# polkit-128-1.20260408073223035016.pr17 - findings not occurring in polkit-128-1.20260408073223035016.pr17

## List of Findings

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
    polkit-128-build/polkit-128/src/polkitbackend/polkitbackendduktapeauthority.c: scope_hint: In function ‘polkit_backend_common_js_authority_get_admin_auth_identities’
    polkit-128-build/polkit-128/src/polkitbackend/polkitbackendduktapeauthority.c:942:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘error’
    /usr/lib64/glib-2.0/include/glibconfig.h:9: included_from: Included from here.
    /usr/include/glib-2.0/glib/gtypes.h:34: included_from: Included from here.
    /usr/include/glib-2.0/glib/galloca.h:34: included_from: Included from here.
    /usr/include/glib-2.0/glib.h:32: included_from: Included from here.
    /usr/include/glib-2.0/gobject/gbinding.h:30: included_from: Included from here.
    /usr/include/glib-2.0/glib-object.h:24: included_from: Included from here.
    /usr/include/glib-2.0/gio/gioenums.h:30: included_from: Included from here.
    /usr/include/glib-2.0/gio/giotypes.h:30: included_from: Included from here.
    /usr/include/glib-2.0/gio/gio.h:28: included_from: Included from here.
    /usr/include/glib-2.0/gio/gunixfdlist.h:26: included_from: Included from here.
    polkit-128-build/polkit-128/src/polkitbackend/polkitbackendcommon.h:39: included_from: Included from here.
    polkit-128-build/polkit-128/src/polkitbackend/polkitbackendduktapeauthority.c:26: included_from: Included from here.
    #  940|     if (!push_subject (cx, subject, user_for_subject, subject_is_local, subject_is_active, &error))
    #  941|       {
    #  942|->       polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
    #  943|                                       LOG_LEVEL_ERROR,
    #  944|                                       "Error converting subject to JS object: %s",

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
    polkit-128-build/polkit-128/src/polkitbackend/polkitbackendduktapeauthority.c: scope_hint: In function ‘polkit_backend_common_js_authority_check_authorization_sync’
    polkit-128-build/polkit-128/src/polkitbackend/polkitbackendduktapeauthority.c:1024:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘error’
    # 1022|     if (!push_subject (cx, subject, user_for_subject, subject_is_local, subject_is_active, &error))
    # 1023|       {
    # 1024|->       polkit_backend_authority_log (POLKIT_BACKEND_AUTHORITY (authority),
    # 1025|                                       LOG_LEVEL_ERROR,
    # 1026|                                       "Error converting subject to JS object: %s",

## Scan Properties

analyzer-version-clippy | 1.94.1
analyzer-version-cppcheck | 2.20.0
analyzer-version-gcc | 16.0.1
analyzer-version-gcc-analyzer | 16.0.1
analyzer-version-shellcheck | 0.11.0
analyzer-version-unicontrol | 0.0.2
diffbase-analyzer-version-clippy | 1.94.1
diffbase-analyzer-version-cppcheck | 2.20.0
diffbase-analyzer-version-gcc | 16.0.1
diffbase-analyzer-version-gcc-analyzer | 16.0.1
diffbase-analyzer-version-shellcheck | 0.11.0
diffbase-analyzer-version-unicontrol | 0.0.2
diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code | 0
diffbase-host | ip-172-16-1-207.us-west-2.compute.internal
diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260320.200800.gd35503f.main-1.el9.noarch
diffbase-mock-config | fedora-rawhide-x86_64
diffbase-project-name | polkit-128-1.20260408073223035016.pr17
diffbase-store-results-to | /tmp/tmpehf3f163/polkit-128-1.20260408073223035016.pr17.tar.xz
diffbase-time-created | 2026-04-08 07:43:47
diffbase-time-finished | 2026-04-08 07:45:49
diffbase-tool | csmock
diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpehf3f163/polkit-128-1.20260408073223035016.pr17.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-add-flag=-flto=auto' '/tmp/tmpehf3f163/polkit-128-1.20260408073223035016.pr17.src.rpm'
diffbase-tool-version | csmock-3.8.5-1.el9
enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol
exit-code | 0
host | ip-172-16-1-207.us-west-2.compute.internal
known-false-positives | /usr/share/csmock/known-false-positives.js
known-false-positives-rpm | known-false-positives-0.0.0.20260320.200800.gd35503f.main-1.el9.noarch
mock-config | fedora-rawhide-x86_64
project-name | polkit-128-1.20260408073223035016.pr17
store-results-to | /tmp/tmpehf3f163/polkit-128-1.20260408073223035016.pr17.tar.xz
time-created | 2026-04-08 07:43:47
time-finished | 2026-04-08 07:45:49
tool | csmock
tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpehf3f163/polkit-128-1.20260408073223035016.pr17.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-add-flag=-flto=auto' '/tmp/tmpehf3f163/polkit-128-1.20260408073223035016.pr17.src.rpm'
tool-version | csmock-3.8.5-1.el9