Error: GCC_ANALYZER_WARNING (CWE-457): [#def1] ghostscript-10.07.0/base/gdevdbit.c:296:38: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_planes[<unknown>]’ ghostscript-10.07.0/base/gdevdbit.c:192:5: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:194:18: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:217:18: branch_true: following ‘true’ branch... ghostscript-10.07.0/base/gdevdbit.c:220:9: branch_true: ...to here ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: following ‘false’ branch (when ‘k >= ncomps’)... ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:296:38: danger: use of uninitialized value ‘src_planes[<unknown>]’ here # 294| However, this stuff should really be done with # 295| the device encode/decode procedure. */ # 296|-> byte *ptr = ((src_planes[k]) + (sx - data_x) * word_width); # 297| curr_cv[k] = 0; # 298| switch (word_width) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def2] ghostscript-10.07.0/base/gdevdbit.c:315:38: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_planes[<unknown>]’ ghostscript-10.07.0/base/gdevdbit.c:192:5: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:194:18: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:217:18: branch_true: following ‘true’ branch... ghostscript-10.07.0/base/gdevdbit.c:220:9: branch_true: ...to here ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: following ‘false’ branch (when ‘k >= ncomps’)... ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:292:33: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:313:24: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:315:38: danger: use of uninitialized value ‘src_planes[<unknown>]’ here # 313| if (has_tags) # 314| { # 315|-> byte *ptr = ((src_planes[k]) + (sx - data_x) * word_width); # 316| curr_cv[k] = 0; # 317| switch (word_width) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def3] ghostscript-10.07.0/base/gdevdbit.c:329:34: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_planes[<unknown>]’ ghostscript-10.07.0/base/gdevdbit.c:192:5: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:194:18: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:217:18: branch_true: following ‘true’ branch... ghostscript-10.07.0/base/gdevdbit.c:220:9: branch_true: ...to here ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: following ‘false’ branch (when ‘k >= ncomps’)... ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:329:34: danger: use of uninitialized value ‘src_planes[<unknown>]’ here # 327| /* Update our plane data buffers. Just reuse the current one */ # 328| for (k = 0; k < ncomps-has_tags; k++) { # 329|-> byte *ptr = ((src_planes[k]) + (sx - data_x) * word_width); # 330| switch (word_width) { # 331| case 2: Error: GCC_ANALYZER_WARNING (CWE-457): [#def4] ghostscript-10.07.0/base/gdevdbit.c:339:34: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_planes[<unknown>]’ ghostscript-10.07.0/base/gdevdbit.c:192:5: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:194:18: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:198:8: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:217:18: branch_true: following ‘true’ branch... ghostscript-10.07.0/base/gdevdbit.c:220:9: branch_true: ...to here ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: following ‘false’ branch (when ‘k >= ncomps’)... ghostscript-10.07.0/base/gdevdbit.c:222:21: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:328:29: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gdevdbit.c:337:20: branch_false: ...to here ghostscript-10.07.0/base/gdevdbit.c:339:34: danger: use of uninitialized value ‘src_planes[<unknown>]’ here # 337| if (has_tags) # 338| { # 339|-> byte *ptr = ((src_planes[k]) + (sx - data_x) * word_width); # 340| switch (word_width) { # 341| case 2: Error: CPPCHECK_WARNING (CWE-457): [#def5] ghostscript-10.07.0/base/gdevp14.c:8820: warning[uninitvar]: Uninitialized variable: comp_value # 8818| for (i = pgs->color_component_map.num_components - 1; i >= 0; i--) # 8819| comp_value[i] = all; # 8820|-> map_components_to_colorants(comp_value, &(pgs->color_component_map), cm_comps, n); # 8821| } # 8822| Error: CPPCHECK_WARNING (CWE-476): [#def6] ghostscript-10.07.0/base/gsicc_cache.c:631: error[nullPointer]: Null pointer dereference: segv # 629| void (*segv)(void) = NULL; # 630| if_debug2m(gs_debug_flag_icc, link->memory, "link at "PRI_INTPTR" being removed, but has ref_count = %d\n", (intptr_t)link, link->ref_count); # 631|-> segv(); # 632| } # 633| curr = icc_link_cache->head; Error: GCC_ANALYZER_WARNING (CWE-476): [#def7] ghostscript-10.07.0/base/gsicc_cache.c:631:7: warning[-Wanalyzer-jump-through-null]: jump through null pointer ghostscript-10.07.0/base/gsicc_cache.c:985:1: enter_function: entry to ‘gsicc_get_link_profile’ ghostscript-10.07.0/base/gsicc_cache.c:1036:12: call_function: calling ‘gsicc_compute_linkhash’ from ‘gsicc_get_link_profile’ ghostscript-10.07.0/base/gsicc_cache.c:1036:12: return_function: returning to ‘gsicc_get_link_profile’ from ‘gsicc_compute_linkhash’ ghostscript-10.07.0/base/gsicc_cache.c:1039:8: branch_false: following ‘false’ branch... ghostscript-10.07.0/base/gsicc_cache.c:1042:18: branch_false: ...to here ghostscript-10.07.0/base/gsicc_cache.c:1042:18: call_function: calling ‘gsicc_findcachelink’ from ‘gsicc_get_link_profile’ # 629| void (*segv)(void) = NULL; # 630| if_debug2m(gs_debug_flag_icc, link->memory, "link at "PRI_INTPTR" being removed, but has ref_count = %d\n", (intptr_t)link, link->ref_count); # 631|-> segv(); # 632| } # 633| curr = icc_link_cache->head; Error: GCC_ANALYZER_WARNING (CWE-457): [#def8] ghostscript-10.07.0/base/gxdevice.h:709:15: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘bpp’ ghostscript-10.07.0/base/spwgd.c:67:9: call_function: inlined call to ‘check_int_multiply’ from ‘s_PWGD_process’ # 707| static inline int check_int_multiply(int x, int y, int *result) # 708| { # 709|-> *result = x * y; # 710| # 711| if (x != 0 && (*result) / x != y) Error: CPPCHECK_WARNING (CWE-457): [#def9] ghostscript-10.07.0/base/spwgd.c:64: error[uninitvar]: Uninitialized variable: bpp # 62| byte *wlimit = pw->limit; # 63| int bpp; # 64|-> int wb = ss->width * bpp; # 65| int line_pos = ss->line_pos; # 66| Error: COMPILER_WARNING (CWE-457): [#def10] ghostscript-10.07.0/base/spwgd.c: scope_hint: In function ‘s_PWGD_process’ ghostscript-10.07.0/base/spwgd.c:64:24: warning[-Wuninitialized]: ‘bpp’ is used uninitialized # 64 | int wb = ss->width * bpp; # | ~~~~~~~~~~^~~~~ ghostscript-10.07.0/base/spwgd.c:63:9: note: ‘bpp’ was declared here # 63 | int bpp; # | ^~~ # 62| byte *wlimit = pw->limit; # 63| int bpp; # 64|-> int wb = ss->width * bpp; # 65| int line_pos = ss->line_pos; # 66| Error: CPPCHECK_WARNING (CWE-457): [#def11] ghostscript-10.07.0/devices/gdevpdfimg.c:715: error[uninitvar]: Uninitialized variable: buf # 713| stream_cursor_write_init(&w, buf, sizeof(buf)); # 714| status = (*templat->process) (st, &r, &w, true); # 715|-> nw = stream_write(s, buf, (uint) (w.ptr + 1 - buf)); # 716| if (nw != ((int) (w.ptr + 1 - buf))) # 717| status = gs_note_error(gs_error_ioerror);
| analyzer-version-clippy | 1.95.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.0.1 |
| analyzer-version-gcc-analyzer | 16.0.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.95.0 |
| diffbase-analyzer-version-cppcheck | 2.20.0 |
| diffbase-analyzer-version-gcc | 16.0.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.0.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-226.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | ghostscript-10.06.0-2.fc44 |
| diffbase-store-results-to | /tmp/tmpwnishhzo/ghostscript-10.06.0-2.fc44.tar.xz |
| diffbase-time-created | 2026-04-28 15:25:57 |
| diffbase-time-finished | 2026-04-28 15:33:31 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpwnishhzo/ghostscript-10.06.0-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpwnishhzo/ghostscript-10.06.0-2.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.5-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-226.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | ghostscript-10.07.0-1.fc45 |
| store-results-to | /tmp/tmpk312wznp/ghostscript-10.07.0-1.fc45.tar.xz |
| time-created | 2026-04-28 15:34:10 |
| time-finished | 2026-04-28 15:41:08 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpk312wznp/ghostscript-10.07.0-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpk312wznp/ghostscript-10.07.0-1.fc45.src.rpm' |
| tool-version | csmock-3.8.5-1.el9 |