Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
cups-2.4.19/cups/ppd.c:368:31: warning[-Wanalyzer-malloc-leak]: leak of ‘_ppdGlobals()’
cups-2.4.19/cups/ppd.c:2330:1: enter_function: entry to ‘ppdSetConformance’
cups-2.4.19/cups/ppd.c:2332:31: call_function: calling ‘_ppdGlobals’ from ‘ppdSetConformance’
cups-2.4.19/cups/ppd.c:2332:31: return_function: returning to ‘ppdSetConformance’ from ‘_ppdGlobals’
cups-2.4.19/cups/ppd.c:368:31: danger: ‘_ppdGlobals()’ leaks here; was allocated at [(9)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/8)
#  366|     */
#  367|   
#  368|->   if ((pg = (_ppd_globals_t *)_cupsThreadGetData(ppd_globals_key)) == NULL)
#  369|     {
#  370|      /*

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
cups-2.4.19/cups/ppd.c:528:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
cups-2.4.19/cups/ppd.c:2266:1: enter_function: entry to ‘_ppdOpenFile’
cups-2.4.19/cups/ppd.c:2285:6: branch_false: following ‘false’ branch (when ‘filename’ is non-NULL)...
cups-2.4.19/cups/ppd.c:2296:13: branch_false: ...to here
cups-2.4.19/cups/ppd.c:2296:6: branch_true: following ‘true’ branch...
cups-2.4.19/cups/ppd.c:2298:11: branch_true: ...to here
cups-2.4.19/cups/ppd.c:2298:11: call_function: calling ‘_ppdOpen’ from ‘_ppdOpenFile’
#  526|     */
#  527|   
#  528|->   pg->ppd_status = PPD_OK;
#  529|     pg->ppd_line   = 0;
#  530|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
cups-2.4.19/cups/ppd.c:2279:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
cups-2.4.19/cups/ppd.c:2266:1: enter_function: entry to ‘_ppdOpenFile’
cups-2.4.19/cups/ppd.c:2271:31: call_function: calling ‘_ppdGlobals’ from ‘_ppdOpenFile’
cups-2.4.19/cups/ppd.c:2271:31: return_function: returning to ‘_ppdOpenFile’ from ‘_ppdGlobals’
cups-2.4.19/cups/ppd.c:2279:3: danger: dereference of NULL ‘_ppdGlobals()’
# 2277|     */
# 2278|   
# 2279|->   pg->ppd_line = 0;
# 2280|   
# 2281|    /*

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
cups-2.4.19/cups/ppd.c:2336:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
cups-2.4.19/cups/ppd.c:2330:1: enter_function: entry to ‘ppdSetConformance’
cups-2.4.19/cups/ppd.c:2332:31: call_function: calling ‘_ppdGlobals’ from ‘ppdSetConformance’
cups-2.4.19/cups/ppd.c:2332:31: return_function: returning to ‘ppdSetConformance’ from ‘_ppdGlobals’
cups-2.4.19/cups/ppd.c:2336:3: danger: dereference of NULL ‘_ppdGlobals()’
# 2334|   
# 2335|   
# 2336|->   pg->ppd_conform = c;
# 2337|   }
# 2338|   

Error: GCC_ANALYZER_WARNING (CWE-674): [#def5]
cups-2.4.19/cups/ppd.c:2639:7: warning[-Wanalyzer-infinite-recursion]: infinite recursion
cups-2.4.19/cups/ppd.c:2617:1: enter_function: entry to ‘ppd_free_group’
cups-2.4.19/cups/ppd.c:2624:6: branch_false: following ‘false’ branch...
cups-2.4.19/cups/ppd.c:2634:7: branch_false: ...to here
cups-2.4.19/cups/ppd.c:2634:6: branch_true: following ‘true’ branch...
cups-2.4.19/cups/ppd.c:2636:36: branch_true: ...to here
cups-2.4.19/cups/ppd.c:2637:10: branch_true: following ‘true’ branch (when ‘i != 0’)...
cups-2.4.19/cups/ppd.c:2639:7: branch_true: ...to here
cups-2.4.19/cups/ppd.c:2639:7: call_function: calling ‘ppd_free_group’ from ‘ppd_free_group’
# 2637|            i > 0;
# 2638|   	 i --, subgroup ++)
# 2639|->       ppd_free_group(subgroup);
# 2640|   
# 2641|       free(group->subgroups);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def6]
cups-2.4.19/cups/ppd.c:3196:35: warning[-Wanalyzer-out-of-bounds]: heap-based buffer under-read
cups-2.4.19/cups/ppd.c:2266:1: enter_function: entry to ‘_ppdOpenFile’
cups-2.4.19/cups/ppd.c:2285:6: branch_false: following ‘false’ branch (when ‘filename’ is non-NULL)...
cups-2.4.19/cups/ppd.c:2296:13: branch_false: ...to here
cups-2.4.19/cups/ppd.c:2296:6: branch_true: following ‘true’ branch...
cups-2.4.19/cups/ppd.c:2298:11: branch_true: ...to here
cups-2.4.19/cups/ppd.c:2298:11: call_function: calling ‘_ppdOpen’ from ‘_ppdOpenFile’
# 3194|       }
# 3195|   
# 3196|->     if (lineptr > line->buffer && lineptr[-1] == '\n')
# 3197|         lineptr --;
# 3198|   

Error: GCC_ANALYZER_WARNING (CWE-124): [#def7]
cups-2.4.19/cups/ppd.c:3199:5: warning[-Wanalyzer-out-of-bounds]: heap-based buffer underwrite
cups-2.4.19/cups/ppd.c:2266:1: enter_function: entry to ‘_ppdOpenFile’
cups-2.4.19/cups/ppd.c:2285:6: branch_false: following ‘false’ branch (when ‘filename’ is non-NULL)...
cups-2.4.19/cups/ppd.c:2296:13: branch_false: ...to here
cups-2.4.19/cups/ppd.c:2296:6: branch_true: following ‘true’ branch...
cups-2.4.19/cups/ppd.c:2298:11: branch_true: ...to here
cups-2.4.19/cups/ppd.c:2298:11: call_function: calling ‘_ppdOpen’ from ‘_ppdOpenFile’
# 3197|         lineptr --;
# 3198|   
# 3199|->     *lineptr = '\0';
# 3200|   
# 3201|       DEBUG_printf(("9ppd_read: LINE=\"%s\"", line->buffer));

Scan Properties