Error: GCC_ANALYZER_WARNING (CWE-457): [#def1] jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c: scope_hint: In function ‘Java_org_mozilla_jss_pkcs11_PK11KeyPairGenerator_generateMLDSAKeyPair’ jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c:463:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘keyPair’ # 461| # 462| finish: # 463|-> return keyPair; # 464| #else # 465| return NULL; Error: COMPILER_WARNING (CWE-457): [#def2] jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c: scope_hint: In function ‘Java_org_mozilla_jss_pkcs11_PK11KeyPairGenerator_generateMLDSAKeyPair’ jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c:463:12: warning[-Wmaybe-uninitialized]: ‘keyPair’ may be used uninitialized # 463 | return keyPair; # | ^~~~~~~ jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c:454:13: note: ‘keyPair’ was declared here # 454 | jobject keyPair=NULL; # | ^~~~~~~ # 461| # 462| finish: # 463|-> return keyPair; # 464| #else # 465| return NULL; Error: GCC_ANALYZER_WARNING (CWE-457): [#def3] jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c: scope_hint: In function ‘Java_org_mozilla_jss_pkcs11_PK11KeyPairGenerator_generateMLDSAKeyPairWithOpFlags’ jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c:507:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘keyPair’ cc1: note: unrecognized command-line option ‘-Wno-unknown-warning-option’ may have been intended to silence earlier diagnostics # 505| # 506| finish: # 507|-> return keyPair; # 508| #else # 509| return NULL; Error: COMPILER_WARNING (CWE-457): [#def4] jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c: scope_hint: In function ‘Java_org_mozilla_jss_pkcs11_PK11KeyPairGenerator_generateMLDSAKeyPairWithOpFlags’ jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c:507:12: warning[-Wmaybe-uninitialized]: ‘keyPair’ may be used uninitialized # 507 | return keyPair; # | ^~~~~~~ jss-5.10.0~alpha1/native/src/main/native/org/mozilla/jss/pkcs11/PK11KeyPairGenerator.c:496:13: note: ‘keyPair’ was declared here # 496 | jobject keyPair=NULL; # | ^~~~~~~ cc1: note: unrecognized command-line option ‘-Wno-unknown-warning-option’ may have been intended to silence earlier diagnostics # 505| # 506| finish: # 507|-> return keyPair; # 508| #else # 509| return NULL;
| analyzer-version-clippy | 1.95.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.95.0 |
| diffbase-analyzer-version-cppcheck | 2.20.0 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-81.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | jss-5.10.0~alpha1-1.20260513165554307723.pr1097.12.g0bd91c8b |
| diffbase-store-results-to | /tmp/tmpu8tw9win/jss-5.10.0~alpha1-1.20260513165554307723.pr1097.12.g0bd91c8b.tar.xz |
| diffbase-time-created | 2026-05-13 17:12:18 |
| diffbase-time-finished | 2026-05-13 17:16:21 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpu8tw9win/jss-5.10.0~alpha1-1.20260513165554307723.pr1097.12.g0bd91c8b.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpu8tw9win/jss-5.10.0~alpha1-1.20260513165554307723.pr1097.12.g0bd91c8b.src.rpm' |
| diffbase-tool-version | csmock-3.8.5-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-81.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | jss-5.10.0~alpha1-1.20260429193011883637.master.85.gfccefb9e |
| store-results-to | /tmp/tmphu7nkxf4/jss-5.10.0~alpha1-1.20260429193011883637.master.85.gfccefb9e.tar.xz |
| time-created | 2026-05-13 17:07:29 |
| time-finished | 2026-05-13 17:11:57 |
| title | Fixed findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,shellcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmphu7nkxf4/jss-5.10.0~alpha1-1.20260429193011883637.master.85.gfccefb9e.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmphu7nkxf4/jss-5.10.0~alpha1-1.20260429193011883637.master.85.gfccefb9e.src.rpm' |
| tool-version | csmock-3.8.5-1.el9 |