Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-457): [#def1]
sed-4.10/lib/file-has-acl.c:496: error[uninitvar]: Uninitialized variable: buf
#  494|     int ret = (fd < 0
#  495|                ? ((flags & ACL_SYMLINK_FOLLOW ? getxattr : lgetxattr)
#  496|->                 (name, XATTR_NAME_NFSV4_ACL, buf, sizeof buf))
#  497|                : fgetxattr (fd, XATTR_NAME_NFSV4_ACL, buf, sizeof buf));
#  498|     if (ret < 0)

Error: COMPILER_WARNING (CWE-563): [#def2]
sed-4.10/lib/regexec.c: scope_hint: In function 'rpl_regexec'
sed-4.10/lib/glthread/lock.h:524:35: warning[-Wunused-value]: statement with no effect
#  524 | # define glthread_lock_lock(NAME) 0
#      |                                   ^
sed-4.10/lib/regex_internal.h:62:26: note: in expansion of macro 'glthread_lock_lock'
#   62 | # define lock_lock(lock) glthread_lock_lock (&(lock))
#      |                          ^~~~~~~~~~~~~~~~~~
sed-4.10/lib/regexec.c:208:3: note: in expansion of macro 'lock_lock'
#  208 |   lock_lock (dfa->lock);
#      |   ^~~~~~~~~
#  522|   # define gl_lock_define_initialized(STORAGECLASS, NAME)
#  523|   # define glthread_lock_init(NAME) 0
#  524|-> # define glthread_lock_lock(NAME) 0
#  525|   # define glthread_lock_unlock(NAME) 0
#  526|   # define glthread_lock_destroy(NAME) 0

Error: COMPILER_WARNING (CWE-563): [#def3]
sed-4.10/lib/glthread/lock.h:525:37: warning[-Wunused-value]: statement with no effect
#  525 | # define glthread_lock_unlock(NAME) 0
#      |                                     ^
sed-4.10/lib/regex_internal.h:63:28: note: in expansion of macro 'glthread_lock_unlock'
#   63 | # define lock_unlock(lock) glthread_lock_unlock (&(lock))
#      |                            ^~~~~~~~~~~~~~~~~~~~
sed-4.10/lib/regexec.c:215:3: note: in expansion of macro 'lock_unlock'
#  215 |   lock_unlock (dfa->lock);
#      |   ^~~~~~~~~~~
#  523|   # define glthread_lock_init(NAME) 0
#  524|   # define glthread_lock_lock(NAME) 0
#  525|-> # define glthread_lock_unlock(NAME) 0
#  526|   # define glthread_lock_destroy(NAME) 0
#  527|   

Error: COMPILER_WARNING (CWE-563): [#def4]
sed-4.10/lib/regex_internal.h:58: included_from: Included from here.
sed-4.10/lib/regex.c:68: included_from: Included from here.
sed-4.10/lib/regcomp.c: scope_hint: In function 'rpl_regfree'
sed-4.10/lib/glthread/lock.h:526:38: warning[-Wunused-value]: statement with no effect
#  526 | # define glthread_lock_destroy(NAME) 0
#      |                                      ^
sed-4.10/lib/regex_internal.h:61:26: note: in expansion of macro 'glthread_lock_destroy'
#   61 | # define lock_fini(lock) glthread_lock_destroy (&(lock))
#      |                          ^~~~~~~~~~~~~~~~~~~~~
sed-4.10/lib/regcomp.c:612:7: note: in expansion of macro 'lock_fini'
#  612 |       lock_fini (dfa->lock);
#      |       ^~~~~~~~~
#  524|   # define glthread_lock_lock(NAME) 0
#  525|   # define glthread_lock_unlock(NAME) 0
#  526|-> # define glthread_lock_destroy(NAME) 0
#  527|   
#  528|   /* ------------------------- gl_rwlock_t datatype ------------------------- */

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
sed-4.10/lib/regex_internal.c:951:3: warning[-Wanalyzer-malloc-leak]: leak of '*set.elems'
sed-4.10/lib/regexec.c:3187:1: enter_function: entry to 'check_arrival_expand_ecl_sub'
sed-4.10/lib/regexec.c:3191:27: branch_true: following 'true' branch...
sed-4.10/lib/regexec.c:3195:11: branch_true: ...to here
sed-4.10/lib/regexec.c:3195:10: branch_true: following 'true' branch...
sed-4.10/lib/regexec.c:3196:14: branch_true: ...to here
sed-4.10/lib/regexec.c:3195:11: branch_false: following 'false' branch...
sed-4.10/lib/regexec.c:3206:12: branch_false: ...to here
sed-4.10/lib/regexec.c:3206:12: call_function: calling 're_node_set_insert' from 'check_arrival_expand_ecl_sub'
sed-4.10/lib/regexec.c:3206:12: return_function: returning to 'check_arrival_expand_ecl_sub' from 're_node_set_insert'
sed-4.10/lib/regexec.c:3207:10: branch_false: following 'false' branch...
sed-4.10/lib/regexec.c:3209:11: branch_false: ...to here
sed-4.10/lib/regexec.c:3209:10: branch_false: following 'false' branch...
sed-4.10/lib/regexec.c:3211:10: branch_false: ...to here
sed-4.10/lib/regexec.c:3211:10: branch_true: following 'true' branch...
sed-4.10/lib/regexec.c:3215:47: branch_true: ...to here
sed-4.10/lib/regexec.c:3214:17: call_function: calling 'check_arrival_expand_ecl_sub' from 'check_arrival_expand_ecl_sub'
sed-4.10/lib/regexec.c:3214:17: return_function: returning to 'check_arrival_expand_ecl_sub' from 'check_arrival_expand_ecl_sub'
sed-4.10/lib/regexec.c:3217:14: branch_false: following 'false' branch...
sed-4.10/lib/regexec.c:3220:18: branch_false: ...to here
sed-4.10/lib/regexec.c:3191:28: call_function: calling 're_node_set_contains' from 'check_arrival_expand_ecl_sub'
sed-4.10/lib/regexec.c:3191:28: return_function: returning to 'check_arrival_expand_ecl_sub' from 're_node_set_contains'
sed-4.10/lib/regexec.c:3191:27: branch_true: following 'true' branch...
sed-4.10/lib/regexec.c:3195:11: branch_true: ...to here
sed-4.10/lib/regexec.c:3206:12: call_function: calling 're_node_set_insert' from 'check_arrival_expand_ecl_sub'
#  949|     set->alloc = 1;
#  950|     set->nelem = 1;
#  951|->   set->elems = re_malloc (Idx, 1);
#  952|     if (__glibc_unlikely (set->elems == NULL))
#  953|       {

Error: COMPILER_WARNING (CWE-563): [#def6]
sed-4.10/lib/regex.c:72: included_from: Included from here.
sed-4.10/lib/regexec.c:192:13: warning[-Wunused-variable]: unused variable 'dfa'
#  192 |   re_dfa_t *dfa = preg->buffer;
#      |             ^~~
#  190|     reg_errcode_t err;
#  191|     Idx start, length;
#  192|->   re_dfa_t *dfa = preg->buffer;
#  193|   
#  194|     if (eflags & ~(REG_NOTBOL | REG_NOTEOL | REG_STARTEND))

Error: COMPILER_WARNING (CWE-563): [#def7]
sed-4.10/lib/regexec.c:372:13: warning[-Wunused-variable]: unused variable 'dfa'
#  372 |   re_dfa_t *dfa = bufp->buffer;
#      |             ^~~
#  370|     regoff_t rval;
#  371|     int eflags = 0;
#  372|->   re_dfa_t *dfa = bufp->buffer;
#  373|     Idx last_start = start + range;
#  374|   

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.0.1
analyzer-version-gcc-analyzer16.0.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.0.1
diffbase-analyzer-version-gcc-analyzer16.0.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-55.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namesed-4.9-7.fc44
diffbase-store-results-to/tmp/tmp_7_6zklw/sed-4.9-7.fc44.tar.xz
diffbase-time-created2026-04-28 19:39:49
diffbase-time-finished2026-04-28 19:42:04
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp_7_6zklw/sed-4.9-7.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp_7_6zklw/sed-4.9-7.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-55.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namesed-4.10-1.fc45
store-results-to/tmp/tmphv4zuwct/sed-4.10-1.fc45.tar.xz
time-created2026-04-28 19:42:12
time-finished2026-04-28 19:45:06
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmphv4zuwct/sed-4.10-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmphv4zuwct/sed-4.10-1.fc45.src.rpm'
tool-versioncsmock-3.8.5-1.el9