Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-664): [#def1]
SDL3-3.4.8/src/SDL_error.c:57: error[va_list_usedBeforeStarted]: va_list 'ap2' used before va_start() was called.
#   55|           va_list ap2;
#   56|           va_copy(ap2, ap);
#   57|->         result = SDL_vsnprintf(errinfo->str, errinfo->len, fmt, ap2);
#   58|           va_end(ap2);
#   59|   

Error: CPPCHECK_WARNING (CWE-664): [#def2]
SDL3-3.4.8/src/SDL_error.c:67: error[va_list_usedBeforeStarted]: va_list 'ap2' used before va_start() was called.
#   65|                   errinfo->len = len;
#   66|                   va_copy(ap2, ap);
#   67|->                 (void)SDL_vsnprintf(errinfo->str, errinfo->len, fmt, ap2);
#   68|                   va_end(ap2);
#   69|               }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
SDL3-3.4.8/src/video/SDL_bmp.c:719:27: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘state.intermediate_surface’
SDL3-3.4.8/src/video/SDL_bmp.c:903:6: enter_function: entry to ‘SDL_SaveBMP_IO_REAL’
SDL3-3.4.8/src/video/SDL_bmp.c:907:10: call_function: calling ‘InitBMPSaveState’ from ‘SDL_SaveBMP_IO_REAL’
SDL3-3.4.8/src/video/SDL_bmp.c:907:10: return_function: returning to ‘SDL_SaveBMP_IO_REAL’ from ‘InitBMPSaveState’
SDL3-3.4.8/src/video/SDL_bmp.c:907:8: branch_true: following ‘true’ branch...
SDL3-3.4.8/src/video/SDL_bmp.c:910:5: branch_true: ...to here
SDL3-3.4.8/src/video/SDL_bmp.c:910:5: branch_false: following ‘false’ branch (when ‘dst’ is non-NULL)...
SDL3-3.4.8/src/video/SDL_bmp.c:914:14: branch_false: ...to here
SDL3-3.4.8/src/video/SDL_bmp.c:914:14: call_function: calling ‘SDL_SaveBMP_IO_Internal’ from ‘SDL_SaveBMP_IO_REAL’
#  717|   
#  718|       if (SDL_LockSurface(state->intermediate_surface)) {
#  719|->         const size_t bw = state->intermediate_surface->w * state->intermediate_surface->fmt->bytes_per_pixel;
#  720|   
#  721|           // Set the BMP file header values

Error: CPPCHECK_WARNING (CWE-457): [#def4]
SDL3-3.4.8/src/video/wayland/SDL_waylandmouse.c:560: error[ctuuninitvar]: Using argument state that points at uninitialized variable tool->cursor_state
#  558|       SDL_LockMutex(cursor_thread_context.lock);
#  559|   
#  560|->     if (state->frame_callback) {
#  561|           wl_callback_destroy(state->frame_callback);
#  562|           state->frame_callback = NULL;

Error: CPPCHECK_WARNING (CWE-457): [#def5]
SDL3-3.4.8/src/video/wayland/SDL_waylandmouse.c:900: error[uninitvar]: Uninitialized variable: seat->pointer.cursor_state.current_cursor
#  898|       wl_list_for_each (seat, &video_data->seat_list, link)
#  899|       {
#  900|->         if (seat->pointer.cursor_state.current_cursor == d) {
#  901|               Wayland_CursorStateDestroyFrameCallback(&seat->pointer.cursor_state);
#  902|   

Error: CPPCHECK_WARNING (CWE-457): [#def6]
SDL3-3.4.8/src/video/wayland/SDL_waylandmouse.c:913: error[uninitvar]: Uninitialized variable: tool->cursor_state.current_cursor
#  911|           SDL_WaylandPenTool *tool;
#  912|           wl_list_for_each (tool, &seat->tablet.tool_list, link) {
#  913|->             if (tool->cursor_state.current_cursor == d) {
#  914|                   Wayland_CursorStateDestroyFrameCallback(&tool->cursor_state);
#  915|   

Error: CPPCHECK_WARNING (CWE-457): [#def7]
SDL3-3.4.8/src/video/wayland/SDL_waylandmouse.c:1206: error[uninitvar]: Uninitialized variable: seat->pointer.focus
# 1204|   
# 1205|       wl_list_for_each (seat, &viddata->seat_list, link) {
# 1206|->         if (seat->pointer.focus == updated_window) {
# 1207|               SDL_WaylandCursorState *state = &seat->pointer.cursor_state;
# 1208|               if (state->current_cursor && !state->current_cursor->is_system_cursor && state->scale != new_scale) {

Error: CPPCHECK_WARNING (CWE-457): [#def8]
SDL3-3.4.8/src/video/wayland/SDL_waylandmouse.c:1216: error[uninitvar]: Uninitialized variable: tool->focus
# 1214|           SDL_WaylandPenTool *tool;
# 1215|           wl_list_for_each (tool, &seat->tablet.tool_list, link) {
# 1216|->             if (tool->focus == updated_window) {
# 1217|                   SDL_WaylandCursorState *state = &tool->cursor_state;
# 1218|                   if (state->current_cursor && !state->current_cursor->is_system_cursor && state->scale != new_scale) {

Error: CPPCHECK_WARNING (CWE-457): [#def9]
SDL3-3.4.8/src/video/wayland/SDL_waylandmouse.c:1236: error[uninitvar]: Uninitialized variable: seat->pointer.wl_pointer
# 1234|   
# 1235|       wl_list_for_each (seat, &d->seat_list, link) {
# 1236|->         if (seat->pointer.wl_pointer) {
# 1237|               obj.wl_pointer = seat->pointer.wl_pointer;
# 1238|               obj.is_pointer = true;

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-42.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameSDL3-3.4.0-3.fc44
diffbase-store-results-to/tmp/tmps0_eoocp/SDL3-3.4.0-3.fc44.tar.xz
diffbase-time-created2026-06-01 11:18:21
diffbase-time-finished2026-06-01 11:27:44
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmps0_eoocp/SDL3-3.4.0-3.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmps0_eoocp/SDL3-3.4.0-3.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-42.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameSDL3-3.4.8-1.fc45
store-results-to/tmp/tmpidndhcqt/SDL3-3.4.8-1.fc45.tar.xz
time-created2026-06-01 11:28:18
time-finished2026-06-01 11:37:23
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpidndhcqt/SDL3-3.4.8-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpidndhcqt/SDL3-3.4.8-1.fc45.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9