Error: GCC_ANALYZER_WARNING (CWE-401): [#def1] crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:508:11: warning[-Wanalyzer-malloc-leak]: leak of '<unknown>' crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:506:8: branch_false: following 'false' branch (when 'tree' is non-NULL)... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:508:11: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:509:8: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:513:24: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:514:12: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:516:25: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:518:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:525:24: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:526:12: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:528:25: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:530:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:535:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:535:8: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:541:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:541:8: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:548:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:548:8: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:552:16: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:555:12: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:557:20: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:558:16: branch_false: following 'false' branch (when 'resi' is non-NULL)... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:561:13: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:562:35: acquire_memory: allocated here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:563:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:568:37: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:569:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:576:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:595:12: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:595:12: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:508:11: danger: '<unknown>' leaks here; was allocated at [(23)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/22) # 506| if (tree == NULL) # 507| return NULL; # 508|-> ret = calloc (1, sizeof (*ret)); # 509| if (ret == NULL) # 510| return NULL; Error: GCC_ANALYZER_WARNING (CWE-401): [#def2] crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:508:11: warning[-Wanalyzer-malloc-leak]: leak of 'resi' crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:506:8: branch_false: following 'false' branch (when 'tree' is non-NULL)... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:508:11: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:509:8: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:513:24: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:514:12: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:516:25: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:518:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:525:24: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:526:12: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:528:25: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:530:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:535:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:535:8: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:541:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:541:8: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:548:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:548:8: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:552:16: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:555:12: branch_true: following 'true' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:557:20: branch_true: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:557:20: acquire_memory: allocated here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:558:16: branch_false: following 'false' branch (when 'resi' is non-NULL)... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:561:13: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:563:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:568:37: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:569:16: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:576:9: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:595:12: branch_false: following 'false' branch... crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:595:12: branch_false: ...to here crun-1.27.1/libocispec/src/ocispec/runtime_spec_schema_config_vm.c:508:11: danger: 'resi' leaks here; was allocated at [(21)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/20) # 506| if (tree == NULL) # 507| return NULL; # 508|-> ret = calloc (1, sizeof (*ret)); # 509| if (ret == NULL) # 510| return NULL; Error: GCC_ANALYZER_WARNING (CWE-1341): [#def3] crun-1.27.1/src/libcrun/utils.h:108:5: warning[-Wanalyzer-fd-double-close]: double 'close' of file descriptor 'dfd_clone' crun-1.27.1/src/libcrun/cgroup-utils.c:1014:1: enter_function: entry to 'libcrun_migrate_all_pids_to_cgroup' crun-1.27.1/src/libcrun/cgroup-utils.c:1024:6: branch_false: following 'false' branch... crun-1.27.1/src/libcrun/cgroup-utils.c:1027:9: branch_false: ...to here crun-1.27.1/src/libcrun/cgroup-utils.c:1027:9: call_function: calling 'libcrun_cgroup_pause_unpause_path' from 'libcrun_migrate_all_pids_to_cgroup' crun-1.27.1/src/libcrun/cgroup-utils.c:1027:9: return_function: returning to 'libcrun_migrate_all_pids_to_cgroup' from 'libcrun_cgroup_pause_unpause_path' crun-1.27.1/src/libcrun/cgroup-utils.c:1028:6: branch_false: following 'false' branch... crun-1.27.1/src/libcrun/cgroup-utils.c:1031:9: branch_false: ...to here crun-1.27.1/src/libcrun/cgroup-utils.c:1031:9: call_function: calling 'libcrun_cgroup_read_pids_from_path' from 'libcrun_migrate_all_pids_to_cgroup' # 106| int *pp = (int *) p; # 107| if (*pp >= 0) # 108|-> TEMP_FAILURE_RETRY (close (*pp)); # 109| } # 110|
| analyzer-version-clippy | 1.95.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.0.1 |
| analyzer-version-gcc-analyzer | 16.0.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.95.0 |
| diffbase-analyzer-version-cppcheck | 2.20.0 |
| diffbase-analyzer-version-gcc | 16.0.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.0.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-243.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | crun-1.27-1.fc44 |
| diffbase-store-results-to | /tmp/tmp7taxqodc/crun-1.27-1.fc44.tar.xz |
| diffbase-time-created | 2026-04-28 14:47:03 |
| diffbase-time-finished | 2026-04-28 14:50:26 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmp7taxqodc/crun-1.27-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp7taxqodc/crun-1.27-1.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.5-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-243.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | crun-1.27.1-1.fc45 |
| store-results-to | /tmp/tmp9nwnma58/crun-1.27.1-1.fc45.tar.xz |
| time-created | 2026-04-28 14:50:50 |
| time-finished | 2026-04-28 14:53:14 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmp9nwnma58/crun-1.27.1-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp9nwnma58/crun-1.27.1-1.fc45.src.rpm' |
| tool-version | csmock-3.8.5-1.el9 |