Error: SHELLCHECK_WARNING (CWE-563): [#def1] /usr/libexec/kselftests/drivers/net/team/non_ether_header_ops.sh:36:1: warning[SC2034]: i appears unused. Verify use (or export if used externally). # 34| # dev_hard_header() on t0, exercising the inherited header_ops path. # 35| ip -n "$ns1" -6 addr add 2001:db8:1::1/64 dev t0 nodad # 36|-> for i in $(seq 1 20); do # 37| ip netns exec "$ns1" ping -6 -I t0 ff02::1 -c1 -W1 &>/dev/null || true # 38| done Error: SHELLCHECK_WARNING (CWE-571): [#def2] /usr/libexec/kselftests/mm/charge_reserved_hugetlb.sh:126:11: warning[SC2155]: Declare and assign separately to avoid masking return values. # 124| # 125| for ((i=1; i<=max_tries; i++)); do # 126|-> local cur="$(cat "$path")" # 127| if [[ "$cur" == "$expect" ]]; then # 128| return 0 Error: SHELLCHECK_WARNING (CWE-563): [#def3] /usr/libexec/kselftests/net/double_udp_encap.sh:94:2: warning[SC2034]: RET appears unused. Verify use (or export if used externally). # 92| local ns # 93| # 94|-> RET=0 # 95| # 96| # +-------------+ +-------------+ Error: SHELLCHECK_WARNING (CWE-156): [#def4] /usr/libexec/kselftests/net/fib_tests.sh:908:17: warning[SC2046]: Quote this to prevent word splitting. # 906| done # 907| # 908|-> check_rt_num 5 $($IP -6 route list | grep expires | grep 2001:10:: | wc -l) # 909| # 910| # Promote to permanent routes by "prepend" (w/o NLM_F_EXCL and NLM_F_REPLACE) Error: SHELLCHECK_WARNING (CWE-156): [#def5] /usr/libexec/kselftests/net/fib_tests.sh:917:17: warning[SC2046]: Quote this to prevent word splitting. # 915| done # 916| # 917|-> check_rt_num 5 $($IP -6 route list | grep -v expires | grep 2001:10:: | wc -l) # 918| check_rt_num 5 $($IP -6 route list cache | grep 2001:10:: | wc -l) # 919| Error: SHELLCHECK_WARNING (CWE-156): [#def6] /usr/libexec/kselftests/net/fib_tests.sh:918:17: warning[SC2046]: Quote this to prevent word splitting. # 916| # 917| check_rt_num 5 $($IP -6 route list | grep -v expires | grep 2001:10:: | wc -l) # 918|-> check_rt_num 5 $($IP -6 route list cache | grep 2001:10:: | wc -l) # 919| # 920| # Trigger GC instead of waiting $GC_WAIT_TIME. Error: SHELLCHECK_WARNING (CWE-156): [#def7] /usr/libexec/kselftests/net/fib_tests.sh:923:17: warning[SC2046]: Quote this to prevent word splitting. # 921| # rt6_nh_dump_exceptions() just skips expired exceptions. # 922| $NS_EXEC sysctl -wq net.ipv6.route.flush=1 # 923|-> check_rt_num 0 $($IP -6 route list cache | grep 2001:10:: | wc -l) # 924| log_test $ret 0 "ipv6 route garbage collection (promote to permanent routes)" # 925| Error: SHELLCHECK_WARNING (CWE-457): [#def8] /usr/libexec/kselftests/net/hsr/hsr_ping.sh:38:11: warning[SC2154]: ns1 is referenced but not assigned. # 36| echo "INFO: Initial validation ping." # 37| # Each node has to be able to reach each one. # 38|-> do_ping "$ns1" "100.64.$netid.2" # 39| do_ping "$ns1" "100.64.$netid.3" # 40| do_ping "$ns2" "100.64.$netid.1" Error: SHELLCHECK_WARNING (CWE-457): [#def9] /usr/libexec/kselftests/net/hsr/hsr_ping.sh:40:11: warning[SC2154]: ns2 is referenced but not assigned. # 38| do_ping "$ns1" "100.64.$netid.2" # 39| do_ping "$ns1" "100.64.$netid.3" # 40|-> do_ping "$ns2" "100.64.$netid.1" # 41| do_ping "$ns2" "100.64.$netid.3" # 42| do_ping "$ns3" "100.64.$netid.1" Error: SHELLCHECK_WARNING (CWE-457): [#def10] /usr/libexec/kselftests/net/hsr/hsr_ping.sh:42:11: warning[SC2154]: ns3 is referenced but not assigned. # 40| do_ping "$ns2" "100.64.$netid.1" # 41| do_ping "$ns2" "100.64.$netid.3" # 42|-> do_ping "$ns3" "100.64.$netid.1" # 43| do_ping "$ns3" "100.64.$netid.2" # 44| stop_if_error "Initial validation failed on IPv4." Error: SHELLCHECK_WARNING (CWE-563): [#def11] /usr/libexec/kselftests/net/hsr/link_faults.sh:7:1: warning[SC2034]: ALL_TESTS appears unused. Verify use (or export if used externally). # 5| source ../lib.sh # 6| # 7|-> ALL_TESTS=" # 8| test_clean_hsrv0 # 9| test_cut_link_hsrv0 Error: SHELLCHECK_WARNING (CWE-457): [#def12] /usr/libexec/kselftests/net/hsr/link_faults.sh:212:14: warning[SC2154]: ksft_pass is referenced but not assigned. # 210| # 211| setup_topo "$proto" # 212|-> if ((RET != ksft_pass)); then # 213| log_test "${tname} setup" # 214| return Error: SHELLCHECK_WARNING (CWE-563): [#def13] /usr/libexec/kselftests/net/hsr/prp_ping.sh:21:3: warning[SC2034]: ipv6 appears unused. Verify use (or export if used externally). # 19| ;; # 20| "4") # 21|-> ipv6=false # 22| ;; # 23| "?") Error: SHELLCHECK_WARNING (CWE-457): [#def14] /usr/libexec/kselftests/net/hsr/prp_ping.sh:147:6: warning[SC2154]: ret is referenced but not assigned. # 145| run_vlan_ping_tests # 146| # 147|-> exit $ret Error: SHELLCHECK_WARNING (CWE-571): [#def15] /usr/libexec/kselftests/net/netfilter/nft_queue.sh:649:8: warning[SC2155]: Declare and assign separately to avoid masking return values. # 647| local count=$(((32 * 1024 * 1024) / bs)) # 648| # 649|-> local nprocs=$(nproc) # 650| [ $nprocs -gt 1 ] && nprocs=$((nprocs - 1)) # 651| Error: SHELLCHECK_WARNING (CWE-563): [#def16] /usr/libexec/kselftests/net/netfilter/nft_queue.sh:675:7: warning[SC2034]: p appears unused. Verify use (or export if used externally). # 673| local breinject # 674| c=$(ip netns exec "$nsrouter" nft list counter inet udpq "fromqueue" | grep packets) # 675|-> read p preinject b breinject <<EOF # 676| $c # 677| EOF Error: SHELLCHECK_WARNING (CWE-563): [#def17] /usr/libexec/kselftests/net/netfilter/nft_queue.sh:675:19: warning[SC2034]: b appears unused. Verify use (or export if used externally). # 673| local breinject # 674| c=$(ip netns exec "$nsrouter" nft list counter inet udpq "fromqueue" | grep packets) # 675|-> read p preinject b breinject <<EOF # 676| $c # 677| EOF Error: SHELLCHECK_WARNING (CWE-457): [#def18] /usr/libexec/kselftests/net/srv6_iptunnel_cache.sh:85:9: warning[SC2154]: ksft_skip is referenced but not assigned. # 83| if ! command -v ip &>/dev/null; then # 84| echo "SKIP: ip tool not found" # 85|-> exit "${ksft_skip}" # 86| fi # 87| Error: SHELLCHECK_WARNING (CWE-457): [#def19] /usr/libexec/kselftests/net/srv6_iptunnel_cache.sh:179:8: warning[SC2154]: ksft_fail is referenced but not assigned. # 177| ping -c 1 -W 2 "${DEST}" &>/dev/null; then # 178| echo "FAIL: output path used dst cached by input path" # 179|-> RET="${ksft_fail}" # 180| else # 181| echo "PASS: output path dst_cache is independent" Error: SHELLCHECK_WARNING (CWE-569): [#def20] /usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/checker-valid.sh:7:13: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled. # 5| # 6| tmp_file=$(mktemp) # 7|-> trap "rm -f $tmp_file" EXIT # 8| # 9| cat << EOF >$tmp_file Error: SHELLCHECK_WARNING (CWE-88): [#def21] /usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/checker-valid.sh:19:1: error[SC2068]: Double quote array expansions to avoid re-splitting elements. # 17| # sparse happily exits with 0 on error so validate # 18| # there is none on stderr. Use awk as grep is a pain with sh -e # 19|-> $@ $tmp_file 2>&1 | awk -v c=1 '/error/{c=0}END{print c}' Error: SHELLCHECK_WARNING (CWE-457): [#def22] /usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/gen-btf.sh:60:18: warning[SC2154]: objtree is referenced but not assigned. # 58| # 59| is_enabled() { # 60|-> grep -q "^$1=y" ${objtree}/include/config/auto.conf # 61| } # 62| Error: SHELLCHECK_WARNING (CWE-456): [#def23] /usr/src/kernels/7.0.0-62.fc45.x86_64+debug/scripts/kconfig/merge_config.sh:47:2: warning[SC2209]: Use var=$(command) to assign output (or quote to assign string). # 45| # 46| if [ -z "$AWK" ]; then # 47|-> AWK=awk # 48| fi # 49| Error: SHELLCHECK_WARNING (CWE-569): [#def24] /usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/checker-valid.sh:7:13: warning[SC2064]: Use single quotes, otherwise this expands now rather than when signalled. # 5| # 6| tmp_file=$(mktemp) # 7|-> trap "rm -f $tmp_file" EXIT # 8| # 9| cat << EOF >$tmp_file Error: SHELLCHECK_WARNING (CWE-88): [#def25] /usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/checker-valid.sh:19:1: error[SC2068]: Double quote array expansions to avoid re-splitting elements. # 17| # sparse happily exits with 0 on error so validate # 18| # there is none on stderr. Use awk as grep is a pain with sh -e # 19|-> $@ $tmp_file 2>&1 | awk -v c=1 '/error/{c=0}END{print c}' Error: SHELLCHECK_WARNING (CWE-457): [#def26] /usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/gen-btf.sh:60:18: warning[SC2154]: objtree is referenced but not assigned. # 58| # 59| is_enabled() { # 60|-> grep -q "^$1=y" ${objtree}/include/config/auto.conf # 61| } # 62| Error: SHELLCHECK_WARNING (CWE-456): [#def27] /usr/src/kernels/7.0.0-62.fc45.x86_64/scripts/kconfig/merge_config.sh:47:2: warning[SC2209]: Use var=$(command) to assign output (or quote to assign string). # 45| # 46| if [ -z "$AWK" ]; then # 47|-> AWK=awk # 48| fi # 49| Error: GCC_ANALYZER_WARNING (CWE-127): [#def28] kernel-7.0/linux-7.0.0-62.fc45.x86_64/arch/x86/include/asm/bitops.h:55:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 53| { # 54| if (__builtin_constant_p(nr)) { # 55|-> asm_inline volatile(LOCK_PREFIX "orb %b1,%0" # 56| : CONST_MASK_ADDR(nr, addr) # 57| : "iq" (CONST_MASK(nr)) Error: GCC_ANALYZER_WARNING (CWE-124): [#def29] kernel-7.0/linux-7.0.0-62.fc45.x86_64/arch/x86/include/asm/bitops.h:55:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 53| { # 54| if (__builtin_constant_p(nr)) { # 55|-> asm_inline volatile(LOCK_PREFIX "orb %b1,%0" # 56| : CONST_MASK_ADDR(nr, addr) # 57| : "iq" (CONST_MASK(nr)) Error: GCC_ANALYZER_WARNING (CWE-457): [#def30] kernel-7.0/linux-7.0.0-62.fc45.x86_64/block/bfq-iosched.c:5457:18: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘bfqd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/block/bfq-iosched.c:5477:13: enter_function: entry to ‘bfq_exit_icq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/block/bfq-iosched.c:5497:17: call_function: calling ‘_bfq_exit_icq’ from ‘bfq_exit_icq’ # 5455| bfqd = bfqq->bfqd; /* NULL if scheduler already exited */ # 5456| # 5457|-> if (bfqq && bfqd) { # 5458| bic_set_bfqq(bic, NULL, is_sync, actuator_idx); # 5459| bfq_exit_bfqq(bfqd, bfqq); Error: GCC_ANALYZER_WARNING (CWE-476): [#def31] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2026:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1981:12: enter_function: entry to ‘acpi_video_bus_probe’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1984:38: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1986:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:1991:33: call_function: inlined call to ‘acpi_dev_parent’ from ‘acpi_video_bus_probe’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2005:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2009:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_video.c:2026:9: danger: dereference of NULL ‘<unknown>’ # 2024| strscpy(acpi_device_name(device), ACPI_VIDEO_BUS_NAME); # 2025| strscpy(acpi_device_class(device), ACPI_VIDEO_CLASS); # 2026|-> device->driver_data = video; # 2027| # 2028| acpi_video_bus_find_cap(video); Error: GCC_ANALYZER_WARNING (CWE-126): [#def32] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:151:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:102:13: enter_function: entry to ‘acpi_watchdog_init’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: call_function: calling ‘acpi_watchdog_get_wdat’ from ‘acpi_watchdog_init’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: return_function: returning to ‘acpi_watchdog_init’ from ‘acpi_watchdog_get_wdat’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:114:12: branch_false: following ‘false’ branch (when ‘wdat’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:129:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:135:31: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:139:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:150:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:150:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:151:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:151:29: danger: out-of-bounds read from byte 16 till byte 23 but ‘resource_list’ ends at byte 16 # 149| found = false; # 150| resource_list_for_each_entry(rentry, &resource_list) { # 151|-> if (rentry->res->flags == res.flags && # 152| resource_union(rentry->res, &res, rentry->res)) { # 153| found = true; Error: GCC_ANALYZER_WARNING (CWE-126): [#def33] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:175:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:102:13: enter_function: entry to ‘acpi_watchdog_init’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: call_function: calling ‘acpi_watchdog_get_wdat’ from ‘acpi_watchdog_init’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:113:16: return_function: returning to ‘acpi_watchdog_init’ from ‘acpi_watchdog_get_wdat’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:114:12: branch_false: following ‘false’ branch (when ‘wdat’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:120:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:124:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:170:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:174:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:174:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:175:35: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/acpi_watchdog.c:175:35: danger: out-of-bounds read from byte 16 till byte 23 but ‘resource_list’ ends at byte 16 # 173| i = 0; # 174| resource_list_for_each_entry(rentry, &resource_list) # 175|-> resources[i++] = *rentry->res; # 176| # 177| pdev = platform_device_register_simple("wdat_wdt", PLATFORM_DEVID_NONE, Error: GCC_ANALYZER_WARNING (CWE-476): [#def34] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:248:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:243:38: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:245:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/acpi/sbshc.c:248:18: danger: dereference of NULL ‘<unknown>’ # 246| struct acpi_smb_hc *hc; # 247| # 248|-> status = acpi_evaluate_integer(device->handle, "_EC", NULL, &val); # 249| if (ACPI_FAILURE(status)) { # 250| pr_err("error obtaining _EC.\n"); Error: GCC_ANALYZER_WARNING (CWE-476): [#def35] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:182:21: enter_function: entry to ‘acard_ahci_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:191:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:191:9: call_function: inlined call to ‘sg_next’ from ‘acard_ahci_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:191:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/acard-ahci.c:192:28: danger: dereference of NULL ‘sg’ # 190| */ # 191| for_each_sg(qc->sg, sg, qc->n_elem, si) { # 192|-> dma_addr_t addr = sg_dma_address(sg); # 193| u32 sg_len = sg_dma_len(sg); # 194| Error: GCC_ANALYZER_WARNING (CWE-476): [#def36] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:256:12: enter_function: entry to ‘adma_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:266:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:266:9: call_function: inlined call to ‘sg_next’ from ‘adma_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:266:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/pdc_adma.c:270:29: danger: dereference of NULL ‘sg’ # 268| u32 len; # 269| # 270|-> addr = (u32)sg_dma_address(sg); # 271| *(__le32 *)(buf + i) = cpu_to_le32(addr); # 272| i += 4; Error: GCC_ANALYZER_WARNING (CWE-476): [#def37] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:458:13: enter_function: entry to ‘inic_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:470:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:470:9: call_function: inlined call to ‘sg_next’ from ‘inic_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:470:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_inic162x.c:471:28: danger: dereference of NULL ‘sg’ # 469| # 470| for_each_sg(qc->sg, sg, qc->n_elem, si) { # 471|-> prd->mad = cpu_to_le32(sg_dma_address(sg)); # 472| prd->len = cpu_to_le16(sg_dma_len(sg)); # 473| prd->flags = flags; Error: GCC_ANALYZER_WARNING (CWE-476): [#def38] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1307:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1313:13: enter_function: entry to ‘nv_adma_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1320:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_false: following ‘false’ branch (when ‘si <= 4’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:36: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1320:9: call_function: inlined call to ‘sg_next’ from ‘nv_adma_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1320:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:24: branch_false: following ‘false’ branch (when ‘si <= 4’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1321:36: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1323:17: call_function: calling ‘nv_adma_fill_aprd’ from ‘nv_adma_fill_sg’ # 1305| flags |= NV_APRD_CONT; # 1306| # 1307|-> aprd->addr = cpu_to_le64(((u64)sg_dma_address(sg))); # 1308| aprd->len = cpu_to_le32(((u32)sg_dma_len(sg))); /* len in bytes */ # 1309| aprd->flags = flags; Error: GCC_ANALYZER_WARNING (CWE-476): [#def39] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1965:13: enter_function: entry to ‘nv_swncq_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1983:24: branch_false: following ‘false’ branch (when ‘sg_len == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: call_function: inlined call to ‘sg_next’ from ‘nv_swncq_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1976:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_nv.c:1980:29: danger: dereference of NULL ‘sg’ # 1978| u32 sg_len, len; # 1979| # 1980|-> addr = (u32)sg_dma_address(sg); # 1981| sg_len = sg_dma_len(sg); # 1982| Error: GCC_ANALYZER_WARNING (CWE-476): [#def40] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:567:13: enter_function: entry to ‘pdc_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:576:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:591:24: branch_false: following ‘false’ branch (when ‘sg_len == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: call_function: inlined call to ‘sg_next’ from ‘pdc_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:580:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_promise.c:588:30: danger: dereference of NULL ‘sg’ # 586| * truncate dma_addr_t to u32. # 587| */ # 588|-> addr = (u32) sg_dma_address(sg); # 589| sg_len = sg_dma_len(sg); # 590| Error: GCC_ANALYZER_WARNING (CWE-476): [#def41] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:236:21: enter_function: entry to ‘qs_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:244:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:244:9: call_function: inlined call to ‘sg_next’ from ‘qs_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:244:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_qstor.c:248:17: danger: dereference of NULL ‘sg’ # 246| u32 len; # 247| # 248|-> addr = sg_dma_address(sg); # 249| *(__le64 *)prd = cpu_to_le64(addr); # 250| prd += sizeof(u64); Error: GCC_ANALYZER_WARNING (CWE-476): [#def42] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:293:13: enter_function: entry to ‘sil_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:301:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:301:9: call_function: inlined call to ‘sg_next’ from ‘sil_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:301:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil.c:305:34: danger: dereference of NULL ‘sg’ # 303| * truncate dma_addr_t to u32. # 304| */ # 305|-> u32 addr = (u32) sg_dma_address(sg); # 306| u32 sg_len = sg_dma_len(sg); # 307| Error: GCC_ANALYZER_WARNING (CWE-476): [#def43] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:768:20: enter_function: entry to ‘sil24_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: call_function: inlined call to ‘sg_next’ from ‘sil24_fill_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:776:29: danger: dereference of NULL ‘sg’ # 774| # 775| for_each_sg(qc->sg, sg, qc->n_elem, si) { # 776|-> sge->addr = cpu_to_le64(sg_dma_address(sg)); # 777| sge->cnt = cpu_to_le32(sg_dma_len(sg)); # 778| sge->flags = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def44] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:784:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘last_sge’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:775:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:784:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sil24.c:784:9: danger: dereference of NULL ‘last_sge’ # 782| } # 783| # 784|-> last_sge->flags = cpu_to_le32(SGE_TRM); # 785| } # 786| Error: GCC_ANALYZER_WARNING (CWE-476): [#def45] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:414:13: enter_function: entry to ‘pdc20621_dma_prep’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:434:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:434:9: call_function: inlined call to ‘sg_next’ from ‘pdc20621_dma_prep’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:434:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/ata/sata_sx4.c:435:30: danger: dereference of NULL ‘sg’ # 433| idx = 0; # 434| for_each_sg(qc->sg, sg, qc->n_elem, si) { # 435|-> buf[idx++] = cpu_to_le32(sg_dma_address(sg)); # 436| buf[idx++] = cpu_to_le32(sg_dma_len(sg)); # 437| total_len += sg_dma_len(sg); Error: GCC_ANALYZER_WARNING (CWE-131): [#def46] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2214:25: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2312:13: enter_function: entry to ‘blkfront_connect’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2355:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2369:53: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2370:9: call_function: calling ‘blkfront_gather_backend_features’ from ‘blkfront_connect’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2370:9: return_function: returning to ‘blkfront_connect’ from ‘blkfront_gather_backend_features’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2371:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2372:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/block/xen-blkfront.c:2372:23: call_function: calling ‘blkfront_setup_indirect’ from ‘blkfront_connect’ # 2212| psegs); # 2213| if (info->max_indirect_segments) # 2214|-> rinfo->shadow[i].indirect_grants = # 2215| kvzalloc_objs(rinfo->shadow[i].indirect_grants[0], # 2216| INDIRECT_GREFS(grants)); Error: GCC_ANALYZER_WARNING (CWE-476): [#def47] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:584:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘req_hdr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:836:5: enter_function: entry to ‘sev_tio_dev_disconnect’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:844:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:847:9: call_function: inlined call to ‘spdm_ctrl_init’ from ‘sev_tio_dev_disconnect’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:849:16: call_function: calling ‘sev_tio_do_cmd’ from ‘sev_tio_dev_disconnect’ # 582| req_hdr = sla_to_dobj_req_hdr(dev_data->reqbuf); # 583| resp_hdr = sla_to_dobj_resp_hdr(dev_data->respbuf); # 584|-> switch (req_hdr->data_type) { # 585| case DOBJ_DATA_TYPE_SPDM: # 586| rc = PCI_DOE_FEATURE_CMA; Error: GCC_ANALYZER_WARNING (CWE-476): [#def48] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:594:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘resp_hdr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:836:5: enter_function: entry to ‘sev_tio_dev_disconnect’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:844:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:847:9: call_function: inlined call to ‘spdm_ctrl_init’ from ‘sev_tio_dev_disconnect’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/crypto/ccp/sev-dev-tio.c:849:16: call_function: calling ‘sev_tio_do_cmd’ from ‘sev_tio_dev_disconnect’ # 592| return -EINVAL; # 593| } # 594|-> resp_hdr->data_type = req_hdr->data_type; # 595| dev_data->spdm.req_len = req_hdr->hdr.length - # 596| sla_dobj_id_to_size(SPDM_DOBJ_ID_REQ); Error: GCC_ANALYZER_WARNING (CWE-476): [#def49] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:722:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘iter’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1665:26: enter_function: entry to ‘devm_cxl_create_port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1683:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1684:38: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1685:24: call_function: calling ‘devm_cxl_add_port’ from ‘devm_cxl_create_port’ # 720| */ # 721| iter = port; # 722|-> while (!iter->host_bridge && # 723| !is_cxl_root(to_cxl_port(iter->dev.parent))) # 724| iter = to_cxl_port(iter->dev.parent); Error: GCC_ANALYZER_WARNING (CWE-476): [#def50] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1573:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1563:12: enter_function: entry to ‘match_port_by_uport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1571:16: call_function: calling ‘to_cxl_port’ from ‘match_port_by_uport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1571:16: return_function: return of NULL to ‘match_port_by_uport’ from ‘to_cxl_port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/cxl/core/port.c:1573:27: danger: dereference of NULL ‘port’ # 1571| port = to_cxl_port(dev); # 1572| /* Endpoint ports are hosted by memdevs */ # 1573|-> if (is_cxl_memdev(port->uport_dev)) # 1574| return uport_dev == port->uport_dev->parent; # 1575| return uport_dev == port->uport_dev; Error: GCC_ANALYZER_WARNING (CWE-476): [#def51] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:601:1: enter_function: entry to ‘xdma_prep_device_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:19: call_function: calling ‘xdma_alloc_desc’ from ‘xdma_prep_device_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:613:19: return_function: returning to ‘xdma_prep_device_sg’ from ‘xdma_alloc_desc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:614:12: branch_false: following ‘false’ branch (when ‘sw_desc’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:616:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:620:12: branch_true: following ‘true’ branch (when ‘dir == 1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:621:28: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:631:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:633:29: call_function: calling ‘xdma_fill_descs’ from ‘xdma_prep_device_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:633:29: return_function: returning to ‘xdma_prep_device_sg’ from ‘xdma_fill_descs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:631:9: call_function: inlined call to ‘sg_next’ from ‘xdma_prep_device_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:631:9: branch_true: following ‘true’ branch (when ‘i < sg_len’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dma/xilinx/xdma.c:632:24: danger: dereference of NULL ‘sg’ # 630| desc_num = 0; # 631| for_each_sg(sgl, sg, sg_len, i) { # 632|-> addr = sg_dma_address(sg); # 633| desc_num += xdma_fill_descs(sw_desc, *src, *dst, sg_dma_len(sg), desc_num); # 634| dev_addr += sg_dma_len(sg); Error: GCC_ANALYZER_WARNING (CWE-476): [#def52] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1073:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 1071| # 1072| reg = dpll_device_registration_first(dpll); # 1073|-> return reg->priv; # 1074| } # 1075| Error: GCC_ANALYZER_WARNING (CWE-476): [#def53] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1081:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 1079| # 1080| reg = dpll_device_registration_first(dpll); # 1081|-> return reg->ops; # 1082| } # 1083| Error: GCC_ANALYZER_WARNING (CWE-476): [#def54] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1105:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1095:7: enter_function: entry to ‘dpll_pin_on_dpll_priv’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1102:12: branch_false: following ‘false’ branch (when ‘ref’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1104:15: call_function: inlined call to ‘dpll_pin_registration_first’ from ‘dpll_pin_on_dpll_priv’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1105:16: danger: dereference of NULL ‘<unknown>’ # 1103| return NULL; # 1104| reg = dpll_pin_registration_first(ref); # 1105|-> return reg->priv; # 1106| } # 1107| Error: GCC_ANALYZER_WARNING (CWE-476): [#def55] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1118:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1108:7: enter_function: entry to ‘dpll_pin_on_pin_priv’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1115:12: branch_false: following ‘false’ branch (when ‘ref’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1117:15: call_function: inlined call to ‘dpll_pin_registration_first’ from ‘dpll_pin_on_pin_priv’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1118:16: danger: dereference of NULL ‘<unknown>’ # 1116| return NULL; # 1117| reg = dpll_pin_registration_first(ref); # 1118|-> return reg->priv; # 1119| } # 1120| Error: GCC_ANALYZER_WARNING (CWE-476): [#def56] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/dpll/dpll_core.c:1126:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ # 1124| # 1125| reg = dpll_pin_registration_first(ref); # 1126|-> return reg->ops; # 1127| } # 1128| Error: GCC_ANALYZER_WARNING (CWE-476): [#def57] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/firmware/efi/libstub/x86-stub.c:826:53: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘p’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/firmware/efi/libstub/x86-stub.c:1047:23: enter_function: entry to ‘efi_pe_entry’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/firmware/efi/libstub/x86-stub.c:1050:9: call_function: calling ‘efi_stub_entry’ from ‘efi_pe_entry’ # 824| const char *p = strstr(cmdline, opts[i]); # 825| # 826|-> if (p == cmdline || (p > cmdline && isspace(p[-1]))) { # 827| cmdline_memmap_override = opts[i]; # 828| break; Error: GCC_ANALYZER_WARNING (CWE-457): [#def58] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:362:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘r’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:327:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:339:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c:362:12: danger: use of uninitialized value ‘r’ here # 360| # 361| out_unlock: # 362|-> if (r && !drm_dev_is_unplugged(adev_to_drm(adev))) # 363| dev_err(adev->dev, "leaking bo va (%ld)\n", r); # 364| drm_exec_fini(&exec); Error: GCC_ANALYZER_WARNING (CWE-457): [#def59] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1024:1: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘<unknown>’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:657:5: enter_function: entry to ‘amdgpu_userq_wait_ioctl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:674:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:13: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:678:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:679:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:677:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:683:27: call_function: inlined call to ‘size_mul’ from ‘amdgpu_userq_wait_ioctl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:685:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:688:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:691:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:696:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:699:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:704:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:707:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:712:39: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:714:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:719:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:719:21: call_function: calling ‘kmalloc_array_noprof’ from ‘amdgpu_userq_wait_ioctl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:719:21: return_function: returning to ‘amdgpu_userq_wait_ioctl’ from ‘kmalloc_array_noprof’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:720:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:720:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:733:22: call_function: calling ‘kmalloc_array_noprof’ from ‘amdgpu_userq_wait_ioctl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:733:22: return_function: returning to ‘amdgpu_userq_wait_ioctl’ from ‘kmalloc_array_noprof’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:734:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:734:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:751:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:767:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:767:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:768:20: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:789:29: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:789:29: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1020:12: branch_false: following ‘false’ branch (when ‘waitq’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1024:1: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c:1024:1: danger: use of uninitialized value ‘<unknown>’ here # 1022| # 1023| return r; # 1024|-> } Error: GCC_ANALYZER_WARNING (CWE-457): [#def60] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:497:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘hub’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:536:12: enter_function: entry to ‘mmhub_v4_2_0_gart_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:541:16: call_function: calling ‘mmhub_v4_2_0_mid_gart_enable’ from ‘mmhub_v4_2_0_gart_enable’ # 495| } # 496| # 497|-> hub->vm_cntx_cntl = tmp; # 498| } # 499| Error: GCC_ANALYZER_WARNING (CWE-457): [#def61] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:497:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘tmp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:536:12: enter_function: entry to ‘mmhub_v4_2_0_gart_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/mmhub_v4_2_0.c:541:16: call_function: calling ‘mmhub_v4_2_0_mid_gart_enable’ from ‘mmhub_v4_2_0_gart_enable’ # 495| } # 496| # 497|-> hub->vm_cntx_cntl = tmp; # 498| } # 499| Error: GCC_ANALYZER_WARNING (CWE-121): [#def62] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:87:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:110:13: enter_function: entry to ‘update_cu_mask’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:116:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:119:9: call_function: calling ‘mqd_symmetrically_map_cu_mask_v12_1’ from ‘update_cu_mask’ # 85| */ # 86| for (i = 0; i < gfx_info->max_shader_engines; i++) # 87|-> se_mask[i] = 0; # 88| # 89| i = inst; Error: GCC_ANALYZER_WARNING (CWE-457): [#def63] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:553:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:541:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:553:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:553:16: danger: use of uninitialized value ‘err’ here # 551| } # 552| # 553|-> return err; # 554| } # 555| Error: GCC_ANALYZER_WARNING (CWE-457): [#def64] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:580:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘err’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:567:9: branch_false: following ‘false’ branch (when ‘xcc_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:580:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c:580:16: danger: use of uninitialized value ‘err’ here # 578| } # 579| # 580|-> return err; # 581| } # 582| Error: GCC_ANALYZER_WARNING (CWE-457): [#def65] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘q’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1104:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1131:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1131:31: branch_true: following ‘true’ branch (when ‘xcc < num_xccs’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: danger: use of uninitialized value ‘q’ here # 1130| # 1131| for (xcc = 0; xcc < num_xccs; xcc++) { # 1132|-> mqd = q->mqd + size * xcc; # 1133| r = mqd_mgr->debugfs_show_mqd(m, mqd); # 1134| if (r != 0) Error: GCC_ANALYZER_WARNING (CWE-457): [#def66] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1133:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mqd_mgr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1104:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1107:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1104:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1105:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1131:31: branch_true: following ‘true’ branch (when ‘xcc < num_xccs’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1132:31: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c:1133:29: danger: use of uninitialized value ‘mqd_mgr’ here # 1131| for (xcc = 0; xcc < num_xccs; xcc++) { # 1132| mqd = q->mqd + size * xcc; # 1133|-> r = mqd_mgr->debugfs_show_mqd(m, mqd); # 1134| if (r != 0) # 1135| break; Error: GCC_ANALYZER_WARNING (CWE-457): [#def67] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5505:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘FullDETBufferingTimeY[0]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5358:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5455:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5457:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5474:53: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5477:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5487:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5488:21: branch_false: following ‘false’ branch (when ‘k >= NumberOfActivePlanes’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5494:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/display/dc/dml/dcn21/display_mode_vba_21.c:5505:9: danger: use of uninitialized value ‘FullDETBufferingTimeY[0]’ here # 5503| } # 5504| # 5505|-> FullDETBufferingTimeYStutterCriticalPlane = FullDETBufferingTimeY[0]; # 5506| for (k = 0; k < NumberOfActivePlanes; ++k) { # 5507| if (FullDETBufferingTimeY[k] <= FullDETBufferingTimeYStutterCriticalPlane) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def68] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3423:34: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘clocks.data[i].clocks_in_khz’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3365:12: enter_function: entry to ‘vega20_emit_clock_levels’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:23: call_function: calling ‘vega20_get_current_clk_freq’ from ‘vega20_emit_clock_levels’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3407:23: return_function: returning to ‘vega20_emit_clock_levels’ from ‘vega20_get_current_clk_freq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3408:17: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:21: call_function: calling ‘vega20_get_memclocks’ from ‘vega20_emit_clock_levels’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:21: return_function: returning to ‘vega20_emit_clock_levels’ from ‘vega20_get_memclocks’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3412:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3419:29: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3423:34: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c:3423:34: danger: use of uninitialized value ‘clocks.data[i].clocks_in_khz’ here # 3421| buf, size, "%d: %uMhz %s\n", i, # 3422| clocks.data[i].clocks_in_khz / 1000, # 3423|-> (clocks.data[i].clocks_in_khz == now * 10) ? # 3424| "*" : # 3425| ""); Error: GCC_ANALYZER_WARNING (CWE-457): [#def69] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1927:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘is_fine_grained’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1903:5: enter_function: entry to ‘smu_v13_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1912:15: call_function: calling ‘smu_v13_0_get_dpm_level_count’ from ‘smu_v13_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1912:15: return_function: returning to ‘smu_v13_0_set_single_dpm_table’ from ‘smu_v13_0_get_dpm_level_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1915:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1920:31: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1920:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1921:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1921:23: call_function: calling ‘smu_v13_0_get_fine_grained_status’ from ‘smu_v13_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1921:23: return_function: returning to ‘smu_v13_0_set_single_dpm_table’ from ‘smu_v13_0_get_fine_grained_status’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1923:20: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1927:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c:1927:21: danger: use of uninitialized value ‘is_fine_grained’ here # 1925| return ret; # 1926| } # 1927|-> if (is_fine_grained) # 1928| single_dpm_table->flags |= SMU_DPM_TABLE_FINE_GRAINED; # 1929| } Error: GCC_ANALYZER_WARNING (CWE-457): [#def70] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1538:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘is_fine_grained’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1515:5: enter_function: entry to ‘smu_v14_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1524:15: call_function: inlined call to ‘smu_v14_0_get_dpm_level_count’ from ‘smu_v14_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1524:15: call_function: inlined call to ‘smu_v14_0_get_dpm_level_count’ from ‘smu_v14_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1527:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1532:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1532:15: call_function: calling ‘smu_v14_0_get_fine_grained_status’ from ‘smu_v14_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1532:15: return_function: returning to ‘smu_v14_0_set_single_dpm_table’ from ‘smu_v14_0_get_fine_grained_status’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1534:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1538:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c:1538:13: danger: use of uninitialized value ‘is_fine_grained’ here # 1536| return ret; # 1537| } # 1538|-> if (is_fine_grained) # 1539| single_dpm_table->flags |= SMU_DPM_TABLE_FINE_GRAINED; # 1540| Error: GCC_ANALYZER_WARNING (CWE-457): [#def71] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:181:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:156:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:159:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:159:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:162:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:162:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:166:13: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:166:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:170:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:174:12: branch_false: following ‘false’ branch (when ‘pptable_id != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:177:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:178:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:181:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:181:9: danger: use of uninitialized value ‘table’ here # 179| return ret; # 180| # 181|-> smu->pptable_firmware.data = table; # 182| smu->pptable_firmware.size = size; # 183| Error: GCC_ANALYZER_WARNING (CWE-457): [#def72] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1439:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘clk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1405:5: enter_function: entry to ‘smu_v15_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1413:15: call_function: inlined call to ‘smu_v15_0_get_dpm_level_count’ from ‘smu_v15_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1413:15: call_function: inlined call to ‘smu_v15_0_get_dpm_level_count’ from ‘smu_v15_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1416:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1421:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1421:15: call_function: calling ‘smu_v15_0_get_fine_grained_status’ from ‘smu_v15_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1421:15: return_function: returning to ‘smu_v15_0_set_single_dpm_table’ from ‘smu_v15_0_get_fine_grained_status’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1424:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1424:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1429:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1430:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1430:23: call_function: calling ‘smu_v15_0_get_dpm_freq_by_index’ from ‘smu_v15_0_set_single_dpm_table’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1430:23: return_function: returning to ‘smu_v15_0_set_single_dpm_table’ from ‘smu_v15_0_get_dpm_freq_by_index’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1434:20: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1439:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0.c:1439:17: danger: use of uninitialized value ‘clk’ here # 1437| } # 1438| # 1439|-> single_dpm_table->dpm_levels[i].value = clk; # 1440| single_dpm_table->dpm_levels[i].enabled = true; # 1441| Error: GCC_ANALYZER_WARNING (CWE-457): [#def73] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:763:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘max_dpm_level’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:799:12: enter_function: entry to ‘smu_v15_0_0_get_dpm_ultimate_freq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:809:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:845:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:845:12: branch_true: following ‘true’ branch (when ‘max’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:846:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:870:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:871:31: call_function: inlined call to ‘smu_v15_0_common_get_dpm_freq_by_index’ from ‘smu_v15_0_0_get_dpm_ultimate_freq’ # 761| uint32_t *freq) # 762| { # 763|-> smu_v15_0_0_get_dpm_freq_by_index(smu, clk_type, dpm_level, freq); # 764| # 765| return 0; Error: GCC_ANALYZER_WARNING (CWE-457): [#def74] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:763:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘min_dpm_level’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:799:12: enter_function: entry to ‘smu_v15_0_0_get_dpm_ultimate_freq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:809:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:845:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:877:12: branch_true: following ‘true’ branch (when ‘min’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:878:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:902:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c:903:31: call_function: inlined call to ‘smu_v15_0_common_get_dpm_freq_by_index’ from ‘smu_v15_0_0_get_dpm_ultimate_freq’ # 761| uint32_t *freq) # 762| { # 763|-> smu_v15_0_0_get_dpm_freq_by_index(smu, clk_type, dpm_level, freq); # 764| # 765| return 0; Error: GCC_ANALYZER_WARNING (CWE-457): [#def75] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1347:52: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘lvl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1296:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1300:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1313:12: branch_true: following ‘true’ branch (when ‘is_fine_grained != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1326:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1329:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1343:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1343:29: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1347:34: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c:1347:52: danger: use of uninitialized value ‘lvl’ here # 1345| buf, size, "%d: %uMhz %s\n", level_index + i, # 1346| freq_values[i], # 1347|-> (!is_deep_sleep && i == lvl) ? "*" : ""); # 1348| } # 1349| } Error: GCC_ANALYZER_WARNING (CWE-476): [#def76] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3586:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3490:12: enter_function: entry to ‘intel_modeset_calc_cdclk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3492:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3498:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3498:27: call_function: calling ‘intel_atomic_get_cdclk_state’ from ‘intel_modeset_calc_cdclk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3498:27: return_function: returning to ‘intel_modeset_calc_cdclk’ from ‘intel_atomic_get_cdclk_state’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3499:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3502:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3502:27: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3502:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3505:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3508:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3514:20: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3525:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3543:13: call_function: calling ‘intel_cdclk_can_crawl_and_squash’ from ‘intel_modeset_calc_cdclk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3543:13: return_function: returning to ‘intel_modeset_calc_cdclk’ from ‘intel_cdclk_can_crawl_and_squash’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3543:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3548:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3548:19: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3553:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3553:19: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3558:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3558:19: branch_false: following ‘false’ branch (when ‘pipe == -1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3564:20: call_function: inlined call to ‘intel_cdclk_clock_changed’ from ‘intel_modeset_calc_cdclk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3577:13: call_function: inlined call to ‘intel_mdclk_cdclk_ratio’ from ‘intel_modeset_calc_cdclk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_cdclk.c:3586:9: danger: dereference of NULL ‘display’ # 3584| } # 3585| # 3586|-> drm_dbg_kms(display->drm, # 3587| "New cdclk calculated to be logical %u kHz, actual %u kHz\n", # 3588| new_cdclk_state->logical.cdclk, Error: GCC_ANALYZER_WARNING (CWE-476): [#def77] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:165:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1714:5: enter_function: entry to ‘ilk_enable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1716:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1717:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1723:9: call_function: inlined call to ‘ilk_enable_display_irq’ from ‘ilk_enable_vblank’ # 163| # 164| lockdep_assert_held(&display->irq.lock); # 165|-> drm_WARN_ON(display->drm, enabled_irq_mask & ~interrupt_mask); # 166| # 167| new_val = display->irq.ilk_de_imr_mask; Error: GCC_ANALYZER_WARNING (CWE-476): [#def78] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:172:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1735:6: enter_function: entry to ‘ilk_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1737:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1738:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1744:9: call_function: inlined call to ‘ilk_disable_display_irq’ from ‘ilk_disable_vblank’ # 170| # 171| if (new_val != display->irq.ilk_de_imr_mask && # 172|-> !drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display))) { # 173| display->irq.ilk_de_imr_mask = new_val; # 174| intel_de_write(display, DEIMR, display->irq.ilk_de_imr_mask); Error: GCC_ANALYZER_WARNING (CWE-476): [#def79] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:237:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1806:6: enter_function: entry to ‘bdw_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1809:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1810:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1813:13: call_function: calling ‘gen11_dsi_configure_te’ from ‘bdw_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1813:13: return_function: returning to ‘bdw_disable_vblank’ from ‘gen11_dsi_configure_te’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1813:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1816:9: call_function: inlined call to ‘spinlock_check’ from ‘bdw_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1817:9: call_function: inlined call to ‘bdw_disable_pipe_irq’ from ‘bdw_disable_vblank’ # 235| drm_WARN_ON(display->drm, enabled_irq_mask & ~interrupt_mask); # 236| # 237|-> if (drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display))) # 238| return; # 239| Error: GCC_ANALYZER_WARNING (CWE-476): [#def80] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:314:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’ # 312| * on pipe B and C the same bit MBZ. # 313| */ # 314|-> if (drm_WARN_ON_ONCE(display->drm, # 315| status_mask & PIPE_A_PSR_STATUS_VLV)) # 316| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def81] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:321:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’ # 319| * A the same bit is for perf counters which we don't use either. # 320| */ # 321|-> if (drm_WARN_ON_ONCE(display->drm, # 322| status_mask & PIPE_B_PSR_STATUS_VLV)) # 323| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def82] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:334:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’ # 332| # 333| out: # 334|-> drm_WARN_ONCE(display->drm, # 335| enable_mask & ~PIPESTAT_INT_ENABLE_MASK || # 336| status_mask & ~PIPESTAT_INT_STATUS_MASK, Error: GCC_ANALYZER_WARNING (CWE-476): [#def83] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:354:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1688:5: enter_function: entry to ‘i965_enable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1690:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1691:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1695:9: call_function: calling ‘i915_enable_pipestat’ from ‘i965_enable_vblank’ # 352| # 353| lockdep_assert_held(&display->irq.lock); # 354|-> drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display)); # 355| # 356| if ((display->irq.pipestat_irq_mask[pipe] & status_mask) == status_mask) Error: GCC_ANALYZER_WARNING (CWE-476): [#def84] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:377:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1702:6: enter_function: entry to ‘i965_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1704:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1705:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1709:9: call_function: calling ‘i915_disable_pipestat’ from ‘i965_disable_vblank’ # 375| # 376| lockdep_assert_held(&display->irq.lock); # 377|-> drm_WARN_ON(display->drm, !intel_parent_irq_enabled(display)); # 378| # 379| if ((display->irq.pipestat_irq_mask[pipe] & status_mask) == 0) Error: GCC_ANALYZER_WARNING (CWE-476): [#def85] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1627:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1679:6: enter_function: entry to ‘i915gm_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1681:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1683:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1683:9: call_function: calling ‘i8xx_disable_vblank’ from ‘i915gm_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1683:9: return_function: returning to ‘i915gm_disable_vblank’ from ‘i8xx_disable_vblank’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_display_irq.c:1685:9: call_function: calling ‘i915gm_irq_cstate_wa_disable’ from ‘i915gm_disable_vblank’ # 1625| static void i915gm_irq_cstate_wa_disable(struct intel_display *display) # 1626| { # 1627|-> lockdep_assert_held(&display->drm->vblank_time_lock); # 1628| # 1629| if (--display->irq.vblank_enabled == 0) Error: GCC_ANALYZER_WARNING (CWE-476): [#def86] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:986:19: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:965:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:971:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:971:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:974:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:974:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:977:15: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:978:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:981:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_dsb.c:986:19: danger: dereference of NULL ‘display’ # 984| size = ALIGN(max_cmds * 8, CACHELINE_BYTES); # 985| # 986|-> dsb_buf = intel_dsb_buffer_create(display->drm, size); # 987| if (IS_ERR(dsb_buf)) # 988| goto out_put_rpm; Error: GCC_ANALYZER_WARNING (CWE-476): [#def87] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:18:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:16:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:18:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:18:9: danger: dereference of NULL ‘display’ # 16| struct intel_display *display = to_intel_display(crtc); # 17| # 18|-> display->parent->initial_plane->vblank_wait(&crtc->base); # 19| } # 20| Error: GCC_ANALYZER_WARNING (CWE-476): [#def88] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:28:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:25:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:28:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:28:9: danger: dereference of NULL ‘display’ # 26| struct intel_crtc *crtc; # 27| # 28|-> for_each_intel_crtc(display->drm, crtc) { # 29| struct intel_plane *plane = # 30| to_intel_plane(crtc->base.primary); Error: GCC_ANALYZER_WARNING (CWE-476): [#def89] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:62:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:71:1: enter_function: entry to ‘intel_find_initial_plane_obj’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:74:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:75:74: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:87:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: call_function: calling ‘intel_alloc_initial_plane_obj’ from ‘intel_find_initial_plane_obj’ # 60| break; # 61| default: # 62|-> drm_dbg_kms(display->drm, "Unsupported modifier for initial FB: 0x%llx\n", # 63| fb->base.modifier); # 64| return NULL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def90] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:67:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘display’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:71:1: enter_function: entry to ‘intel_find_initial_plane_obj’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:74:41: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:75:74: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:87:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/i915/display/intel_initial_plane.c:90:13: call_function: calling ‘intel_alloc_initial_plane_obj’ from ‘intel_find_initial_plane_obj’ # 65| } # 66| # 67|-> return display->parent->initial_plane->alloc_obj(display->drm, plane_config); # 68| } # 69| Error: GCC_ANALYZER_WARNING (CWE-457): [#def91] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:821:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘gt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:808:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:808:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:818:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:821:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_device.c:821:12: danger: use of uninitialized value ‘gt’ here # 819| break; # 820| # 821|-> if (!gt) # 822| return; # 823| Error: GCC_ANALYZER_WARNING (CWE-457): [#def92] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:521:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘vp_dir’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:504:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:507:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:511:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:514:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:515:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:515:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:520:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:521:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_debugfs.c:521:23: danger: use of uninitialized value ‘vp_dir’ here # 519| # 520| for_each_online_cpu(idx) { # 521|-> err = parent_vp_debugfs_create(hv_vp_index[idx], # 522| &parent_vp_stats[idx], # 523| vp_dir); Error: GCC_ANALYZER_WARNING (CWE-457): [#def93] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1326:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘region’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1299:1: enter_function: entry to ‘mshv_map_user_memory’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1308:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1309:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1308:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1312:24: call_function: inlined call to ‘get_current’ from ‘mshv_map_user_memory’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1318:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1321:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1321:15: call_function: calling ‘mshv_partition_create_region’ from ‘mshv_map_user_memory’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1321:15: return_function: returning to ‘mshv_map_user_memory’ from ‘mshv_partition_create_region’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1323:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1326:23: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/hv/mshv_root_main.c:1326:23: danger: use of uninitialized value ‘region’ here # 1324| return ret; # 1325| # 1326|-> switch (region->mreg_type) { # 1327| case MSHV_REGION_TYPE_MEM_PINNED: # 1328| ret = mshv_prepare_pinned_region(region); Error: GCC_ANALYZER_WARNING (CWE-457): [#def94] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1311:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘freq_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1297:12: enter_function: entry to ‘adxl380_write_raw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1307:23: call_function: calling ‘adxl380_samp_freq_avail’ from ‘adxl380_write_raw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1307:23: return_function: returning to ‘adxl380_write_raw’ from ‘adxl380_samp_freq_avail’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/accel/adxl380.c:1311:29: danger: use of uninitialized value ‘freq_count’ here # 1309| return ret; # 1310| # 1311|-> odr_index = adxl380_find_match_1d_tbl(freq_vals, freq_count, # 1312| val); # 1313| return adxl380_set_odr(st, odr_index); Error: GCC_ANALYZER_WARNING (CWE-457): [#def95] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:409:19: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘reg_val’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:559:12: enter_function: entry to ‘smi330_write_raw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/imu/smi330/smi330_core.c:582:24: call_function: calling ‘smi330_set_sensor_config’ from ‘smi330_write_raw’ # 407| return ret; # 408| # 409|-> reg_val = field_prep(attr->mask, reg_val); # 410| ret = regmap_update_bits(data->regmap, reg, attr->mask, reg_val); # 411| if (ret) Error: GCC_ANALYZER_WARNING (CWE-126): [#def96] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:76:14: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’ # 74| static void rdma_dim_destroy(struct ib_cq *cq) # 75| { # 76|-> if (!cq->dim) # 77| return; # 78| Error: GCC_ANALYZER_WARNING (CWE-126): [#def97] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:80:15: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’ # 78| # 79| cancel_work_sync(&cq->dim->work); # 80|-> kfree(cq->dim); # 81| } # 82| Error: GCC_ANALYZER_WARNING (CWE-127): [#def98] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:324:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’ # 322| if (WARN_ON_ONCE(atomic_read(&cq->usecnt))) # 323| return; # 324|-> if (WARN_ON_ONCE(cq->cqe_used)) # 325| return; # 326| Error: GCC_ANALYZER_WARNING (CWE-127): [#def99] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:327:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’ # 325| return; # 326| # 327|-> if (cq->device->ops.pre_destroy_cq) { # 328| ret = cq->device->ops.pre_destroy_cq(cq); # 329| WARN_ONCE(ret, "Disable of kernel CQ shouldn't fail"); Error: GCC_ANALYZER_WARNING (CWE-127): [#def100] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:332:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’ # 330| } # 331| # 332|-> switch (cq->poll_ctx) { # 333| case IB_POLL_DIRECT: # 334| break; Error: GCC_ANALYZER_WARNING (CWE-127): [#def101] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:348:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’ # 346| rdma_dim_destroy(cq); # 347| trace_cq_free(cq); # 348|-> if (cq->device->ops.post_destroy_cq) # 349| cq->device->ops.post_destroy_cq(cq); # 350| else Error: GCC_ANALYZER_WARNING (CWE-127): [#def102] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:354:15: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:415:17: call_function: calling ‘ib_free_cq’ from ‘ib_alloc_cqs’ # 352| WARN_ONCE(ret, "Destroy of kernel CQ shouldn't fail"); # 353| rdma_restrack_del(&cq->res); # 354|-> kfree(cq->wc); # 355| kfree(cq); # 356| } Error: GCC_ANALYZER_WARNING (CWE-121): [#def103] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:375:12: enter_function: entry to ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:383:12: branch_false: following ‘false’ branch (when ‘poll_ctx <= 2’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:393:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:396:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:397:22: call_function: inlined call to ‘ib_alloc_cq’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:398:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:399:31: call_function: inlined call to ‘PTR_ERR’ from ‘ib_alloc_cqs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:413:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/infiniband/core/cq.c:414:17: danger: out-of-bounds write at bit 961 but ‘tmp_list’ ends at bit 128 # 412| out_free_cqs: # 413| list_for_each_entry_safe(cq, n, &tmp_list, pool_entry) { # 414|-> cq->shared = false; # 415| ib_free_cq(cq); # 416| } Error: GCC_ANALYZER_WARNING (CWE-457): [#def104] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:898:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ac_end’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:866:16: enter_function: entry to ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: call_function: calling ‘request_ihex_firmware’ from ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: return_function: returning to ‘ili210x_firmware_update_store’ from ‘request_ihex_firmware’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:877:12: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: call_function: calling ‘ili251x_firmware_to_buffer’ from ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: return_function: returning to ‘ili210x_firmware_update_store’ from ‘ili251x_firmware_to_buffer’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:885:17: call_function: inlined call to ‘PTR_ERR_OR_ZERO’ from ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:897:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:898:25: danger: use of uninitialized value ‘ac_end’ here # 896| if (client->irq > 0) { # 897| guard(disable_irq)(&client->irq); # 898|-> error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end); # 899| } else { # 900| error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end); Error: GCC_ANALYZER_WARNING (CWE-457): [#def105] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:900:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ac_end’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:866:16: enter_function: entry to ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: call_function: calling ‘request_ihex_firmware’ from ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:876:17: return_function: returning to ‘ili210x_firmware_update_store’ from ‘request_ihex_firmware’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:877:12: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: call_function: calling ‘ili251x_firmware_to_buffer’ from ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:884:25: return_function: returning to ‘ili210x_firmware_update_store’ from ‘ili251x_firmware_to_buffer’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:885:17: call_function: inlined call to ‘PTR_ERR_OR_ZERO’ from ‘ili210x_firmware_update_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:896:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:900:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/input/touchscreen/ili210x.c:900:25: danger: use of uninitialized value ‘ac_end’ here # 898| error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end); # 899| } else { # 900|-> error = ili210x_firmware_update(dev, fwbuf, ac_end, df_end); # 901| } # 902| Error: GCC_ANALYZER_WARNING (CWE-457): [#def106] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/mailbox/pcc.c:205:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘val’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/mailbox/pcc.c:288:13: enter_function: entry to ‘pcc_chan_acknowledge’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/mailbox/pcc.c:295:9: call_function: calling ‘pcc_chan_reg_read_modify_write’ from ‘pcc_chan_acknowledge’ # 203| return ret; # 204| # 205|-> val &= reg->preserve_mask; # 206| val |= reg->set_mask; # 207| Error: GCC_ANALYZER_WARNING (CWE-457): [#def107] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/md/bcache/journal.c:863:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*keys.<U95a0>.keys’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/md/bcache/journal.c:885:6: enter_function: entry to ‘bch_journal_meta’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/md/bcache/journal.c:892:15: call_function: calling ‘bch_journal’ from ‘bch_journal_meta’ # 861| w = journal_wait_for_write(c, bch_keylist_nkeys(keys)); # 862| # 863|-> memcpy(bset_bkey_last(w->data), keys->keys, bch_keylist_bytes(keys)); # 864| w->data->keys += bch_keylist_nkeys(keys); # 865| Error: GCC_ANALYZER_WARNING (CWE-457): [#def108] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:1617:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*v4l2_ctrl.id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2458:12: enter_function: entry to ‘uvc_mapping_get_xctrl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2463:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2466:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/media/usb/uvc/uvc_ctrl.c:2466:16: call_function: calling ‘uvc_mapping_get_xctrl_std’ from ‘uvc_mapping_get_xctrl’ # 1615| * For minimum value, use maximum speed but in negative direction. # 1616| */ # 1617|-> if (uvc_ctrl_is_relative_ptz(v4l2_ctrl->id)) # 1618| v4l2_ctrl->minimum = -v4l2_ctrl->maximum; # 1619| else Error: GCC_ANALYZER_WARNING (CWE-476): [#def109] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:124:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:616:12: enter_function: entry to ‘peak_canfd_set_bittiming’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:620:16: call_function: calling ‘pucan_set_timing_slow’ from ‘peak_canfd_set_bittiming’ # 122| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_TIMING_SLOW); # 123| # 124|-> cmd->sjw_t = PUCAN_TSLOW_SJW_T(pbt->sjw - 1, # 125| priv->can.ctrlmode & # 126| CAN_CTRLMODE_3_SAMPLES); Error: GCC_ANALYZER_WARNING (CWE-476): [#def110] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:147:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:623:12: enter_function: entry to ‘peak_canfd_set_data_bittiming’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:627:16: call_function: calling ‘pucan_set_timing_fast’ from ‘peak_canfd_set_data_bittiming’ # 145| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_TIMING_FAST); # 146| # 147|-> cmd->sjw = PUCAN_TFAST_SJW(pbt->sjw - 1); # 148| cmd->tseg1 = PUCAN_TFAST_TSEG1(pbt->prop_seg + pbt->phase_seg1 - 1); # 149| cmd->tseg2 = PUCAN_TFAST_TSEG2(pbt->phase_seg2 - 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def111] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:189:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:527:13: enter_function: entry to ‘peak_canfd_stop’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:533:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:538:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:538:17: call_function: calling ‘pucan_tx_abort’ from ‘peak_canfd_stop’ # 187| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_TX_ABORT); # 188| # 189|-> cmd->flags = cpu_to_le16(flags); # 190| # 191| return pucan_write_cmd(priv); Error: GCC_ANALYZER_WARNING (CWE-476): [#def112] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:200:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:505:12: enter_function: entry to ‘peak_canfd_start’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:509:15: call_function: calling ‘pucan_clr_err_counters’ from ‘peak_canfd_start’ # 198| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_WR_ERR_CNT); # 199| # 200|-> cmd->sel_mask = cpu_to_le16(PUCAN_WRERRCNT_TE | PUCAN_WRERRCNT_RE); # 201| cmd->tx_counter = 0; # 202| cmd->rx_counter = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def113] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:213:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:567:12: enter_function: entry to ‘peak_canfd_open’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:573:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:578:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:579:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:582:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:593:15: call_function: calling ‘pucan_set_options’ from ‘peak_canfd_open’ # 211| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_SET_EN_OPTION); # 212| # 213|-> cmd->options = cpu_to_le16(opt_mask); # 214| # 215| return pucan_write_cmd(priv); Error: GCC_ANALYZER_WARNING (CWE-476): [#def114] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:224:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:567:12: enter_function: entry to ‘peak_canfd_open’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:573:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:578:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:579:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:582:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:582:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:583:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:583:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:584:31: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/peak_canfd/peak_canfd.c:584:31: call_function: calling ‘pucan_clr_options’ from ‘peak_canfd_open’ # 222| cmd = pucan_add_cmd(pucan_init_cmd(priv), PUCAN_CMD_CLR_DIS_OPTION); # 223| # 224|-> cmd->options = cpu_to_le16(opt_mask); # 225| # 226| return pucan_write_cmd(priv); Error: GCC_ANALYZER_WARNING (CWE-476): [#def115] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:444:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:424:12: enter_function: entry to ‘pcan_usb_pro_get_can_channel_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:432:14: call_function: inlined call to ‘pcan_msg_init_empty’ from ‘pcan_usb_pro_get_can_channel_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:433:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:433:9: call_function: calling ‘pcan_msg_add_rec’ from ‘pcan_usb_pro_get_can_channel_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:433:9: return_function: returning to ‘pcan_usb_pro_get_can_channel_id’ from ‘pcan_msg_add_rec’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:435:16: call_function: calling ‘pcan_usb_pro_send_cmd’ from ‘pcan_usb_pro_get_can_channel_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:435:16: return_function: returning to ‘pcan_usb_pro_get_can_channel_id’ from ‘pcan_usb_pro_send_cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:436:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:439:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:439:15: call_function: calling ‘pcan_usb_pro_wait_rsp’ from ‘pcan_usb_pro_get_can_channel_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:439:15: return_function: returning to ‘pcan_usb_pro_get_can_channel_id’ from ‘pcan_usb_pro_wait_rsp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:440:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:444:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/usb/peak_usb/pcan_usb_pro.c:444:22: danger: dereference of NULL ‘<unknown>’ # 442| # 443| pdn = (struct pcan_usb_pro_devid *)pc; # 444|-> *can_ch_id = le32_to_cpu(pdn->dev_num); # 445| # 446| return err; Error: GCC_ANALYZER_WARNING (CWE-476): [#def116] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1952:46: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1933:12: enter_function: entry to ‘hellcreek_probe’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1941:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1944:32: call_function: inlined call to ‘devm_kcalloc’ from ‘hellcreek_probe’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1947:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1950:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1950:9: release_memory: using NULL here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/dsa/hirschmann/hellcreek.c:1952:46: danger: dereference of NULL ‘0’ # 1950| hellcreek->pdata = of_device_get_match_data(dev); # 1951| # 1952|-> hellcreek->ports = devm_kcalloc(dev, hellcreek->pdata->num_ports, # 1953| sizeof(*hellcreek->ports), # 1954| GFP_KERNEL); Error: GCC_ANALYZER_WARNING (CWE-476): [#def117] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3247:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3233:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3235:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3240:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3247:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/3com/3c59x.c:3247:21: danger: dereference of NULL ‘<unknown>’ # 3245| } # 3246| # 3247|-> if (VORTEX_PCI(vp)->current_state < PCI_D3hot) # 3248| return; # 3249| Error: GCC_ANALYZER_WARNING (CWE-457): [#def118] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5843:32: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ifa_local’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5771:27: enter_function: entry to ‘macb_suspend’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5786:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5789:13: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5789:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5790:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5790:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5805:17: call_function: inlined call to ‘spinlock_check’ from ‘macb_suspend’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5840:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5841:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/cadence/macb_main.c:5843:32: danger: use of uninitialized value ‘ifa_local’ here # 5841| tmp |= MACB_BIT(ARP); # 5842| /* write IP address into register */ # 5843|-> tmp |= MACB_BFEXT(IP, ifa_local); # 5844| } # 5845| spin_unlock_irqrestore(&bp->lock, flags); Error: GCC_ANALYZER_WARNING (CWE-457): [#def119] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:524:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned int *)set_tport)[2]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1272:5: enter_function: entry to ‘nfp_flower_compile_action’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1285:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nfp_flower_compile_action’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1297:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1298:21: call_function: inlined call to ‘nfp_fl_check_mangle_start’ from ‘nfp_flower_compile_action’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: call_function: calling ‘nfp_flower_loop_action’ from ‘nfp_flower_compile_action’ # 522| static void nfp_fl_set_helper32(u32 value, u32 mask, u8 *p_exact, u8 *p_mask) # 523| { # 524|-> u32 oldvalue = get_unaligned((u32 *)p_exact); # 525| u32 oldmask = get_unaligned((u32 *)p_mask); # 526| Error: GCC_ANALYZER_WARNING (CWE-457): [#def120] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:524:24: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(unsigned int *)&set_eth_14(D)->eth_addr_val[off_8(D)]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1272:5: enter_function: entry to ‘nfp_flower_compile_action’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1285:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nfp_flower_compile_action’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1289:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1297:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1298:21: call_function: inlined call to ‘nfp_fl_check_mangle_start’ from ‘nfp_flower_compile_action’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/ethernet/netronome/nfp/flower/action.c:1300:23: call_function: calling ‘nfp_flower_loop_action’ from ‘nfp_flower_compile_action’ # 522| static void nfp_fl_set_helper32(u32 value, u32 mask, u8 *p_exact, u8 *p_mask) # 523| { # 524|-> u32 oldvalue = get_unaligned((u32 *)p_exact); # 525| u32 oldmask = get_unaligned((u32 *)p_mask); # 526| Error: GCC_ANALYZER_WARNING (CWE-457): [#def121] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/geneve.c:462:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*gh_len’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/geneve.c:570:12: enter_function: entry to ‘geneve_post_decap_hint’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/geneve.c:581:20: call_function: calling ‘geneve_sk_gro_hint_off’ from ‘geneve_post_decap_hint’ # 460| # 461| *type = proto_id_map[id]; # 462|-> *gh_len += gro_hint->nested_hdr_len; # 463| # 464| return (void *)gro_hint - (void *)gh; Error: GCC_ANALYZER_WARNING (CWE-457): [#def122] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:533:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1167:12: enter_function: entry to ‘an8811hb_probe’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1174:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1176:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:1178:15: call_function: calling ‘an8811hb_load_firmware’ from ‘an8811hb_probe’ # 531| * result and continue like the vendor driver does. # 532| */ # 533|-> if (pbus_value & AN8811HB_CRC_ST) { # 534| air_buckpbus_reg_read(phydev, mon3, &pbus_value); # 535| phydev_dbg(phydev, "CRC Check %s!\n", Error: GCC_ANALYZER_WARNING (CWE-457): [#def123] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:964:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:961:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:964:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:964:16: danger: use of uninitialized value ‘pbus_value’ here # 962| return ret; # 963| # 964|-> return (pbus_value & AN8811HB_HWTRAP2_CKO) ? 50000000 : 25000000; # 965| } # 966| Error: GCC_ANALYZER_WARNING (CWE-457): [#def124] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:997:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘pbus_value’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:994:12: branch_false: following ‘false’ branch (when ‘ret >= 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:997:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/phy/air_en8811h.c:997:16: danger: use of uninitialized value ‘pbus_value’ here # 995| return ret; # 996| # 997|-> return (pbus_value & AN8811HB_CLK_DRV_CKO_MASK); # 998| } # 999| Error: GCC_ANALYZER_WARNING (CWE-457): [#def125] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:439:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘eht_len’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:411:13: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:415:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:418:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:425:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:437:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:438:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/ath/ath12k/dp_mon.c:439:25: danger: use of uninitialized value ‘eht_len’ here # 437| if (ppduinfo->is_eht) { # 438| tlv->type = cpu_to_le16(IEEE80211_RADIOTAP_EHT); # 439|-> tlv->len = cpu_to_le16(eht_len); # 440| # 441| eht = (struct ieee80211_radiotap_eht *)tlv->data; Error: GCC_ANALYZER_WARNING (CWE-457): [#def126] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘seq.<U51e0>.tkip.iv32’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:905:20: branch_true: following ‘true’ branch (when ‘sta’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:908:35: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: danger: use of uninitialized value ‘seq.<U51e0>.tkip.iv32’ here # 915| tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64)); # 916| # 917|-> ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k); # 918| iwlagn_convert_p1k(p1k, data->tkip->tx.p1k); # 919| Error: GCC_ANALYZER_WARNING (CWE-457): [#def127] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘seq.<Ud000>.tkip.iv32’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:905:20: branch_true: following ‘true’ branch (when ‘sta’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:908:35: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/wireless/intel/iwlwifi/dvm/lib.c:917:25: danger: use of uninitialized value ‘seq.<Ud000>.tkip.iv32’ here # 915| tkip_tx_sc->iv32 = cpu_to_le32(TKIP_PN_TO_IV32(pn64)); # 916| # 917|-> ieee80211_get_tkip_p1k_iv(key, seq.tkip.iv32, p1k); # 918| iwlagn_convert_p1k(p1k, data->tkip->tx.p1k); # 919| Error: GCC_ANALYZER_WARNING (CWE-476): [#def128] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:960:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2636:1: enter_function: entry to ‘nvme_fc_start_fcp_op’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2694:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2695:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/host/fc.c:2695:23: call_function: calling ‘nvme_fc_map_data’ from ‘nvme_fc_start_fcp_op’ # 958| # 959| for_each_sg(sg, s, nents, i) { # 960|-> s->dma_address = 0L; # 961| #ifdef CONFIG_NEED_SG_DMA_LENGTH # 962| s->dma_length = s->length; Error: GCC_ANALYZER_WARNING (CWE-476): [#def129] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:319:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2522:1: enter_function: entry to ‘nvmet_fc_handle_fcp_rqst’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2550:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2554:24: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2556:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2558:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2561:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nvmet_fc_handle_fcp_rqst’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2561:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2563:9: release_memory: ‘*fod.data_sg’ is NULL kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2568:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2574:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2579:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2580:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2580:23: call_function: calling ‘nvmet_fc_alloc_tgt_pgs’ from ‘nvmet_fc_handle_fcp_rqst’ # 317| # 318| for_each_sg(sg, s, nents, i) { # 319|-> s->dma_address = 0L; # 320| #ifdef CONFIG_NEED_SG_DMA_LENGTH # 321| s->dma_length = s->length; Error: GCC_ANALYZER_WARNING (CWE-476): [#def130] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2276:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2455:1: enter_function: entry to ‘__nvmet_fc_fcp_nvme_cmd_done’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2471:12: branch_false: following ‘false’ branch (when ‘abort == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2477:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2477:12: branch_false: following ‘false’ branch (when ‘status == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2491:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2491:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/fc.c:2493:25: call_function: calling ‘nvmet_fc_transfer_fcp_data’ from ‘__nvmet_fc_fcp_nvme_cmd_done’ # 2274| while (tlen < remaininglen && # 2275| fcpreq->sg_cnt < tgtport->max_sg_cnt && # 2276|-> tlen + sg_dma_len(sg) < NVMET_FC_MAX_SEQ_LENGTH) { # 2277| fcpreq->sg_cnt++; # 2278| tlen += sg_dma_len(sg); Error: GCC_ANALYZER_WARNING (CWE-476): [#def131] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:242:13: enter_function: entry to ‘nvmet_bdev_execute_rw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:255:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:258:14: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:258:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:263:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:276:32: call_function: inlined call to ‘sg_page’ from ‘nvmet_bdev_execute_rw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: call_function: inlined call to ‘sg_page’ from ‘nvmet_bdev_execute_rw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:320:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_bdev_execute_rw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:298:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-bdev.c:299:24: danger: dereference of NULL ‘sg’ # 297| # 298| for_each_sg(req->sg, sg, req->sg_cnt, i) { # 299|-> while (bio_add_page(bio, sg_page(sg), sg->length, sg->offset) # 300| != sg->length) { # 301| struct bio *prev = bio; Error: GCC_ANALYZER_WARNING (CWE-476): [#def132] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:120:13: enter_function: entry to ‘nvmet_file_execute_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:135:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:140:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:140:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘nvmet_file_execute_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:140:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:141:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: call_function: inlined call to ‘sg_page’ from ‘nvmet_file_execute_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:141:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_file_execute_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:141:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/io-cmd-file.c:142:17: danger: dereference of NULL ‘sg’ # 140| memset(&req->f.iocb, 0, sizeof(struct kiocb)); # 141| for_each_sg(req->sg, sg, req->sg_cnt, i) { # 142|-> bvec_set_page(&req->f.bvec[bv_cnt], sg_page(sg), sg->length, # 143| sg->offset); # 144| len += req->f.bvec[bv_cnt].bv_len; Error: GCC_ANALYZER_WARNING (CWE-476): [#def133] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:261:12: enter_function: entry to ‘nvmet_passthru_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:268:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:271:13: call_function: inlined call to ‘nvmet_use_inline_bvec’ from ‘nvmet_passthru_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: call_function: inlined call to ‘sg_page’ from ‘nvmet_passthru_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_passthru_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:281:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/passthru.c:282:21: danger: dereference of NULL ‘sg’ # 280| # 281| for_each_sg(req->sg, sg, req->sg_cnt, i) { # 282|-> if (bio_add_page(bio, sg_page(sg), sg->length, sg->offset) < # 283| sg->length) # 284| goto out_bio_put; Error: GCC_ANALYZER_WARNING (CWE-476): [#def134] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:575:44: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bi’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1629:13: enter_function: entry to ‘nvmet_rdma_queue_established’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1634:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1638:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1640:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1643:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1648:17: call_function: calling ‘nvmet_rdma_handle_command’ from ‘nvmet_rdma_queue_established’ # 573| domain->sig_type = IB_SIG_TYPE_T10_DIF; # 574| domain->sig.dif.bg_type = IB_T10DIF_CRC; # 575|-> domain->sig.dif.pi_interval = 1 << bi->interval_exp; # 576| domain->sig.dif.ref_tag = le32_to_cpu(cmd->rw.reftag); # 577| if (control & NVME_RW_PRINFO_PRCHK_REF) Error: GCC_ANALYZER_WARNING (CWE-476): [#def135] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1634:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘queue’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1767:12: enter_function: entry to ‘nvmet_rdma_cm_handler’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1773:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1776:9: call_function: inlined call to ‘arch_static_branch’ from ‘nvmet_rdma_cm_handler’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1785:17: call_function: calling ‘nvmet_rdma_queue_established’ from ‘nvmet_rdma_cm_handler’ # 1632| # 1633| spin_lock_irqsave(&queue->state_lock, flags); # 1634|-> if (queue->state != NVMET_RDMA_Q_CONNECTING) { # 1635| pr_warn("trying to establish a connected queue\n"); # 1636| goto out_unlock; Error: GCC_ANALYZER_WARNING (CWE-476): [#def136] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1709:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘queue’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1767:12: enter_function: entry to ‘nvmet_rdma_cm_handler’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1773:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1776:9: call_function: inlined call to ‘arch_static_branch’ from ‘nvmet_rdma_cm_handler’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1808:17: call_function: calling ‘nvmet_rdma_queue_connect_fail’ from ‘nvmet_rdma_cm_handler’ # 1707| struct nvmet_rdma_queue *queue) # 1708| { # 1709|-> WARN_ON_ONCE(queue->state != NVMET_RDMA_Q_CONNECTING); # 1710| # 1711| mutex_lock(&nvmet_rdma_queue_mutex); Error: GCC_ANALYZER_WARNING (CWE-476): [#def137] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:379:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1363:12: enter_function: entry to ‘nvmet_tcp_try_recv’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1368:21: branch_true: following ‘true’ branch (when ‘i < budget’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1369:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1369:23: call_function: calling ‘nvmet_tcp_try_recv_one’ from ‘nvmet_tcp_try_recv’ # 377| return; # 378| } # 379|-> if (!sg->length || sg->length <= sg_offset) { # 380| nvmet_tcp_fatal_error(cmd->queue); # 381| return; Error: GCC_ANALYZER_WARNING (CWE-476): [#def138] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:460:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1422:13: enter_function: entry to ‘nvmet_tcp_io_work’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/tcp.c:1432:23: call_function: calling ‘nvmet_tcp_try_recv’ from ‘nvmet_tcp_io_work’ # 458| # 459| while (total_len) { # 460|-> size_t len = min_t(size_t, total_len, sg->length); # 461| # 462| /* Error: GCC_ANALYZER_WARNING (CWE-476): [#def139] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:533:6: enter_function: entry to ‘nvmet_bdev_execute_zone_append’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:545:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:549:42: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:548:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:555:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:555:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:560:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:560:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:566:21: call_function: inlined call to ‘bdev_zone_sectors’ from ‘nvmet_bdev_execute_zone_append’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:566:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:572:13: call_function: inlined call to ‘nvmet_use_inline_bvec’ from ‘nvmet_bdev_execute_zone_append’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:586:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:589:21: call_function: inlined call to ‘sg_page’ from ‘nvmet_bdev_execute_zone_append’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:589:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:593:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:586:9: call_function: inlined call to ‘sg_next’ from ‘nvmet_bdev_execute_zone_append’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:586:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/zns.c:587:30: danger: dereference of NULL ‘sg’ # 585| # 586| for_each_sg(req->sg, sg, req->sg_cnt, sg_cnt) { # 587|-> unsigned int len = sg->length; # 588| # 589| if (bio_add_page(bio, sg_page(sg), len, sg->offset) != len) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def140] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:856:41: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘mode’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:866:12: enter_function: entry to ‘pmc_core_substate_blk_req_show’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:871:27: branch_true: following ‘true’ branch (when ‘pmc_idx != 3’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:878:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:888:17: call_function: calling ‘pmc_core_substate_req_header_show’ from ‘pmc_core_substate_blk_req_show’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:888:17: return_function: returning to ‘pmc_core_substate_blk_req_show’ from ‘pmc_core_substate_req_header_show’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:901:33: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:906:33: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:871:27: branch_true: following ‘true’ branch (when ‘pmc_idx != 3’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:878:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/intel/pmc/core.c:888:17: call_function: calling ‘pmc_core_substate_req_header_show’ from ‘pmc_core_substate_blk_req_show’ # 854| seq_printf(s, "%40s |", "Element"); # 855| pmc_for_each_mode(mode, pmc) # 856|-> seq_printf(s, " %9s |", pmc_lpm_modes[mode]); # 857| # 858| if (type == HEADER_STATUS) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def141] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:175:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*val’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:317:12: enter_function: entry to ‘lwmi_om_hwmon_write’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:324:12: branch_true: following ‘true’ branch (when ‘type == 8’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:325:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:325:17: branch_true: following ‘true’ branch (when ‘attr == 7’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:326:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:350:28: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:353:31: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/platform/x86/lenovo/wmi-other.c:353:31: call_function: calling ‘lwmi_om_fan_get_set’ from ‘lwmi_om_hwmon_write’ # 173| method_id = set ? LWMI_FEATURE_VALUE_SET : LWMI_FEATURE_VALUE_GET; # 174| args.arg0 = LWMI_ATTR_ID_FAN_RPM(channel); # 175|-> args.arg1 = set ? *val : 0; # 176| # 177| err = lwmi_dev_evaluate_int(priv->wdev, 0x0, method_id, Error: GCC_ANALYZER_WARNING (CWE-476): [#def142] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:342:70: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1456:28: enter_function: entry to ‘twl_scsi_queue_lck’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1465:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1471:9: call_function: inlined call to ‘twl_get_request_id’ from ‘twl_scsi_queue_lck’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1476:18: call_function: calling ‘twl_scsiop_execute_scsi’ from ‘twl_scsi_queue_lck’ # 340| # 341| scsi_for_each_sg(srb, sg, sg_count, i) { # 342|-> command_packet->sg_list[i].address = TW_CPU_TO_SGL(sg_dma_address(sg)); # 343| command_packet->sg_list[i].length = TW_CPU_TO_SGL(sg_dma_len(sg)); # 344| } Error: GCC_ANALYZER_WARNING (CWE-476): [#def143] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:345:61: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘srb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1456:28: enter_function: entry to ‘twl_scsi_queue_lck’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1465:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1471:9: call_function: inlined call to ‘twl_get_request_id’ from ‘twl_scsi_queue_lck’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-sas.c:1476:18: call_function: calling ‘twl_scsiop_execute_scsi’ from ‘twl_scsi_queue_lck’ # 343| command_packet->sg_list[i].length = TW_CPU_TO_SGL(sg_dma_len(sg)); # 344| } # 345|-> command_packet->sgl_entries__lunh = cpu_to_le16(TW_REQ_LUN_IN((srb->device->lun >> 4), scsi_sg_count(tw_dev->srb[request_id]))); # 346| } # 347| } else { Error: GCC_ANALYZER_WARNING (CWE-476): [#def144] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1695:12: enter_function: entry to ‘tw_scsiop_read_write’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1709:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1715:40: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1716:12: branch_false: following ‘false’ branch (when ‘command_packet’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1721:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1756:12: branch_false: following ‘false’ branch (when ‘use_sg > 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: branch_true: following ‘true’ branch (when ‘i < use_sg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: call_function: inlined call to ‘sg_next’ from ‘tw_scsiop_read_write’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1759:9: branch_true: following ‘true’ branch (when ‘i < use_sg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/3w-xxxx.c:1760:59: danger: dereference of NULL ‘sg’ # 1758| # 1759| scsi_for_each_sg(tw_dev->srb[request_id], sg, use_sg, i) { # 1760|-> command_packet->byte8.io.sgl[i].address = sg_dma_address(sg); # 1761| command_packet->byte8.io.sgl[i].length = sg_dma_len(sg); # 1762| command_packet->size+=2; Error: GCC_ANALYZER_WARNING (CWE-476): [#def145] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:842:12: enter_function: entry to ‘inia100_build_scb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:867:12: branch_false: following ‘false’ branch (when ‘count_sg >= 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:869:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:869:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:872:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:872:12: branch_true: following ‘true’ branch (when ‘count_sg != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:873:31: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:874:17: branch_true: following ‘true’ branch (when ‘i < count_sg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:874:17: call_function: inlined call to ‘sg_next’ from ‘inia100_build_scb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:874:17: branch_true: following ‘true’ branch (when ‘i < count_sg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/a100u2w.c:875:39: danger: dereference of NULL ‘sg’ # 873| scb->sg_len = cpu_to_le32((u32) (count_sg * 8)); # 874| scsi_for_each_sg(cmd, sg, count_sg, i) { # 875|-> sgent->base = cpu_to_le32((u32) sg_dma_address(sg)); # 876| sgent->length = cpu_to_le32((u32) sg_dma_len(sg)); # 877| sgent++; Error: GCC_ANALYZER_WARNING (CWE-476): [#def146] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3792:13: enter_function: entry to ‘aac_build_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3805:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3808:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3810:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3810:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3810:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3811:35: danger: dereference of NULL ‘sg’ # 3809| # 3810| scsi_for_each_sg(scsicmd, sg, nseg, i) { # 3811|-> psg->sg[i].addr = cpu_to_le32(sg_dma_address(sg)); # 3812| psg->sg[i].count = cpu_to_le32(sg_dma_len(sg)); # 3813| byte_count += sg_dma_len(sg); Error: GCC_ANALYZER_WARNING (CWE-476): [#def147] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3832:13: enter_function: entry to ‘aac_build_sg64’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3847:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: call_function: inlined call to ‘scsi_sglist’ from ‘aac_build_sg64’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sg64’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3850:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3851:29: danger: dereference of NULL ‘sg’ # 3849| # 3850| scsi_for_each_sg(scsicmd, sg, nseg, i) { # 3851|-> int count = sg_dma_len(sg); # 3852| addr = sg_dma_address(sg); # 3853| psg->sg[i].addr[0] = cpu_to_le32(addr & 0xffffffff); Error: GCC_ANALYZER_WARNING (CWE-476): [#def148] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3875:13: enter_function: entry to ‘aac_build_sgraw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3892:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: call_function: inlined call to ‘scsi_sglist’ from ‘aac_build_sgraw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sgraw’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3896:29: danger: dereference of NULL ‘sg’ # 3894| # 3895| scsi_for_each_sg(scsicmd, sg, nseg, i) { # 3896|-> int count = sg_dma_len(sg); # 3897| u64 addr = sg_dma_address(sg); # 3898| psg->sg[i].next = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def149] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3923:13: enter_function: entry to ‘aac_build_sgraw2’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3933:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: call_function: inlined call to ‘scsi_sglist’ from ‘aac_build_sgraw2’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3940:17: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3941:41: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3946:20: branch_true: following ‘true’ branch (when ‘i == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3948:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sgraw2’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3936:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:3937:29: danger: dereference of NULL ‘sg’ # 3935| # 3936| scsi_for_each_sg(scsicmd, sg, nseg, i) { # 3937|-> int count = sg_dma_len(sg); # 3938| u64 addr = sg_dma_address(sg); # 3939| Error: GCC_ANALYZER_WARNING (CWE-476): [#def150] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4039:13: enter_function: entry to ‘aac_build_sghba’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4052:12: branch_false: following ‘false’ branch (when ‘nseg > 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4057:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4057:12: branch_true: following ‘true’ branch (when ‘nseg > 28’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4058:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4062:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4066:17: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4067:32: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4062:9: call_function: inlined call to ‘sg_next’ from ‘aac_build_sghba’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4062:9: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aacraid/aachba.c:4063:29: danger: dereference of NULL ‘sg’ # 4061| # 4062| scsi_for_each_sg(scsicmd, sg, nseg, i) { # 4063|-> int count = sg_dma_len(sg); # 4064| u64 addr = sg_dma_address(sg); # 4065| Error: GCC_ANALYZER_WARNING (CWE-476): [#def151] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10740:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pdev’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10726:16: branch_false: following ‘false’ branch (when ‘bus_type != 4’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10728:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10728:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10737:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10740:21: danger: dereference of NULL ‘pdev’ #10738| adv_dvc_varp->drv_ptr = boardp; #10739| adv_dvc_varp->cfg = &boardp->dvc_cfg.adv_dvc_cfg; #10740|-> if (pdev->device == PCI_DEVICE_ID_ASP_ABP940UW) { #10741| ASC_DBG(1, "wide board ASC-3550\n"); #10742| adv_dvc_varp->chip_type = ADV_CHIP_ASC3550; Error: GCC_ANALYZER_WARNING (CWE-476): [#def152] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10781:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘asc_dvc_varp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10726:16: branch_true: following ‘true’ branch (when ‘bus_type == 4’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10726:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10728:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10737:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10753:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10761:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10776:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10781:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/advansys.c:10781:25: danger: dereference of NULL ‘asc_dvc_varp’ #10779| * calling AscInitGetConfig(). #10780| */ #10781|-> switch (asc_dvc_varp->bus_type) { #10782| #ifdef CONFIG_ISA #10783| case ASC_IS_VL: Error: GCC_ANALYZER_WARNING (CWE-476): [#def153] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:599:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:597:1: enter_function: entry to ‘ahd_linux_target_in_softc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:600:40: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_target_in_softc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:600:40: return_function: returning to ‘ahd_linux_target_in_softc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:599:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’ # 597| ahd_linux_target_in_softc(struct scsi_target *starget) # 598| { # 599|-> struct ahd_softc *ahd = # 600| *((struct ahd_softc **)dev_to_shost(&starget->dev)->hostdata); # 601| unsigned int target_offset; Error: GCC_ANALYZER_WARNING (CWE-476): [#def154] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:613:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:611:1: enter_function: entry to ‘ahd_linux_target_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:614:40: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_target_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:614:40: return_function: returning to ‘ahd_linux_target_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:613:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’ # 611| ahd_linux_target_alloc(struct scsi_target *starget) # 612| { # 613|-> struct ahd_softc *ahd = # 614| *((struct ahd_softc **)dev_to_shost(&starget->dev)->hostdata); # 615| struct seeprom_config *sc = ahd->seep_config; Error: GCC_ANALYZER_WARNING (CWE-476): [#def155] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur_seg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1539:1: enter_function: entry to ‘ahd_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1552:12: branch_false: following ‘false’ branch (when ‘nseg >= 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1555:9: call_function: inlined call to ‘ahd_lock’ from ‘ahd_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1569:12: branch_false: following ‘false’ branch (when ‘scb’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1576:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1612:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ahd_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1619:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1620:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1626:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1626:17: call_function: inlined call to ‘sg_next’ from ‘ahd_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1626:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:1630:25: danger: dereference of NULL ‘cur_seg’ # 1628| bus_size_t len; # 1629| # 1630|-> addr = sg_dma_address(cur_seg); # 1631| len = sg_dma_len(cur_seg); # 1632| scb->platform_data->xfer_len += len; Error: GCC_ANALYZER_WARNING (CWE-476): [#def156] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2370:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2367:13: enter_function: entry to ‘ahd_linux_set_width’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2369:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_width’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2369:35: return_function: return of NULL to ‘ahd_linux_set_width’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2370:27: danger: dereference of NULL ‘shost’ # 2368| { # 2369| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2370|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2371| struct ahd_devinfo devinfo; # 2372| unsigned long flags; Error: GCC_ANALYZER_WARNING (CWE-476): [#def157] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2384:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2381:13: enter_function: entry to ‘ahd_linux_set_period’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2383:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_period’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2383:35: return_function: return of NULL to ‘ahd_linux_set_period’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2384:27: danger: dereference of NULL ‘shost’ # 2382| { # 2383| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2384|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2385| struct ahd_tmode_tstate *tstate; # 2386| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def158] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2437:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2434:13: enter_function: entry to ‘ahd_linux_set_offset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2436:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_offset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2436:35: return_function: return of NULL to ‘ahd_linux_set_offset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2437:27: danger: dereference of NULL ‘shost’ # 2435| { # 2436| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2437|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2438| struct ahd_tmode_tstate *tstate; # 2439| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def159] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2472:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2469:13: enter_function: entry to ‘ahd_linux_set_dt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2471:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_dt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2471:35: return_function: return of NULL to ‘ahd_linux_set_dt’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2472:27: danger: dereference of NULL ‘shost’ # 2470| { # 2471| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2472|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2473| struct ahd_tmode_tstate *tstate; # 2474| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def160] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2514:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2511:13: enter_function: entry to ‘ahd_linux_set_qas’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2513:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_qas’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2513:35: return_function: return of NULL to ‘ahd_linux_set_qas’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2514:27: danger: dereference of NULL ‘shost’ # 2512| { # 2513| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2514|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2515| struct ahd_tmode_tstate *tstate; # 2516| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def161] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2553:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2550:13: enter_function: entry to ‘ahd_linux_set_iu’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2552:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_iu’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2552:35: return_function: return of NULL to ‘ahd_linux_set_iu’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2553:27: danger: dereference of NULL ‘shost’ # 2551| { # 2552| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2553|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2554| struct ahd_tmode_tstate *tstate; # 2555| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def162] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2593:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2590:13: enter_function: entry to ‘ahd_linux_set_rd_strm’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2592:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_rd_strm’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2592:35: return_function: return of NULL to ‘ahd_linux_set_rd_strm’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2593:27: danger: dereference of NULL ‘shost’ # 2591| { # 2592| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2593|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2594| struct ahd_tmode_tstate *tstate; # 2595| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def163] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2629:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2626:13: enter_function: entry to ‘ahd_linux_set_wr_flow’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2628:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_wr_flow’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2628:35: return_function: return of NULL to ‘ahd_linux_set_wr_flow’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2629:27: danger: dereference of NULL ‘shost’ # 2627| { # 2628| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2629|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2630| struct ahd_tmode_tstate *tstate; # 2631| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def164] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2665:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2662:13: enter_function: entry to ‘ahd_linux_set_rti’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2664:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_rti’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2664:35: return_function: return of NULL to ‘ahd_linux_set_rti’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2665:27: danger: dereference of NULL ‘shost’ # 2663| { # 2664| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2665|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2666| struct ahd_tmode_tstate *tstate; # 2667| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def165] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2709:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2706:13: enter_function: entry to ‘ahd_linux_set_pcomp_en’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2708:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_pcomp_en’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2708:35: return_function: return of NULL to ‘ahd_linux_set_pcomp_en’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2709:27: danger: dereference of NULL ‘shost’ # 2707| { # 2708| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2709|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2710| struct ahd_tmode_tstate *tstate; # 2711| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def166] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2759:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2756:13: enter_function: entry to ‘ahd_linux_set_hold_mcs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2758:35: call_function: calling ‘dev_to_shost’ from ‘ahd_linux_set_hold_mcs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2758:35: return_function: return of NULL to ‘ahd_linux_set_hold_mcs’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic79xx_osm.c:2759:27: danger: dereference of NULL ‘shost’ # 2757| { # 2758| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2759|-> struct ahd_softc *ahd = *((struct ahd_softc **)shost->hostdata); # 2760| struct ahd_tmode_tstate *tstate; # 2761| struct ahd_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def167] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:546:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:544:1: enter_function: entry to ‘ahc_linux_target_in_softc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:547:40: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_target_in_softc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:547:40: return_function: returning to ‘ahc_linux_target_in_softc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:546:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’ # 544| ahc_linux_target_in_softc(struct scsi_target *starget) # 545| { # 546|-> struct ahc_softc *ahc = # 547| *((struct ahc_softc **)dev_to_shost(&starget->dev)->hostdata); # 548| unsigned int target_offset; Error: GCC_ANALYZER_WARNING (CWE-476): [#def168] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:560:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:558:1: enter_function: entry to ‘ahc_linux_target_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:561:40: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_target_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:561:40: return_function: returning to ‘ahc_linux_target_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:560:28: danger: dereference of NULL ‘dev_to_shost(&*starget.dev)’ # 558| ahc_linux_target_alloc(struct scsi_target *starget) # 559| { # 560|-> struct ahc_softc *ahc = # 561| *((struct ahc_softc **)dev_to_shost(&starget->dev)->hostdata); # 562| struct seeprom_config *sc = ahc->seep_config; Error: GCC_ANALYZER_WARNING (CWE-476): [#def169] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur_seg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1410:1: enter_function: entry to ‘ahc_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1425:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1434:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1447:12: branch_false: following ‘false’ branch (when ‘nseg >= 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1453:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1454:12: branch_false: following ‘false’ branch (when ‘scb’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1459:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1499:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ahc_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1510:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1516:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1521:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1528:36: call_function: calling ‘ahc_linux_map_seg’ from ‘ahc_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1528:36: return_function: returning to ‘ahc_linux_run_command’ from ‘ahc_linux_map_seg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1521:17: call_function: inlined call to ‘sg_next’ from ‘ahc_linux_run_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1521:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:1526:25: danger: dereference of NULL ‘cur_seg’ # 1524| int consumed; # 1525| # 1526|-> addr = sg_dma_address(cur_seg); # 1527| len = sg_dma_len(cur_seg); # 1528| consumed = ahc_linux_map_seg(ahc, scb, Error: GCC_ANALYZER_WARNING (CWE-476): [#def170] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2327:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2324:13: enter_function: entry to ‘ahc_linux_set_width’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2326:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_width’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2326:35: return_function: return of NULL to ‘ahc_linux_set_width’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2327:27: danger: dereference of NULL ‘shost’ # 2325| { # 2326| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2327|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata); # 2328| struct ahc_devinfo devinfo; # 2329| unsigned long flags; Error: GCC_ANALYZER_WARNING (CWE-476): [#def171] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2341:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2338:13: enter_function: entry to ‘ahc_linux_set_period’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2340:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_period’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2340:35: return_function: return of NULL to ‘ahc_linux_set_period’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2341:27: danger: dereference of NULL ‘shost’ # 2339| { # 2340| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2341|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata); # 2342| struct ahc_tmode_tstate *tstate; # 2343| struct ahc_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def172] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2386:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2383:13: enter_function: entry to ‘ahc_linux_set_offset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2385:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_offset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2385:35: return_function: return of NULL to ‘ahc_linux_set_offset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2386:27: danger: dereference of NULL ‘shost’ # 2384| { # 2385| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2386|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata); # 2387| struct ahc_tmode_tstate *tstate; # 2388| struct ahc_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def173] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2415:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2412:13: enter_function: entry to ‘ahc_linux_set_dt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2414:35: call_function: calling ‘dev_to_shost’ from ‘ahc_linux_set_dt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2414:35: return_function: return of NULL to ‘ahc_linux_set_dt’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/aic7xxx/aic7xxx_osm.c:2415:27: danger: dereference of NULL ‘shost’ # 2413| { # 2414| struct Scsi_Host *shost = dev_to_shost(starget->dev.parent); # 2415|-> struct ahc_softc *ahc = *((struct ahc_softc **)shost->hostdata); # 2416| struct ahc_tmode_tstate *tstate; # 2417| struct ahc_initiator_tinfo *tinfo Error: GCC_ANALYZER_WARNING (CWE-476): [#def174] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/arcmsr/arcmsr_hba.c:1868:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/arcmsr/arcmsr_hba.c:3347:8: enter_function: entry to ‘arcmsr_queue_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/arcmsr/arcmsr_hba.c:3347:8: call_function: calling ‘arcmsr_queue_command_lck’ from ‘arcmsr_queue_command’ # 1866| scsi_for_each_sg(pcmd, sg, nseg, i) { # 1867| /* Get the physical address of the current data pointer */ # 1868|-> length = cpu_to_le32(sg_dma_len(sg)); # 1869| address_lo = cpu_to_le32(dma_addr_lo32(sg_dma_address(sg))); # 1870| address_hi = cpu_to_le32(dma_addr_hi32(sg_dma_address(sg))); Error: GCC_ANALYZER_WARNING (CWE-476): [#def175] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1127:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1126:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1127:37: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1127:37: danger: dereference of NULL ‘rport’ # 1125| { # 1126| struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device)); # 1127|-> struct fc_rport_libfc_priv *rp = rport->dd_data; # 1128| struct bnx2fc_cmd *io_req; # 1129| struct fc_lport *lport; Error: GCC_ANALYZER_WARNING (CWE-476): [#def176] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1649:12: enter_function: entry to ‘bnx2fc_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1671:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1674:20: branch_false: following ‘false’ branch (when ‘sg_len <= 65535’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1680:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1671:9: call_function: inlined call to ‘sg_next’ from ‘bnx2fc_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1671:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1672:17: danger: dereference of NULL ‘sg’ # 1670| scsi_sg_count(sc), sc->sc_data_direction); # 1671| scsi_for_each_sg(sc, sg, sg_count, i) { # 1672|-> sg_len = sg_dma_len(sg); # 1673| addr = sg_dma_address(sg); # 1674| if (sg_len > BNX2FC_MAX_BD_LEN) { Error: GCC_ANALYZER_WARNING (CWE-476): [#def177] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1842:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1841:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1842:37: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/bnx2fc/bnx2fc_io.c:1842:37: danger: dereference of NULL ‘rport’ # 1840| struct fc_lport *lport = shost_priv(host); # 1841| struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device)); # 1842|-> struct fc_rport_libfc_priv *rp = rport->dd_data; # 1843| struct bnx2fc_rport *tgt; # 1844| struct bnx2fc_cmd *io_req; Error: GCC_ANALYZER_WARNING (CWE-476): [#def178] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:396:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:735:13: enter_function: entry to ‘esp_maybe_execute_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:750:15: call_function: calling ‘find_and_prep_issuable_command’ from ‘esp_maybe_execute_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:750:15: return_function: returning to ‘esp_maybe_execute_command’ from ‘find_and_prep_issuable_command’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:751:12: branch_false: following ‘false’ branch (when ‘ent’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:754:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:754:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:759:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:769:9: call_function: calling ‘esp_map_dma’ from ‘esp_maybe_execute_command’ # 394| spriv->num_sg = scsi_dma_map(cmd); # 395| scsi_for_each_sg(cmd, s, spriv->num_sg, i) # 396|-> total += sg_dma_len(s); # 397| } # 398| spriv->cur_residue = sg_dma_len(sg); Error: GCC_ANALYZER_WARNING (CWE-476): [#def179] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1740:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’ # 1738| case ESP_EVENT_DATA_OUT: { # 1739| struct esp_cmd_entry *ent = esp->active_cmd; # 1740|-> struct scsi_cmnd *cmd = ent->cmd; # 1741| dma_addr_t dma_addr = esp_cur_dma_addr(ent, cmd); # 1742| unsigned int dma_len = esp_cur_dma_len(ent, cmd); Error: GCC_ANALYZER_WARNING (CWE-476): [#def180] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1781:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’ # 1779| case ESP_EVENT_DATA_DONE: { # 1780| struct esp_cmd_entry *ent = esp->active_cmd; # 1781|-> struct scsi_cmnd *cmd = ent->cmd; # 1782| int bytes_sent; # 1783| Error: GCC_ANALYZER_WARNING (CWE-476): [#def181] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1828:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’ # 1826| # 1827| if (esp->ireg & ESP_INTR_FDONE) { # 1828|-> ent->status = esp_read8(ESP_FDATA); # 1829| ent->message = esp_read8(ESP_FDATA); # 1830| scsi_esp_cmd(esp, ESP_CMD_MOK); Error: GCC_ANALYZER_WARNING (CWE-476): [#def182] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1832:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’ # 1830| scsi_esp_cmd(esp, ESP_CMD_MOK); # 1831| } else if (esp->ireg == ESP_INTR_BSERV) { # 1832|-> ent->status = esp_read8(ESP_FDATA); # 1833| ent->message = 0xff; # 1834| esp_event(esp, ESP_EVENT_MSGIN); Error: GCC_ANALYZER_WARNING (CWE-476): [#def183] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1838:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’ # 1836| } # 1837| # 1838|-> if (ent->message != COMMAND_COMPLETE) { # 1839| shost_printk(KERN_INFO, esp->host, # 1840| "Unexpected message %x in status\n", Error: GCC_ANALYZER_WARNING (CWE-476): [#def184] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:1852:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ent’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2171:13: enter_function: entry to ‘scsi_esp_intr’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2179:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2184:25: call_function: calling ‘__esp_interrupt’ from ‘scsi_esp_intr’ # 1850| case ESP_EVENT_FREE_BUS: { # 1851| struct esp_cmd_entry *ent = esp->active_cmd; # 1852|-> struct scsi_cmnd *cmd = ent->cmd; # 1853| # 1854| if (ent->message == COMMAND_COMPLETE || Error: GCC_ANALYZER_WARNING (CWE-476): [#def185] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2704:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2698:13: enter_function: entry to ‘esp_set_offset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2700:34: call_function: calling ‘dev_to_shost’ from ‘esp_set_offset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2700:34: return_function: return of NULL to ‘esp_set_offset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/esp_scsi.c:2704:13: danger: dereference of NULL ‘host’ # 2702| struct esp_target_data *tp = &esp->target[target->id]; # 2703| # 2704|-> if (esp->flags & ESP_FLAG_DISABLE_SYNC) # 2705| tp->nego_goal_offset = 0; # 2706| else Error: GCC_ANALYZER_WARNING (CWE-476): [#def186] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:907:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:895:13: enter_function: entry to ‘fcoe_oem_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:903:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:904:19: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:903:18: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:905:19: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:903:18: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:906:23: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fcoe_oem_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:907:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fcoe/fcoe.c:907:22: danger: dereference of NULL ‘pp’ # 905| (ntohs(fh->fh_rx_id) == FC_XID_UNKNOWN)) { # 906| fcp = fc_frame_payload_get(fp, sizeof(*fcp)); # 907|-> if ((fcp->fc_flags & FCP_CFL_WRDATA) && # 908| (ntohl(fcp->fc_dl) > fcoe_ddp_min)) # 909| return true; Error: GCC_ANALYZER_WARNING (CWE-476): [#def187] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:374:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:364:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:370:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:374:9: danger: dereference of NULL ‘rport’ # 372| struct rport_dd_data_s *rdd_data; # 373| # 374|-> rdd_data = rport->dd_data; # 375| tport = rdd_data->tport; # 376| Error: GCC_ANALYZER_WARNING (CWE-476): [#def188] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:355:19: enter_function: entry to ‘fnic_queue_wq_copy_desc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:364:34: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:364:34: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:377:12: branch_true: following ‘true’ branch (when ‘sg_count != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:379:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:380:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:380:17: call_function: inlined call to ‘sg_next’ from ‘fnic_queue_wq_copy_desc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:380:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:381:38: danger: dereference of NULL ‘sg’ # 379| desc = io_req->sgl_list; # 380| for_each_sg(scsi_sglist(sc), sg, sg_count, i) { # 381|-> desc->addr = cpu_to_le64(sg_dma_address(sg)); # 382| desc->len = cpu_to_le32(sg_dma_len(sg)); # 383| desc->_resvd = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def189] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2046:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2040:17: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2041:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2046:9: danger: dereference of NULL ‘rport’ # 2044| fnic_priv(sc)->flags = FNIC_NO_FLAGS; # 2045| # 2046|-> rdd_data = rport->dd_data; # 2047| tport = rdd_data->tport; # 2048| Error: GCC_ANALYZER_WARNING (CWE-476): [#def190] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2538:5: enter_function: entry to ‘fnic_device_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2575:17: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2577:9: call_function: inlined call to ‘spinlock_check’ from ‘fnic_device_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: danger: dereference of NULL ‘rport’ # 2576| # 2577| spin_lock_irqsave(&fnic->fnic_lock, flags); # 2578|-> FNIC_SCSI_DBG(KERN_DEBUG, fnic->host, fnic->fnic_num, # 2579| "fcid: 0x%x lun: %llu hwq: %d mqtag: 0x%x flags: 0x%x Device reset\n", # 2580| rport->port_id, sc->device->lun, hwq, mqtag, Error: GCC_ANALYZER_WARNING (CWE-476): [#def191] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2583:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2538:5: enter_function: entry to ‘fnic_device_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2575:17: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2577:9: call_function: inlined call to ‘spinlock_check’ from ‘fnic_device_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2578:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2583:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/fnic/fnic_scsi.c:2583:9: danger: dereference of NULL ‘rport’ # 2581| fnic_priv(sc)->flags); # 2582| # 2583|-> rdd_data = rport->dd_data; # 2584| tport = rdd_data->tport; # 2585| if (!tport) { Error: GCC_ANALYZER_WARNING (CWE-476): [#def192] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:846:12: enter_function: entry to ‘hptiop_buildsgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:854:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:855:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:855:12: branch_false: following ‘false’ branch (when ‘nseg != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:858:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:861:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: call_function: inlined call to ‘scsi_sglist’ from ‘hptiop_buildsgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:867:32: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: call_function: inlined call to ‘sg_next’ from ‘hptiop_buildsgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:863:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/hptiop.c:864:40: danger: dereference of NULL ‘sg’ # 862| # 863| scsi_for_each_sg(scp, sg, HPT_SCP(scp)->sgcnt, idx) { # 864|-> psg[idx].pci_address = cpu_to_le64(sg_dma_address(sg)) | # 865| hba->ops->host_phy_flag; # 866| psg[idx].size = cpu_to_le32(sg_dma_len(sg)); Error: GCC_ANALYZER_WARNING (CWE-476): [#def193] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/initio.c:2427:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/initio.c:2098:12: enter_function: entry to ‘initio_msgout_reject’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/initio.c:2108:24: call_function: calling ‘wait_tulip’ from ‘initio_msgout_reject’ # 2425| outb(TSC_FLUSH_FIFO, host->addr + TUL_SCtrl0); /* Flush SCSI FIFO */ # 2426| initio_unlink_busy_scb(host, host->active); # 2427|-> host->active->hastat = 0; # 2428| initio_append_done_scb(host, host->active); # 2429| host->active = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def194] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:54:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:903:19: enter_function: entry to ‘fc_els_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:910:17: call_function: calling ‘fc_adisc_fill’ from ‘fc_els_fill’ # 52| adisc = fc_frame_payload_get(fp, sizeof(*adisc)); # 53| memset(adisc, 0, sizeof(*adisc)); # 54|-> adisc->adisc_cmd = ELS_ADISC; # 55| put_unaligned_be64(lport->wwpn, &adisc->adisc_wwpn); # 56| put_unaligned_be64(lport->wwnn, &adisc->adisc_wwnn); Error: GCC_ANALYZER_WARNING (CWE-476): [#def195] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:756:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:747:20: enter_function: entry to ‘fc_plogi_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:754:17: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_plogi_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:755:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:755:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_plogi_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:755:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:756:9: danger: dereference of NULL ‘pp’ # 754| plogi = fc_frame_payload_get(fp, sizeof(*plogi)); # 755| memset(plogi, 0, sizeof(*plogi)); # 756|-> plogi->fl_cmd = (u8) op; # 757| put_unaligned_be64(lport->wwpn, &plogi->fl_wwpn); # 758| put_unaligned_be64(lport->wwnn, &plogi->fl_wwnn); Error: GCC_ANALYZER_WARNING (CWE-476): [#def196] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:788:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:780:20: enter_function: entry to ‘fc_flogi_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:786:17: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_flogi_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:787:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:787:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_flogi_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:787:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:788:9: danger: dereference of NULL ‘pp’ # 786| flogi = fc_frame_payload_get(fp, sizeof(*flogi)); # 787| memset(flogi, 0, sizeof(*flogi)); # 788|-> flogi->fl_cmd = (u8) ELS_FLOGI; # 789| put_unaligned_be64(lport->wwpn, &flogi->fl_wwpn); # 790| put_unaligned_be64(lport->wwnn, &flogi->fl_wwnn); Error: GCC_ANALYZER_WARNING (CWE-476): [#def197] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:813:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:805:20: enter_function: entry to ‘fc_fdisc_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:811:17: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_fdisc_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:812:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:812:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_fdisc_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:812:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:813:9: danger: dereference of NULL ‘pp’ # 811| fdisc = fc_frame_payload_get(fp, sizeof(*fdisc)); # 812| memset(fdisc, 0, sizeof(*fdisc)); # 813|-> fdisc->fl_cmd = (u8) ELS_FDISC; # 814| put_unaligned_be64(lport->wwpn, &fdisc->fl_wwpn); # 815| put_unaligned_be64(lport->wwnn, &fdisc->fl_wwnn); Error: GCC_ANALYZER_WARNING (CWE-476): [#def198] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:834:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:828:20: enter_function: entry to ‘fc_logo_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:832:16: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_logo_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:833:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:833:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_logo_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:833:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:834:9: danger: dereference of NULL ‘pp’ # 832| logo = fc_frame_payload_get(fp, sizeof(*logo)); # 833| memset(logo, 0, sizeof(*logo)); # 834|-> logo->fl_cmd = ELS_LOGO; # 835| hton24(logo->fl_n_port_id, lport->port_id); # 836| logo->fl_n_port_wwn = htonll(lport->wwpn); Error: GCC_ANALYZER_WARNING (CWE-476): [#def199] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:848:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:842:20: enter_function: entry to ‘fc_rtv_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:846:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rtv_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:847:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:847:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_rtv_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:847:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:848:9: danger: dereference of NULL ‘pp’ # 846| rtv = fc_frame_payload_get(fp, sizeof(*rtv)); # 847| memset(rtv, 0, sizeof(*rtv)); # 848|-> rtv->rtv_cmd = ELS_RTV; # 849| } # 850| Error: GCC_ANALYZER_WARNING (CWE-476): [#def200] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:861:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:854:20: enter_function: entry to ‘fc_rec_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:859:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rec_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:860:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:860:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_rec_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:860:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:861:9: danger: dereference of NULL ‘pp’ # 859| rec = fc_frame_payload_get(fp, sizeof(*rec)); # 860| memset(rec, 0, sizeof(*rec)); # 861|-> rec->rec_cmd = ELS_REC; # 862| hton24(rec->rec_s_id, lport->port_id); # 863| rec->rec_ox_id = htons(ep->oxid); Error: GCC_ANALYZER_WARNING (CWE-476): [#def201] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:896:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:890:20: enter_function: entry to ‘fc_scr_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:894:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_scr_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:895:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:895:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_scr_fill’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:895:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_encode.h:896:9: danger: dereference of NULL ‘pp’ # 894| scr = fc_frame_payload_get(fp, sizeof(*scr)); # 895| memset(scr, 0, sizeof(*scr)); # 896|-> scr->scr_cmd = ELS_SCR; # 897| scr->scr_reg_func = ELS_SCRF_FULL; # 898| } Error: GCC_ANALYZER_WARNING (CWE-476): [#def202] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1444:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1764:13: enter_function: entry to ‘fc_exch_recv_bls’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1774:14: call_function: calling ‘fc_exch_find’ from ‘fc_exch_recv_bls’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1774:14: return_function: returning to ‘fc_exch_recv_bls’ from ‘fc_exch_find’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1781:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1799:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1808:28: branch_true: following ‘true’ branch (when ‘ep’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1809:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1809:33: call_function: calling ‘fc_exch_recv_abts’ from ‘fc_exch_recv_bls’ # 1442| memset(ap, 0, sizeof(*ap)); # 1443| sp = &ep->seq; # 1444|-> ap->ba_high_seq_cnt = htons(0xffff); # 1445| if (sp->ssb_stat & SSB_ST_RESP) { # 1446| ap->ba_seq_id = sp->id; Error: GCC_ANALYZER_WARNING (CWE-476): [#def203] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1846:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1829:13: enter_function: entry to ‘fc_seq_ls_acc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1839:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1844:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_seq_ls_acc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1845:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1845:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_seq_ls_acc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1845:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1846:9: danger: dereference of NULL ‘pp’ # 1844| acc = fc_frame_payload_get(fp, sizeof(*acc)); # 1845| memset(acc, 0, sizeof(*acc)); # 1846|-> acc->la_cmd = ELS_LS_ACC; # 1847| fc_fill_reply_hdr(fp, rx_fp, FC_RCTL_ELS_REP, 0); # 1848| lport->tt.frame_send(lport, fp); Error: GCC_ANALYZER_WARNING (CWE-476): [#def204] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1878:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1860:13: enter_function: entry to ‘fc_seq_ls_rjt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1871:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1876:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_seq_ls_rjt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1877:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1877:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_seq_ls_rjt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1877:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:1878:9: danger: dereference of NULL ‘pp’ # 1876| rjt = fc_frame_payload_get(fp, sizeof(*rjt)); # 1877| memset(rjt, 0, sizeof(*rjt)); # 1878|-> rjt->er_cmd = ELS_LS_RJT; # 1879| rjt->er_reason = reason; # 1880| rjt->er_explan = explan; Error: GCC_ANALYZER_WARNING (CWE-476): [#def205] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2069:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2016:13: enter_function: entry to ‘fc_exch_els_rec’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2029:14: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_exch_els_rec’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2031:12: branch_false: following ‘false’ branch (when ‘pp’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2033:15: call_function: inlined call to ‘ntoh24’ from ‘fc_exch_els_rec’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2042:12: branch_false: following ‘false’ branch (when ‘xid != 65535’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2048:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2048:14: call_function: calling ‘fc_exch_lookup’ from ‘fc_exch_els_rec’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2048:14: return_function: returning to ‘fc_exch_els_rec’ from ‘fc_exch_lookup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2049:12: branch_false: following ‘false’ branch (when ‘ep’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2055:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2057:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2062:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2067:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_exch_els_rec’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2068:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2068:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_exch_els_rec’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2068:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2069:9: danger: dereference of NULL ‘pp’ # 2067| acc = fc_frame_payload_get(fp, sizeof(*acc)); # 2068| memset(acc, 0, sizeof(*acc)); # 2069|-> acc->reca_cmd = ELS_LS_ACC; # 2070| acc->reca_ox_id = rp->rec_ox_id; # 2071| memcpy(acc->reca_ofid, rp->rec_s_id, 3); Error: GCC_ANALYZER_WARNING (CWE-476): [#def206] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2258:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2243:13: enter_function: entry to ‘fc_exch_rrq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2253:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2256:15: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_exch_rrq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2257:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2257:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_exch_rrq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2257:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_exch.c:2258:9: danger: dereference of NULL ‘pp’ # 2256| rrq = fc_frame_payload_get(fp, sizeof(*rrq)); # 2257| memset(rrq, 0, sizeof(*rrq)); # 2258|-> rrq->rrq_cmd = ELS_RRQ; # 2259| hton24(rrq->rrq_s_id, ep->sid); # 2260| rrq->rrq_ox_id = htons(ep->oxid); Error: GCC_ANALYZER_WARNING (CWE-476): [#def207] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2154:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2158:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2159:12: branch_false: following ‘false’ branch (when ‘rval == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2162:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2164:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:2167:9: danger: dereference of NULL ‘rport’ # 2165| return rc; # 2166| # 2167|-> FC_SCSI_DBG(lport, "Resetting rport (%6.6x)\n", rport->port_id); # 2168| # 2169| fsp = fc_fcp_pkt_alloc(lport, GFP_NOIO); Error: GCC_ANALYZER_WARNING (CWE-476): [#def208] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2127:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2081:13: enter_function: entry to ‘fc_rport_recv_prlo_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2102:14: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rport_recv_prlo_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2103:12: branch_false: following ‘false’ branch (when ‘pp’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2105:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2106:12: branch_false: following ‘false’ branch (when ‘plen == 20’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2113:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2113:14: call_function: calling ‘fc_frame_alloc’ from ‘fc_rport_recv_prlo_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2113:14: return_function: returning to ‘fc_rport_recv_prlo_req’ from ‘fc_frame_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2114:12: branch_false: following ‘false’ branch (when ‘fp’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2120:14: call_function: inlined call to ‘fc_frame_payload_get’ from ‘fc_rport_recv_prlo_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2122:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘fc_rport_recv_prlo_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2122:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_rport.c:2127:9: danger: dereference of NULL ‘pp’ # 2125| pp->prlo.prlo_len = htons(len); # 2126| spp = &pp->spp; # 2127|-> spp->spp_type = rspp->spp_type; # 2128| spp->spp_type_ext = rspp->spp_type_ext; # 2129| spp->spp_flags = FC_SPP_RESP_ACK; Error: GCC_ANALYZER_WARNING (CWE-476): [#def209] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:95:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘*segment.sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:190:5: enter_function: entry to ‘iscsi_tcp_segment_done’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:218:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:223:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:233:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:235:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:235:17: call_function: inlined call to ‘sg_next’ from ‘iscsi_tcp_segment_done’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:235:17: call_function: inlined call to ‘iscsi_tcp_segment_init_sg’ from ‘iscsi_tcp_segment_done’ # 93| segment->sg = sg; # 94| segment->sg_offset = offset; # 95|-> segment->size = min(sg->length - offset, # 96| segment->total_size - segment->total_copied); # 97| segment->data = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def210] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:95:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:906:5: enter_function: entry to ‘iscsi_tcp_recv_skb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:923:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:929:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:929:12: branch_false: following ‘false’ branch (when ‘offloaded == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:934:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:940:20: branch_false: following ‘false’ branch (when ‘avail != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:946:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:946:17: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:948:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:948:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:948:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:950:22: call_function: calling ‘iscsi_tcp_segment_recv’ from ‘iscsi_tcp_recv_skb’ # 93| segment->sg = sg; # 94| segment->sg_offset = offset; # 95|-> segment->size = min(sg->length - offset, # 96| segment->total_size - segment->total_copied); # 97| segment->data = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def211] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:360:1: enter_function: entry to ‘iscsi_segment_seek_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:368:9: call_function: calling ‘__iscsi_segment_init’ from ‘iscsi_segment_seek_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:368:9: return_function: returning to ‘iscsi_segment_seek_sg’ from ‘__iscsi_segment_init’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:369:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:374:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:369:9: call_function: inlined call to ‘sg_next’ from ‘iscsi_segment_seek_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:369:9: branch_true: following ‘true’ branch (when ‘i < sg_count’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libiscsi_tcp.c:370:30: danger: dereference of NULL ‘sg’ # 368| __iscsi_segment_init(segment, size, done, crcp); # 369| for_each_sg(sg_list, sg, sg_count, i) { # 370|-> if (offset < sg->length) { # 371| iscsi_tcp_segment_init_sg(segment, sg, offset); # 372| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def212] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:155:21: enter_function: entry to ‘sas_ata_qc_issue’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:172:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:175:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:176:12: branch_false: following ‘false’ branch (when ‘task’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:178:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:188:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:188:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:193:19: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: call_function: inlined call to ‘sg_next’ from ‘sas_ata_qc_issue’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:196:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:197:33: danger: dereference of NULL ‘sg’ # 195| } else { # 196| for_each_sg(qc->sg, sg, qc->n_elem, si) # 197|-> xfer += sg_dma_len(sg); # 198| # 199| task->total_xfer_len = xfer; Error: GCC_ANALYZER_WARNING (CWE-476): [#def213] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:379:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ddev’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:866:6: enter_function: entry to ‘sas_ata_eh’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:875:17: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:886:22: call_function: inlined call to ‘list_empty’ from ‘sas_ata_eh’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:886:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:887:42: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_ata.c:889:25: call_function: calling ‘sas_ata_printk’ from ‘sas_ata_eh’ # 377| { # 378| struct ata_port *ap = ddev->sata_dev.ap; # 379|-> struct device *dev = &ddev->rphy->dev; # 380| struct va_format vaf; # 381| va_list args; Error: GCC_ANALYZER_WARNING (CWE-476): [#def214] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:184:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:180:12: enter_function: entry to ‘sas_get_linkerrors’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:183:43: call_function: calling ‘dev_to_shost’ from ‘sas_get_linkerrors’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:183:43: return_function: return of NULL to ‘sas_get_linkerrors’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:184:39: danger: dereference of NULL ‘shost’ # 182| if (scsi_is_sas_phy_local(phy)) { # 183| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 184|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost); # 185| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number]; # 186| struct sas_internal *i = Error: GCC_ANALYZER_WARNING (CWE-476): [#def215] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:233:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:222:12: enter_function: entry to ‘transport_sas_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:231:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:232:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:232:43: call_function: calling ‘dev_to_shost’ from ‘transport_sas_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:232:43: return_function: return of NULL to ‘transport_sas_phy_reset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:233:39: danger: dereference of NULL ‘shost’ # 231| if (scsi_is_sas_phy_local(phy)) { # 232| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 233|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost); # 234| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number]; # 235| struct sas_internal *i = Error: GCC_ANALYZER_WARNING (CWE-476): [#def216] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:267:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:255:5: enter_function: entry to ‘sas_phy_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:265:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:266:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:266:43: call_function: calling ‘dev_to_shost’ from ‘sas_phy_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:266:43: return_function: return of NULL to ‘sas_phy_enable’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:267:39: danger: dereference of NULL ‘shost’ # 265| if (scsi_is_sas_phy_local(phy)) { # 266| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 267|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost); # 268| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number]; # 269| struct sas_internal *i = Error: GCC_ANALYZER_WARNING (CWE-476): [#def217] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:304:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:289:5: enter_function: entry to ‘sas_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:294:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:297:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:302:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:303:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:303:43: call_function: calling ‘dev_to_shost’ from ‘sas_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:303:43: return_function: return of NULL to ‘sas_phy_reset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:304:39: danger: dereference of NULL ‘shost’ # 302| if (scsi_is_sas_phy_local(phy)) { # 303| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 304|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost); # 305| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number]; # 306| struct sas_internal *i = Error: GCC_ANALYZER_WARNING (CWE-476): [#def218] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:340:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:319:12: enter_function: entry to ‘sas_set_phy_speed’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:338:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:339:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:339:43: call_function: calling ‘dev_to_shost’ from ‘sas_set_phy_speed’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:339:43: return_function: return of NULL to ‘sas_set_phy_speed’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:340:39: danger: dereference of NULL ‘shost’ # 338| if (scsi_is_sas_phy_local(phy)) { # 339| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 340|-> struct sas_ha_struct *sas_ha = SHOST_TO_SAS_HA(shost); # 341| struct asd_sas_phy *asd_phy = sas_ha->sas_phy[phy->number]; # 342| struct sas_internal *i = Error: GCC_ANALYZER_WARNING (CWE-476): [#def219] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:525:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:522:12: enter_function: entry to ‘queue_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:524:35: call_function: calling ‘dev_to_shost’ from ‘queue_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:524:35: return_function: return of NULL to ‘queue_phy_reset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:525:31: danger: dereference of NULL ‘shost’ # 523| { # 524| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 525|-> struct sas_ha_struct *ha = SHOST_TO_SAS_HA(shost); # 526| struct sas_phy_data *d = phy->hostdata; # 527| int rc; Error: GCC_ANALYZER_WARNING (CWE-476): [#def220] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:554:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:551:12: enter_function: entry to ‘queue_phy_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:553:35: call_function: calling ‘dev_to_shost’ from ‘queue_phy_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:553:35: return_function: return of NULL to ‘queue_phy_enable’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_init.c:554:31: danger: dereference of NULL ‘shost’ # 552| { # 553| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 554|-> struct sas_ha_struct *ha = SHOST_TO_SAS_HA(shost); # 555| struct sas_phy_data *d = phy->hostdata; # 556| int rc; Error: GCC_ANALYZER_WARNING (CWE-476): [#def221] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:767:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:764:23: enter_function: entry to ‘sas_find_dev_by_rphy’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:766:35: call_function: calling ‘dev_to_shost’ from ‘sas_find_dev_by_rphy’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:766:35: return_function: return of NULL to ‘sas_find_dev_by_rphy’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libsas/sas_scsi_host.c:767:31: danger: dereference of NULL ‘shost’ # 765| { # 766| struct Scsi_Host *shost = dev_to_shost(rphy->dev.parent); # 767|-> struct sas_ha_struct *ha = SHOST_TO_SAS_HA(shost); # 768| struct domain_device *found_dev = NULL; # 769| int i; Error: GCC_ANALYZER_WARNING (CWE-476): [#def222] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1339:1: enter_function: entry to ‘megaraid_mbox_mksgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1352:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1355:12: branch_false: following ‘false’ branch (when ‘sgcnt != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1358:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1360:9: branch_true: following ‘true’ branch (when ‘i < sgcnt’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1360:9: call_function: inlined call to ‘sg_next’ from ‘megaraid_mbox_mksgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1360:9: branch_true: following ‘true’ branch (when ‘i < sgcnt’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/megaraid/megaraid_mbox.c:1361:43: danger: dereference of NULL ‘sgl’ # 1359| # 1360| scsi_for_each_sg(scp, sgl, sgcnt, i) { # 1361|-> ccb->sgl64[i].address = sg_dma_address(sgl); # 1362| ccb->sgl64[i].length = sg_dma_len(sgl); # 1363| } Error: GCC_ANALYZER_WARNING (CWE-476): [#def223] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:209:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2025:22: enter_function: entry to ‘mvumi_build_frame’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2055:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘mvumi_build_frame’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2057:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2059:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/mvumi.c:2058:21: call_function: calling ‘mvumi_make_sgl’ from ‘mvumi_build_frame’ # 207| } # 208| scsi_for_each_sg(scmd, sg, *sg_count, i) { # 209|-> busaddr = sg_dma_address(sg); # 210| m_sg->baseaddr_l = cpu_to_le32(lower_32_bits(busaddr)); # 211| m_sg->baseaddr_h = cpu_to_le32(upper_32_bits(busaddr)); Error: GCC_ANALYZER_WARNING (CWE-476): [#def224] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1419:28: enter_function: entry to ‘myrb_ldev_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1434:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1442:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1553:9: call_function: calling ‘myrb_reset_cmd’ from ‘myrb_ldev_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1553:9: return_function: returning to ‘myrb_ldev_queuecommand’ from ‘myrb_reset_cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1555:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1557:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1558:12: branch_false: following ‘false’ branch (when ‘nsge != 1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1571:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1575:20: branch_false: following ‘false’ branch (when ‘hw_sgl’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1578:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1592:17: branch_true: following ‘true’ branch (when ‘i < nsge’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1592:17: call_function: inlined call to ‘sg_next’ from ‘myrb_ldev_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1592:17: branch_true: following ‘true’ branch (when ‘i < nsge’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrb.c:1593:49: danger: dereference of NULL ‘sgl’ # 1591| # 1592| scsi_for_each_sg(scmd, sgl, nsge, i) { # 1593|-> hw_sgl->sge_addr = (u32)sg_dma_address(sgl); # 1594| hw_sgl->sge_count = (u32)sg_dma_len(sgl); # 1595| hw_sgl++; Error: GCC_ANALYZER_WARNING (CWE-476): [#def225] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sgl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1584:28: enter_function: entry to ‘myrs_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1598:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1604:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1627:9: call_function: calling ‘myrs_reset_cmd’ from ‘myrs_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1627:9: return_function: returning to ‘myrs_queuecommand’ from ‘myrs_reset_cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1630:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1632:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1666:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘myrs_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1716:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1718:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1719:12: branch_false: following ‘false’ branch (when ‘nsge != 1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1725:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1757:17: branch_true: following ‘true’ branch (when ‘i < nsge’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1757:17: call_function: inlined call to ‘sg_next’ from ‘myrs_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1757:17: branch_true: following ‘true’ branch (when ‘i < nsge’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1758:29: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/myrs.c:1764:49: danger: dereference of NULL ‘sgl’ # 1762| return 0; # 1763| } # 1764|-> hw_sgl->sge_addr = (u64)sg_dma_address(sgl); # 1765| hw_sgl->sge_count = (u64)sg_dma_len(sgl); # 1766| hw_sgl++; Error: GCC_ANALYZER_WARNING (CWE-476): [#def226] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3889:1: enter_function: entry to ‘pm8001_chip_make_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nr’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3895:9: call_function: inlined call to ‘sg_next’ from ‘pm8001_chip_make_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3895:9: branch_true: following ‘true’ branch (when ‘i < nr’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pm8001/pm8001_hwi.c:3896:33: danger: dereference of NULL ‘sg’ # 3894| # 3895| for_each_sg(scatter, sg, nr, i) { # 3896|-> buf_prd->addr = cpu_to_le64(sg_dma_address(sg)); # 3897| buf_prd->im_len.len = cpu_to_le32(sg_dma_len(sg)); # 3898| buf_prd->im_len.e = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def227] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pmcraid.c:1103:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pmcraid.c:4878:13: enter_function: entry to ‘pmcraid_complete_ioa_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/pmcraid.c:4884:9: call_function: calling ‘pmcraid_ioa_reset’ from ‘pmcraid_complete_ioa_reset’ # 1101| static void pmcraid_send_hcam_cmd(struct pmcraid_cmd *cmd) # 1102| { # 1103|-> if (cmd->ioa_cb->ioarcb.cdb[1] == PMCRAID_HCAM_CODE_CONFIG_CHANGE) # 1104| atomic_set(&(cmd->drv_inst->ccn.ignore), 0); # 1105| else Error: GCC_ANALYZER_WARNING (CWE-476): [#def228] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:115:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:106:1: enter_function: entry to ‘qedf_sysfs_read_grcdump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:111:34: call_function: calling ‘dev_to_shost’ from ‘qedf_sysfs_read_grcdump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:111:34: return_function: returning to ‘qedf_sysfs_read_grcdump’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:115:13: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:115:13: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 113| struct qedf_ctx *qedf = lport_priv(lport); # 114| # 115|-> if (test_bit(QEDF_GRCDUMP_CAPTURE, &qedf->flags)) { # 116| ret = memory_read_from_buffer(buf, count, &off, # 117| qedf->grcdump, qedf->grcdump_size); Error: GCC_ANALYZER_WARNING (CWE-476): [#def229] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:152:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:126:1: enter_function: entry to ‘qedf_sysfs_write_grcdump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:135:12: branch_false: following ‘false’ branch (when ‘off == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:139:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:139:17: call_function: calling ‘dev_to_shost’ from ‘qedf_sysfs_write_grcdump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:139:17: return_function: returning to ‘qedf_sysfs_write_grcdump’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:145:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:150:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_attr.c:152:17: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 150| switch (reading) { # 151| case 0: # 152|-> memset(qedf->grcdump, 0, qedf->grcdump_size); # 153| clear_bit(QEDF_GRCDUMP_CAPTURE, &qedf->flags); # 154| break; Error: GCC_ANALYZER_WARNING (CWE-476): [#def230] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:492:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:846:5: enter_function: entry to ‘qedf_post_io_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:879:13: call_function: calling ‘qedf_build_bd_list_from_sg’ from ‘qedf_post_io_req’ # 490| # 491| scsi_for_each_sg(sc, sg, sg_count, i) { # 492|-> sg_len = (u32)sg_dma_len(sg); # 493| addr = (u64)sg_dma_address(sg); # 494| Error: GCC_ANALYZER_WARNING (CWE-476): [#def231] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:935:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:934:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:935:37: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_io.c:935:37: danger: dereference of NULL ‘rport’ # 933| struct qedf_ctx *qedf = lport_priv(lport); # 934| struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device)); # 935|-> struct fc_rport_libfc_priv *rp = rport->dd_data; # 936| struct qedf_rport *fcport; # 937| struct qedf_ioreq *io_req; Error: GCC_ANALYZER_WARNING (CWE-476): [#def232] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:729:37: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:725:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:729:37: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qedf/qedf_main.c:729:37: danger: dereference of NULL ‘rport’ # 727| struct qedf_ctx *qedf; # 728| struct qedf_ioreq *io_req; # 729|-> struct fc_rport_libfc_priv *rp = rport->dd_data; # 730| struct fc_rport_priv *rdata; # 731| struct qedf_rport *fcport = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def233] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:25:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:19:1: enter_function: entry to ‘qla2x00_sysfs_read_fw_dump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:23:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_fw_dump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:23:37: return_function: returning to ‘qla2x00_sysfs_read_fw_dump’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:25:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 23| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 24| struct device, kobj))); # 25|-> struct qla_hw_data *ha = vha->hw; # 26| int rval = 0; # 27| Error: GCC_ANALYZER_WARNING (CWE-476): [#def234] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:66:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:60:1: enter_function: entry to ‘qla2x00_sysfs_write_fw_dump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:64:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_fw_dump’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:64:37: return_function: returning to ‘qla2x00_sysfs_write_fw_dump’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:66:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 64| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 65| struct device, kobj))); # 66|-> struct qla_hw_data *ha = vha->hw; # 67| int reading; # 68| Error: GCC_ANALYZER_WARNING (CWE-476): [#def235] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:188:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:182:1: enter_function: entry to ‘qla2x00_sysfs_read_nvram’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:186:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_nvram’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:186:37: return_function: returning to ‘qla2x00_sysfs_read_nvram’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:188:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 186| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 187| struct device, kobj))); # 188|-> struct qla_hw_data *ha = vha->hw; # 189| uint32_t faddr; # 190| struct active_regions active_regions = { }; Error: GCC_ANALYZER_WARNING (CWE-476): [#def236] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:228:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:222:1: enter_function: entry to ‘qla2x00_sysfs_write_nvram’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:226:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_nvram’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:226:37: return_function: returning to ‘qla2x00_sysfs_write_nvram’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:228:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 226| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 227| struct device, kobj))); # 228|-> struct qla_hw_data *ha = vha->hw; # 229| uint16_t cnt; # 230| Error: GCC_ANALYZER_WARNING (CWE-476): [#def237] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:302:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:296:1: enter_function: entry to ‘qla2x00_sysfs_read_optrom’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:300:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_optrom’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:300:37: return_function: returning to ‘qla2x00_sysfs_read_optrom’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:302:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 300| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 301| struct device, kobj))); # 302|-> struct qla_hw_data *ha = vha->hw; # 303| ssize_t rval = 0; # 304| Error: GCC_ANALYZER_WARNING (CWE-476): [#def238] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:326:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:320:1: enter_function: entry to ‘qla2x00_sysfs_write_optrom’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:324:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_optrom’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:324:37: return_function: returning to ‘qla2x00_sysfs_write_optrom’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:326:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 324| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 325| struct device, kobj))); # 326|-> struct qla_hw_data *ha = vha->hw; # 327| # 328| mutex_lock(&ha->optrom_mutex); Error: GCC_ANALYZER_WARNING (CWE-476): [#def239] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:364:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:358:1: enter_function: entry to ‘qla2x00_sysfs_write_optrom_ctl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:362:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_optrom_ctl’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:362:37: return_function: returning to ‘qla2x00_sysfs_write_optrom_ctl’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:364:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 362| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 363| struct device, kobj))); # 364|-> struct qla_hw_data *ha = vha->hw; # 365| uint32_t start = 0; # 366| uint32_t size = ha->optrom_size; Error: GCC_ANALYZER_WARNING (CWE-476): [#def240] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:548:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:542:1: enter_function: entry to ‘qla2x00_sysfs_read_vpd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:546:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_vpd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:546:37: return_function: returning to ‘qla2x00_sysfs_read_vpd’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:548:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 546| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 547| struct device, kobj))); # 548|-> struct qla_hw_data *ha = vha->hw; # 549| uint32_t faddr; # 550| struct active_regions active_regions = { }; Error: GCC_ANALYZER_WARNING (CWE-476): [#def241] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:595:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:589:1: enter_function: entry to ‘qla2x00_sysfs_write_vpd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:593:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_vpd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:593:37: return_function: returning to ‘qla2x00_sysfs_write_vpd’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:595:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 593| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 594| struct device, kobj))); # 595|-> struct qla_hw_data *ha = vha->hw; # 596| uint8_t *tmp_data; # 597| Error: GCC_ANALYZER_WARNING (CWE-476): [#def242] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:667:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:656:1: enter_function: entry to ‘qla2x00_sysfs_read_sfp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:660:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_sfp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:660:37: return_function: returning to ‘qla2x00_sysfs_read_sfp’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:664:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:664:40: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:664:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:667:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:667:9: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 665| return 0; # 666| # 667|-> mutex_lock(&vha->hw->optrom_mutex); # 668| if (qla2x00_chip_is_down(vha)) { # 669| mutex_unlock(&vha->hw->optrom_mutex); Error: GCC_ANALYZER_WARNING (CWE-476): [#def243] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:698:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:692:1: enter_function: entry to ‘qla2x00_sysfs_write_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:696:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_write_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:696:37: return_function: returning to ‘qla2x00_sysfs_write_reset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:698:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 696| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 697| struct device, kobj))); # 698|-> struct qla_hw_data *ha = vha->hw; # 699| struct scsi_qla_host *base_vha = pci_get_drvdata(ha->pdev); # 700| int type; Error: GCC_ANALYZER_WARNING (CWE-476): [#def244] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:848:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:836:1: enter_function: entry to ‘qla2x00_issue_logo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:840:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_issue_logo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:840:37: return_function: returning to ‘qla2x00_issue_logo’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:845:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:848:13: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:848:13: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 846| return 0; # 847| # 848|-> if (unlikely(pci_channel_offline(vha->hw->pdev))) # 849| return 0; # 850| Error: GCC_ANALYZER_WARNING (CWE-476): [#def245] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:885:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:879:1: enter_function: entry to ‘qla2x00_sysfs_read_xgmac_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:883:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_xgmac_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:883:37: return_function: returning to ‘qla2x00_sysfs_read_xgmac_stats’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:885:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 883| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 884| struct device, kobj))); # 885|-> struct qla_hw_data *ha = vha->hw; # 886| int rval; # 887| uint16_t actual_size; Error: GCC_ANALYZER_WARNING (CWE-476): [#def246] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:948:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:942:1: enter_function: entry to ‘qla2x00_sysfs_read_dcbx_tlv’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:946:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_sysfs_read_dcbx_tlv’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:946:37: return_function: returning to ‘qla2x00_sysfs_read_dcbx_tlv’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:948:29: danger: dereference of NULL ‘dev_to_shost(kobj)’ # 946| struct scsi_qla_host *vha = shost_priv(dev_to_shost(container_of(kobj, # 947| struct device, kobj))); # 948|-> struct qla_hw_data *ha = vha->hw; # 949| int rval; # 950| Error: GCC_ANALYZER_WARNING (CWE-476): [#def247] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1803:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1796:1: enter_function: entry to ‘qla2x00_port_speed_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1799:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_port_speed_store’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1799:37: return_function: returning to ‘qla2x00_port_speed_store’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1803:29: danger: dereference of NULL ‘dev_to_shost(dev)’ # 1801| int oldspeed, rval; # 1802| int mode = QLA_SET_DATA_RATE_LR; # 1803|-> struct qla_hw_data *ha = vha->hw; # 1804| # 1805| if (!IS_QLA27XX(ha) && !IS_QLA28XX(ha)) { Error: GCC_ANALYZER_WARNING (CWE-476): [#def248] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1878:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1874:1: enter_function: entry to ‘qla2x00_port_speed_show’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1877:37: call_function: calling ‘dev_to_shost’ from ‘qla2x00_port_speed_show’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1877:37: return_function: returning to ‘qla2x00_port_speed_show’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:1878:29: danger: dereference of NULL ‘dev_to_shost(dev)’ # 1876| { # 1877| struct scsi_qla_host *vha = shost_priv(dev_to_shost(dev)); # 1878|-> struct qla_hw_data *ha = vha->hw; # 1879| ssize_t rval; # 1880| u16 i; Error: GCC_ANALYZER_WARNING (CWE-476): [#def249] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2725:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2701:1: enter_function: entry to ‘qla2x00_dev_loss_tmo_callbk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2703:34: call_function: calling ‘dev_to_shost’ from ‘qla2x00_dev_loss_tmo_callbk’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2703:34: return_function: return of NULL to ‘qla2x00_dev_loss_tmo_callbk’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2707:12: branch_false: following ‘false’ branch (when ‘fcport’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2710:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_attr.c:2725:9: danger: dereference of NULL ‘host’ # 2723| * all local references. # 2724| */ # 2725|-> spin_lock_irqsave(host->host_lock, flags); # 2726| /* Confirm port has not reappeared before clearing pointers. */ # 2727| if (rport->port_state != FC_PORTSTATE_ONLINE) { Error: GCC_ANALYZER_WARNING (CWE-476): [#def250] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:153:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2929:24: call_function: calling ‘qla24xx_proc_fcp_prio_cfg_cmd’ from ‘qla2x00_process_vendor_specific’ # 151| struct fc_bsg_reply *bsg_reply = bsg_job->reply; # 152| scsi_qla_host_t *vha = shost_priv(host); # 153|-> struct qla_hw_data *ha = vha->hw; # 154| int ret = 0; # 155| uint32_t len; Error: GCC_ANALYZER_WARNING (CWE-476): [#def251] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:299:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3016:1: enter_function: entry to ‘qla24xx_bsg_request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3071:23: call_function: calling ‘qla2x00_process_els’ from ‘qla24xx_bsg_request’ # 297| host = rport_to_shost(rport); # 298| vha = shost_priv(host); # 299|-> ha = vha->hw; # 300| type = "FC_BSG_RPT_ELS"; # 301| } else { Error: GCC_ANALYZER_WARNING (CWE-476): [#def252] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:304:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3016:1: enter_function: entry to ‘qla24xx_bsg_request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3071:23: call_function: calling ‘qla2x00_process_els’ from ‘qla24xx_bsg_request’ # 302| host = fc_bsg_to_shost(bsg_job); # 303| vha = shost_priv(host); # 304|-> ha = vha->hw; # 305| type = "FC_BSG_HST_ELS_NOLOGIN"; # 306| els_cmd = bsg_request->rqst_data.h_els.command_code; Error: GCC_ANALYZER_WARNING (CWE-476): [#def253] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:473:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3016:1: enter_function: entry to ‘qla24xx_bsg_request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3074:23: call_function: calling ‘qla2x00_process_ct’ from ‘qla24xx_bsg_request’ # 471| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 472| scsi_qla_host_t *vha = shost_priv(host); # 473|-> struct qla_hw_data *ha = vha->hw; # 474| int rval = (DID_ERROR << 16); # 475| int req_sg_cnt, rsp_sg_cnt; Error: GCC_ANALYZER_WARNING (CWE-476): [#def254] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:741:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2914:24: call_function: calling ‘qla2x00_process_loopback’ from ‘qla2x00_process_vendor_specific’ # 739| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 740| scsi_qla_host_t *vha = shost_priv(host); # 741|-> struct qla_hw_data *ha = vha->hw; # 742| int rval; # 743| uint8_t command_sent; Error: GCC_ANALYZER_WARNING (CWE-476): [#def255] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:984:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2917:24: call_function: calling ‘qla84xx_reset’ from ‘qla2x00_process_vendor_specific’ # 982| struct fc_bsg_reply *bsg_reply = bsg_job->reply; # 983| scsi_qla_host_t *vha = shost_priv(host); # 984|-> struct qla_hw_data *ha = vha->hw; # 985| int rval = 0; # 986| uint32_t flag; Error: GCC_ANALYZER_WARNING (CWE-476): [#def256] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1020:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2920:24: call_function: calling ‘qla84xx_updatefw’ from ‘qla2x00_process_vendor_specific’ # 1018| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1019| scsi_qla_host_t *vha = shost_priv(host); # 1020|-> struct qla_hw_data *ha = vha->hw; # 1021| struct verify_chip_entry_84xx *mn = NULL; # 1022| dma_addr_t mn_dma, fw_dma; Error: GCC_ANALYZER_WARNING (CWE-476): [#def257] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1130:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2923:24: call_function: calling ‘qla84xx_mgmt_cmd’ from ‘qla2x00_process_vendor_specific’ # 1128| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1129| scsi_qla_host_t *vha = shost_priv(host); # 1130|-> struct qla_hw_data *ha = vha->hw; # 1131| struct access_chip_84xx *mn = NULL; # 1132| dma_addr_t mn_dma, mgmt_dma; Error: GCC_ANALYZER_WARNING (CWE-476): [#def258] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1333:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2926:24: call_function: calling ‘qla24xx_iidma’ from ‘qla2x00_process_vendor_specific’ # 1331| uint8_t *rsp_ptr = NULL; # 1332| # 1333|-> if (!IS_IIDMA_CAPABLE(vha->hw)) { # 1334| ql_log(ql_log_info, vha, 0x7046, "iiDMA not supported.\n"); # 1335| return -EINVAL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def259] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1484:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2932:24: call_function: calling ‘qla2x00_read_optrom’ from ‘qla2x00_process_vendor_specific’ # 1482| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1483| scsi_qla_host_t *vha = shost_priv(host); # 1484|-> struct qla_hw_data *ha = vha->hw; # 1485| int rval = 0; # 1486| Error: GCC_ANALYZER_WARNING (CWE-476): [#def260] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1521:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2935:24: call_function: calling ‘qla2x00_update_optrom’ from ‘qla2x00_process_vendor_specific’ # 1519| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1520| scsi_qla_host_t *vha = shost_priv(host); # 1521|-> struct qla_hw_data *ha = vha->hw; # 1522| int rval = 0; # 1523| Error: GCC_ANALYZER_WARNING (CWE-476): [#def261] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1563:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2938:24: call_function: calling ‘qla2x00_update_fru_versions’ from ‘qla2x00_process_vendor_specific’ # 1561| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1562| scsi_qla_host_t *vha = shost_priv(host); # 1563|-> struct qla_hw_data *ha = vha->hw; # 1564| int rval = 0; # 1565| uint8_t bsg[DMA_POOL_SIZE]; Error: GCC_ANALYZER_WARNING (CWE-476): [#def262] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1616:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2941:24: call_function: calling ‘qla2x00_read_fru_status’ from ‘qla2x00_process_vendor_specific’ # 1614| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1615| scsi_qla_host_t *vha = shost_priv(host); # 1616|-> struct qla_hw_data *ha = vha->hw; # 1617| int rval = 0; # 1618| uint8_t bsg[DMA_POOL_SIZE]; Error: GCC_ANALYZER_WARNING (CWE-476): [#def263] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1667:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2944:24: call_function: calling ‘qla2x00_write_fru_status’ from ‘qla2x00_process_vendor_specific’ # 1665| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1666| scsi_qla_host_t *vha = shost_priv(host); # 1667|-> struct qla_hw_data *ha = vha->hw; # 1668| int rval = 0; # 1669| uint8_t bsg[DMA_POOL_SIZE]; Error: GCC_ANALYZER_WARNING (CWE-476): [#def264] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1714:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2947:24: call_function: calling ‘qla2x00_write_i2c’ from ‘qla2x00_process_vendor_specific’ # 1712| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1713| scsi_qla_host_t *vha = shost_priv(host); # 1714|-> struct qla_hw_data *ha = vha->hw; # 1715| int rval = 0; # 1716| uint8_t bsg[DMA_POOL_SIZE]; Error: GCC_ANALYZER_WARNING (CWE-476): [#def265] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1760:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2950:24: call_function: calling ‘qla2x00_read_i2c’ from ‘qla2x00_process_vendor_specific’ # 1758| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1759| scsi_qla_host_t *vha = shost_priv(host); # 1760|-> struct qla_hw_data *ha = vha->hw; # 1761| int rval = 0; # 1762| uint8_t bsg[DMA_POOL_SIZE]; Error: GCC_ANALYZER_WARNING (CWE-476): [#def266] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1810:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2905:1: enter_function: entry to ‘qla2x00_process_vendor_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2953:24: call_function: calling ‘qla24xx_process_bidir_cmd’ from ‘qla2x00_process_vendor_specific’ # 1808| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1809| scsi_qla_host_t *vha = shost_priv(host); # 1810|-> struct qla_hw_data *ha = vha->hw; # 1811| uint32_t rval = EXT_STATUS_OK; # 1812| uint16_t req_sg_cnt = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def267] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1988:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1983:1: enter_function: entry to ‘qlafx00_mgmt_cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1986:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qlafx00_mgmt_cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1986:34: return_function: return of NULL to ‘qlafx00_mgmt_cmd’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:1988:29: danger: dereference of NULL ‘host’ # 1986| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 1987| scsi_qla_host_t *vha = shost_priv(host); # 1988|-> struct qla_hw_data *ha = vha->hw; # 1989| int rval = (DID_ERROR << 16); # 1990| struct qla_mt_iocb_rqst_fx00 *piocb_rqst; Error: GCC_ANALYZER_WARNING (CWE-476): [#def268] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2195:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2190:1: enter_function: entry to ‘qla27xx_get_flash_upd_cap’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2193:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla27xx_get_flash_upd_cap’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2193:34: return_function: return of NULL to ‘qla27xx_get_flash_upd_cap’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2195:29: danger: dereference of NULL ‘host’ # 2193| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 2194| scsi_qla_host_t *vha = shost_priv(host); # 2195|-> struct qla_hw_data *ha = vha->hw; # 2196| struct qla_flash_update_caps cap; # 2197| Error: GCC_ANALYZER_WARNING (CWE-476): [#def269] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2227:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2222:1: enter_function: entry to ‘qla27xx_set_flash_upd_cap’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2225:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla27xx_set_flash_upd_cap’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2225:34: return_function: return of NULL to ‘qla27xx_set_flash_upd_cap’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2227:29: danger: dereference of NULL ‘host’ # 2225| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 2226| scsi_qla_host_t *vha = shost_priv(host); # 2227|-> struct qla_hw_data *ha = vha->hw; # 2228| uint64_t online_fw_attr = 0; # 2229| struct qla_flash_update_caps cap; Error: GCC_ANALYZER_WARNING (CWE-476): [#def270] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2273:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2268:1: enter_function: entry to ‘qla27xx_get_bbcr_data’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2271:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla27xx_get_bbcr_data’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2271:34: return_function: return of NULL to ‘qla27xx_get_bbcr_data’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2273:29: danger: dereference of NULL ‘host’ # 2271| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 2272| scsi_qla_host_t *vha = shost_priv(host); # 2273|-> struct qla_hw_data *ha = vha->hw; # 2274| struct qla_bbcr_data bbcr; # 2275| uint16_t loop_id, topo, sw_cap; Error: GCC_ANALYZER_WARNING (CWE-476): [#def271] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2333:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2327:1: enter_function: entry to ‘qla2x00_get_priv_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2331:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_get_priv_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2331:34: return_function: return of NULL to ‘qla2x00_get_priv_stats’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2333:29: danger: dereference of NULL ‘host’ # 2331| struct Scsi_Host *host = fc_bsg_to_shost(bsg_job); # 2332| scsi_qla_host_t *vha = shost_priv(host); # 2333|-> struct qla_hw_data *ha = vha->hw; # 2334| struct scsi_qla_host *base_vha = pci_get_drvdata(ha->pdev); # 2335| struct link_statistics *stats = NULL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def272] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2394:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2386:1: enter_function: entry to ‘qla2x00_do_dport_diagnostics’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2389:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_do_dport_diagnostics’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2389:34: return_function: return of NULL to ‘qla2x00_do_dport_diagnostics’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2394:14: danger: dereference of NULL ‘host’ # 2392| struct qla_dport_diag *dd; # 2393| # 2394|-> if (!IS_QLA83XX(vha->hw) && !IS_QLA27XX(vha->hw) && # 2395| !IS_QLA28XX(vha->hw)) # 2396| return -EPERM; Error: GCC_ANALYZER_WARNING (CWE-476): [#def273] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2441:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘host’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2430:1: enter_function: entry to ‘qla2x00_do_dport_diagnostics_v2’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2433:34: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_do_dport_diagnostics_v2’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2433:34: return_function: return of NULL to ‘qla2x00_do_dport_diagnostics_v2’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2441:14: danger: dereference of NULL ‘host’ # 2439| uint16_t options; # 2440| # 2441|-> if (!IS_DPORT_CAPABLE(vha->hw)) # 2442| return -EPERM; # 2443| Error: GCC_ANALYZER_WARNING (CWE-476): [#def274] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2517:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2513:1: enter_function: entry to ‘qla2x00_get_flash_image_status’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2515:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_get_flash_image_status’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2515:32: return_function: returning to ‘qla2x00_get_flash_image_status’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2517:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 2515| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job)); # 2516| struct fc_bsg_reply *bsg_reply = bsg_job->reply; # 2517|-> struct qla_hw_data *ha = vha->hw; # 2518| struct qla_active_regions regions = { }; # 2519| struct active_regions active_regions = { }; Error: GCC_ANALYZER_WARNING (CWE-476): [#def275] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2614:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2580:1: enter_function: entry to ‘qla2x00_manage_host_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: return_function: returning to ‘qla2x00_manage_host_stats’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2589:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2594:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2596:12: branch_false: following ‘false’ branch (when ‘req_data_len == 8’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2601:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2602:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2609:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2614:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 2612| switch (req_data->action) { # 2613| case QLA_STOP: # 2614|-> ret = qla2xxx_stop_stats(vha->host, req_data->stat_type); # 2615| break; # 2616| case QLA_START: Error: GCC_ANALYZER_WARNING (CWE-476): [#def276] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2617:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2580:1: enter_function: entry to ‘qla2x00_manage_host_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: return_function: returning to ‘qla2x00_manage_host_stats’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2589:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2594:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2596:12: branch_false: following ‘false’ branch (when ‘req_data_len == 8’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2601:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2602:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2609:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2617:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 2615| break; # 2616| case QLA_START: # 2617|-> ret = qla2xxx_start_stats(vha->host, req_data->stat_type); # 2618| break; # 2619| case QLA_CLEAR: Error: GCC_ANALYZER_WARNING (CWE-476): [#def277] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2620:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2580:1: enter_function: entry to ‘qla2x00_manage_host_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_stats’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2582:32: return_function: returning to ‘qla2x00_manage_host_stats’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2589:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2594:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2596:12: branch_false: following ‘false’ branch (when ‘req_data_len == 8’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2601:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2602:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2609:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2620:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 2618| break; # 2619| case QLA_CLEAR: # 2620|-> ret = qla2xxx_reset_stats(vha->host, req_data->stat_type); # 2621| break; # 2622| default: Error: GCC_ANALYZER_WARNING (CWE-476): [#def278] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2874:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2846:1: enter_function: entry to ‘qla2x00_manage_host_port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: return_function: returning to ‘qla2x00_manage_host_port’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2857:12: branch_false: following ‘false’ branch (when ‘req_data_len == 4’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2862:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2863:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2870:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2874:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 2872| switch (req_data->action) { # 2873| case QLA_ENABLE: # 2874|-> ret = qla2xxx_enable_port(vha->host); # 2875| break; # 2876| case QLA_DISABLE: Error: GCC_ANALYZER_WARNING (CWE-476): [#def279] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2877:23: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2846:1: enter_function: entry to ‘qla2x00_manage_host_port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla2x00_manage_host_port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2848:32: return_function: returning to ‘qla2x00_manage_host_port’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2857:12: branch_false: following ‘false’ branch (when ‘req_data_len == 4’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2862:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2863:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2870:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:2877:23: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 2875| break; # 2876| case QLA_DISABLE: # 2877|-> ret = qla2xxx_disable_port(vha->host); # 2878| break; # 2879| default: Error: GCC_ANALYZER_WARNING (CWE-476): [#def280] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3098:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3093:13: enter_function: entry to ‘qla_bsg_found’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3097:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla_bsg_found’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3097:32: return_function: returning to ‘qla_bsg_found’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3098:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 3096| struct fc_bsg_reply *bsg_reply = bsg_job->reply; # 3097| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job)); # 3098|-> struct qla_hw_data *ha = vha->hw; # 3099| srb_t *sp = NULL; # 3100| int cnt; Error: GCC_ANALYZER_WARNING (CWE-476): [#def281] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3209:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3205:1: enter_function: entry to ‘qla24xx_bsg_timeout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3208:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla24xx_bsg_timeout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3208:32: return_function: returning to ‘qla24xx_bsg_timeout’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3209:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 3207| struct fc_bsg_request *bsg_request = bsg_job->request; # 3208| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job)); # 3209|-> struct qla_hw_data *ha = vha->hw; # 3210| int i; # 3211| struct qla_qpair *qpair; Error: GCC_ANALYZER_WARNING (CWE-476): [#def282] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3343:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3339:12: enter_function: entry to ‘qla28xx_validate_flash_image’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3341:32: call_function: calling ‘fc_bsg_to_shost’ from ‘qla28xx_validate_flash_image’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3341:32: return_function: returning to ‘qla28xx_validate_flash_image’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_bsg.c:3343:29: danger: dereference of NULL ‘fc_bsg_to_shost(bsg_job)’ # 3341| scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job)); # 3342| struct fc_bsg_reply *bsg_reply = bsg_job->reply; # 3343|-> struct qla_hw_data *ha = vha->hw; # 3344| uint16_t state = 0; # 3345| int rval = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def283] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_dsd.h:27:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur_seg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3369:1: enter_function: entry to ‘qla82xx_start_scsi’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3416:12: branch_false: following ‘false’ branch (when ‘handle != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3420:13: call_function: inlined call to ‘scsi_sg_count’ from ‘qla82xx_start_scsi’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3420:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3421:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3423:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3428:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3430:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3436:34: call_function: inlined call to ‘qla24xx_calc_dsd_lists’ from ‘qla82xx_start_scsi’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3437:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3445:39: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3489:17: call_function: inlined call to ‘fortify_memset_chk’ from ‘qla82xx_start_scsi’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3489:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3492:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3499:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3502:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3516:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3525:17: call_function: inlined call to ‘fortify_memset_chk’ from ‘qla82xx_start_scsi’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3525:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3536:21: call_function: calling ‘qla24xx_build_scsi_type_6_iocbs’ from ‘qla82xx_start_scsi’ # 25| static inline void append_dsd64(struct dsd64 **dsd, struct scatterlist *sg) # 26| { # 27|-> put_unaligned_le64(sg_dma_address(sg), &(*dsd)->address); # 28| put_unaligned_le32(sg_dma_len(sg), &(*dsd)->length); # 29| (*dsd)++; Error: GCC_ANALYZER_WARNING (CWE-476): [#def284] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_dsd.h:27:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3287:1: enter_function: entry to ‘qla24xx_ct_iocb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3322:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_false: following ‘false’ branch (when ‘avail_dsds != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3336:17: call_function: inlined call to ‘append_dsd64’ from ‘qla24xx_ct_iocb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3322:9: call_function: inlined call to ‘sg_next’ from ‘qla24xx_ct_iocb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3322:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3324:20: branch_false: following ‘false’ branch (when ‘avail_dsds != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:3336:17: call_function: inlined call to ‘append_dsd64’ from ‘qla24xx_ct_iocb’ # 25| static inline void append_dsd64(struct dsd64 **dsd, struct scatterlist *sg) # 26| { # 27|-> put_unaligned_le64(sg_dma_address(sg), &(*dsd)->address); # 28| put_unaligned_le32(sg_dma_len(sg), &(*dsd)->length); # 29| (*dsd)++; Error: GCC_ANALYZER_WARNING (CWE-476): [#def285] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:806:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2063:1: enter_function: entry to ‘qla2xxx_dif_start_scsi_mq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2086:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2091:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2098:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2105:9: call_function: inlined call to ‘spinlock_check’ from ‘qla2xxx_dif_start_scsi_mq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2125:12: branch_false: following ‘false’ branch (when ‘handle != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2130:13: call_function: inlined call to ‘scsi_sg_count’ from ‘qla2xxx_dif_start_scsi_mq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2130:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2131:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2133:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2136:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: call_function: calling ‘qla24xx_get_one_block_sg’ from ‘qla2xxx_dif_start_scsi_mq’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: return_function: returning to ‘qla2xxx_dif_start_scsi_mq’ from ‘qla24xx_get_one_block_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2151:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_iocb.c:2149:32: call_function: calling ‘qla24xx_get_one_block_sg’ from ‘qla2xxx_dif_start_scsi_mq’ # 804| cumulative_partial = sgx->tot_partial; # 805| # 806|-> sg_dma_addr = sg_dma_address(sg); # 807| sg_len = sg_dma_len(sg); # 808| Error: GCC_ANALYZER_WARNING (CWE-476): [#def286] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:3106:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4378:1: enter_function: entry to ‘qla24xx_msix_default’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4392:12: branch_false: following ‘false’ branch (when ‘dev_id’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4397:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4405:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4407:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4407:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4423:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4423:27: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4426:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/qla2xxx/qla_isr.c:4444:25: call_function: calling ‘qla24xx_process_response_queue’ from ‘qla24xx_msix_default’ # 3104| scsi_for_each_prot_sg(cmd, sg, # 3105| scsi_prot_sg_count(cmd), i) { # 3106|-> num_ent = sg_dma_len(sg) / 8; # 3107| if (k + num_ent < blocks_done) { # 3108| k += num_ent; Error: GCC_ANALYZER_WARNING (CWE-476): [#def287] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:391:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:387:12: enter_function: entry to ‘fc_host_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:390:35: call_function: calling ‘dev_to_shost’ from ‘fc_host_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:390:35: return_function: return of NULL to ‘fc_host_setup’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:391:31: danger: dereference of NULL ‘shost’ # 389| { # 390| struct Scsi_Host *shost = dev_to_shost(dev); # 391|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost); # 392| # 393| /* Error: GCC_ANALYZER_WARNING (CWE-476): [#def288] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:462:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:458:12: enter_function: entry to ‘fc_host_remove’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:461:35: call_function: calling ‘dev_to_shost’ from ‘fc_host_remove’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:461:35: return_function: return of NULL to ‘fc_host_remove’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:462:31: danger: dereference of NULL ‘shost’ # 460| { # 461| struct Scsi_Host *shost = dev_to_shost(dev); # 462|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost); # 463| # 464| fc_bsg_remove(fc_host->rqst_q); Error: GCC_ANALYZER_WARNING (CWE-476): [#def289] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1144:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1140:12: enter_function: entry to ‘fc_rport_set_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1143:35: call_function: calling ‘dev_to_shost’ from ‘fc_rport_set_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1143:35: return_function: return of NULL to ‘fc_rport_set_dev_loss_tmo’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1144:33: danger: dereference of NULL ‘shost’ # 1142| { # 1143| struct Scsi_Host *shost = rport_to_shost(rport); # 1144|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 1145| # 1146| if ((rport->port_state == FC_PORTSTATE_BLOCKED) || Error: GCC_ANALYZER_WARNING (CWE-476): [#def290] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: enter_function: entry to ‘show_fc_rport_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_rport_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: return_function: return of NULL to ‘show_fc_rport_dev_loss_tmo’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1168:1: danger: dereference of NULL ‘shost’ # 1166| } # 1167| # 1168|-> fc_rport_show_function(dev_loss_tmo, "%u\n", 20, ) # 1169| static ssize_t # 1170| store_fc_rport_dev_loss_tmo(struct device *dev, struct device_attribute *attr, Error: GCC_ANALYZER_WARNING (CWE-476): [#def291] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: enter_function: entry to ‘fc_rport_encinfo_status’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: call_function: calling ‘dev_to_shost’ from ‘fc_rport_encinfo_status’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: return_function: return of NULL to ‘fc_rport_encinfo_status’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1360:1: danger: dereference of NULL ‘shost’ # 1358| static FC_DEVICE_ATTR(rport, encryption_##name, 0444, fc_rport_encinfo_##name, NULL) \ # 1359| # 1360|-> fc_rport_encryption(status); # 1361| # 1362| static struct attribute *fc_rport_encryption_attrs[] = { Error: GCC_ANALYZER_WARNING (CWE-476): [#def292] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: enter_function: entry to ‘show_fc_starget_node_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_starget_node_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: return_function: return of NULL to ‘show_fc_starget_node_name’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1490:1: danger: dereference of NULL ‘shost’ # 1488| # 1489| /* The FC Transport SCSI Target Attributes: */ # 1490|-> fc_starget_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long); # 1491| fc_starget_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long); # 1492| fc_starget_rd_attr(port_id, "0x%06x\n", 20); Error: GCC_ANALYZER_WARNING (CWE-476): [#def293] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: enter_function: entry to ‘show_fc_starget_port_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_starget_port_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: return_function: return of NULL to ‘show_fc_starget_port_name’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1491:1: danger: dereference of NULL ‘shost’ # 1489| /* The FC Transport SCSI Target Attributes: */ # 1490| fc_starget_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long); # 1491|-> fc_starget_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long); # 1492| fc_starget_rd_attr(port_id, "0x%06x\n", 20); # 1493| Error: GCC_ANALYZER_WARNING (CWE-476): [#def294] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: enter_function: entry to ‘show_fc_starget_port_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_starget_port_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: return_function: return of NULL to ‘show_fc_starget_port_id’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1492:1: danger: dereference of NULL ‘shost’ # 1490| fc_starget_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long); # 1491| fc_starget_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long); # 1492|-> fc_starget_rd_attr(port_id, "0x%06x\n", 20); # 1493| # 1494| Error: GCC_ANALYZER_WARNING (CWE-476): [#def295] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1920:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1915:1: enter_function: entry to ‘show_fc_host_supported_classes’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1918:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_supported_classes’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1918:35: return_function: return of NULL to ‘show_fc_host_supported_classes’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1920:13: danger: dereference of NULL ‘shost’ # 1918| struct Scsi_Host *shost = transport_class_to_shost(dev); # 1919| # 1920|-> if (fc_host_supported_classes(shost) == FC_COS_UNSPECIFIED) # 1921| return snprintf(buf, 20, "unspecified\n"); # 1922| Error: GCC_ANALYZER_WARNING (CWE-476): [#def296] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1933:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1929:1: enter_function: entry to ‘show_fc_host_supported_fc4s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1932:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_supported_fc4s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1932:35: return_function: return of NULL to ‘show_fc_host_supported_fc4s’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1933:43: danger: dereference of NULL ‘shost’ # 1931| { # 1932| struct Scsi_Host *shost = transport_class_to_shost(dev); # 1933|-> return (ssize_t)show_fc_fc4s(buf, fc_host_supported_fc4s(shost)); # 1934| } # 1935| static FC_DEVICE_ATTR(host, supported_fc4s, S_IRUGO, Error: GCC_ANALYZER_WARNING (CWE-476): [#def297] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1944:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1939:1: enter_function: entry to ‘show_fc_host_supported_speeds’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1942:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_supported_speeds’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1942:35: return_function: return of NULL to ‘show_fc_host_supported_speeds’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1944:13: danger: dereference of NULL ‘shost’ # 1942| struct Scsi_Host *shost = transport_class_to_shost(dev); # 1943| # 1944|-> if (fc_host_supported_speeds(shost) == FC_PORTSPEED_UNKNOWN) # 1945| return snprintf(buf, 20, "unknown\n"); # 1946| Error: GCC_ANALYZER_WARNING (CWE-476): [#def298] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: enter_function: entry to ‘show_fc_host_node_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_node_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: return_function: return of NULL to ‘show_fc_host_node_name’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1953:1: danger: dereference of NULL ‘shost’ # 1951| # 1952| # 1953|-> fc_private_host_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long); # 1954| fc_private_host_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long); # 1955| fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20, Error: GCC_ANALYZER_WARNING (CWE-476): [#def299] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: enter_function: entry to ‘show_fc_host_port_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: return_function: return of NULL to ‘show_fc_host_port_name’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1954:1: danger: dereference of NULL ‘shost’ # 1952| # 1953| fc_private_host_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long); # 1954|-> fc_private_host_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long); # 1955| fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20, # 1956| unsigned long long); Error: GCC_ANALYZER_WARNING (CWE-476): [#def300] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: enter_function: entry to ‘show_fc_host_permanent_port_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_permanent_port_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: return_function: return of NULL to ‘show_fc_host_permanent_port_name’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1955:1: danger: dereference of NULL ‘shost’ # 1953| fc_private_host_rd_attr_cast(node_name, "0x%llx\n", 20, unsigned long long); # 1954| fc_private_host_rd_attr_cast(port_name, "0x%llx\n", 20, unsigned long long); # 1955|-> fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20, # 1956| unsigned long long); # 1957| fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20); Error: GCC_ANALYZER_WARNING (CWE-476): [#def301] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: enter_function: entry to ‘show_fc_host_maxframe_size’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_maxframe_size’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: return_function: return of NULL to ‘show_fc_host_maxframe_size’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1957:1: danger: dereference of NULL ‘shost’ # 1955| fc_private_host_rd_attr_cast(permanent_port_name, "0x%llx\n", 20, # 1956| unsigned long long); # 1957|-> fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20); # 1958| fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20); # 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1)); Error: GCC_ANALYZER_WARNING (CWE-476): [#def302] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: enter_function: entry to ‘show_fc_host_max_npiv_vports’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_max_npiv_vports’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: return_function: return of NULL to ‘show_fc_host_max_npiv_vports’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1958:1: danger: dereference of NULL ‘shost’ # 1956| unsigned long long); # 1957| fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20); # 1958|-> fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20); # 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1)); # 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def303] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: enter_function: entry to ‘show_fc_host_serial_number’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_serial_number’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: return_function: return of NULL to ‘show_fc_host_serial_number’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1959:1: danger: dereference of NULL ‘shost’ # 1957| fc_private_host_rd_attr(maxframe_size, "%u bytes\n", 20); # 1958| fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20); # 1959|-> fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1)); # 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1); # 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def304] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: enter_function: entry to ‘show_fc_host_manufacturer’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_manufacturer’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: return_function: return of NULL to ‘show_fc_host_manufacturer’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1960:1: danger: dereference of NULL ‘shost’ # 1958| fc_private_host_rd_attr(max_npiv_vports, "%u\n", 20); # 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1)); # 1960|-> fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1); # 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def305] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: enter_function: entry to ‘show_fc_host_model’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_model’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: return_function: return of NULL to ‘show_fc_host_model’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1961:1: danger: dereference of NULL ‘shost’ # 1959| fc_private_host_rd_attr(serial_number, "%s\n", (FC_SERIAL_NUMBER_SIZE +1)); # 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1); # 1961|-> fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def306] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: enter_function: entry to ‘show_fc_host_model_description’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_model_description’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: return_function: return of NULL to ‘show_fc_host_model_description’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1962:1: danger: dereference of NULL ‘shost’ # 1960| fc_private_host_rd_attr(manufacturer, "%s\n", FC_SERIAL_NUMBER_SIZE + 1); # 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1962|-> fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def307] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: enter_function: entry to ‘show_fc_host_hardware_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_hardware_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: return_function: return of NULL to ‘show_fc_host_hardware_version’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1963:1: danger: dereference of NULL ‘shost’ # 1961| fc_private_host_rd_attr(model, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1963|-> fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1965| fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def308] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: enter_function: entry to ‘show_fc_host_driver_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_driver_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: return_function: return of NULL to ‘show_fc_host_driver_version’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1964:1: danger: dereference of NULL ‘shost’ # 1962| fc_private_host_rd_attr(model_description, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1964|-> fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1965| fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1966| fc_private_host_rd_attr(optionrom_version, "%s\n", FC_VERSION_STRING_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def309] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: enter_function: entry to ‘show_fc_host_firmware_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_firmware_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: return_function: return of NULL to ‘show_fc_host_firmware_version’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1965:1: danger: dereference of NULL ‘shost’ # 1963| fc_private_host_rd_attr(hardware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1965|-> fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1966| fc_private_host_rd_attr(optionrom_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1967| Error: GCC_ANALYZER_WARNING (CWE-476): [#def310] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: enter_function: entry to ‘show_fc_host_optionrom_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_optionrom_version’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: return_function: return of NULL to ‘show_fc_host_optionrom_version’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1966:1: danger: dereference of NULL ‘shost’ # 1964| fc_private_host_rd_attr(driver_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1965| fc_private_host_rd_attr(firmware_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1966|-> fc_private_host_rd_attr(optionrom_version, "%s\n", FC_VERSION_STRING_SIZE + 1); # 1967| # 1968| Error: GCC_ANALYZER_WARNING (CWE-476): [#def311] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1976:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1972:1: enter_function: entry to ‘show_fc_host_active_fc4s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1975:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_active_fc4s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1975:35: return_function: return of NULL to ‘show_fc_host_active_fc4s’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1976:33: danger: dereference of NULL ‘shost’ # 1974| { # 1975| struct Scsi_Host *shost = transport_class_to_shost(dev); # 1976|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 1977| # 1978| if (i->f->get_host_active_fc4s) Error: GCC_ANALYZER_WARNING (CWE-476): [#def312] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1991:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1987:1: enter_function: entry to ‘show_fc_host_speed’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1990:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_speed’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1990:35: return_function: return of NULL to ‘show_fc_host_speed’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:1991:33: danger: dereference of NULL ‘shost’ # 1989| { # 1990| struct Scsi_Host *shost = transport_class_to_shost(dev); # 1991|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 1992| # 1993| if (i->f->get_host_speed) Error: GCC_ANALYZER_WARNING (CWE-476): [#def313] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: enter_function: entry to ‘show_fc_host_port_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_id’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: return_function: return of NULL to ‘show_fc_host_port_id’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2005:1: danger: dereference of NULL ‘shost’ # 2003| # 2004| # 2005|-> fc_host_rd_attr(port_id, "0x%06x\n", 20); # 2006| fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN); # 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN); Error: GCC_ANALYZER_WARNING (CWE-476): [#def314] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: enter_function: entry to ‘show_fc_host_port_type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: return_function: return of NULL to ‘show_fc_host_port_type’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2006:1: danger: dereference of NULL ‘shost’ # 2004| # 2005| fc_host_rd_attr(port_id, "0x%06x\n", 20); # 2006|-> fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN); # 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN); # 2008| fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long); Error: GCC_ANALYZER_WARNING (CWE-476): [#def315] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: enter_function: entry to ‘show_fc_host_port_state’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_port_state’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: return_function: return of NULL to ‘show_fc_host_port_state’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2007:1: danger: dereference of NULL ‘shost’ # 2005| fc_host_rd_attr(port_id, "0x%06x\n", 20); # 2006| fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN); # 2007|-> fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN); # 2008| fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long); # 2009| fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); Error: GCC_ANALYZER_WARNING (CWE-476): [#def316] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: enter_function: entry to ‘show_fc_host_fabric_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_fabric_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: return_function: return of NULL to ‘show_fc_host_fabric_name’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2008:1: danger: dereference of NULL ‘shost’ # 2006| fc_host_rd_enum_attr(port_type, FC_PORTTYPE_MAX_NAMELEN); # 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN); # 2008|-> fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long); # 2009| fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 2010| Error: GCC_ANALYZER_WARNING (CWE-476): [#def317] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: enter_function: entry to ‘show_fc_host_symbolic_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_symbolic_name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: return_function: return of NULL to ‘show_fc_host_symbolic_name’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2009:1: danger: dereference of NULL ‘shost’ # 2007| fc_host_rd_enum_attr(port_state, FC_PORTSTATE_MAX_NAMELEN); # 2008| fc_host_rd_attr_cast(fabric_name, "0x%llx\n", 20, unsigned long long); # 2009|-> fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 2010| # 2011| fc_private_host_show_function(system_hostname, "%s\n", Error: GCC_ANALYZER_WARNING (CWE-476): [#def318] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: enter_function: entry to ‘show_fc_host_system_hostname’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_system_hostname’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: return_function: return of NULL to ‘show_fc_host_system_hostname’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2011:1: danger: dereference of NULL ‘shost’ # 2009| fc_host_rd_attr(symbolic_name, "%s\n", FC_SYMBOLIC_NAME_SIZE + 1); # 2010| # 2011|-> fc_private_host_show_function(system_hostname, "%s\n", # 2012| FC_SYMBOLIC_NAME_SIZE + 1, ) # 2013| fc_host_store_str_function(system_hostname, FC_SYMBOLIC_NAME_SIZE) Error: GCC_ANALYZER_WARNING (CWE-476): [#def319] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: enter_function: entry to ‘store_fc_host_system_hostname’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: call_function: calling ‘dev_to_shost’ from ‘store_fc_host_system_hostname’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: return_function: return of NULL to ‘store_fc_host_system_hostname’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2013:1: danger: dereference of NULL ‘shost’ # 2011| fc_private_host_show_function(system_hostname, "%s\n", # 2012| FC_SYMBOLIC_NAME_SIZE + 1, ) # 2013|-> fc_host_store_str_function(system_hostname, FC_SYMBOLIC_NAME_SIZE) # 2014| static FC_DEVICE_ATTR(host, system_hostname, S_IRUGO | S_IWUSR, # 2015| show_fc_host_system_hostname, store_fc_host_system_hostname); Error: GCC_ANALYZER_WARNING (CWE-476): [#def320] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2027:44: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2021:1: enter_function: entry to ‘show_fc_private_host_tgtid_bind_type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2024:35: call_function: calling ‘dev_to_shost’ from ‘show_fc_private_host_tgtid_bind_type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2024:35: return_function: return of NULL to ‘show_fc_private_host_tgtid_bind_type’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2027:44: danger: dereference of NULL ‘shost’ # 2025| const char *name; # 2026| # 2027|-> name = get_fc_tgtid_bind_type_name(fc_host_tgtid_bind_type(shost)); # 2028| if (!name) # 2029| return -EINVAL; Error: GCC_ANALYZER_WARNING (CWE-476): [#def321] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2049:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2037:1: enter_function: entry to ‘store_fc_private_host_tgtid_bind_type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2040:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_private_host_tgtid_bind_type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2040:35: return_function: return of NULL to ‘store_fc_private_host_tgtid_bind_type’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2045:13: call_function: calling ‘get_fc_tgtid_bind_type_match’ from ‘store_fc_private_host_tgtid_bind_type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2045:13: return_function: returning to ‘store_fc_private_host_tgtid_bind_type’ from ‘get_fc_tgtid_bind_type_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2045:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2049:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2049:20: danger: dereference of NULL ‘shost’ # 2047| # 2048| /* if changing bind type, purge all unused consistent bindings */ # 2049|-> if (val != fc_host_tgtid_bind_type(shost)) { # 2050| spin_lock_irqsave(shost->host_lock, flags); # 2051| while (!list_empty(&fc_host_rport_bindings(shost))) { Error: GCC_ANALYZER_WARNING (CWE-476): [#def322] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2074:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2070:1: enter_function: entry to ‘store_fc_private_host_issue_lip’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2073:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_private_host_issue_lip’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2073:35: return_function: return of NULL to ‘store_fc_private_host_issue_lip’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2074:33: danger: dereference of NULL ‘shost’ # 2072| { # 2073| struct Scsi_Host *shost = transport_class_to_shost(dev); # 2074|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 2075| int ret; # 2076| Error: GCC_ANALYZER_WARNING (CWE-476): [#def323] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2095:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2090:1: enter_function: entry to ‘store_fc_private_host_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2094:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_private_host_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2094:35: return_function: return of NULL to ‘store_fc_private_host_dev_loss_tmo’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2095:31: danger: dereference of NULL ‘shost’ # 2093| { # 2094| struct Scsi_Host *shost = transport_class_to_shost(dev); # 2095|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost); # 2096| struct fc_rport *rport; # 2097| unsigned long val, flags; Error: GCC_ANALYZER_WARNING (CWE-476): [#def324] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: enter_function: entry to ‘show_fc_host_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_dev_loss_tmo’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: return_function: return of NULL to ‘show_fc_host_dev_loss_tmo’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2112:1: danger: dereference of NULL ‘shost’ # 2110| } # 2111| # 2112|-> fc_private_host_show_function(dev_loss_tmo, "%d\n", 20, ); # 2113| static FC_DEVICE_ATTR(host, dev_loss_tmo, S_IRUGO | S_IWUSR, # 2114| show_fc_host_dev_loss_tmo, Error: GCC_ANALYZER_WARNING (CWE-476): [#def325] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: enter_function: entry to ‘show_fc_host_npiv_vports_inuse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: call_function: calling ‘dev_to_shost’ from ‘show_fc_host_npiv_vports_inuse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: return_function: return of NULL to ‘show_fc_host_npiv_vports_inuse’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2117:1: danger: dereference of NULL ‘shost’ # 2115| store_fc_private_host_dev_loss_tmo); # 2116| # 2117|-> fc_private_host_rd_attr(npiv_vports_inuse, "%u\n", 20); # 2118| # 2119| /* Error: GCC_ANALYZER_WARNING (CWE-476): [#def326] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2128:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2125:1: enter_function: entry to ‘fc_stat_show’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2127:35: call_function: calling ‘dev_to_shost’ from ‘fc_stat_show’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2127:35: return_function: return of NULL to ‘fc_stat_show’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2128:33: danger: dereference of NULL ‘shost’ # 2126| { # 2127| struct Scsi_Host *shost = transport_class_to_shost(dev); # 2128|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 2129| struct fc_host_statistics *stats; # 2130| ssize_t ret = -ENOENT; Error: GCC_ANALYZER_WARNING (CWE-476): [#def327] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: enter_function: entry to ‘fc_host_fpinstat_dn’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: return_function: return of NULL to ‘fc_host_fpinstat_dn’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2202:1: danger: dereference of NULL ‘shost’ # 2200| static FC_DEVICE_ATTR(host, fpin_##name, 0444, fc_host_fpinstat_##name, NULL) # 2201| # 2202|-> fc_host_fpin_statistic(dn); # 2203| fc_host_fpin_statistic(dn_unknown); # 2204| fc_host_fpin_statistic(dn_timeout); Error: GCC_ANALYZER_WARNING (CWE-476): [#def328] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: enter_function: entry to ‘fc_host_fpinstat_dn_unknown’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_unknown’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_unknown’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2203:1: danger: dereference of NULL ‘shost’ # 2201| # 2202| fc_host_fpin_statistic(dn); # 2203|-> fc_host_fpin_statistic(dn_unknown); # 2204| fc_host_fpin_statistic(dn_timeout); # 2205| fc_host_fpin_statistic(dn_unable_to_route); Error: GCC_ANALYZER_WARNING (CWE-476): [#def329] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: enter_function: entry to ‘fc_host_fpinstat_dn_timeout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_timeout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_timeout’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2204:1: danger: dereference of NULL ‘shost’ # 2202| fc_host_fpin_statistic(dn); # 2203| fc_host_fpin_statistic(dn_unknown); # 2204|-> fc_host_fpin_statistic(dn_timeout); # 2205| fc_host_fpin_statistic(dn_unable_to_route); # 2206| fc_host_fpin_statistic(dn_device_specific); Error: GCC_ANALYZER_WARNING (CWE-476): [#def330] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: enter_function: entry to ‘fc_host_fpinstat_dn_unable_to_route’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_unable_to_route’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_unable_to_route’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2205:1: danger: dereference of NULL ‘shost’ # 2203| fc_host_fpin_statistic(dn_unknown); # 2204| fc_host_fpin_statistic(dn_timeout); # 2205|-> fc_host_fpin_statistic(dn_unable_to_route); # 2206| fc_host_fpin_statistic(dn_device_specific); # 2207| fc_host_fpin_statistic(cn); Error: GCC_ANALYZER_WARNING (CWE-476): [#def331] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: enter_function: entry to ‘fc_host_fpinstat_dn_device_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_dn_device_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: return_function: return of NULL to ‘fc_host_fpinstat_dn_device_specific’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2206:1: danger: dereference of NULL ‘shost’ # 2204| fc_host_fpin_statistic(dn_timeout); # 2205| fc_host_fpin_statistic(dn_unable_to_route); # 2206|-> fc_host_fpin_statistic(dn_device_specific); # 2207| fc_host_fpin_statistic(cn); # 2208| fc_host_fpin_statistic(cn_clear); Error: GCC_ANALYZER_WARNING (CWE-476): [#def332] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: enter_function: entry to ‘fc_host_fpinstat_cn’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: return_function: return of NULL to ‘fc_host_fpinstat_cn’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2207:1: danger: dereference of NULL ‘shost’ # 2205| fc_host_fpin_statistic(dn_unable_to_route); # 2206| fc_host_fpin_statistic(dn_device_specific); # 2207|-> fc_host_fpin_statistic(cn); # 2208| fc_host_fpin_statistic(cn_clear); # 2209| fc_host_fpin_statistic(cn_lost_credit); Error: GCC_ANALYZER_WARNING (CWE-476): [#def333] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: enter_function: entry to ‘fc_host_fpinstat_cn_clear’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_clear’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_clear’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2208:1: danger: dereference of NULL ‘shost’ # 2206| fc_host_fpin_statistic(dn_device_specific); # 2207| fc_host_fpin_statistic(cn); # 2208|-> fc_host_fpin_statistic(cn_clear); # 2209| fc_host_fpin_statistic(cn_lost_credit); # 2210| fc_host_fpin_statistic(cn_credit_stall); Error: GCC_ANALYZER_WARNING (CWE-476): [#def334] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: enter_function: entry to ‘fc_host_fpinstat_cn_lost_credit’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_lost_credit’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_lost_credit’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2209:1: danger: dereference of NULL ‘shost’ # 2207| fc_host_fpin_statistic(cn); # 2208| fc_host_fpin_statistic(cn_clear); # 2209|-> fc_host_fpin_statistic(cn_lost_credit); # 2210| fc_host_fpin_statistic(cn_credit_stall); # 2211| fc_host_fpin_statistic(cn_oversubscription); Error: GCC_ANALYZER_WARNING (CWE-476): [#def335] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: enter_function: entry to ‘fc_host_fpinstat_cn_credit_stall’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_credit_stall’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_credit_stall’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2210:1: danger: dereference of NULL ‘shost’ # 2208| fc_host_fpin_statistic(cn_clear); # 2209| fc_host_fpin_statistic(cn_lost_credit); # 2210|-> fc_host_fpin_statistic(cn_credit_stall); # 2211| fc_host_fpin_statistic(cn_oversubscription); # 2212| fc_host_fpin_statistic(cn_device_specific); Error: GCC_ANALYZER_WARNING (CWE-476): [#def336] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: enter_function: entry to ‘fc_host_fpinstat_cn_oversubscription’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_oversubscription’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_oversubscription’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2211:1: danger: dereference of NULL ‘shost’ # 2209| fc_host_fpin_statistic(cn_lost_credit); # 2210| fc_host_fpin_statistic(cn_credit_stall); # 2211|-> fc_host_fpin_statistic(cn_oversubscription); # 2212| fc_host_fpin_statistic(cn_device_specific); # 2213| fc_host_fpin_statistic(li); Error: GCC_ANALYZER_WARNING (CWE-476): [#def337] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: enter_function: entry to ‘fc_host_fpinstat_cn_device_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_cn_device_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: return_function: return of NULL to ‘fc_host_fpinstat_cn_device_specific’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2212:1: danger: dereference of NULL ‘shost’ # 2210| fc_host_fpin_statistic(cn_credit_stall); # 2211| fc_host_fpin_statistic(cn_oversubscription); # 2212|-> fc_host_fpin_statistic(cn_device_specific); # 2213| fc_host_fpin_statistic(li); # 2214| fc_host_fpin_statistic(li_failure_unknown); Error: GCC_ANALYZER_WARNING (CWE-476): [#def338] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: enter_function: entry to ‘fc_host_fpinstat_li’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: return_function: return of NULL to ‘fc_host_fpinstat_li’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2213:1: danger: dereference of NULL ‘shost’ # 2211| fc_host_fpin_statistic(cn_oversubscription); # 2212| fc_host_fpin_statistic(cn_device_specific); # 2213|-> fc_host_fpin_statistic(li); # 2214| fc_host_fpin_statistic(li_failure_unknown); # 2215| fc_host_fpin_statistic(li_link_failure_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def339] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: enter_function: entry to ‘fc_host_fpinstat_li_failure_unknown’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_failure_unknown’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: return_function: return of NULL to ‘fc_host_fpinstat_li_failure_unknown’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2214:1: danger: dereference of NULL ‘shost’ # 2212| fc_host_fpin_statistic(cn_device_specific); # 2213| fc_host_fpin_statistic(li); # 2214|-> fc_host_fpin_statistic(li_failure_unknown); # 2215| fc_host_fpin_statistic(li_link_failure_count); # 2216| fc_host_fpin_statistic(li_loss_of_sync_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def340] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: enter_function: entry to ‘fc_host_fpinstat_li_link_failure_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_link_failure_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: return_function: return of NULL to ‘fc_host_fpinstat_li_link_failure_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2215:1: danger: dereference of NULL ‘shost’ # 2213| fc_host_fpin_statistic(li); # 2214| fc_host_fpin_statistic(li_failure_unknown); # 2215|-> fc_host_fpin_statistic(li_link_failure_count); # 2216| fc_host_fpin_statistic(li_loss_of_sync_count); # 2217| fc_host_fpin_statistic(li_loss_of_signals_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def341] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: enter_function: entry to ‘fc_host_fpinstat_li_loss_of_sync_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_loss_of_sync_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: return_function: return of NULL to ‘fc_host_fpinstat_li_loss_of_sync_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2216:1: danger: dereference of NULL ‘shost’ # 2214| fc_host_fpin_statistic(li_failure_unknown); # 2215| fc_host_fpin_statistic(li_link_failure_count); # 2216|-> fc_host_fpin_statistic(li_loss_of_sync_count); # 2217| fc_host_fpin_statistic(li_loss_of_signals_count); # 2218| fc_host_fpin_statistic(li_prim_seq_err_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def342] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: enter_function: entry to ‘fc_host_fpinstat_li_loss_of_signals_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_loss_of_signals_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: return_function: return of NULL to ‘fc_host_fpinstat_li_loss_of_signals_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2217:1: danger: dereference of NULL ‘shost’ # 2215| fc_host_fpin_statistic(li_link_failure_count); # 2216| fc_host_fpin_statistic(li_loss_of_sync_count); # 2217|-> fc_host_fpin_statistic(li_loss_of_signals_count); # 2218| fc_host_fpin_statistic(li_prim_seq_err_count); # 2219| fc_host_fpin_statistic(li_invalid_tx_word_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def343] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: enter_function: entry to ‘fc_host_fpinstat_li_prim_seq_err_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_prim_seq_err_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: return_function: return of NULL to ‘fc_host_fpinstat_li_prim_seq_err_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2218:1: danger: dereference of NULL ‘shost’ # 2216| fc_host_fpin_statistic(li_loss_of_sync_count); # 2217| fc_host_fpin_statistic(li_loss_of_signals_count); # 2218|-> fc_host_fpin_statistic(li_prim_seq_err_count); # 2219| fc_host_fpin_statistic(li_invalid_tx_word_count); # 2220| fc_host_fpin_statistic(li_invalid_crc_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def344] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: enter_function: entry to ‘fc_host_fpinstat_li_invalid_tx_word_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_invalid_tx_word_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: return_function: return of NULL to ‘fc_host_fpinstat_li_invalid_tx_word_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2219:1: danger: dereference of NULL ‘shost’ # 2217| fc_host_fpin_statistic(li_loss_of_signals_count); # 2218| fc_host_fpin_statistic(li_prim_seq_err_count); # 2219|-> fc_host_fpin_statistic(li_invalid_tx_word_count); # 2220| fc_host_fpin_statistic(li_invalid_crc_count); # 2221| fc_host_fpin_statistic(li_device_specific); Error: GCC_ANALYZER_WARNING (CWE-476): [#def345] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: enter_function: entry to ‘fc_host_fpinstat_li_invalid_crc_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_invalid_crc_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: return_function: return of NULL to ‘fc_host_fpinstat_li_invalid_crc_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2220:1: danger: dereference of NULL ‘shost’ # 2218| fc_host_fpin_statistic(li_prim_seq_err_count); # 2219| fc_host_fpin_statistic(li_invalid_tx_word_count); # 2220|-> fc_host_fpin_statistic(li_invalid_crc_count); # 2221| fc_host_fpin_statistic(li_device_specific); # 2222| Error: GCC_ANALYZER_WARNING (CWE-476): [#def346] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: enter_function: entry to ‘fc_host_fpinstat_li_device_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: call_function: calling ‘dev_to_shost’ from ‘fc_host_fpinstat_li_device_specific’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: return_function: return of NULL to ‘fc_host_fpinstat_li_device_specific’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2221:1: danger: dereference of NULL ‘shost’ # 2219| fc_host_fpin_statistic(li_invalid_tx_word_count); # 2220| fc_host_fpin_statistic(li_invalid_crc_count); # 2221|-> fc_host_fpin_statistic(li_device_specific); # 2222| # 2223| static ssize_t Error: GCC_ANALYZER_WARNING (CWE-476): [#def347] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2228:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2224:1: enter_function: entry to ‘fc_reset_statistics’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2227:35: call_function: calling ‘dev_to_shost’ from ‘fc_reset_statistics’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2227:35: return_function: return of NULL to ‘fc_reset_statistics’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2228:33: danger: dereference of NULL ‘shost’ # 2226| { # 2227| struct Scsi_Host *shost = transport_class_to_shost(dev); # 2228|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 2229| # 2230| /* ignore any data value written to the attribute */ Error: GCC_ANALYZER_WARNING (CWE-476): [#def348] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2392:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2388:1: enter_function: entry to ‘store_fc_host_vport_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2391:35: call_function: calling ‘dev_to_shost’ from ‘store_fc_host_vport_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2391:35: return_function: return of NULL to ‘store_fc_host_vport_delete’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2392:31: danger: dereference of NULL ‘shost’ # 2390| { # 2391| struct Scsi_Host *shost = transport_class_to_shost(dev); # 2392|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost); # 2393| struct fc_vport *vport; # 2394| u64 wwpn, wwnn; Error: GCC_ANALYZER_WARNING (CWE-476): [#def349] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2450:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2440:12: enter_function: entry to ‘fc_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2449:17: call_function: calling ‘dev_to_shost’ from ‘fc_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2449:17: return_function: return of NULL to ‘fc_host_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2450:14: danger: dereference of NULL ‘shost’ # 2448| # 2449| shost = dev_to_shost(dev); # 2450|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class # 2451| != &fc_host_class.class) # 2452| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def350] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2469:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2459:12: enter_function: entry to ‘fc_target_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2468:17: call_function: calling ‘dev_to_shost’ from ‘fc_target_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2468:17: return_function: return of NULL to ‘fc_target_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2469:14: danger: dereference of NULL ‘shost’ # 2467| # 2468| shost = dev_to_shost(dev->parent); # 2469|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class # 2470| != &fc_host_class.class) # 2471| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def351] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2501:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2491:12: enter_function: entry to ‘fc_rport_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2500:17: call_function: calling ‘dev_to_shost’ from ‘fc_rport_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2500:17: return_function: return of NULL to ‘fc_rport_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2501:14: danger: dereference of NULL ‘shost’ # 2499| # 2500| shost = dev_to_shost(dev->parent); # 2501|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class # 2502| != &fc_host_class.class) # 2503| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def352] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2570:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2568:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2570:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2570:13: danger: dereference of NULL ‘rport’ # 2568| struct fc_rport *rport = starget_to_rport(scsi_target(scmd->device)); # 2569| # 2570|-> if (rport->port_state == FC_PORTSTATE_BLOCKED) # 2571| return SCSI_EH_RESET_TIMER; # 2572| Error: GCC_ANALYZER_WARNING (CWE-476): [#def353] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2960:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2957:13: enter_function: entry to ‘fc_terminate_rport_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2959:35: call_function: calling ‘dev_to_shost’ from ‘fc_terminate_rport_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2959:35: return_function: return of NULL to ‘fc_terminate_rport_io’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2960:33: danger: dereference of NULL ‘shost’ # 2958| { # 2959| struct Scsi_Host *shost = rport_to_shost(rport); # 2960|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 2961| # 2962| /* Involve the LLDD if possible to terminate all io on the rport. */ Error: GCC_ANALYZER_WARNING (CWE-476): [#def354] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3000:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2994:1: enter_function: entry to ‘fc_rport_final_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2999:35: call_function: calling ‘dev_to_shost’ from ‘fc_rport_final_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:2999:35: return_function: return of NULL to ‘fc_rport_final_delete’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3000:33: danger: dereference of NULL ‘shost’ # 2998| struct device *dev = &rport->dev; # 2999| struct Scsi_Host *shost = rport_to_shost(rport); # 3000|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 3001| struct workqueue_struct *work_q; # 3002| unsigned long flags; Error: GCC_ANALYZER_WARNING (CWE-476): [#def355] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3476:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3462:1: enter_function: entry to ‘fc_remote_port_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3464:35: call_function: calling ‘dev_to_shost’ from ‘fc_remote_port_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3464:35: return_function: return of NULL to ‘fc_remote_port_delete’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3476:9: danger: dereference of NULL ‘shost’ # 3474| */ # 3475| # 3476|-> spin_lock_irqsave(shost->host_lock, flags); # 3477| # 3478| if ((rport->port_state != FC_PORTSTATE_ONLINE) && Error: GCC_ANALYZER_WARNING (CWE-476): [#def356] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3541:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3538:1: enter_function: entry to ‘fc_remote_port_rolechg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3540:35: call_function: calling ‘dev_to_shost’ from ‘fc_remote_port_rolechg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3540:35: return_function: return of NULL to ‘fc_remote_port_rolechg’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3541:31: danger: dereference of NULL ‘shost’ # 3539| { # 3540| struct Scsi_Host *shost = rport_to_shost(rport); # 3541|-> struct fc_host_attrs *fc_host = shost_to_fc_host(shost); # 3542| unsigned long flags; # 3543| int create = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def357] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3608:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3603:1: enter_function: entry to ‘fc_timeout_deleted_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3607:35: call_function: calling ‘dev_to_shost’ from ‘fc_timeout_deleted_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3607:35: return_function: return of NULL to ‘fc_timeout_deleted_rport’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3608:33: danger: dereference of NULL ‘shost’ # 3606| container_of(work, struct fc_rport, dev_loss_work.work); # 3607| struct Scsi_Host *shost = rport_to_shost(rport); # 3608|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 3609| struct fc_host_attrs *fc_host = shost_to_fc_host(shost); # 3610| unsigned long flags; Error: GCC_ANALYZER_WARNING (CWE-476): [#def358] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3763:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3758:1: enter_function: entry to ‘fc_scsi_scan_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3762:35: call_function: calling ‘dev_to_shost’ from ‘fc_scsi_scan_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3762:35: return_function: return of NULL to ‘fc_scsi_scan_rport’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3763:33: danger: dereference of NULL ‘shost’ # 3761| container_of(work, struct fc_rport, scan_work); # 3762| struct Scsi_Host *shost = rport_to_shost(rport); # 3763|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 3764| unsigned long flags; # 3765| Error: GCC_ANALYZER_WARNING (CWE-476): [#def359] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3799:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3794:5: enter_function: entry to ‘fc_block_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3796:35: call_function: calling ‘dev_to_shost’ from ‘fc_block_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3796:35: return_function: return of NULL to ‘fc_block_rport’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3799:9: danger: dereference of NULL ‘shost’ # 3797| unsigned long flags; # 3798| # 3799|-> spin_lock_irqsave(shost->host_lock, flags); # 3800| while (rport->port_state == FC_PORTSTATE_BLOCKED && # 3801| !(rport->flags & FC_RPORT_FAST_FAIL_TIMEDOUT)) { Error: GCC_ANALYZER_WARNING (CWE-476): [#def360] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3853:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3851:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3853:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:3853:14: danger: dereference of NULL ‘rport’ # 3851| struct fc_rport *rport = starget_to_rport(scsi_target(scmd->device)); # 3852| # 3853|-> if ((rport->port_state != FC_PORTSTATE_ONLINE) && # 3854| (scsi_cmd_to_rq(scmd)->cmd_flags & REQ_FAILFAST_TRANSPORT)) { # 3855| set_host_byte(scmd, DID_TRANSPORT_MARGINAL); Error: GCC_ANALYZER_WARNING (CWE-476): [#def361] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4104:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4099:1: enter_function: entry to ‘fc_bsg_job_timeout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4102:35: call_function: calling ‘fc_bsg_to_shost’ from ‘fc_bsg_job_timeout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4102:35: return_function: return of NULL to ‘fc_bsg_job_timeout’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4103:34: call_function: inlined call to ‘fc_bsg_to_rport’ from ‘fc_bsg_job_timeout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4104:33: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4104:33: danger: dereference of NULL ‘shost’ # 4102| struct Scsi_Host *shost = fc_bsg_to_shost(job); # 4103| struct fc_rport *rport = fc_bsg_to_rport(job); # 4104|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 4105| int err = 0, inflight = 0; # 4106| Error: GCC_ANALYZER_WARNING (CWE-476): [#def362] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4136:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4277:12: enter_function: entry to ‘fc_bsg_dispatch’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: call_function: calling ‘fc_bsg_to_shost’ from ‘fc_bsg_dispatch’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: return_function: return of NULL to ‘fc_bsg_dispatch’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4281:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4284:24: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4284:24: call_function: calling ‘fc_bsg_host_dispatch’ from ‘fc_bsg_dispatch’ # 4134| static int fc_bsg_host_dispatch(struct Scsi_Host *shost, struct bsg_job *job) # 4135| { # 4136|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 4137| struct fc_bsg_request *bsg_request = job->request; # 4138| struct fc_bsg_reply *bsg_reply = job->reply; Error: GCC_ANALYZER_WARNING (CWE-476): [#def363] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4229:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4277:12: enter_function: entry to ‘fc_bsg_dispatch’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: call_function: calling ‘fc_bsg_to_shost’ from ‘fc_bsg_dispatch’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4279:35: return_function: return of NULL to ‘fc_bsg_dispatch’ from ‘fc_bsg_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4281:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4282:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4282:24: call_function: calling ‘fc_bsg_rport_dispatch’ from ‘fc_bsg_dispatch’ # 4227| static int fc_bsg_rport_dispatch(struct Scsi_Host *shost, struct bsg_job *job) # 4228| { # 4229|-> struct fc_internal *i = to_fc_internal(shost->transportt); # 4230| struct fc_bsg_request *bsg_request = job->request; # 4231| struct fc_bsg_reply *bsg_reply = job->reply; Error: GCC_ANALYZER_WARNING (CWE-476): [#def364] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4289:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4301:12: enter_function: entry to ‘fc_bsg_dispatch_prep’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4303:34: call_function: inlined call to ‘fc_bsg_to_rport’ from ‘fc_bsg_dispatch_prep’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4306:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_fc.c:4306:15: call_function: calling ‘fc_bsg_rport_prep’ from ‘fc_bsg_dispatch_prep’ # 4287| static blk_status_t fc_bsg_rport_prep(struct fc_rport *rport) # 4288| { # 4289|-> if (rport->port_state == FC_PORTSTATE_BLOCKED && # 4290| !(rport->flags & FC_RPORT_FAST_FAIL_TIMEDOUT)) # 4291| return BLK_STS_RESOURCE; Error: GCC_ANALYZER_WARNING (CWE-476): [#def365] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1782:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1765:12: enter_function: entry to ‘iscsi_user_scan_session’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1781:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_user_scan_session’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1781:17: return_function: return of NULL to ‘iscsi_user_scan_session’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:1782:9: danger: dereference of NULL ‘shost’ # 1780| # 1781| shost = iscsi_session_to_shost(session); # 1782|-> ihost = shost->shost_data; # 1783| # 1784| mutex_lock(&ihost->mutex); Error: GCC_ANALYZER_WARNING (CWE-476): [#def366] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2888:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2858:5: enter_function: entry to ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: call_function: calling ‘iscsi_if_transport_lookup’ from ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: return_function: returning to ‘iscsi_session_event’ from ‘iscsi_if_transport_lookup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2869:12: branch_false: following ‘false’ branch (when ‘priv’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: return_function: return of NULL to ‘iscsi_session_event’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2874:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2881:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2888:43: danger: dereference of NULL ‘shost’ # 2886| switch (event) { # 2887| case ISCSI_KEVENT_DESTROY_SESSION: # 2888|-> ev->r.d_session.host_no = shost->host_no; # 2889| ev->r.d_session.sid = session->sid; # 2890| break; Error: GCC_ANALYZER_WARNING (CWE-476): [#def367] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2892:47: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2858:5: enter_function: entry to ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: call_function: calling ‘iscsi_if_transport_lookup’ from ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: return_function: returning to ‘iscsi_session_event’ from ‘iscsi_if_transport_lookup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2869:12: branch_false: following ‘false’ branch (when ‘priv’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: return_function: return of NULL to ‘iscsi_session_event’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2874:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2881:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2892:47: danger: dereference of NULL ‘shost’ # 2890| break; # 2891| case ISCSI_KEVENT_CREATE_SESSION: # 2892|-> ev->r.c_session_ret.host_no = shost->host_no; # 2893| ev->r.c_session_ret.sid = session->sid; # 2894| break; Error: GCC_ANALYZER_WARNING (CWE-476): [#def368] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2896:48: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2858:5: enter_function: entry to ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: call_function: calling ‘iscsi_if_transport_lookup’ from ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2868:16: return_function: returning to ‘iscsi_session_event’ from ‘iscsi_if_transport_lookup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2869:12: branch_false: following ‘false’ branch (when ‘priv’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_event’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2871:17: return_function: return of NULL to ‘iscsi_session_event’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2874:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2881:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2896:48: danger: dereference of NULL ‘shost’ # 2894| break; # 2895| case ISCSI_KEVENT_UNBIND_SESSION: # 2896|-> ev->r.unbind_session.host_no = shost->host_no; # 2897| ev->r.unbind_session.sid = session->sid; # 2898| break; Error: GCC_ANALYZER_WARNING (CWE-476): [#def369] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2940:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2924:1: enter_function: entry to ‘iscsi_if_create_session’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2935:12: branch_false: following ‘false’ branch (when ‘session’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2938:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2939:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_if_create_session’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2939:17: return_function: return of NULL to ‘iscsi_if_create_session’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:2940:39: danger: dereference of NULL ‘shost’ # 2938| session->creator = pid; # 2939| shost = iscsi_session_to_shost(session); # 2940|-> ev->r.c_session_ret.host_no = shost->host_no; # 2941| ev->r.c_session_ret.sid = session->sid; # 2942| ISCSI_DBG_TRANS_SESSION(session, Error: GCC_ANALYZER_WARNING (CWE-476): [#def370] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_NETDEV_NAME’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_NETDEV_NAME’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_NETDEV_NAME’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4665:1: danger: dereference of NULL ‘shost’ # 4663| NULL); # 4664| # 4665|-> iscsi_host_attr(netdev, ISCSI_HOST_PARAM_NETDEV_NAME); # 4666| iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS); # 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS); Error: GCC_ANALYZER_WARNING (CWE-476): [#def371] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_HWADDRESS’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_HWADDRESS’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_HWADDRESS’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4666:1: danger: dereference of NULL ‘shost’ # 4664| # 4665| iscsi_host_attr(netdev, ISCSI_HOST_PARAM_NETDEV_NAME); # 4666|-> iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS); # 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS); # 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME); Error: GCC_ANALYZER_WARNING (CWE-476): [#def372] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_IPADDRESS’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_IPADDRESS’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_IPADDRESS’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4667:1: danger: dereference of NULL ‘shost’ # 4665| iscsi_host_attr(netdev, ISCSI_HOST_PARAM_NETDEV_NAME); # 4666| iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS); # 4667|-> iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS); # 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME); # 4669| iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE); Error: GCC_ANALYZER_WARNING (CWE-476): [#def373] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_INITIATOR_NAME’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_INITIATOR_NAME’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_INITIATOR_NAME’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4668:1: danger: dereference of NULL ‘shost’ # 4666| iscsi_host_attr(hwaddress, ISCSI_HOST_PARAM_HWADDRESS); # 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS); # 4668|-> iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME); # 4669| iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE); # 4670| iscsi_host_attr(port_speed, ISCSI_HOST_PARAM_PORT_SPEED); Error: GCC_ANALYZER_WARNING (CWE-476): [#def374] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_PORT_STATE’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_PORT_STATE’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_PORT_STATE’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4669:1: danger: dereference of NULL ‘shost’ # 4667| iscsi_host_attr(ipaddress, ISCSI_HOST_PARAM_IPADDRESS); # 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME); # 4669|-> iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE); # 4670| iscsi_host_attr(port_speed, ISCSI_HOST_PARAM_PORT_SPEED); # 4671| Error: GCC_ANALYZER_WARNING (CWE-476): [#def375] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: enter_function: entry to ‘show_host_param_ISCSI_HOST_PARAM_PORT_SPEED’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: call_function: calling ‘dev_to_shost’ from ‘show_host_param_ISCSI_HOST_PARAM_PORT_SPEED’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: return_function: return of NULL to ‘show_host_param_ISCSI_HOST_PARAM_PORT_SPEED’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4670:1: danger: dereference of NULL ‘shost’ # 4668| iscsi_host_attr(initiatorname, ISCSI_HOST_PARAM_INITIATOR_NAME); # 4669| iscsi_host_attr(port_state, ISCSI_HOST_PARAM_PORT_STATE); # 4670|-> iscsi_host_attr(port_speed, ISCSI_HOST_PARAM_PORT_SPEED); # 4671| # 4672| static struct attribute *iscsi_host_attrs[] = { Error: GCC_ANALYZER_WARNING (CWE-476): [#def376] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4687:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4682:16: enter_function: entry to ‘iscsi_host_attr_is_visible’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4686:35: call_function: calling ‘dev_to_shost’ from ‘iscsi_host_attr_is_visible’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4686:35: return_function: return of NULL to ‘iscsi_host_attr_is_visible’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4687:39: danger: dereference of NULL ‘shost’ # 4685| struct device *cdev = container_of(kobj, struct device, kobj); # 4686| struct Scsi_Host *shost = transport_class_to_shost(cdev); # 4687|-> struct iscsi_internal *priv = to_iscsi_internal(shost->transportt); # 4688| int param; # 4689| Error: GCC_ANALYZER_WARNING (CWE-476): [#def377] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4784:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4772:12: enter_function: entry to ‘iscsi_session_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4783:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_session_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4783:17: return_function: return of NULL to ‘iscsi_session_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4784:14: danger: dereference of NULL ‘shost’ # 4782| session = iscsi_dev_to_session(dev); # 4783| shost = iscsi_session_to_shost(session); # 4784|-> if (!shost->transportt) # 4785| return 0; # 4786| Error: GCC_ANALYZER_WARNING (CWE-476): [#def378] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4809:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4794:12: enter_function: entry to ‘iscsi_conn_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4807:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_conn_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4807:17: return_function: return of NULL to ‘iscsi_conn_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4809:14: danger: dereference of NULL ‘shost’ # 4807| shost = iscsi_session_to_shost(session); # 4808| # 4809|-> if (!shost->transportt) # 4810| return 0; # 4811| Error: GCC_ANALYZER_WARNING (CWE-476): [#def379] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4829:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4819:12: enter_function: entry to ‘iscsi_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4828:17: call_function: calling ‘dev_to_shost’ from ‘iscsi_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4828:17: return_function: return of NULL to ‘iscsi_host_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_iscsi.c:4829:14: danger: dereference of NULL ‘shost’ # 4827| # 4828| shost = dev_to_shost(dev); # 4829|-> if (!shost->transportt || # 4830| shost->transportt->host_attrs.ac.class != &iscsi_host_class.class) # 4831| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def380] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:188:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:174:12: enter_function: entry to ‘sas_smp_dispatch’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:176:35: call_function: calling ‘dev_to_shost’ from ‘sas_smp_dispatch’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:176:35: return_function: return of NULL to ‘sas_smp_dispatch’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:179:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:182:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:182:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:188:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:188:9: danger: dereference of NULL ‘shost’ # 186| } # 187| # 188|-> to_sas_internal(shost->transportt)->f->smp_handler(job, shost, rphy); # 189| return 0; # 190| } Error: GCC_ANALYZER_WARNING (CWE-476): [#def381] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:229:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:225:12: enter_function: entry to ‘sas_host_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:228:35: call_function: calling ‘dev_to_shost’ from ‘sas_host_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:228:35: return_function: return of NULL to ‘sas_host_setup’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:229:32: danger: dereference of NULL ‘shost’ # 227| { # 228| struct Scsi_Host *shost = dev_to_shost(dev); # 229|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost); # 230| struct device *dma_dev = shost->dma_dev; # 231| Error: GCC_ANALYZER_WARNING (CWE-476): [#def382] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:254:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:250:12: enter_function: entry to ‘sas_host_remove’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:253:35: call_function: calling ‘dev_to_shost’ from ‘sas_host_remove’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:253:35: return_function: return of NULL to ‘sas_host_remove’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:254:35: danger: dereference of NULL ‘shost’ # 252| { # 253| struct Scsi_Host *shost = dev_to_shost(dev); # 254|-> struct request_queue *q = to_sas_host_attrs(shost)->q; # 255| # 256| bsg_remove_queue(q); Error: GCC_ANALYZER_WARNING (CWE-476): [#def383] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:273:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:263:12: enter_function: entry to ‘sas_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:271:17: call_function: calling ‘dev_to_shost’ from ‘sas_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:271:17: return_function: return of NULL to ‘sas_host_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:273:14: danger: dereference of NULL ‘shost’ # 271| shost = dev_to_shost(dev); # 272| # 273|-> if (!shost->transportt) # 274| return 0; # 275| if (shost->transportt->host_attrs.ac.class != Error: GCC_ANALYZER_WARNING (CWE-476): [#def384] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:560:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:555:16: enter_function: entry to ‘do_sas_phy_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:559:35: call_function: calling ‘dev_to_shost’ from ‘do_sas_phy_enable’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:559:35: return_function: return of NULL to ‘do_sas_phy_enable’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:560:34: danger: dereference of NULL ‘shost’ # 558| struct sas_phy *phy = transport_class_to_phy(dev); # 559| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 560|-> struct sas_internal *i = to_sas_internal(shost->transportt); # 561| int error; # 562| Error: GCC_ANALYZER_WARNING (CWE-476): [#def385] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:608:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:604:1: enter_function: entry to ‘do_sas_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:607:35: call_function: calling ‘dev_to_shost’ from ‘do_sas_phy_reset’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:607:35: return_function: return of NULL to ‘do_sas_phy_reset’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:608:34: danger: dereference of NULL ‘shost’ # 606| struct sas_phy *phy = transport_class_to_phy(dev); # 607| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 608|-> struct sas_internal *i = to_sas_internal(shost->transportt); # 609| int error; # 610| Error: GCC_ANALYZER_WARNING (CWE-476): [#def386] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: enter_function: entry to ‘store_sas_phy_minimum_linkrate’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: call_function: calling ‘dev_to_shost’ from ‘store_sas_phy_minimum_linkrate’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: return_function: return of NULL to ‘store_sas_phy_minimum_linkrate’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:643:1: danger: dereference of NULL ‘shost’ # 641| sas_phy_linkspeed_attr(negotiated_linkrate); # 642| sas_phy_linkspeed_attr(minimum_linkrate_hw); # 643|-> sas_phy_linkspeed_rw_attr(minimum_linkrate); # 644| sas_phy_linkspeed_attr(maximum_linkrate_hw); # 645| sas_phy_linkspeed_rw_attr(maximum_linkrate); Error: GCC_ANALYZER_WARNING (CWE-476): [#def387] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: enter_function: entry to ‘store_sas_phy_maximum_linkrate’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: call_function: calling ‘dev_to_shost’ from ‘store_sas_phy_maximum_linkrate’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: return_function: return of NULL to ‘store_sas_phy_maximum_linkrate’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:645:1: danger: dereference of NULL ‘shost’ # 643| sas_phy_linkspeed_rw_attr(minimum_linkrate); # 644| sas_phy_linkspeed_attr(maximum_linkrate_hw); # 645|-> sas_phy_linkspeed_rw_attr(maximum_linkrate); # 646| sas_phy_linkerror_attr(invalid_dword_count); # 647| sas_phy_linkerror_attr(running_disparity_error_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def388] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: enter_function: entry to ‘show_sas_phy_invalid_dword_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_invalid_dword_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: return_function: return of NULL to ‘show_sas_phy_invalid_dword_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:646:1: danger: dereference of NULL ‘shost’ # 644| sas_phy_linkspeed_attr(maximum_linkrate_hw); # 645| sas_phy_linkspeed_rw_attr(maximum_linkrate); # 646|-> sas_phy_linkerror_attr(invalid_dword_count); # 647| sas_phy_linkerror_attr(running_disparity_error_count); # 648| sas_phy_linkerror_attr(loss_of_dword_sync_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def389] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: enter_function: entry to ‘show_sas_phy_running_disparity_error_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_running_disparity_error_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: return_function: return of NULL to ‘show_sas_phy_running_disparity_error_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:647:1: danger: dereference of NULL ‘shost’ # 645| sas_phy_linkspeed_rw_attr(maximum_linkrate); # 646| sas_phy_linkerror_attr(invalid_dword_count); # 647|-> sas_phy_linkerror_attr(running_disparity_error_count); # 648| sas_phy_linkerror_attr(loss_of_dword_sync_count); # 649| sas_phy_linkerror_attr(phy_reset_problem_count); Error: GCC_ANALYZER_WARNING (CWE-476): [#def390] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: enter_function: entry to ‘show_sas_phy_loss_of_dword_sync_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_loss_of_dword_sync_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: return_function: return of NULL to ‘show_sas_phy_loss_of_dword_sync_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:648:1: danger: dereference of NULL ‘shost’ # 646| sas_phy_linkerror_attr(invalid_dword_count); # 647| sas_phy_linkerror_attr(running_disparity_error_count); # 648|-> sas_phy_linkerror_attr(loss_of_dword_sync_count); # 649| sas_phy_linkerror_attr(phy_reset_problem_count); # 650| Error: GCC_ANALYZER_WARNING (CWE-476): [#def391] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: enter_function: entry to ‘show_sas_phy_phy_reset_problem_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: call_function: calling ‘dev_to_shost’ from ‘show_sas_phy_phy_reset_problem_count’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: return_function: return of NULL to ‘show_sas_phy_phy_reset_problem_count’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:649:1: danger: dereference of NULL ‘shost’ # 647| sas_phy_linkerror_attr(running_disparity_error_count); # 648| sas_phy_linkerror_attr(loss_of_dword_sync_count); # 649|-> sas_phy_linkerror_attr(phy_reset_problem_count); # 650| # 651| static int sas_phy_setup(struct transport_container *tc, struct device *dev, Error: GCC_ANALYZER_WARNING (CWE-476): [#def392] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:656:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:651:12: enter_function: entry to ‘sas_phy_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:655:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:655:35: return_function: return of NULL to ‘sas_phy_setup’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:656:34: danger: dereference of NULL ‘shost’ # 654| struct sas_phy *phy = dev_to_phy(dev); # 655| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 656|-> struct sas_internal *i = to_sas_internal(shost->transportt); # 657| # 658| if (i->f->phy_setup) Error: GCC_ANALYZER_WARNING (CWE-476): [#def393] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:676:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:667:12: enter_function: entry to ‘sas_phy_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:674:17: call_function: calling ‘dev_to_shost’ from ‘sas_phy_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:674:17: return_function: return of NULL to ‘sas_phy_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:676:14: danger: dereference of NULL ‘shost’ # 674| shost = dev_to_shost(dev->parent); # 675| # 676|-> if (!shost->transportt) # 677| return 0; # 678| if (shost->transportt->host_attrs.ac.class != Error: GCC_ANALYZER_WARNING (CWE-476): [#def394] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:690:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:686:13: enter_function: entry to ‘sas_phy_release’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:689:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_release’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:689:35: return_function: return of NULL to ‘sas_phy_release’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:690:34: danger: dereference of NULL ‘shost’ # 688| struct sas_phy *phy = dev_to_phy(dev); # 689| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 690|-> struct sas_internal *i = to_sas_internal(shost->transportt); # 691| # 692| if (i->f->phy_release) Error: GCC_ANALYZER_WARNING (CWE-476): [#def395] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:728:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:710:17: enter_function: entry to ‘sas_phy_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: return_function: return of NULL to ‘sas_phy_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:716:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:719:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:726:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:728:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:728:17: danger: dereference of NULL ‘shost’ # 726| if (scsi_is_sas_expander_device(parent)) { # 727| struct sas_rphy *rphy = dev_to_rphy(parent); # 728|-> dev_set_name(&phy->dev, "phy-%d:%d:%d", shost->host_no, # 729| rphy->scsi_target_id, number); # 730| } else Error: GCC_ANALYZER_WARNING (CWE-476): [#def396] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:731:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:710:17: enter_function: entry to ‘sas_phy_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: call_function: calling ‘dev_to_shost’ from ‘sas_phy_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:712:35: return_function: return of NULL to ‘sas_phy_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:716:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:719:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:731:17: danger: dereference of NULL ‘shost’ # 729| rphy->scsi_target_id, number); # 730| } else # 731|-> dev_set_name(&phy->dev, "phy-%d:%d", shost->host_no, number); # 732| # 733| transport_setup_device(&phy->dev); Error: GCC_ANALYZER_WARNING (CWE-476): [#def397] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:847:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:838:12: enter_function: entry to ‘sas_port_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:845:17: call_function: calling ‘dev_to_shost’ from ‘sas_port_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:845:17: return_function: return of NULL to ‘sas_port_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:847:14: danger: dereference of NULL ‘shost’ # 845| shost = dev_to_shost(dev->parent); # 846| # 847|-> if (!shost->transportt) # 848| return 0; # 849| if (shost->transportt->host_attrs.ac.class != Error: GCC_ANALYZER_WARNING (CWE-476): [#def398] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:926:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:905:18: enter_function: entry to ‘sas_port_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: call_function: calling ‘dev_to_shost’ from ‘sas_port_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: return_function: return of NULL to ‘sas_port_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:911:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:914:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:924:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:926:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:926:17: danger: dereference of NULL ‘shost’ # 924| if (scsi_is_sas_expander_device(parent)) { # 925| struct sas_rphy *rphy = dev_to_rphy(parent); # 926|-> dev_set_name(&port->dev, "port-%d:%d:%d", shost->host_no, # 927| rphy->scsi_target_id, port->port_identifier); # 928| } else Error: GCC_ANALYZER_WARNING (CWE-476): [#def399] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:929:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:905:18: enter_function: entry to ‘sas_port_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: call_function: calling ‘dev_to_shost’ from ‘sas_port_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:907:35: return_function: return of NULL to ‘sas_port_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:911:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:914:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:929:17: danger: dereference of NULL ‘shost’ # 927| rphy->scsi_target_id, port->port_identifier); # 928| } else # 929|-> dev_set_name(&port->dev, "port-%d:%d", shost->host_no, # 930| port->port_identifier); # 931| Error: GCC_ANALYZER_WARNING (CWE-476): [#def400] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:955:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:951:18: enter_function: entry to ‘sas_port_alloc_num’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:954:35: call_function: calling ‘dev_to_shost’ from ‘sas_port_alloc_num’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:954:35: return_function: return of NULL to ‘sas_port_alloc_num’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:955:32: danger: dereference of NULL ‘shost’ # 953| int index; # 954| struct Scsi_Host *shost = dev_to_shost(parent); # 955|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost); # 956| # 957| /* FIXME: use idr for this eventually */ Error: GCC_ANALYZER_WARNING (CWE-476): [#def401] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1222:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1216:1: enter_function: entry to ‘show_sas_rphy_enclosure_identifier’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1221:35: call_function: calling ‘dev_to_shost’ from ‘show_sas_rphy_enclosure_identifier’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1221:35: return_function: return of NULL to ‘show_sas_rphy_enclosure_identifier’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1222:34: danger: dereference of NULL ‘shost’ # 1220| struct sas_phy *phy = dev_to_phy(rphy->dev.parent); # 1221| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 1222|-> struct sas_internal *i = to_sas_internal(shost->transportt); # 1223| u64 identifier; # 1224| int error; Error: GCC_ANALYZER_WARNING (CWE-476): [#def402] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1242:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1236:1: enter_function: entry to ‘show_sas_rphy_bay_identifier’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1241:35: call_function: calling ‘dev_to_shost’ from ‘show_sas_rphy_bay_identifier’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1241:35: return_function: return of NULL to ‘show_sas_rphy_bay_identifier’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1242:34: danger: dereference of NULL ‘shost’ # 1240| struct sas_phy *phy = dev_to_phy(rphy->dev.parent); # 1241| struct Scsi_Host *shost = dev_to_shost(phy->dev.parent); # 1242|-> struct sas_internal *i = to_sas_internal(shost->transportt); # 1243| int val; # 1244| Error: GCC_ANALYZER_WARNING (CWE-476): [#def403] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1369:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1360:12: enter_function: entry to ‘sas_rphy_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1367:17: call_function: calling ‘dev_to_shost’ from ‘sas_rphy_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1367:17: return_function: return of NULL to ‘sas_rphy_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1369:14: danger: dereference of NULL ‘shost’ # 1367| shost = dev_to_shost(dev->parent->parent); # 1368| # 1369|-> if (!shost->transportt) # 1370| return 0; # 1371| if (shost->transportt->host_attrs.ac.class != Error: GCC_ANALYZER_WARNING (CWE-476): [#def404] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1391:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1379:12: enter_function: entry to ‘sas_end_dev_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1388:17: call_function: calling ‘dev_to_shost’ from ‘sas_end_dev_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1388:17: return_function: return of NULL to ‘sas_end_dev_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1391:14: danger: dereference of NULL ‘shost’ # 1389| rphy = dev_to_rphy(dev); # 1390| # 1391|-> if (!shost->transportt) # 1392| return 0; # 1393| if (shost->transportt->host_attrs.ac.class != Error: GCC_ANALYZER_WARNING (CWE-476): [#def405] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1414:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1402:12: enter_function: entry to ‘sas_expander_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1411:17: call_function: calling ‘dev_to_shost’ from ‘sas_expander_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1411:17: return_function: return of NULL to ‘sas_expander_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1414:14: danger: dereference of NULL ‘shost’ # 1412| rphy = dev_to_rphy(dev); # 1413| # 1414|-> if (!shost->transportt) # 1415| return 0; # 1416| if (shost->transportt->host_attrs.ac.class != Error: GCC_ANALYZER_WARNING (CWE-476): [#def406] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1480:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1465:18: enter_function: entry to ‘sas_end_device_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: call_function: calling ‘dev_to_shost’ from ‘sas_end_device_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: return_function: return of NULL to ‘sas_end_device_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1471:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1475:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1478:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1480:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1480:17: danger: dereference of NULL ‘shost’ # 1478| if (scsi_is_sas_expander_device(parent->dev.parent)) { # 1479| struct sas_rphy *rphy = dev_to_rphy(parent->dev.parent); # 1480|-> dev_set_name(&rdev->rphy.dev, "end_device-%d:%d:%d", # 1481| shost->host_no, rphy->scsi_target_id, # 1482| parent->port_identifier); Error: GCC_ANALYZER_WARNING (CWE-476): [#def407] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1484:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1465:18: enter_function: entry to ‘sas_end_device_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: call_function: calling ‘dev_to_shost’ from ‘sas_end_device_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1467:35: return_function: return of NULL to ‘sas_end_device_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1471:12: branch_false: following ‘false’ branch (when ‘_res’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1475:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1484:17: danger: dereference of NULL ‘shost’ # 1482| parent->port_identifier); # 1483| } else # 1484|-> dev_set_name(&rdev->rphy.dev, "end_device-%d:%d", # 1485| shost->host_no, parent->port_identifier); # 1486| rdev->rphy.identify.device_type = SAS_END_DEVICE; Error: GCC_ANALYZER_WARNING (CWE-476): [#def408] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1509:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1504:18: enter_function: entry to ‘sas_expander_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1507:35: call_function: calling ‘dev_to_shost’ from ‘sas_expander_alloc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1507:35: return_function: return of NULL to ‘sas_expander_alloc’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1509:32: danger: dereference of NULL ‘shost’ # 1507| struct Scsi_Host *shost = dev_to_shost(&parent->dev); # 1508| struct sas_expander_device *rdev; # 1509|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost); # 1510| # 1511| BUG_ON(type != SAS_EDGE_EXPANDER_DEVICE && Error: GCC_ANALYZER_WARNING (CWE-476): [#def409] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1545:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1541:5: enter_function: entry to ‘sas_rphy_add’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1544:35: call_function: calling ‘dev_to_shost’ from ‘sas_rphy_add’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1544:35: return_function: return of NULL to ‘sas_rphy_add’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1545:32: danger: dereference of NULL ‘shost’ # 1543| struct sas_port *parent = dev_to_sas_port(rphy->dev.parent); # 1544| struct Scsi_Host *shost = dev_to_shost(parent->dev.parent); # 1545|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost); # 1546| struct sas_identify *identify = &rphy->identify; # 1547| int error; Error: GCC_ANALYZER_WARNING (CWE-476): [#def410] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1604:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1600:6: enter_function: entry to ‘sas_rphy_free’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1603:35: call_function: calling ‘dev_to_shost’ from ‘sas_rphy_free’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1603:35: return_function: return of NULL to ‘sas_rphy_free’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_sas.c:1604:32: danger: dereference of NULL ‘shost’ # 1602| struct device *dev = &rphy->dev; # 1603| struct Scsi_Host *shost = dev_to_shost(rphy->dev.parent->parent); # 1604|-> struct sas_host_attrs *sas_host = to_sas_host_attrs(shost); # 1605| # 1606| mutex_lock(&sas_host->lock); Error: GCC_ANALYZER_WARNING (CWE-476): [#def411] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:199:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:190:12: enter_function: entry to ‘spi_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:198:17: call_function: calling ‘dev_to_shost’ from ‘spi_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:198:17: return_function: return of NULL to ‘spi_host_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:199:14: danger: dereference of NULL ‘shost’ # 197| # 198| shost = dev_to_shost(dev); # 199|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class # 200| != &spi_host_class.class) # 201| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def412] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1413:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1402:12: enter_function: entry to ‘spi_target_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1412:17: call_function: calling ‘dev_to_shost’ from ‘spi_target_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1412:17: return_function: return of NULL to ‘spi_target_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1413:14: danger: dereference of NULL ‘shost’ # 1411| # 1412| shost = dev_to_shost(dev->parent); # 1413|-> if (!shost->transportt || shost->transportt->host_attrs.ac.class # 1414| != &spi_host_class.class) # 1415| return 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def413] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1453:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1447:12: enter_function: entry to ‘spi_host_configure’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1452:35: call_function: calling ‘dev_to_shost’ from ‘spi_host_configure’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1452:35: return_function: return of NULL to ‘spi_host_configure’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1453:35: danger: dereference of NULL ‘shost’ # 1451| struct kobject *kobj = &cdev->kobj; # 1452| struct Scsi_Host *shost = transport_class_to_shost(cdev); # 1453|-> struct spi_internal *si = to_spi_internal(shost->transportt); # 1454| struct attribute *attr = &dev_attr_signalling.attr; # 1455| int rc = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def414] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1476:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1470:16: enter_function: entry to ‘target_attribute_is_visible’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1475:35: call_function: calling ‘dev_to_shost’ from ‘target_attribute_is_visible’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1475:35: return_function: return of NULL to ‘target_attribute_is_visible’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_spi.c:1476:35: danger: dereference of NULL ‘shost’ # 1474| struct scsi_target *starget = transport_class_to_starget(cdev); # 1475| struct Scsi_Host *shost = transport_class_to_shost(cdev); # 1476|-> struct spi_internal *si = to_spi_internal(shost->transportt); # 1477| # 1478| if (attr == &dev_attr_period.attr && Error: GCC_ANALYZER_WARNING (CWE-476): [#def415] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:108:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:104:12: enter_function: entry to ‘srp_host_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:107:35: call_function: calling ‘dev_to_shost’ from ‘srp_host_setup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:107:35: return_function: return of NULL to ‘srp_host_setup’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:108:32: danger: dereference of NULL ‘shost’ # 106| { # 107| struct Scsi_Host *shost = dev_to_shost(dev); # 108|-> struct srp_host_attrs *srp_host = to_srp_host_attrs(shost); # 109| # 110| atomic_set(&srp_host->next_port_id, 0); Error: GCC_ANALYZER_WARNING (CWE-476): [#def416] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:162:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:156:16: enter_function: entry to ‘store_srp_rport_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:161:35: call_function: calling ‘dev_to_shost’ from ‘store_srp_rport_delete’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:161:35: return_function: return of NULL to ‘store_srp_rport_delete’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:162:34: danger: dereference of NULL ‘shost’ # 160| struct srp_rport *rport = transport_class_to_srp_rport(dev); # 161| struct Scsi_Host *shost = dev_to_shost(dev); # 162|-> struct srp_internal *i = to_srp_internal(shost->transportt); # 163| # 164| if (i->f->rport_delete) { Error: GCC_ANALYZER_WARNING (CWE-476): [#def417] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:415:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:402:13: enter_function: entry to ‘__rport_fail_io_fast’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:404:35: call_function: inlined call to ‘rport_to_shost’ from ‘__rport_fail_io_fast’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:404:35: call_function: inlined call to ‘rport_to_shost’ from ‘__rport_fail_io_fast’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:409:13: call_function: calling ‘srp_rport_set_state’ from ‘__rport_fail_io_fast’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:409:13: return_function: returning to ‘__rport_fail_io_fast’ from ‘srp_rport_set_state’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:409:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:412:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:415:13: danger: dereference of NULL ‘dev_to_shost(*rport.dev.parent)’ # 413| # 414| /* Involve the LLD if possible to terminate all I/O on the rport. */ # 415|-> i = to_srp_internal(shost->transportt); # 416| if (i->f->terminate_rport_io) # 417| i->f->terminate_rport_io(rport); Error: GCC_ANALYZER_WARNING (CWE-476): [#def418] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:448:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:443:13: enter_function: entry to ‘rport_dev_loss_timedout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:447:35: call_function: inlined call to ‘rport_to_shost’ from ‘rport_dev_loss_timedout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:447:35: call_function: inlined call to ‘rport_to_shost’ from ‘rport_dev_loss_timedout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:448:34: danger: dereference of NULL ‘dev_to_shost(((struct srp_rport *)((char *)work + 1984))[8972151786823710].dev.parent)’ # 446| struct srp_rport, dev_loss_work); # 447| struct Scsi_Host *shost = rport_to_shost(rport); # 448|-> struct srp_internal *i = to_srp_internal(shost->transportt); # 449| # 450| pr_info("dev_loss_tmo expired for SRP %s / %s.\n", Error: GCC_ANALYZER_WARNING (CWE-476): [#def419] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:535:34: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:532:5: enter_function: entry to ‘srp_reconnect_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:534:35: call_function: inlined call to ‘rport_to_shost’ from ‘srp_reconnect_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:534:35: call_function: inlined call to ‘rport_to_shost’ from ‘srp_reconnect_rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:535:34: danger: dereference of NULL ‘dev_to_shost(*rport.dev.parent)’ # 533| { # 534| struct Scsi_Host *shost = rport_to_shost(rport); # 535|-> struct srp_internal *i = to_srp_internal(shost->transportt); # 536| struct scsi_device *sdev; # 537| int res; Error: GCC_ANALYZER_WARNING (CWE-476): [#def420] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:641:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:631:12: enter_function: entry to ‘srp_rport_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:640:17: call_function: calling ‘dev_to_shost’ from ‘srp_rport_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:640:17: return_function: return of NULL to ‘srp_rport_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:641:14: danger: dereference of NULL ‘shost’ # 639| # 640| shost = dev_to_shost(dev->parent); # 641|-> if (!shost->transportt) # 642| return 0; # 643| if (shost->transportt->host_attrs.ac.class != &srp_host_class.class) Error: GCC_ANALYZER_WARNING (CWE-476): [#def421] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:659:14: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:650:12: enter_function: entry to ‘srp_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:658:17: call_function: calling ‘dev_to_shost’ from ‘srp_host_match’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:658:17: return_function: return of NULL to ‘srp_host_match’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/scsi_transport_srp.c:659:14: danger: dereference of NULL ‘shost’ # 657| # 658| shost = dev_to_shost(dev); # 659|-> if (!shost->transportt) # 660| return 0; # 661| if (shost->transportt->host_attrs.ac.class != &srp_host_class.class) Error: GCC_ANALYZER_WARNING (CWE-476): [#def422] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:163:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:150:1: enter_function: entry to ‘snic_scsi_scan_tgt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:153:35: call_function: calling ‘dev_to_shost’ from ‘snic_scsi_scan_tgt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:153:35: return_function: return of NULL to ‘snic_scsi_scan_tgt’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.c:163:9: danger: dereference of NULL ‘shost’ # 161| SCSI_SCAN_RESCAN); # 162| # 163|-> spin_lock_irqsave(shost->host_lock, flags); # 164| tgt->flags &= ~SNIC_TGT_SCAN_PENDING; # 165| spin_unlock_irqrestore(shost->host_lock, flags); Error: GCC_ANALYZER_WARNING (CWE-476): [#def423] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_disc.h:102:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘tgt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:1484:1: enter_function: entry to ‘snic_send_abort_and_wait’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:1494:15: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:1495:14: call_function: inlined call to ‘snic_tgt_chkready’ from ‘snic_send_abort_and_wait’ # 100| snic_tgt_chkready(struct snic_tgt *tgt) # 101| { # 102|-> if (tgt->state == SNIC_TGT_STAT_ONLINE) # 103| return 0; # 104| else Error: GCC_ANALYZER_WARNING (CWE-476): [#def424] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2582:1: enter_function: entry to ‘snic_tgt_scsi_abort_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2591:12: branch_false: following ‘false’ branch (when ‘tgt’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: call_function: calling ‘dev_to_shost’ from ‘snic_tgt_scsi_abort_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: return_function: returning to ‘snic_tgt_scsi_abort_io’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: danger: dereference of NULL ‘dev_to_shost(*tgt.dev.parent)’ # 2593| # 2594| snic = shost_priv(snic_tgt_to_shost(tgt)); # 2595|-> SNIC_SCSI_DBG(snic->shost, "tgt_abt_io: Cleaning Pending IOs.\n"); # 2596| # 2597| if (tgt->tdata.typ == SNIC_TGT_DAS) Error: GCC_ANALYZER_WARNING (CWE-476): [#def425] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2602:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2582:1: enter_function: entry to ‘snic_tgt_scsi_abort_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2591:12: branch_false: following ‘false’ branch (when ‘tgt’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: call_function: calling ‘dev_to_shost’ from ‘snic_tgt_scsi_abort_io’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2594:16: return_function: returning to ‘snic_tgt_scsi_abort_io’ from ‘dev_to_shost’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2595:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2597:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/snic/snic_scsi.c:2602:29: danger: dereference of NULL ‘dev_to_shost(*tgt.dev.parent)’ # 2600| tmf = SNIC_ITMF_ABTS_TASK_TERM; # 2601| # 2602|-> for (tag = 0; tag < snic->max_tag_id; tag++) { # 2603| io_lock = snic_io_lock_tag(snic, tag); # 2604| Error: GCC_ANALYZER_WARNING (CWE-476): [#def426] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:42: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:425:12: enter_function: entry to ‘stex_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:436:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:437:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:437:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:440:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:446:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:446:17: call_function: inlined call to ‘sg_next’ from ‘stex_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:446:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:447:42: danger: dereference of NULL ‘sg’ # 445| table = (struct st_sgitem *)(dst + 1); # 446| scsi_for_each_sg(cmd, sg, nseg, i) { # 447|-> table[i].count = cpu_to_le32((u32)sg_dma_len(sg)); # 448| table[i].addr = cpu_to_le64(sg_dma_address(sg)); # 449| table[i].ctrl = SG_CF_64B | SG_CF_HOST; Error: GCC_ANALYZER_WARNING (CWE-476): [#def427] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:42: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:457:12: enter_function: entry to ‘stex_ss_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:468:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:469:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:469:12: branch_true: following ‘true’ branch (when ‘nseg != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:472:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:478:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:478:17: call_function: inlined call to ‘sg_next’ from ‘stex_ss_map_sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:478:17: branch_true: following ‘true’ branch (when ‘i < nseg’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/stex.c:479:42: danger: dereference of NULL ‘sg’ # 477| table = (struct st_ss_sgitem *)(dst + 1); # 478| scsi_for_each_sg(cmd, sg, nseg, i) { # 479|-> table[i].count = cpu_to_le32((u32)sg_dma_len(sg)); # 480| table[i].addr = # 481| cpu_to_le32(sg_dma_address(sg) & 0xffffffff); Error: GCC_ANALYZER_WARNING (CWE-476): [#def428] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1083:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cmd_request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1240:13: enter_function: entry to ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: call_function: calling ‘get_in_stor_device’ from ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: return_function: returning to ‘storvsc_on_channel_callback’ from ‘get_in_stor_device’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1255:12: branch_false: following ‘false’ branch (when ‘stor_device’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1258:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1260:9: branch_true: following ‘true’ branch (when ‘desc’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1261:47: call_function: inlined call to ‘hv_pkt_data’ from ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: following ‘false’ branch (when ‘rqst_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1268:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551613’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551612’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_true: following ‘true’ branch (when ‘rqst_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:36: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: call_function: calling ‘storvsc_on_receive’ from ‘storvsc_on_channel_callback’ # 1081| struct storvsc_device *stor_dev) # 1082| { # 1083|-> struct scsi_cmnd *scmnd = cmd_request->cmd; # 1084| struct scsi_sense_hdr sense_hdr; # 1085| struct vmscsi_request *vm_srb; Error: GCC_ANALYZER_WARNING (CWE-476): [#def429] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1186:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1240:13: enter_function: entry to ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: call_function: calling ‘get_in_stor_device’ from ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: return_function: returning to ‘storvsc_on_channel_callback’ from ‘get_in_stor_device’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1255:12: branch_false: following ‘false’ branch (when ‘stor_device’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1258:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1260:9: branch_true: following ‘true’ branch (when ‘desc’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1261:47: call_function: inlined call to ‘hv_pkt_data’ from ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: following ‘false’ branch (when ‘rqst_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1268:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551613’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551612’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_true: following ‘true’ branch (when ‘rqst_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:36: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: call_function: calling ‘storvsc_on_receive’ from ‘storvsc_on_channel_callback’ # 1184| STORVSC_LOGGING_WARN : STORVSC_LOGGING_ERROR; # 1185| # 1186|-> storvsc_log_ratelimited(device, loglevel, # 1187| "tag#%d cmd 0x%x status: scsi 0x%x srb 0x%x host 0x%x\n", # 1188| scsi_cmd_to_rq(request->cmd)->tag, Error: GCC_ANALYZER_WARNING (CWE-476): [#def430] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1197:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1240:13: enter_function: entry to ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: call_function: calling ‘get_in_stor_device’ from ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1254:23: return_function: returning to ‘storvsc_on_channel_callback’ from ‘get_in_stor_device’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1255:12: branch_false: following ‘false’ branch (when ‘stor_device’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1258:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1260:9: branch_true: following ‘true’ branch (when ‘desc’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1261:47: call_function: inlined call to ‘hv_pkt_data’ from ‘storvsc_on_channel_callback’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: following ‘false’ branch (when ‘rqst_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1265:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1268:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1273:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1280:20: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551613’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1282:27: branch_false: following ‘false’ branch (when ‘rqst_id != 18446744073709551612’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1286:28: branch_true: following ‘true’ branch (when ‘rqst_id == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1304:36: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1322:25: call_function: calling ‘storvsc_on_receive’ from ‘storvsc_on_channel_callback’ # 1195| if (vstor_packet->vm_srb.scsi_status == SAM_STAT_CHECK_CONDITION && # 1196| (vstor_packet->vm_srb.srb_status & SRB_STATUS_AUTOSENSE_VALID)) # 1197|-> memcpy(request->cmd->sense_buffer, # 1198| vstor_packet->vm_srb.sense_data, # 1199| stor_pkt->vm_srb.sense_info_length); Error: GCC_ANALYZER_WARNING (CWE-476): [#def431] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1718:28: enter_function: entry to ‘storvsc_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1749:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘storvsc_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1749:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1795:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘storvsc_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1804:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1805:48: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1825:20: branch_false: following ‘false’ branch (when ‘sg_count >= 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1825:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: branch_true: following ‘true’ branch (when ‘j < sg_count’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1850:32: branch_false: following ‘false’ branch (when ‘hvpfns_to_add == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: call_function: inlined call to ‘sg_next’ from ‘storvsc_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1830:17: branch_true: following ‘true’ branch (when ‘j < sg_count’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/storvsc_drv.c:1839:33: danger: dereference of NULL ‘sg’ # 1837| * sgl entry, provided they are a multiple of PAGE_SIZE. # 1838| */ # 1839|-> hvpfn = HVPFN_DOWN(sg_dma_address(sg)); # 1840| hvpfns_to_add = HVPFN_UP(sg_dma_address(sg) + # 1841| sg_dma_len(sg)) - hvpfn; Error: GCC_ANALYZER_WARNING (CWE-476): [#def432] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:337:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:690:12: enter_function: entry to ‘pvscsi_queue_ring’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:710:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:717:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:721:9: call_function: inlined call to ‘fortify_memset_chk’ from ‘pvscsi_queue_ring’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:721:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:742:9: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘pvscsi_queue_ring’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/vmw_pvscsi.c:755:13: call_function: calling ‘pvscsi_map_buffers’ from ‘pvscsi_queue_ring’ # 335| sge = &ctx->sgl->sge[0]; # 336| for (i = 0; i < count; i++, sg = sg_next(sg)) { # 337|-> sge[i].addr = sg_dma_address(sg); # 338| sge[i].length = sg_dma_len(sg); # 339| sge[i].flags = 0; Error: GCC_ANALYZER_WARNING (CWE-476): [#def433] kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘sg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:470:12: enter_function: entry to ‘map_data_for_request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:484:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:487:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:487:9: call_function: inlined call to ‘sg_next’ from ‘map_data_for_request’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:487:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/xen-scsifront.c:488:32: danger: dereference of NULL ‘sg’ # 486| # 487| scsi_for_each_sg(sc, sg, scsi_sg_count(sc), i) # 488|-> data_grants += PFN_UP(sg->offset + sg->length); # 489| # 490| if (data_grants > VSCSIIF_SG_TABLESIZE) { Error: GCC_ANALYZER_WARNING (CWE-127): [#def434] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3238:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3236| */ # 3237| spin_lock(&cache->lock); # 3238|-> old_last_used = cache->last_used; # 3239| old_last_remap_bytes = cache->last_remap_bytes; # 3240| old_last_identity_remap_count = cache->last_identity_remap_count; Error: GCC_ANALYZER_WARNING (CWE-127): [#def435] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3239:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3237| spin_lock(&cache->lock); # 3238| old_last_used = cache->last_used; # 3239|-> old_last_remap_bytes = cache->last_remap_bytes; # 3240| old_last_identity_remap_count = cache->last_identity_remap_count; # 3241| used = cache->used; Error: GCC_ANALYZER_WARNING (CWE-127): [#def436] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3240:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3238| old_last_used = cache->last_used; # 3239| old_last_remap_bytes = cache->last_remap_bytes; # 3240|-> old_last_identity_remap_count = cache->last_identity_remap_count; # 3241| used = cache->used; # 3242| remap_bytes = cache->remap_bytes; Error: GCC_ANALYZER_WARNING (CWE-127): [#def437] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3242:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3240| old_last_identity_remap_count = cache->last_identity_remap_count; # 3241| used = cache->used; # 3242|-> remap_bytes = cache->remap_bytes; # 3243| identity_remap_count = cache->identity_remap_count; # 3244| /* No change in values, can safely skip it. */ Error: GCC_ANALYZER_WARNING (CWE-127): [#def438] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3243:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3241| used = cache->used; # 3242| remap_bytes = cache->remap_bytes; # 3243|-> identity_remap_count = cache->identity_remap_count; # 3244| /* No change in values, can safely skip it. */ # 3245| if (cache->last_used == used && Error: GCC_ANALYZER_WARNING (CWE-127): [#def439] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3248:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3246| cache->last_remap_bytes == remap_bytes && # 3247| cache->last_identity_remap_count == identity_remap_count && # 3248|-> cache->last_flags == cache->flags) { # 3249| spin_unlock(&cache->lock); # 3250| return 0; Error: GCC_ANALYZER_WARNING (CWE-127): [#def440] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3248:34: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3246| cache->last_remap_bytes == remap_bytes && # 3247| cache->last_identity_remap_count == identity_remap_count && # 3248|-> cache->last_flags == cache->flags) { # 3249| spin_unlock(&cache->lock); # 3250| return 0; Error: GCC_ANALYZER_WARNING (CWE-124): [#def441] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3252:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3250| return 0; # 3251| } # 3252|-> cache->last_used = used; # 3253| cache->last_remap_bytes = remap_bytes; # 3254| cache->last_identity_remap_count = identity_remap_count; Error: GCC_ANALYZER_WARNING (CWE-124): [#def442] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3253:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3251| } # 3252| cache->last_used = used; # 3253|-> cache->last_remap_bytes = remap_bytes; # 3254| cache->last_identity_remap_count = identity_remap_count; # 3255| cache->last_flags = cache->flags; Error: GCC_ANALYZER_WARNING (CWE-124): [#def443] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3254:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3252| cache->last_used = used; # 3253| cache->last_remap_bytes = remap_bytes; # 3254|-> cache->last_identity_remap_count = identity_remap_count; # 3255| cache->last_flags = cache->flags; # 3256| spin_unlock(&cache->lock); Error: GCC_ANALYZER_WARNING (CWE-124): [#def444] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3255:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3253| cache->last_remap_bytes = remap_bytes; # 3254| cache->last_identity_remap_count = identity_remap_count; # 3255|-> cache->last_flags = cache->flags; # 3256| spin_unlock(&cache->lock); # 3257| Error: GCC_ANALYZER_WARNING (CWE-127): [#def445] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3255:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3253| cache->last_remap_bytes = remap_bytes; # 3254| cache->last_identity_remap_count = identity_remap_count; # 3255|-> cache->last_flags = cache->flags; # 3256| spin_unlock(&cache->lock); # 3257| Error: GCC_ANALYZER_WARNING (CWE-127): [#def446] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3272:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3270| bi = btrfs_item_ptr_offset(leaf, path->slots[0]); # 3271| btrfs_set_stack_block_group_v2_used(&bgi, used); # 3272|-> btrfs_set_stack_block_group_v2_chunk_objectid(&bgi, cache->global_root_id); # 3273| btrfs_set_stack_block_group_v2_flags(&bgi, cache->flags); # 3274| Error: GCC_ANALYZER_WARNING (CWE-127): [#def447] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3273:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3271| btrfs_set_stack_block_group_v2_used(&bgi, used); # 3272| btrfs_set_stack_block_group_v2_chunk_objectid(&bgi, cache->global_root_id); # 3273|-> btrfs_set_stack_block_group_v2_flags(&bgi, cache->flags); # 3274| # 3275| if (btrfs_fs_incompat(fs_info, REMAP_TREE)) { Error: GCC_ANALYZER_WARNING (CWE-127): [#def448] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3276:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3274| # 3275| if (btrfs_fs_incompat(fs_info, REMAP_TREE)) { # 3276|-> btrfs_set_stack_block_group_v2_remap_bytes(&bgi, cache->remap_bytes); # 3277| btrfs_set_stack_block_group_v2_identity_remap_count(&bgi, # 3278| cache->identity_remap_count); Error: GCC_ANALYZER_WARNING (CWE-127): [#def449] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3277:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3275| if (btrfs_fs_incompat(fs_info, REMAP_TREE)) { # 3276| btrfs_set_stack_block_group_v2_remap_bytes(&bgi, cache->remap_bytes); # 3277|-> btrfs_set_stack_block_group_v2_identity_remap_count(&bgi, # 3278| cache->identity_remap_count); # 3279| write_extent_buffer(leaf, &bgi, bi, Error: GCC_ANALYZER_WARNING (CWE-124): [#def450] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3299:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3297| if (ret < 0 && ret != -ENOENT) { # 3298| spin_lock(&cache->lock); # 3299|-> cache->last_used = old_last_used; # 3300| cache->last_remap_bytes = old_last_remap_bytes; # 3301| cache->last_identity_remap_count = old_last_identity_remap_count; Error: GCC_ANALYZER_WARNING (CWE-124): [#def451] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3300:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3298| spin_lock(&cache->lock); # 3299| cache->last_used = old_last_used; # 3300|-> cache->last_remap_bytes = old_last_remap_bytes; # 3301| cache->last_identity_remap_count = old_last_identity_remap_count; # 3302| spin_unlock(&cache->lock); Error: GCC_ANALYZER_WARNING (CWE-124): [#def452] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3301:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3508:5: enter_function: entry to ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3521:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3525:9: call_function: inlined call to ‘list_splice_init’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3526:9: call_function: inlined call to ‘spin_unlock’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: call_function: calling ‘btrfs_create_pending_block_groups’ from ‘btrfs_start_dirty_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3530:9: return_function: returning to ‘btrfs_start_dirty_block_groups’ from ‘btrfs_create_pending_block_groups’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3532:12: branch_true: following ‘true’ branch (when ‘path’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3533:24: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3534:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3545:21: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3546:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3549:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/btrfs/block-group.c:3600:31: call_function: calling ‘update_block_group_item’ from ‘btrfs_start_dirty_block_groups’ # 3299| cache->last_used = old_last_used; # 3300| cache->last_remap_bytes = old_last_remap_bytes; # 3301|-> cache->last_identity_remap_count = old_last_identity_remap_count; # 3302| spin_unlock(&cache->lock); # 3303| } Error: GCC_ANALYZER_WARNING (CWE-126): [#def453] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1063:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ # 1061| # 1062| (*sig) = NULL; # 1063|-> switch (auth_tok->token_type) { # 1064| case ECRYPTFS_PASSWORD: # 1065| (*sig) = auth_tok->token.password.signature; Error: GCC_ANALYZER_WARNING (CWE-126): [#def454] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1620:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’ # 1618| # 1619| if (unlikely(ecryptfs_verbosity > 0)) { # 1620|-> ecryptfs_printk( # 1621| KERN_DEBUG, "Session key encryption key (size [%d]):\n", # 1622| auth_tok->token.password.session_key_encryption_key_bytes); Error: GCC_ANALYZER_WARNING (CWE-126): [#def455] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1625:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’ # 1623| ecryptfs_dump_hex( # 1624| auth_tok->token.password.session_key_encryption_key, # 1625|-> auth_tok->token.password.session_key_encryption_key_bytes); # 1626| } # 1627| rc = ecryptfs_get_tfm_and_mutex_for_cipher_name(&tfm, &tfm_mutex, Error: GCC_ANALYZER_WARNING (CWE-126): [#def456] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1636:34: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’ # 1634| } # 1635| rc = virt_to_scatterlist(auth_tok->session_key.encrypted_key, # 1636|-> auth_tok->session_key.encrypted_key_size, # 1637| src_sg, 2); # 1638| if (rc < 1 || rc > 2) { Error: GCC_ANALYZER_WARNING (CWE-126): [#def457] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1639:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’ # 1637| src_sg, 2); # 1638| if (rc < 1 || rc > 2) { # 1639|-> printk(KERN_ERR "Internal error whilst attempting to convert " # 1640| "auth_tok->session_key.encrypted_key to scatterlist; " # 1641| "expected rc = 1; got rc = [%d]. " Error: GCC_ANALYZER_WARNING (CWE-121): [#def458] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1646:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’ # 1644| goto out; # 1645| } # 1646|-> auth_tok->session_key.decrypted_key_size = # 1647| auth_tok->session_key.encrypted_key_size; # 1648| rc = virt_to_scatterlist(auth_tok->session_key.decrypted_key, Error: GCC_ANALYZER_WARNING (CWE-126): [#def459] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1647:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1872:22: call_function: calling ‘decrypt_passphrase_encrypted_session_key’ from ‘ecryptfs_parse_packet_set’ # 1645| } # 1646| auth_tok->session_key.decrypted_key_size = # 1647|-> auth_tok->session_key.encrypted_key_size; # 1648| rc = virt_to_scatterlist(auth_tok->session_key.decrypted_key, # 1649| auth_tok->session_key.decrypted_key_size, Error: GCC_ANALYZER_WARNING (CWE-126): [#def460] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1836:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_true: following ‘true’ branch (when ‘rc != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1836:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1836:25: danger: out-of-bounds read from byte 18 till byte 19 but ‘auth_tok_list’ ends at byte 16 # 1834| candidate_auth_tok); # 1835| if (rc) { # 1836|-> printk(KERN_ERR # 1837| "Unrecognized candidate auth tok type: [%d]\n", # 1838| candidate_auth_tok->token_type); Error: GCC_ANALYZER_WARNING (CWE-126): [#def461] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:13: danger: out-of-bounds read from byte 18 till byte 19 but ‘auth_tok_list’ ends at byte 16 # 1856| } # 1857| found_matching_auth_tok: # 1858|-> if (candidate_auth_tok->token_type == ECRYPTFS_PRIVATE_KEY) { # 1859| memcpy(&(candidate_auth_tok->token.private_key), # 1860| &(matching_auth_tok->token.private_key), Error: GCC_ANALYZER_WARNING (CWE-121): [#def462] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1716:5: enter_function: entry to ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1811:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1826:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1827:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1828:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1829:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: call_function: calling ‘ecryptfs_get_auth_tok_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1833:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_get_auth_tok_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1835:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: call_function: calling ‘ecryptfs_find_auth_tok_for_sig’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1842:22: return_function: returning to ‘ecryptfs_parse_packet_set’ from ‘ecryptfs_find_auth_tok_for_sig’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1846:20: branch_true: following ‘true’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1848:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1858:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1866:19: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: call_function: inlined call to ‘fortify_memcpy_chk’ from ‘ecryptfs_parse_packet_set’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ecryptfs/keystore.c:1867:17: danger: out-of-bounds write from byte 644 till byte 755 but ‘auth_tok_list’ ends at byte 16 # 1865| crypt_stat); # 1866| } else if (candidate_auth_tok->token_type == ECRYPTFS_PASSWORD) { # 1867|-> memcpy(&(candidate_auth_tok->token.password), # 1868| &(matching_auth_tok->token.password), # 1869| sizeof(struct ecryptfs_password)); Error: GCC_ANALYZER_WARNING (CWE-476): [#def463] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:182:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:172:12: enter_function: entry to ‘ext4_ext_zeroout_stub’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:180:18: call_function: inlined call to ‘ext4_ext_get_actual_len’ from ‘ext4_ext_zeroout_stub’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:182:9: danger: dereference of NULL ‘test’ # 180| ee_len = ext4_ext_get_actual_len(ex); # 181| # 182|-> KUNIT_EXPECT_EQ_MSG(test, 1, ee_block >= EXT_DATA_LBLK, "ee_block=%d", # 183| ee_block); # 184| KUNIT_EXPECT_EQ(test, 1, Error: GCC_ANALYZER_WARNING (CWE-476): [#def464] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:202:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’ # 200| struct kunit *test = kunit_get_current_test(); # 201| # 202|-> kunit_log(KERN_ALERT, test, # 203| "%s: lblk=%u pblk=%llu len=%u", __func__, lblk, pblk, len); # 204| KUNIT_EXPECT_EQ(test, 1, lblk >= EXT_DATA_LBLK); Error: GCC_ANALYZER_WARNING (CWE-476): [#def465] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:326:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:318:12: enter_function: entry to ‘check_buffer’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:322:15: call_function: inlined call to ‘memchr_inv’ from ‘check_buffer’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:323:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:326:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/extents-test.c:326:9: danger: dereference of NULL ‘kunit_get_current_test()’ # 324| return 0; # 325| # 326|-> kunit_log(KERN_ALERT, kunit_get_current_test(), # 327| "# %s: wrong char found at offset %u (expected:%d got:%d)", __func__, # 328| (u32)((char *)ret - buf), c, *((char *)ret)); Error: GCC_ANALYZER_WARNING (CWE-457): [#def466] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/readpage.c:360:62: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘first_block’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/readpage.c:416:6: enter_function: entry to ‘ext4_readahead’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/ext4/readpage.c:430:9: call_function: calling ‘ext4_mpage_readpages’ from ‘ext4_readahead’ # 358| GFP_KERNEL); # 359| ext4_set_bio_post_read_ctx(bio, inode, vi); # 360|-> bio->bi_iter.bi_sector = first_block << (blkbits - 9); # 361| bio->bi_end_io = mpage_end_io; # 362| if (rac) Error: GCC_ANALYZER_WARNING (CWE-126): [#def467] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3175:5: enter_function: entry to ‘f2fs_flush_nat_entries’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3197:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3200:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3208:18: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3226:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: danger: out-of-bounds read from byte 36 till byte 39 but ‘sets’ ends at byte 16 # 3225| */ # 3226| list_for_each_entry(set, &sets, set_list) { # 3227|-> entry_count += set->entry_cnt; # 3228| if (!enabled_nat_bits(sbi, cpc) && # 3229| __has_cursum_space(sbi, journal, Error: GCC_ANALYZER_WARNING (CWE-126): [#def468] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3232:41: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3175:5: enter_function: entry to ‘f2fs_flush_nat_entries’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3197:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3200:9: call_function: inlined call to ‘f2fs_down_write’ from ‘f2fs_flush_nat_entries’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3208:18: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3207:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3226:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3227:32: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/f2fs/node.c:3232:41: danger: out-of-bounds read from byte 32 till byte 35 but ‘sets’ ends at byte 16 # 3230| entry_count, NAT_JOURNAL)) # 3231| continue; # 3232|-> f2fs_ra_meta_pages(sbi, set->set, 1, META_NAT, true); # 3233| } # 3234| /* flush dirty nats in nat entry set */ Error: GCC_ANALYZER_WARNING (CWE-476): [#def469] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2092:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘biagp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2021:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2022:27: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2022:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2024:30: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2023:28: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2027:51: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2030:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2046:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2056:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2057:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2056:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2058:26: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2056:13: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2070:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2085:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2086:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2086:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2087:46: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2091:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2092:45: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2092:25: danger: dereference of NULL ‘biagp’ # 2090| # 2091| if (bmp) { # 2092|-> biagp->inofreefwd = iagp->inofreefwd; # 2093| write_metapage(bmp); # 2094| } else { Error: GCC_ANALYZER_WARNING (CWE-476): [#def470] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2302:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘aiagp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1704:1: enter_function: entry to ‘diAllocAny’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1713:29: branch_true: following ‘true’ branch (when ‘ag <= maxag’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1714:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1716:22: call_function: calling ‘diAllocAG’ from ‘diAllocAny’ # 2300| if (iagp->nfreeexts == cpu_to_le32(1)) { # 2301| if (fwd >= 0) # 2302|-> aiagp->extfreeback = iagp->extfreeback; # 2303| # 2304| if (back >= 0) Error: GCC_ANALYZER_WARNING (CWE-476): [#def471] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2317:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘aiagp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1892:12: enter_function: entry to ‘diAllocExt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1918:20: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1923:41: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1929:20: branch_false: following ‘false’ branch (when ‘sword != 4’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1935:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1941:15: call_function: calling ‘diFindFree’ from ‘diAllocExt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1941:15: return_function: returning to ‘diAllocExt’ from ‘diFindFree’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1942:12: branch_false: following ‘false’ branch (when ‘rem != 32’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1948:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:1952:14: call_function: calling ‘diNewExt’ from ‘diAllocExt’ # 2315| if (iagp->nfreeexts == cpu_to_le32(EXTSPERIAG)) { # 2316| if (fwd >= 0) # 2317|-> aiagp->extfreeback = cpu_to_le32(iagno); # 2318| # 2319| iagp->extfreefwd = cpu_to_le32(fwd); Error: GCC_ANALYZER_WARNING (CWE-476): [#def472] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2330:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ciagp’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2170:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2177:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2185:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2188:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2261:12: branch_false: following ‘false’ branch (when ‘rc == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2267:15: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2272:21: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2300:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2300:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2315:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2328:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2329:20: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2329:20: branch_true: following ‘true’ branch (when ‘freei >= 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2330:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/jfs/jfs_imap.c:2330:25: danger: dereference of NULL ‘ciagp’ # 2328| if (iagp->nfreeinos == 0) { # 2329| if (freei >= 0) # 2330|-> ciagp->inofreeback = cpu_to_le32(iagno); # 2331| # 2332| iagp->inofreefwd = Error: GCC_ANALYZER_WARNING (CWE-127): [#def473] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1491:15: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 1489| if (!refcount_dec_and_test(©->refcount)) # 1490| return; # 1491|-> kfree(copy->cp_src); # 1492| kfree(copy); # 1493| } Error: GCC_ANALYZER_WARNING (CWE-126): [#def474] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1501:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 1499| trace_nfsd_copy_async_cancel(copy); # 1500| if (!test_and_set_bit(NFSD4_COPY_F_STOPPED, ©->cp_flags)) { # 1501|-> kthread_stop(copy->copy_task); # 1502| if (!test_bit(NFSD4_COPY_F_CB_ERROR, ©->cp_flags)) # 1503| copy->nfserr = nfs_ok; Error: GCC_ANALYZER_WARNING (CWE-127): [#def475] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1502:22: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 1500| if (!test_and_set_bit(NFSD4_COPY_F_STOPPED, ©->cp_flags)) { # 1501| kthread_stop(copy->copy_task); # 1502|-> if (!test_bit(NFSD4_COPY_F_CB_ERROR, ©->cp_flags)) # 1503| copy->nfserr = nfs_ok; # 1504| set_bit(NFSD4_COPY_F_COMPLETED, ©->cp_flags); Error: GCC_ANALYZER_WARNING (CWE-124): [#def476] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1503:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 1501| kthread_stop(copy->copy_task); # 1502| if (!test_bit(NFSD4_COPY_F_CB_ERROR, ©->cp_flags)) # 1503|-> copy->nfserr = nfs_ok; # 1504| set_bit(NFSD4_COPY_F_COMPLETED, ©->cp_flags); # 1505| } Error: GCC_ANALYZER_WARNING (CWE-127): [#def477] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: danger: out-of-bounds read from byte -48 till byte -41 but ‘to_cancel’ starts at byte 0 # 1598| # 1599| list_for_each_entry_safe(copy, tmp, &to_cancel, copies) { # 1600|-> struct nfs4_client *clp = copy->cp_clp; # 1601| # 1602| list_del_init(©->copies); Error: GCC_ANALYZER_WARNING (CWE-127): [#def478] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2017:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 2015| static void release_copy_files(struct nfsd4_copy *copy) # 2016| { # 2017|-> if (copy->nf_src) { # 2018| nfsd_file_put(copy->nf_src); # 2019| copy->nf_src = NULL; Error: GCC_ANALYZER_WARNING (CWE-124): [#def479] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2019:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 2017| if (copy->nf_src) { # 2018| nfsd_file_put(copy->nf_src); # 2019|-> copy->nf_src = NULL; # 2020| } # 2021| if (copy->nf_dst) { Error: GCC_ANALYZER_WARNING (CWE-127): [#def480] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2021:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 2019| copy->nf_src = NULL; # 2020| } # 2021|-> if (copy->nf_dst) { # 2022| nfsd_file_put(copy->nf_dst); # 2023| copy->nf_dst = NULL; Error: GCC_ANALYZER_WARNING (CWE-124): [#def481] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:2023:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1560:6: enter_function: entry to ‘nfsd4_cancel_copy_by_sb’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1569:29: branch_true: following ‘true’ branch (when ‘idhashval != 16’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1570:43: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1599:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1600:37: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfs4proc.c:1603:17: call_function: calling ‘nfsd4_stop_copy’ from ‘nfsd4_cancel_copy_by_sb’ # 2021| if (copy->nf_dst) { # 2022| nfsd_file_put(copy->nf_dst); # 2023|-> copy->nf_dst = NULL; # 2024| } # 2025| } Error: GCC_ANALYZER_WARNING (CWE-457): [#def482] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:609:45: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘minor’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:569:12: branch_true: following ‘true’ branch (when ‘size != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:570:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:570:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:576:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:576:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:578:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:583:20: branch_false: following ‘false’ branch (when ‘len > 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:583:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:592:28: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:599:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:608:36: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:609:45: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/nfsd/nfsctl.c:609:45: danger: use of uninitialized value ‘minor’ here # 607| case 4: # 608| if (*minorp == '.') { # 609|-> if (nfsd_minorversion(nn, minor, cmd) < 0) # 610| return -EINVAL; # 611| } else if ((cmd == NFSD_SET) != nfsd_vers(nn, num, NFSD_TEST)) { Error: GCC_ANALYZER_WARNING (CWE-127): [#def483] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1177:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1203:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0 # 1207| struct dentry *dentry; # 1208| # 1209|-> if (name_is_dot_dotdot(p->name, p->len)) { # 1210| continue; # 1211| } else if (incompat) { Error: GCC_ANALYZER_WARNING (CWE-127): [#def484] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1275:49: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1256:5: enter_function: entry to ‘ovl_indexdir_cleanup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1270:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_indexdir_cleanup’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1270:15: return_function: returning to ‘ovl_indexdir_cleanup’ from ‘ovl_dir_read’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1271:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1274:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1274:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1275:49: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1275:49: danger: out-of-bounds read from byte -24 till byte -21 but ‘list’ starts at byte 0 # 1273| # 1274| list_for_each_entry(p, &list, l_node) { # 1275|-> if (name_is_dot_dotdot(p->name, p->len)) # 1276| continue; # 1277| index = ovl_lookup_upper_unlocked(ofs, p->name, indexdir, p->len); Error: GCC_ANALYZER_WARNING (CWE-126): [#def485] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:433:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:396:1: enter_function: entry to ‘xfs_attr_rmtval_get’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:417:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:418:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:443:28: branch_false: following ‘false’ branch (when ‘error != -61’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: call_function: calling ‘xfs_attr_rmtval_copyout’ from ‘xfs_attr_rmtval_get’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: return_function: returning to ‘xfs_attr_rmtval_get’ from ‘xfs_attr_rmtval_copyout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:451:28: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:433:35: danger: out-of-bounds read from byte 48 till byte 55 but ‘map’ ends at byte 32 # 431| (map[i].br_startblock != HOLESTARTBLOCK)); # 432| dblkno = XFS_FSB_TO_DADDR(mp, map[i].br_startblock); # 433|-> dblkcnt = XFS_FSB_TO_BB(mp, map[i].br_blockcount); # 434| error = xfs_buf_read(mp->m_ddev_targp, dblkno, dblkcnt, # 435| 0, &bp, &xfs_attr3_rmt_buf_ops); Error: GCC_ANALYZER_WARNING (CWE-126): [#def486] kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:396:1: enter_function: entry to ‘xfs_attr_rmtval_get’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:417:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:418:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:422:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:443:28: branch_false: following ‘false’ branch (when ‘error != -61’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: call_function: calling ‘xfs_attr_rmtval_copyout’ from ‘xfs_attr_rmtval_get’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: return_function: returning to ‘xfs_attr_rmtval_get’ from ‘xfs_attr_rmtval_copyout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:451:28: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:426:29: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:443:28: branch_false: following ‘false’ branch (when ‘error != -61’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:445:28: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: call_function: calling ‘xfs_attr_rmtval_copyout’ from ‘xfs_attr_rmtval_get’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:448:33: return_function: returning to ‘xfs_attr_rmtval_get’ from ‘xfs_attr_rmtval_copyout’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:451:28: branch_false: following ‘false’ branch (when ‘error == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/xfs/libxfs/xfs_attr_remote.c:455:35: danger: out-of-bounds read from byte 48 till byte 55 but ‘map’ ends at byte 32 # 453| # 454| /* roll attribute extent map forwards */ # 455|-> lblkno += map[i].br_blockcount; # 456| blkcnt -= map[i].br_blockcount; # 457| } Error: GCC_ANALYZER_WARNING (CWE-457): [#def487] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/crypto/utils.h:26:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(long unsigned int *)d’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:693:19: enter_function: entry to ‘libaesgcm_init’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:695:25: branch_true: following ‘true’ branch (when ‘i != 13’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:696:20: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:701:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:709:54: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/aesgcm.c:707:22: call_function: calling ‘aesgcm_decrypt’ from ‘libaesgcm_init’ # 24| # 25| while (size > 0) { # 26|-> l = get_unaligned(d) ^ get_unaligned(s++); # 27| put_unaligned(l, d++); # 28| size -= sizeof(unsigned long); Error: GCC_ANALYZER_WARNING (CWE-457): [#def488] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/bitmap.h:835:9: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘values[0]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/amplifiers/adl8113.c:47:12: enter_function: entry to ‘adl8113_set_path’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/iio/amplifiers/adl8113.c:59:17: call_function: inlined call to ‘bitmap_write’ from ‘adl8113_set_path’ # 833| index = BIT_WORD(start); # 834| # 835|-> map[index] &= (fit ? (~(mask << offset)) : ~BITMAP_FIRST_WORD_MASK(start)); # 836| map[index] |= value << offset; # 837| if (fit) Error: GCC_ANALYZER_WARNING (CWE-476): [#def489] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/blk-integrity.h:85:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘bi’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:571:28: enter_function: entry to ‘virtscsi_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:582:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:585:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:585:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:587:9: call_function: inlined call to ‘arch_static_branch’ from ‘virtscsi_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:592:9: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:32: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:13: call_function: calling ‘virtio_has_feature’ from ‘virtscsi_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:13: return_function: returning to ‘virtscsi_queuecommand’ from ‘virtio_has_feature’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:595:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:596:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/virtio_scsi.c:596:17: call_function: calling ‘virtio_scsi_init_hdr_pi’ from ‘virtscsi_queuecommand’ # 83| unsigned int sectors) # 84| { # 85|-> return sectors >> (bi->interval_exp - 9); # 86| } # 87| Error: GCC_ANALYZER_WARNING (CWE-476): [#def490] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/can/can-ml.h:101:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/vcan.c:133:13: enter_function: entry to ‘vcan_set_cap_info’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/net/can/vcan.c:143:9: call_function: inlined call to ‘can_set_cap’ from ‘vcan_set_cap_info’ # 99| struct can_ml_priv *can_ml = can_get_ml_priv(dev); # 100| # 101|-> can_ml->can_cap = cap; # 102| } # 103| Error: GCC_ANALYZER_WARNING (CWE-476): [#def491] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/dma-fence.h:422:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘fence’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7497:19: enter_function: entry to ‘amdgpu_device_enforce_isolation’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7511:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7520:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7535:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7542:22: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7542:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7543:31: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/amd/amdgpu/amdgpu_device.c:7544:30: call_function: calling ‘dma_fence_is_signaled’ from ‘amdgpu_device_enforce_isolation’ # 420| dma_fence_test_signaled_flag(struct dma_fence *fence) # 421| { # 422|-> return test_bit(DMA_FENCE_FLAG_SIGNALED_BIT, &fence->flags); # 423| } # 424| Error: GCC_ANALYZER_WARNING (CWE-457): [#def492] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/err.h:78:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘xpagemap’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_svm.c:1871:13: call_function: inlined call to ‘IS_ERR’ from ‘xe_svm_get_pagemaps’ # 76| static inline bool __must_check IS_ERR(__force const void *ptr) # 77| { # 78|-> return IS_ERR_VALUE((unsigned long)ptr); # 79| } # 80| Error: GCC_ANALYZER_WARNING (CWE-457): [#def493] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fortify-string.h:220:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘engines[127]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c:367:16: enter_function: entry to ‘sched_group_engines_read’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c:395:67: call_function: inlined call to ‘__fortify_strlen’ from ‘sched_group_engines_read’ # 218| { # 219| const size_t p_size = __member_size(p); # 220|-> const size_t p_len = __compiletime_strlen(p); # 221| size_t ret; # 222| Error: CLANG_WARNING: [#def494] kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/sockex2_kern.c:7: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/uapi/linux/if_tunnel.h:7: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/ip.h:16: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/skbuff.h:17: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/bvec.h:10: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/highmem.h:5: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2429:2: warning: declaration does not declare anything [-Wmissing-declarations] # 2429 | struct __filename_head; # | ^~~~~~~~~~~~~~~~~~~~~~ # 2427| #define EMBEDDED_NAME_MAX (192 - sizeof(struct __filename_head)) # 2428| struct filename { # 2429|-> struct __filename_head; # 2430| const char iname[EMBEDDED_NAME_MAX]; # 2431| }; Error: COMPILER_WARNING: [#def495] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2429:31: warning[warning]: declaration does not declare anything # 2427| #define EMBEDDED_NAME_MAX (192 - sizeof(struct __filename_head)) # 2428| struct filename { # 2429|-> struct __filename_head; # 2430| const char iname[EMBEDDED_NAME_MAX]; # 2431| }; Error: COMPILER_WARNING: [#def496] [important] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2433:1: error[error]: static assertion failed: "sizeof(struct filename) % 64 == 0" # 2431| }; # 2432| static_assert(offsetof(struct filename, iname) % sizeof(long) == 0); # 2433|-> static_assert(sizeof(struct filename) % 64 == 0); # 2434| # 2435| static inline struct mnt_idmap *file_mnt_idmap(const struct file *file) Error: CLANG_WARNING: [#def497] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2433:15: error: static assertion failed due to requirement 'sizeof(struct filename) % 64 == 0': sizeof(struct filename) % 64 == 0 # 2433 | static_assert(sizeof(struct filename) % 64 == 0); # | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # 79 | #define static_assert(expr, ...) __static_assert(expr, ##__VA_ARGS__, #expr) # | ^~~~ # 80 | #define __static_assert(expr, msg, ...) _Static_assert(expr, msg) # | ^~~~ # 2433 | static_assert(sizeof(struct filename) % 64 == 0); # | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~ # 79 | #define static_assert(expr, ...) __static_assert(expr, ##__VA_ARGS__, #expr) # | ^~~~ # 80 | #define __static_assert(expr, msg, ...) _Static_assert(expr, msg) # | ^~~~ # 2431| }; # 2432| static_assert(offsetof(struct filename, iname) % sizeof(long) == 0); # 2433|-> static_assert(sizeof(struct filename) % 64 == 0); # 2434| # 2435| static inline struct mnt_idmap *file_mnt_idmap(const struct file *file) Error: GCC_ANALYZER_WARNING (CWE-126): [#def498] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2892:23: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1177:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1203:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:21: call_function: calling ‘name_is_dot_dotdot’ from ‘ovl_workdir_cleanup_recurse’ # 2890| static inline bool name_is_dot_dotdot(const char *name, size_t len) # 2891| { # 2892|-> return len && unlikely(name[0] == '.') && # 2893| (len == 1 || (len == 2 && name[1] == '.')); # 2894| } Error: GCC_ANALYZER_WARNING (CWE-457): [#def499] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/fs.h:2892:23: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*name’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1177:12: enter_function: entry to ‘ovl_workdir_cleanup_recurse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: call_function: calling ‘ovl_dir_read’ from ‘ovl_workdir_cleanup_recurse’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1202:15: return_function: returning to ‘ovl_workdir_cleanup_recurse’ from ‘ovl_dir_read’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1203:12: branch_false: following ‘false’ branch (when ‘err == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1206:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:49: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/fs/overlayfs/readdir.c:1209:21: call_function: calling ‘name_is_dot_dotdot’ from ‘ovl_workdir_cleanup_recurse’ # 2890| static inline bool name_is_dot_dotdot(const char *name, size_t len) # 2891| { # 2892|-> return len && unlikely(name[0] == '.') && # 2893| (len == 1 || (len == 2 && name[1] == '.')); # 2894| } Error: GCC_ANALYZER_WARNING (CWE-476): [#def500] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/list.h:381:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘pos’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2445:13: enter_function: entry to ‘disconnect’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2450:12: branch_false: following ‘false’ branch (when ‘dcb’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2460:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2461:9: release_memory: ‘*acb.active_dcb’ is NULL kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2466:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2467:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/dc395x.c:2468:17: call_function: calling ‘waiting_process_next’ from ‘disconnect’ # 379| static inline int list_empty(const struct list_head *head) # 380| { # 381|-> return READ_ONCE(head->next) == head; # 382| } # 383| Error: GCC_ANALYZER_WARNING (CWE-476): [#def501] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/list.h:381:16: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘queue’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1767:12: enter_function: entry to ‘nvmet_rdma_cm_handler’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1773:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1776:9: call_function: inlined call to ‘arch_static_branch’ from ‘nvmet_rdma_cm_handler’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/nvme/target/rdma.c:1797:17: call_function: calling ‘nvmet_rdma_queue_disconnect’ from ‘nvmet_rdma_cm_handler’ # 379| static inline int list_empty(const struct list_head *head) # 380| { # 381|-> return READ_ONCE(head->next) == head; # 382| } # 383| Error: COMPILER_WARNING (CWE-1164): [#def502] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/rh_flags.h:31:13: warning[-Wunused-function]: ‘rh_print_flags’ defined but not used # 31 | static void rh_print_flags(void) { } # | ^~~~~~~~~~~~~~ # 29| }) # 30| #else # 31|-> static void rh_print_flags(void) { } # 32| static void rh_add_flag(const char *flag_name) { } # 33| #endif Error: COMPILER_WARNING (CWE-1164): [#def503] kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/module/main.c:68: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/rh_flags.h:32:13: warning[-Wunused-function]: ‘rh_add_flag’ defined but not used # 32 | static void rh_add_flag(const char *flag_name) { } # | ^~~~~~~~~~~ # 30| #else # 31| static void rh_print_flags(void) { } # 32|-> static void rh_add_flag(const char *flag_name) { } # 33| #endif # 34| #endif Error: GCC_ANALYZER_WARNING (CWE-457): [#def504] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/unaligned.h:18:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*(short unsigned int *)(®_val[0])’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/bluetooth/btrtl.c:1359:5: enter_function: entry to ‘btrtl_setup_realtek’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/bluetooth/btrtl.c:1364:21: call_function: calling ‘btrtl_initialize’ from ‘btrtl_setup_realtek’ # 16| static inline u16 get_unaligned_le16(const void *p) # 17| { # 18|-> return le16_to_cpu(__get_unaligned_t(__le16, p)); # 19| } # 20| Error: GCC_ANALYZER_WARNING (CWE-476): [#def505] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/linux/unaligned.h:73:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ct’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:31:16: enter_function: entry to ‘fc_elsct_send’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:43:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: call_function: calling ‘fc_ct_fill’ from ‘fc_elsct_send’ # 71| static inline void put_unaligned_be64(u64 val, void *p) # 72| { # 73|-> __put_unaligned_t(__be64, cpu_to_be64(val), p); # 74| } # 75| Error: GCC_ANALYZER_WARNING (CWE-476): [#def506] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/scsi/fc_frame.h:33:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ct’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:31:16: enter_function: entry to ‘fc_elsct_send’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:43:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_elsct.c:47:22: call_function: calling ‘fc_ct_fill’ from ‘fc_elsct_send’ # 31| static inline void hton24(u8 *p, u32 v) # 32| { # 33|-> p[0] = (v >> 16) & 0xff; # 34| p[1] = (v >> 8) & 0xff; # 35| p[2] = v & 0xff; Error: GCC_ANALYZER_WARNING (CWE-476): [#def507] kernel-7.0/linux-7.0.0-62.fc45.x86_64/include/scsi/scsi_transport_fc.h:788:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rport’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1857:21: enter_function: entry to ‘fc_queuecommand’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1861:34: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1866:16: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/drivers/scsi/libfc/fc_fcp.c:1866:16: call_function: calling ‘fc_remote_port_chkready’ from ‘fc_queuecommand’ # 786| int result; # 787| # 788|-> switch (rport->port_state) { # 789| case FC_PORTSTATE_ONLINE: # 790| case FC_PORTSTATE_MARGINAL: Error: GCC_ANALYZER_WARNING (CWE-126): [#def508] kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/tw.h:41:13: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:126:13: enter_function: entry to ‘io_flush_timeouts’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:135:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:139:21: call_function: inlined call to ‘io_is_timeout_noseq’ from ‘io_flush_timeouts’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/io_uring/timeout.c:158:9: call_function: calling ‘io_flush_killed_timeouts’ from ‘io_flush_timeouts’ # 39| static inline void __io_req_task_work_add(struct io_kiocb *req, unsigned flags) # 40| { # 41|-> if (req->ctx->flags & IORING_SETUP_DEFER_TASKRUN) # 42| io_req_local_work_add(req, flags); # 43| else Error: GCC_ANALYZER_WARNING (CWE-457): [#def509] kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:393:53: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘skbs[i]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:290:12: enter_function: entry to ‘cpu_map_kthread_run’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:304:16: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:305:41: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:314:21: call_function: inlined call to ‘__ptr_ring_empty’ from ‘cpu_map_kthread_run’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:314:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:315:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:317:29: call_function: inlined call to ‘__ptr_ring_empty’ from ‘cpu_map_kthread_run’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:317:28: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:318:33: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:334:21: call_function: calling ‘__ptr_ring_consume_batched’ from ‘cpu_map_kthread_run’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:334:21: return_function: returning to ‘cpu_map_kthread_run’ from ‘__ptr_ring_consume_batched’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:336:29: branch_false: following ‘false’ branch (when ‘i >= n’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:358:17: call_function: inlined call to ‘local_bh_disable’ from ‘cpu_map_kthread_run’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:362:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:363:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:389:17: call_function: calling ‘trace_xdp_cpumap_kthread’ from ‘cpu_map_kthread_run’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:389:17: return_function: returning to ‘cpu_map_kthread_run’ from ‘trace_xdp_cpumap_kthread’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:392:29: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:393:53: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/kernel/bpf/cpumap.c:393:53: danger: use of uninitialized value ‘skbs[i]’ here # 391| # 392| for (i = 0; i < ret.xdp_n + ret.skb_n; i++) # 393|-> gro_receive_skb(&rcpu->gro, skbs[i]); # 394| # 395| /* Flush either every 64 packets or in case of empty ring */ Error: GCC_ANALYZER_WARNING (CWE-457): [#def510] kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:274:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘&*(struct __sha3_ctx *)shake_ctx.state.<Uae60>.bytes[squeeze_offset]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:371:6: enter_function: entry to ‘shake256’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:376:9: call_function: inlined call to ‘shake_update’ from ‘shake256’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:376:9: call_function: inlined call to ‘shake_update’ from ‘shake256’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/lib/crypto/sha3.c:377:9: call_function: calling ‘shake_squeeze’ from ‘shake256’ # 272| size_t copy = min(out_len, block_size - squeeze_offset); # 273| # 274|-> memcpy(out, &ctx->state.bytes[squeeze_offset], copy); # 275| out += copy; # 276| out_len -= copy; Error: GCC_ANALYZER_WARNING (CWE-457): [#def511] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned char*)&mp_opt.<U5e60>.<U53c0>)[3]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:806:21: enter_function: entry to ‘subflow_syn_recv_sock’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:838:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:19: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:858:1: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:862:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:871:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:880:39: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:882:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:883:57: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:884:28: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:887:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: danger: use of uninitialized value ‘((unsigned char*)&mp_opt.<U5e60>.<U53c0>)[3]’ here # 888| owner = mptcp_sk(ctx->conn); # 889| # 890|-> if (mp_opt.deny_join_id0) # 891| WRITE_ONCE(owner->pm.remote_deny_join_id0, true); # 892| Error: GCC_ANALYZER_WARNING (CWE-457): [#def512] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘((unsigned char*)&mp_opt.<Uab40>.<Ua0a0>)[3]’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:806:21: enter_function: entry to ‘subflow_syn_recv_sock’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:838:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:20: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:852:19: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:858:1: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:862:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:871:20: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:880:39: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:882:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:883:57: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:884:28: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:887:25: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/mptcp/subflow.c:890:29: danger: use of uninitialized value ‘((unsigned char*)&mp_opt.<Uab40>.<Ua0a0>)[3]’ here # 888| owner = mptcp_sk(ctx->conn); # 889| # 890|-> if (mp_opt.deny_join_id0) # 891| WRITE_ONCE(owner->pm.remote_deny_join_id0, true); # 892| Error: GCC_ANALYZER_WARNING (CWE-457): [#def513] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:1306:16: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*udest.port’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3906:12: enter_function: entry to ‘ip_vs_genl_set_cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3920:12: branch_false: following ‘false’ branch (when ‘cmd != 17’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3923:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3923:19: branch_false: following ‘false’ branch (when ‘cmd != 12’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3926:19: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3938:15: call_function: calling ‘ip_vs_genl_parse_service’ from ‘ip_vs_genl_set_cmd’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3938:15: return_function: returning to ‘ip_vs_genl_set_cmd’ from ‘ip_vs_genl_parse_service’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3941:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3945:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3945:12: branch_false: following ‘false’ branch (when ‘cmd == 1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:3999:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/ipvs/ip_vs_ctl.c:4020:23: call_function: calling ‘ip_vs_del_dest’ from ‘ip_vs_genl_set_cmd’ # 1304| { # 1305| struct ip_vs_dest *dest; # 1306|-> __be16 dport = udest->port; # 1307| # 1308| /* We use function that requires RCU lock */ Error: GCC_ANALYZER_WARNING (CWE-457): [#def514] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1655:44: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<U9140>.n’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1832:13: enter_function: entry to ‘nft_pipapo_commit’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1840:13: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’ # 1653| for (b = 0; b < NFT_PIPAPO_BUCKETS(f->bb); b++) { # 1654| bitmap_cut(pos, pos, rulemap[i].to, # 1655|-> rulemap[i].n, # 1656| f->bsize * BITS_PER_LONG); # 1657| Error: GCC_ANALYZER_WARNING (CWE-457): [#def515] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1662:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<U9140>.n’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1832:13: enter_function: entry to ‘nft_pipapo_commit’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1840:13: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’ # 1660| } # 1661| # 1662|-> pipapo_unmap(f->mt, f->rules, rulemap[i].to, rulemap[i].n, # 1663| last ? 0 : rulemap[i + 1].n, last); # 1664| if (pipapo_resize(f, f->rules, f->rules - rulemap[i].n)) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def516] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1662:62: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.<U9140>.n’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1832:13: enter_function: entry to ‘nft_pipapo_commit’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1840:13: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/netfilter/nft_set_pipapo.c:1841:17: call_function: calling ‘pipapo_gc_scan’ from ‘nft_pipapo_commit’ # 1660| } # 1661| # 1662|-> pipapo_unmap(f->mt, f->rules, rulemap[i].to, rulemap[i].n, # 1663| last ? 0 : rulemap[i + 1].n, last); # 1664| if (pipapo_resize(f, f->rules, f->rules - rulemap[i].n)) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def517] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.h:245:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*peer.common.<U4320>.type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:442:13: enter_function: entry to ‘smcd_cdc_rx_tsklet’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:449:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:456:9: call_function: calling ‘smc_cdc_msg_recv’ from ‘smcd_cdc_rx_tsklet’ # 243| struct smc_connection *conn) # 244| { # 245|-> local->common.type = peer->common.type; # 246| local->len = peer->len; # 247| local->seqno = ntohs(peer->seqno); Error: GCC_ANALYZER_WARNING (CWE-457): [#def518] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.h:245:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*peer.common.<Uca00>.type’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:442:13: enter_function: entry to ‘smcd_cdc_rx_tsklet’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:449:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_cdc.c:456:9: call_function: calling ‘smc_cdc_msg_recv’ from ‘smcd_cdc_rx_tsklet’ # 243| struct smc_connection *conn) # 244| { # 245|-> local->common.type = peer->common.type; # 246| local->len = peer->len; # 247| local->seqno = ntohs(peer->seqno); Error: GCC_ANALYZER_WARNING (CWE-457): [#def519] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_clc.c:1201:52: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘gle.gid_cnt’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_clc.c:1213:5: enter_function: entry to ‘smc_clc_send_confirm’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_clc.c:1223:15: call_function: calling ‘smc_clc_send_confirm_accept’ from ‘smc_clc_send_confirm’ # 1199| vec[i++].iov_len = sizeof(gle); # 1200| vec[i].iov_base = &ini->smcrv2.gidlist.list; # 1201|-> vec[i++].iov_len = gle.gid_cnt * # 1202| sizeof(gle.gid[0]); # 1203| } Error: GCC_ANALYZER_WARNING (CWE-126): [#def520] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1152:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1559:13: enter_function: entry to ‘smc_llc_add_link_work’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1564:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1570:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1570:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1571:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/smc/smc_llc.c:1571:17: call_function: calling ‘smc_llc_process_cli_add_link’ from ‘smc_llc_add_link_work’ # 1150| llc->hd.common.llc_type = SMC_LLC_REQ_ADD_LINK; # 1151| for (i = 0; i < gidlist.len; i++) # 1152|-> memcpy(llc->gid[i], gidlist.list[i], sizeof(gidlist.list[0])); # 1153| llc->gid_cnt = gidlist.len; # 1154| len = sizeof(*llc) + (gidlist.len * sizeof(gidlist.list[0])); Error: GCC_ANALYZER_WARNING (CWE-127): [#def521] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:61:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:147:5: enter_function: entry to ‘xprt_setup_bc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:166:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: call_function: calling ‘xprt_alloc_bc_req’ from ‘xprt_setup_bc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: return_function: returning to ‘xprt_setup_bc’ from ‘xprt_alloc_bc_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:169:20: branch_true: following ‘true’ branch (when ‘req’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:170:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:196:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:197:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:201:17: call_function: calling ‘xprt_free_allocation’ from ‘xprt_setup_bc’ # 59| # 60| dprintk("RPC: free allocations for req= %p\n", req); # 61|-> WARN_ON_ONCE(test_bit(RPC_BC_PA_IN_USE, &req->rq_bc_pa_state)); # 62| xbufp = &req->rq_rcv_buf; # 63| free_page((unsigned long)xbufp->head[0].iov_base); Error: GCC_ANALYZER_WARNING (CWE-127): [#def522] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:63:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:147:5: enter_function: entry to ‘xprt_setup_bc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:166:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: call_function: calling ‘xprt_alloc_bc_req’ from ‘xprt_setup_bc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: return_function: returning to ‘xprt_setup_bc’ from ‘xprt_alloc_bc_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:169:20: branch_true: following ‘true’ branch (when ‘req’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:170:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:196:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:197:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:201:17: call_function: calling ‘xprt_free_allocation’ from ‘xprt_setup_bc’ # 61| WARN_ON_ONCE(test_bit(RPC_BC_PA_IN_USE, &req->rq_bc_pa_state)); # 62| xbufp = &req->rq_rcv_buf; # 63|-> free_page((unsigned long)xbufp->head[0].iov_base); # 64| xbufp = &req->rq_snd_buf; # 65| free_page((unsigned long)xbufp->head[0].iov_base); Error: GCC_ANALYZER_WARNING (CWE-127): [#def523] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:65:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:147:5: enter_function: entry to ‘xprt_setup_bc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:166:21: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: call_function: calling ‘xprt_alloc_bc_req’ from ‘xprt_setup_bc’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:168:23: return_function: returning to ‘xprt_setup_bc’ from ‘xprt_alloc_bc_req’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:169:20: branch_true: following ‘true’ branch (when ‘req’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:170:25: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:196:16: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:197:23: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/sunrpc/backchannel_rqst.c:201:17: call_function: calling ‘xprt_free_allocation’ from ‘xprt_setup_bc’ # 63| free_page((unsigned long)xbufp->head[0].iov_base); # 64| xbufp = &req->rq_snd_buf; # 65|-> free_page((unsigned long)xbufp->head[0].iov_base); # 66| kfree(req); # 67| } Error: GCC_ANALYZER_WARNING (CWE-457): [#def524] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2857:21: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘new_mode’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2838:12: enter_function: entry to ‘vsock_net_child_mode_string’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2849:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_true: following ‘true’ branch (when ‘write != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2856:21: call_function: inlined call to ‘vsock_net_mode’ from ‘vsock_net_child_mode_string’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2856:20: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2857:21: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2857:21: danger: use of uninitialized value ‘new_mode’ here # 2855| */ # 2856| if (vsock_net_mode(net) == VSOCK_NET_MODE_LOCAL && # 2857|-> new_mode == VSOCK_NET_MODE_GLOBAL) # 2858| return -EPERM; # 2859| Error: GCC_ANALYZER_WARNING (CWE-457): [#def525] kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2860:22: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘new_mode’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2838:12: enter_function: entry to ‘vsock_net_child_mode_string’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2849:12: branch_false: following ‘false’ branch (when ‘ret == 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2852:12: branch_true: following ‘true’ branch (when ‘write != 0’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2856:21: call_function: inlined call to ‘vsock_net_mode’ from ‘vsock_net_child_mode_string’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/net/vmw_vsock/af_vsock.c:2860:22: danger: use of uninitialized value ‘new_mode’ here # 2858| return -EPERM; # 2859| # 2860|-> if (!vsock_net_set_child_mode(net, new_mode)) # 2861| return -EBUSY; # 2862| } Error: CLANG_WARNING: [#def526] kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/lwt_len_hist.bpf.c:13: included_from: Included from here. kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:41231:2: warning: declaration does not declare anything [-Wmissing-declarations] # 41231 | struct aes_enckey; # | ^~~~~~~~~~~~~~~~~ #41229| #41230| struct aes_key { #41231|-> struct aes_enckey; #41232| union aes_invkey_arch inv_k; #41233| }; Error: COMPILER_WARNING: [#def527] kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:41231:26: warning[warning]: declaration does not declare anything #41229| #41230| struct aes_key { #41231|-> struct aes_enckey; #41232| union aes_invkey_arch inv_k; #41233| }; Error: CLANG_WARNING: [#def528] kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:83865:2: warning: declaration does not declare anything [-Wmissing-declarations] # 83865 | struct __filename_head; # | ^~~~~~~~~~~~~~~~~~~~~~ #83863| #83864| struct filename { #83865|-> struct __filename_head; #83866| const char iname[168]; #83867| }; Error: COMPILER_WARNING: [#def529] kernel-7.0/linux-7.0.0-62.fc45.x86_64/samples/bpf/vmlinux.h:83865:31: warning[warning]: declaration does not declare anything #83863| #83864| struct filename { #83865|-> struct __filename_head; #83866| const char iname[168]; #83867| }; Error: GCC_ANALYZER_WARNING (CWE-476): [#def530] kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs-amp-lib-test.c:2318:45: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’ # 2316| { # 2317| struct kunit *test = kunit_get_current_test(); # 2318|-> const struct cs_amp_lib_test_param *param = test->param_value; # 2319| unsigned int len; # 2320| Error: GCC_ANALYZER_WARNING (CWE-476): [#def531] kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs35l56-test.c:155:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’ # 153| { # 154| struct kunit *test = kunit_get_current_test(); # 155|-> struct cs35l56_test_priv *priv = test->priv; # 156| unsigned int len; # 157| Error: GCC_ANALYZER_WARNING (CWE-476): [#def532] kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs35l56-test.c:377:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’ # 375| { # 376| struct kunit *test = kunit_get_current_test(); # 377|-> struct cs35l56_test_priv *priv = test->priv; # 378| # 379| priv->read_onchip_spkid_called = true; Error: GCC_ANALYZER_WARNING (CWE-476): [#def533] kernel-7.0/linux-7.0.0-62.fc45.x86_64/sound/soc/codecs/cs35l56-test.c:387:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘test’ # 385| { # 386| struct kunit *test = kunit_get_current_test(); # 387|-> struct cs35l56_test_priv *priv = test->priv; # 388| # 389| priv->configure_onchip_spkid_pads_called = true; Error: GCC_ANALYZER_WARNING (CWE-401): [#def534] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:958:17: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*cur.<Uea00>.pkey)’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:941:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:945:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:957:9: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:957:9: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:958:39: acquire_memory: allocated here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:958:17: danger: ‘strdup(*cur.<Uea00>.pkey)’ leaks here; was allocated at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6) # 956| i = 1; # 957| hashmap__for_each_entry(ctx->ids, cur, bkt) # 958|-> expr__add_id_val(ctx, strdup(cur->pkey), i++); # 959| # 960| hashmap__for_each_entry(ctx->ids, cur, bkt) { Error: GCC_ANALYZER_WARNING (CWE-401): [#def535] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:975:25: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(*cur.<Uea00>.pkey)’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:941:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:945:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:946:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:968:12: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:968:12: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:974:17: branch_true: following ‘true’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:974:17: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:975:47: acquire_memory: allocated here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/tests/pmu-events.c:975:25: danger: ‘strdup(*cur.<Uea00>.pkey)’ leaks here; was allocated at [(9)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/8) # 973| i = 1024; # 974| hashmap__for_each_entry(ctx->ids, cur, bkt) # 975|-> expr__add_id_val(ctx, strdup(cur->pkey), i--); # 976| if (expr__parse(&result, ctx, str)) { # 977| pr_err("expr__parse failed for %s\n", metric_name); Error: GCC_ANALYZER_WARNING (CWE-401): [#def536] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:69:24: warning[-Wanalyzer-malloc-leak]: leak of ‘s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:157:17: enter_function: entry to ‘strlist__new’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:161:12: branch_true: following ‘true’ branch (when ‘slist’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_false: following ‘false’ branch (when ‘config’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:170:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:20: branch_true: following ‘true’ branch (when ‘list’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: call_function: calling ‘strlist__parse_list’ from ‘strlist__new’ # 67| # 68| if (fp == NULL) # 69|-> return -errno; # 70| # 71| while (fgets(entry, sizeof(entry), fp) != NULL) { Error: GCC_ANALYZER_WARNING (CWE-401): [#def537] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:149:17: warning[-Wanalyzer-malloc-leak]: leak of ‘s’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:157:17: enter_function: entry to ‘strlist__new’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:161:12: branch_true: following ‘true’ branch (when ‘slist’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:165:20: branch_false: following ‘false’ branch (when ‘config’ is NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:170:17: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:20: branch_true: following ‘true’ branch (when ‘list’ is non-NULL)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: branch_true: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/perf/util/strlist.c:177:29: call_function: calling ‘strlist__parse_list’ from ‘strlist__new’ # 147| if (err != 0) # 148| return err; # 149|-> s = sep + 1; # 150| } # 151| Error: GCC_ANALYZER_WARNING (CWE-688): [#def538] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/../../../tools/net/ynl/generated/rt-link-user.h:5069:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘malloc((long unsigned int)((unsigned int)strlen(ifname) + 1))’ where non-null expected kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tun.c:774:1: enter_function: entry to ‘tun_vnet_udptnl_teardown’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tun.c:781:15: call_function: calling ‘ip_link_del’ from ‘tun_vnet_udptnl_teardown’ # 5067| req->_len.ifname = strlen(ifname); # 5068| req->ifname = malloc(req->_len.ifname + 1); # 5069|-> memcpy(req->ifname, ifname, req->_len.ifname); # 5070| req->ifname[req->_len.ifname] = 0; # 5071| } Error: COMPILER_WARNING (CWE-457): [#def539] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:458:35: warning[-Wmaybe-uninitialized]: ‘ver_cap’ may be used uninitialized # 458 | if (devid >= 0 && ver_ena != ver_cap) { # | ~~~~~~~~^~~~~~~~~~ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:413:24: note: ‘ver_cap’ was declared here # 413 | __u32 ver_ena, ver_cap; # | ^~~~~~~ # 456| opts.ifindex); # 457| # 458|-> if (devid >= 0 && ver_ena != ver_cap) { # 459| ret = psp_dev_set_ena(ys, devid, ver_cap); # 460| if (ret) Error: COMPILER_WARNING (CWE-457): [#def540] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c: scope_hint: In function ‘main’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:458:35: warning[-Wmaybe-uninitialized]: ‘ver_ena’ may be used uninitialized # 458 | if (devid >= 0 && ver_ena != ver_cap) { # | ~~~~~~~~^~~~~~~~~~ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/drivers/net/psp_responder.c:413:15: note: ‘ver_ena’ was declared here # 413 | __u32 ver_ena, ver_cap; # | ^~~~~~~ # 456| opts.ifindex); # 457| # 458|-> if (devid >= 0 && ver_ena != ver_cap) { # 459| ret = psp_dev_set_ena(ys, devid, ver_cap); # 460| if (ret) Error: COMPILER_WARNING (CWE-393): [#def541] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/landlock/tsync_test.c: scope_hint: In function ‘idle’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/landlock/tsync_test.c:63:1: warning[-Wreturn-type]: no return statement in function returning non-void # 63 | } # | ^ # 61| # 62| pthread_cleanup_pop(1); # 63|-> } # 64| # 65| TEST(multi_threaded_success) Error: COMPILER_WARNING (CWE-252): [#def542] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/mm/memory-failure.c: scope_hint: In function ‘prepare_file’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/mm/memory-failure.c:258:17: warning[-Wunused-result]: ignoring return value of ‘ftruncate’ declared with attribute ‘warn_unused_result’ # 258 | ftruncate(fd, size); # | ^~~~~~~~~~~~~~~~~~~ # 256| if (fd >= 0) { # 257| unlink(fname); # 258|-> ftruncate(fd, size); # 259| } # 260| return fd; Error: COMPILER_WARNING (CWE-563): [#def543] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/netfilter/nf_queue.c: scope_hint: In function ‘mainloop’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/netfilter/nf_queue.c:337:33: warning[-Wunused-value]: statement with no effect # 337 | for (ooo_count; ooo_count >= 0; ooo_count--) { # | ^~~ # 335| ooo_ids[ooo_count] = id; # 336| if (ooo_count >= 15) { # 337|-> for (ooo_count; ooo_count >= 0; ooo_count--) { # 338| nlh = nfq_build_verdict(buf, ooo_ids[ooo_count], # 339| opts.queue_num, opts.verdict); Error: GCC_ANALYZER_WARNING (CWE-775): [#def544] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(cfg_outfile, "w")’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_resource: opened here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was opened at [(1)](sarif:/runs/0/results/14/codeFlows/0/threadFlows/0/locations/0) # 82| error(1, errno, "getsockopt(SO_INCOMING_NAPI_ID)"); # 83| # 84|-> if (read(connfd, buf, 64) < 0) # 85| error(1, errno, "read()"); # 86| Error: GCC_ANALYZER_WARNING (CWE-401): [#def545] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(cfg_outfile, "w")’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_memory: allocated here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/15/codeFlows/0/threadFlows/0/locations/0) # 82| error(1, errno, "getsockopt(SO_INCOMING_NAPI_ID)"); # 83| # 84|-> if (read(connfd, buf, 64) < 0) # 85| error(1, errno, "read()"); # 86| Error: GCC_ANALYZER_WARNING (CWE-775): [#def546] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: warning[-Wanalyzer-file-leak]: leak of FILE ‘fopen(cfg_outfile, "w")’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_resource: opened here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was opened at [(1)](sarif:/runs/0/results/16/codeFlows/0/threadFlows/0/locations/0) # 85| error(1, errno, "read()"); # 86| # 87|-> if (fprintf(outfile, "%d\n", opt) < 0) # 88| error(1, errno, "fprintf()"); # 89| Error: GCC_ANALYZER_WARNING (CWE-401): [#def547] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: warning[-Wanalyzer-malloc-leak]: leak of ‘fopen(cfg_outfile, "w")’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:54:19: acquire_memory: allocated here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:55:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:58:14: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:59:12: branch_false: following ‘false’ branch (when ‘fd != -1’)... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:62:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:63:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:66:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:69:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:72:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:75:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:77:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:80:9: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:81:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:84:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/testing/selftests/net/tfo.c:87:13: danger: ‘fopen(cfg_outfile, "w")’ leaks here; was allocated at [(1)](sarif:/runs/0/results/17/codeFlows/0/threadFlows/0/locations/0) # 85| error(1, errno, "read()"); # 86| # 87|-> if (fprintf(outfile, "%d\n", opt) < 0) # 88| error(1, errno, "fprintf()"); # 89| Error: COMPILER_WARNING: [#def548] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/thermal/tmon/tmon.c: scope_hint: In function ‘main’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/thermal/tmon/tmon.c:233:25: warning[-Wstringop-truncation]: ‘strncpy’ specified bound 20 equals destination size # 233 | strncpy(ctrl_cdev, optarg, CDEV_NAME_SIZE); # | ^ # 231| case 'c': # 232| no_control = 0; # 233|-> strncpy(ctrl_cdev, optarg, CDEV_NAME_SIZE); # 234| break; # 235| case 'd': Error: COMPILER_WARNING: [#def549] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/timerlat.bpf.c:137:9: warning[warning]: ‘bpf_tail_call’ is static but used in inline function ‘set_stop_tracing’ which is not static # 135| * Otherwise, just silently fail. # 136| */ # 137|-> bpf_tail_call(tp_args, &bpf_action, 0); # 138| } # 139| Error: GCC_ANALYZER_WARNING (CWE-775): [#def550] kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:836:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(&cgroup_procs, 2)’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:806:12: enter_function: entry to ‘open_cgroup_procs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:813:18: call_function: calling ‘find_mount’ from ‘open_cgroup_procs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:813:18: return_function: returning to ‘open_cgroup_procs’ from ‘find_mount’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:814:12: branch_false: following ‘false’ branch... kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:819:12: branch_false: ...to here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:833:9: call_function: calling ‘debug_msg’ from ‘open_cgroup_procs’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:833:9: return_function: returning to ‘open_cgroup_procs’ from ‘debug_msg’ kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:835:17: acquire_resource: opened here kernel-7.0/linux-7.0.0-62.fc45.x86_64/tools/tracing/rtla/src/utils.c:836:12: danger: ‘open(&cgroup_procs, 2)’ leaks here; was opened at [(13)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/12) # 834| # 835| cg_fd = open(cgroup_procs, O_RDWR); # 836|-> if (cg_fd < 0) # 837| return -1; # 838|
| analyzer-version-clippy | 1.95.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.0.1 |
| analyzer-version-gcc-analyzer | 16.0.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.95.0 |
| diffbase-analyzer-version-cppcheck | 2.20.0 |
| diffbase-analyzer-version-gcc | 16.0.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.0.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-183.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | kernel-6.19.10-300.fc44 |
| diffbase-store-results-to | /tmp/tmpe0w7qh6y/kernel-6.19.10-300.fc44.tar.xz |
| diffbase-time-created | 2026-04-28 16:16:34 |
| diffbase-time-finished | 2026-04-28 22:33:48 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpe0w7qh6y/kernel-6.19.10-300.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpe0w7qh6y/kernel-6.19.10-300.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.5-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-183.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | kernel-7.0.0-62.fc45 |
| store-results-to | /tmp/tmpl1kodzy4/kernel-7.0.0-62.fc45.tar.xz |
| time-created | 2026-04-28 22:41:42 |
| time-finished | 2026-04-29 04:49:00 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpl1kodzy4/kernel-7.0.0-62.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpl1kodzy4/kernel-7.0.0-62.fc45.src.rpm' |
| tool-version | csmock-3.8.5-1.el9 |