Fixed findings

List of Findings

Error: CPPCHECK_WARNING (CWE-190): [#def1]
pipewire-1.6.2/spa/plugins/alsa/alsa-seq-bridge.c:441: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  439|   
#  440|   	if (info == NULL) {
#  441|-> 		spa_log_debug(state->log, "free port %d.%d", addr->client, addr->port);
#  442|   		if (port)
#  443|   			free_port(state, stream, port);

Error: CPPCHECK_WARNING (CWE-190): [#def2]
pipewire-1.6.2/spa/plugins/alsa/alsa-seq-bridge.c:453: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  451|   		} else if (port != NULL) {
#  452|   			if ((caps & stream->caps) != stream->caps) {
#  453|-> 				spa_log_debug(state->log, "free port %d.%d", addr->client, addr->port);
#  454|   				free_port(state, stream, port);
#  455|   			}

Error: CPPCHECK_WARNING (CWE-190): [#def3]
pipewire-1.6.2/spa/plugins/alsa/alsa-seq-bridge.c:803: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  801|   	info.size = size;
#  802|   
#  803|-> 	spa_log_debug(this->log, "%p: io %d.%d %d %p %zd", this,
#  804|   			direction, port_id, id, data, size);
#  805|   

Error: CPPCHECK_WARNING (CWE-758): [#def4]
pipewire-1.6.2/spa/plugins/bluez5/a2dp-codec-aac.c:226: error[comparePointers]: Comparing pointers that point to different objects
#  224|   	choice = (struct spa_pod_choice*)spa_pod_builder_frame(b, &f[1]);
#  225|   	i = 0;
#  226|-> 	SPA_FOR_EACH_ELEMENT_VAR(aac_frequencies, f) {
#  227|   		if (AAC_GET_FREQUENCY(conf) & f->config) {
#  228|   			if (i++ == 0)

Error: CPPCHECK_WARNING (CWE-190): [#def5]
pipewire-1.6.2/spa/plugins/control/mixer.c:477: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  475|   			port->have_format = true;
#  476|   			port->types = types;
#  477|-> 			spa_log_debug(this->log, "%p: set format on port %d:%d",
#  478|   					this, direction, port_id);
#  479|   		}

Error: CPPCHECK_WARNING (CWE-190): [#def6]
pipewire-1.6.2/src/modules/module-rtp/audio.c:564: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  562|   				impl->io_position->clock.rate.denom);
#  563|   
#  564|-> 		rtp_stream_emit_send_packet(impl, iov, 3);
#  565|   
#  566|   		impl->seq++;

Error: CPPCHECK_WARNING (CWE-190): [#def7]
pipewire-1.6.2/src/modules/module-rtp/midi.c:154: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  152|   	j = (struct rtp_midi_journal*)packet;
#  153|   	uint16_t seqnum = ntohs(j->checkpoint_seqnum);
#  154|-> 	rtp_stream_emit_send_feedback(impl, seqnum);
#  155|   	return 0;
#  156|   }

Error: CPPCHECK_WARNING (CWE-190): [#def8]
pipewire-1.6.2/src/modules/module-rtp/midi.c:474: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  472|   						len, timestamp + base,
#  473|   						offset, impl->psamples);
#  474|-> 				rtp_stream_emit_send_packet(impl, iov, 3);
#  475|   
#  476|   				impl->seq++;

Error: CPPCHECK_WARNING (CWE-190): [#def9]
pipewire-1.6.2/src/modules/module-rtp/midi.c:513: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  511|   
#  512|   		pw_log_trace("sending %d timestamp:%d", len, base);
#  513|-> 		rtp_stream_emit_send_packet(impl, iov, 3);
#  514|   		impl->seq++;
#  515|   	}

Error: CPPCHECK_WARNING (CWE-190): [#def10]
pipewire-1.6.2/src/modules/module-rtp/opus.c:255: error[integerOverflow]: Signed integer overflow for expression '0-1'.
#  253|   		iov[1].iov_len = res;
#  254|   
#  255|-> 		rtp_stream_emit_send_packet(impl, iov, 2);
#  256|   
#  257|   		impl->seq++;

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.0.1
analyzer-version-gcc-analyzer16.0.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.0.1
diffbase-analyzer-version-gcc-analyzer16.0.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-19.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namepipewire-1.6.4-1.fc45
diffbase-store-results-to/tmp/tmp_py_r693/pipewire-1.6.4-1.fc45.tar.xz
diffbase-time-created2026-04-28 19:08:45
diffbase-time-finished2026-04-28 19:21:55
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp_py_r693/pipewire-1.6.4-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp_py_r693/pipewire-1.6.4-1.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-19.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namepipewire-1.6.2-1.fc44
store-results-to/tmp/tmpo0shbn7e/pipewire-1.6.2-1.fc44.tar.xz
time-created2026-04-28 18:54:21
time-finished2026-04-28 19:08:15
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpo0shbn7e/pipewire-1.6.2-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpo0shbn7e/pipewire-1.6.2-1.fc44.src.rpm'
tool-versioncsmock-3.8.5-1.el9