Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
gawk-5.4.0/gawkapi.h:1011:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'string'
gawk-5.4.0/extension/ordchr.c:116:1: enter_function: entry to 'do_chr'
gawk-5.4.0/extension/ordchr.c:124:9: branch_true: following 'true' branch (when 'result' is non-NULL)...
gawk-5.4.0/extension/ordchr.c:126:13: branch_true: ...to here
gawk-5.4.0/extension/ordchr.c:126:12: branch_true: following 'true' branch...
gawk-5.4.0/extension/ordchr.c:127:17: branch_true: ...to here
gawk-5.4.0/extension/ordchr.c:129:20: branch_true: following 'true' branch...
gawk-5.4.0/extension/ordchr.c:130:25: branch_true: ...to here
gawk-5.4.0/extension/ordchr.c:148:16: call_function: inlined call to 'r_make_string' from 'do_chr'
# 1009|   	if (duplicate) {
# 1010|   		emalloc(cp, char *, length + 1, "r_make_string");
# 1011|-> 		memcpy(cp, string, length);
# 1012|   		cp[length] = '\0';
# 1013|   		result->str_value.str = cp;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
gawk-5.4.0/io.c:4158:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rtval’
gawk-5.4.0/io.c:3995:12: branch_false: following ‘false’ branch...
gawk-5.4.0/io.c:4016:13: branch_false: ...to here
gawk-5.4.0/io.c:4043:20: branch_false: following ‘false’ branch...
gawk-5.4.0/io.c:4051:20: branch_false: ...to here
gawk-5.4.0/io.c:4097:20: branch_false: following ‘false’ branch...
gawk-5.4.0/io.c:4103:27: branch_false: ...to here
gawk-5.4.0/io.c:4111:28: branch_true: following ‘true’ branch...
gawk-5.4.0/io.c:4112:33: branch_true: ...to here
gawk-5.4.0/io.c:4126:12: branch_false: following ‘false’ branch...
gawk-5.4.0/io.c:4129:13: branch_false: ...to here
gawk-5.4.0/io.c:4129:12: branch_false: following ‘false’ branch...
gawk-5.4.0/io.c:4133:17: branch_false: ...to here
gawk-5.4.0/io.c:4133:17: branch_true: following ‘true’ branch...
gawk-5.4.0/io.c:4147:21: branch_true: ...to here
gawk-5.4.0/io.c:4147:20: branch_false: following ‘false’ branch...
gawk-5.4.0/io.c:4150:27: branch_false: following ‘false’ branch...
gawk-5.4.0/io.c:4155:27: branch_false: ...to here
gawk-5.4.0/io.c:4155:27: branch_true: following ‘true’ branch...
gawk-5.4.0/io.c:4156:28: branch_true: ...to here
gawk-5.4.0/io.c:4156:28: branch_true: following ‘true’ branch...
gawk-5.4.0/io.c:4158:33: danger: dereference of NULL ‘rtval’
# 4156|   			if (! do_traditional && (rtval->stlen >= recm.rt_len)) {
# 4157|   				rtval->stlen = recm.rt_len;
# 4158|-> 				free_wstr(rtval);
# 4159|   			} else
# 4160|   				set_RT(recm.rt_start, recm.rt_len);

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-57.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namegawk-5.3.2-3.fc44
diffbase-store-results-to/tmp/tmpq7a7y5h7/gawk-5.3.2-3.fc44.tar.xz
diffbase-time-created2026-06-01 12:10:54
diffbase-time-finished2026-06-01 12:15:07
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpq7a7y5h7/gawk-5.3.2-3.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpq7a7y5h7/gawk-5.3.2-3.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-57.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegawk-5.4.0-3.fc45
store-results-to/tmp/tmpu9ue1gez/gawk-5.4.0-3.fc45.tar.xz
time-created2026-06-01 12:15:22
time-finished2026-06-01 12:19:01
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpu9ue1gez/gawk-5.4.0-3.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpu9ue1gez/gawk-5.4.0-3.fc45.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9