Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
util-linux-2.43.devel/agetty-cmd/issuefile.c: scope_hint: In function ‘issuefile_read_stream.part.0’
util-linux-2.43.devel/agetty-cmd/issuefile.c:250:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected
util-linux-2.43.devel/agetty-cmd/issuefile.c:9: included_from: Included from here.
/usr/include/stdio.h:616:12: note: argument 2 of ‘putc’ must be non-null
#  248|   			output_special_char(ie, fgetc(f), op, tp, f);
#  249|   		else
#  250|-> 			putc(c, ie->output);
#  251|   	}
#  252|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
util-linux-2.43.devel/agetty-cmd/issuefile.c: scope_hint: In function ‘dump_iface_all’
util-linux-2.43.devel/agetty-cmd/issuefile.c:601:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected
util-linux-2.43.devel/include/netlink.h:28: included_from: Included from here.
util-linux-2.43.devel/include/netaddrq.h:17: included_from: Included from here.
util-linux-2.43.devel/agetty-cmd/agetty.h:34: included_from: Included from here.
util-linux-2.43.devel/agetty-cmd/issuefile.c:19: included_from: Included from here.
util-linux-2.43.devel/include/netaddrq.h:62:46: note: in expansion of macro ‘list_for_each’
util-linux-2.43.devel/agetty-cmd/issuefile.c:843:17: note: in expansion of macro ‘list_for_each_netaddrq_iface’
/usr/include/stdio.h:364:12: note: argument 1 of ‘fprintf’ must be non-null
#  599|   		if (first)
#  600|   		{
#  601|-> 			fprintf(ie->output, "%s: ", ifaceq->ifname);
#  602|   			first = false;
#  603|   		}

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
util-linux-2.43.devel/agetty-cmd/issuefile.c:613:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected
util-linux-2.43.devel/include/netaddrq.h:62:46: note: in expansion of macro ‘list_for_each’
util-linux-2.43.devel/agetty-cmd/issuefile.c:843:17: note: in expansion of macro ‘list_for_each_netaddrq_iface’
util-linux-2.43.devel/agetty-cmd/issuefile.c:596:9: note: in expansion of macro ‘list_for_each’
util-linux-2.43.devel/agetty-cmd/issuefile.c:608:9: note: in expansion of macro ‘list_for_each’
/usr/include/stdio.h:364:12: note: argument 1 of ‘fprintf’ must be non-null
#  611|   		if (first)
#  612|   		{
#  613|-> 			fprintf(ie->output, "%s: ", ifaceq->ifname);
#  614|   			first = false;
#  615|   		}

Error: GCC_ANALYZER_WARNING (CWE-688): [#def4]
util-linux-2.43.devel/agetty-cmd/issuefile.c: scope_hint: In function ‘output_special_char’
util-linux-2.43.devel/agetty-cmd/issuefile.c:673:25: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected
<built-in>: note: argument 2 of ‘__builtin_fputc’ must be non-null
#  671|   			}
#  672|   		} else
#  673|-> 			fputs("\033", ie->output);
#  674|   		break;
#  675|   	}

Error: GCC_ANALYZER_WARNING (CWE-688): [#def5]
util-linux-2.43.devel/agetty-cmd/issuefile.c:748:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected
<built-in>: note: argument 2 of ‘__builtin_fputs’ must be non-null
#  746|   	}
#  747|   	case 'l':
#  748|-> 		fprintf (ie->output, "%s", op->tty);
#  749|   		break;
#  750|   	case 'b':

Error: GCC_ANALYZER_WARNING (CWE-688): [#def6]
util-linux-2.43.devel/agetty-cmd/issuefile.c:853:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘*ie.output’ where non-null expected
/usr/include/stdio.h:616:12: note: argument 2 of ‘putc’ must be non-null
#  851|   #endif /* USE_NETLINK */
#  852|   	default:
#  853|-> 		putc(c, ie->output);
#  854|   		break;
#  855|   	}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def7]
util-linux-2.43.devel/agetty-cmd/tty.c: scope_hint: In function ‘agetty_open_tty’
util-linux-2.43.devel/agetty-cmd/tty.c:314:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup(0)’
#  312|   
#  313|   	/* set up stdout and stderr */
#  314|-> 	if (dup(STDIN_FILENO) != 1 || dup(STDIN_FILENO) != 2)
#  315|   		agetty_log_err(_("%s: dup problem: %m"), tty);
#  316|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def8]
util-linux-2.43.devel/agetty-cmd/tty.c:314:36: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup(0)’
#  312|   
#  313|   	/* set up stdout and stderr */
#  314|-> 	if (dup(STDIN_FILENO) != 1 || dup(STDIN_FILENO) != 2)
#  315|   		agetty_log_err(_("%s: dup problem: %m"), tty);
#  316|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
util-linux-2.43.devel/misc-utils/blkid.c: scope_hint: In function ‘main’
util-linux-2.43.devel/misc-utils/blkid.c:886:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)(argc - optind), 8)’
util-linux-2.43.devel/misc-utils/blkid.c:49: included_from: Included from here.
util-linux-2.43.devel/misc-utils/blkid.c:18: included_from: Included from here.
#  884|   				continue;
#  885|   
#  886|-> 			devices[numdev++] = dev;
#  887|   		}
#  888|   

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-214.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameutil-linux-2.43.devel-1.20260519125236761629.master.725.g5683ed632
diffbase-store-results-to/tmp/tmp4zejz4an/util-linux-2.43.devel-1.20260519125236761629.master.725.g5683ed632.tar.xz
diffbase-time-created2026-05-20 11:10:56
diffbase-time-finished2026-05-20 11:21:18
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp4zejz4an/util-linux-2.43.devel-1.20260519125236761629.master.725.g5683ed632.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp4zejz4an/util-linux-2.43.devel-1.20260519125236761629.master.725.g5683ed632.src.rpm'
diffbase-tool-versioncsmock-3.8.5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-214.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260420.180315.gd39a405.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameutil-linux-2.43.devel-1.20260520104704451576.pr4350.764.g6107b8e3f
store-results-to/tmp/tmpn2wodwnu/util-linux-2.43.devel-1.20260520104704451576.pr4350.764.g6107b8e3f.tar.xz
time-created2026-05-20 11:21:40
time-finished2026-05-20 11:31:27
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpn2wodwnu/util-linux-2.43.devel-1.20260520104704451576.pr4350.764.g6107b8e3f.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpn2wodwnu/util-linux-2.43.devel-1.20260520104704451576.pr4350.764.g6107b8e3f.src.rpm'
tool-versioncsmock-3.8.5-1.el9