Task #112353 - added.err
back to task #112353download
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/drivers/net/team/non_ether_header_ops.sh:36:1: warning[SC2034]: i appears unused. Verify use (or export if used externally).
# 34| # dev_hard_header() on t0, exercising the inherited header_ops path.
# 35| ip -n "$ns1" -6 addr add 2001:db8:1::1/64 dev t0 nodad
# 36|-> for i in $(seq 1 20); do
# 37| ip netns exec "$ns1" ping -6 -I t0 ff02::1 -c1 -W1 &>/dev/null || true
# 38| done
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/mm/charge_reserved_hugetlb.sh:126:11: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 124|
# 125| for ((i=1; i<=max_tries; i++)); do
# 126|-> local cur="$(cat "$path")"
# 127| if [[ "$cur" == "$expect" ]]; then
# 128| return 0
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/double_udp_encap.sh:94:2: warning[SC2034]: RET appears unused. Verify use (or export if used externally).
# 92| local ns
# 93|
# 94|-> RET=0
# 95|
# 96| # +-------------+ +-------------+
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/net/fib_tests.sh:908:17: warning[SC2046]: Quote this to prevent word splitting.
# 906| done
# 907|
# 908|-> check_rt_num 5 $($IP -6 route list | grep expires | grep 2001:10:: | wc -l)
# 909|
# 910| # Promote to permanent routes by "prepend" (w/o NLM_F_EXCL and NLM_F_REPLACE)
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/net/fib_tests.sh:917:17: warning[SC2046]: Quote this to prevent word splitting.
# 915| done
# 916|
# 917|-> check_rt_num 5 $($IP -6 route list | grep -v expires | grep 2001:10:: | wc -l)
# 918| check_rt_num 5 $($IP -6 route list cache | grep 2001:10:: | wc -l)
# 919|
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/net/fib_tests.sh:918:17: warning[SC2046]: Quote this to prevent word splitting.
# 916|
# 917| check_rt_num 5 $($IP -6 route list | grep -v expires | grep 2001:10:: | wc -l)
# 918|-> check_rt_num 5 $($IP -6 route list cache | grep 2001:10:: | wc -l)
# 919|
# 920| # Trigger GC instead of waiting $GC_WAIT_TIME.
Error: SHELLCHECK_WARNING (CWE-156):
/usr/libexec/kselftests/net/fib_tests.sh:923:17: warning[SC2046]: Quote this to prevent word splitting.
# 921| # rt6_nh_dump_exceptions() just skips expired exceptions.
# 922| $NS_EXEC sysctl -wq net.ipv6.route.flush=1
# 923|-> check_rt_num 0 $($IP -6 route list cache | grep 2001:10:: | wc -l)
# 924| log_test $ret 0 "ipv6 route garbage collection (promote to permanent routes)"
# 925|
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/hsr_ping.sh:38:11: warning[SC2154]: ns1 is referenced but not assigned.
# 36| echo "INFO: Initial validation ping."
# 37| # Each node has to be able to reach each one.
# 38|-> do_ping "$ns1" "100.64.$netid.2"
# 39| do_ping "$ns1" "100.64.$netid.3"
# 40| do_ping "$ns2" "100.64.$netid.1"
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/hsr_ping.sh:40:11: warning[SC2154]: ns2 is referenced but not assigned.
# 38| do_ping "$ns1" "100.64.$netid.2"
# 39| do_ping "$ns1" "100.64.$netid.3"
# 40|-> do_ping "$ns2" "100.64.$netid.1"
# 41| do_ping "$ns2" "100.64.$netid.3"
# 42| do_ping "$ns3" "100.64.$netid.1"
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/hsr_ping.sh:42:11: warning[SC2154]: ns3 is referenced but not assigned.
# 40| do_ping "$ns2" "100.64.$netid.1"
# 41| do_ping "$ns2" "100.64.$netid.3"
# 42|-> do_ping "$ns3" "100.64.$netid.1"
# 43| do_ping "$ns3" "100.64.$netid.2"
# 44| stop_if_error "Initial validation failed on IPv4."
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/hsr/link_faults.sh:7:1: warning[SC2034]: ALL_TESTS appears unused. Verify use (or export if used externally).
# 5| source ../lib.sh
# 6|
# 7|-> ALL_TESTS="
# 8| test_clean_hsrv0
# 9| test_cut_link_hsrv0
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/link_faults.sh:212:14: warning[SC2154]: ksft_pass is referenced but not assigned.
# 210|
# 211| setup_topo "$proto"
# 212|-> if ((RET != ksft_pass)); then
# 213| log_test "${tname} setup"
# 214| return
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/hsr/prp_ping.sh:21:3: warning[SC2034]: ipv6 appears unused. Verify use (or export if used externally).
# 19| ;;
# 20| "4")
# 21|-> ipv6=false
# 22| ;;
# 23| "?")
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/hsr/prp_ping.sh:147:6: warning[SC2154]: ret is referenced but not assigned.
# 145| run_vlan_ping_tests
# 146|
# 147|-> exit $ret
Error: SHELLCHECK_WARNING (CWE-571):
/usr/libexec/kselftests/net/netfilter/nft_queue.sh:649:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 647| local count=$(((32 * 1024 * 1024) / bs))
# 648|
# 649|-> local nprocs=$(nproc)
# 650| [ $nprocs -gt 1 ] && nprocs=$((nprocs - 1))
# 651|
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/netfilter/nft_queue.sh:675:7: warning[SC2034]: p appears unused. Verify use (or export if used externally).
# 673| local breinject
# 674| c=$(ip netns exec "$nsrouter" nft list counter inet udpq "fromqueue" | grep packets)
# 675|-> read p preinject b breinject <<EOF
# 676| $c
# 677| EOF
Error: SHELLCHECK_WARNING (CWE-563):
/usr/libexec/kselftests/net/netfilter/nft_queue.sh:675:19: warning[SC2034]: b appears unused. Verify use (or export if used externally).
# 673| local breinject
# 674| c=$(ip netns exec "$nsrouter" nft list counter inet udpq "fromqueue" | grep packets)
# 675|-> read p preinject b breinject <<EOF
# 676| $c
# 677| EOF
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/srv6_iptunnel_cache.sh:85:9: warning[SC2154]: ksft_skip is referenced but not assigned.
# 83| if ! command -v ip &>/dev/null; then
# 84| echo "SKIP: ip tool not found"
# 85|-> exit "${ksft_skip}"
# 86| fi
# 87|
Error: SHELLCHECK_WARNING (CWE-457):
/usr/libexec/kselftests/net/srv6_iptunnel_cache.sh:179:8: warning[SC2154]: ksft_fail is referenced but not assigned.
# 177| ping -c 1 -W 2 "${DEST}" &>/dev/null; then
# 178| echo "FAIL: output path used dst cached by input path"
# 179|-> RET="${ksft_fail}"
# 180| else
# 181| echo "PASS: output path dst_cache is independent"
Error: SHELLCHECK_WARNING (CWE-569):
/usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/checker-valid.sh:7:13: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
# 5|
# 6| tmp_file=$(mktemp)
# 7|-> trap "rm -f $tmp_file" EXIT
# 8|
# 9| cat << EOF >$tmp_file
Error: SHELLCHECK_WARNING (CWE-88):
/usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/checker-valid.sh:19:1: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
# 17| # sparse happily exits with 0 on error so validate
# 18| # there is none on stderr. Use awk as grep is a pain with sh -e
# 19|-> $@ $tmp_file 2>&1 | awk -v c=1 '/error/{c=0}END{print c}'
Error: SHELLCHECK_WARNING (CWE-457):
/usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/gen-btf.sh:60:18: warning[SC2154]: objtree is referenced but not assigned.
# 58|
# 59| is_enabled() {
# 60|-> grep -q "^$1=y" ${objtree}/include/config/auto.conf
# 61| }
# 62|
Error: SHELLCHECK_WARNING (CWE-456):
/usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/kconfig/merge_config.sh:47:2: warning[SC2209]: Use var=$(command) to assign output (or quote to assign string).
# 45|
# 46| if [ -z "$AWK" ]; then
# 47|-> AWK=awk
# 48| fi
# 49|
Error: SHELLCHECK_WARNING (CWE-569):
/usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/checker-valid.sh:7:13: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled.
# 5|
# 6| tmp_file=$(mktemp)
# 7|-> trap "rm -f $tmp_file" EXIT
# 8|
# 9| cat << EOF >$tmp_file
Error: SHELLCHECK_WARNING (CWE-88):
/usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/checker-valid.sh:19:1: error[SC2068]: Double quote array expansions to avoid re-splitting elements.
# 17| # sparse happily exits with 0 on error so validate
# 18| # there is none on stderr. Use awk as grep is a pain with sh -e
# 19|-> $@ $tmp_file 2>&1 | awk -v c=1 '/error/{c=0}END{print c}'
Error: SHELLCHECK_WARNING (CWE-457):
/usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/gen-btf.sh:60:18: warning[SC2154]: objtree is referenced but not assigned.
# 58|
# 59| is_enabled() {
# 60|-> grep -q "^$1=y" ${objtree}/include/config/auto.conf
# 61| }
# 62|
Error: SHELLCHECK_WARNING (CWE-456):
/usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/kconfig/merge_config.sh:47:2: warning[SC2209]: Use var=$(command) to assign output (or quote to assign string).
# 45|
# 46| if [ -z "$AWK" ]; then
# 47|-> AWK=awk
# 48| fi
# 49|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/arch/x86/include/asm/bitops.h:55:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 53| {
# 54| if (__builtin_constant_p(nr)) {
# 55|-> asm_inline volatile(LOCK_PREFIX "orb %b1,%0"
# 56| : CONST_MASK_ADDR(nr, addr)
# 57| : "iq" (CONST_MASK(nr))
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/arch/x86/include/asm/bitops.h:55:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 53| {
# 54| if (__builtin_constant_p(nr)) {
# 55|-> asm_inline volatile(LOCK_PREFIX "orb %b1,%0"
# 56| : CONST_MASK_ADDR(nr, addr)
# 57| : "iq" (CONST_MASK(nr))
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/block/bfq-iosched.c:5457:18: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘bfqd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/block/bfq-iosched.c:5477:13: enter_function: entry to ‘bfq_exit_icq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/block/bfq-iosched.c:5497:17: call_function: calling ‘_bfq_exit_icq’ from ‘bfq_exit_icq’
# 5455| bfqd = bfqq->bfqd; /* NULL if scheduler already exited */
# 5456|
# 5457|-> if (bfqq && bfqd) {
# 5458| bic_set_bfqq(bic, NULL, is_sync, actuator_idx);
# 5459| bfq_exit_bfqq(bfqd, bfqq);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2026:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1981:12: enter_function: entry to ‘acpi_video_bus_probe’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1984:38: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1986:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1991:33: call_function: inlined call to ‘acpi_dev_parent’ from ‘acpi_video_bus_probe’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2005:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2009:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2026:9: danger: dereference of NULL ‘<unknown>’
# 2024| strscpy(acpi_device_name(device), ACPI_VIDEO_BUS_NAME);
# 2025| strscpy(acpi_device_class(device), ACPI_VIDEO_CLASS);
# 2026|-> device->driver_data = video;
# 2027|
# 2028| acpi_video_bus_find_cap(video);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:151:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:102:13: enter_function: entry to ‘acpi_watchdog_init’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: call_function: calling ‘acpi_watchdog_get_wdat’ from ‘acpi_watchdog_init’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: return_function: returning to ‘acpi_watchdog_init’ from ‘acpi_watchdog_get_wdat’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:114:12: branch_false: following ‘false’ branch (when ‘wdat’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:129:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:135:31: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:139:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:150:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:150:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:151:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:151:29: danger: out-of-bounds read from byte 16 till byte 23 but ‘resource_list’ ends at byte 16
# 149| found = false;
# 150| resource_list_for_each_entry(rentry, &resource_list) {
# 151|-> if (rentry->res->flags == res.flags &&
# 152| resource_union(rentry->res, &res, rentry->res)) {
# 153| found = true;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:175:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:102:13: enter_function: entry to ‘acpi_watchdog_init’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: call_function: calling ‘acpi_watchdog_get_wdat’ from ‘acpi_watchdog_init’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: return_function: returning to ‘acpi_watchdog_init’ from ‘acpi_watchdog_get_wdat’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:114:12: branch_false: following ‘false’ branch (when ‘wdat’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:170:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:174:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:174:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:175:35: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:175:35: danger: out-of-bounds read from byte 16 till byte 23 but ‘resource_list’ ends at byte 16
# 173| i = 0;
# 174| resource_list_for_each_entry(rentry, &resource_list)
# 175|-> resources[i++] = *rentry->res;
# 176|
# 177| pdev = platform_device_register_simple("wdat_wdt", PLATFORM_DEVID_NONE,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:248:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:243:38: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:245:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:248:18: danger: dereference of NULL ‘<unknown>’
# 246| struct acpi_smb_hc *hc;
# 247|
# 248|-> status = acpi_evaluate_integer(device->handle, "_EC", NULL, &val);
# 249| if (ACPI_FAILURE(status)) {
# 250| pr_err("error obtaining _EC.\n");
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:182:21: enter_function: entry to ‘acard_ahci_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:191:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:191:9: call_function: inlined call to ‘sg_next’ from ‘acard_ahci_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:191:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: danger: dereference of NULL ‘sg’
# 190| */
# 191| for_each_sg(qc->sg, sg, qc->n_elem, si) {
# 192|-> dma_addr_t addr = sg_dma_address(sg);
# 193| u32 sg_len = sg_dma_len(sg);
# 194|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:256:12: enter_function: entry to ‘adma_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:266:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:266:9: call_function: inlined call to ‘sg_next’ from ‘adma_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:266:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: danger: dereference of NULL ‘sg’
# 268| u32 len;
# 269|
# 270|-> addr = (u32)sg_dma_address(sg);
# 271| *(__le32 *)(buf + i) = cpu_to_le32(addr);
# 272| i += 4;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:458:13: enter_function: entry to ‘inic_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:470:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:470:9: call_function: inlined call to ‘sg_next’ from ‘inic_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:470:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: danger: dereference of NULL ‘sg’
# 469|
# 470| for_each_sg(qc->sg, sg, qc->n_elem, si) {
# 471|-> prd->mad = cpu_to_le32(sg_dma_address(sg));
# 472| prd->len = cpu_to_le16(sg_dma_len(sg));
# 473| prd->flags = flags;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1307:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1313:13: enter_function: entry to ‘nv_adma_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1320:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_false: following ‘false’ branch (when ‘si <= 4’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:36: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1320:9: call_function: inlined call to ‘sg_next’ from ‘nv_adma_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1320:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_false: following ‘false’ branch (when ‘si <= 4’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:36: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1323:17: call_function: calling ‘nv_adma_fill_aprd’ from ‘nv_adma_fill_sg’
# 1305| flags |= NV_APRD_CONT;
# 1306|
# 1307|-> aprd->addr = cpu_to_le64(((u64)sg_dma_address(sg)));
# 1308| aprd->len = cpu_to_le32(((u32)sg_dma_len(sg))); /* len in bytes */
# 1309| aprd->flags = flags;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1965:13: enter_function: entry to ‘nv_swncq_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1983:24: branch_false: following ‘false’ branch (when ‘sg_len == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: call_function: inlined call to ‘sg_next’ from ‘nv_swncq_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: danger: dereference of NULL ‘sg’
# 1978| u32 sg_len, len;
# 1979|
# 1980|-> addr = (u32)sg_dma_address(sg);
# 1981| sg_len = sg_dma_len(sg);
# 1982|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:567:13: enter_function: entry to ‘pdc_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:576:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:591:24: branch_false: following ‘false’ branch (when ‘sg_len == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: call_function: inlined call to ‘sg_next’ from ‘pdc_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: danger: dereference of NULL ‘sg’
# 586| * truncate dma_addr_t to u32.
# 587| */
# 588|-> addr = (u32) sg_dma_address(sg);
# 589| sg_len = sg_dma_len(sg);
# 590|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:236:21: enter_function: entry to ‘qs_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:244:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:244:9: call_function: inlined call to ‘sg_next’ from ‘qs_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:244:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: danger: dereference of NULL ‘sg’
# 246| u32 len;
# 247|
# 248|-> addr = sg_dma_address(sg);
# 249| *(__le64 *)prd = cpu_to_le64(addr);
# 250| prd += sizeof(u64);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:293:13: enter_function: entry to ‘sil_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:301:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:301:9: call_function: inlined call to ‘sg_next’ from ‘sil_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:301:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: danger: dereference of NULL ‘sg’
# 303| * truncate dma_addr_t to u32.
# 304| */
# 305|-> u32 addr = (u32) sg_dma_address(sg);
# 306| u32 sg_len = sg_dma_len(sg);
# 307|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:768:20: enter_function: entry to ‘sil24_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: call_function: inlined call to ‘sg_next’ from ‘sil24_fill_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: danger: dereference of NULL ‘sg’
# 774|
# 775| for_each_sg(qc->sg, sg, qc->n_elem, si) {
# 776|-> sge->addr = cpu_to_le64(sg_dma_address(sg));
# 777| sge->cnt = cpu_to_le32(sg_dma_len(sg));
# 778| sge->flags = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:784:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘last_sge’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:784:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:784:9: danger: dereference of NULL ‘last_sge’
# 782| }
# 783|
# 784|-> last_sge->flags = cpu_to_le32(SGE_TRM);
# 785| }
# 786|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:414:13: enter_function: entry to ‘pdc20621_dma_prep’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:434:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:434:9: call_function: inlined call to ‘sg_next’ from ‘pdc20621_dma_prep’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:434:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: danger: dereference of NULL ‘sg’
# 433| idx = 0;
# 434| for_each_sg(qc->sg, sg, qc->n_elem, si) {
# 435|-> buf[idx++] = cpu_to_le32(sg_dma_address(sg));
# 436| buf[idx++] = cpu_to_le32(sg_dma_len(sg));
# 437| total_len += sg_dma_len(sg);
Error: GCC_ANALYZER_WARNING (CWE-131):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2214:25: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2312:13: enter_function: entry to ‘blkfront_connect’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2355:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2369:53: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2370:9: call_function: calling ‘blkfront_gather_backend_features’ from ‘blkfront_connect’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2370:9: return_function: returning to ‘blkfront_connect’ from ‘blkfront_gather_backend_features’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2371:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2372:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2372:23: call_function: calling ‘blkfront_setup_indirect’ from ‘blkfront_connect’
# 2212| psegs);
# 2213| if (info->max_indirect_segments)
# 2214|-> rinfo->shadow[i].indirect_grants =
# 2215| kvzalloc_objs(rinfo->shadow[i].indirect_grants[0],
# 2216| INDIRECT_GREFS(grants));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:584:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘req_hdr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:836:5: enter_function: entry to ‘sev_tio_dev_disconnect’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:844:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:847:9: call_function: inlined call to ‘spdm_ctrl_init’ from ‘sev_tio_dev_disconnect’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:849:16: call_function: calling ‘sev_tio_do_cmd’ from ‘sev_tio_dev_disconnect’
# 582| req_hdr = sla_to_dobj_req_hdr(dev_data->reqbuf);
# 583| resp_hdr = sla_to_dobj_resp_hdr(dev_data->respbuf);
# 584|-> switch (req_hdr->data_type) {
# 585| case DOBJ_DATA_TYPE_SPDM:
# 586| rc = PCI_DOE_FEATURE_CMA;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:594:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘resp_hdr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:836:5: enter_function: entry to ‘sev_tio_dev_disconnect’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:844:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:847:9: call_function: inlined call to ‘spdm_ctrl_init’ from ‘sev_tio_dev_disconnect’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:849:16: call_function: calling ‘sev_tio_do_cmd’ from ‘sev_tio_dev_disconnect’
# 592| return -EINVAL;
# 593| }
# 594|-> resp_hdr->data_type = req_hdr->data_type;
# 595| dev_data->spdm.req_len = req_hdr->hdr.length -
# 596| sla_dobj_id_to_size(SPDM_DOBJ_ID_REQ);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:722:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘iter’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1665:26: enter_function: entry to ‘devm_cxl_create_port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1683:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1684:38: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1685:24: call_function: calling ‘devm_cxl_add_port’ from ‘devm_cxl_create_port’
# 720| */
# 721| iter = port;
# 722|-> while (!iter->host_bridge &&
# 723| !is_cxl_root(to_cxl_port(iter->dev.parent)))
# 724| iter = to_cxl_port(iter->dev.parent);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1573:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1563:12: enter_function: entry to ‘match_port_by_uport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1571:16: call_function: calling ‘to_cxl_port’ from ‘match_port_by_uport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1571:16: return_function: return of NULL to ‘match_port_by_uport’ from ‘to_cxl_port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1573:27: danger: dereference of NULL ‘port’
# 1571| port = to_cxl_port(dev);
# 1572| /* Endpoint ports are hosted by memdevs */
# 1573|-> if (is_cxl_memdev(port->uport_dev))
# 1574| return uport_dev == port->uport_dev->parent;
# 1575| return uport_dev == port->uport_dev;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:601:1: enter_function: entry to ‘xdma_prep_device_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:19: call_function: calling ‘xdma_alloc_desc’ from ‘xdma_prep_device_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:19: return_function: returning to ‘xdma_prep_device_sg’ from ‘xdma_alloc_desc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:614:12: branch_false: following ‘false’ branch (when ‘sw_desc’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:616:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:620:12: branch_true: following ‘true’ branch (when ‘dir == 1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:621:28: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:631:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:633:29: call_function: calling ‘xdma_fill_descs’ from ‘xdma_prep_device_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:633:29: return_function: returning to ‘xdma_prep_device_sg’ from ‘xdma_fill_descs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:631:9: call_function: inlined call to ‘sg_next’ from ‘xdma_prep_device_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:631:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: danger: dereference of NULL ‘sg’
# 630| desc_num = 0;
# 631| for_each_sg(sgl, sg, sg_len, i) {
# 632|-> addr = sg_dma_address(sg);
# 633| desc_num += xdma_fill_descs(sw_desc, *src, *dst, sg_dma_len(sg), desc_num);
# 634| dev_addr += sg_dma_len(sg);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1073:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 1071|
# 1072| reg = dpll_device_registration_first(dpll);
# 1073|-> return reg->priv;
# 1074| }
# 1075|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1081:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 1079|
# 1080| reg = dpll_device_registration_first(dpll);
# 1081|-> return reg->ops;
# 1082| }
# 1083|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1105:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1095:7: enter_function: entry to ‘dpll_pin_on_dpll_priv’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1102:12: branch_false: following ‘false’ branch (when ‘ref’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1104:15: call_function: inlined call to ‘dpll_pin_registration_first’ from ‘dpll_pin_on_dpll_priv’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1105:16: danger: dereference of NULL ‘<unknown>’
# 1103| return NULL;
# 1104| reg = dpll_pin_registration_first(ref);
# 1105|-> return reg->priv;
# 1106| }
# 1107|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1118:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1108:7: enter_function: entry to ‘dpll_pin_on_pin_priv’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1115:12: branch_false: following ‘false’ branch (when ‘ref’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1117:15: call_function: inlined call to ‘dpll_pin_registration_first’ from ‘dpll_pin_on_pin_priv’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1118:16: danger: dereference of NULL ‘<unknown>’
# 1116| return NULL;
# 1117| reg = dpll_pin_registration_first(ref);
# 1118|-> return reg->priv;
# 1119| }
# 1120|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1126:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
# 1124|
# 1125| reg = dpll_pin_registration_first(ref);
# 1126|-> return reg->ops;
# 1127| }
# 1128|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/firmware/efi/libstub/x86-stub.c:826:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/firmware/efi/libstub/x86-stub.c:1047:23: enter_function: entry to ‘efi_pe_entry’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/firmware/efi/libstub/x86-stub.c:1050:9: call_function: calling ‘efi_stub_entry’ from ‘efi_pe_entry’
# 824| const char *p = strstr(cmdline, opts[i]);
# 825|
# 826|-> if (p == cmdline || (p > cmdline && isspace(p[-1]))) {
# 827| cmdline_memmap_override = opts[i];
# 828| break;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:362:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘r’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:327:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:339:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:362:12: danger: use of uninitialized value ‘r’ here
# 360|
# 361| out_unlock:
# 362|-> if (r && !drm_dev_is_unplugged(adev_to_drm(adev)))
# 363| dev_err(adev->dev, "leaking bo va (%ld)\n", r);
# 364| drm_exec_fini(&exec);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1024:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:657:5: enter_function: entry to ‘amdgpu_userq_wait_ioctl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:674:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:13: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:678:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:679:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:683:27: call_function: inlined call to ‘size_mul’ from ‘amdgpu_userq_wait_ioctl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:685:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:688:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:691:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:696:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:699:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:704:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:707:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:712:39: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:714:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:719:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:719:21: call_function: calling ‘kmalloc_array_noprof’ from ‘amdgpu_userq_wait_ioctl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:719:21: return_function: returning to ‘amdgpu_userq_wait_ioctl’ from ‘kmalloc_array_noprof’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:720:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:720:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:733:22: call_function: calling ‘kmalloc_array_noprof’ from ‘amdgpu_userq_wait_ioctl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:733:22: return_function: returning to ‘amdgpu_userq_wait_ioctl’ from ‘kmalloc_array_noprof’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:734:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:734:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:751:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:767:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:767:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:768:20: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:789:29: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:789:29: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1020:12: branch_false: following ‘false’ branch (when ‘waitq’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1024:1: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1024:1: danger: use of uninitialized value ‘<unknown>’ here
# 1022|
# 1023| return r;
# 1024|-> }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:497:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘hub’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:536:12: enter_function: entry to ‘mmhub_v4_2_0_gart_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:541:16: call_function: calling ‘mmhub_v4_2_0_mid_gart_enable’ from ‘mmhub_v4_2_0_gart_enable’
# 495| }
# 496|
# 497|-> hub->vm_cntx_cntl = tmp;
# 498| }
# 499|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:497:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tmp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:536:12: enter_function: entry to ‘mmhub_v4_2_0_gart_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:541:16: call_function: calling ‘mmhub_v4_2_0_mid_gart_enable’ from ‘mmhub_v4_2_0_gart_enable’
# 495| }
# 496|
# 497|-> hub->vm_cntx_cntl = tmp;
# 498| }
# 499|
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:87:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:110:13: enter_function: entry to ‘update_cu_mask’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:116:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:119:9: call_function: calling ‘mqd_symmetrically_map_cu_mask_v12_1’ from ‘update_cu_mask’
# 85| */
# 86| for (i = 0; i < gfx_info->max_shader_engines; i++)
# 87|-> se_mask[i] = 0;
# 88|
# 89| i = inst;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:553:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:541:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:553:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:553:16: danger: use of uninitialized value ‘err’ here
# 551| }
# 552|
# 553|-> return err;
# 554| }
# 555|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:580:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:567:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:580:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:580:16: danger: use of uninitialized value ‘err’ here
# 578| }
# 579|
# 580|-> return err;
# 581| }
# 582|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘q’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1104:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1131:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1131:31: branch_true: following ‘true’ branch (when ‘xcc < num_xccs’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: danger: use of uninitialized value ‘q’ here
# 1130|
# 1131| for (xcc = 0; xcc < num_xccs; xcc++) {
# 1132|-> mqd = q->mqd + size * xcc;
# 1133| r = mqd_mgr->debugfs_show_mqd(m, mqd);
# 1134| if (r != 0)
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1133:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mqd_mgr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1104:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1107:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1104:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1131:31: branch_true: following ‘true’ branch (when ‘xcc < num_xccs’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1133:29: danger: use of uninitialized value ‘mqd_mgr’ here
# 1131| for (xcc = 0; xcc < num_xccs; xcc++) {
# 1132| mqd = q->mqd + size * xcc;
# 1133|-> r = mqd_mgr->debugfs_show_mqd(m, mqd);
# 1134| if (r != 0)
# 1135| break;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5505:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘FullDETBufferingTimeY[0]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5358:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5455:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5457:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5474:53: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5477:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5487:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5488:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5494:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5505:9: danger: use of uninitialized value ‘FullDETBufferingTimeY[0]’ here
# 5503| }
# 5504|
# 5505|-> FullDETBufferingTimeYStutterCriticalPlane = FullDETBufferingTimeY[0];
# 5506| for (k = 0; k < NumberOfActivePlanes; ++k) {
# 5507| if (FullDETBufferingTimeY[k] <= FullDETBufferingTimeYStutterCriticalPlane) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3423:34: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘clocks.data[i].clocks_in_khz’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3365:12: enter_function: entry to ‘vega20_emit_clock_levels’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:23: call_function: calling ‘vega20_get_current_clk_freq’ from ‘vega20_emit_clock_levels’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:23: return_function: returning to ‘vega20_emit_clock_levels’ from ‘vega20_get_current_clk_freq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3408:17: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:21: call_function: calling ‘vega20_get_memclocks’ from ‘vega20_emit_clock_levels’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:21: return_function: returning to ‘vega20_emit_clock_levels’ from ‘vega20_get_memclocks’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3419:29: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3423:34: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3423:34: danger: use of uninitialized value ‘clocks.data[i].clocks_in_khz’ here
# 3421| buf, size, "%d: %uMhz %s\n", i,
# 3422| clocks.data[i].clocks_in_khz / 1000,
# 3423|-> (clocks.data[i].clocks_in_khz == now * 10) ?
# 3424| "*" :
# 3425| "");
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1927:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘is_fine_grained’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1903:5: enter_function: entry to ‘smu_v13_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1912:15: call_function: calling ‘smu_v13_0_get_dpm_level_count’ from ‘smu_v13_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1912:15: return_function: returning to ‘smu_v13_0_set_single_dpm_table’ from ‘smu_v13_0_get_dpm_level_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1915:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1920:31: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1920:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1921:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1921:23: call_function: calling ‘smu_v13_0_get_fine_grained_status’ from ‘smu_v13_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1921:23: return_function: returning to ‘smu_v13_0_set_single_dpm_table’ from ‘smu_v13_0_get_fine_grained_status’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1923:20: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1927:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1927:21: danger: use of uninitialized value ‘is_fine_grained’ here
# 1925| return ret;
# 1926| }
# 1927|-> if (is_fine_grained)
# 1928| single_dpm_table->flags |= SMU_DPM_TABLE_FINE_GRAINED;
# 1929| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1538:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘is_fine_grained’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1515:5: enter_function: entry to ‘smu_v14_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1524:15: call_function: inlined call to ‘smu_v14_0_get_dpm_level_count’ from ‘smu_v14_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1524:15: call_function: inlined call to ‘smu_v14_0_get_dpm_level_count’ from ‘smu_v14_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1527:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1532:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1532:15: call_function: calling ‘smu_v14_0_get_fine_grained_status’ from ‘smu_v14_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1532:15: return_function: returning to ‘smu_v14_0_set_single_dpm_table’ from ‘smu_v14_0_get_fine_grained_status’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1534:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1538:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1538:13: danger: use of uninitialized value ‘is_fine_grained’ here
# 1536| return ret;
# 1537| }
# 1538|-> if (is_fine_grained)
# 1539| single_dpm_table->flags |= SMU_DPM_TABLE_FINE_GRAINED;
# 1540|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:181:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:156:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:159:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:159:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:162:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:162:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:166:13: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:166:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:170:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:174:12: branch_false: following ‘false’ branch (when ‘pptable_id != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:177:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:178:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:181:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:181:9: danger: use of uninitialized value ‘table’ here
# 179| return ret;
# 180|
# 181|-> smu->pptable_firmware.data = table;
# 182| smu->pptable_firmware.size = size;
# 183|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1439:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘clk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1405:5: enter_function: entry to ‘smu_v15_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1413:15: call_function: inlined call to ‘smu_v15_0_get_dpm_level_count’ from ‘smu_v15_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1413:15: call_function: inlined call to ‘smu_v15_0_get_dpm_level_count’ from ‘smu_v15_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1416:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1421:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1421:15: call_function: calling ‘smu_v15_0_get_fine_grained_status’ from ‘smu_v15_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1421:15: return_function: returning to ‘smu_v15_0_set_single_dpm_table’ from ‘smu_v15_0_get_fine_grained_status’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1424:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1424:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1429:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1430:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1430:23: call_function: calling ‘smu_v15_0_get_dpm_freq_by_index’ from ‘smu_v15_0_set_single_dpm_table’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1430:23: return_function: returning to ‘smu_v15_0_set_single_dpm_table’ from ‘smu_v15_0_get_dpm_freq_by_index’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1434:20: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1439:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1439:17: danger: use of uninitialized value ‘clk’ here
# 1437| }
# 1438|
# 1439|-> single_dpm_table->dpm_levels[i].value = clk;
# 1440| single_dpm_table->dpm_levels[i].enabled = true;
# 1441|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:763:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘max_dpm_level’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:799:12: enter_function: entry to ‘smu_v15_0_0_get_dpm_ultimate_freq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:809:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:845:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:845:12: branch_true: following ‘true’ branch (when ‘max’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:846:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:870:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:871:31: call_function: inlined call to ‘smu_v15_0_common_get_dpm_freq_by_index’ from ‘smu_v15_0_0_get_dpm_ultimate_freq’
# 761| uint32_t *freq)
# 762| {
# 763|-> smu_v15_0_0_get_dpm_freq_by_index(smu, clk_type, dpm_level, freq);
# 764|
# 765| return 0;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:763:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘min_dpm_level’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:799:12: enter_function: entry to ‘smu_v15_0_0_get_dpm_ultimate_freq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:809:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:845:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:877:12: branch_true: following ‘true’ branch (when ‘min’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:878:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:902:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:903:31: call_function: inlined call to ‘smu_v15_0_common_get_dpm_freq_by_index’ from ‘smu_v15_0_0_get_dpm_ultimate_freq’
# 761| uint32_t *freq)
# 762| {
# 763|-> smu_v15_0_0_get_dpm_freq_by_index(smu, clk_type, dpm_level, freq);
# 764|
# 765| return 0;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1347:52: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘lvl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1296:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1300:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1313:12: branch_true: following ‘true’ branch (when ‘is_fine_grained != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1326:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1329:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1343:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1343:29: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1347:34: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1347:52: danger: use of uninitialized value ‘lvl’ here
# 1345| buf, size, "%d: %uMhz %s\n", level_index + i,
# 1346| freq_values[i],
# 1347|-> (!is_deep_sleep && i == lvl) ? "*" : "");
# 1348| }
# 1349| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3586:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3490:12: enter_function: entry to ‘intel_modeset_calc_cdclk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3492:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3498:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3498:27: call_function: calling ‘intel_atomic_get_cdclk_state’ from ‘intel_modeset_calc_cdclk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3498:27: return_function: returning to ‘intel_modeset_calc_cdclk’ from ‘intel_atomic_get_cdclk_state’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3499:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3502:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3502:27: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3502:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3505:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3508:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3514:20: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3525:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3543:13: call_function: calling ‘intel_cdclk_can_crawl_and_squash’ from ‘intel_modeset_calc_cdclk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3543:13: return_function: returning to ‘intel_modeset_calc_cdclk’ from ‘intel_cdclk_can_crawl_and_squash’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3543:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3548:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3548:19: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3553:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3553:19: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3558:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3558:19: branch_false: following ‘false’ branch (when ‘pipe == -1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3564:20: call_function: inlined call to ‘intel_cdclk_clock_changed’ from ‘intel_modeset_calc_cdclk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3577:13: call_function: inlined call to ‘intel_mdclk_cdclk_ratio’ from ‘intel_modeset_calc_cdclk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3586:9: danger: dereference of NULL ‘display’
# 3584| }
# 3585|
# 3586|-> drm_dbg_kms(display->drm,
# 3587| "New cdclk calculated to be logical %u kHz, actual %u kHz\n",
# 3588| new_cdclk_state->logical.cdclk,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:165:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1714:5: enter_function: entry to ‘ilk_enable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1716:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1717:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1723:9: call_function: inlined call to ‘ilk_enable_display_irq’ from ‘ilk_enable_vblank’
# 163|
# 164| lockdep_assert_held(&display->irq.lock);
# 165|-> drm_WARN_ON(display->drm, enabled_irq_mask & ~interrupt_mask);
# 166|
# 167| new_val = display->irq.ilk_de_imr_mask;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:172:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1735:6: enter_function: entry to ‘ilk_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1737:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1738:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1744:9: call_function: inlined call to ‘ilk_disable_display_irq’ from ‘ilk_disable_vblank’
# 170|
# 171| if (new_val != display->irq.ilk_de_imr_mask &&
# 172|-> !drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display))) {
# 173| display->irq.ilk_de_imr_mask = new_val;
# 174| intel_de_write(display, DEIMR, display->irq.ilk_de_imr_mask);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:237:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1806:6: enter_function: entry to ‘bdw_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1809:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1810:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1813:13: call_function: calling ‘gen11_dsi_configure_te’ from ‘bdw_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1813:13: return_function: returning to ‘bdw_disable_vblank’ from ‘gen11_dsi_configure_te’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1813:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1816:9: call_function: inlined call to ‘spinlock_check’ from ‘bdw_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1817:9: call_function: inlined call to ‘bdw_disable_pipe_irq’ from ‘bdw_disable_vblank’
# 235| drm_WARN_ON(display->drm, enabled_irq_mask & ~interrupt_mask);
# 236|
# 237|-> if (drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display)))
# 238| return;
# 239|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:314:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’
# 312| * on pipe B and C the same bit MBZ.
# 313| */
# 314|-> if (drm_WARN_ON_ONCE(display->drm,
# 315| status_mask & PIPE_A_PSR_STATUS_VLV))
# 316| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:321:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’
# 319| * A the same bit is for perf counters which we don't use either.
# 320| */
# 321|-> if (drm_WARN_ON_ONCE(display->drm,
# 322| status_mask & PIPE_B_PSR_STATUS_VLV))
# 323| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:334:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’
# 332|
# 333| out:
# 334|-> drm_WARN_ONCE(display->drm,
# 335| enable_mask & ~PIPESTAT_INT_ENABLE_MASK ||
# 336| status_mask & ~PIPESTAT_INT_STATUS_MASK,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:354:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’
# 352|
# 353| lockdep_assert_held(&display->irq.lock);
# 354|-> drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display));
# 355|
# 356| if ((display->irq.pipestat_irq_mask[pipe] & status_mask) == status_mask)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:377:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1702:6: enter_function: entry to ‘i965_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1704:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1705:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1709:9: call_function: calling ‘i915_disable_pipestat’ from ‘i965_disable_vblank’
# 375|
# 376| lockdep_assert_held(&display->irq.lock);
# 377|-> drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display));
# 378|
# 379| if ((display->irq.pipestat_irq_mask[pipe] & status_mask) == 0)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1627:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1679:6: enter_function: entry to ‘i915gm_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1681:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1683:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1683:9: call_function: calling ‘i8xx_disable_vblank’ from ‘i915gm_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1683:9: return_function: returning to ‘i915gm_disable_vblank’ from ‘i8xx_disable_vblank’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1685:9: call_function: calling ‘i915gm_irq_cstate_wa_disable’ from ‘i915gm_disable_vblank’
# 1625| static void i915gm_irq_cstate_wa_disable(struct intel_display *display)
# 1626| {
# 1627|-> lockdep_assert_held(&display->drm->vblank_time_lock);
# 1628|
# 1629| if (--display->irq.vblank_enabled == 0)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:986:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:965:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:971:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:971:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:974:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:974:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:977:15: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:978:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:981:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:986:19: danger: dereference of NULL ‘display’
# 984| size = ALIGN(max_cmds * 8, CACHELINE_BYTES);
# 985|
# 986|-> dsb_buf = intel_dsb_buffer_create(display->drm, size);
# 987| if (IS_ERR(dsb_buf))
# 988| goto out_put_rpm;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:18:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:16:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:18:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:18:9: danger: dereference of NULL ‘display’
# 16| struct intel_display *display = to_intel_display(crtc);
# 17|
# 18|-> display->parent->initial_plane->vblank_wait(&crtc->base);
# 19| }
# 20|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:28:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:25:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:28:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:28:9: danger: dereference of NULL ‘display’
# 26| struct intel_crtc *crtc;
# 27|
# 28|-> for_each_intel_crtc(display->drm, crtc) {
# 29| struct intel_plane *plane =
# 30| to_intel_plane(crtc->base.primary);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:62:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:71:1: enter_function: entry to ‘intel_find_initial_plane_obj’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:74:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:75:74: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:87:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: call_function: calling ‘intel_alloc_initial_plane_obj’ from ‘intel_find_initial_plane_obj’
# 60| break;
# 61| default:
# 62|-> drm_dbg_kms(display->drm, "Unsupported modifier for initial FB: 0x%llx\n",
# 63| fb->base.modifier);
# 64| return NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:67:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:71:1: enter_function: entry to ‘intel_find_initial_plane_obj’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:74:41: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:75:74: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:87:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: call_function: calling ‘intel_alloc_initial_plane_obj’ from ‘intel_find_initial_plane_obj’
# 65| }
# 66|
# 67|-> return display->parent->initial_plane->alloc_obj(display->drm, plane_config);
# 68| }
# 69|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:821:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘gt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:808:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:808:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:818:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:821:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:821:12: danger: use of uninitialized value ‘gt’ here
# 819| break;
# 820|
# 821|-> if (!gt)
# 822| return;
# 823|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:521:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘vp_dir’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:504:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:507:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:511:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:514:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:515:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:515:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:520:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:521:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:521:23: danger: use of uninitialized value ‘vp_dir’ here
# 519|
# 520| for_each_online_cpu(idx) {
# 521|-> err = parent_vp_debugfs_create(hv_vp_index[idx],
# 522| &parent_vp_stats[idx],
# 523| vp_dir);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1326:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘region’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1299:1: enter_function: entry to ‘mshv_map_user_memory’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1308:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1309:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1308:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1312:24: call_function: inlined call to ‘get_current’ from ‘mshv_map_user_memory’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1318:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1321:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1321:15: call_function: calling ‘mshv_partition_create_region’ from ‘mshv_map_user_memory’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1321:15: return_function: returning to ‘mshv_map_user_memory’ from ‘mshv_partition_create_region’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1323:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1326:23: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1326:23: danger: use of uninitialized value ‘region’ here
# 1324| return ret;
# 1325|
# 1326|-> switch (region->mreg_type) {
# 1327| case MSHV_REGION_TYPE_MEM_PINNED:
# 1328| ret = mshv_prepare_pinned_region(region);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1311:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘freq_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1297:12: enter_function: entry to ‘adxl380_write_raw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1307:23: call_function: calling ‘adxl380_samp_freq_avail’ from ‘adxl380_write_raw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1307:23: return_function: returning to ‘adxl380_write_raw’ from ‘adxl380_samp_freq_avail’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1311:29: danger: use of uninitialized value ‘freq_count’ here
# 1309| return ret;
# 1310|
# 1311|-> odr_index = adxl380_find_match_1d_tbl(freq_vals, freq_count,
# 1312| val);
# 1313| return adxl380_set_odr(st, odr_index);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:409:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘reg_val’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:559:12: enter_function: entry to ‘smi330_write_raw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:582:24: call_function: calling ‘smi330_set_sensor_config’ from ‘smi330_write_raw’
# 407| return ret;
# 408|
# 409|-> reg_val = field_prep(attr->mask, reg_val);
# 410| ret = regmap_update_bits(data->regmap, reg, attr->mask, reg_val);
# 411| if (ret)
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:76:14: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’
# 74| static void rdma_dim_destroy(struct ib_cq *cq)
# 75| {
# 76|-> if (!cq->dim)
# 77| return;
# 78|
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:80:15: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’
# 78|
# 79| cancel_work_sync(&cq->dim->work);
# 80|-> kfree(cq->dim);
# 81| }
# 82|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:324:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’
# 322| if (WARN_ON_ONCE(atomic_read(&cq->usecnt)))
# 323| return;
# 324|-> if (WARN_ON_ONCE(cq->cqe_used))
# 325| return;
# 326|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:327:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’
# 325| return;
# 326|
# 327|-> if (cq->device->ops.pre_destroy_cq) {
# 328| ret = cq->device->ops.pre_destroy_cq(cq);
# 329| WARN_ONCE(ret, "Disable of kernel CQ shouldn't fail");
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:332:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’
# 330| }
# 331|
# 332|-> switch (cq->poll_ctx) {
# 333| case IB_POLL_DIRECT:
# 334| break;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:348:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’
# 346| rdma_dim_destroy(cq);
# 347| trace_cq_free(cq);
# 348|-> if (cq->device->ops.post_destroy_cq)
# 349| cq->device->ops.post_destroy_cq(cq);
# 350| else
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:354:15: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’
# 352| WARN_ONCE(ret, "Destroy of kernel CQ shouldn't fail");
# 353| rdma_restrack_del(&cq->res);
# 354|-> kfree(cq->wc);
# 355| kfree(cq);
# 356| }
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: danger: out-of-bounds write at bit 961 but ‘tmp_list’ ends at bit 128
# 412| out_free_cqs:
# 413| list_for_each_entry_safe(cq, n, &tmp_list, pool_entry) {
# 414|-> cq->shared = false;
# 415| ib_free_cq(cq);
# 416| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:898:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ac_end’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:866:16: enter_function: entry to ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: call_function: calling ‘request_ihex_firmware’ from ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: return_function: returning to ‘ili210x_firmware_update_store’ from ‘request_ihex_firmware’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:877:12: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: call_function: calling ‘ili251x_firmware_to_buffer’ from ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: return_function: returning to ‘ili210x_firmware_update_store’ from ‘ili251x_firmware_to_buffer’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:885:17: call_function: inlined call to ‘PTR_ERR_OR_ZERO’ from ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:897:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:898:25: danger: use of uninitialized value ‘ac_end’ here
# 896| if (client->irq > 0) {
# 897| guard(disable_irq)(&client->irq);
# 898|-> error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end);
# 899| } else {
# 900| error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:900:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ac_end’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:866:16: enter_function: entry to ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: call_function: calling ‘request_ihex_firmware’ from ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: return_function: returning to ‘ili210x_firmware_update_store’ from ‘request_ihex_firmware’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:877:12: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: call_function: calling ‘ili251x_firmware_to_buffer’ from ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: return_function: returning to ‘ili210x_firmware_update_store’ from ‘ili251x_firmware_to_buffer’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:885:17: call_function: inlined call to ‘PTR_ERR_OR_ZERO’ from ‘ili210x_firmware_update_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:900:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:900:25: danger: use of uninitialized value ‘ac_end’ here
# 898| error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end);
# 899| } else {
# 900|-> error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end);
# 901| }
# 902|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/mailbox/pcc.c:205:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘val’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/mailbox/pcc.c:288:13: enter_function: entry to ‘pcc_chan_acknowledge’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/mailbox/pcc.c:295:9: call_function: calling ‘pcc_chan_reg_read_modify_write’ from ‘pcc_chan_acknowledge’
# 203| return ret;
# 204|
# 205|-> val &= reg->preserve_mask;
# 206| val |= reg->set_mask;
# 207|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/md/bcache/journal.c:863:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*keys.<U95a0>.keys’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/md/bcache/journal.c:885:6: enter_function: entry to ‘bch_journal_meta’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/md/bcache/journal.c:892:15: call_function: calling ‘bch_journal’ from ‘bch_journal_meta’
# 861| w = journal_wait_for_write(c, bch_keylist_nkeys(keys));
# 862|
# 863|-> memcpy(bset_bkey_last(w->data), keys->keys, bch_keylist_bytes(keys));
# 864| w->data->keys += bch_keylist_nkeys(keys);
# 865|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:1617:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*v4l2_ctrl.id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2458:12: enter_function: entry to ‘uvc_mapping_get_xctrl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2463:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2466:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2466:16: call_function: calling ‘uvc_mapping_get_xctrl_std’ from ‘uvc_mapping_get_xctrl’
# 1615| * For minimum value, use maximum speed but in negative direction.
# 1616| */
# 1617|-> if (uvc_ctrl_is_relative_ptz(v4l2_ctrl->id))
# 1618| v4l2_ctrl->minimum = -v4l2_ctrl->maximum;
# 1619| else
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:124:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:616:12: enter_function: entry to ‘peak_canfd_set_bittiming’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:620:16: call_function: calling ‘pucan_set_timing_slow’ from ‘peak_canfd_set_bittiming’
# 122| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_TIMING_SLOW);
# 123|
# 124|-> cmd->sjw_t = PUCAN_TSLOW_SJW_T(pbt->sjw - 1,
# 125| priv->can.ctrlmode &
# 126| CAN_CTRLMODE_3_SAMPLES);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:147:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:623:12: enter_function: entry to ‘peak_canfd_set_data_bittiming’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:627:16: call_function: calling ‘pucan_set_timing_fast’ from ‘peak_canfd_set_data_bittiming’
# 145| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_TIMING_FAST);
# 146|
# 147|-> cmd->sjw = PUCAN_TFAST_SJW(pbt->sjw - 1);
# 148| cmd->tseg1 = PUCAN_TFAST_TSEG1(pbt->prop_seg + pbt->phase_seg1 - 1);
# 149| cmd->tseg2 = PUCAN_TFAST_TSEG2(pbt->phase_seg2 - 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:189:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:527:13: enter_function: entry to ‘peak_canfd_stop’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:533:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:538:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:538:17: call_function: calling ‘pucan_tx_abort’ from ‘peak_canfd_stop’
# 187| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_TX_ABORT);
# 188|
# 189|-> cmd->flags = cpu_to_le16(flags);
# 190|
# 191| return pucan_write_cmd(priv);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:200:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:505:12: enter_function: entry to ‘peak_canfd_start’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:509:15: call_function: calling ‘pucan_clr_err_counters’ from ‘peak_canfd_start’
# 198| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_WR_ERR_CNT);
# 199|
# 200|-> cmd->sel_mask = cpu_to_le16(PUCAN_WRERRCNT_TE | PUCAN_WRERRCNT_RE);
# 201| cmd->tx_counter = 0;
# 202| cmd->rx_counter = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:213:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:567:12: enter_function: entry to ‘peak_canfd_open’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:573:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:578:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:579:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:582:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:593:15: call_function: calling ‘pucan_set_options’ from ‘peak_canfd_open’
# 211| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_SET_EN_OPTION);
# 212|
# 213|-> cmd->options = cpu_to_le16(opt_mask);
# 214|
# 215| return pucan_write_cmd(priv);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:224:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:567:12: enter_function: entry to ‘peak_canfd_open’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:573:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:578:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:579:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:582:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:582:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:583:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:583:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:584:31: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:584:31: call_function: calling ‘pucan_clr_options’ from ‘peak_canfd_open’
# 222| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_CLR_DIS_OPTION);
# 223|
# 224|-> cmd->options = cpu_to_le16(opt_mask);
# 225|
# 226| return pucan_write_cmd(priv);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:444:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:424:12: enter_function: entry to ‘pcan_usb_pro_get_can_channel_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:432:14: call_function: inlined call to ‘pcan_msg_init_empty’ from ‘pcan_usb_pro_get_can_channel_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:433:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:433:9: call_function: calling ‘pcan_msg_add_rec’ from ‘pcan_usb_pro_get_can_channel_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:433:9: return_function: returning to ‘pcan_usb_pro_get_can_channel_id’ from ‘pcan_msg_add_rec’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:435:16: call_function: calling ‘pcan_usb_pro_send_cmd’ from ‘pcan_usb_pro_get_can_channel_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:435:16: return_function: returning to ‘pcan_usb_pro_get_can_channel_id’ from ‘pcan_usb_pro_send_cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:436:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:439:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:439:15: call_function: calling ‘pcan_usb_pro_wait_rsp’ from ‘pcan_usb_pro_get_can_channel_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:439:15: return_function: returning to ‘pcan_usb_pro_get_can_channel_id’ from ‘pcan_usb_pro_wait_rsp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:440:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:444:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:444:22: danger: dereference of NULL ‘<unknown>’
# 442|
# 443| pdn = (struct pcan_usb_pro_devid *)pc;
# 444|-> *can_ch_id = le32_to_cpu(pdn->dev_num);
# 445|
# 446| return err;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1952:46: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1933:12: enter_function: entry to ‘hellcreek_probe’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1941:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1944:32: call_function: inlined call to ‘devm_kcalloc’ from ‘hellcreek_probe’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1947:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1950:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1950:9: release_memory: using NULL here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1952:46: danger: dereference of NULL ‘0’
# 1950| hellcreek->pdata = of_device_get_match_data(dev);
# 1951|
# 1952|-> hellcreek->ports = devm_kcalloc(dev, hellcreek->pdata->num_ports,
# 1953| sizeof(*hellcreek->ports),
# 1954| GFP_KERNEL);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3247:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3233:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3235:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3240:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3247:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3247:21: danger: dereference of NULL ‘<unknown>’
# 3245| }
# 3246|
# 3247|-> if (VORTEX_PCI(vp)->current_state < PCI_D3hot)
# 3248| return;
# 3249|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5843:32: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ifa_local’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5771:27: enter_function: entry to ‘macb_suspend’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5786:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5789:13: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5789:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5790:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5790:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5805:17: call_function: inlined call to ‘spinlock_check’ from ‘macb_suspend’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5840:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5841:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5843:32: danger: use of uninitialized value ‘ifa_local’ here
# 5841| tmp |= MACB_BIT(ARP);
# 5842| /* write IP address into register */
# 5843|-> tmp |= MACB_BFEXT(IP, ifa_local);
# 5844| }
# 5845| spin_unlock_irqrestore(&bp->lock, flags);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:524:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned int *)set_tport)[2]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1272:5: enter_function: entry to ‘nfp_flower_compile_action’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1285:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nfp_flower_compile_action’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1297:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1298:21: call_function: inlined call to ‘nfp_fl_check_mangle_start’ from ‘nfp_flower_compile_action’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: call_function: calling ‘nfp_flower_loop_action’ from ‘nfp_flower_compile_action’
# 522| static void nfp_fl_set_helper32(u32 value, u32 mask, u8 *p_exact, u8 *p_mask)
# 523| {
# 524|-> u32 oldvalue = get_unaligned((u32 *)p_exact);
# 525| u32 oldmask = get_unaligned((u32 *)p_mask);
# 526|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:524:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(unsigned int *)&set_eth_14(D)->eth_addr_val[off_8(D)]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1272:5: enter_function: entry to ‘nfp_flower_compile_action’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1285:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nfp_flower_compile_action’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1297:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1298:21: call_function: inlined call to ‘nfp_fl_check_mangle_start’ from ‘nfp_flower_compile_action’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: call_function: calling ‘nfp_flower_loop_action’ from ‘nfp_flower_compile_action’
# 522| static void nfp_fl_set_helper32(u32 value, u32 mask, u8 *p_exact, u8 *p_mask)
# 523| {
# 524|-> u32 oldvalue = get_unaligned((u32 *)p_exact);
# 525| u32 oldmask = get_unaligned((u32 *)p_mask);
# 526|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/geneve.c:462:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*gh_len’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/geneve.c:570:12: enter_function: entry to ‘geneve_post_decap_hint’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/geneve.c:581:20: call_function: calling ‘geneve_sk_gro_hint_off’ from ‘geneve_post_decap_hint’
# 460|
# 461| *type = proto_id_map[id];
# 462|-> *gh_len += gro_hint->nested_hdr_len;
# 463|
# 464| return (void *)gro_hint - (void *)gh;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:533:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1167:12: enter_function: entry to ‘an8811hb_probe’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1174:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1176:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1178:15: call_function: calling ‘an8811hb_load_firmware’ from ‘an8811hb_probe’
# 531| * result and continue like the vendor driver does.
# 532| */
# 533|-> if (pbus_value & AN8811HB_CRC_ST) {
# 534| air_buckpbus_reg_read(phydev, mon3, &pbus_value);
# 535| phydev_dbg(phydev, "CRC Check %s!\n",
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:964:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:961:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:964:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:964:16: danger: use of uninitialized value ‘pbus_value’ here
# 962| return ret;
# 963|
# 964|-> return (pbus_value & AN8811HB_HWTRAP2_CKO) ? 50000000 : 25000000;
# 965| }
# 966|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:997:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:994:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:997:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:997:16: danger: use of uninitialized value ‘pbus_value’ here
# 995| return ret;
# 996|
# 997|-> return (pbus_value & AN8811HB_CLK_DRV_CKO_MASK);
# 998| }
# 999|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:439:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘eht_len’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:411:13: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:415:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:418:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:425:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:437:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:438:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:439:25: danger: use of uninitialized value ‘eht_len’ here
# 437| if (ppduinfo->is_eht) {
# 438| tlv->type = cpu_to_le16(IEEE80211_RADIOTAP_EHT);
# 439|-> tlv->len = cpu_to_le16(eht_len);
# 440|
# 441| eht = (struct ieee80211_radiotap_eht *)tlv->data;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘seq.<U51e0>.tkip.iv32’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:905:20: branch_true: following ‘true’ branch (when ‘sta’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:908:35: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: danger: use of uninitialized value ‘seq.<U51e0>.tkip.iv32’ here
# 915| tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64));
# 916|
# 917|-> ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
# 918| iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
# 919|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘seq.<Ud000>.tkip.iv32’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:905:20: branch_true: following ‘true’ branch (when ‘sta’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:908:35: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: danger: use of uninitialized value ‘seq.<Ud000>.tkip.iv32’ here
# 915| tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64));
# 916|
# 917|-> ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k);
# 918| iwlagn_convert_p1k(p1k, data->tkip->tx.p1k);
# 919|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:960:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2636:1: enter_function: entry to ‘nvme_fc_start_fcp_op’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2694:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2695:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2695:23: call_function: calling ‘nvme_fc_map_data’ from ‘nvme_fc_start_fcp_op’
# 958|
# 959| for_each_sg(sg, s, nents, i) {
# 960|-> s->dma_address = 0L;
# 961| #ifdef CONFIG_NEED_SG_DMA_LENGTH
# 962| s->dma_length = s->length;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:319:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2522:1: enter_function: entry to ‘nvmet_fc_handle_fcp_rqst’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2550:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2554:24: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2556:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2558:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2561:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nvmet_fc_handle_fcp_rqst’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2561:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2563:9: release_memory: ‘*fod.data_sg’ is NULL
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2568:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2574:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2579:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2580:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2580:23: call_function: calling ‘nvmet_fc_alloc_tgt_pgs’ from ‘nvmet_fc_handle_fcp_rqst’
# 317|
# 318| for_each_sg(sg, s, nents, i) {
# 319|-> s->dma_address = 0L;
# 320| #ifdef CONFIG_NEED_SG_DMA_LENGTH
# 321| s->dma_length = s->length;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2276:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2455:1: enter_function: entry to ‘__nvmet_fc_fcp_nvme_cmd_done’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2471:12: branch_false: following ‘false’ branch (when ‘abort == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2477:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2477:12: branch_false: following ‘false’ branch (when ‘status == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2491:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2491:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2493:25: call_function: calling ‘nvmet_fc_transfer_fcp_data’ from ‘__nvmet_fc_fcp_nvme_cmd_done’
# 2274| while (tlen < remaininglen &&
# 2275| fcpreq->sg_cnt < tgtport->max_sg_cnt &&
# 2276|-> tlen + sg_dma_len(sg) < NVMET_FC_MAX_SEQ_LENGTH) {
# 2277| fcpreq->sg_cnt++;
# 2278| tlen += sg_dma_len(sg);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:242:13: enter_function: entry to ‘nvmet_bdev_execute_rw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:255:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:258:14: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:258:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:263:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:276:32: call_function: inlined call to ‘sg_page’ from ‘nvmet_bdev_execute_rw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: call_function: inlined call to ‘sg_page’ from ‘nvmet_bdev_execute_rw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:320:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_bdev_execute_rw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: danger: dereference of NULL ‘sg’
# 297|
# 298| for_each_sg(req->sg, sg, req->sg_cnt, i) {
# 299|-> while (bio_add_page(bio, sg_page(sg), sg->length, sg->offset)
# 300| != sg->length) {
# 301| struct bio *prev = bio;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:120:13: enter_function: entry to ‘nvmet_file_execute_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:135:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:140:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:140:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nvmet_file_execute_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:140:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:141:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: call_function: inlined call to ‘sg_page’ from ‘nvmet_file_execute_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:141:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_file_execute_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:141:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: danger: dereference of NULL ‘sg’
# 140| memset(&req->f.iocb, 0, sizeof(struct kiocb));
# 141| for_each_sg(req->sg, sg, req->sg_cnt, i) {
# 142|-> bvec_set_page(&req->f.bvec[bv_cnt], sg_page(sg), sg->length,
# 143| sg->offset);
# 144| len += req->f.bvec[bv_cnt].bv_len;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:261:12: enter_function: entry to ‘nvmet_passthru_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:268:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:271:13: call_function: inlined call to ‘nvmet_use_inline_bvec’ from ‘nvmet_passthru_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: call_function: inlined call to ‘sg_page’ from ‘nvmet_passthru_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_passthru_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: danger: dereference of NULL ‘sg’
# 280|
# 281| for_each_sg(req->sg, sg, req->sg_cnt, i) {
# 282|-> if (bio_add_page(bio, sg_page(sg), sg->length, sg->offset) <
# 283| sg->length)
# 284| goto out_bio_put;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:575:44: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bi’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1629:13: enter_function: entry to ‘nvmet_rdma_queue_established’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1634:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1638:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1640:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1643:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1648:17: call_function: calling ‘nvmet_rdma_handle_command’ from ‘nvmet_rdma_queue_established’
# 573| domain->sig_type = IB_SIG_TYPE_T10_DIF;
# 574| domain->sig.dif.bg_type = IB_T10DIF_CRC;
# 575|-> domain->sig.dif.pi_interval = 1 << bi->interval_exp;
# 576| domain->sig.dif.ref_tag = le32_to_cpu(cmd->rw.reftag);
# 577| if (control & NVME_RW_PRINFO_PRCHK_REF)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1634:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘queue’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1767:12: enter_function: entry to ‘nvmet_rdma_cm_handler’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1773:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1776:9: call_function: inlined call to ‘arch_static_branch’ from ‘nvmet_rdma_cm_handler’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1785:17: call_function: calling ‘nvmet_rdma_queue_established’ from ‘nvmet_rdma_cm_handler’
# 1632|
# 1633| spin_lock_irqsave(&queue->state_lock, flags);
# 1634|-> if (queue->state != NVMET_RDMA_Q_CONNECTING) {
# 1635| pr_warn("trying to establish a connected queue\n");
# 1636| goto out_unlock;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1709:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘queue’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1767:12: enter_function: entry to ‘nvmet_rdma_cm_handler’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1773:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1776:9: call_function: inlined call to ‘arch_static_branch’ from ‘nvmet_rdma_cm_handler’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1808:17: call_function: calling ‘nvmet_rdma_queue_connect_fail’ from ‘nvmet_rdma_cm_handler’
# 1707| struct nvmet_rdma_queue *queue)
# 1708| {
# 1709|-> WARN_ON_ONCE(queue->state != NVMET_RDMA_Q_CONNECTING);
# 1710|
# 1711| mutex_lock(&nvmet_rdma_queue_mutex);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:379:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1363:12: enter_function: entry to ‘nvmet_tcp_try_recv’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1368:21: branch_true: following ‘true’ branch (when ‘i < budget’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1369:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1369:23: call_function: calling ‘nvmet_tcp_try_recv_one’ from ‘nvmet_tcp_try_recv’
# 377| return;
# 378| }
# 379|-> if (!sg->length || sg->length <= sg_offset) {
# 380| nvmet_tcp_fatal_error(cmd->queue);
# 381| return;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:460:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1422:13: enter_function: entry to ‘nvmet_tcp_io_work’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1432:23: call_function: calling ‘nvmet_tcp_try_recv’ from ‘nvmet_tcp_io_work’
# 458|
# 459| while (total_len) {
# 460|-> size_t len = min_t(size_t, total_len, sg->length);
# 461|
# 462| /*
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:533:6: enter_function: entry to ‘nvmet_bdev_execute_zone_append’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:545:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:549:42: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:548:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:555:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:555:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:560:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:560:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:566:21: call_function: inlined call to ‘bdev_zone_sectors’ from ‘nvmet_bdev_execute_zone_append’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:566:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:572:13: call_function: inlined call to ‘nvmet_use_inline_bvec’ from ‘nvmet_bdev_execute_zone_append’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:586:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:589:21: call_function: inlined call to ‘sg_page’ from ‘nvmet_bdev_execute_zone_append’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:589:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:593:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:586:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_bdev_execute_zone_append’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:586:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: danger: dereference of NULL ‘sg’
# 585|
# 586| for_each_sg(req->sg, sg, req->sg_cnt, sg_cnt) {
# 587|-> unsigned int len = sg->length;
# 588|
# 589| if (bio_add_page(bio, sg_page(sg), len, sg->offset) != len) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:856:41: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mode’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:866:12: enter_function: entry to ‘pmc_core_substate_blk_req_show’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:871:27: branch_true: following ‘true’ branch (when ‘pmc_idx != 3’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:878:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:888:17: call_function: calling ‘pmc_core_substate_req_header_show’ from ‘pmc_core_substate_blk_req_show’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:888:17: return_function: returning to ‘pmc_core_substate_blk_req_show’ from ‘pmc_core_substate_req_header_show’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:901:33: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:906:33: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:871:27: branch_true: following ‘true’ branch (when ‘pmc_idx != 3’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:878:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:888:17: call_function: calling ‘pmc_core_substate_req_header_show’ from ‘pmc_core_substate_blk_req_show’
# 854| seq_printf(s, "%40s |", "Element");
# 855| pmc_for_each_mode(mode, pmc)
# 856|-> seq_printf(s, " %9s |", pmc_lpm_modes[mode]);
# 857|
# 858| if (type == HEADER_STATUS) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:175:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*val’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:317:12: enter_function: entry to ‘lwmi_om_hwmon_write’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:324:12: branch_true: following ‘true’ branch (when ‘type == 8’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:325:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:325:17: branch_true: following ‘true’ branch (when ‘attr == 7’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:326:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:350:28: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:353:31: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:353:31: call_function: calling ‘lwmi_om_fan_get_set’ from ‘lwmi_om_hwmon_write’
# 173| method_id = set ? LWMI_FEATURE_VALUE_SET : LWMI_FEATURE_VALUE_GET;
# 174| args.arg0 = LWMI_ATTR_ID_FAN_RPM(channel);
# 175|-> args.arg1 = set ? *val : 0;
# 176|
# 177| err = lwmi_dev_evaluate_int(priv->wdev, 0x0, method_id,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:342:70: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1456:28: enter_function: entry to ‘twl_scsi_queue_lck’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1465:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1471:9: call_function: inlined call to ‘twl_get_request_id’ from ‘twl_scsi_queue_lck’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1476:18: call_function: calling ‘twl_scsiop_execute_scsi’ from ‘twl_scsi_queue_lck’
# 340|
# 341| scsi_for_each_sg(srb, sg, sg_count, i) {
# 342|-> command_packet->sg_list[i].address = TW_CPU_TO_SGL(sg_dma_address(sg));
# 343| command_packet->sg_list[i].length = TW_CPU_TO_SGL(sg_dma_len(sg));
# 344| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:345:61: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘srb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1456:28: enter_function: entry to ‘twl_scsi_queue_lck’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1465:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1471:9: call_function: inlined call to ‘twl_get_request_id’ from ‘twl_scsi_queue_lck’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1476:18: call_function: calling ‘twl_scsiop_execute_scsi’ from ‘twl_scsi_queue_lck’
# 343| command_packet->sg_list[i].length = TW_CPU_TO_SGL(sg_dma_len(sg));
# 344| }
# 345|-> command_packet->sgl_entries__lunh = cpu_to_le16(TW_REQ_LUN_IN((srb->device->lun >> 4), scsi_sg_count(tw_dev->srb[request_id])));
# 346| }
# 347| } else {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1695:12: enter_function: entry to ‘tw_scsiop_read_write’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1709:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1715:40: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1716:12: branch_false: following ‘false’ branch (when ‘command_packet’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1721:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1756:12: branch_false: following ‘false’ branch (when ‘use_sg > 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: branch_true: following ‘true’ branch (when ‘i < use_sg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: call_function: inlined call to ‘sg_next’ from ‘tw_scsiop_read_write’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: branch_true: following ‘true’ branch (when ‘i < use_sg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: danger: dereference of NULL ‘sg’
# 1758|
# 1759| scsi_for_each_sg(tw_dev->srb[request_id], sg, use_sg, i) {
# 1760|-> command_packet->byte8.io.sgl[i].address = sg_dma_address(sg);
# 1761| command_packet->byte8.io.sgl[i].length = sg_dma_len(sg);
# 1762| command_packet->size+=2;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:842:12: enter_function: entry to ‘inia100_build_scb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:867:12: branch_false: following ‘false’ branch (when ‘count_sg >= 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:869:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:869:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:872:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:872:12: branch_true: following ‘true’ branch (when ‘count_sg != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:873:31: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:874:17: branch_true: following ‘true’ branch (when ‘i < count_sg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:874:17: call_function: inlined call to ‘sg_next’ from ‘inia100_build_scb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:874:17: branch_true: following ‘true’ branch (when ‘i < count_sg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: danger: dereference of NULL ‘sg’
# 873| scb->sg_len = cpu_to_le32((u32) (count_sg * 8));
# 874| scsi_for_each_sg(cmd, sg, count_sg, i) {
# 875|-> sgent->base = cpu_to_le32((u32) sg_dma_address(sg));
# 876| sgent->length = cpu_to_le32((u32) sg_dma_len(sg));
# 877| sgent++;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3792:13: enter_function: entry to ‘aac_build_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3805:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3808:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3810:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3810:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3810:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: danger: dereference of NULL ‘sg’
# 3809|
# 3810| scsi_for_each_sg(scsicmd, sg, nseg, i) {
# 3811|-> psg->sg[i].addr = cpu_to_le32(sg_dma_address(sg));
# 3812| psg->sg[i].count = cpu_to_le32(sg_dma_len(sg));
# 3813| byte_count += sg_dma_len(sg);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3832:13: enter_function: entry to ‘aac_build_sg64’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3847:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: call_function: inlined call to ‘scsi_sglist’ from ‘aac_build_sg64’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sg64’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: danger: dereference of NULL ‘sg’
# 3849|
# 3850| scsi_for_each_sg(scsicmd, sg, nseg, i) {
# 3851|-> int count = sg_dma_len(sg);
# 3852| addr = sg_dma_address(sg);
# 3853| psg->sg[i].addr[0] = cpu_to_le32(addr & 0xffffffff);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3875:13: enter_function: entry to ‘aac_build_sgraw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3892:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: call_function: inlined call to ‘scsi_sglist’ from ‘aac_build_sgraw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sgraw’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: danger: dereference of NULL ‘sg’
# 3894|
# 3895| scsi_for_each_sg(scsicmd, sg, nseg, i) {
# 3896|-> int count = sg_dma_len(sg);
# 3897| u64 addr = sg_dma_address(sg);
# 3898| psg->sg[i].next = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3923:13: enter_function: entry to ‘aac_build_sgraw2’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3933:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: call_function: inlined call to ‘scsi_sglist’ from ‘aac_build_sgraw2’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3940:17: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3941:41: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3946:20: branch_true: following ‘true’ branch (when ‘i == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3948:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sgraw2’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: danger: dereference of NULL ‘sg’
# 3935|
# 3936| scsi_for_each_sg(scsicmd, sg, nseg, i) {
# 3937|-> int count = sg_dma_len(sg);
# 3938| u64 addr = sg_dma_address(sg);
# 3939|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4039:13: enter_function: entry to ‘aac_build_sghba’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4052:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4057:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4057:12: branch_true: following ‘true’ branch (when ‘nseg > 28’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4058:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4062:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4066:17: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4067:32: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4062:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sghba’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4062:9: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: danger: dereference of NULL ‘sg’
# 4061|
# 4062| scsi_for_each_sg(scsicmd, sg, nseg, i) {
# 4063|-> int count = sg_dma_len(sg);
# 4064| u64 addr = sg_dma_address(sg);
# 4065|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10740:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pdev’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10726:16: branch_false: following ‘false’ branch (when ‘bus_type != 4’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10728:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10728:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10737:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10740:21: danger: dereference of NULL ‘pdev’
#10738| adv_dvc_varp->drv_ptr = boardp;
#10739| adv_dvc_varp->cfg = &boardp->dvc_cfg.adv_dvc_cfg;
#10740|-> if (pdev->device == PCI_DEVICE_ID_ASP_ABP940UW) {
#10741| ASC_DBG(1, "wide board ASC-3550\n");
#10742| adv_dvc_varp->chip_type = ADV_CHIP_ASC3550;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10781:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘asc_dvc_varp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10726:16: branch_true: following ‘true’ branch (when ‘bus_type == 4’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10726:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10728:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10737:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10753:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10761:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10776:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10781:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10781:25: danger: dereference of NULL ‘asc_dvc_varp’
#10779| * calling AscInitGetConfig().
#10780| */
#10781|-> switch (asc_dvc_varp->bus_type) {
#10782| #ifdef CONFIG_ISA
#10783| case ASC_IS_VL:
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:599:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:597:1: enter_function: entry to ‘ahd_linux_target_in_softc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:600:40: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_target_in_softc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:600:40: return_function: returning to ‘ahd_linux_target_in_softc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:599:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’
# 597| ahd_linux_target_in_softc(struct scsi_target *starget)
# 598| {
# 599|-> struct ahd_softc *ahd =
# 600| *((struct ahd_softc **)dev_to_shost(&starget->dev)->hostdata);
# 601| unsigned int target_offset;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:613:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:611:1: enter_function: entry to ‘ahd_linux_target_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:614:40: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_target_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:614:40: return_function: returning to ‘ahd_linux_target_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:613:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’
# 611| ahd_linux_target_alloc(struct scsi_target *starget)
# 612| {
# 613|-> struct ahd_softc *ahd =
# 614| *((struct ahd_softc **)dev_to_shost(&starget->dev)->hostdata);
# 615| struct seeprom_config *sc = ahd->seep_config;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur_seg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1539:1: enter_function: entry to ‘ahd_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1552:12: branch_false: following ‘false’ branch (when ‘nseg >= 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1555:9: call_function: inlined call to ‘ahd_lock’ from ‘ahd_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1569:12: branch_false: following ‘false’ branch (when ‘scb’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1576:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1612:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ahd_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1619:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1620:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1626:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1626:17: call_function: inlined call to ‘sg_next’ from ‘ahd_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1626:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: danger: dereference of NULL ‘cur_seg’
# 1628| bus_size_t len;
# 1629|
# 1630|-> addr = sg_dma_address(cur_seg);
# 1631| len = sg_dma_len(cur_seg);
# 1632| scb->platform_data->xfer_len += len;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2370:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2367:13: enter_function: entry to ‘ahd_linux_set_width’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2369:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_width’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2369:35: return_function: return of NULL to ‘ahd_linux_set_width’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2370:27: danger: dereference of NULL ‘shost’
# 2368| {
# 2369| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2370|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2371| struct ahd_devinfo devinfo;
# 2372| unsigned long flags;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2384:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2381:13: enter_function: entry to ‘ahd_linux_set_period’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2383:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_period’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2383:35: return_function: return of NULL to ‘ahd_linux_set_period’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2384:27: danger: dereference of NULL ‘shost’
# 2382| {
# 2383| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2384|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2385| struct ahd_tmode_tstate *tstate;
# 2386| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2437:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2434:13: enter_function: entry to ‘ahd_linux_set_offset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2436:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_offset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2436:35: return_function: return of NULL to ‘ahd_linux_set_offset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2437:27: danger: dereference of NULL ‘shost’
# 2435| {
# 2436| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2437|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2438| struct ahd_tmode_tstate *tstate;
# 2439| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2472:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2469:13: enter_function: entry to ‘ahd_linux_set_dt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2471:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_dt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2471:35: return_function: return of NULL to ‘ahd_linux_set_dt’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2472:27: danger: dereference of NULL ‘shost’
# 2470| {
# 2471| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2472|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2473| struct ahd_tmode_tstate *tstate;
# 2474| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2514:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2511:13: enter_function: entry to ‘ahd_linux_set_qas’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2513:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_qas’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2513:35: return_function: return of NULL to ‘ahd_linux_set_qas’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2514:27: danger: dereference of NULL ‘shost’
# 2512| {
# 2513| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2514|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2515| struct ahd_tmode_tstate *tstate;
# 2516| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2553:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2550:13: enter_function: entry to ‘ahd_linux_set_iu’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2552:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_iu’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2552:35: return_function: return of NULL to ‘ahd_linux_set_iu’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2553:27: danger: dereference of NULL ‘shost’
# 2551| {
# 2552| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2553|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2554| struct ahd_tmode_tstate *tstate;
# 2555| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2593:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2590:13: enter_function: entry to ‘ahd_linux_set_rd_strm’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2592:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_rd_strm’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2592:35: return_function: return of NULL to ‘ahd_linux_set_rd_strm’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2593:27: danger: dereference of NULL ‘shost’
# 2591| {
# 2592| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2593|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2594| struct ahd_tmode_tstate *tstate;
# 2595| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2629:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2626:13: enter_function: entry to ‘ahd_linux_set_wr_flow’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2628:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_wr_flow’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2628:35: return_function: return of NULL to ‘ahd_linux_set_wr_flow’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2629:27: danger: dereference of NULL ‘shost’
# 2627| {
# 2628| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2629|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2630| struct ahd_tmode_tstate *tstate;
# 2631| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2665:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2662:13: enter_function: entry to ‘ahd_linux_set_rti’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2664:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_rti’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2664:35: return_function: return of NULL to ‘ahd_linux_set_rti’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2665:27: danger: dereference of NULL ‘shost’
# 2663| {
# 2664| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2665|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2666| struct ahd_tmode_tstate *tstate;
# 2667| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2709:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2706:13: enter_function: entry to ‘ahd_linux_set_pcomp_en’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2708:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_pcomp_en’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2708:35: return_function: return of NULL to ‘ahd_linux_set_pcomp_en’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2709:27: danger: dereference of NULL ‘shost’
# 2707| {
# 2708| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2709|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2710| struct ahd_tmode_tstate *tstate;
# 2711| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2759:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2756:13: enter_function: entry to ‘ahd_linux_set_hold_mcs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2758:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_hold_mcs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2758:35: return_function: return of NULL to ‘ahd_linux_set_hold_mcs’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2759:27: danger: dereference of NULL ‘shost’
# 2757| {
# 2758| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2759|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata);
# 2760| struct ahd_tmode_tstate *tstate;
# 2761| struct ahd_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:546:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:544:1: enter_function: entry to ‘ahc_linux_target_in_softc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:547:40: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_target_in_softc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:547:40: return_function: returning to ‘ahc_linux_target_in_softc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:546:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’
# 544| ahc_linux_target_in_softc(struct scsi_target *starget)
# 545| {
# 546|-> struct ahc_softc *ahc =
# 547| *((struct ahc_softc **)dev_to_shost(&starget->dev)->hostdata);
# 548| unsigned int target_offset;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:560:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:558:1: enter_function: entry to ‘ahc_linux_target_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:561:40: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_target_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:561:40: return_function: returning to ‘ahc_linux_target_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:560:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’
# 558| ahc_linux_target_alloc(struct scsi_target *starget)
# 559| {
# 560|-> struct ahc_softc *ahc =
# 561| *((struct ahc_softc **)dev_to_shost(&starget->dev)->hostdata);
# 562| struct seeprom_config *sc = ahc->seep_config;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur_seg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1410:1: enter_function: entry to ‘ahc_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1425:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1434:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1447:12: branch_false: following ‘false’ branch (when ‘nseg >= 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1453:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1454:12: branch_false: following ‘false’ branch (when ‘scb’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1459:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1499:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ahc_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1510:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1516:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1521:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1528:36: call_function: calling ‘ahc_linux_map_seg’ from ‘ahc_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1528:36: return_function: returning to ‘ahc_linux_run_command’ from ‘ahc_linux_map_seg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1521:17: call_function: inlined call to ‘sg_next’ from ‘ahc_linux_run_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1521:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: danger: dereference of NULL ‘cur_seg’
# 1524| int consumed;
# 1525|
# 1526|-> addr = sg_dma_address(cur_seg);
# 1527| len = sg_dma_len(cur_seg);
# 1528| consumed = ahc_linux_map_seg(ahc, scb,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2327:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2324:13: enter_function: entry to ‘ahc_linux_set_width’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2326:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_width’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2326:35: return_function: return of NULL to ‘ahc_linux_set_width’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2327:27: danger: dereference of NULL ‘shost’
# 2325| {
# 2326| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2327|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata);
# 2328| struct ahc_devinfo devinfo;
# 2329| unsigned long flags;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2341:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2338:13: enter_function: entry to ‘ahc_linux_set_period’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2340:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_period’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2340:35: return_function: return of NULL to ‘ahc_linux_set_period’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2341:27: danger: dereference of NULL ‘shost’
# 2339| {
# 2340| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2341|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata);
# 2342| struct ahc_tmode_tstate *tstate;
# 2343| struct ahc_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2386:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2383:13: enter_function: entry to ‘ahc_linux_set_offset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2385:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_offset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2385:35: return_function: return of NULL to ‘ahc_linux_set_offset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2386:27: danger: dereference of NULL ‘shost’
# 2384| {
# 2385| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2386|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata);
# 2387| struct ahc_tmode_tstate *tstate;
# 2388| struct ahc_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2415:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2412:13: enter_function: entry to ‘ahc_linux_set_dt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2414:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_dt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2414:35: return_function: return of NULL to ‘ahc_linux_set_dt’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2415:27: danger: dereference of NULL ‘shost’
# 2413| {
# 2414| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
# 2415|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata);
# 2416| struct ahc_tmode_tstate *tstate;
# 2417| struct ahc_initiator_tinfo *tinfo
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/arcmsr/arcmsr_hba.c:1868:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/arcmsr/arcmsr_hba.c:3347:8: enter_function: entry to ‘arcmsr_queue_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/arcmsr/arcmsr_hba.c:3347:8: call_function: calling ‘arcmsr_queue_command_lck’ from ‘arcmsr_queue_command’
# 1866| scsi_for_each_sg(pcmd, sg, nseg, i) {
# 1867| /* Get the physical address of the current data pointer */
# 1868|-> length = cpu_to_le32(sg_dma_len(sg));
# 1869| address_lo = cpu_to_le32(dma_addr_lo32(sg_dma_address(sg)));
# 1870| address_hi = cpu_to_le32(dma_addr_hi32(sg_dma_address(sg)));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1127:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1126:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1127:37: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1127:37: danger: dereference of NULL ‘rport’
# 1125| {
# 1126| struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device));
# 1127|-> struct fc_rport_libfc_priv *rp = rport->dd_data;
# 1128| struct bnx2fc_cmd *io_req;
# 1129| struct fc_lport *lport;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1649:12: enter_function: entry to ‘bnx2fc_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1671:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1674:20: branch_false: following ‘false’ branch (when ‘sg_len <= 65535’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1680:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1671:9: call_function: inlined call to ‘sg_next’ from ‘bnx2fc_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1671:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: danger: dereference of NULL ‘sg’
# 1670| scsi_sg_count(sc), sc->sc_data_direction);
# 1671| scsi_for_each_sg(sc, sg, sg_count, i) {
# 1672|-> sg_len = sg_dma_len(sg);
# 1673| addr = sg_dma_address(sg);
# 1674| if (sg_len > BNX2FC_MAX_BD_LEN) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1842:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1841:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1842:37: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1842:37: danger: dereference of NULL ‘rport’
# 1840| struct fc_lport *lport = shost_priv(host);
# 1841| struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device));
# 1842|-> struct fc_rport_libfc_priv *rp = rport->dd_data;
# 1843| struct bnx2fc_rport *tgt;
# 1844| struct bnx2fc_cmd *io_req;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:396:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:735:13: enter_function: entry to ‘esp_maybe_execute_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:750:15: call_function: calling ‘find_and_prep_issuable_command’ from ‘esp_maybe_execute_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:750:15: return_function: returning to ‘esp_maybe_execute_command’ from ‘find_and_prep_issuable_command’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:751:12: branch_false: following ‘false’ branch (when ‘ent’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:754:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:754:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:759:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:769:9: call_function: calling ‘esp_map_dma’ from ‘esp_maybe_execute_command’
# 394| spriv->num_sg = scsi_dma_map(cmd);
# 395| scsi_for_each_sg(cmd, s, spriv->num_sg, i)
# 396|-> total += sg_dma_len(s);
# 397| }
# 398| spriv->cur_residue = sg_dma_len(sg);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1740:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’
# 1738| case ESP_EVENT_DATA_OUT: {
# 1739| struct esp_cmd_entry *ent = esp->active_cmd;
# 1740|-> struct scsi_cmnd *cmd = ent->cmd;
# 1741| dma_addr_t dma_addr = esp_cur_dma_addr(ent, cmd);
# 1742| unsigned int dma_len = esp_cur_dma_len(ent, cmd);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1781:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’
# 1779| case ESP_EVENT_DATA_DONE: {
# 1780| struct esp_cmd_entry *ent = esp->active_cmd;
# 1781|-> struct scsi_cmnd *cmd = ent->cmd;
# 1782| int bytes_sent;
# 1783|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1828:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’
# 1826|
# 1827| if (esp->ireg & ESP_INTR_FDONE) {
# 1828|-> ent->status = esp_read8(ESP_FDATA);
# 1829| ent->message = esp_read8(ESP_FDATA);
# 1830| scsi_esp_cmd(esp, ESP_CMD_MOK);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1832:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’
# 1830| scsi_esp_cmd(esp, ESP_CMD_MOK);
# 1831| } else if (esp->ireg == ESP_INTR_BSERV) {
# 1832|-> ent->status = esp_read8(ESP_FDATA);
# 1833| ent->message = 0xff;
# 1834| esp_event(esp, ESP_EVENT_MSGIN);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1838:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’
# 1836| }
# 1837|
# 1838|-> if (ent->message != COMMAND_COMPLETE) {
# 1839| shost_printk(KERN_INFO, esp->host,
# 1840| "Unexpected message %x in status\n",
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1852:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’
# 1850| case ESP_EVENT_FREE_BUS: {
# 1851| struct esp_cmd_entry *ent = esp->active_cmd;
# 1852|-> struct scsi_cmnd *cmd = ent->cmd;
# 1853|
# 1854| if (ent->message == COMMAND_COMPLETE ||
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2704:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2698:13: enter_function: entry to ‘esp_set_offset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2700:34: call_function: calling ‘dev_to_shost’ from ‘esp_set_offset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2700:34: return_function: return of NULL to ‘esp_set_offset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2704:13: danger: dereference of NULL ‘host’
# 2702| struct esp_target_data *tp = &esp->target[target->id];
# 2703|
# 2704|-> if (esp->flags & ESP_FLAG_DISABLE_SYNC)
# 2705| tp->nego_goal_offset = 0;
# 2706| else
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:907:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:895:13: enter_function: entry to ‘fcoe_oem_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:903:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:904:19: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:903:18: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:905:19: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:903:18: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:906:23: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fcoe_oem_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:907:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:907:22: danger: dereference of NULL ‘pp’
# 905| (ntohs(fh->fh_rx_id) == FC_XID_UNKNOWN)) {
# 906| fcp = fc_frame_payload_get(fp, sizeof(*fcp));
# 907|-> if ((fcp->fc_flags & FCP_CFL_WRDATA) &&
# 908| (ntohl(fcp->fc_dl) > fcoe_ddp_min))
# 909| return true;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:374:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:364:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:370:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:374:9: danger: dereference of NULL ‘rport’
# 372| struct rport_dd_data_s *rdd_data;
# 373|
# 374|-> rdd_data = rport->dd_data;
# 375| tport = rdd_data->tport;
# 376|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:355:19: enter_function: entry to ‘fnic_queue_wq_copy_desc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:364:34: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:364:34: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:377:12: branch_true: following ‘true’ branch (when ‘sg_count != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:379:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:380:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:380:17: call_function: inlined call to ‘sg_next’ from ‘fnic_queue_wq_copy_desc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:380:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: danger: dereference of NULL ‘sg’
# 379| desc = io_req->sgl_list;
# 380| for_each_sg(scsi_sglist(sc), sg, sg_count, i) {
# 381|-> desc->addr = cpu_to_le64(sg_dma_address(sg));
# 382| desc->len = cpu_to_le32(sg_dma_len(sg));
# 383| desc->_resvd = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2046:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2040:17: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2041:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2046:9: danger: dereference of NULL ‘rport’
# 2044| fnic_priv(sc)->flags = FNIC_NO_FLAGS;
# 2045|
# 2046|-> rdd_data = rport->dd_data;
# 2047| tport = rdd_data->tport;
# 2048|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2538:5: enter_function: entry to ‘fnic_device_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2575:17: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2577:9: call_function: inlined call to ‘spinlock_check’ from ‘fnic_device_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: danger: dereference of NULL ‘rport’
# 2576|
# 2577| spin_lock_irqsave(&fnic->fnic_lock, flags);
# 2578|-> FNIC_SCSI_DBG(KERN_DEBUG, fnic->host, fnic->fnic_num,
# 2579| "fcid: 0x%x lun: %llu hwq: %d mqtag: 0x%x flags: 0x%x Device reset\n",
# 2580| rport->port_id, sc->device->lun, hwq, mqtag,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2583:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2538:5: enter_function: entry to ‘fnic_device_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2575:17: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2577:9: call_function: inlined call to ‘spinlock_check’ from ‘fnic_device_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2583:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2583:9: danger: dereference of NULL ‘rport’
# 2581| fnic_priv(sc)->flags);
# 2582|
# 2583|-> rdd_data = rport->dd_data;
# 2584| tport = rdd_data->tport;
# 2585| if (!tport) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:846:12: enter_function: entry to ‘hptiop_buildsgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:854:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:855:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:855:12: branch_false: following ‘false’ branch (when ‘nseg != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:858:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:861:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: call_function: inlined call to ‘scsi_sglist’ from ‘hptiop_buildsgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:867:32: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: call_function: inlined call to ‘sg_next’ from ‘hptiop_buildsgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: danger: dereference of NULL ‘sg’
# 862|
# 863| scsi_for_each_sg(scp, sg, HPT_SCP(scp)->sgcnt, idx) {
# 864|-> psg[idx].pci_address = cpu_to_le64(sg_dma_address(sg)) |
# 865| hba->ops->host_phy_flag;
# 866| psg[idx].size = cpu_to_le32(sg_dma_len(sg));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/initio.c:2427:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/initio.c:2098:12: enter_function: entry to ‘initio_msgout_reject’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/initio.c:2108:24: call_function: calling ‘wait_tulip’ from ‘initio_msgout_reject’
# 2425| outb(TSC_FLUSH_FIFO, host->addr + TUL_SCtrl0); /* Flush SCSI FIFO */
# 2426| initio_unlink_busy_scb(host, host->active);
# 2427|-> host->active->hastat = 0;
# 2428| initio_append_done_scb(host, host->active);
# 2429| host->active = NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:54:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:903:19: enter_function: entry to ‘fc_els_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:910:17: call_function: calling ‘fc_adisc_fill’ from ‘fc_els_fill’
# 52| adisc = fc_frame_payload_get(fp, sizeof(*adisc));
# 53| memset(adisc, 0, sizeof(*adisc));
# 54|-> adisc->adisc_cmd = ELS_ADISC;
# 55| put_unaligned_be64(lport->wwpn, &adisc->adisc_wwpn);
# 56| put_unaligned_be64(lport->wwnn, &adisc->adisc_wwnn);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:756:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:747:20: enter_function: entry to ‘fc_plogi_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:754:17: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_plogi_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:755:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:755:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_plogi_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:755:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:756:9: danger: dereference of NULL ‘pp’
# 754| plogi = fc_frame_payload_get(fp, sizeof(*plogi));
# 755| memset(plogi, 0, sizeof(*plogi));
# 756|-> plogi->fl_cmd = (u8) op;
# 757| put_unaligned_be64(lport->wwpn, &plogi->fl_wwpn);
# 758| put_unaligned_be64(lport->wwnn, &plogi->fl_wwnn);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:788:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:780:20: enter_function: entry to ‘fc_flogi_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:786:17: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_flogi_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:787:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:787:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_flogi_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:787:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:788:9: danger: dereference of NULL ‘pp’
# 786| flogi = fc_frame_payload_get(fp, sizeof(*flogi));
# 787| memset(flogi, 0, sizeof(*flogi));
# 788|-> flogi->fl_cmd = (u8) ELS_FLOGI;
# 789| put_unaligned_be64(lport->wwpn, &flogi->fl_wwpn);
# 790| put_unaligned_be64(lport->wwnn, &flogi->fl_wwnn);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:813:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:805:20: enter_function: entry to ‘fc_fdisc_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:811:17: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_fdisc_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:812:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:812:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_fdisc_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:812:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:813:9: danger: dereference of NULL ‘pp’
# 811| fdisc = fc_frame_payload_get(fp, sizeof(*fdisc));
# 812| memset(fdisc, 0, sizeof(*fdisc));
# 813|-> fdisc->fl_cmd = (u8) ELS_FDISC;
# 814| put_unaligned_be64(lport->wwpn, &fdisc->fl_wwpn);
# 815| put_unaligned_be64(lport->wwnn, &fdisc->fl_wwnn);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:834:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:828:20: enter_function: entry to ‘fc_logo_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:832:16: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_logo_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:833:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:833:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_logo_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:833:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:834:9: danger: dereference of NULL ‘pp’
# 832| logo = fc_frame_payload_get(fp, sizeof(*logo));
# 833| memset(logo, 0, sizeof(*logo));
# 834|-> logo->fl_cmd = ELS_LOGO;
# 835| hton24(logo->fl_n_port_id, lport->port_id);
# 836| logo->fl_n_port_wwn = htonll(lport->wwpn);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:848:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:842:20: enter_function: entry to ‘fc_rtv_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:846:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rtv_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:847:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:847:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_rtv_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:847:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:848:9: danger: dereference of NULL ‘pp’
# 846| rtv = fc_frame_payload_get(fp, sizeof(*rtv));
# 847| memset(rtv, 0, sizeof(*rtv));
# 848|-> rtv->rtv_cmd = ELS_RTV;
# 849| }
# 850|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:861:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:854:20: enter_function: entry to ‘fc_rec_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:859:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rec_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:860:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:860:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_rec_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:860:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:861:9: danger: dereference of NULL ‘pp’
# 859| rec = fc_frame_payload_get(fp, sizeof(*rec));
# 860| memset(rec, 0, sizeof(*rec));
# 861|-> rec->rec_cmd = ELS_REC;
# 862| hton24(rec->rec_s_id, lport->port_id);
# 863| rec->rec_ox_id = htons(ep->oxid);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:896:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:890:20: enter_function: entry to ‘fc_scr_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:894:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_scr_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:895:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:895:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_scr_fill’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:895:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:896:9: danger: dereference of NULL ‘pp’
# 894| scr = fc_frame_payload_get(fp, sizeof(*scr));
# 895| memset(scr, 0, sizeof(*scr));
# 896|-> scr->scr_cmd = ELS_SCR;
# 897| scr->scr_reg_func = ELS_SCRF_FULL;
# 898| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1444:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1764:13: enter_function: entry to ‘fc_exch_recv_bls’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1774:14: call_function: calling ‘fc_exch_find’ from ‘fc_exch_recv_bls’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1774:14: return_function: returning to ‘fc_exch_recv_bls’ from ‘fc_exch_find’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1781:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1799:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1808:28: branch_true: following ‘true’ branch (when ‘ep’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1809:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1809:33: call_function: calling ‘fc_exch_recv_abts’ from ‘fc_exch_recv_bls’
# 1442| memset(ap, 0, sizeof(*ap));
# 1443| sp = &ep->seq;
# 1444|-> ap->ba_high_seq_cnt = htons(0xffff);
# 1445| if (sp->ssb_stat & SSB_ST_RESP) {
# 1446| ap->ba_seq_id = sp->id;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1846:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1829:13: enter_function: entry to ‘fc_seq_ls_acc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1839:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1844:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_seq_ls_acc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1845:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1845:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_seq_ls_acc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1845:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1846:9: danger: dereference of NULL ‘pp’
# 1844| acc = fc_frame_payload_get(fp, sizeof(*acc));
# 1845| memset(acc, 0, sizeof(*acc));
# 1846|-> acc->la_cmd = ELS_LS_ACC;
# 1847| fc_fill_reply_hdr(fp, rx_fp, FC_RCTL_ELS_REP, 0);
# 1848| lport->tt.frame_send(lport, fp);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1878:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1860:13: enter_function: entry to ‘fc_seq_ls_rjt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1871:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1876:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_seq_ls_rjt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1877:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1877:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_seq_ls_rjt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1877:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1878:9: danger: dereference of NULL ‘pp’
# 1876| rjt = fc_frame_payload_get(fp, sizeof(*rjt));
# 1877| memset(rjt, 0, sizeof(*rjt));
# 1878|-> rjt->er_cmd = ELS_LS_RJT;
# 1879| rjt->er_reason = reason;
# 1880| rjt->er_explan = explan;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2069:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2016:13: enter_function: entry to ‘fc_exch_els_rec’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2029:14: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_exch_els_rec’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2031:12: branch_false: following ‘false’ branch (when ‘pp’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2033:15: call_function: inlined call to ‘ntoh24’ from ‘fc_exch_els_rec’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2042:12: branch_false: following ‘false’ branch (when ‘xid != 65535’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2048:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2048:14: call_function: calling ‘fc_exch_lookup’ from ‘fc_exch_els_rec’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2048:14: return_function: returning to ‘fc_exch_els_rec’ from ‘fc_exch_lookup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2049:12: branch_false: following ‘false’ branch (when ‘ep’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2055:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2057:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2062:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2067:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_exch_els_rec’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2068:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2068:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_exch_els_rec’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2068:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2069:9: danger: dereference of NULL ‘pp’
# 2067| acc = fc_frame_payload_get(fp, sizeof(*acc));
# 2068| memset(acc, 0, sizeof(*acc));
# 2069|-> acc->reca_cmd = ELS_LS_ACC;
# 2070| acc->reca_ox_id = rp->rec_ox_id;
# 2071| memcpy(acc->reca_ofid, rp->rec_s_id, 3);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2258:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2243:13: enter_function: entry to ‘fc_exch_rrq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2253:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2256:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_exch_rrq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2257:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2257:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_exch_rrq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2257:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2258:9: danger: dereference of NULL ‘pp’
# 2256| rrq = fc_frame_payload_get(fp, sizeof(*rrq));
# 2257| memset(rrq, 0, sizeof(*rrq));
# 2258|-> rrq->rrq_cmd = ELS_RRQ;
# 2259| hton24(rrq->rrq_s_id, ep->sid);
# 2260| rrq->rrq_ox_id = htons(ep->oxid);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2154:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2158:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2159:12: branch_false: following ‘false’ branch (when ‘rval == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2162:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2164:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: danger: dereference of NULL ‘rport’
# 2165| return rc;
# 2166|
# 2167|-> FC_SCSI_DBG(lport, "Resetting rport (%6.6x)\n", rport->port_id);
# 2168|
# 2169| fsp = fc_fcp_pkt_alloc(lport, GFP_NOIO);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2127:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2081:13: enter_function: entry to ‘fc_rport_recv_prlo_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2102:14: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rport_recv_prlo_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2103:12: branch_false: following ‘false’ branch (when ‘pp’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2105:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2106:12: branch_false: following ‘false’ branch (when ‘plen == 20’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2113:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2113:14: call_function: calling ‘fc_frame_alloc’ from ‘fc_rport_recv_prlo_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2113:14: return_function: returning to ‘fc_rport_recv_prlo_req’ from ‘fc_frame_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2114:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2120:14: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rport_recv_prlo_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2122:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_rport_recv_prlo_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2122:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2127:9: danger: dereference of NULL ‘pp’
# 2125| pp->prlo.prlo_len = htons(len);
# 2126| spp = &pp->spp;
# 2127|-> spp->spp_type = rspp->spp_type;
# 2128| spp->spp_type_ext = rspp->spp_type_ext;
# 2129| spp->spp_flags = FC_SPP_RESP_ACK;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:95:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘*segment.sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:190:5: enter_function: entry to ‘iscsi_tcp_segment_done’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:218:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:223:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:233:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:235:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:235:17: call_function: inlined call to ‘sg_next’ from ‘iscsi_tcp_segment_done’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:235:17: call_function: inlined call to ‘iscsi_tcp_segment_init_sg’ from ‘iscsi_tcp_segment_done’
# 93| segment->sg = sg;
# 94| segment->sg_offset = offset;
# 95|-> segment->size = min(sg->length - offset,
# 96| segment->total_size - segment->total_copied);
# 97| segment->data = NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:95:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:906:5: enter_function: entry to ‘iscsi_tcp_recv_skb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:923:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:929:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:929:12: branch_false: following ‘false’ branch (when ‘offloaded == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:934:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:940:20: branch_false: following ‘false’ branch (when ‘avail != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:946:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:946:17: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:948:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:948:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:948:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:950:22: call_function: calling ‘iscsi_tcp_segment_recv’ from ‘iscsi_tcp_recv_skb’
# 93| segment->sg = sg;
# 94| segment->sg_offset = offset;
# 95|-> segment->size = min(sg->length - offset,
# 96| segment->total_size - segment->total_copied);
# 97| segment->data = NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:360:1: enter_function: entry to ‘iscsi_segment_seek_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:368:9: call_function: calling ‘__iscsi_segment_init’ from ‘iscsi_segment_seek_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:368:9: return_function: returning to ‘iscsi_segment_seek_sg’ from ‘__iscsi_segment_init’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:369:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:374:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:369:9: call_function: inlined call to ‘sg_next’ from ‘iscsi_segment_seek_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:369:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: danger: dereference of NULL ‘sg’
# 368| __iscsi_segment_init(segment, size, done, crcp);
# 369| for_each_sg(sg_list, sg, sg_count, i) {
# 370|-> if (offset < sg->length) {
# 371| iscsi_tcp_segment_init_sg(segment, sg, offset);
# 372| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:155:21: enter_function: entry to ‘sas_ata_qc_issue’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:172:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:175:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:176:12: branch_false: following ‘false’ branch (when ‘task’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:178:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:188:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:188:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:193:19: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: call_function: inlined call to ‘sg_next’ from ‘sas_ata_qc_issue’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: danger: dereference of NULL ‘sg’
# 195| } else {
# 196| for_each_sg(qc->sg, sg, qc->n_elem, si)
# 197|-> xfer += sg_dma_len(sg);
# 198|
# 199| task->total_xfer_len = xfer;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:379:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ddev’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:866:6: enter_function: entry to ‘sas_ata_eh’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:875:17: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:886:22: call_function: inlined call to ‘list_empty’ from ‘sas_ata_eh’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:886:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:887:42: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:889:25: call_function: calling ‘sas_ata_printk’ from ‘sas_ata_eh’
# 377| {
# 378| struct ata_port *ap = ddev->sata_dev.ap;
# 379|-> struct device *dev = &ddev->rphy->dev;
# 380| struct va_format vaf;
# 381| va_list args;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:184:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:180:12: enter_function: entry to ‘sas_get_linkerrors’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:183:43: call_function: calling ‘dev_to_shost’ from ‘sas_get_linkerrors’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:183:43: return_function: return of NULL to ‘sas_get_linkerrors’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:184:39: danger: dereference of NULL ‘shost’
# 182| if (scsi_is_sas_phy_local(phy)) {
# 183| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 184|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost);
# 185| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number];
# 186| struct sas_internal *i =
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:233:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:222:12: enter_function: entry to ‘transport_sas_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:231:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:232:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:232:43: call_function: calling ‘dev_to_shost’ from ‘transport_sas_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:232:43: return_function: return of NULL to ‘transport_sas_phy_reset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:233:39: danger: dereference of NULL ‘shost’
# 231| if (scsi_is_sas_phy_local(phy)) {
# 232| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 233|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost);
# 234| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number];
# 235| struct sas_internal *i =
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:267:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:255:5: enter_function: entry to ‘sas_phy_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:265:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:266:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:266:43: call_function: calling ‘dev_to_shost’ from ‘sas_phy_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:266:43: return_function: return of NULL to ‘sas_phy_enable’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:267:39: danger: dereference of NULL ‘shost’
# 265| if (scsi_is_sas_phy_local(phy)) {
# 266| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 267|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost);
# 268| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number];
# 269| struct sas_internal *i =
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:304:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:289:5: enter_function: entry to ‘sas_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:294:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:297:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:302:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:303:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:303:43: call_function: calling ‘dev_to_shost’ from ‘sas_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:303:43: return_function: return of NULL to ‘sas_phy_reset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:304:39: danger: dereference of NULL ‘shost’
# 302| if (scsi_is_sas_phy_local(phy)) {
# 303| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 304|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost);
# 305| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number];
# 306| struct sas_internal *i =
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:340:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:319:12: enter_function: entry to ‘sas_set_phy_speed’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:338:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:339:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:339:43: call_function: calling ‘dev_to_shost’ from ‘sas_set_phy_speed’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:339:43: return_function: return of NULL to ‘sas_set_phy_speed’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:340:39: danger: dereference of NULL ‘shost’
# 338| if (scsi_is_sas_phy_local(phy)) {
# 339| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 340|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost);
# 341| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number];
# 342| struct sas_internal *i =
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:525:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:522:12: enter_function: entry to ‘queue_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:524:35: call_function: calling ‘dev_to_shost’ from ‘queue_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:524:35: return_function: return of NULL to ‘queue_phy_reset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:525:31: danger: dereference of NULL ‘shost’
# 523| {
# 524| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 525|-> struct sas_ha_struct *ha = SHOST_TO_SAS_HA(shost);
# 526| struct sas_phy_data *d = phy->hostdata;
# 527| int rc;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:554:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:551:12: enter_function: entry to ‘queue_phy_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:553:35: call_function: calling ‘dev_to_shost’ from ‘queue_phy_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:553:35: return_function: return of NULL to ‘queue_phy_enable’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:554:31: danger: dereference of NULL ‘shost’
# 552| {
# 553| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 554|-> struct sas_ha_struct *ha = SHOST_TO_SAS_HA(shost);
# 555| struct sas_phy_data *d = phy->hostdata;
# 556| int rc;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:767:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:764:23: enter_function: entry to ‘sas_find_dev_by_rphy’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:766:35: call_function: calling ‘dev_to_shost’ from ‘sas_find_dev_by_rphy’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:766:35: return_function: return of NULL to ‘sas_find_dev_by_rphy’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:767:31: danger: dereference of NULL ‘shost’
# 765| {
# 766| struct Scsi_Host *shost = dev_to_shost(rphy->dev.parent);
# 767|-> struct sas_ha_struct *ha = SHOST_TO_SAS_HA(shost);
# 768| struct domain_device *found_dev = NULL;
# 769| int i;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1339:1: enter_function: entry to ‘megaraid_mbox_mksgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1352:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1355:12: branch_false: following ‘false’ branch (when ‘sgcnt != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1358:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1360:9: branch_true: following ‘true’ branch (when ‘i < sgcnt’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1360:9: call_function: inlined call to ‘sg_next’ from ‘megaraid_mbox_mksgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1360:9: branch_true: following ‘true’ branch (when ‘i < sgcnt’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:43: danger: dereference of NULL ‘sgl’
# 1359|
# 1360| scsi_for_each_sg(scp, sgl, sgcnt, i) {
# 1361|-> ccb->sgl64[i].address = sg_dma_address(sgl);
# 1362| ccb->sgl64[i].length = sg_dma_len(sgl);
# 1363| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:209:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2025:22: enter_function: entry to ‘mvumi_build_frame’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2055:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘mvumi_build_frame’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2057:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2059:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2058:21: call_function: calling ‘mvumi_make_sgl’ from ‘mvumi_build_frame’
# 207| }
# 208| scsi_for_each_sg(scmd, sg, *sg_count, i) {
# 209|-> busaddr = sg_dma_address(sg);
# 210| m_sg->baseaddr_l = cpu_to_le32(lower_32_bits(busaddr));
# 211| m_sg->baseaddr_h = cpu_to_le32(upper_32_bits(busaddr));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1419:28: enter_function: entry to ‘myrb_ldev_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1434:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1442:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1553:9: call_function: calling ‘myrb_reset_cmd’ from ‘myrb_ldev_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1553:9: return_function: returning to ‘myrb_ldev_queuecommand’ from ‘myrb_reset_cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1555:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1557:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1558:12: branch_false: following ‘false’ branch (when ‘nsge != 1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1571:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1575:20: branch_false: following ‘false’ branch (when ‘hw_sgl’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1578:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1592:17: branch_true: following ‘true’ branch (when ‘i < nsge’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1592:17: call_function: inlined call to ‘sg_next’ from ‘myrb_ldev_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1592:17: branch_true: following ‘true’ branch (when ‘i < nsge’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: danger: dereference of NULL ‘sgl’
# 1591|
# 1592| scsi_for_each_sg(scmd, sgl, nsge, i) {
# 1593|-> hw_sgl->sge_addr = (u32)sg_dma_address(sgl);
# 1594| hw_sgl->sge_count = (u32)sg_dma_len(sgl);
# 1595| hw_sgl++;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sgl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1584:28: enter_function: entry to ‘myrs_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1598:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1604:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1627:9: call_function: calling ‘myrs_reset_cmd’ from ‘myrs_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1627:9: return_function: returning to ‘myrs_queuecommand’ from ‘myrs_reset_cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1630:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1632:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1666:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘myrs_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1716:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1718:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1719:12: branch_false: following ‘false’ branch (when ‘nsge != 1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1725:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1757:17: branch_true: following ‘true’ branch (when ‘i < nsge’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1757:17: call_function: inlined call to ‘sg_next’ from ‘myrs_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1757:17: branch_true: following ‘true’ branch (when ‘i < nsge’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: danger: dereference of NULL ‘sgl’
# 1762| return 0;
# 1763| }
# 1764|-> hw_sgl->sge_addr = (u64)sg_dma_address(sgl);
# 1765| hw_sgl->sge_count = (u64)sg_dma_len(sgl);
# 1766| hw_sgl++;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3889:1: enter_function: entry to ‘pm8001_chip_make_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nr’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3895:9: call_function: inlined call to ‘sg_next’ from ‘pm8001_chip_make_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nr’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: danger: dereference of NULL ‘sg’
# 3894|
# 3895| for_each_sg(scatter, sg, nr, i) {
# 3896|-> buf_prd->addr = cpu_to_le64(sg_dma_address(sg));
# 3897| buf_prd->im_len.len = cpu_to_le32(sg_dma_len(sg));
# 3898| buf_prd->im_len.e = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pmcraid.c:1103:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pmcraid.c:4878:13: enter_function: entry to ‘pmcraid_complete_ioa_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pmcraid.c:4884:9: call_function: calling ‘pmcraid_ioa_reset’ from ‘pmcraid_complete_ioa_reset’
# 1101| static void pmcraid_send_hcam_cmd(struct pmcraid_cmd *cmd)
# 1102| {
# 1103|-> if (cmd->ioa_cb->ioarcb.cdb[1] == PMCRAID_HCAM_CODE_CONFIG_CHANGE)
# 1104| atomic_set(&(cmd->drv_inst->ccn.ignore), 0);
# 1105| else
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:115:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:106:1: enter_function: entry to ‘qedf_sysfs_read_grcdump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:111:34: call_function: calling ‘dev_to_shost’ from ‘qedf_sysfs_read_grcdump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:111:34: return_function: returning to ‘qedf_sysfs_read_grcdump’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:115:13: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:115:13: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 113| struct qedf_ctx *qedf = lport_priv(lport);
# 114|
# 115|-> if (test_bit(QEDF_GRCDUMP_CAPTURE, &qedf->flags)) {
# 116| ret = memory_read_from_buffer(buf, count, &off,
# 117| qedf->grcdump, qedf->grcdump_size);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:152:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:126:1: enter_function: entry to ‘qedf_sysfs_write_grcdump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:135:12: branch_false: following ‘false’ branch (when ‘off == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:139:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:139:17: call_function: calling ‘dev_to_shost’ from ‘qedf_sysfs_write_grcdump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:139:17: return_function: returning to ‘qedf_sysfs_write_grcdump’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:145:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:150:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:152:17: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 150| switch (reading) {
# 151| case 0:
# 152|-> memset(qedf->grcdump, 0, qedf->grcdump_size);
# 153| clear_bit(QEDF_GRCDUMP_CAPTURE, &qedf->flags);
# 154| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:492:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:846:5: enter_function: entry to ‘qedf_post_io_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:879:13: call_function: calling ‘qedf_build_bd_list_from_sg’ from ‘qedf_post_io_req’
# 490|
# 491| scsi_for_each_sg(sc, sg, sg_count, i) {
# 492|-> sg_len = (u32)sg_dma_len(sg);
# 493| addr = (u64)sg_dma_address(sg);
# 494|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:935:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:934:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:935:37: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:935:37: danger: dereference of NULL ‘rport’
# 933| struct qedf_ctx *qedf = lport_priv(lport);
# 934| struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device));
# 935|-> struct fc_rport_libfc_priv *rp = rport->dd_data;
# 936| struct qedf_rport *fcport;
# 937| struct qedf_ioreq *io_req;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:729:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:725:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:729:37: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:729:37: danger: dereference of NULL ‘rport’
# 727| struct qedf_ctx *qedf;
# 728| struct qedf_ioreq *io_req;
# 729|-> struct fc_rport_libfc_priv *rp = rport->dd_data;
# 730| struct fc_rport_priv *rdata;
# 731| struct qedf_rport *fcport = NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:25:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:19:1: enter_function: entry to ‘qla2x00_sysfs_read_fw_dump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:23:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_fw_dump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:23:37: return_function: returning to ‘qla2x00_sysfs_read_fw_dump’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:25:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 23| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 24| struct device, kobj)));
# 25|-> struct qla_hw_data *ha = vha->hw;
# 26| int rval = 0;
# 27|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:66:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:60:1: enter_function: entry to ‘qla2x00_sysfs_write_fw_dump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:64:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_fw_dump’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:64:37: return_function: returning to ‘qla2x00_sysfs_write_fw_dump’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:66:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 64| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 65| struct device, kobj)));
# 66|-> struct qla_hw_data *ha = vha->hw;
# 67| int reading;
# 68|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:188:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:182:1: enter_function: entry to ‘qla2x00_sysfs_read_nvram’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:186:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_nvram’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:186:37: return_function: returning to ‘qla2x00_sysfs_read_nvram’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:188:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 186| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 187| struct device, kobj)));
# 188|-> struct qla_hw_data *ha = vha->hw;
# 189| uint32_t faddr;
# 190| struct active_regions active_regions = { };
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:228:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:222:1: enter_function: entry to ‘qla2x00_sysfs_write_nvram’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:226:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_nvram’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:226:37: return_function: returning to ‘qla2x00_sysfs_write_nvram’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:228:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 226| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 227| struct device, kobj)));
# 228|-> struct qla_hw_data *ha = vha->hw;
# 229| uint16_t cnt;
# 230|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:302:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:296:1: enter_function: entry to ‘qla2x00_sysfs_read_optrom’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:300:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_optrom’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:300:37: return_function: returning to ‘qla2x00_sysfs_read_optrom’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:302:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 300| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 301| struct device, kobj)));
# 302|-> struct qla_hw_data *ha = vha->hw;
# 303| ssize_t rval = 0;
# 304|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:326:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:320:1: enter_function: entry to ‘qla2x00_sysfs_write_optrom’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:324:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_optrom’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:324:37: return_function: returning to ‘qla2x00_sysfs_write_optrom’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:326:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 324| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 325| struct device, kobj)));
# 326|-> struct qla_hw_data *ha = vha->hw;
# 327|
# 328| mutex_lock(&ha->optrom_mutex);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:364:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:358:1: enter_function: entry to ‘qla2x00_sysfs_write_optrom_ctl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:362:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_optrom_ctl’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:362:37: return_function: returning to ‘qla2x00_sysfs_write_optrom_ctl’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:364:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 362| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 363| struct device, kobj)));
# 364|-> struct qla_hw_data *ha = vha->hw;
# 365| uint32_t start = 0;
# 366| uint32_t size = ha->optrom_size;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:548:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:542:1: enter_function: entry to ‘qla2x00_sysfs_read_vpd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:546:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_vpd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:546:37: return_function: returning to ‘qla2x00_sysfs_read_vpd’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:548:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 546| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 547| struct device, kobj)));
# 548|-> struct qla_hw_data *ha = vha->hw;
# 549| uint32_t faddr;
# 550| struct active_regions active_regions = { };
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:595:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:589:1: enter_function: entry to ‘qla2x00_sysfs_write_vpd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:593:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_vpd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:593:37: return_function: returning to ‘qla2x00_sysfs_write_vpd’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:595:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 593| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 594| struct device, kobj)));
# 595|-> struct qla_hw_data *ha = vha->hw;
# 596| uint8_t *tmp_data;
# 597|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:667:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:656:1: enter_function: entry to ‘qla2x00_sysfs_read_sfp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:660:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_sfp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:660:37: return_function: returning to ‘qla2x00_sysfs_read_sfp’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:664:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:664:40: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:664:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:667:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:667:9: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 665| return 0;
# 666|
# 667|-> mutex_lock(&vha->hw->optrom_mutex);
# 668| if (qla2x00_chip_is_down(vha)) {
# 669| mutex_unlock(&vha->hw->optrom_mutex);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:698:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:692:1: enter_function: entry to ‘qla2x00_sysfs_write_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:696:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:696:37: return_function: returning to ‘qla2x00_sysfs_write_reset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:698:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 696| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 697| struct device, kobj)));
# 698|-> struct qla_hw_data *ha = vha->hw;
# 699| struct scsi_qla_host *base_vha = pci_get_drvdata(ha->pdev);
# 700| int type;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:848:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:836:1: enter_function: entry to ‘qla2x00_issue_logo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:840:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_issue_logo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:840:37: return_function: returning to ‘qla2x00_issue_logo’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:845:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:848:13: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:848:13: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 846| return 0;
# 847|
# 848|-> if (unlikely(pci_channel_offline(vha->hw->pdev)))
# 849| return 0;
# 850|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:885:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:879:1: enter_function: entry to ‘qla2x00_sysfs_read_xgmac_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:883:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_xgmac_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:883:37: return_function: returning to ‘qla2x00_sysfs_read_xgmac_stats’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:885:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 883| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 884| struct device, kobj)));
# 885|-> struct qla_hw_data *ha = vha->hw;
# 886| int rval;
# 887| uint16_t actual_size;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:948:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:942:1: enter_function: entry to ‘qla2x00_sysfs_read_dcbx_tlv’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:946:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_dcbx_tlv’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:946:37: return_function: returning to ‘qla2x00_sysfs_read_dcbx_tlv’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:948:29: danger: dereference of NULL ‘dev_to_shost(kobj)’
# 946| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj,
# 947| struct device, kobj)));
# 948|-> struct qla_hw_data *ha = vha->hw;
# 949| int rval;
# 950|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1803:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1796:1: enter_function: entry to ‘qla2x00_port_speed_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1799:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_port_speed_store’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1799:37: return_function: returning to ‘qla2x00_port_speed_store’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1803:29: danger: dereference of NULL ‘dev_to_shost(dev)’
# 1801| int oldspeed, rval;
# 1802| int mode = QLA_SET_DATA_RATE_LR;
# 1803|-> struct qla_hw_data *ha = vha->hw;
# 1804|
# 1805| if (!IS_QLA27XX(ha) && !IS_QLA28XX(ha)) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1878:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1874:1: enter_function: entry to ‘qla2x00_port_speed_show’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1877:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_port_speed_show’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1877:37: return_function: returning to ‘qla2x00_port_speed_show’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1878:29: danger: dereference of NULL ‘dev_to_shost(dev)’
# 1876| {
# 1877| struct scsi_qla_host *vha = shost_priv(dev_to_shost(dev));
# 1878|-> struct qla_hw_data *ha = vha->hw;
# 1879| ssize_t rval;
# 1880| u16 i;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2725:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2701:1: enter_function: entry to ‘qla2x00_dev_loss_tmo_callbk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2703:34: call_function: calling ‘dev_to_shost’ from ‘qla2x00_dev_loss_tmo_callbk’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2703:34: return_function: return of NULL to ‘qla2x00_dev_loss_tmo_callbk’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2707:12: branch_false: following ‘false’ branch (when ‘fcport’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2710:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2725:9: danger: dereference of NULL ‘host’
# 2723| * all local references.
# 2724| */
# 2725|-> spin_lock_irqsave(host->host_lock, flags);
# 2726| /* Confirm port has not reappeared before clearing pointers. */
# 2727| if (rport->port_state != FC_PORTSTATE_ONLINE) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:153:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2929:24: call_function: calling ‘qla24xx_proc_fcp_prio_cfg_cmd’ from ‘qla2x00_process_vendor_specific’
# 151| struct fc_bsg_reply *bsg_reply = bsg_job->reply;
# 152| scsi_qla_host_t *vha = shost_priv(host);
# 153|-> struct qla_hw_data *ha = vha->hw;
# 154| int ret = 0;
# 155| uint32_t len;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:299:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3016:1: enter_function: entry to ‘qla24xx_bsg_request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3071:23: call_function: calling ‘qla2x00_process_els’ from ‘qla24xx_bsg_request’
# 297| host = rport_to_shost(rport);
# 298| vha = shost_priv(host);
# 299|-> ha = vha->hw;
# 300| type = "FC_BSG_RPT_ELS";
# 301| } else {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:304:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3016:1: enter_function: entry to ‘qla24xx_bsg_request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3071:23: call_function: calling ‘qla2x00_process_els’ from ‘qla24xx_bsg_request’
# 302| host = fc_bsg_to_shost(bsg_job);
# 303| vha = shost_priv(host);
# 304|-> ha = vha->hw;
# 305| type = "FC_BSG_HST_ELS_NOLOGIN";
# 306| els_cmd = bsg_request->rqst_data.h_els.command_code;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:473:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3016:1: enter_function: entry to ‘qla24xx_bsg_request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3074:23: call_function: calling ‘qla2x00_process_ct’ from ‘qla24xx_bsg_request’
# 471| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 472| scsi_qla_host_t *vha = shost_priv(host);
# 473|-> struct qla_hw_data *ha = vha->hw;
# 474| int rval = (DID_ERROR << 16);
# 475| int req_sg_cnt, rsp_sg_cnt;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:741:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2914:24: call_function: calling ‘qla2x00_process_loopback’ from ‘qla2x00_process_vendor_specific’
# 739| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 740| scsi_qla_host_t *vha = shost_priv(host);
# 741|-> struct qla_hw_data *ha = vha->hw;
# 742| int rval;
# 743| uint8_t command_sent;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:984:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2917:24: call_function: calling ‘qla84xx_reset’ from ‘qla2x00_process_vendor_specific’
# 982| struct fc_bsg_reply *bsg_reply = bsg_job->reply;
# 983| scsi_qla_host_t *vha = shost_priv(host);
# 984|-> struct qla_hw_data *ha = vha->hw;
# 985| int rval = 0;
# 986| uint32_t flag;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1020:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2920:24: call_function: calling ‘qla84xx_updatefw’ from ‘qla2x00_process_vendor_specific’
# 1018| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1019| scsi_qla_host_t *vha = shost_priv(host);
# 1020|-> struct qla_hw_data *ha = vha->hw;
# 1021| struct verify_chip_entry_84xx *mn = NULL;
# 1022| dma_addr_t mn_dma, fw_dma;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1130:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2923:24: call_function: calling ‘qla84xx_mgmt_cmd’ from ‘qla2x00_process_vendor_specific’
# 1128| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1129| scsi_qla_host_t *vha = shost_priv(host);
# 1130|-> struct qla_hw_data *ha = vha->hw;
# 1131| struct access_chip_84xx *mn = NULL;
# 1132| dma_addr_t mn_dma, mgmt_dma;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1333:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2926:24: call_function: calling ‘qla24xx_iidma’ from ‘qla2x00_process_vendor_specific’
# 1331| uint8_t *rsp_ptr = NULL;
# 1332|
# 1333|-> if (!IS_IIDMA_CAPABLE(vha->hw)) {
# 1334| ql_log(ql_log_info, vha, 0x7046, "iiDMA not supported.\n");
# 1335| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1484:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2932:24: call_function: calling ‘qla2x00_read_optrom’ from ‘qla2x00_process_vendor_specific’
# 1482| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1483| scsi_qla_host_t *vha = shost_priv(host);
# 1484|-> struct qla_hw_data *ha = vha->hw;
# 1485| int rval = 0;
# 1486|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1521:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2935:24: call_function: calling ‘qla2x00_update_optrom’ from ‘qla2x00_process_vendor_specific’
# 1519| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1520| scsi_qla_host_t *vha = shost_priv(host);
# 1521|-> struct qla_hw_data *ha = vha->hw;
# 1522| int rval = 0;
# 1523|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1563:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2938:24: call_function: calling ‘qla2x00_update_fru_versions’ from ‘qla2x00_process_vendor_specific’
# 1561| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1562| scsi_qla_host_t *vha = shost_priv(host);
# 1563|-> struct qla_hw_data *ha = vha->hw;
# 1564| int rval = 0;
# 1565| uint8_t bsg[DMA_POOL_SIZE];
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1616:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2941:24: call_function: calling ‘qla2x00_read_fru_status’ from ‘qla2x00_process_vendor_specific’
# 1614| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1615| scsi_qla_host_t *vha = shost_priv(host);
# 1616|-> struct qla_hw_data *ha = vha->hw;
# 1617| int rval = 0;
# 1618| uint8_t bsg[DMA_POOL_SIZE];
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1667:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2944:24: call_function: calling ‘qla2x00_write_fru_status’ from ‘qla2x00_process_vendor_specific’
# 1665| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1666| scsi_qla_host_t *vha = shost_priv(host);
# 1667|-> struct qla_hw_data *ha = vha->hw;
# 1668| int rval = 0;
# 1669| uint8_t bsg[DMA_POOL_SIZE];
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1714:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2947:24: call_function: calling ‘qla2x00_write_i2c’ from ‘qla2x00_process_vendor_specific’
# 1712| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1713| scsi_qla_host_t *vha = shost_priv(host);
# 1714|-> struct qla_hw_data *ha = vha->hw;
# 1715| int rval = 0;
# 1716| uint8_t bsg[DMA_POOL_SIZE];
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1760:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2950:24: call_function: calling ‘qla2x00_read_i2c’ from ‘qla2x00_process_vendor_specific’
# 1758| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1759| scsi_qla_host_t *vha = shost_priv(host);
# 1760|-> struct qla_hw_data *ha = vha->hw;
# 1761| int rval = 0;
# 1762| uint8_t bsg[DMA_POOL_SIZE];
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1810:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2953:24: call_function: calling ‘qla24xx_process_bidir_cmd’ from ‘qla2x00_process_vendor_specific’
# 1808| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1809| scsi_qla_host_t *vha = shost_priv(host);
# 1810|-> struct qla_hw_data *ha = vha->hw;
# 1811| uint32_t rval = EXT_STATUS_OK;
# 1812| uint16_t req_sg_cnt = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1988:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1983:1: enter_function: entry to ‘qlafx00_mgmt_cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1986:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qlafx00_mgmt_cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1986:34: return_function: return of NULL to ‘qlafx00_mgmt_cmd’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1988:29: danger: dereference of NULL ‘host’
# 1986| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 1987| scsi_qla_host_t *vha = shost_priv(host);
# 1988|-> struct qla_hw_data *ha = vha->hw;
# 1989| int rval = (DID_ERROR << 16);
# 1990| struct qla_mt_iocb_rqst_fx00 *piocb_rqst;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2195:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2190:1: enter_function: entry to ‘qla27xx_get_flash_upd_cap’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2193:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla27xx_get_flash_upd_cap’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2193:34: return_function: return of NULL to ‘qla27xx_get_flash_upd_cap’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2195:29: danger: dereference of NULL ‘host’
# 2193| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 2194| scsi_qla_host_t *vha = shost_priv(host);
# 2195|-> struct qla_hw_data *ha = vha->hw;
# 2196| struct qla_flash_update_caps cap;
# 2197|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2227:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2222:1: enter_function: entry to ‘qla27xx_set_flash_upd_cap’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2225:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla27xx_set_flash_upd_cap’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2225:34: return_function: return of NULL to ‘qla27xx_set_flash_upd_cap’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2227:29: danger: dereference of NULL ‘host’
# 2225| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 2226| scsi_qla_host_t *vha = shost_priv(host);
# 2227|-> struct qla_hw_data *ha = vha->hw;
# 2228| uint64_t online_fw_attr = 0;
# 2229| struct qla_flash_update_caps cap;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2273:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2268:1: enter_function: entry to ‘qla27xx_get_bbcr_data’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2271:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla27xx_get_bbcr_data’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2271:34: return_function: return of NULL to ‘qla27xx_get_bbcr_data’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2273:29: danger: dereference of NULL ‘host’
# 2271| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 2272| scsi_qla_host_t *vha = shost_priv(host);
# 2273|-> struct qla_hw_data *ha = vha->hw;
# 2274| struct qla_bbcr_data bbcr;
# 2275| uint16_t loop_id, topo, sw_cap;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2333:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2327:1: enter_function: entry to ‘qla2x00_get_priv_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2331:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_get_priv_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2331:34: return_function: return of NULL to ‘qla2x00_get_priv_stats’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2333:29: danger: dereference of NULL ‘host’
# 2331| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
# 2332| scsi_qla_host_t *vha = shost_priv(host);
# 2333|-> struct qla_hw_data *ha = vha->hw;
# 2334| struct scsi_qla_host *base_vha = pci_get_drvdata(ha->pdev);
# 2335| struct link_statistics *stats = NULL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2394:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2386:1: enter_function: entry to ‘qla2x00_do_dport_diagnostics’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2389:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_do_dport_diagnostics’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2389:34: return_function: return of NULL to ‘qla2x00_do_dport_diagnostics’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2394:14: danger: dereference of NULL ‘host’
# 2392| struct qla_dport_diag *dd;
# 2393|
# 2394|-> if (!IS_QLA83XX(vha->hw) && !IS_QLA27XX(vha->hw) &&
# 2395| !IS_QLA28XX(vha->hw))
# 2396| return -EPERM;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2441:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2430:1: enter_function: entry to ‘qla2x00_do_dport_diagnostics_v2’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2433:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_do_dport_diagnostics_v2’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2433:34: return_function: return of NULL to ‘qla2x00_do_dport_diagnostics_v2’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2441:14: danger: dereference of NULL ‘host’
# 2439| uint16_t options;
# 2440|
# 2441|-> if (!IS_DPORT_CAPABLE(vha->hw))
# 2442| return -EPERM;
# 2443|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2517:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2513:1: enter_function: entry to ‘qla2x00_get_flash_image_status’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2515:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_get_flash_image_status’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2515:32: return_function: returning to ‘qla2x00_get_flash_image_status’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2517:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 2515| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
# 2516| struct fc_bsg_reply *bsg_reply = bsg_job->reply;
# 2517|-> struct qla_hw_data *ha = vha->hw;
# 2518| struct qla_active_regions regions = { };
# 2519| struct active_regions active_regions = { };
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2614:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2580:1: enter_function: entry to ‘qla2x00_manage_host_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: return_function: returning to ‘qla2x00_manage_host_stats’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2589:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2594:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2596:12: branch_false: following ‘false’ branch (when ‘req_data_len == 8’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2601:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2602:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2609:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2614:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 2612| switch (req_data->action) {
# 2613| case QLA_STOP:
# 2614|-> ret = qla2xxx_stop_stats(vha->host, req_data->stat_type);
# 2615| break;
# 2616| case QLA_START:
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2617:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2580:1: enter_function: entry to ‘qla2x00_manage_host_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: return_function: returning to ‘qla2x00_manage_host_stats’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2589:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2594:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2596:12: branch_false: following ‘false’ branch (when ‘req_data_len == 8’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2601:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2602:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2609:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2617:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 2615| break;
# 2616| case QLA_START:
# 2617|-> ret = qla2xxx_start_stats(vha->host, req_data->stat_type);
# 2618| break;
# 2619| case QLA_CLEAR:
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2620:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2580:1: enter_function: entry to ‘qla2x00_manage_host_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_stats’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: return_function: returning to ‘qla2x00_manage_host_stats’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2589:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2594:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2596:12: branch_false: following ‘false’ branch (when ‘req_data_len == 8’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2601:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2602:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2609:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2620:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 2618| break;
# 2619| case QLA_CLEAR:
# 2620|-> ret = qla2xxx_reset_stats(vha->host, req_data->stat_type);
# 2621| break;
# 2622| default:
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2874:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2846:1: enter_function: entry to ‘qla2x00_manage_host_port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: return_function: returning to ‘qla2x00_manage_host_port’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2857:12: branch_false: following ‘false’ branch (when ‘req_data_len == 4’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2862:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2863:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2870:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2874:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 2872| switch (req_data->action) {
# 2873| case QLA_ENABLE:
# 2874|-> ret = qla2xxx_enable_port(vha->host);
# 2875| break;
# 2876| case QLA_DISABLE:
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2877:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2846:1: enter_function: entry to ‘qla2x00_manage_host_port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: return_function: returning to ‘qla2x00_manage_host_port’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2857:12: branch_false: following ‘false’ branch (when ‘req_data_len == 4’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2862:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2863:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2870:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2877:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 2875| break;
# 2876| case QLA_DISABLE:
# 2877|-> ret = qla2xxx_disable_port(vha->host);
# 2878| break;
# 2879| default:
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3098:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3093:13: enter_function: entry to ‘qla_bsg_found’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3097:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla_bsg_found’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3097:32: return_function: returning to ‘qla_bsg_found’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3098:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 3096| struct fc_bsg_reply *bsg_reply = bsg_job->reply;
# 3097| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
# 3098|-> struct qla_hw_data *ha = vha->hw;
# 3099| srb_t *sp = NULL;
# 3100| int cnt;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3209:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3205:1: enter_function: entry to ‘qla24xx_bsg_timeout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3208:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla24xx_bsg_timeout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3208:32: return_function: returning to ‘qla24xx_bsg_timeout’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3209:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 3207| struct fc_bsg_request *bsg_request = bsg_job->request;
# 3208| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
# 3209|-> struct qla_hw_data *ha = vha->hw;
# 3210| int i;
# 3211| struct qla_qpair *qpair;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3343:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3339:12: enter_function: entry to ‘qla28xx_validate_flash_image’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3341:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla28xx_validate_flash_image’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3341:32: return_function: returning to ‘qla28xx_validate_flash_image’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3343:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’
# 3341| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
# 3342| struct fc_bsg_reply *bsg_reply = bsg_job->reply;
# 3343|-> struct qla_hw_data *ha = vha->hw;
# 3344| uint16_t state = 0;
# 3345| int rval = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_dsd.h:27:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur_seg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3369:1: enter_function: entry to ‘qla82xx_start_scsi’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3416:12: branch_false: following ‘false’ branch (when ‘handle != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3420:13: call_function: inlined call to ‘scsi_sg_count’ from ‘qla82xx_start_scsi’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3420:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3421:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3423:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3428:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3430:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3436:34: call_function: inlined call to ‘qla24xx_calc_dsd_lists’ from ‘qla82xx_start_scsi’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3437:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3445:39: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3489:17: call_function: inlined call to ‘fortify_memset_chk’ from ‘qla82xx_start_scsi’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3489:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3492:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3499:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3502:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3516:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3525:17: call_function: inlined call to ‘fortify_memset_chk’ from ‘qla82xx_start_scsi’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3525:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3536:21: call_function: calling ‘qla24xx_build_scsi_type_6_iocbs’ from ‘qla82xx_start_scsi’
# 25| static inline void append_dsd64(struct dsd64 **dsd, struct scatterlist *sg)
# 26| {
# 27|-> put_unaligned_le64(sg_dma_address(sg), &(*dsd)->address);
# 28| put_unaligned_le32(sg_dma_len(sg), &(*dsd)->length);
# 29| (*dsd)++;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_dsd.h:27:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3287:1: enter_function: entry to ‘qla24xx_ct_iocb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3322:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_false: following ‘false’ branch (when ‘avail_dsds != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3336:17: call_function: inlined call to ‘append_dsd64’ from ‘qla24xx_ct_iocb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3322:9: call_function: inlined call to ‘sg_next’ from ‘qla24xx_ct_iocb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3322:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_false: following ‘false’ branch (when ‘avail_dsds != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3336:17: call_function: inlined call to ‘append_dsd64’ from ‘qla24xx_ct_iocb’
# 25| static inline void append_dsd64(struct dsd64 **dsd, struct scatterlist *sg)
# 26| {
# 27|-> put_unaligned_le64(sg_dma_address(sg), &(*dsd)->address);
# 28| put_unaligned_le32(sg_dma_len(sg), &(*dsd)->length);
# 29| (*dsd)++;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:806:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2063:1: enter_function: entry to ‘qla2xxx_dif_start_scsi_mq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2086:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2091:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2098:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2105:9: call_function: inlined call to ‘spinlock_check’ from ‘qla2xxx_dif_start_scsi_mq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2125:12: branch_false: following ‘false’ branch (when ‘handle != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2130:13: call_function: inlined call to ‘scsi_sg_count’ from ‘qla2xxx_dif_start_scsi_mq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2130:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2131:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2133:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2136:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: call_function: calling ‘qla24xx_get_one_block_sg’ from ‘qla2xxx_dif_start_scsi_mq’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: return_function: returning to ‘qla2xxx_dif_start_scsi_mq’ from ‘qla24xx_get_one_block_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2151:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: call_function: calling ‘qla24xx_get_one_block_sg’ from ‘qla2xxx_dif_start_scsi_mq’
# 804| cumulative_partial = sgx->tot_partial;
# 805|
# 806|-> sg_dma_addr = sg_dma_address(sg);
# 807| sg_len = sg_dma_len(sg);
# 808|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:3106:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4378:1: enter_function: entry to ‘qla24xx_msix_default’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4392:12: branch_false: following ‘false’ branch (when ‘dev_id’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4397:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4405:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4407:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4407:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4423:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4423:27: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4426:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4444:25: call_function: calling ‘qla24xx_process_response_queue’ from ‘qla24xx_msix_default’
# 3104| scsi_for_each_prot_sg(cmd, sg,
# 3105| scsi_prot_sg_count(cmd), i) {
# 3106|-> num_ent = sg_dma_len(sg) / 8;
# 3107| if (k + num_ent < blocks_done) {
# 3108| k += num_ent;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:391:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:387:12: enter_function: entry to ‘fc_host_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:390:35: call_function: calling ‘dev_to_shost’ from ‘fc_host_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:390:35: return_function: return of NULL to ‘fc_host_setup’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:391:31: danger: dereference of NULL ‘shost’
# 389| {
# 390| struct Scsi_Host *shost = dev_to_shost(dev);
# 391|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost);
# 392|
# 393| /*
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:462:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:458:12: enter_function: entry to ‘fc_host_remove’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:461:35: call_function: calling ‘dev_to_shost’ from ‘fc_host_remove’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:461:35: return_function: return of NULL to ‘fc_host_remove’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:462:31: danger: dereference of NULL ‘shost’
# 460| {
# 461| struct Scsi_Host *shost = dev_to_shost(dev);
# 462|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost);
# 463|
# 464| fc_bsg_remove(fc_host->rqst_q);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1144:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1140:12: enter_function: entry to ‘fc_rport_set_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1143:35: call_function: calling ‘dev_to_shost’ from ‘fc_rport_set_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1143:35: return_function: return of NULL to ‘fc_rport_set_dev_loss_tmo’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1144:33: danger: dereference of NULL ‘shost’
# 1142| {
# 1143| struct Scsi_Host *shost = rport_to_shost(rport);
# 1144|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 1145|
# 1146| if ((rport->port_state == FC_PORTSTATE_BLOCKED) ||
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: enter_function: entry to ‘show_fc_rport_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_rport_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: return_function: return of NULL to ‘show_fc_rport_dev_loss_tmo’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: danger: dereference of NULL ‘shost’
# 1166| }
# 1167|
# 1168|-> fc_rport_show_function(dev_loss_tmo, "%u\n", 20, )
# 1169| static ssize_t
# 1170| store_fc_rport_dev_loss_tmo(struct device *dev, struct device_attribute *attr,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: enter_function: entry to ‘fc_rport_encinfo_status’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: call_function: calling ‘dev_to_shost’ from ‘fc_rport_encinfo_status’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: return_function: return of NULL to ‘fc_rport_encinfo_status’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: danger: dereference of NULL ‘shost’
# 1358| static FC_DEVICE_ATTR(rport, encryption_##name, 0444, fc_rport_encinfo_##name, NULL) \
# 1359|
# 1360|-> fc_rport_encryption(status);
# 1361|
# 1362| static struct attribute *fc_rport_encryption_attrs[] = {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: enter_function: entry to ‘show_fc_starget_node_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_starget_node_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: return_function: return of NULL to ‘show_fc_starget_node_name’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: danger: dereference of NULL ‘shost’
# 1488|
# 1489| /* The FC Transport SCSI Target Attributes: */
# 1490|-> fc_starget_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long);
# 1491| fc_starget_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long);
# 1492| fc_starget_rd_attr(port_id, "0x%06x\n", 20);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: enter_function: entry to ‘show_fc_starget_port_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_starget_port_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: return_function: return of NULL to ‘show_fc_starget_port_name’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: danger: dereference of NULL ‘shost’
# 1489| /* The FC Transport SCSI Target Attributes: */
# 1490| fc_starget_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long);
# 1491|-> fc_starget_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long);
# 1492| fc_starget_rd_attr(port_id, "0x%06x\n", 20);
# 1493|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: enter_function: entry to ‘show_fc_starget_port_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_starget_port_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: return_function: return of NULL to ‘show_fc_starget_port_id’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: danger: dereference of NULL ‘shost’
# 1490| fc_starget_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long);
# 1491| fc_starget_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long);
# 1492|-> fc_starget_rd_attr(port_id, "0x%06x\n", 20);
# 1493|
# 1494|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1920:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1915:1: enter_function: entry to ‘show_fc_host_supported_classes’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1918:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_supported_classes’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1918:35: return_function: return of NULL to ‘show_fc_host_supported_classes’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1920:13: danger: dereference of NULL ‘shost’
# 1918| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 1919|
# 1920|-> if (fc_host_supported_classes(shost) == FC_COS_UNSPECIFIED)
# 1921| return snprintf(buf, 20, "unspecified\n");
# 1922|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1933:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1929:1: enter_function: entry to ‘show_fc_host_supported_fc4s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1932:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_supported_fc4s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1932:35: return_function: return of NULL to ‘show_fc_host_supported_fc4s’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1933:43: danger: dereference of NULL ‘shost’
# 1931| {
# 1932| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 1933|-> return (ssize_t)show_fc_fc4s(buf, fc_host_supported_fc4s(shost));
# 1934| }
# 1935| static FC_DEVICE_ATTR(host, supported_fc4s, S_IRUGO,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1944:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1939:1: enter_function: entry to ‘show_fc_host_supported_speeds’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1942:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_supported_speeds’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1942:35: return_function: return of NULL to ‘show_fc_host_supported_speeds’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1944:13: danger: dereference of NULL ‘shost’
# 1942| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 1943|
# 1944|-> if (fc_host_supported_speeds(shost) == FC_PORTSPEED_UNKNOWN)
# 1945| return snprintf(buf, 20, "unknown\n");
# 1946|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: enter_function: entry to ‘show_fc_host_node_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_node_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: return_function: return of NULL to ‘show_fc_host_node_name’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: danger: dereference of NULL ‘shost’
# 1951|
# 1952|
# 1953|-> fc_private_host_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long);
# 1954| fc_private_host_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long);
# 1955| fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: enter_function: entry to ‘show_fc_host_port_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: return_function: return of NULL to ‘show_fc_host_port_name’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: danger: dereference of NULL ‘shost’
# 1952|
# 1953| fc_private_host_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long);
# 1954|-> fc_private_host_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long);
# 1955| fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20,
# 1956| unsigned long long);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: enter_function: entry to ‘show_fc_host_permanent_port_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_permanent_port_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: return_function: return of NULL to ‘show_fc_host_permanent_port_name’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: danger: dereference of NULL ‘shost’
# 1953| fc_private_host_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long);
# 1954| fc_private_host_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long);
# 1955|-> fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20,
# 1956| unsigned long long);
# 1957| fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: enter_function: entry to ‘show_fc_host_maxframe_size’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_maxframe_size’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: return_function: return of NULL to ‘show_fc_host_maxframe_size’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: danger: dereference of NULL ‘shost’
# 1955| fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20,
# 1956| unsigned long long);
# 1957|-> fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20);
# 1958| fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20);
# 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: enter_function: entry to ‘show_fc_host_max_npiv_vports’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_max_npiv_vports’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: return_function: return of NULL to ‘show_fc_host_max_npiv_vports’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: danger: dereference of NULL ‘shost’
# 1956| unsigned long long);
# 1957| fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20);
# 1958|-> fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20);
# 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1));
# 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: enter_function: entry to ‘show_fc_host_serial_number’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_serial_number’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: return_function: return of NULL to ‘show_fc_host_serial_number’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: danger: dereference of NULL ‘shost’
# 1957| fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20);
# 1958| fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20);
# 1959|-> fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1));
# 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1);
# 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: enter_function: entry to ‘show_fc_host_manufacturer’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_manufacturer’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: return_function: return of NULL to ‘show_fc_host_manufacturer’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: danger: dereference of NULL ‘shost’
# 1958| fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20);
# 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1));
# 1960|-> fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1);
# 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: enter_function: entry to ‘show_fc_host_model’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_model’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: return_function: return of NULL to ‘show_fc_host_model’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: danger: dereference of NULL ‘shost’
# 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1));
# 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1);
# 1961|-> fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: enter_function: entry to ‘show_fc_host_model_description’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_model_description’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: return_function: return of NULL to ‘show_fc_host_model_description’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: danger: dereference of NULL ‘shost’
# 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1);
# 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1962|-> fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: enter_function: entry to ‘show_fc_host_hardware_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_hardware_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: return_function: return of NULL to ‘show_fc_host_hardware_version’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: danger: dereference of NULL ‘shost’
# 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1963|-> fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1965| fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: enter_function: entry to ‘show_fc_host_driver_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_driver_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: return_function: return of NULL to ‘show_fc_host_driver_version’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: danger: dereference of NULL ‘shost’
# 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1964|-> fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1965| fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1966| fc_private_host_rd_attr(optionrom_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: enter_function: entry to ‘show_fc_host_firmware_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_firmware_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: return_function: return of NULL to ‘show_fc_host_firmware_version’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: danger: dereference of NULL ‘shost’
# 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1965|-> fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1966| fc_private_host_rd_attr(optionrom_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1967|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: enter_function: entry to ‘show_fc_host_optionrom_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_optionrom_version’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: return_function: return of NULL to ‘show_fc_host_optionrom_version’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: danger: dereference of NULL ‘shost’
# 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1965| fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1966|-> fc_private_host_rd_attr(optionrom_version, "%s\n", FC_VERSION_STRING_SIZE + 1);
# 1967|
# 1968|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1976:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1972:1: enter_function: entry to ‘show_fc_host_active_fc4s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1975:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_active_fc4s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1975:35: return_function: return of NULL to ‘show_fc_host_active_fc4s’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1976:33: danger: dereference of NULL ‘shost’
# 1974| {
# 1975| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 1976|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 1977|
# 1978| if (i->f->get_host_active_fc4s)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1991:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1987:1: enter_function: entry to ‘show_fc_host_speed’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1990:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_speed’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1990:35: return_function: return of NULL to ‘show_fc_host_speed’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1991:33: danger: dereference of NULL ‘shost’
# 1989| {
# 1990| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 1991|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 1992|
# 1993| if (i->f->get_host_speed)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: enter_function: entry to ‘show_fc_host_port_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_id’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: return_function: return of NULL to ‘show_fc_host_port_id’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: danger: dereference of NULL ‘shost’
# 2003|
# 2004|
# 2005|-> fc_host_rd_attr(port_id, "0x%06x\n", 20);
# 2006| fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN);
# 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: enter_function: entry to ‘show_fc_host_port_type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: return_function: return of NULL to ‘show_fc_host_port_type’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: danger: dereference of NULL ‘shost’
# 2004|
# 2005| fc_host_rd_attr(port_id, "0x%06x\n", 20);
# 2006|-> fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN);
# 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN);
# 2008| fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: enter_function: entry to ‘show_fc_host_port_state’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_state’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: return_function: return of NULL to ‘show_fc_host_port_state’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: danger: dereference of NULL ‘shost’
# 2005| fc_host_rd_attr(port_id, "0x%06x\n", 20);
# 2006| fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN);
# 2007|-> fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN);
# 2008| fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long);
# 2009| fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: enter_function: entry to ‘show_fc_host_fabric_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_fabric_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: return_function: return of NULL to ‘show_fc_host_fabric_name’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: danger: dereference of NULL ‘shost’
# 2006| fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN);
# 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN);
# 2008|-> fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long);
# 2009| fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 2010|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: enter_function: entry to ‘show_fc_host_symbolic_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_symbolic_name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: return_function: return of NULL to ‘show_fc_host_symbolic_name’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: danger: dereference of NULL ‘shost’
# 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN);
# 2008| fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long);
# 2009|-> fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 2010|
# 2011| fc_private_host_show_function(system_hostname, "%s\n",
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: enter_function: entry to ‘show_fc_host_system_hostname’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_system_hostname’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: return_function: return of NULL to ‘show_fc_host_system_hostname’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: danger: dereference of NULL ‘shost’
# 2009| fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1);
# 2010|
# 2011|-> fc_private_host_show_function(system_hostname, "%s\n",
# 2012| FC_SYMBOLIC_NAME_SIZE + 1, )
# 2013| fc_host_store_str_function(system_hostname, FC_SYMBOLIC_NAME_SIZE)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: enter_function: entry to ‘store_fc_host_system_hostname’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: call_function: calling ‘dev_to_shost’ from ‘store_fc_host_system_hostname’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: return_function: return of NULL to ‘store_fc_host_system_hostname’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: danger: dereference of NULL ‘shost’
# 2011| fc_private_host_show_function(system_hostname, "%s\n",
# 2012| FC_SYMBOLIC_NAME_SIZE + 1, )
# 2013|-> fc_host_store_str_function(system_hostname, FC_SYMBOLIC_NAME_SIZE)
# 2014| static FC_DEVICE_ATTR(host, system_hostname, S_IRUGO | S_IWUSR,
# 2015| show_fc_host_system_hostname, store_fc_host_system_hostname);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2027:44: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2021:1: enter_function: entry to ‘show_fc_private_host_tgtid_bind_type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2024:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_private_host_tgtid_bind_type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2024:35: return_function: return of NULL to ‘show_fc_private_host_tgtid_bind_type’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2027:44: danger: dereference of NULL ‘shost’
# 2025| const char *name;
# 2026|
# 2027|-> name = get_fc_tgtid_bind_type_name(fc_host_tgtid_bind_type(shost));
# 2028| if (!name)
# 2029| return -EINVAL;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2049:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2037:1: enter_function: entry to ‘store_fc_private_host_tgtid_bind_type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2040:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_private_host_tgtid_bind_type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2040:35: return_function: return of NULL to ‘store_fc_private_host_tgtid_bind_type’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2045:13: call_function: calling ‘get_fc_tgtid_bind_type_match’ from ‘store_fc_private_host_tgtid_bind_type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2045:13: return_function: returning to ‘store_fc_private_host_tgtid_bind_type’ from ‘get_fc_tgtid_bind_type_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2045:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2049:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2049:20: danger: dereference of NULL ‘shost’
# 2047|
# 2048| /* if changing bind type, purge all unused consistent bindings */
# 2049|-> if (val != fc_host_tgtid_bind_type(shost)) {
# 2050| spin_lock_irqsave(shost->host_lock, flags);
# 2051| while (!list_empty(&fc_host_rport_bindings(shost))) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2074:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2070:1: enter_function: entry to ‘store_fc_private_host_issue_lip’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2073:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_private_host_issue_lip’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2073:35: return_function: return of NULL to ‘store_fc_private_host_issue_lip’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2074:33: danger: dereference of NULL ‘shost’
# 2072| {
# 2073| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 2074|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 2075| int ret;
# 2076|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2095:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2090:1: enter_function: entry to ‘store_fc_private_host_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2094:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_private_host_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2094:35: return_function: return of NULL to ‘store_fc_private_host_dev_loss_tmo’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2095:31: danger: dereference of NULL ‘shost’
# 2093| {
# 2094| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 2095|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost);
# 2096| struct fc_rport *rport;
# 2097| unsigned long val, flags;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: enter_function: entry to ‘show_fc_host_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_dev_loss_tmo’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: return_function: return of NULL to ‘show_fc_host_dev_loss_tmo’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: danger: dereference of NULL ‘shost’
# 2110| }
# 2111|
# 2112|-> fc_private_host_show_function(dev_loss_tmo, "%d\n", 20, );
# 2113| static FC_DEVICE_ATTR(host, dev_loss_tmo, S_IRUGO | S_IWUSR,
# 2114| show_fc_host_dev_loss_tmo,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: enter_function: entry to ‘show_fc_host_npiv_vports_inuse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_npiv_vports_inuse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: return_function: return of NULL to ‘show_fc_host_npiv_vports_inuse’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: danger: dereference of NULL ‘shost’
# 2115| store_fc_private_host_dev_loss_tmo);
# 2116|
# 2117|-> fc_private_host_rd_attr(npiv_vports_inuse, "%u\n", 20);
# 2118|
# 2119| /*
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2128:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2125:1: enter_function: entry to ‘fc_stat_show’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2127:35: call_function: calling ‘dev_to_shost’ from ‘fc_stat_show’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2127:35: return_function: return of NULL to ‘fc_stat_show’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2128:33: danger: dereference of NULL ‘shost’
# 2126| {
# 2127| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 2128|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 2129| struct fc_host_statistics *stats;
# 2130| ssize_t ret = -ENOENT;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: enter_function: entry to ‘fc_host_fpinstat_dn’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: return_function: return of NULL to ‘fc_host_fpinstat_dn’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: danger: dereference of NULL ‘shost’
# 2200| static FC_DEVICE_ATTR(host, fpin_##name, 0444, fc_host_fpinstat_##name, NULL)
# 2201|
# 2202|-> fc_host_fpin_statistic(dn);
# 2203| fc_host_fpin_statistic(dn_unknown);
# 2204| fc_host_fpin_statistic(dn_timeout);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: enter_function: entry to ‘fc_host_fpinstat_dn_unknown’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_unknown’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_unknown’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: danger: dereference of NULL ‘shost’
# 2201|
# 2202| fc_host_fpin_statistic(dn);
# 2203|-> fc_host_fpin_statistic(dn_unknown);
# 2204| fc_host_fpin_statistic(dn_timeout);
# 2205| fc_host_fpin_statistic(dn_unable_to_route);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: enter_function: entry to ‘fc_host_fpinstat_dn_timeout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_timeout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_timeout’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: danger: dereference of NULL ‘shost’
# 2202| fc_host_fpin_statistic(dn);
# 2203| fc_host_fpin_statistic(dn_unknown);
# 2204|-> fc_host_fpin_statistic(dn_timeout);
# 2205| fc_host_fpin_statistic(dn_unable_to_route);
# 2206| fc_host_fpin_statistic(dn_device_specific);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: enter_function: entry to ‘fc_host_fpinstat_dn_unable_to_route’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_unable_to_route’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_unable_to_route’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: danger: dereference of NULL ‘shost’
# 2203| fc_host_fpin_statistic(dn_unknown);
# 2204| fc_host_fpin_statistic(dn_timeout);
# 2205|-> fc_host_fpin_statistic(dn_unable_to_route);
# 2206| fc_host_fpin_statistic(dn_device_specific);
# 2207| fc_host_fpin_statistic(cn);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: enter_function: entry to ‘fc_host_fpinstat_dn_device_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_device_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_device_specific’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: danger: dereference of NULL ‘shost’
# 2204| fc_host_fpin_statistic(dn_timeout);
# 2205| fc_host_fpin_statistic(dn_unable_to_route);
# 2206|-> fc_host_fpin_statistic(dn_device_specific);
# 2207| fc_host_fpin_statistic(cn);
# 2208| fc_host_fpin_statistic(cn_clear);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: enter_function: entry to ‘fc_host_fpinstat_cn’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: return_function: return of NULL to ‘fc_host_fpinstat_cn’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: danger: dereference of NULL ‘shost’
# 2205| fc_host_fpin_statistic(dn_unable_to_route);
# 2206| fc_host_fpin_statistic(dn_device_specific);
# 2207|-> fc_host_fpin_statistic(cn);
# 2208| fc_host_fpin_statistic(cn_clear);
# 2209| fc_host_fpin_statistic(cn_lost_credit);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: enter_function: entry to ‘fc_host_fpinstat_cn_clear’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_clear’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_clear’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: danger: dereference of NULL ‘shost’
# 2206| fc_host_fpin_statistic(dn_device_specific);
# 2207| fc_host_fpin_statistic(cn);
# 2208|-> fc_host_fpin_statistic(cn_clear);
# 2209| fc_host_fpin_statistic(cn_lost_credit);
# 2210| fc_host_fpin_statistic(cn_credit_stall);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: enter_function: entry to ‘fc_host_fpinstat_cn_lost_credit’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_lost_credit’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_lost_credit’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: danger: dereference of NULL ‘shost’
# 2207| fc_host_fpin_statistic(cn);
# 2208| fc_host_fpin_statistic(cn_clear);
# 2209|-> fc_host_fpin_statistic(cn_lost_credit);
# 2210| fc_host_fpin_statistic(cn_credit_stall);
# 2211| fc_host_fpin_statistic(cn_oversubscription);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: enter_function: entry to ‘fc_host_fpinstat_cn_credit_stall’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_credit_stall’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_credit_stall’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: danger: dereference of NULL ‘shost’
# 2208| fc_host_fpin_statistic(cn_clear);
# 2209| fc_host_fpin_statistic(cn_lost_credit);
# 2210|-> fc_host_fpin_statistic(cn_credit_stall);
# 2211| fc_host_fpin_statistic(cn_oversubscription);
# 2212| fc_host_fpin_statistic(cn_device_specific);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: enter_function: entry to ‘fc_host_fpinstat_cn_oversubscription’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_oversubscription’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_oversubscription’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: danger: dereference of NULL ‘shost’
# 2209| fc_host_fpin_statistic(cn_lost_credit);
# 2210| fc_host_fpin_statistic(cn_credit_stall);
# 2211|-> fc_host_fpin_statistic(cn_oversubscription);
# 2212| fc_host_fpin_statistic(cn_device_specific);
# 2213| fc_host_fpin_statistic(li);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: enter_function: entry to ‘fc_host_fpinstat_cn_device_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_device_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_device_specific’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: danger: dereference of NULL ‘shost’
# 2210| fc_host_fpin_statistic(cn_credit_stall);
# 2211| fc_host_fpin_statistic(cn_oversubscription);
# 2212|-> fc_host_fpin_statistic(cn_device_specific);
# 2213| fc_host_fpin_statistic(li);
# 2214| fc_host_fpin_statistic(li_failure_unknown);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: enter_function: entry to ‘fc_host_fpinstat_li’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: return_function: return of NULL to ‘fc_host_fpinstat_li’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: danger: dereference of NULL ‘shost’
# 2211| fc_host_fpin_statistic(cn_oversubscription);
# 2212| fc_host_fpin_statistic(cn_device_specific);
# 2213|-> fc_host_fpin_statistic(li);
# 2214| fc_host_fpin_statistic(li_failure_unknown);
# 2215| fc_host_fpin_statistic(li_link_failure_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: enter_function: entry to ‘fc_host_fpinstat_li_failure_unknown’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_failure_unknown’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: return_function: return of NULL to ‘fc_host_fpinstat_li_failure_unknown’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: danger: dereference of NULL ‘shost’
# 2212| fc_host_fpin_statistic(cn_device_specific);
# 2213| fc_host_fpin_statistic(li);
# 2214|-> fc_host_fpin_statistic(li_failure_unknown);
# 2215| fc_host_fpin_statistic(li_link_failure_count);
# 2216| fc_host_fpin_statistic(li_loss_of_sync_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: enter_function: entry to ‘fc_host_fpinstat_li_link_failure_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_link_failure_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: return_function: return of NULL to ‘fc_host_fpinstat_li_link_failure_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: danger: dereference of NULL ‘shost’
# 2213| fc_host_fpin_statistic(li);
# 2214| fc_host_fpin_statistic(li_failure_unknown);
# 2215|-> fc_host_fpin_statistic(li_link_failure_count);
# 2216| fc_host_fpin_statistic(li_loss_of_sync_count);
# 2217| fc_host_fpin_statistic(li_loss_of_signals_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: enter_function: entry to ‘fc_host_fpinstat_li_loss_of_sync_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_loss_of_sync_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: return_function: return of NULL to ‘fc_host_fpinstat_li_loss_of_sync_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: danger: dereference of NULL ‘shost’
# 2214| fc_host_fpin_statistic(li_failure_unknown);
# 2215| fc_host_fpin_statistic(li_link_failure_count);
# 2216|-> fc_host_fpin_statistic(li_loss_of_sync_count);
# 2217| fc_host_fpin_statistic(li_loss_of_signals_count);
# 2218| fc_host_fpin_statistic(li_prim_seq_err_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: enter_function: entry to ‘fc_host_fpinstat_li_loss_of_signals_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_loss_of_signals_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: return_function: return of NULL to ‘fc_host_fpinstat_li_loss_of_signals_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: danger: dereference of NULL ‘shost’
# 2215| fc_host_fpin_statistic(li_link_failure_count);
# 2216| fc_host_fpin_statistic(li_loss_of_sync_count);
# 2217|-> fc_host_fpin_statistic(li_loss_of_signals_count);
# 2218| fc_host_fpin_statistic(li_prim_seq_err_count);
# 2219| fc_host_fpin_statistic(li_invalid_tx_word_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: enter_function: entry to ‘fc_host_fpinstat_li_prim_seq_err_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_prim_seq_err_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: return_function: return of NULL to ‘fc_host_fpinstat_li_prim_seq_err_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: danger: dereference of NULL ‘shost’
# 2216| fc_host_fpin_statistic(li_loss_of_sync_count);
# 2217| fc_host_fpin_statistic(li_loss_of_signals_count);
# 2218|-> fc_host_fpin_statistic(li_prim_seq_err_count);
# 2219| fc_host_fpin_statistic(li_invalid_tx_word_count);
# 2220| fc_host_fpin_statistic(li_invalid_crc_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: enter_function: entry to ‘fc_host_fpinstat_li_invalid_tx_word_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_invalid_tx_word_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: return_function: return of NULL to ‘fc_host_fpinstat_li_invalid_tx_word_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: danger: dereference of NULL ‘shost’
# 2217| fc_host_fpin_statistic(li_loss_of_signals_count);
# 2218| fc_host_fpin_statistic(li_prim_seq_err_count);
# 2219|-> fc_host_fpin_statistic(li_invalid_tx_word_count);
# 2220| fc_host_fpin_statistic(li_invalid_crc_count);
# 2221| fc_host_fpin_statistic(li_device_specific);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: enter_function: entry to ‘fc_host_fpinstat_li_invalid_crc_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_invalid_crc_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: return_function: return of NULL to ‘fc_host_fpinstat_li_invalid_crc_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: danger: dereference of NULL ‘shost’
# 2218| fc_host_fpin_statistic(li_prim_seq_err_count);
# 2219| fc_host_fpin_statistic(li_invalid_tx_word_count);
# 2220|-> fc_host_fpin_statistic(li_invalid_crc_count);
# 2221| fc_host_fpin_statistic(li_device_specific);
# 2222|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: enter_function: entry to ‘fc_host_fpinstat_li_device_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_device_specific’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: return_function: return of NULL to ‘fc_host_fpinstat_li_device_specific’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: danger: dereference of NULL ‘shost’
# 2219| fc_host_fpin_statistic(li_invalid_tx_word_count);
# 2220| fc_host_fpin_statistic(li_invalid_crc_count);
# 2221|-> fc_host_fpin_statistic(li_device_specific);
# 2222|
# 2223| static ssize_t
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2228:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2224:1: enter_function: entry to ‘fc_reset_statistics’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2227:35: call_function: calling ‘dev_to_shost’ from ‘fc_reset_statistics’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2227:35: return_function: return of NULL to ‘fc_reset_statistics’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2228:33: danger: dereference of NULL ‘shost’
# 2226| {
# 2227| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 2228|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 2229|
# 2230| /* ignore any data value written to the attribute */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2392:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2388:1: enter_function: entry to ‘store_fc_host_vport_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2391:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_host_vport_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2391:35: return_function: return of NULL to ‘store_fc_host_vport_delete’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2392:31: danger: dereference of NULL ‘shost’
# 2390| {
# 2391| struct Scsi_Host *shost = transport_class_to_shost(dev);
# 2392|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost);
# 2393| struct fc_vport *vport;
# 2394| u64 wwpn, wwnn;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2450:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2440:12: enter_function: entry to ‘fc_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2449:17: call_function: calling ‘dev_to_shost’ from ‘fc_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2449:17: return_function: return of NULL to ‘fc_host_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2450:14: danger: dereference of NULL ‘shost’
# 2448|
# 2449| shost = dev_to_shost(dev);
# 2450|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class
# 2451| != &fc_host_class.class)
# 2452| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2469:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2459:12: enter_function: entry to ‘fc_target_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2468:17: call_function: calling ‘dev_to_shost’ from ‘fc_target_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2468:17: return_function: return of NULL to ‘fc_target_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2469:14: danger: dereference of NULL ‘shost’
# 2467|
# 2468| shost = dev_to_shost(dev->parent);
# 2469|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class
# 2470| != &fc_host_class.class)
# 2471| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2501:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2491:12: enter_function: entry to ‘fc_rport_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2500:17: call_function: calling ‘dev_to_shost’ from ‘fc_rport_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2500:17: return_function: return of NULL to ‘fc_rport_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2501:14: danger: dereference of NULL ‘shost’
# 2499|
# 2500| shost = dev_to_shost(dev->parent);
# 2501|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class
# 2502| != &fc_host_class.class)
# 2503| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2570:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2568:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2570:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2570:13: danger: dereference of NULL ‘rport’
# 2568| struct fc_rport *rport = starget_to_rport(scsi_target(scmd->device));
# 2569|
# 2570|-> if (rport->port_state == FC_PORTSTATE_BLOCKED)
# 2571| return SCSI_EH_RESET_TIMER;
# 2572|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2960:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2957:13: enter_function: entry to ‘fc_terminate_rport_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2959:35: call_function: calling ‘dev_to_shost’ from ‘fc_terminate_rport_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2959:35: return_function: return of NULL to ‘fc_terminate_rport_io’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2960:33: danger: dereference of NULL ‘shost’
# 2958| {
# 2959| struct Scsi_Host *shost = rport_to_shost(rport);
# 2960|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 2961|
# 2962| /* Involve the LLDD if possible to terminate all io on the rport. */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3000:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2994:1: enter_function: entry to ‘fc_rport_final_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2999:35: call_function: calling ‘dev_to_shost’ from ‘fc_rport_final_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2999:35: return_function: return of NULL to ‘fc_rport_final_delete’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3000:33: danger: dereference of NULL ‘shost’
# 2998| struct device *dev = &rport->dev;
# 2999| struct Scsi_Host *shost = rport_to_shost(rport);
# 3000|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 3001| struct workqueue_struct *work_q;
# 3002| unsigned long flags;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3476:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3462:1: enter_function: entry to ‘fc_remote_port_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3464:35: call_function: calling ‘dev_to_shost’ from ‘fc_remote_port_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3464:35: return_function: return of NULL to ‘fc_remote_port_delete’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3476:9: danger: dereference of NULL ‘shost’
# 3474| */
# 3475|
# 3476|-> spin_lock_irqsave(shost->host_lock, flags);
# 3477|
# 3478| if ((rport->port_state != FC_PORTSTATE_ONLINE) &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3541:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3538:1: enter_function: entry to ‘fc_remote_port_rolechg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3540:35: call_function: calling ‘dev_to_shost’ from ‘fc_remote_port_rolechg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3540:35: return_function: return of NULL to ‘fc_remote_port_rolechg’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3541:31: danger: dereference of NULL ‘shost’
# 3539| {
# 3540| struct Scsi_Host *shost = rport_to_shost(rport);
# 3541|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost);
# 3542| unsigned long flags;
# 3543| int create = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3608:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3603:1: enter_function: entry to ‘fc_timeout_deleted_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3607:35: call_function: calling ‘dev_to_shost’ from ‘fc_timeout_deleted_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3607:35: return_function: return of NULL to ‘fc_timeout_deleted_rport’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3608:33: danger: dereference of NULL ‘shost’
# 3606| container_of(work, struct fc_rport, dev_loss_work.work);
# 3607| struct Scsi_Host *shost = rport_to_shost(rport);
# 3608|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 3609| struct fc_host_attrs *fc_host = shost_to_fc_host(shost);
# 3610| unsigned long flags;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3763:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3758:1: enter_function: entry to ‘fc_scsi_scan_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3762:35: call_function: calling ‘dev_to_shost’ from ‘fc_scsi_scan_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3762:35: return_function: return of NULL to ‘fc_scsi_scan_rport’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3763:33: danger: dereference of NULL ‘shost’
# 3761| container_of(work, struct fc_rport, scan_work);
# 3762| struct Scsi_Host *shost = rport_to_shost(rport);
# 3763|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 3764| unsigned long flags;
# 3765|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3799:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3794:5: enter_function: entry to ‘fc_block_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3796:35: call_function: calling ‘dev_to_shost’ from ‘fc_block_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3796:35: return_function: return of NULL to ‘fc_block_rport’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3799:9: danger: dereference of NULL ‘shost’
# 3797| unsigned long flags;
# 3798|
# 3799|-> spin_lock_irqsave(shost->host_lock, flags);
# 3800| while (rport->port_state == FC_PORTSTATE_BLOCKED &&
# 3801| !(rport->flags & FC_RPORT_FAST_FAIL_TIMEDOUT)) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3853:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3851:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3853:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3853:14: danger: dereference of NULL ‘rport’
# 3851| struct fc_rport *rport = starget_to_rport(scsi_target(scmd->device));
# 3852|
# 3853|-> if ((rport->port_state != FC_PORTSTATE_ONLINE) &&
# 3854| (scsi_cmd_to_rq(scmd)->cmd_flags & REQ_FAILFAST_TRANSPORT)) {
# 3855| set_host_byte(scmd, DID_TRANSPORT_MARGINAL);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4104:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4099:1: enter_function: entry to ‘fc_bsg_job_timeout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4102:35: call_function: calling ‘fc_bsg_to_shost’ from ‘fc_bsg_job_timeout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4102:35: return_function: return of NULL to ‘fc_bsg_job_timeout’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4103:34: call_function: inlined call to ‘fc_bsg_to_rport’ from ‘fc_bsg_job_timeout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4104:33: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4104:33: danger: dereference of NULL ‘shost’
# 4102| struct Scsi_Host *shost = fc_bsg_to_shost(job);
# 4103| struct fc_rport *rport = fc_bsg_to_rport(job);
# 4104|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 4105| int err = 0, inflight = 0;
# 4106|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4136:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4277:12: enter_function: entry to ‘fc_bsg_dispatch’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: call_function: calling ‘fc_bsg_to_shost’ from ‘fc_bsg_dispatch’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: return_function: return of NULL to ‘fc_bsg_dispatch’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4281:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4284:24: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4284:24: call_function: calling ‘fc_bsg_host_dispatch’ from ‘fc_bsg_dispatch’
# 4134| static int fc_bsg_host_dispatch(struct Scsi_Host *shost, struct bsg_job *job)
# 4135| {
# 4136|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 4137| struct fc_bsg_request *bsg_request = job->request;
# 4138| struct fc_bsg_reply *bsg_reply = job->reply;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4229:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4277:12: enter_function: entry to ‘fc_bsg_dispatch’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: call_function: calling ‘fc_bsg_to_shost’ from ‘fc_bsg_dispatch’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: return_function: return of NULL to ‘fc_bsg_dispatch’ from ‘fc_bsg_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4281:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4282:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4282:24: call_function: calling ‘fc_bsg_rport_dispatch’ from ‘fc_bsg_dispatch’
# 4227| static int fc_bsg_rport_dispatch(struct Scsi_Host *shost, struct bsg_job *job)
# 4228| {
# 4229|-> struct fc_internal *i = to_fc_internal(shost->transportt);
# 4230| struct fc_bsg_request *bsg_request = job->request;
# 4231| struct fc_bsg_reply *bsg_reply = job->reply;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4289:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4301:12: enter_function: entry to ‘fc_bsg_dispatch_prep’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4303:34: call_function: inlined call to ‘fc_bsg_to_rport’ from ‘fc_bsg_dispatch_prep’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4306:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4306:15: call_function: calling ‘fc_bsg_rport_prep’ from ‘fc_bsg_dispatch_prep’
# 4287| static blk_status_t fc_bsg_rport_prep(struct fc_rport *rport)
# 4288| {
# 4289|-> if (rport->port_state == FC_PORTSTATE_BLOCKED &&
# 4290| !(rport->flags & FC_RPORT_FAST_FAIL_TIMEDOUT))
# 4291| return BLK_STS_RESOURCE;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1782:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1765:12: enter_function: entry to ‘iscsi_user_scan_session’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1781:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_user_scan_session’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1781:17: return_function: return of NULL to ‘iscsi_user_scan_session’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1782:9: danger: dereference of NULL ‘shost’
# 1780|
# 1781| shost = iscsi_session_to_shost(session);
# 1782|-> ihost = shost->shost_data;
# 1783|
# 1784| mutex_lock(&ihost->mutex);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2888:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2858:5: enter_function: entry to ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: call_function: calling ‘iscsi_if_transport_lookup’ from ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: return_function: returning to ‘iscsi_session_event’ from ‘iscsi_if_transport_lookup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2869:12: branch_false: following ‘false’ branch (when ‘priv’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: return_function: return of NULL to ‘iscsi_session_event’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2874:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2881:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2888:43: danger: dereference of NULL ‘shost’
# 2886| switch (event) {
# 2887| case ISCSI_KEVENT_DESTROY_SESSION:
# 2888|-> ev->r.d_session.host_no = shost->host_no;
# 2889| ev->r.d_session.sid = session->sid;
# 2890| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2892:47: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2858:5: enter_function: entry to ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: call_function: calling ‘iscsi_if_transport_lookup’ from ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: return_function: returning to ‘iscsi_session_event’ from ‘iscsi_if_transport_lookup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2869:12: branch_false: following ‘false’ branch (when ‘priv’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: return_function: return of NULL to ‘iscsi_session_event’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2874:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2881:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2892:47: danger: dereference of NULL ‘shost’
# 2890| break;
# 2891| case ISCSI_KEVENT_CREATE_SESSION:
# 2892|-> ev->r.c_session_ret.host_no = shost->host_no;
# 2893| ev->r.c_session_ret.sid = session->sid;
# 2894| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2896:48: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2858:5: enter_function: entry to ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: call_function: calling ‘iscsi_if_transport_lookup’ from ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: return_function: returning to ‘iscsi_session_event’ from ‘iscsi_if_transport_lookup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2869:12: branch_false: following ‘false’ branch (when ‘priv’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_event’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: return_function: return of NULL to ‘iscsi_session_event’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2874:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2881:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2896:48: danger: dereference of NULL ‘shost’
# 2894| break;
# 2895| case ISCSI_KEVENT_UNBIND_SESSION:
# 2896|-> ev->r.unbind_session.host_no = shost->host_no;
# 2897| ev->r.unbind_session.sid = session->sid;
# 2898| break;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2940:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2924:1: enter_function: entry to ‘iscsi_if_create_session’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2935:12: branch_false: following ‘false’ branch (when ‘session’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2938:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2939:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_if_create_session’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2939:17: return_function: return of NULL to ‘iscsi_if_create_session’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2940:39: danger: dereference of NULL ‘shost’
# 2938| session->creator = pid;
# 2939| shost = iscsi_session_to_shost(session);
# 2940|-> ev->r.c_session_ret.host_no = shost->host_no;
# 2941| ev->r.c_session_ret.sid = session->sid;
# 2942| ISCSI_DBG_TRANS_SESSION(session,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_NETDEV_NAME’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_NETDEV_NAME’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_NETDEV_NAME’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: danger: dereference of NULL ‘shost’
# 4663| NULL);
# 4664|
# 4665|-> iscsi_host_attr(netdev, ISCSI_HOST_PARAM_NETDEV_NAME);
# 4666| iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS);
# 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_HWADDRESS’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_HWADDRESS’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_HWADDRESS’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: danger: dereference of NULL ‘shost’
# 4664|
# 4665| iscsi_host_attr(netdev, ISCSI_HOST_PARAM_NETDEV_NAME);
# 4666|-> iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS);
# 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS);
# 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_IPADDRESS’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_IPADDRESS’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_IPADDRESS’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: danger: dereference of NULL ‘shost’
# 4665| iscsi_host_attr(netdev, ISCSI_HOST_PARAM_NETDEV_NAME);
# 4666| iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS);
# 4667|-> iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS);
# 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME);
# 4669| iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_INITIATOR_NAME’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_INITIATOR_NAME’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_INITIATOR_NAME’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: danger: dereference of NULL ‘shost’
# 4666| iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS);
# 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS);
# 4668|-> iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME);
# 4669| iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE);
# 4670| iscsi_host_attr(port_speed, ISCSI_HOST_PARAM_PORT_SPEED);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_PORT_STATE’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_PORT_STATE’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_PORT_STATE’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: danger: dereference of NULL ‘shost’
# 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS);
# 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME);
# 4669|-> iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE);
# 4670| iscsi_host_attr(port_speed, ISCSI_HOST_PARAM_PORT_SPEED);
# 4671|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_PORT_SPEED’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_PORT_SPEED’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_PORT_SPEED’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: danger: dereference of NULL ‘shost’
# 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME);
# 4669| iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE);
# 4670|-> iscsi_host_attr(port_speed, ISCSI_HOST_PARAM_PORT_SPEED);
# 4671|
# 4672| static struct attribute *iscsi_host_attrs[] = {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4687:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4682:16: enter_function: entry to ‘iscsi_host_attr_is_visible’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4686:35: call_function: calling ‘dev_to_shost’ from ‘iscsi_host_attr_is_visible’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4686:35: return_function: return of NULL to ‘iscsi_host_attr_is_visible’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4687:39: danger: dereference of NULL ‘shost’
# 4685| struct device *cdev = container_of(kobj, struct device, kobj);
# 4686| struct Scsi_Host *shost = transport_class_to_shost(cdev);
# 4687|-> struct iscsi_internal *priv = to_iscsi_internal(shost->transportt);
# 4688| int param;
# 4689|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4784:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4772:12: enter_function: entry to ‘iscsi_session_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4783:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4783:17: return_function: return of NULL to ‘iscsi_session_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4784:14: danger: dereference of NULL ‘shost’
# 4782| session = iscsi_dev_to_session(dev);
# 4783| shost = iscsi_session_to_shost(session);
# 4784|-> if (!shost->transportt)
# 4785| return 0;
# 4786|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4809:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4794:12: enter_function: entry to ‘iscsi_conn_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4807:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_conn_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4807:17: return_function: return of NULL to ‘iscsi_conn_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4809:14: danger: dereference of NULL ‘shost’
# 4807| shost = iscsi_session_to_shost(session);
# 4808|
# 4809|-> if (!shost->transportt)
# 4810| return 0;
# 4811|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4829:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4819:12: enter_function: entry to ‘iscsi_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4828:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4828:17: return_function: return of NULL to ‘iscsi_host_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4829:14: danger: dereference of NULL ‘shost’
# 4827|
# 4828| shost = dev_to_shost(dev);
# 4829|-> if (!shost->transportt ||
# 4830| shost->transportt->host_attrs.ac.class != &iscsi_host_class.class)
# 4831| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:188:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:174:12: enter_function: entry to ‘sas_smp_dispatch’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:176:35: call_function: calling ‘dev_to_shost’ from ‘sas_smp_dispatch’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:176:35: return_function: return of NULL to ‘sas_smp_dispatch’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:179:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:182:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:182:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:188:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:188:9: danger: dereference of NULL ‘shost’
# 186| }
# 187|
# 188|-> to_sas_internal(shost->transportt)->f->smp_handler(job, shost, rphy);
# 189| return 0;
# 190| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:229:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:225:12: enter_function: entry to ‘sas_host_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:228:35: call_function: calling ‘dev_to_shost’ from ‘sas_host_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:228:35: return_function: return of NULL to ‘sas_host_setup’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:229:32: danger: dereference of NULL ‘shost’
# 227| {
# 228| struct Scsi_Host *shost = dev_to_shost(dev);
# 229|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost);
# 230| struct device *dma_dev = shost->dma_dev;
# 231|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:254:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:250:12: enter_function: entry to ‘sas_host_remove’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:253:35: call_function: calling ‘dev_to_shost’ from ‘sas_host_remove’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:253:35: return_function: return of NULL to ‘sas_host_remove’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:254:35: danger: dereference of NULL ‘shost’
# 252| {
# 253| struct Scsi_Host *shost = dev_to_shost(dev);
# 254|-> struct request_queue *q = to_sas_host_attrs(shost)->q;
# 255|
# 256| bsg_remove_queue(q);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:273:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:263:12: enter_function: entry to ‘sas_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:271:17: call_function: calling ‘dev_to_shost’ from ‘sas_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:271:17: return_function: return of NULL to ‘sas_host_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:273:14: danger: dereference of NULL ‘shost’
# 271| shost = dev_to_shost(dev);
# 272|
# 273|-> if (!shost->transportt)
# 274| return 0;
# 275| if (shost->transportt->host_attrs.ac.class !=
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:560:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:555:16: enter_function: entry to ‘do_sas_phy_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:559:35: call_function: calling ‘dev_to_shost’ from ‘do_sas_phy_enable’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:559:35: return_function: return of NULL to ‘do_sas_phy_enable’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:560:34: danger: dereference of NULL ‘shost’
# 558| struct sas_phy *phy = transport_class_to_phy(dev);
# 559| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 560|-> struct sas_internal *i = to_sas_internal(shost->transportt);
# 561| int error;
# 562|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:608:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:604:1: enter_function: entry to ‘do_sas_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:607:35: call_function: calling ‘dev_to_shost’ from ‘do_sas_phy_reset’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:607:35: return_function: return of NULL to ‘do_sas_phy_reset’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:608:34: danger: dereference of NULL ‘shost’
# 606| struct sas_phy *phy = transport_class_to_phy(dev);
# 607| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 608|-> struct sas_internal *i = to_sas_internal(shost->transportt);
# 609| int error;
# 610|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: enter_function: entry to ‘store_sas_phy_minimum_linkrate’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: call_function: calling ‘dev_to_shost’ from ‘store_sas_phy_minimum_linkrate’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: return_function: return of NULL to ‘store_sas_phy_minimum_linkrate’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: danger: dereference of NULL ‘shost’
# 641| sas_phy_linkspeed_attr(negotiated_linkrate);
# 642| sas_phy_linkspeed_attr(minimum_linkrate_hw);
# 643|-> sas_phy_linkspeed_rw_attr(minimum_linkrate);
# 644| sas_phy_linkspeed_attr(maximum_linkrate_hw);
# 645| sas_phy_linkspeed_rw_attr(maximum_linkrate);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: enter_function: entry to ‘store_sas_phy_maximum_linkrate’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: call_function: calling ‘dev_to_shost’ from ‘store_sas_phy_maximum_linkrate’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: return_function: return of NULL to ‘store_sas_phy_maximum_linkrate’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: danger: dereference of NULL ‘shost’
# 643| sas_phy_linkspeed_rw_attr(minimum_linkrate);
# 644| sas_phy_linkspeed_attr(maximum_linkrate_hw);
# 645|-> sas_phy_linkspeed_rw_attr(maximum_linkrate);
# 646| sas_phy_linkerror_attr(invalid_dword_count);
# 647| sas_phy_linkerror_attr(running_disparity_error_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: enter_function: entry to ‘show_sas_phy_invalid_dword_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_invalid_dword_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: return_function: return of NULL to ‘show_sas_phy_invalid_dword_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: danger: dereference of NULL ‘shost’
# 644| sas_phy_linkspeed_attr(maximum_linkrate_hw);
# 645| sas_phy_linkspeed_rw_attr(maximum_linkrate);
# 646|-> sas_phy_linkerror_attr(invalid_dword_count);
# 647| sas_phy_linkerror_attr(running_disparity_error_count);
# 648| sas_phy_linkerror_attr(loss_of_dword_sync_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: enter_function: entry to ‘show_sas_phy_running_disparity_error_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_running_disparity_error_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: return_function: return of NULL to ‘show_sas_phy_running_disparity_error_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: danger: dereference of NULL ‘shost’
# 645| sas_phy_linkspeed_rw_attr(maximum_linkrate);
# 646| sas_phy_linkerror_attr(invalid_dword_count);
# 647|-> sas_phy_linkerror_attr(running_disparity_error_count);
# 648| sas_phy_linkerror_attr(loss_of_dword_sync_count);
# 649| sas_phy_linkerror_attr(phy_reset_problem_count);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: enter_function: entry to ‘show_sas_phy_loss_of_dword_sync_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_loss_of_dword_sync_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: return_function: return of NULL to ‘show_sas_phy_loss_of_dword_sync_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: danger: dereference of NULL ‘shost’
# 646| sas_phy_linkerror_attr(invalid_dword_count);
# 647| sas_phy_linkerror_attr(running_disparity_error_count);
# 648|-> sas_phy_linkerror_attr(loss_of_dword_sync_count);
# 649| sas_phy_linkerror_attr(phy_reset_problem_count);
# 650|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: enter_function: entry to ‘show_sas_phy_phy_reset_problem_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_phy_reset_problem_count’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: return_function: return of NULL to ‘show_sas_phy_phy_reset_problem_count’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: danger: dereference of NULL ‘shost’
# 647| sas_phy_linkerror_attr(running_disparity_error_count);
# 648| sas_phy_linkerror_attr(loss_of_dword_sync_count);
# 649|-> sas_phy_linkerror_attr(phy_reset_problem_count);
# 650|
# 651| static int sas_phy_setup(struct transport_container *tc, struct device *dev,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:656:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:651:12: enter_function: entry to ‘sas_phy_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:655:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:655:35: return_function: return of NULL to ‘sas_phy_setup’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:656:34: danger: dereference of NULL ‘shost’
# 654| struct sas_phy *phy = dev_to_phy(dev);
# 655| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 656|-> struct sas_internal *i = to_sas_internal(shost->transportt);
# 657|
# 658| if (i->f->phy_setup)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:676:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:667:12: enter_function: entry to ‘sas_phy_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:674:17: call_function: calling ‘dev_to_shost’ from ‘sas_phy_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:674:17: return_function: return of NULL to ‘sas_phy_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:676:14: danger: dereference of NULL ‘shost’
# 674| shost = dev_to_shost(dev->parent);
# 675|
# 676|-> if (!shost->transportt)
# 677| return 0;
# 678| if (shost->transportt->host_attrs.ac.class !=
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:690:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:686:13: enter_function: entry to ‘sas_phy_release’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:689:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_release’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:689:35: return_function: return of NULL to ‘sas_phy_release’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:690:34: danger: dereference of NULL ‘shost’
# 688| struct sas_phy *phy = dev_to_phy(dev);
# 689| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 690|-> struct sas_internal *i = to_sas_internal(shost->transportt);
# 691|
# 692| if (i->f->phy_release)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:728:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:710:17: enter_function: entry to ‘sas_phy_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: return_function: return of NULL to ‘sas_phy_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:716:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:719:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:726:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:728:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:728:17: danger: dereference of NULL ‘shost’
# 726| if (scsi_is_sas_expander_device(parent)) {
# 727| struct sas_rphy *rphy = dev_to_rphy(parent);
# 728|-> dev_set_name(&phy->dev, "phy-%d:%d:%d", shost->host_no,
# 729| rphy->scsi_target_id, number);
# 730| } else
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:731:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:710:17: enter_function: entry to ‘sas_phy_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: return_function: return of NULL to ‘sas_phy_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:716:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:719:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:731:17: danger: dereference of NULL ‘shost’
# 729| rphy->scsi_target_id, number);
# 730| } else
# 731|-> dev_set_name(&phy->dev, "phy-%d:%d", shost->host_no, number);
# 732|
# 733| transport_setup_device(&phy->dev);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:847:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:838:12: enter_function: entry to ‘sas_port_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:845:17: call_function: calling ‘dev_to_shost’ from ‘sas_port_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:845:17: return_function: return of NULL to ‘sas_port_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:847:14: danger: dereference of NULL ‘shost’
# 845| shost = dev_to_shost(dev->parent);
# 846|
# 847|-> if (!shost->transportt)
# 848| return 0;
# 849| if (shost->transportt->host_attrs.ac.class !=
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:926:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:905:18: enter_function: entry to ‘sas_port_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: call_function: calling ‘dev_to_shost’ from ‘sas_port_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: return_function: return of NULL to ‘sas_port_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:911:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:914:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:924:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:926:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:926:17: danger: dereference of NULL ‘shost’
# 924| if (scsi_is_sas_expander_device(parent)) {
# 925| struct sas_rphy *rphy = dev_to_rphy(parent);
# 926|-> dev_set_name(&port->dev, "port-%d:%d:%d", shost->host_no,
# 927| rphy->scsi_target_id, port->port_identifier);
# 928| } else
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:929:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:905:18: enter_function: entry to ‘sas_port_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: call_function: calling ‘dev_to_shost’ from ‘sas_port_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: return_function: return of NULL to ‘sas_port_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:911:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:914:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:929:17: danger: dereference of NULL ‘shost’
# 927| rphy->scsi_target_id, port->port_identifier);
# 928| } else
# 929|-> dev_set_name(&port->dev, "port-%d:%d", shost->host_no,
# 930| port->port_identifier);
# 931|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:955:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:951:18: enter_function: entry to ‘sas_port_alloc_num’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:954:35: call_function: calling ‘dev_to_shost’ from ‘sas_port_alloc_num’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:954:35: return_function: return of NULL to ‘sas_port_alloc_num’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:955:32: danger: dereference of NULL ‘shost’
# 953| int index;
# 954| struct Scsi_Host *shost = dev_to_shost(parent);
# 955|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost);
# 956|
# 957| /* FIXME: use idr for this eventually */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1222:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1216:1: enter_function: entry to ‘show_sas_rphy_enclosure_identifier’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1221:35: call_function: calling ‘dev_to_shost’ from ‘show_sas_rphy_enclosure_identifier’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1221:35: return_function: return of NULL to ‘show_sas_rphy_enclosure_identifier’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1222:34: danger: dereference of NULL ‘shost’
# 1220| struct sas_phy *phy = dev_to_phy(rphy->dev.parent);
# 1221| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 1222|-> struct sas_internal *i = to_sas_internal(shost->transportt);
# 1223| u64 identifier;
# 1224| int error;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1242:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1236:1: enter_function: entry to ‘show_sas_rphy_bay_identifier’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1241:35: call_function: calling ‘dev_to_shost’ from ‘show_sas_rphy_bay_identifier’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1241:35: return_function: return of NULL to ‘show_sas_rphy_bay_identifier’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1242:34: danger: dereference of NULL ‘shost’
# 1240| struct sas_phy *phy = dev_to_phy(rphy->dev.parent);
# 1241| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent);
# 1242|-> struct sas_internal *i = to_sas_internal(shost->transportt);
# 1243| int val;
# 1244|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1369:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1360:12: enter_function: entry to ‘sas_rphy_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1367:17: call_function: calling ‘dev_to_shost’ from ‘sas_rphy_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1367:17: return_function: return of NULL to ‘sas_rphy_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1369:14: danger: dereference of NULL ‘shost’
# 1367| shost = dev_to_shost(dev->parent->parent);
# 1368|
# 1369|-> if (!shost->transportt)
# 1370| return 0;
# 1371| if (shost->transportt->host_attrs.ac.class !=
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1391:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1379:12: enter_function: entry to ‘sas_end_dev_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1388:17: call_function: calling ‘dev_to_shost’ from ‘sas_end_dev_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1388:17: return_function: return of NULL to ‘sas_end_dev_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1391:14: danger: dereference of NULL ‘shost’
# 1389| rphy = dev_to_rphy(dev);
# 1390|
# 1391|-> if (!shost->transportt)
# 1392| return 0;
# 1393| if (shost->transportt->host_attrs.ac.class !=
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1414:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1402:12: enter_function: entry to ‘sas_expander_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1411:17: call_function: calling ‘dev_to_shost’ from ‘sas_expander_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1411:17: return_function: return of NULL to ‘sas_expander_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1414:14: danger: dereference of NULL ‘shost’
# 1412| rphy = dev_to_rphy(dev);
# 1413|
# 1414|-> if (!shost->transportt)
# 1415| return 0;
# 1416| if (shost->transportt->host_attrs.ac.class !=
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1480:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1465:18: enter_function: entry to ‘sas_end_device_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: call_function: calling ‘dev_to_shost’ from ‘sas_end_device_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: return_function: return of NULL to ‘sas_end_device_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1471:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1475:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1478:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1480:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1480:17: danger: dereference of NULL ‘shost’
# 1478| if (scsi_is_sas_expander_device(parent->dev.parent)) {
# 1479| struct sas_rphy *rphy = dev_to_rphy(parent->dev.parent);
# 1480|-> dev_set_name(&rdev->rphy.dev, "end_device-%d:%d:%d",
# 1481| shost->host_no, rphy->scsi_target_id,
# 1482| parent->port_identifier);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1484:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1465:18: enter_function: entry to ‘sas_end_device_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: call_function: calling ‘dev_to_shost’ from ‘sas_end_device_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: return_function: return of NULL to ‘sas_end_device_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1471:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1475:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1484:17: danger: dereference of NULL ‘shost’
# 1482| parent->port_identifier);
# 1483| } else
# 1484|-> dev_set_name(&rdev->rphy.dev, "end_device-%d:%d",
# 1485| shost->host_no, parent->port_identifier);
# 1486| rdev->rphy.identify.device_type = SAS_END_DEVICE;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1509:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1504:18: enter_function: entry to ‘sas_expander_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1507:35: call_function: calling ‘dev_to_shost’ from ‘sas_expander_alloc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1507:35: return_function: return of NULL to ‘sas_expander_alloc’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1509:32: danger: dereference of NULL ‘shost’
# 1507| struct Scsi_Host *shost = dev_to_shost(&parent->dev);
# 1508| struct sas_expander_device *rdev;
# 1509|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost);
# 1510|
# 1511| BUG_ON(type != SAS_EDGE_EXPANDER_DEVICE &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1545:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1541:5: enter_function: entry to ‘sas_rphy_add’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1544:35: call_function: calling ‘dev_to_shost’ from ‘sas_rphy_add’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1544:35: return_function: return of NULL to ‘sas_rphy_add’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1545:32: danger: dereference of NULL ‘shost’
# 1543| struct sas_port *parent = dev_to_sas_port(rphy->dev.parent);
# 1544| struct Scsi_Host *shost = dev_to_shost(parent->dev.parent);
# 1545|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost);
# 1546| struct sas_identify *identify = &rphy->identify;
# 1547| int error;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1604:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1600:6: enter_function: entry to ‘sas_rphy_free’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1603:35: call_function: calling ‘dev_to_shost’ from ‘sas_rphy_free’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1603:35: return_function: return of NULL to ‘sas_rphy_free’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1604:32: danger: dereference of NULL ‘shost’
# 1602| struct device *dev = &rphy->dev;
# 1603| struct Scsi_Host *shost = dev_to_shost(rphy->dev.parent->parent);
# 1604|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost);
# 1605|
# 1606| mutex_lock(&sas_host->lock);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:199:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:190:12: enter_function: entry to ‘spi_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:198:17: call_function: calling ‘dev_to_shost’ from ‘spi_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:198:17: return_function: return of NULL to ‘spi_host_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:199:14: danger: dereference of NULL ‘shost’
# 197|
# 198| shost = dev_to_shost(dev);
# 199|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class
# 200| != &spi_host_class.class)
# 201| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1413:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1402:12: enter_function: entry to ‘spi_target_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1412:17: call_function: calling ‘dev_to_shost’ from ‘spi_target_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1412:17: return_function: return of NULL to ‘spi_target_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1413:14: danger: dereference of NULL ‘shost’
# 1411|
# 1412| shost = dev_to_shost(dev->parent);
# 1413|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class
# 1414| != &spi_host_class.class)
# 1415| return 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1453:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1447:12: enter_function: entry to ‘spi_host_configure’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1452:35: call_function: calling ‘dev_to_shost’ from ‘spi_host_configure’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1452:35: return_function: return of NULL to ‘spi_host_configure’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1453:35: danger: dereference of NULL ‘shost’
# 1451| struct kobject *kobj = &cdev->kobj;
# 1452| struct Scsi_Host *shost = transport_class_to_shost(cdev);
# 1453|-> struct spi_internal *si = to_spi_internal(shost->transportt);
# 1454| struct attribute *attr = &dev_attr_signalling.attr;
# 1455| int rc = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1476:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1470:16: enter_function: entry to ‘target_attribute_is_visible’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1475:35: call_function: calling ‘dev_to_shost’ from ‘target_attribute_is_visible’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1475:35: return_function: return of NULL to ‘target_attribute_is_visible’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1476:35: danger: dereference of NULL ‘shost’
# 1474| struct scsi_target *starget = transport_class_to_starget(cdev);
# 1475| struct Scsi_Host *shost = transport_class_to_shost(cdev);
# 1476|-> struct spi_internal *si = to_spi_internal(shost->transportt);
# 1477|
# 1478| if (attr == &dev_attr_period.attr &&
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:108:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:104:12: enter_function: entry to ‘srp_host_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:107:35: call_function: calling ‘dev_to_shost’ from ‘srp_host_setup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:107:35: return_function: return of NULL to ‘srp_host_setup’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:108:32: danger: dereference of NULL ‘shost’
# 106| {
# 107| struct Scsi_Host *shost = dev_to_shost(dev);
# 108|-> struct srp_host_attrs *srp_host = to_srp_host_attrs(shost);
# 109|
# 110| atomic_set(&srp_host->next_port_id, 0);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:162:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:156:16: enter_function: entry to ‘store_srp_rport_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:161:35: call_function: calling ‘dev_to_shost’ from ‘store_srp_rport_delete’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:161:35: return_function: return of NULL to ‘store_srp_rport_delete’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:162:34: danger: dereference of NULL ‘shost’
# 160| struct srp_rport *rport = transport_class_to_srp_rport(dev);
# 161| struct Scsi_Host *shost = dev_to_shost(dev);
# 162|-> struct srp_internal *i = to_srp_internal(shost->transportt);
# 163|
# 164| if (i->f->rport_delete) {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:415:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:402:13: enter_function: entry to ‘__rport_fail_io_fast’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:404:35: call_function: inlined call to ‘rport_to_shost’ from ‘__rport_fail_io_fast’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:404:35: call_function: inlined call to ‘rport_to_shost’ from ‘__rport_fail_io_fast’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:409:13: call_function: calling ‘srp_rport_set_state’ from ‘__rport_fail_io_fast’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:409:13: return_function: returning to ‘__rport_fail_io_fast’ from ‘srp_rport_set_state’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:409:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:412:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:415:13: danger: dereference of NULL ‘dev_to_shost(*rport.dev.parent)’
# 413|
# 414| /* Involve the LLD if possible to terminate all I/O on the rport. */
# 415|-> i = to_srp_internal(shost->transportt);
# 416| if (i->f->terminate_rport_io)
# 417| i->f->terminate_rport_io(rport);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:448:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:443:13: enter_function: entry to ‘rport_dev_loss_timedout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:447:35: call_function: inlined call to ‘rport_to_shost’ from ‘rport_dev_loss_timedout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:447:35: call_function: inlined call to ‘rport_to_shost’ from ‘rport_dev_loss_timedout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:448:34: danger: dereference of NULL ‘dev_to_shost(((struct srp_rport *)((char *)work + 1984))[8972151786823710].dev.parent)’
# 446| struct srp_rport, dev_loss_work);
# 447| struct Scsi_Host *shost = rport_to_shost(rport);
# 448|-> struct srp_internal *i = to_srp_internal(shost->transportt);
# 449|
# 450| pr_info("dev_loss_tmo expired for SRP %s / %s.\n",
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:535:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:532:5: enter_function: entry to ‘srp_reconnect_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:534:35: call_function: inlined call to ‘rport_to_shost’ from ‘srp_reconnect_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:534:35: call_function: inlined call to ‘rport_to_shost’ from ‘srp_reconnect_rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:535:34: danger: dereference of NULL ‘dev_to_shost(*rport.dev.parent)’
# 533| {
# 534| struct Scsi_Host *shost = rport_to_shost(rport);
# 535|-> struct srp_internal *i = to_srp_internal(shost->transportt);
# 536| struct scsi_device *sdev;
# 537| int res;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:641:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:631:12: enter_function: entry to ‘srp_rport_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:640:17: call_function: calling ‘dev_to_shost’ from ‘srp_rport_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:640:17: return_function: return of NULL to ‘srp_rport_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:641:14: danger: dereference of NULL ‘shost’
# 639|
# 640| shost = dev_to_shost(dev->parent);
# 641|-> if (!shost->transportt)
# 642| return 0;
# 643| if (shost->transportt->host_attrs.ac.class != &srp_host_class.class)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:659:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:650:12: enter_function: entry to ‘srp_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:658:17: call_function: calling ‘dev_to_shost’ from ‘srp_host_match’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:658:17: return_function: return of NULL to ‘srp_host_match’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:659:14: danger: dereference of NULL ‘shost’
# 657|
# 658| shost = dev_to_shost(dev);
# 659|-> if (!shost->transportt)
# 660| return 0;
# 661| if (shost->transportt->host_attrs.ac.class != &srp_host_class.class)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:163:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:150:1: enter_function: entry to ‘snic_scsi_scan_tgt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:153:35: call_function: calling ‘dev_to_shost’ from ‘snic_scsi_scan_tgt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:153:35: return_function: return of NULL to ‘snic_scsi_scan_tgt’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:163:9: danger: dereference of NULL ‘shost’
# 161| SCSI_SCAN_RESCAN);
# 162|
# 163|-> spin_lock_irqsave(shost->host_lock, flags);
# 164| tgt->flags &= ~SNIC_TGT_SCAN_PENDING;
# 165| spin_unlock_irqrestore(shost->host_lock, flags);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.h:102:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘tgt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:1484:1: enter_function: entry to ‘snic_send_abort_and_wait’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:1494:15: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:1495:14: call_function: inlined call to ‘snic_tgt_chkready’ from ‘snic_send_abort_and_wait’
# 100| snic_tgt_chkready(struct snic_tgt *tgt)
# 101| {
# 102|-> if (tgt->state == SNIC_TGT_STAT_ONLINE)
# 103| return 0;
# 104| else
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2582:1: enter_function: entry to ‘snic_tgt_scsi_abort_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2591:12: branch_false: following ‘false’ branch (when ‘tgt’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: call_function: calling ‘dev_to_shost’ from ‘snic_tgt_scsi_abort_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: return_function: returning to ‘snic_tgt_scsi_abort_io’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: danger: dereference of NULL ‘dev_to_shost(*tgt.dev.parent)’
# 2593|
# 2594| snic = shost_priv(snic_tgt_to_shost(tgt));
# 2595|-> SNIC_SCSI_DBG(snic->shost, "tgt_abt_io: Cleaning Pending IOs.\n");
# 2596|
# 2597| if (tgt->tdata.typ == SNIC_TGT_DAS)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2602:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2582:1: enter_function: entry to ‘snic_tgt_scsi_abort_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2591:12: branch_false: following ‘false’ branch (when ‘tgt’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: call_function: calling ‘dev_to_shost’ from ‘snic_tgt_scsi_abort_io’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: return_function: returning to ‘snic_tgt_scsi_abort_io’ from ‘dev_to_shost’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2597:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2602:29: danger: dereference of NULL ‘dev_to_shost(*tgt.dev.parent)’
# 2600| tmf = SNIC_ITMF_ABTS_TASK_TERM;
# 2601|
# 2602|-> for (tag = 0; tag < snic->max_tag_id; tag++) {
# 2603| io_lock = snic_io_lock_tag(snic, tag);
# 2604|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:42: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:425:12: enter_function: entry to ‘stex_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:436:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:437:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:437:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:440:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:446:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:446:17: call_function: inlined call to ‘sg_next’ from ‘stex_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:446:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:42: danger: dereference of NULL ‘sg’
# 445| table = (struct st_sgitem *)(dst + 1);
# 446| scsi_for_each_sg(cmd, sg, nseg, i) {
# 447|-> table[i].count = cpu_to_le32((u32)sg_dma_len(sg));
# 448| table[i].addr = cpu_to_le64(sg_dma_address(sg));
# 449| table[i].ctrl = SG_CF_64B | SG_CF_HOST;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:42: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:457:12: enter_function: entry to ‘stex_ss_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:468:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:469:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:469:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:472:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:478:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:478:17: call_function: inlined call to ‘sg_next’ from ‘stex_ss_map_sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:478:17: branch_true: following ‘true’ branch (when ‘i < nseg’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:42: danger: dereference of NULL ‘sg’
# 477| table = (struct st_ss_sgitem *)(dst + 1);
# 478| scsi_for_each_sg(cmd, sg, nseg, i) {
# 479|-> table[i].count = cpu_to_le32((u32)sg_dma_len(sg));
# 480| table[i].addr =
# 481| cpu_to_le32(sg_dma_address(sg) & 0xffffffff);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1083:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd_request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1240:13: enter_function: entry to ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: call_function: calling ‘get_in_stor_device’ from ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: return_function: returning to ‘storvsc_on_channel_callback’ from ‘get_in_stor_device’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1255:12: branch_false: following ‘false’ branch (when ‘stor_device’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1258:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1260:9: branch_true: following ‘true’ branch (when ‘desc’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1261:47: call_function: inlined call to ‘hv_pkt_data’ from ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: following ‘false’ branch (when ‘rqst_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1268:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551613’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551612’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_true: following ‘true’ branch (when ‘rqst_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:36: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: call_function: calling ‘storvsc_on_receive’ from ‘storvsc_on_channel_callback’
# 1081| struct storvsc_device *stor_dev)
# 1082| {
# 1083|-> struct scsi_cmnd *scmnd = cmd_request->cmd;
# 1084| struct scsi_sense_hdr sense_hdr;
# 1085| struct vmscsi_request *vm_srb;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1186:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1240:13: enter_function: entry to ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: call_function: calling ‘get_in_stor_device’ from ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: return_function: returning to ‘storvsc_on_channel_callback’ from ‘get_in_stor_device’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1255:12: branch_false: following ‘false’ branch (when ‘stor_device’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1258:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1260:9: branch_true: following ‘true’ branch (when ‘desc’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1261:47: call_function: inlined call to ‘hv_pkt_data’ from ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: following ‘false’ branch (when ‘rqst_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1268:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551613’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551612’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_true: following ‘true’ branch (when ‘rqst_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:36: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: call_function: calling ‘storvsc_on_receive’ from ‘storvsc_on_channel_callback’
# 1184| STORVSC_LOGGING_WARN : STORVSC_LOGGING_ERROR;
# 1185|
# 1186|-> storvsc_log_ratelimited(device, loglevel,
# 1187| "tag#%d cmd 0x%x status: scsi 0x%x srb 0x%x host 0x%x\n",
# 1188| scsi_cmd_to_rq(request->cmd)->tag,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1197:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1240:13: enter_function: entry to ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: call_function: calling ‘get_in_stor_device’ from ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: return_function: returning to ‘storvsc_on_channel_callback’ from ‘get_in_stor_device’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1255:12: branch_false: following ‘false’ branch (when ‘stor_device’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1258:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1260:9: branch_true: following ‘true’ branch (when ‘desc’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1261:47: call_function: inlined call to ‘hv_pkt_data’ from ‘storvsc_on_channel_callback’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: following ‘false’ branch (when ‘rqst_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1268:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551613’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551612’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_true: following ‘true’ branch (when ‘rqst_id == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:36: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: call_function: calling ‘storvsc_on_receive’ from ‘storvsc_on_channel_callback’
# 1195| if (vstor_packet->vm_srb.scsi_status == SAM_STAT_CHECK_CONDITION &&
# 1196| (vstor_packet->vm_srb.srb_status & SRB_STATUS_AUTOSENSE_VALID))
# 1197|-> memcpy(request->cmd->sense_buffer,
# 1198| vstor_packet->vm_srb.sense_data,
# 1199| stor_pkt->vm_srb.sense_info_length);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1718:28: enter_function: entry to ‘storvsc_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1749:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘storvsc_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1749:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1795:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘storvsc_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1804:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1805:48: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1825:20: branch_false: following ‘false’ branch (when ‘sg_count >= 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1825:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: branch_true: following ‘true’ branch (when ‘j < sg_count’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1850:32: branch_false: following ‘false’ branch (when ‘hvpfns_to_add == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: call_function: inlined call to ‘sg_next’ from ‘storvsc_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: branch_true: following ‘true’ branch (when ‘j < sg_count’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: danger: dereference of NULL ‘sg’
# 1837| * sgl entry, provided they are a multiple of PAGE_SIZE.
# 1838| */
# 1839|-> hvpfn = HVPFN_DOWN(sg_dma_address(sg));
# 1840| hvpfns_to_add = HVPFN_UP(sg_dma_address(sg) +
# 1841| sg_dma_len(sg)) - hvpfn;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:337:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:690:12: enter_function: entry to ‘pvscsi_queue_ring’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:710:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:717:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:721:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘pvscsi_queue_ring’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:721:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:742:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘pvscsi_queue_ring’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:755:13: call_function: calling ‘pvscsi_map_buffers’ from ‘pvscsi_queue_ring’
# 335| sge = &ctx->sgl->sge[0];
# 336| for (i = 0; i < count; i++, sg = sg_next(sg)) {
# 337|-> sge[i].addr = sg_dma_address(sg);
# 338| sge[i].length = sg_dma_len(sg);
# 339| sge[i].flags = 0;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:470:12: enter_function: entry to ‘map_data_for_request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:484:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:487:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:487:9: call_function: inlined call to ‘sg_next’ from ‘map_data_for_request’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:487:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: danger: dereference of NULL ‘sg’
# 486|
# 487| scsi_for_each_sg(sc, sg, scsi_sg_count(sc), i)
# 488|-> data_grants += PFN_UP(sg->offset + sg->length);
# 489|
# 490| if (data_grants > VSCSIIF_SG_TABLESIZE) {
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3238:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3236| */
# 3237| spin_lock(&cache->lock);
# 3238|-> old_last_used = cache->last_used;
# 3239| old_last_remap_bytes = cache->last_remap_bytes;
# 3240| old_last_identity_remap_count = cache->last_identity_remap_count;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3239:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3237| spin_lock(&cache->lock);
# 3238| old_last_used = cache->last_used;
# 3239|-> old_last_remap_bytes = cache->last_remap_bytes;
# 3240| old_last_identity_remap_count = cache->last_identity_remap_count;
# 3241| used = cache->used;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3240:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3238| old_last_used = cache->last_used;
# 3239| old_last_remap_bytes = cache->last_remap_bytes;
# 3240|-> old_last_identity_remap_count = cache->last_identity_remap_count;
# 3241| used = cache->used;
# 3242| remap_bytes = cache->remap_bytes;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3242:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3240| old_last_identity_remap_count = cache->last_identity_remap_count;
# 3241| used = cache->used;
# 3242|-> remap_bytes = cache->remap_bytes;
# 3243| identity_remap_count = cache->identity_remap_count;
# 3244| /* No change in values, can safely skip it. */
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3243:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3241| used = cache->used;
# 3242| remap_bytes = cache->remap_bytes;
# 3243|-> identity_remap_count = cache->identity_remap_count;
# 3244| /* No change in values, can safely skip it. */
# 3245| if (cache->last_used == used &&
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3248:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3246| cache->last_remap_bytes == remap_bytes &&
# 3247| cache->last_identity_remap_count == identity_remap_count &&
# 3248|-> cache->last_flags == cache->flags) {
# 3249| spin_unlock(&cache->lock);
# 3250| return 0;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3248:34: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3246| cache->last_remap_bytes == remap_bytes &&
# 3247| cache->last_identity_remap_count == identity_remap_count &&
# 3248|-> cache->last_flags == cache->flags) {
# 3249| spin_unlock(&cache->lock);
# 3250| return 0;
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3252:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3250| return 0;
# 3251| }
# 3252|-> cache->last_used = used;
# 3253| cache->last_remap_bytes = remap_bytes;
# 3254| cache->last_identity_remap_count = identity_remap_count;
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3253:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3251| }
# 3252| cache->last_used = used;
# 3253|-> cache->last_remap_bytes = remap_bytes;
# 3254| cache->last_identity_remap_count = identity_remap_count;
# 3255| cache->last_flags = cache->flags;
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3254:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3252| cache->last_used = used;
# 3253| cache->last_remap_bytes = remap_bytes;
# 3254|-> cache->last_identity_remap_count = identity_remap_count;
# 3255| cache->last_flags = cache->flags;
# 3256| spin_unlock(&cache->lock);
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3255:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3253| cache->last_remap_bytes = remap_bytes;
# 3254| cache->last_identity_remap_count = identity_remap_count;
# 3255|-> cache->last_flags = cache->flags;
# 3256| spin_unlock(&cache->lock);
# 3257|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3255:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3253| cache->last_remap_bytes = remap_bytes;
# 3254| cache->last_identity_remap_count = identity_remap_count;
# 3255|-> cache->last_flags = cache->flags;
# 3256| spin_unlock(&cache->lock);
# 3257|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3272:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3270| bi = btrfs_item_ptr_offset(leaf, path->slots[0]);
# 3271| btrfs_set_stack_block_group_v2_used(&bgi, used);
# 3272|-> btrfs_set_stack_block_group_v2_chunk_objectid(&bgi, cache->global_root_id);
# 3273| btrfs_set_stack_block_group_v2_flags(&bgi, cache->flags);
# 3274|
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3273:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3271| btrfs_set_stack_block_group_v2_used(&bgi, used);
# 3272| btrfs_set_stack_block_group_v2_chunk_objectid(&bgi, cache->global_root_id);
# 3273|-> btrfs_set_stack_block_group_v2_flags(&bgi, cache->flags);
# 3274|
# 3275| if (btrfs_fs_incompat(fs_info, REMAP_TREE)) {
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3276:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3274|
# 3275| if (btrfs_fs_incompat(fs_info, REMAP_TREE)) {
# 3276|-> btrfs_set_stack_block_group_v2_remap_bytes(&bgi, cache->remap_bytes);
# 3277| btrfs_set_stack_block_group_v2_identity_remap_count(&bgi,
# 3278| cache->identity_remap_count);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3277:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3275| if (btrfs_fs_incompat(fs_info, REMAP_TREE)) {
# 3276| btrfs_set_stack_block_group_v2_remap_bytes(&bgi, cache->remap_bytes);
# 3277|-> btrfs_set_stack_block_group_v2_identity_remap_count(&bgi,
# 3278| cache->identity_remap_count);
# 3279| write_extent_buffer(leaf, &bgi, bi,
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3299:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3297| if (ret < 0 && ret != -ENOENT) {
# 3298| spin_lock(&cache->lock);
# 3299|-> cache->last_used = old_last_used;
# 3300| cache->last_remap_bytes = old_last_remap_bytes;
# 3301| cache->last_identity_remap_count = old_last_identity_remap_count;
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3300:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3298| spin_lock(&cache->lock);
# 3299| cache->last_used = old_last_used;
# 3300|-> cache->last_remap_bytes = old_last_remap_bytes;
# 3301| cache->last_identity_remap_count = old_last_identity_remap_count;
# 3302| spin_unlock(&cache->lock);
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3301:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’
# 3299| cache->last_used = old_last_used;
# 3300| cache->last_remap_bytes = old_last_remap_bytes;
# 3301|-> cache->last_identity_remap_count = old_last_identity_remap_count;
# 3302| spin_unlock(&cache->lock);
# 3303| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1063:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
# 1061|
# 1062| (*sig) = NULL;
# 1063|-> switch (auth_tok->token_type) {
# 1064| case ECRYPTFS_PASSWORD:
# 1065| (*sig) = auth_tok->token.password.signature;
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1620:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’
# 1618|
# 1619| if (unlikely(ecryptfs_verbosity > 0)) {
# 1620|-> ecryptfs_printk(
# 1621| KERN_DEBUG, "Session key encryption key (size [%d]):\n",
# 1622| auth_tok->token.password.session_key_encryption_key_bytes);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1625:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’
# 1623| ecryptfs_dump_hex(
# 1624| auth_tok->token.password.session_key_encryption_key,
# 1625|-> auth_tok->token.password.session_key_encryption_key_bytes);
# 1626| }
# 1627| rc = ecryptfs_get_tfm_and_mutex_for_cipher_name(&tfm, &tfm_mutex,
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1636:34: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’
# 1634| }
# 1635| rc = virt_to_scatterlist(auth_tok->session_key.encrypted_key,
# 1636|-> auth_tok->session_key.encrypted_key_size,
# 1637| src_sg, 2);
# 1638| if (rc < 1 || rc > 2) {
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1639:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’
# 1637| src_sg, 2);
# 1638| if (rc < 1 || rc > 2) {
# 1639|-> printk(KERN_ERR "Internal error whilst attempting to convert "
# 1640| "auth_tok->session_key.encrypted_key to scatterlist; "
# 1641| "expected rc = 1; got rc = [%d]. "
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1646:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’
# 1644| goto out;
# 1645| }
# 1646|-> auth_tok->session_key.decrypted_key_size =
# 1647| auth_tok->session_key.encrypted_key_size;
# 1648| rc = virt_to_scatterlist(auth_tok->session_key.decrypted_key,
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1647:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’
# 1645| }
# 1646| auth_tok->session_key.decrypted_key_size =
# 1647|-> auth_tok->session_key.encrypted_key_size;
# 1648| rc = virt_to_scatterlist(auth_tok->session_key.decrypted_key,
# 1649| auth_tok->session_key.decrypted_key_size,
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1836:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_true: following ‘true’ branch (when ‘rc != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1836:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1836:25: danger: out-of-bounds read from byte 18 till byte 19 but ‘auth_tok_list’ ends at byte 16
# 1834| candidate_auth_tok);
# 1835| if (rc) {
# 1836|-> printk(KERN_ERR
# 1837| "Unrecognized candidate auth tok type: [%d]\n",
# 1838| candidate_auth_tok->token_type);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:13: danger: out-of-bounds read from byte 18 till byte 19 but ‘auth_tok_list’ ends at byte 16
# 1856| }
# 1857| found_matching_auth_tok:
# 1858|-> if (candidate_auth_tok->token_type == ECRYPTFS_PRIVATE_KEY) {
# 1859| memcpy(&(candidate_auth_tok->token.private_key),
# 1860| &(matching_auth_tok->token.private_key),
Error: GCC_ANALYZER_WARNING (CWE-121):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: danger: out-of-bounds write from byte 644 till byte 755 but ‘auth_tok_list’ ends at byte 16
# 1865| crypt_stat);
# 1866| } else if (candidate_auth_tok->token_type == ECRYPTFS_PASSWORD) {
# 1867|-> memcpy(&(candidate_auth_tok->token.password),
# 1868| &(matching_auth_tok->token.password),
# 1869| sizeof(struct ecryptfs_password));
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:182:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:172:12: enter_function: entry to ‘ext4_ext_zeroout_stub’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:180:18: call_function: inlined call to ‘ext4_ext_get_actual_len’ from ‘ext4_ext_zeroout_stub’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:182:9: danger: dereference of NULL ‘test’
# 180| ee_len = ext4_ext_get_actual_len(ex);
# 181|
# 182|-> KUNIT_EXPECT_EQ_MSG(test, 1, ee_block >= EXT_DATA_LBLK, "ee_block=%d",
# 183| ee_block);
# 184| KUNIT_EXPECT_EQ(test, 1,
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:202:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’
# 200| struct kunit *test = kunit_get_current_test();
# 201|
# 202|-> kunit_log(KERN_ALERT, test,
# 203| "%s: lblk=%u pblk=%llu len=%u", __func__, lblk, pblk, len);
# 204| KUNIT_EXPECT_EQ(test, 1, lblk >= EXT_DATA_LBLK);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:326:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:318:12: enter_function: entry to ‘check_buffer’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:322:15: call_function: inlined call to ‘memchr_inv’ from ‘check_buffer’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:323:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:326:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:326:9: danger: dereference of NULL ‘kunit_get_current_test()’
# 324| return 0;
# 325|
# 326|-> kunit_log(KERN_ALERT, kunit_get_current_test(),
# 327| "# %s: wrong char found at offset %u (expected:%d got:%d)", __func__,
# 328| (u32)((char *)ret - buf), c, *((char *)ret));
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/readpage.c:360:62: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘first_block’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/readpage.c:416:6: enter_function: entry to ‘ext4_readahead’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/readpage.c:430:9: call_function: calling ‘ext4_mpage_readpages’ from ‘ext4_readahead’
# 358| GFP_KERNEL);
# 359| ext4_set_bio_post_read_ctx(bio, inode, vi);
# 360|-> bio->bi_iter.bi_sector = first_block << (blkbits - 9);
# 361| bio->bi_end_io = mpage_end_io;
# 362| if (rac)
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3175:5: enter_function: entry to ‘f2fs_flush_nat_entries’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3197:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3200:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3208:18: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3226:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: danger: out-of-bounds read from byte 36 till byte 39 but ‘sets’ ends at byte 16
# 3225| */
# 3226| list_for_each_entry(set, &sets, set_list) {
# 3227|-> entry_count += set->entry_cnt;
# 3228| if (!enabled_nat_bits(sbi, cpc) &&
# 3229| __has_cursum_space(sbi, journal,
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3232:41: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3175:5: enter_function: entry to ‘f2fs_flush_nat_entries’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3197:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3200:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3208:18: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3226:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3232:41: danger: out-of-bounds read from byte 32 till byte 35 but ‘sets’ ends at byte 16
# 3230| entry_count, NAT_JOURNAL))
# 3231| continue;
# 3232|-> f2fs_ra_meta_pages(sbi, set->set, 1, META_NAT, true);
# 3233| }
# 3234| /* flush dirty nats in nat entry set */
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2092:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘biagp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2021:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2022:27: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2022:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2024:30: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2023:28: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2027:51: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2030:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2046:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2056:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2057:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2056:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2058:26: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2056:13: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2070:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2085:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2086:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2086:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2087:46: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2091:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2092:45: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2092:25: danger: dereference of NULL ‘biagp’
# 2090|
# 2091| if (bmp) {
# 2092|-> biagp->inofreefwd = iagp->inofreefwd;
# 2093| write_metapage(bmp);
# 2094| } else {
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2302:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘aiagp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1704:1: enter_function: entry to ‘diAllocAny’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1713:29: branch_true: following ‘true’ branch (when ‘ag <= maxag’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1714:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1716:22: call_function: calling ‘diAllocAG’ from ‘diAllocAny’
# 2300| if (iagp->nfreeexts == cpu_to_le32(1)) {
# 2301| if (fwd >= 0)
# 2302|-> aiagp->extfreeback = iagp->extfreeback;
# 2303|
# 2304| if (back >= 0)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2317:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘aiagp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1892:12: enter_function: entry to ‘diAllocExt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1918:20: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1923:41: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1929:20: branch_false: following ‘false’ branch (when ‘sword != 4’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1935:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1941:15: call_function: calling ‘diFindFree’ from ‘diAllocExt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1941:15: return_function: returning to ‘diAllocExt’ from ‘diFindFree’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1942:12: branch_false: following ‘false’ branch (when ‘rem != 32’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1948:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1952:14: call_function: calling ‘diNewExt’ from ‘diAllocExt’
# 2315| if (iagp->nfreeexts == cpu_to_le32(EXTSPERIAG)) {
# 2316| if (fwd >= 0)
# 2317|-> aiagp->extfreeback = cpu_to_le32(iagno);
# 2318|
# 2319| iagp->extfreefwd = cpu_to_le32(fwd);
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2330:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ciagp’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2170:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2177:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2185:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2188:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2261:12: branch_false: following ‘false’ branch (when ‘rc == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2267:15: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2272:21: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2300:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2300:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2315:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2328:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2329:20: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2329:20: branch_true: following ‘true’ branch (when ‘freei >= 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2330:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2330:25: danger: dereference of NULL ‘ciagp’
# 2328| if (iagp->nfreeinos == 0) {
# 2329| if (freei >= 0)
# 2330|-> ciagp->inofreeback = cpu_to_le32(iagno);
# 2331|
# 2332| iagp->inofreefwd =
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1491:15: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 1489| if (!refcount_dec_and_test(©->refcount))
# 1490| return;
# 1491|-> kfree(copy->cp_src);
# 1492| kfree(copy);
# 1493| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1501:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 1499| trace_nfsd_copy_async_cancel(copy);
# 1500| if (!test_and_set_bit(NFSD4_COPY_F_STOPPED, ©->cp_flags)) {
# 1501|-> kthread_stop(copy->copy_task);
# 1502| if (!test_bit(NFSD4_COPY_F_CB_ERROR, ©->cp_flags))
# 1503| copy->nfserr = nfs_ok;
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1502:22: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 1500| if (!test_and_set_bit(NFSD4_COPY_F_STOPPED, ©->cp_flags)) {
# 1501| kthread_stop(copy->copy_task);
# 1502|-> if (!test_bit(NFSD4_COPY_F_CB_ERROR, ©->cp_flags))
# 1503| copy->nfserr = nfs_ok;
# 1504| set_bit(NFSD4_COPY_F_COMPLETED, ©->cp_flags);
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1503:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 1501| kthread_stop(copy->copy_task);
# 1502| if (!test_bit(NFSD4_COPY_F_CB_ERROR, ©->cp_flags))
# 1503|-> copy->nfserr = nfs_ok;
# 1504| set_bit(NFSD4_COPY_F_COMPLETED, ©->cp_flags);
# 1505| }
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: danger: out-of-bounds read from byte -48 till byte -41 but ‘to_cancel’ starts at byte 0
# 1598|
# 1599| list_for_each_entry_safe(copy, tmp, &to_cancel, copies) {
# 1600|-> struct nfs4_client *clp = copy->cp_clp;
# 1601|
# 1602| list_del_init(©->copies);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2017:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 2015| static void release_copy_files(struct nfsd4_copy *copy)
# 2016| {
# 2017|-> if (copy->nf_src) {
# 2018| nfsd_file_put(copy->nf_src);
# 2019| copy->nf_src = NULL;
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2019:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 2017| if (copy->nf_src) {
# 2018| nfsd_file_put(copy->nf_src);
# 2019|-> copy->nf_src = NULL;
# 2020| }
# 2021| if (copy->nf_dst) {
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2021:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 2019| copy->nf_src = NULL;
# 2020| }
# 2021|-> if (copy->nf_dst) {
# 2022| nfsd_file_put(copy->nf_dst);
# 2023| copy->nf_dst = NULL;
Error: GCC_ANALYZER_WARNING (CWE-124):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2023:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’
# 2021| if (copy->nf_dst) {
# 2022| nfsd_file_put(copy->nf_dst);
# 2023|-> copy->nf_dst = NULL;
# 2024| }
# 2025| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:609:45: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘minor’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:569:12: branch_true: following ‘true’ branch (when ‘size != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:570:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:570:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:576:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:576:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:578:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:583:20: branch_false: following ‘false’ branch (when ‘len > 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:583:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:592:28: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:599:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:608:36: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:609:45: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:609:45: danger: use of uninitialized value ‘minor’ here
# 607| case 4:
# 608| if (*minorp == '.') {
# 609|-> if (nfsd_minorversion(nn, minor, cmd) < 0)
# 610| return -EINVAL;
# 611| } else if ((cmd == NFSD_SET) != nfsd_vers(nn, num, NFSD_TEST)) {
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1177:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1203:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0
# 1207| struct dentry *dentry;
# 1208|
# 1209|-> if (name_is_dot_dotdot(p->name, p->len)) {
# 1210| continue;
# 1211| } else if (incompat) {
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1275:49: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1256:5: enter_function: entry to ‘ovl_indexdir_cleanup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1270:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_indexdir_cleanup’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1270:15: return_function: returning to ‘ovl_indexdir_cleanup’ from ‘ovl_dir_read’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1271:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1274:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1274:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1275:49: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1275:49: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0
# 1273|
# 1274| list_for_each_entry(p, &list, l_node) {
# 1275|-> if (name_is_dot_dotdot(p->name, p->len))
# 1276| continue;
# 1277| index = ovl_lookup_upper_unlocked(ofs, p->name, indexdir, p->len);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:433:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:396:1: enter_function: entry to ‘xfs_attr_rmtval_get’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:417:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:418:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:443:28: branch_false: following ‘false’ branch (when ‘error != -61’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: call_function: calling ‘xfs_attr_rmtval_copyout’ from ‘xfs_attr_rmtval_get’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: return_function: returning to ‘xfs_attr_rmtval_get’ from ‘xfs_attr_rmtval_copyout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:451:28: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:433:35: danger: out-of-bounds read from byte 48 till byte 55 but ‘map’ ends at byte 32
# 431| (map[i].br_startblock != HOLESTARTBLOCK));
# 432| dblkno = XFS_FSB_TO_DADDR(mp, map[i].br_startblock);
# 433|-> dblkcnt = XFS_FSB_TO_BB(mp, map[i].br_blockcount);
# 434| error = xfs_buf_read(mp->m_ddev_targp, dblkno, dblkcnt,
# 435| 0, &bp, &xfs_attr3_rmt_buf_ops);
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:396:1: enter_function: entry to ‘xfs_attr_rmtval_get’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:417:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:418:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:443:28: branch_false: following ‘false’ branch (when ‘error != -61’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: call_function: calling ‘xfs_attr_rmtval_copyout’ from ‘xfs_attr_rmtval_get’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: return_function: returning to ‘xfs_attr_rmtval_get’ from ‘xfs_attr_rmtval_copyout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:451:28: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:443:28: branch_false: following ‘false’ branch (when ‘error != -61’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: call_function: calling ‘xfs_attr_rmtval_copyout’ from ‘xfs_attr_rmtval_get’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: return_function: returning to ‘xfs_attr_rmtval_get’ from ‘xfs_attr_rmtval_copyout’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:451:28: branch_false: following ‘false’ branch (when ‘error == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: danger: out-of-bounds read from byte 48 till byte 55 but ‘map’ ends at byte 32
# 453|
# 454| /* roll attribute extent map forwards */
# 455|-> lblkno += map[i].br_blockcount;
# 456| blkcnt -= map[i].br_blockcount;
# 457| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/crypto/utils.h:26:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(long unsigned int *)d’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:693:19: enter_function: entry to ‘libaesgcm_init’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:695:25: branch_true: following ‘true’ branch (when ‘i != 13’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:696:20: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:701:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:709:54: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:707:22: call_function: calling ‘aesgcm_decrypt’ from ‘libaesgcm_init’
# 24|
# 25| while (size > 0) {
# 26|-> l = get_unaligned(d) ^ get_unaligned(s++);
# 27| put_unaligned(l, d++);
# 28| size -= sizeof(unsigned long);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/bitmap.h:835:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘values[0]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/amplifiers/adl8113.c:47:12: enter_function: entry to ‘adl8113_set_path’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/amplifiers/adl8113.c:59:17: call_function: inlined call to ‘bitmap_write’ from ‘adl8113_set_path’
# 833| index = BIT_WORD(start);
# 834|
# 835|-> map[index] &= (fit ? (~(mask << offset)) : ~BITMAP_FIRST_WORD_MASK(start));
# 836| map[index] |= value << offset;
# 837| if (fit)
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/blk-integrity.h:85:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bi’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:571:28: enter_function: entry to ‘virtscsi_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:582:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:585:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:585:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:587:9: call_function: inlined call to ‘arch_static_branch’ from ‘virtscsi_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:592:9: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:32: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:13: call_function: calling ‘virtio_has_feature’ from ‘virtscsi_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:13: return_function: returning to ‘virtscsi_queuecommand’ from ‘virtio_has_feature’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:596:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:596:17: call_function: calling ‘virtio_scsi_init_hdr_pi’ from ‘virtscsi_queuecommand’
# 83| unsigned int sectors)
# 84| {
# 85|-> return sectors >> (bi->interval_exp - 9);
# 86| }
# 87|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/can/can-ml.h:101:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/vcan.c:133:13: enter_function: entry to ‘vcan_set_cap_info’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/vcan.c:143:9: call_function: inlined call to ‘can_set_cap’ from ‘vcan_set_cap_info’
# 99| struct can_ml_priv *can_ml = can_get_ml_priv(dev);
# 100|
# 101|-> can_ml->can_cap = cap;
# 102| }
# 103|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/dma-fence.h:422:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘fence’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7497:19: enter_function: entry to ‘amdgpu_device_enforce_isolation’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7511:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7520:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7535:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7542:22: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7542:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7543:31: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7544:30: call_function: calling ‘dma_fence_is_signaled’ from ‘amdgpu_device_enforce_isolation’
# 420| dma_fence_test_signaled_flag(struct dma_fence *fence)
# 421| {
# 422|-> return test_bit(DMA_FENCE_FLAG_SIGNALED_BIT, &fence->flags);
# 423| }
# 424|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/err.h:78:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘xpagemap’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_svm.c:1871:13: call_function: inlined call to ‘IS_ERR’ from ‘xe_svm_get_pagemaps’
# 76| static inline bool __must_check IS_ERR(__force const void *ptr)
# 77| {
# 78|-> return IS_ERR_VALUE((unsigned long)ptr);
# 79| }
# 80|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fortify-string.h:220:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘engines[127]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c:367:16: enter_function: entry to ‘sched_group_engines_read’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c:395:67: call_function: inlined call to ‘__fortify_strlen’ from ‘sched_group_engines_read’
# 218| {
# 219| const size_t p_size = __member_size(p);
# 220|-> const size_t p_len = __compiletime_strlen(p);
# 221| size_t ret;
# 222|
Error: CLANG_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/sockex2_kern.c:7: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/uapi/linux/if_tunnel.h:7: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/ip.h:16: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/skbuff.h:17: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/bvec.h:10: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/highmem.h:5: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2429:2: warning: declaration does not declare anything [-Wmissing-declarations]
# 2429 | struct __filename_head;
# | ^~~~~~~~~~~~~~~~~~~~~~
# 2427| #define EMBEDDED_NAME_MAX (192 - sizeof(struct __filename_head))
# 2428| struct filename {
# 2429|-> struct __filename_head;
# 2430| const char iname[EMBEDDED_NAME_MAX];
# 2431| };
Error: COMPILER_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2429:31: warning[warning]: declaration does not declare anything
# 2427| #define EMBEDDED_NAME_MAX (192 - sizeof(struct __filename_head))
# 2428| struct filename {
# 2429|-> struct __filename_head;
# 2430| const char iname[EMBEDDED_NAME_MAX];
# 2431| };
Error: COMPILER_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2433:1: error[error]: static assertion failed: "sizeof(struct filename) % 64 == 0"
# 2431| };
# 2432| static_assert(offsetof(struct filename, iname) % sizeof(long) == 0);
# 2433|-> static_assert(sizeof(struct filename) % 64 == 0);
# 2434|
# 2435| static inline struct mnt_idmap *file_mnt_idmap(const struct file *file)
Error: CLANG_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2433:15: error: static assertion failed due to requirement 'sizeof(struct filename) % 64 == 0': sizeof(struct filename) % 64 == 0
# 2433 | static_assert(sizeof(struct filename) % 64 == 0);
# | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 79 | #define static_assert(expr, ...) __static_assert(expr, ##__VA_ARGS__, #expr)
# | ^~~~
# 80 | #define __static_assert(expr, msg, ...) _Static_assert(expr, msg)
# | ^~~~
# 2433 | static_assert(sizeof(struct filename) % 64 == 0);
# | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~
# 79 | #define static_assert(expr, ...) __static_assert(expr, ##__VA_ARGS__, #expr)
# | ^~~~
# 80 | #define __static_assert(expr, msg, ...) _Static_assert(expr, msg)
# | ^~~~
# 2431| };
# 2432| static_assert(offsetof(struct filename, iname) % sizeof(long) == 0);
# 2433|-> static_assert(sizeof(struct filename) % 64 == 0);
# 2434|
# 2435| static inline struct mnt_idmap *file_mnt_idmap(const struct file *file)
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2892:23: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1177:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1203:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:21: call_function: calling ‘name_is_dot_dotdot’ from ‘ovl_workdir_cleanup_recurse’
# 2890| static inline bool name_is_dot_dotdot(const char *name, size_t len)
# 2891| {
# 2892|-> return len && unlikely(name[0] == '.') &&
# 2893| (len == 1 || (len == 2 && name[1] == '.'));
# 2894| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2892:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*name’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1177:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1203:12: branch_false: following ‘false’ branch (when ‘err == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:21: call_function: calling ‘name_is_dot_dotdot’ from ‘ovl_workdir_cleanup_recurse’
# 2890| static inline bool name_is_dot_dotdot(const char *name, size_t len)
# 2891| {
# 2892|-> return len && unlikely(name[0] == '.') &&
# 2893| (len == 1 || (len == 2 && name[1] == '.'));
# 2894| }
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/list.h:381:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pos’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2445:13: enter_function: entry to ‘disconnect’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2450:12: branch_false: following ‘false’ branch (when ‘dcb’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2460:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2461:9: release_memory: ‘*acb.active_dcb’ is NULL
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2466:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2467:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2468:17: call_function: calling ‘waiting_process_next’ from ‘disconnect’
# 379| static inline int list_empty(const struct list_head *head)
# 380| {
# 381|-> return READ_ONCE(head->next) == head;
# 382| }
# 383|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/list.h:381:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘queue’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1767:12: enter_function: entry to ‘nvmet_rdma_cm_handler’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1773:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1776:9: call_function: inlined call to ‘arch_static_branch’ from ‘nvmet_rdma_cm_handler’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1797:17: call_function: calling ‘nvmet_rdma_queue_disconnect’ from ‘nvmet_rdma_cm_handler’
# 379| static inline int list_empty(const struct list_head *head)
# 380| {
# 381|-> return READ_ONCE(head->next) == head;
# 382| }
# 383|
Error: COMPILER_WARNING (CWE-1164):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/rh_flags.h:31:13: warning[-Wunused-function]: ‘rh_print_flags’ defined but not used
# 31 | static void rh_print_flags(void) { }
# | ^~~~~~~~~~~~~~
# 29| })
# 30| #else
# 31|-> static void rh_print_flags(void) { }
# 32| static void rh_add_flag(const char *flag_name) { }
# 33| #endif
Error: COMPILER_WARNING (CWE-1164):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/module/main.c:68: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/rh_flags.h:32:13: warning[-Wunused-function]: ‘rh_add_flag’ defined but not used
# 32 | static void rh_add_flag(const char *flag_name) { }
# | ^~~~~~~~~~~
# 30| #else
# 31| static void rh_print_flags(void) { }
# 32|-> static void rh_add_flag(const char *flag_name) { }
# 33| #endif
# 34| #endif
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/unaligned.h:18:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(short unsigned int *)(®_val[0])’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/bluetooth/btrtl.c:1359:5: enter_function: entry to ‘btrtl_setup_realtek’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/bluetooth/btrtl.c:1364:21: call_function: calling ‘btrtl_initialize’ from ‘btrtl_setup_realtek’
# 16| static inline u16 get_unaligned_le16(const void *p)
# 17| {
# 18|-> return le16_to_cpu(__get_unaligned_t(__le16, p));
# 19| }
# 20|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/unaligned.h:73:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ct’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:31:16: enter_function: entry to ‘fc_elsct_send’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:43:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: call_function: calling ‘fc_ct_fill’ from ‘fc_elsct_send’
# 71| static inline void put_unaligned_be64(u64 val, void *p)
# 72| {
# 73|-> __put_unaligned_t(__be64, cpu_to_be64(val), p);
# 74| }
# 75|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/scsi/fc_frame.h:33:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ct’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:31:16: enter_function: entry to ‘fc_elsct_send’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:43:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: call_function: calling ‘fc_ct_fill’ from ‘fc_elsct_send’
# 31| static inline void hton24(u8 *p, u32 v)
# 32| {
# 33|-> p[0] = (v >> 16) & 0xff;
# 34| p[1] = (v >> 8) & 0xff;
# 35| p[2] = v & 0xff;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/scsi/scsi_transport_fc.h:788:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1857:21: enter_function: entry to ‘fc_queuecommand’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1861:34: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1866:16: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1866:16: call_function: calling ‘fc_remote_port_chkready’ from ‘fc_queuecommand’
# 786| int result;
# 787|
# 788|-> switch (rport->port_state) {
# 789| case FC_PORTSTATE_ONLINE:
# 790| case FC_PORTSTATE_MARGINAL:
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/tw.h:41:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:126:13: enter_function: entry to ‘io_flush_timeouts’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:135:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:139:21: call_function: inlined call to ‘io_is_timeout_noseq’ from ‘io_flush_timeouts’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:158:9: call_function: calling ‘io_flush_killed_timeouts’ from ‘io_flush_timeouts’
# 39| static inline void __io_req_task_work_add(struct io_kiocb *req, unsigned flags)
# 40| {
# 41|-> if (req->ctx->flags & IORING_SETUP_DEFER_TASKRUN)
# 42| io_req_local_work_add(req, flags);
# 43| else
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:393:53: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘skbs[i]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:290:12: enter_function: entry to ‘cpu_map_kthread_run’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:304:16: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:305:41: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:314:21: call_function: inlined call to ‘__ptr_ring_empty’ from ‘cpu_map_kthread_run’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:314:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:315:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:317:29: call_function: inlined call to ‘__ptr_ring_empty’ from ‘cpu_map_kthread_run’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:317:28: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:318:33: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:334:21: call_function: calling ‘__ptr_ring_consume_batched’ from ‘cpu_map_kthread_run’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:334:21: return_function: returning to ‘cpu_map_kthread_run’ from ‘__ptr_ring_consume_batched’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:336:29: branch_false: following ‘false’ branch (when ‘i >= n’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:358:17: call_function: inlined call to ‘local_bh_disable’ from ‘cpu_map_kthread_run’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:362:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:363:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:389:17: call_function: calling ‘trace_xdp_cpumap_kthread’ from ‘cpu_map_kthread_run’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:389:17: return_function: returning to ‘cpu_map_kthread_run’ from ‘trace_xdp_cpumap_kthread’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:392:29: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:393:53: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:393:53: danger: use of uninitialized value ‘skbs[i]’ here
# 391|
# 392| for (i = 0; i < ret.xdp_n + ret.skb_n; i++)
# 393|-> gro_receive_skb(&rcpu->gro, skbs[i]);
# 394|
# 395| /* Flush either every 64 packets or in case of empty ring */
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:274:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&*(struct __sha3_ctx *)shake_ctx.state.<Uae60>.bytes[squeeze_offset]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:371:6: enter_function: entry to ‘shake256’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:376:9: call_function: inlined call to ‘shake_update’ from ‘shake256’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:376:9: call_function: inlined call to ‘shake_update’ from ‘shake256’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:377:9: call_function: calling ‘shake_squeeze’ from ‘shake256’
# 272| size_t copy = min(out_len, block_size - squeeze_offset);
# 273|
# 274|-> memcpy(out, &ctx->state.bytes[squeeze_offset], copy);
# 275| out += copy;
# 276| out_len -= copy;
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned char*)&mp_opt.<U5e60>.<U53c0>)[3]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:806:21: enter_function: entry to ‘subflow_syn_recv_sock’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:838:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:19: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:858:1: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:862:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:871:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:880:39: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:882:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:883:57: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:884:28: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:887:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: danger: use of uninitialized value ‘((unsigned char*)&mp_opt.<U5e60>.<U53c0>)[3]’ here
# 888| owner = mptcp_sk(ctx->conn);
# 889|
# 890|-> if (mp_opt.deny_join_id0)
# 891| WRITE_ONCE(owner->pm.remote_deny_join_id0, true);
# 892|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned char*)&mp_opt.<Uab40>.<Ua0a0>)[3]’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:806:21: enter_function: entry to ‘subflow_syn_recv_sock’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:838:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:20: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:19: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:858:1: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:862:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:871:20: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:880:39: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:882:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:883:57: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:884:28: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:887:25: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: danger: use of uninitialized value ‘((unsigned char*)&mp_opt.<Uab40>.<Ua0a0>)[3]’ here
# 888| owner = mptcp_sk(ctx->conn);
# 889|
# 890|-> if (mp_opt.deny_join_id0)
# 891| WRITE_ONCE(owner->pm.remote_deny_join_id0, true);
# 892|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:1306:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*udest.port’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3906:12: enter_function: entry to ‘ip_vs_genl_set_cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3920:12: branch_false: following ‘false’ branch (when ‘cmd != 17’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3923:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3923:19: branch_false: following ‘false’ branch (when ‘cmd != 12’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3926:19: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3938:15: call_function: calling ‘ip_vs_genl_parse_service’ from ‘ip_vs_genl_set_cmd’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3938:15: return_function: returning to ‘ip_vs_genl_set_cmd’ from ‘ip_vs_genl_parse_service’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3941:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3945:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3945:12: branch_false: following ‘false’ branch (when ‘cmd == 1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3999:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:4020:23: call_function: calling ‘ip_vs_del_dest’ from ‘ip_vs_genl_set_cmd’
# 1304| {
# 1305| struct ip_vs_dest *dest;
# 1306|-> __be16 dport = udest->port;
# 1307|
# 1308| /* We use function that requires RCU lock */
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1655:44: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<U9140>.n’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1832:13: enter_function: entry to ‘nft_pipapo_commit’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1840:13: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’
# 1653| for (b = 0; b < NFT_PIPAPO_BUCKETS(f->bb); b++) {
# 1654| bitmap_cut(pos, pos, rulemap[i].to,
# 1655|-> rulemap[i].n,
# 1656| f->bsize * BITS_PER_LONG);
# 1657|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1662:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<U9140>.n’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1832:13: enter_function: entry to ‘nft_pipapo_commit’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1840:13: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’
# 1660| }
# 1661|
# 1662|-> pipapo_unmap(f->mt, f->rules, rulemap[i].to, rulemap[i].n,
# 1663| last ? 0 : rulemap[i + 1].n, last);
# 1664| if (pipapo_resize(f, f->rules, f->rules - rulemap[i].n)) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1662:62: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<U9140>.n’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1832:13: enter_function: entry to ‘nft_pipapo_commit’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1840:13: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’
# 1660| }
# 1661|
# 1662|-> pipapo_unmap(f->mt, f->rules, rulemap[i].to, rulemap[i].n,
# 1663| last ? 0 : rulemap[i + 1].n, last);
# 1664| if (pipapo_resize(f, f->rules, f->rules - rulemap[i].n)) {
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.h:245:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*peer.common.<U4320>.type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:442:13: enter_function: entry to ‘smcd_cdc_rx_tsklet’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:449:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:456:9: call_function: calling ‘smc_cdc_msg_recv’ from ‘smcd_cdc_rx_tsklet’
# 243| struct smc_connection *conn)
# 244| {
# 245|-> local->common.type = peer->common.type;
# 246| local->len = peer->len;
# 247| local->seqno = ntohs(peer->seqno);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.h:245:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*peer.common.<Uca00>.type’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:442:13: enter_function: entry to ‘smcd_cdc_rx_tsklet’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:449:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:456:9: call_function: calling ‘smc_cdc_msg_recv’ from ‘smcd_cdc_rx_tsklet’
# 243| struct smc_connection *conn)
# 244| {
# 245|-> local->common.type = peer->common.type;
# 246| local->len = peer->len;
# 247| local->seqno = ntohs(peer->seqno);
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_clc.c:1201:52: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘gle.gid_cnt’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_clc.c:1213:5: enter_function: entry to ‘smc_clc_send_confirm’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_clc.c:1223:15: call_function: calling ‘smc_clc_send_confirm_accept’ from ‘smc_clc_send_confirm’
# 1199| vec[i++].iov_len = sizeof(gle);
# 1200| vec[i].iov_base = &ini->smcrv2.gidlist.list;
# 1201|-> vec[i++].iov_len = gle.gid_cnt *
# 1202| sizeof(gle.gid[0]);
# 1203| }
Error: GCC_ANALYZER_WARNING (CWE-126):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1152:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1559:13: enter_function: entry to ‘smc_llc_add_link_work’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1564:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1570:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1570:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1571:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1571:17: call_function: calling ‘smc_llc_process_cli_add_link’ from ‘smc_llc_add_link_work’
# 1150| llc->hd.common.llc_type = SMC_LLC_REQ_ADD_LINK;
# 1151| for (i = 0; i < gidlist.len; i++)
# 1152|-> memcpy(llc->gid[i], gidlist.list[i], sizeof(gidlist.list[0]));
# 1153| llc->gid_cnt = gidlist.len;
# 1154| len = sizeof(*llc) + (gidlist.len * sizeof(gidlist.list[0]));
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:61:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:147:5: enter_function: entry to ‘xprt_setup_bc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:166:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: call_function: calling ‘xprt_alloc_bc_req’ from ‘xprt_setup_bc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: return_function: returning to ‘xprt_setup_bc’ from ‘xprt_alloc_bc_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:169:20: branch_true: following ‘true’ branch (when ‘req’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:170:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:196:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:197:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:201:17: call_function: calling ‘xprt_free_allocation’ from ‘xprt_setup_bc’
# 59|
# 60| dprintk("RPC: free allocations for req= %p\n", req);
# 61|-> WARN_ON_ONCE(test_bit(RPC_BC_PA_IN_USE, &req->rq_bc_pa_state));
# 62| xbufp = &req->rq_rcv_buf;
# 63| free_page((unsigned long)xbufp->head[0].iov_base);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:63:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:147:5: enter_function: entry to ‘xprt_setup_bc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:166:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: call_function: calling ‘xprt_alloc_bc_req’ from ‘xprt_setup_bc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: return_function: returning to ‘xprt_setup_bc’ from ‘xprt_alloc_bc_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:169:20: branch_true: following ‘true’ branch (when ‘req’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:170:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:196:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:197:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:201:17: call_function: calling ‘xprt_free_allocation’ from ‘xprt_setup_bc’
# 61| WARN_ON_ONCE(test_bit(RPC_BC_PA_IN_USE, &req->rq_bc_pa_state));
# 62| xbufp = &req->rq_rcv_buf;
# 63|-> free_page((unsigned long)xbufp->head[0].iov_base);
# 64| xbufp = &req->rq_snd_buf;
# 65| free_page((unsigned long)xbufp->head[0].iov_base);
Error: GCC_ANALYZER_WARNING (CWE-127):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:65:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:147:5: enter_function: entry to ‘xprt_setup_bc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:166:21: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: call_function: calling ‘xprt_alloc_bc_req’ from ‘xprt_setup_bc’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: return_function: returning to ‘xprt_setup_bc’ from ‘xprt_alloc_bc_req’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:169:20: branch_true: following ‘true’ branch (when ‘req’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:170:25: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:196:16: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:197:23: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:201:17: call_function: calling ‘xprt_free_allocation’ from ‘xprt_setup_bc’
# 63| free_page((unsigned long)xbufp->head[0].iov_base);
# 64| xbufp = &req->rq_snd_buf;
# 65|-> free_page((unsigned long)xbufp->head[0].iov_base);
# 66| kfree(req);
# 67| }
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2857:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘new_mode’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2838:12: enter_function: entry to ‘vsock_net_child_mode_string’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2849:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_true: following ‘true’ branch (when ‘write != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2856:21: call_function: inlined call to ‘vsock_net_mode’ from ‘vsock_net_child_mode_string’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2856:20: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2857:21: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2857:21: danger: use of uninitialized value ‘new_mode’ here
# 2855| */
# 2856| if (vsock_net_mode(net) == VSOCK_NET_MODE_LOCAL &&
# 2857|-> new_mode == VSOCK_NET_MODE_GLOBAL)
# 2858| return -EPERM;
# 2859|
Error: GCC_ANALYZER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2860:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘new_mode’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2838:12: enter_function: entry to ‘vsock_net_child_mode_string’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2849:12: branch_false: following ‘false’ branch (when ‘ret == 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_true: following ‘true’ branch (when ‘write != 0’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2856:21: call_function: inlined call to ‘vsock_net_mode’ from ‘vsock_net_child_mode_string’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2860:22: danger: use of uninitialized value ‘new_mode’ here
# 2858| return -EPERM;
# 2859|
# 2860|-> if (!vsock_net_set_child_mode(net, new_mode))
# 2861| return -EBUSY;
# 2862| }
Error: CLANG_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/lwt_len_hist.bpf.c:13: included_from: Included from here.
kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:41231:2: warning: declaration does not declare anything [-Wmissing-declarations]
# 41231 | struct aes_enckey;
# | ^~~~~~~~~~~~~~~~~
#41229|
#41230| struct aes_key {
#41231|-> struct aes_enckey;
#41232| union aes_invkey_arch inv_k;
#41233| };
Error: COMPILER_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:41231:26: warning[warning]: declaration does not declare anything
#41229|
#41230| struct aes_key {
#41231|-> struct aes_enckey;
#41232| union aes_invkey_arch inv_k;
#41233| };
Error: CLANG_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:83865:2: warning: declaration does not declare anything [-Wmissing-declarations]
# 83865 | struct __filename_head;
# | ^~~~~~~~~~~~~~~~~~~~~~
#83863|
#83864| struct filename {
#83865|-> struct __filename_head;
#83866| const char iname[168];
#83867| };
Error: COMPILER_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:83865:31: warning[warning]: declaration does not declare anything
#83863|
#83864| struct filename {
#83865|-> struct __filename_head;
#83866| const char iname[168];
#83867| };
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs-amp-lib-test.c:2318:45: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’
# 2316| {
# 2317| struct kunit *test = kunit_get_current_test();
# 2318|-> const struct cs_amp_lib_test_param *param = test->param_value;
# 2319| unsigned int len;
# 2320|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs35l56-test.c:155:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’
# 153| {
# 154| struct kunit *test = kunit_get_current_test();
# 155|-> struct cs35l56_test_priv *priv = test->priv;
# 156| unsigned int len;
# 157|
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs35l56-test.c:377:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’
# 375| {
# 376| struct kunit *test = kunit_get_current_test();
# 377|-> struct cs35l56_test_priv *priv = test->priv;
# 378|
# 379| priv->read_onchip_spkid_called = true;
Error: GCC_ANALYZER_WARNING (CWE-476):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs35l56-test.c:387:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’
# 385| {
# 386| struct kunit *test = kunit_get_current_test();
# 387|-> struct cs35l56_test_priv *priv = test->priv;
# 388|
# 389| priv->configure_onchip_spkid_pads_called = true;
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:958:17: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*cur.<Uea00>.pkey)’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:941:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:945:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:957:9: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:957:9: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:958:39: acquire_memory: allocated here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:958:17: danger: ‘strdup(*cur.<Uea00>.pkey)’ leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
# 956| i = 1;
# 957| hashmap__for_each_entry(ctx->ids, cur, bkt)
# 958|-> expr__add_id_val(ctx, strdup(cur->pkey), i++);
# 959|
# 960| hashmap__for_each_entry(ctx->ids, cur, bkt) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:975:25: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*cur.<Uea00>.pkey)’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:941:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:945:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:968:12: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:968:12: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:974:17: branch_true: following ‘true’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:974:17: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:975:47: acquire_memory: allocated here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:975:25: danger: ‘strdup(*cur.<Uea00>.pkey)’ leaks here; was allocated at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8)
# 973| i = 1024;
# 974| hashmap__for_each_entry(ctx->ids, cur, bkt)
# 975|-> expr__add_id_val(ctx, strdup(cur->pkey), i--);
# 976| if (expr__parse(&result, ctx, str)) {
# 977| pr_err("expr__parse failed for %s\n", metric_name);
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:69:24: warning[-Wanalyzer-malloc-leak]: leak of ‘s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:157:17: enter_function: entry to ‘strlist__new’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:161:12: branch_true: following ‘true’ branch (when ‘slist’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_false: following ‘false’ branch (when ‘config’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:170:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:20: branch_true: following ‘true’ branch (when ‘list’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: call_function: calling ‘strlist__parse_list’ from ‘strlist__new’
# 67|
# 68| if (fp == NULL)
# 69|-> return -errno;
# 70|
# 71| while (fgets(entry, sizeof(entry), fp) != NULL) {
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:149:17: warning[-Wanalyzer-malloc-leak]: leak of ‘s’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:157:17: enter_function: entry to ‘strlist__new’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:161:12: branch_true: following ‘true’ branch (when ‘slist’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_false: following ‘false’ branch (when ‘config’ is NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:170:17: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:20: branch_true: following ‘true’ branch (when ‘list’ is non-NULL)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: branch_true: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: call_function: calling ‘strlist__parse_list’ from ‘strlist__new’
# 147| if (err != 0)
# 148| return err;
# 149|-> s = sep + 1;
# 150| }
# 151|
Error: GCC_ANALYZER_WARNING (CWE-688):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/../../../tools/net/ynl/generated/rt-link-user.h:5069:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)((unsigned int)strlen(ifname) + 1))’ where non-null expected
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tun.c:774:1: enter_function: entry to ‘tun_vnet_udptnl_teardown’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tun.c:781:15: call_function: calling ‘ip_link_del’ from ‘tun_vnet_udptnl_teardown’
# 5067| req->_len.ifname = strlen(ifname);
# 5068| req->ifname = malloc(req->_len.ifname + 1);
# 5069|-> memcpy(req->ifname, ifname, req->_len.ifname);
# 5070| req->ifname[req->_len.ifname] = 0;
# 5071| }
Error: COMPILER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:458:35: warning[-Wmaybe-uninitialized]: ‘ver_cap’ may be used uninitialized
# 458 | if (devid >= 0 && ver_ena != ver_cap) {
# | ~~~~~~~~^~~~~~~~~~
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:413:24: note: ‘ver_cap’ was declared here
# 413 | __u32 ver_ena, ver_cap;
# | ^~~~~~~
# 456| opts.ifindex);
# 457|
# 458|-> if (devid >= 0 && ver_ena != ver_cap) {
# 459| ret = psp_dev_set_ena(ys, devid, ver_cap);
# 460| if (ret)
Error: COMPILER_WARNING (CWE-457):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c: scope_hint: In function ‘main’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:458:35: warning[-Wmaybe-uninitialized]: ‘ver_ena’ may be used uninitialized
# 458 | if (devid >= 0 && ver_ena != ver_cap) {
# | ~~~~~~~~^~~~~~~~~~
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:413:15: note: ‘ver_ena’ was declared here
# 413 | __u32 ver_ena, ver_cap;
# | ^~~~~~~
# 456| opts.ifindex);
# 457|
# 458|-> if (devid >= 0 && ver_ena != ver_cap) {
# 459| ret = psp_dev_set_ena(ys, devid, ver_cap);
# 460| if (ret)
Error: COMPILER_WARNING (CWE-393):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/landlock/tsync_test.c: scope_hint: In function ‘idle’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/landlock/tsync_test.c:63:1: warning[-Wreturn-type]: no return statement in function returning non-void
# 63 | }
# | ^
# 61|
# 62| pthread_cleanup_pop(1);
# 63|-> }
# 64|
# 65| TEST(multi_threaded_success)
Error: COMPILER_WARNING (CWE-252):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/mm/memory-failure.c: scope_hint: In function ‘prepare_file’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/mm/memory-failure.c:258:17: warning[-Wunused-result]: ignoring return value of ‘ftruncate’ declared with attribute ‘warn_unused_result’
# 258 | ftruncate(fd, size);
# | ^~~~~~~~~~~~~~~~~~~
# 256| if (fd >= 0) {
# 257| unlink(fname);
# 258|-> ftruncate(fd, size);
# 259| }
# 260| return fd;
Error: COMPILER_WARNING (CWE-563):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/netfilter/nf_queue.c: scope_hint: In function ‘mainloop’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/netfilter/nf_queue.c:337:33: warning[-Wunused-value]: statement with no effect
# 337 | for (ooo_count; ooo_count >= 0; ooo_count--) {
# | ^~~
# 335| ooo_ids[ooo_count] = id;
# 336| if (ooo_count >= 15) {
# 337|-> for (ooo_count; ooo_count >= 0; ooo_count--) {
# 338| nlh = nfq_build_verdict(buf, ooo_ids[ooo_count],
# 339| opts.queue_num, opts.verdict);
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(cfg_outfile, "w")’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_resource: opened here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was opened at [(1)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/0)
# 82| error(1, errno, "getsockopt(SO_INCOMING_NAPI_ID)");
# 83|
# 84|-> if (read(connfd, buf, 64) < 0)
# 85| error(1, errno, "read()");
# 86|
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(cfg_outfile, "w")’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_memory: allocated here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/0)
# 82| error(1, errno, "getsockopt(SO_INCOMING_NAPI_ID)");
# 83|
# 84|-> if (read(connfd, buf, 64) < 0)
# 85| error(1, errno, "read()");
# 86|
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(cfg_outfile, "w")’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_resource: opened here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was opened at [(1)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/0)
# 85| error(1, errno, "read()");
# 86|
# 87|-> if (fprintf(outfile, "%d\n", opt) < 0)
# 88| error(1, errno, "fprintf()");
# 89|
Error: GCC_ANALYZER_WARNING (CWE-401):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(cfg_outfile, "w")’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_memory: allocated here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/0)
# 85| error(1, errno, "read()");
# 86|
# 87|-> if (fprintf(outfile, "%d\n", opt) < 0)
# 88| error(1, errno, "fprintf()");
# 89|
Error: COMPILER_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/thermal/tmon/tmon.c: scope_hint: In function ‘main’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/thermal/tmon/tmon.c:233:25: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 20 equals destination size
# 233 | strncpy(ctrl_cdev, optarg, CDEV_NAME_SIZE);
# | ^
# 231| case 'c':
# 232| no_control = 0;
# 233|-> strncpy(ctrl_cdev, optarg, CDEV_NAME_SIZE);
# 234| break;
# 235| case 'd':
Error: COMPILER_WARNING:
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/timerlat.bpf.c:137:9: warning[warning]: ‘bpf_tail_call’ is static but used in inline function ‘set_stop_tracing’ which is not static
# 135| * Otherwise, just silently fail.
# 136| */
# 137|-> bpf_tail_call(tp_args, &bpf_action, 0);
# 138| }
# 139|
Error: GCC_ANALYZER_WARNING (CWE-775):
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:836:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&cgroup_procs, 2)’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:806:12: enter_function: entry to ‘open_cgroup_procs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:813:18: call_function: calling ‘find_mount’ from ‘open_cgroup_procs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:813:18: return_function: returning to ‘open_cgroup_procs’ from ‘find_mount’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:814:12: branch_false: following ‘false’ branch...
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:819:12: branch_false: ...to here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:833:9: call_function: calling ‘debug_msg’ from ‘open_cgroup_procs’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:833:9: return_function: returning to ‘open_cgroup_procs’ from ‘debug_msg’
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:835:17: acquire_resource: opened here
kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:836:12: danger: ‘open(&cgroup_procs, 2)’ leaks here; was opened at [(13)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/12)
# 834|
# 835| cg_fd = open(cgroup_procs, O_RDWR);
# 836|-> if (cg_fd < 0)
# 837| return -1;
# 838|