probe.c:2612:9: note: in expansion of macro 'DBG'
util-linux-2.43.devel/include/list.h:176:41: note: in expansion of macro 'container_of'
util-linux-2.43.devel/libblkid/src/probe.c:2615:40: note: in expansion of macro 'list_entry'
util-linux-2.43.devel/include/list.h:176:41: note: in expansion of macro 'container_of'
util-linux-2.43.devel/libblkid/src/probe.c:2615:40: note: in expansion of macro 'list_entry'
# 2616|   						struct blkid_hint, hints);
# 2617|   		list_del(&h->hints);
# 2618|-> 		free(h->name);
# 2619|   		free(h);
# 2620|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
util-linux-2.43.devel/libsmartcols/src/print.c: scope_hint: In function 'print_json_data'
util-linux-2.43.devel/libsmartcols/src/print.c:544:71: warning[-Wanalyzer-null-dereference]: dereference of NULL 'data'
util-linux-2.43.devel/include/c.h:23: included_from: Included from here.
util-linux-2.43.devel/libsmartcols/src/smartcolsP.h:14: included_from: Included from here.
util-linux-2.43.devel/libsmartcols/src/print.c:26: included_from: Included from here.
util-linux-2.43.devel/libsmartcols/src/smartcolsP.h:19: included_from: Included from here.
util-linux-2.43.devel/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libsmartcols/src/print.c:884:9: note: in expansion of macro 'DBG'
util-linux-2.43.devel/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libsmartcols/src/print.c:865:9: note: in expansion of macro 'DBG'
#  542|   	case SCOLS_JSON_BOOLEAN_OPTIONAL:
#  543|   		/* name: true|false|null */
#  544|-> 		if (cl->json_type == SCOLS_JSON_BOOLEAN_OPTIONAL && (!*data || !strcmp(data, "-"))) {
#  545|   			ul_jsonwrt_value_null(&tb->json, name);
#  546|   		} else {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
util-linux-2.43.devel/libsmartcols/src/print.c:548:42: warning[-Wanalyzer-null-dereference]: dereference of NULL 'data'
util-linux-2.43.devel/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libsmartcols/src/print.c:884:9: note: in expansion of macro 'DBG'
util-linux-2.43.devel/libsmartcols/src/smartcolsP.h:42:25: note: in expansion of macro '__UL_DBG'
util-linux-2.43.devel/libsmartcols/src/print.c:865:9: note: in expansion of macro 'DBG'
#  546|   		} else {
#  547|   			ul_jsonwrt_value_boolean(&tb->json, name,
#  548|-> 					!*data ? 0 :
#  549|   					*data == '0' ? 0 :
#  550|   					*data == 'N' || *data == 'n' ? 0 : 1);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
util-linux-2.43.devel/misc-utils/blkid.c: scope_hint: In function ‘main’
util-linux-2.43.devel/misc-utils/blkid.c:882:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)(argc - optind), 8) + (long unsigned int)numdev * 8’
util-linux-2.43.devel/misc-utils/blkid.c:49: included_from: Included from here.
util-linux-2.43.devel/misc-utils/blkid.c:18: included_from: Included from here.
#  880|   				continue;
#  881|   
#  882|-> 			devices[numdev++] = dev;
#  883|   		}
#  884|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
util-linux-2.43.devel/misc-utils/cal.c: scope_hint: In function ‘monthly’
util-linux-2.43.devel/misc-utils/cal.c:1099:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)*ctl.months_in_row, 208) + (sizetype)i * 208’
util-linux-2.43.devel/misc-utils/cal.c:79: included_from: Included from here.
# 1097|   
# 1098|   	for (i = 0; i < ctl->months_in_row - 1; i++)
# 1099|-> 		ms[i].next = &ms[i + 1];
# 1100|   
# 1101|   	rows = (ctl->num_months - 1) / ctl->months_in_row;

Scan Properties

analyzer-version-clippy1.94.1
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.0.1
analyzer-version-gcc-analyzer16.0.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.94.1
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.0.1
diffbase-analyzer-version-gcc-analyzer16.0.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-171.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260320.200800.gd35503f.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameutil-linux-2.43.devel-7.20260331111251374578.pr4133.174.g4e5ad10e2
diffbase-store-results-to/tmp/tmpqdtj8kh2/util-linux-2.43.devel-7.20260331111251374578.pr4133.174.g4e5ad10e2.tar.xz
diffbase-time-created2026-03-31 11:38:42
diffbase-time-finished2026-03-31 11:47:23
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpqdtj8kh2/util-linux-2.43.devel-7.20260331111251374578.pr4133.174.g4e5ad10e2.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpqdtj8kh2/util-linux-2.43.devel-7.20260331111251374578.pr4133.174.g4e5ad10e2.src.rpm'
diffbase-tool-versioncsmock-3.8.4.20260302.153719.g8203630-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-171.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260320.200800.gd35503f.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameutil-linux-2.43.devel-7.20260331105906035292.master.171.g8f88db136
store-results-to/tmp/tmpsbsy9o6k/util-linux-2.43.devel-7.20260331105906035292.master.171.g8f88db136.tar.xz
time-created2026-03-31 11:27:47
time-finished2026-03-31 11:37:51
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpsbsy9o6k/util-linux-2.43.devel-7.20260331105906035292.master.171.g8f88db136.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpsbsy9o6k/util-linux-2.43.devel-7.20260331105906035292.master.171.g8f88db136.src.rpm'
tool-versioncsmock-3.8.4.20260302.153719.g8203630-1.el9