git-2.54.0-1.fc45

List of Findings

Error: SHELLCHECK_WARNING (CWE-569): [#def1]
/usr/bin/gitk:10:5: error[SC1035]: You need a space after the [ and before the ].
#    8|   # either version 2, or (at your option) any later version.
#    9|   
#   10|-> if {[catch {package require Tcl 8.6-} err]} {
#   11|       catch {wm withdraw .}
#   12|       tk_messageBox \

Error: SHELLCHECK_WARNING: [#def2]
/usr/bin/gitk:10:5: error[SC1054]: You need a space after the '{'.
#    8|   # either version 2, or (at your option) any later version.
#    9|   
#   10|-> if {[catch {package require Tcl 8.6-} err]} {
#   11|       catch {wm withdraw .}
#   12|       tk_messageBox \

Error: SHELLCHECK_WARNING (CWE-398): [#def3]
/usr/bin/gitk:10:5: error[SC1073]: Couldn't parse this test expression. Fix to allow more checks.
#    8|   # either version 2, or (at your option) any later version.
#    9|   
#   10|-> if {[catch {package require Tcl 8.6-} err]} {
#   11|       catch {wm withdraw .}
#   12|       tk_messageBox \

Error: SHELLCHECK_WARNING (CWE-398): [#def4]
/usr/bin/gitk:10:12: error[SC1072]: Expected test to end here (don't wrap commands in []/[[]]). Fix any mentioned problems and try again.
#    8|   # either version 2, or (at your option) any later version.
#    9|   
#   10|-> if {[catch {package require Tcl 8.6-} err]} {
#   11|       catch {wm withdraw .}
#   12|       tk_messageBox \

Error: SHELLCHECK_WARNING (CWE-563): [#def5]
/usr/libexec/git-core/git-difftool--helper:8:1: warning[SC2034]: TOOL_MODE appears unused. Verify use (or export if used externally).
#    6|   # Copyright (c) 2009, 2010 David Aguilar
#    7|   
#    8|-> TOOL_MODE=diff
#    9|   . git-mergetool--lib
#   10|   

Error: SHELLCHECK_WARNING (CWE-456): [#def6]
/usr/libexec/git-core/git-difftool--helper:8:1: warning[SC2209]: Use var=$(command) to assign output (or quote to assign string).
#    6|   # Copyright (c) 2009, 2010 David Aguilar
#    7|   
#    8|-> TOOL_MODE=diff
#    9|   . git-mergetool--lib
#   10|   

Error: SHELLCHECK_WARNING (CWE-563): [#def7]
/usr/libexec/git-core/git-difftool--helper:86:2: warning[SC2034]: LOCAL appears unused. Verify use (or export if used externally).
#   84|   if test -n "$GIT_DIFFTOOL_DIRDIFF"
#   85|   then
#   86|-> 	LOCAL="$1"
#   87|   	REMOTE="$2"
#   88|   	initialize_merge_tool "$merge_tool" || exit 1

Error: SHELLCHECK_WARNING (CWE-563): [#def8]
/usr/libexec/git-core/git-difftool--helper:87:2: warning[SC2034]: REMOTE appears unused. Verify use (or export if used externally).
#   85|   then
#   86|   	LOCAL="$1"
#   87|-> 	REMOTE="$2"
#   88|   	initialize_merge_tool "$merge_tool" || exit 1
#   89|   	run_merge_tool "$merge_tool" false

Error: SHELLCHECK_WARNING (CWE-563): [#def9]
/usr/libexec/git-core/git-filter-branch:100:1: warning[SC2034]: USAGE appears unused. Verify use (or export if used externally).
#   98|   fi
#   99|   
#  100|-> USAGE="[--setup <command>] [--subdirectory-filter <directory>] [--env-filter <command>]
#  101|   	[--tree-filter <command>] [--index-filter <command>]
#  102|   	[--parent-filter <command>] [--msg-filter <command>]

Error: SHELLCHECK_WARNING (CWE-563): [#def10]
/usr/libexec/git-core/git-filter-branch:108:1: warning[SC2034]: OPTIONS_SPEC appears unused. Verify use (or export if used externally).
#  106|   	[--] [<rev-list options>...]"
#  107|   
#  108|-> OPTIONS_SPEC=
#  109|   . git-sh-setup
#  110|   

Error: SHELLCHECK_WARNING (CWE-456): [#def11]
/usr/libexec/git-core/git-filter-branch:121:1: warning[SC2209]: Use var=$(command) to assign output (or quote to assign string).
#  119|   filter_index=
#  120|   filter_parent=
#  121|-> filter_msg=cat
#  122|   filter_commit=
#  123|   filter_tag_name=

Error: SHELLCHECK_WARNING (CWE-480): [#def12]
/usr/libexec/git-core/git-filter-branch:368:10: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  366|   git_filter_branch__commit_count=0
#  367|   
#  368|-> progress= start_timestamp=
#  369|   if date '+%s' 2>/dev/null | grep -q '^[0-9][0-9]*$'
#  370|   then

Error: SHELLCHECK_WARNING (CWE-156): [#def13]
/usr/libexec/git-core/git-filter-branch:498:28: warning[SC2046]: Quote this to prevent word splitting.
#  496|   		test -f "$workdir"/../map/$sha1 && continue
#  497|   		ancestor=$(git rev-list --simplify-merges -1 "$ref" "$@")
#  498|-> 		test "$ancestor" && echo $(map $ancestor) >"$workdir"/../map/$sha1
#  499|   	done < "$tempdir"/heads
#  500|   fi

Error: SHELLCHECK_WARNING (CWE-156): [#def14]
/usr/libexec/git-core/git-filter-branch:527:12: warning[SC2046]: Quote this to prevent word splitting.
#  525|   		if ! git update-ref -m "filter-branch: rewrite" \
#  526|   					"$ref" $rewritten $sha1 2>/dev/null; then
#  527|-> 			if test $(git cat-file -t "$ref") = tag; then
#  528|   				if test -z "$filter_tag_name"; then
#  529|   					warn "WARNING: You said to rewrite tagged commits, but not the corresponding tag."

Error: SHELLCHECK_WARNING (CWE-477): [#def15]
/usr/libexec/git-core/git-filter-branch:551:28: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#  549|   		ref="${ref#refs/tags/}"
#  550|   		# XXX: Rewrite tagged trees as well?
#  551|-> 		if [ "$type" != "commit" -a "$type" != "tag" ]; then
#  552|   			continue;
#  553|   		fi

Error: SHELLCHECK_WARNING (CWE-569): [#def16]
/usr/libexec/git-core/git-filter-branch:558:37: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
#  556|   			# Dereference to a commit
#  557|   			sha1t="$sha1"
#  558|-> 			sha1="$(git rev-parse -q "$sha1"^{commit})" || continue
#  559|   		fi
#  560|   

Error: SHELLCHECK_WARNING (CWE-569): [#def17]
/usr/libexec/git-core/git-filter-branch:558:44: warning[SC1083]: This } is literal. Check expression (missing ;/\n?) or quote it.
#  556|   			# Dereference to a commit
#  557|   			sha1t="$sha1"
#  558|-> 			sha1="$(git rev-parse -q "$sha1"^{commit})" || continue
#  559|   		fi
#  560|   

Error: SHELLCHECK_WARNING (CWE-252): [#def18]
/usr/libexec/git-core/git-filter-branch:656:1: warning[SC2164]: Use 'cd ... || exit' or 'cd ... || return' in case cd fails.
#  654|   fi
#  655|   
#  656|-> cd "$orig_dir"
#  657|   rm -rf "$tempdir"
#  658|   

Error: SHELLCHECK_WARNING (CWE-561): [#def19]
/usr/libexec/git-core/git-gui:10:2: warning[SC2093]: Remove "exec " if script should continue after this command.
#    8|    fi; \
#    9|    argv0=$0; \
#   10|->  exec 'wish' "$argv0" -- "$@"
#   11|   
#   12|   set appvers {0.21.0.264.gbb52cd}

Error: SHELLCHECK_WARNING (CWE-456): [#def20]
/usr/libexec/git-core/git-gui:12:5: warning[SC2121]: To assign a variable, use just 'var=value', no 'set ..'.
#   10|    exec 'wish' "$argv0" -- "$@"
#   11|   
#   12|-> set appvers {0.21.0.264.gbb52cd}
#   13|   set copyright [string map [list (c) \u00a9] {
#   14|   Copyright (c) 2006-2010 Shawn Pearce, et. al.

Error: SHELLCHECK_WARNING (CWE-569): [#def21]
/usr/libexec/git-core/git-gui:12:13: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
#   10|    exec 'wish' "$argv0" -- "$@"
#   11|   
#   12|-> set appvers {0.21.0.264.gbb52cd}
#   13|   set copyright [string map [list (c) \u00a9] {
#   14|   Copyright (c) 2006-2010 Shawn Pearce, et. al.

Error: SHELLCHECK_WARNING (CWE-569): [#def22]
/usr/libexec/git-core/git-gui:12:32: warning[SC1083]: This } is literal. Check expression (missing ;/\n?) or quote it.
#   10|    exec 'wish' "$argv0" -- "$@"
#   11|   
#   12|-> set appvers {0.21.0.264.gbb52cd}
#   13|   set copyright [string map [list (c) \u00a9] {
#   14|   Copyright (c) 2006-2010 Shawn Pearce, et. al.

Error: SHELLCHECK_WARNING (CWE-456): [#def23]
/usr/libexec/git-core/git-gui:13:5: warning[SC2121]: To assign a variable, use just 'var=value', no 'set ..'.
#   11|   
#   12|   set appvers {0.21.0.264.gbb52cd}
#   13|-> set copyright [string map [list (c) \u00a9] {
#   14|   Copyright (c) 2006-2010 Shawn Pearce, et. al.
#   15|   

Error: SHELLCHECK_WARNING (CWE-398): [#def24]
/usr/libexec/git-core/git-gui:13:33: error[SC1036]: '(' is invalid here. Did you forget to escape it?
#   11|   
#   12|   set appvers {0.21.0.264.gbb52cd}
#   13|-> set copyright [string map [list (c) \u00a9] {
#   14|   Copyright (c) 2006-2010 Shawn Pearce, et. al.
#   15|   

Error: SHELLCHECK_WARNING (CWE-398): [#def25]
/usr/libexec/git-core/git-gui:13:33: error[SC1088]: Parsing stopped here. Invalid use of parentheses?
#   11|   
#   12|   set appvers {0.21.0.264.gbb52cd}
#   13|-> set copyright [string map [list (c) \u00a9] {
#   14|   Copyright (c) 2006-2010 Shawn Pearce, et. al.
#   15|   

Error: SHELLCHECK_WARNING: [#def26]
/usr/libexec/git-core/git-gui--askpass:14:1: error[SC1049]: Did you forget the 'then' for this 'if'?
#   12|   set rc     255
#   13|   
#   14|-> if {$argc < 1} {
#   15|   	set prompt "Enter your OpenSSH passphrase:"
#   16|   } else {

Error: SHELLCHECK_WARNING (CWE-398): [#def27]
/usr/libexec/git-core/git-gui--askpass:14:1: error[SC1073]: Couldn't parse this if expression. Fix to allow more checks.
#   12|   set rc     255
#   13|   
#   14|-> if {$argc < 1} {
#   15|   	set prompt "Enter your OpenSSH passphrase:"
#   16|   } else {

Error: SHELLCHECK_WARNING: [#def28]
/usr/libexec/git-core/git-gui--askpass:14:5: error[SC1054]: You need a space after the '{'.
#   12|   set rc     255
#   13|   
#   14|-> if {$argc < 1} {
#   15|   	set prompt "Enter your OpenSSH passphrase:"
#   16|   } else {

Error: SHELLCHECK_WARNING (CWE-569): [#def29]
/usr/libexec/git-core/git-gui--askpass:14:14: warning[SC1083]: This } is literal. Check expression (missing ;/\n?) or quote it.
#   12|   set rc     255
#   13|   
#   14|-> if {$argc < 1} {
#   15|   	set prompt "Enter your OpenSSH passphrase:"
#   16|   } else {

Error: SHELLCHECK_WARNING (CWE-569): [#def30]
/usr/libexec/git-core/git-gui--askpass:14:16: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
#   12|   set rc     255
#   13|   
#   14|-> if {$argc < 1} {
#   15|   	set prompt "Enter your OpenSSH passphrase:"
#   16|   } else {

Error: SHELLCHECK_WARNING: [#def31]
/usr/libexec/git-core/git-gui--askpass:16:3: error[SC1050]: Expected 'then'.
#   14|   if {$argc < 1} {
#   15|   	set prompt "Enter your OpenSSH passphrase:"
#   16|-> } else {
#   17|   	set prompt [join $argv " "]
#   18|   	if {[regexp -nocase {\(yes\/no\)\?\s*$} $prompt]} {

Error: SHELLCHECK_WARNING (CWE-398): [#def32]
/usr/libexec/git-core/git-gui--askpass:16:8: error[SC1072]: Unexpected . Fix any mentioned problems and try again.
#   14|   if {$argc < 1} {
#   15|   	set prompt "Enter your OpenSSH passphrase:"
#   16|-> } else {
#   17|   	set prompt [join $argv " "]
#   18|   	if {[regexp -nocase {\(yes\/no\)\?\s*$} $prompt]} {

Error: SHELLCHECK_WARNING: [#def33]
/usr/libexec/git-core/git-gui--askyesno:15:5: error[SC1054]: You need a space after the '{'.
#   13|   set NS {}
#   14|   set use_ttk [package vsatisfies [package provide Tk] 8.5]
#   15|-> if {$use_ttk} {
#   16|   	set NS ttk
#   17|   }

Error: SHELLCHECK_WARNING (CWE-569): [#def34]
/usr/libexec/git-core/git-gui--askyesno:15:13: warning[SC1083]: This } is literal. Check expression (missing ;/\n?) or quote it.
#   13|   set NS {}
#   14|   set use_ttk [package vsatisfies [package provide Tk] 8.5]
#   15|-> if {$use_ttk} {
#   16|   	set NS ttk
#   17|   }

Error: SHELLCHECK_WARNING (CWE-569): [#def35]
/usr/libexec/git-core/git-gui--askyesno:15:15: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
#   13|   set NS {}
#   14|   set use_ttk [package vsatisfies [package provide Tk] 8.5]
#   15|-> if {$use_ttk} {
#   16|   	set NS ttk
#   17|   }

Error: SHELLCHECK_WARNING: [#def36]
/usr/libexec/git-core/git-gui--askyesno:20:1: error[SC1049]: Did you forget the 'then' for this 'if'?
#   18|   
#   19|   set title "Question?"
#   20|-> if {$argc < 1} {
#   21|   	puts stderr "Usage: $argv0 <question>"
#   22|   	exit 1

Error: SHELLCHECK_WARNING (CWE-398): [#def37]
/usr/libexec/git-core/git-gui--askyesno:20:1: error[SC1073]: Couldn't parse this if expression. Fix to allow more checks.
#   18|   
#   19|   set title "Question?"
#   20|-> if {$argc < 1} {
#   21|   	puts stderr "Usage: $argv0 <question>"
#   22|   	exit 1

Error: SHELLCHECK_WARNING: [#def38]
/usr/libexec/git-core/git-gui--askyesno:20:5: error[SC1054]: You need a space after the '{'.
#   18|   
#   19|   set title "Question?"
#   20|-> if {$argc < 1} {
#   21|   	puts stderr "Usage: $argv0 <question>"
#   22|   	exit 1

Error: SHELLCHECK_WARNING (CWE-569): [#def39]
/usr/libexec/git-core/git-gui--askyesno:20:14: warning[SC1083]: This } is literal. Check expression (missing ;/\n?) or quote it.
#   18|   
#   19|   set title "Question?"
#   20|-> if {$argc < 1} {
#   21|   	puts stderr "Usage: $argv0 <question>"
#   22|   	exit 1

Error: SHELLCHECK_WARNING (CWE-569): [#def40]
/usr/libexec/git-core/git-gui--askyesno:20:16: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
#   18|   
#   19|   set title "Question?"
#   20|-> if {$argc < 1} {
#   21|   	puts stderr "Usage: $argv0 <question>"
#   22|   	exit 1

Error: SHELLCHECK_WARNING: [#def41]
/usr/libexec/git-core/git-gui--askyesno:23:3: error[SC1050]: Expected 'then'.
#   21|   	puts stderr "Usage: $argv0 <question>"
#   22|   	exit 1
#   23|-> } else {
#   24|   	if {$argc > 2 && [lindex $argv 0] == "--title"} {
#   25|   		set title [lindex $argv 1]

Error: SHELLCHECK_WARNING (CWE-398): [#def42]
/usr/libexec/git-core/git-gui--askyesno:23:8: error[SC1072]: Unexpected . Fix any mentioned problems and try again.
#   21|   	puts stderr "Usage: $argv0 <question>"
#   22|   	exit 1
#   23|-> } else {
#   24|   	if {$argc > 2 && [lindex $argv 0] == "--title"} {
#   25|   		set title [lindex $argv 1]

Error: SHELLCHECK_WARNING (CWE-563): [#def43]
/usr/libexec/git-core/git-instaweb:7:1: warning[SC2034]: OPTIONS_KEEPDASHDASH appears unused. Verify use (or export if used externally).
#    5|   
#    6|   PERL='/usr/bin/perl'
#    7|-> OPTIONS_KEEPDASHDASH=
#    8|   OPTIONS_STUCKLONG=
#    9|   OPTIONS_SPEC="\

Error: SHELLCHECK_WARNING (CWE-563): [#def44]
/usr/libexec/git-core/git-instaweb:8:1: warning[SC2034]: OPTIONS_STUCKLONG appears unused. Verify use (or export if used externally).
#    6|   PERL='/usr/bin/perl'
#    7|   OPTIONS_KEEPDASHDASH=
#    8|-> OPTIONS_STUCKLONG=
#    9|   OPTIONS_SPEC="\
#   10|   git instaweb [options] (--start | --stop | --restart)

Error: SHELLCHECK_WARNING (CWE-563): [#def45]
/usr/libexec/git-core/git-instaweb:9:1: warning[SC2034]: OPTIONS_SPEC appears unused. Verify use (or export if used externally).
#    7|   OPTIONS_KEEPDASHDASH=
#    8|   OPTIONS_STUCKLONG=
#    9|-> OPTIONS_SPEC="\
#   10|   git instaweb [options] (--start | --stop | --restart)
#   11|   --

Error: SHELLCHECK_WARNING (CWE-563): [#def46]
/usr/libexec/git-core/git-instaweb:23:1: warning[SC2034]: SUBDIRECTORY_OK appears unused. Verify use (or export if used externally).
#   21|   "
#   22|   
#   23|-> SUBDIRECTORY_OK=Yes
#   24|   . git-sh-setup
#   25|   

Error: SHELLCHECK_WARNING (CWE-156): [#def47]
/usr/libexec/git-core/git-instaweb:146:34: warning[SC2046]: Quote this to prevent word splitting.
#  144|   
#  145|   stop_httpd () {
#  146|-> 	test -f "$fqgitdir/pid" && kill $(cat "$fqgitdir/pid")
#  147|   	rm -f "$fqgitdir/pid"
#  148|   }

Error: SHELLCHECK_WARNING (CWE-457): [#def48]
/usr/libexec/git-core/git-instaweb:562:27: warning[SC2154]: fd is referenced but not assigned.
#  560|   	};
#  561|   	# gitweb currently doesn't work with $SIG{CHLD} set to 'IGNORE',
#  562|-> 	# because it uses 'close $fd or die...' on piped filehandle $fh
#  563|   	# (which causes the parent process to wait for child to finish).
#  564|   	enable_if { \$SIG{'CHLD'} eq 'IGNORE' } sub {

Error: SHELLCHECK_WARNING (CWE-457): [#def49]
/usr/libexec/git-core/git-instaweb:562:62: warning[SC2154]: fh is referenced but not assigned.
#  560|   	};
#  561|   	# gitweb currently doesn't work with $SIG{CHLD} set to 'IGNORE',
#  562|-> 	# because it uses 'close $fd or die...' on piped filehandle $fh
#  563|   	# (which causes the parent process to wait for child to finish).
#  564|   	enable_if { \$SIG{'CHLD'} eq 'IGNORE' } sub {

Error: SHELLCHECK_WARNING (CWE-480): [#def50]
/usr/libexec/git-core/git-merge-octopus:14:7: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#   12|   
#   13|   # The first parameters up to -- are merge bases; the rest are heads.
#   14|-> bases= head= remotes= sep_seen=
#   15|   for arg
#   16|   do

Error: SHELLCHECK_WARNING (CWE-480): [#def51]
/usr/libexec/git-core/git-merge-octopus:14:13: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#   12|   
#   13|   # The first parameters up to -- are merge bases; the rest are heads.
#   14|-> bases= head= remotes= sep_seen=
#   15|   for arg
#   16|   do

Error: SHELLCHECK_WARNING (CWE-480): [#def52]
/usr/libexec/git-core/git-merge-octopus:14:22: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#   12|   
#   13|   # The first parameters up to -- are merge bases; the rest are heads.
#   14|-> bases= head= remotes= sep_seen=
#   15|   for arg
#   16|   do

Error: SHELLCHECK_WARNING (CWE-569): [#def53]
/usr/libexec/git-core/git-merge-octopus:66:21: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
#   64|   	esac
#   65|   
#   66|-> 	eval pretty_name=\${GITHEAD_$SHA1:-$SHA1}
#   67|   	if test "$SHA1" = "$pretty_name"
#   68|   	then

Error: SHELLCHECK_WARNING (CWE-569): [#def54]
/usr/libexec/git-core/git-merge-octopus:66:42: warning[SC1083]: This } is literal. Check expression (missing ;/\n?) or quote it.
#   64|   	esac
#   65|   
#   66|-> 	eval pretty_name=\${GITHEAD_$SHA1:-$SHA1}
#   67|   	if test "$SHA1" = "$pretty_name"
#   68|   	then

Error: SHELLCHECK_WARNING (CWE-457): [#def55]
/usr/libexec/git-core/git-merge-octopus:67:21: warning[SC2154]: pretty_name is referenced but not assigned.
#   65|   
#   66|   	eval pretty_name=\${GITHEAD_$SHA1:-$SHA1}
#   67|-> 	if test "$SHA1" = "$pretty_name"
#   68|   	then
#   69|   		SHA1_UP="$(echo "$SHA1" | tr a-z A-Z)"

Error: SHELLCHECK_WARNING (CWE-569): [#def56]
/usr/libexec/git-core/git-merge-octopus:70:22: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
#   68|   	then
#   69|   		SHA1_UP="$(echo "$SHA1" | tr a-z A-Z)"
#   70|-> 		eval pretty_name=\${GITHEAD_$SHA1_UP:-$pretty_name}
#   71|   	fi
#   72|   	common=$(git merge-base --all $SHA1 $MRC) ||

Error: SHELLCHECK_WARNING (CWE-569): [#def57]
/usr/libexec/git-core/git-merge-octopus:70:53: warning[SC1083]: This } is literal. Check expression (missing ;/\n?) or quote it.
#   68|   	then
#   69|   		SHA1_UP="$(echo "$SHA1" | tr a-z A-Z)"
#   70|-> 		eval pretty_name=\${GITHEAD_$SHA1_UP:-$pretty_name}
#   71|   	fi
#   72|   	common=$(git merge-base --all $SHA1 $MRC) ||

Error: SHELLCHECK_WARNING (CWE-563): [#def58]
/usr/libexec/git-core/git-merge-one-file:25:1: warning[SC2034]: SUBDIRECTORY_OK appears unused. Verify use (or export if used externally).
#   23|   Blob ids and modes should be empty for missing files."
#   24|   
#   25|-> SUBDIRECTORY_OK=Yes
#   26|   . git-sh-setup
#   27|   cd_to_toplevel

Error: SHELLCHECK_WARNING (CWE-156): [#def59]
/usr/libexec/git-core/git-merge-one-file:123:26: warning[SC2046]: Quote this to prevent word splitting.
#  121|   	'')
#  122|   		echo "Added $4 in both, but differently."
#  123|-> 		orig=$(git unpack-file $(git hash-object /dev/null))
#  124|   		;;
#  125|   	*)

Error: SHELLCHECK_WARNING (CWE-480): [#def60]
/usr/libexec/git-core/git-merge-resolve:19:7: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#   17|   
#   18|   # The first parameters up to -- are merge bases; the rest are heads.
#   19|-> bases= head= remotes= sep_seen=
#   20|   for arg
#   21|   do

Error: SHELLCHECK_WARNING (CWE-480): [#def61]
/usr/libexec/git-core/git-merge-resolve:19:13: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#   17|   
#   18|   # The first parameters up to -- are merge bases; the rest are heads.
#   19|-> bases= head= remotes= sep_seen=
#   20|   for arg
#   21|   do

Error: SHELLCHECK_WARNING (CWE-480): [#def62]
/usr/libexec/git-core/git-merge-resolve:19:22: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#   17|   
#   18|   # The first parameters up to -- are merge bases; the rest are heads.
#   19|-> bases= head= remotes= sep_seen=
#   20|   for arg
#   21|   do

Error: SHELLCHECK_WARNING (CWE-563): [#def63]
/usr/libexec/git-core/git-merge-resolve:53:4: warning[SC2034]: result_tree appears unused. Verify use (or export if used externally).
#   51|   git read-tree -u -m --aggressive $bases $head $remotes || exit 2
#   52|   echo "Trying simple merge."
#   53|-> if result_tree=$(git write-tree 2>/dev/null)
#   54|   then
#   55|   	exit 0

Error: SHELLCHECK_WARNING (CWE-563): [#def64]
/usr/libexec/git-core/git-mergetool:12:1: warning[SC2034]: USAGE appears unused. Verify use (or export if used externally).
#   10|   #
#   11|   
#   12|-> USAGE='[--tool=tool] [--tool-help] [-y|--no-prompt|--prompt] [-g|--gui|--no-gui] [-O<orderfile>] [file to merge] ...'
#   13|   SUBDIRECTORY_OK=Yes
#   14|   NONGIT_OK=Yes

Error: SHELLCHECK_WARNING (CWE-563): [#def65]
/usr/libexec/git-core/git-mergetool:13:1: warning[SC2034]: SUBDIRECTORY_OK appears unused. Verify use (or export if used externally).
#   11|   
#   12|   USAGE='[--tool=tool] [--tool-help] [-y|--no-prompt|--prompt] [-g|--gui|--no-gui] [-O<orderfile>] [file to merge] ...'
#   13|-> SUBDIRECTORY_OK=Yes
#   14|   NONGIT_OK=Yes
#   15|   OPTIONS_SPEC=

Error: SHELLCHECK_WARNING (CWE-563): [#def66]
/usr/libexec/git-core/git-mergetool:14:1: warning[SC2034]: NONGIT_OK appears unused. Verify use (or export if used externally).
#   12|   USAGE='[--tool=tool] [--tool-help] [-y|--no-prompt|--prompt] [-g|--gui|--no-gui] [-O<orderfile>] [file to merge] ...'
#   13|   SUBDIRECTORY_OK=Yes
#   14|-> NONGIT_OK=Yes
#   15|   OPTIONS_SPEC=
#   16|   TOOL_MODE=merge

Error: SHELLCHECK_WARNING (CWE-563): [#def67]
/usr/libexec/git-core/git-mergetool:15:1: warning[SC2034]: OPTIONS_SPEC appears unused. Verify use (or export if used externally).
#   13|   SUBDIRECTORY_OK=Yes
#   14|   NONGIT_OK=Yes
#   15|-> OPTIONS_SPEC=
#   16|   TOOL_MODE=merge
#   17|   . git-sh-setup

Error: SHELLCHECK_WARNING (CWE-569): [#def68]
/usr/libexec/git-core/git-mergetool:238:3: warning[SC2188]: This redirection doesn't have a command. Move to its command (or use 'true' as no-op).
#  236|   		mv -- "$(git rev-parse --show-cdup)$tmpfile" "$3"
#  237|   	else
#  238|-> 		>"$3"
#  239|   	fi
#  240|   }

Error: SHELLCHECK_WARNING (CWE-480): [#def69]
/usr/libexec/git-core/git-mergetool:293:12: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  291|   	BASE="$MERGETOOL_TMPDIR/${BASE}_BASE_$$$ext"
#  292|   
#  293|-> 	base_mode= local_mode= remote_mode=
#  294|   
#  295|   	# here, $IFS is just a LF

Error: SHELLCHECK_WARNING (CWE-480): [#def70]
/usr/libexec/git-core/git-mergetool:293:24: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  291|   	BASE="$MERGETOOL_TMPDIR/${BASE}_BASE_$$$ext"
#  292|   
#  293|-> 	base_mode= local_mode= remote_mode=
#  294|   
#  295|   	# here, $IFS is just a LF

Error: SHELLCHECK_WARNING (CWE-563): [#def71]
/usr/libexec/git-core/git-mergetool:462:4: warning[SC2034]: TOOL_MODE appears unused. Verify use (or export if used externally).
#  460|   		case "$1" in
#  461|   		--tool-help=*)
#  462|-> 			TOOL_MODE=${1#--tool-help=}
#  463|   			show_tool_help
#  464|   			;;

Error: SHELLCHECK_WARNING (CWE-563): [#def72]
/usr/libexec/git-core/git-mergetool:484:4: warning[SC2034]: GIT_MERGETOOL_GUI appears unused. Verify use (or export if used externally).
#  482|   			;;
#  483|   		-g|--gui)
#  484|-> 			GIT_MERGETOOL_GUI=true
#  485|   			;;
#  486|   		-y|--no-prompt)

Error: SHELLCHECK_WARNING (CWE-156): [#def73]
/usr/libexec/git-core/git-mergetool:540:10: warning[SC2046]: Quote this to prevent word splitting.
#  538|   	if test $# -eq 0 && test -e "$GIT_DIR/MERGE_RR"
#  539|   	then
#  540|-> 		set -- $(git rerere remaining)
#  541|   		if test $# -eq 0
#  542|   		then

Error: SHELLCHECK_WARNING (CWE-563): [#def74]
/usr/libexec/git-core/git-quiltimport:2:1: warning[SC2034]: OPTIONS_KEEPDASHDASH appears unused. Verify use (or export if used externally).
#    1|   #!/usr/bin/sh
#    2|-> OPTIONS_KEEPDASHDASH=
#    3|   OPTIONS_STUCKLONG=
#    4|   OPTIONS_SPEC="\

Error: SHELLCHECK_WARNING (CWE-563): [#def75]
/usr/libexec/git-core/git-quiltimport:3:1: warning[SC2034]: OPTIONS_STUCKLONG appears unused. Verify use (or export if used externally).
#    1|   #!/usr/bin/sh
#    2|   OPTIONS_KEEPDASHDASH=
#    3|-> OPTIONS_STUCKLONG=
#    4|   OPTIONS_SPEC="\
#    5|   git quiltimport [options]

Error: SHELLCHECK_WARNING (CWE-563): [#def76]
/usr/libexec/git-core/git-quiltimport:4:1: warning[SC2034]: OPTIONS_SPEC appears unused. Verify use (or export if used externally).
#    2|   OPTIONS_KEEPDASHDASH=
#    3|   OPTIONS_STUCKLONG=
#    4|-> OPTIONS_SPEC="\
#    5|   git quiltimport [options]
#    6|   --

Error: SHELLCHECK_WARNING (CWE-563): [#def77]
/usr/libexec/git-core/git-quiltimport:13:1: warning[SC2034]: SUBDIRECTORY_ON appears unused. Verify use (or export if used externally).
#   11|   keep-non-patch Pass -b to git mailinfo
#   12|   "
#   13|-> SUBDIRECTORY_ON=Yes
#   14|   . git-sh-setup
#   15|   

Error: SHELLCHECK_WARNING (CWE-563): [#def78]
/usr/libexec/git-core/git-request-pull:7:1: warning[SC2034]: SUBDIRECTORY_OK appears unused. Verify use (or export if used externally).
#    5|   # at the discretion of Linus Torvalds.
#    6|   
#    7|-> SUBDIRECTORY_OK='Yes'
#    8|   OPTIONS_KEEPDASHDASH=
#    9|   OPTIONS_STUCKLONG=

Error: SHELLCHECK_WARNING (CWE-563): [#def79]
/usr/libexec/git-core/git-request-pull:8:1: warning[SC2034]: OPTIONS_KEEPDASHDASH appears unused. Verify use (or export if used externally).
#    6|   
#    7|   SUBDIRECTORY_OK='Yes'
#    8|-> OPTIONS_KEEPDASHDASH=
#    9|   OPTIONS_STUCKLONG=
#   10|   OPTIONS_SPEC='git request-pull [options] start url [end]

Error: SHELLCHECK_WARNING (CWE-563): [#def80]
/usr/libexec/git-core/git-request-pull:9:1: warning[SC2034]: OPTIONS_STUCKLONG appears unused. Verify use (or export if used externally).
#    7|   SUBDIRECTORY_OK='Yes'
#    8|   OPTIONS_KEEPDASHDASH=
#    9|-> OPTIONS_STUCKLONG=
#   10|   OPTIONS_SPEC='git request-pull [options] start url [end]
#   11|   --

Error: SHELLCHECK_WARNING (CWE-563): [#def81]
/usr/libexec/git-core/git-request-pull:10:1: warning[SC2034]: OPTIONS_SPEC appears unused. Verify use (or export if used externally).
#    8|   OPTIONS_KEEPDASHDASH=
#    9|   OPTIONS_STUCKLONG=
#   10|-> OPTIONS_SPEC='git request-pull [options] start url [end]
#   11|   --
#   12|   p    show patch text as well

Error: SHELLCHECK_WARNING (CWE-457): [#def82]
/usr/libexec/git-core/git-request-pull:72:29: warning[SC2154]: headref is referenced but not assigned (did you mean 'headrev'?).
#   70|   # Was it a branch with a description?
#   71|   branch_name=${head#refs/heads/}
#   72|-> if test "z$branch_name" = "z$headref" ||
#   73|   	! git config "branch.$branch_name.description" >/dev/null
#   74|   then

Error: SHELLCHECK_WARNING (CWE-456): [#def83]
/usr/libexec/git-core/git-request-pull:121:5: warning[SC2121]: To assign a variable, use just 'var=value', no 'set ..'.
#  119|   # Find a ref with the same name as $remote that exists at the remote
#  120|   # and points to the same commit as the local object.
#  121|-> set fnord $(git ls-remote "$url" | find_matching_ref)
#  122|   remote_sha1=$2
#  123|   ref=$3

Error: SHELLCHECK_WARNING (CWE-156): [#def84]
/usr/libexec/git-core/git-request-pull:121:11: warning[SC2046]: Quote this to prevent word splitting.
#  119|   # Find a ref with the same name as $remote that exists at the remote
#  120|   # and points to the same commit as the local object.
#  121|-> set fnord $(git ls-remote "$url" | find_matching_ref)
#  122|   remote_sha1=$2
#  123|   ref=$3

Error: SHELLCHECK_WARNING (CWE-156): [#def85]
/usr/libexec/git-core/git-request-pull:159:9: warning[SC2046]: Quote this to prevent word splitting.
#  157|   ----------------------------------------------------------------' $headrev &&
#  158|   
#  159|-> if test $(git cat-file -t "$head") = tag
#  160|   then
#  161|   	git cat-file tag "$head" |

Error: SHELLCHECK_WARNING (CWE-563): [#def86]
/usr/libexec/git-core/git-submodule:8:1: warning[SC2034]: USAGE appears unused. Verify use (or export if used externally).
#    6|   
#    7|   dashless=$(basename "$0" | sed -e 's/-/ /')
#    8|-> USAGE="[--quiet] [--cached]
#    9|      or: $dashless [--quiet] add [-b <branch>] [-f|--force] [--name <name>] [--reference <repository>] [--] <repository> [<path>]
#   10|      or: $dashless [--quiet] status [--cached] [--recursive] [--] [<path>...]

Error: SHELLCHECK_WARNING (CWE-563): [#def87]
/usr/libexec/git-core/git-submodule:20:1: warning[SC2034]: OPTIONS_SPEC appears unused. Verify use (or export if used externally).
#   18|      or: $dashless [--quiet] sync [--recursive] [--] [<path>...]
#   19|      or: $dashless [--quiet] absorbgitdirs [--] [<path>...]"
#   20|-> OPTIONS_SPEC=
#   21|   SUBDIRECTORY_OK=Yes
#   22|   . git-sh-setup

Error: SHELLCHECK_WARNING (CWE-563): [#def88]
/usr/libexec/git-core/git-submodule:21:1: warning[SC2034]: SUBDIRECTORY_OK appears unused. Verify use (or export if used externally).
#   19|      or: $dashless [--quiet] absorbgitdirs [--] [<path>...]"
#   20|   OPTIONS_SPEC=
#   21|-> SUBDIRECTORY_OK=Yes
#   22|   . git-sh-setup
#   23|   require_work_tree

Error: SHELLCHECK_WARNING (CWE-685): [#def89]
/usr/libexec/git-core/git-subtree:282:1: warning[SC2120]: cache_setup references arguments, but none are ever passed.
#  280|   
#  281|   # Usage: cache_setup
#  282|-> cache_setup () {
#  283|   	assert test $# = 0
#  284|   	cachedir="$GIT_DIR/subtree-cache/$$"

Error: SHELLCHECK_WARNING: [#def90]
/usr/libexec/git-core/git-subtree:320:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
#  318|   check_parents () {
#  319|   	missed=$(cache_miss "$@") || exit $?
#  320|-> 	local indent=$(($indent + 1))
#  321|   	for miss in $missed
#  322|   	do

Error: SHELLCHECK_WARNING: [#def91]
/usr/libexec/git-core/git-subtree:416:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
#  414|   	fi
#  415|   	debug "Looking for latest squash (dir=$dir, repository=$repository)..."
#  416|-> 	local indent=$(($indent + 1))
#  417|   
#  418|   	sq=

Error: SHELLCHECK_WARNING: [#def92]
/usr/libexec/git-core/git-subtree:464:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
#  462|   	assert test $# -le 3
#  463|   	debug "Looking for prior splits..."
#  464|-> 	local indent=$(($indent + 1))
#  465|   
#  466|   	dir="$1"

Error: SHELLCHECK_WARNING: [#def93]
/usr/libexec/git-core/git-subtree:475:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
#  473|   	main=
#  474|   	sub=
#  475|-> 	local grep_format="^git-subtree-dir: $dir/*\$"
#  476|   	if test -n "$arg_split_ignore_joins"
#  477|   	then

Error: SHELLCHECK_WARNING (CWE-563): [#def94]
/usr/libexec/git-core/git-subtree:642:13: warning[SC2034]: mode appears unused. Verify use (or export if used externally).
#  640|   	dir="$2"
#  641|   	git ls-tree "$commit" -- "$dir" |
#  642|-> 	while read mode type tree name
#  643|   	do
#  644|   		assert test "$name" = "$dir"

Error: SHELLCHECK_WARNING (CWE-685): [#def95]
/usr/libexec/git-core/git-subtree:772:1: warning[SC2120]: ensure_clean references arguments, but none are ever passed.
#  770|   
#  771|   # Usage: ensure_clean
#  772|-> ensure_clean () {
#  773|   	assert test $# = 0
#  774|   	if ! git diff-index HEAD --exit-code --quiet 2>&1

Error: SHELLCHECK_WARNING: [#def96]
/usr/libexec/git-core/git-subtree:794:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
#  792|   process_split_commit () {
#  793|   	assert test $# = 2
#  794|-> 	local rev="$1"
#  795|   	local parents="$2"
#  796|   

Error: SHELLCHECK_WARNING: [#def97]
/usr/libexec/git-core/git-subtree:795:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
#  793|   	assert test $# = 2
#  794|   	local rev="$1"
#  795|-> 	local parents="$2"
#  796|   
#  797|   	if test $indent -eq 0

Error: SHELLCHECK_WARNING: [#def98]
/usr/libexec/git-core/git-subtree:810:2: warning[SC3043]: In POSIX sh, 'local' is undefined.
#  808|   
#  809|   	debug "Processing commit: $rev"
#  810|-> 	local indent=$(($indent + 1))
#  811|   	exists=$(cache_get "$rev") || exit $?
#  812|   	if test -n "$exists"

Error: SHELLCHECK_WARNING (CWE-563): [#def99]
/usr/libexec/git-core/git-subtree:969:2: warning[SC2034]: unrevs appears unused. Verify use (or export if used externally).
#  967|   	fi
#  968|   
#  969|-> 	unrevs="$(find_existing_splits "$dir" "$rev" "$repository")" || exit $?
#  970|   
#  971|   	# We can't restrict rev-list to only $dir here, because some of our

Error: SHELLCHECK_WARNING (CWE-563): [#def100]
/usr/libexec/git-core/git-web--browse:19:1: warning[SC2034]: USAGE appears unused. Verify use (or export if used externally).
#   17|   #
#   18|   
#   19|-> USAGE='[--browser=browser|--tool=browser] [--config=conf.var] url/file ...'
#   20|   
#   21|   # This must be capable of running outside of git directory, so

Error: SHELLCHECK_WARNING (CWE-563): [#def101]
/usr/libexec/git-core/git-web--browse:23:1: warning[SC2034]: NONGIT_OK appears unused. Verify use (or export if used externally).
#   21|   # This must be capable of running outside of git directory, so
#   22|   # the vanilla git-sh-setup should not be used.
#   23|-> NONGIT_OK=Yes
#   24|   . git-sh-setup
#   25|   

Error: SHELLCHECK_WARNING (CWE-140): [#def102]
/usr/share/doc/git/contrib/completion/git-completion.bash:388:13: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  386|   	local IFS=$'\n'
#  387|   
#  388|-> 	COMPREPLY=($1)
#  389|   }
#  390|   

Error: SHELLCHECK_WARNING (CWE-140): [#def103]
/usr/share/doc/git/contrib/completion/git-completion.bash:401:14: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  399|   	local IFS=$'\n'
#  400|   
#  401|-> 	COMPREPLY+=($1)
#  402|   }
#  403|   

Error: SHELLCHECK_WARNING (CWE-569): [#def104]
/usr/share/doc/git/contrib/completion/git-completion.bash:476:10: error[SC2296]: Parameter expansions can't start with (. Double check syntax.
#  474|   # the completion script.
#  475|   if [[ -n ${ZSH_VERSION-} ]]; then
#  476|-> 	unset ${(M)${(k)parameters[@]}:#__gitcomp_builtin_*} 2>/dev/null
#  477|   else
#  478|   	unset $(compgen -v __gitcomp_builtin_)

Error: SHELLCHECK_WARNING (CWE-569): [#def105]
/usr/share/doc/git/contrib/completion/git-completion.bash:476:15: error[SC2296]: Parameter expansions can't start with (. Double check syntax.
#  474|   # the completion script.
#  475|   if [[ -n ${ZSH_VERSION-} ]]; then
#  476|-> 	unset ${(M)${(k)parameters[@]}:#__gitcomp_builtin_*} 2>/dev/null
#  477|   else
#  478|   	unset $(compgen -v __gitcomp_builtin_)

Error: SHELLCHECK_WARNING (CWE-156): [#def106]
/usr/share/doc/git/contrib/completion/git-completion.bash:478:8: warning[SC2046]: Quote this to prevent word splitting.
#  476|   	unset ${(M)${(k)parameters[@]}:#__gitcomp_builtin_*} 2>/dev/null
#  477|   else
#  478|-> 	unset $(compgen -v __gitcomp_builtin_)
#  479|   fi
#  480|   

Error: SHELLCHECK_WARNING (CWE-140): [#def107]
/usr/share/doc/git/contrib/completion/git-completion.bash:573:13: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
#  571|   	local IFS=$'\n'
#  572|   
#  573|-> 	COMPREPLY=($1)
#  574|   
#  575|   	# use a hack to enable file mode in bash < 4

Error: SHELLCHECK_WARNING: [#def108]
/usr/share/doc/git/contrib/completion/git-completion.bash:929:9: warning[SC2194]: This word is constant. Did you forget the $ on a variable?
#  927|   	*)
#  928|   		if [ "$list_refs_from" = remote ]; then
#  929|-> 			case "HEAD" in
#  930|   			$match*|$umatch*)	echo "${pfx}HEAD$sfx" ;;
#  931|   			esac

Error: SHELLCHECK_WARNING (CWE-571): [#def109]
/usr/share/doc/git/contrib/completion/git-completion.bash:932:10: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  930|   			$match*|$umatch*)	echo "${pfx}HEAD$sfx" ;;
#  931|   			esac
#  932|-> 			local strip="$(__git_count_path_components "refs/remotes/$remote")"
#  933|   			__git for-each-ref --format="$fer_pfx%(refname:strip=$strip)$sfx" \
#  934|   				${GIT_COMPLETION_IGNORE_CASE+--ignore-case} \

Error: SHELLCHECK_WARNING: [#def110]
/usr/share/doc/git/contrib/completion/git-completion.bash:939:9: warning[SC2194]: This word is constant. Did you forget the $ on a variable?
#  937|   		else
#  938|   			local query_symref
#  939|-> 			case "HEAD" in
#  940|   			$match*|$umatch*)	query_symref="HEAD" ;;
#  941|   			esac

Error: SHELLCHECK_WARNING (CWE-480): [#def111]
/usr/share/doc/git/contrib/completion/git-completion.bash:974:15: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  972|   __git_complete_refs ()
#  973|   {
#  974|-> 	local remote= dwim= pfx= cur_="$cur" sfx=" " mode="refs"
#  975|   
#  976|   	while test $# != 0; do

Error: SHELLCHECK_WARNING (CWE-480): [#def112]
/usr/share/doc/git/contrib/completion/git-completion.bash:974:21: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  972|   __git_complete_refs ()
#  973|   {
#  974|-> 	local remote= dwim= pfx= cur_="$cur" sfx=" " mode="refs"
#  975|   
#  976|   	while test $# != 0; do

Error: SHELLCHECK_WARNING (CWE-480): [#def113]
/usr/share/doc/git/contrib/completion/git-completion.bash:974:26: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
#  972|   __git_complete_refs ()
#  973|   {
#  974|-> 	local remote= dwim= pfx= cur_="$cur" sfx=" " mode="refs"
#  975|   
#  976|   	while test $# != 0; do

Error: SHELLCHECK_WARNING (CWE-563): [#def114]
/usr/share/doc/git/contrib/completion/git-completion.bash:1042:16: warning[SC2034]: hash appears unused. Verify use (or export if used externally).
# 1040|   	local i hash
# 1041|   	__git ls-remote "$1" 'refs/heads/*' | \
# 1042|-> 	while read -r hash i; do
# 1043|   		echo "$i:refs/remotes/$1/${i#refs/heads/}"
# 1044|   	done

Error: SHELLCHECK_WARNING (CWE-480): [#def115]
/usr/share/doc/git/contrib/completion/git-completion.bash:1282:25: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
# 1280|   __git_aliased_command ()
# 1281|   {
# 1282|-> 	local cur=$1 last list= word cmdline
# 1283|   
# 1284|   	while [[ -n "$cur" ]]; do

Error: SHELLCHECK_WARNING (CWE-569): [#def116]
/usr/share/doc/git/contrib/completion/git-completion.bash:1306:4: warning[SC1083]: This { is literal. Check expression (missing ;/\n?) or quote it.
# 1304|   			git)	: git itself ;;
# 1305|   			\(\))   : skip parens of shell function definition ;;
# 1306|-> 			{)	: skip start of shell helper function ;;
# 1307|   			:)	: skip null command ;;
# 1308|   			\'*)	: skip opening quote after sh -c ;;

Error: SHELLCHECK_WARNING (CWE-480): [#def117]
/usr/share/doc/git/contrib/completion/git-completion.bash:1406:15: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
# 1404|   {
# 1405|   	local c short_opt long_opt val
# 1406|-> 	local result= values config_key word
# 1407|   
# 1408|   	short_opt="$1"

Error: SHELLCHECK_WARNING (CWE-571): [#def118]
/usr/share/doc/git/contrib/completion/git-completion.bash:1595:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 1593|   	local all_subcommands="$completable_subcommands view"
# 1594|   
# 1595|-> 	local subcommand="$(__git_find_on_cmdline "$all_subcommands")"
# 1596|   
# 1597|   	if [ -z "$subcommand" ]; then

Error: SHELLCHECK_WARNING (CWE-477): [#def119]
/usr/share/doc/git/contrib/completion/git-completion.bash:1660:30: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
# 1658|   		;;
# 1659|   	*)
# 1660|-> 		if [ $only_local_ref = "y" -a $has_r = "n" ]; then
# 1661|   			__gitcomp_direct "$(__git_heads "" "$cur" " ")"
# 1662|   		else

Error: SHELLCHECK_WARNING (CWE-571): [#def120]
/usr/share/doc/git/contrib/completion/git-completion.bash:1740:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 1738|   	__git_has_doubledash && return
# 1739|   
# 1740|-> 	local dwim_opt="$(__git_checkout_default_dwim_mode)"
# 1741|   
# 1742|   	case "$prev" in

Error: SHELLCHECK_WARNING (CWE-156): [#def121]
/usr/share/doc/git/contrib/completion/git-completion.bash:2397:7: warning[SC2046]: Quote this to prevent word splitting.
# 2395|   	esac
# 2396|   
# 2397|-> 	if [ $(__git_count_arguments "mv") -gt 0 ]; then
# 2398|   		# We need to show both cached and untracked files (including
# 2399|   		# empty directories) since this may not be the last argument.

Error: SHELLCHECK_WARNING (CWE-571): [#def122]
/usr/share/doc/git/contrib/completion/git-completion.bash:2409:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 2407|   {
# 2408|   	local subcommands='add append copy edit get-ref list merge prune remove show'
# 2409|-> 	local subcommand="$(__git_find_on_cmdline "$subcommands")"
# 2410|   
# 2411|   	case "$subcommand,$cur" in

Error: SHELLCHECK_WARNING (CWE-571): [#def123]
/usr/share/doc/git/contrib/completion/git-completion.bash:2692:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 2690|   _git_switch ()
# 2691|   {
# 2692|-> 	local dwim_opt="$(__git_checkout_default_dwim_mode)"
# 2693|   
# 2694|   	case "$prev" in

Error: SHELLCHECK_WARNING (CWE-480): [#def124]
/usr/share/doc/git/contrib/completion/git-completion.bash:2743:34: warning[SC1007]: Remove space after = if trying to assign a value (for empty string, use var='' ... ).
# 2741|   __git_config_get_set_variables ()
# 2742|   {
# 2743|-> 	local prevword word config_file= c=$cword
# 2744|   	while [ $c -gt "$__git_cmd_idx" ]; do
# 2745|   		word="${words[c]}"

Error: SHELLCHECK_WARNING (CWE-571): [#def125]
/usr/share/doc/git/contrib/completion/git-completion.bash:3080:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 3078|   		get-url set-url show prune update
# 3079|   		"
# 3080|-> 	local subcommand="$(__git_find_on_cmdline "$subcommands")"
# 3081|   	if [ -z "$subcommand" ]; then
# 3082|   		case "$cur" in

Error: SHELLCHECK_WARNING (CWE-571): [#def126]
/usr/share/doc/git/contrib/completion/git-completion.bash:3147:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 3145|   {
# 3146|   	local subcommands="clear forget diff remaining status gc"
# 3147|-> 	local subcommand="$(__git_find_on_cmdline "$subcommands")"
# 3148|   	if test -z "$subcommand"
# 3149|   	then

Error: SHELLCHECK_WARNING (CWE-670): [#def127]
/usr/share/doc/git/contrib/completion/git-completion.bash:3308:11: warning[SC2128]: Expanding an array without an index only gives the first element.
# 3306|   	# that's fine too.
# 3307|   	[[ "$cur" =~ .*/ ]]
# 3308|-> 	_tmp_dir=$BASH_REMATCH
# 3309|   
# 3310|   	# Find possible directory completions, adding trailing '/' characters,

Error: SHELLCHECK_WARNING (CWE-140): [#def128]
/usr/share/doc/git/contrib/completion/git-completion.bash:3404:14: warning[SC2206]: Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.
# 3402|   		# We found some completions; return them
# 3403|   		local IFS=$'\n'
# 3404|-> 		COMPREPLY=($completions)
# 3405|   	else
# 3406|   		# Do NOT fall back to bash-style all-local-files-and-dirs

Error: SHELLCHECK_WARNING (CWE-571): [#def129]
/usr/share/doc/git/contrib/completion/git-completion.bash:3438:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 3436|   {
# 3437|   	local subcommands="list init set disable add reapply"
# 3438|-> 	local subcommand="$(__git_find_on_cmdline "$subcommands")"
# 3439|   	local using_cone=true
# 3440|   	if [ -z "$subcommand" ]; then

Error: SHELLCHECK_WARNING (CWE-571): [#def130]
/usr/share/doc/git/contrib/completion/git-completion.bash:3469:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 3467|   {
# 3468|   	local subcommands='push list show apply clear drop pop create branch import export'
# 3469|-> 	local subcommand="$(__git_find_on_cmdline "$subcommands save")"
# 3470|   
# 3471|   	if [ -z "$subcommand" ]; then

Error: SHELLCHECK_WARNING (CWE-571): [#def131]
/usr/share/doc/git/contrib/completion/git-completion.bash:3523:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 3521|   
# 3522|   	local subcommands="add status init deinit update set-branch set-url summary foreach sync absorbgitdirs"
# 3523|-> 	local subcommand="$(__git_find_on_cmdline "$subcommands")"
# 3524|   	if [ -z "$subcommand" ]; then
# 3525|   		case "$cur" in

Error: SHELLCHECK_WARNING (CWE-571): [#def132]
/usr/share/doc/git/contrib/completion/git-completion.bash:3575:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 3573|   		migrate mkdirs reset gc
# 3574|   		"
# 3575|-> 	local subcommand="$(__git_find_on_cmdline "$subcommands")"
# 3576|   	if [ -z "$subcommand" ]; then
# 3577|   		__gitcomp "$subcommands"

Error: SHELLCHECK_WARNING (CWE-571): [#def133]
/usr/share/doc/git/contrib/completion/git-completion.bash:3946:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
# 3944|   	__git_complete_command "$command" && return
# 3945|   
# 3946|-> 	local expansion=$(__git_aliased_command "$command")
# 3947|   	if [ -n "$expansion" ]; then
# 3948|   		words[1]=$expansion

Error: SHELLCHECK_WARNING (CWE-758): [#def134]
/usr/share/doc/git/contrib/completion/git-prompt.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> # bash/zsh git prompt support
#    2|   #
#    3|   # Copyright (C) 2006,2007 Shawn O. Pearce <spearce@spearce.org>

Error: SHELLCHECK_WARNING (CWE-563): [#def135]
/usr/share/doc/git/contrib/completion/git-prompt.sh:159:48: warning[SC2034]: n appears unused. Verify use (or export if used externally).
#  157|   {
#  158|   	local key value
#  159|-> 	local svn_remotes="" svn_url_pattern="" count n
#  160|   	local upstream_type=git legacy="" verbose="" name=""
#  161|   	local LF="$__git_LF"

Error: SHELLCHECK_WARNING (CWE-457): [#def136]
/usr/share/doc/git/contrib/completion/git-prompt.sh:161:12: warning[SC2154]: __git_LF is referenced but not assigned.
#  159|   	local svn_remotes="" svn_url_pattern="" count n
#  160|   	local upstream_type=git legacy="" verbose="" name=""
#  161|-> 	local LF="$__git_LF"
#  162|   
#  163|   	# get some config options from git-config

Error: SHELLCHECK_WARNING (CWE-571): [#def137]
/usr/share/doc/git/contrib/completion/git-prompt.sh:164:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  162|   
#  163|   	# get some config options from git-config
#  164|-> 	local output="$(git config -z --get-regexp '^(svn-remote\..*\.url|bash\.showupstream)$' 2>/dev/null | tr '\0\n' '\n ')"
#  165|   	while read -r key value; do
#  166|   		case "$key" in

Error: SHELLCHECK_WARNING (CWE-571): [#def138]
/usr/share/doc/git/contrib/completion/git-prompt.sh:207:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  205|   		# get upstream from "git-svn-id: UPSTRM@N HASH" in a commit message
#  206|   		# (git-svn uses essentially the same procedure internally)
#  207|-> 		local svn_upstream="$(
#  208|   			git log --first-parent -1 \
#  209|   				--grep="^git-svn-id: \(${svn_url_pattern#??}\)" 2>/dev/null

Error: SHELLCHECK_WARNING (CWE-457): [#def139]
/usr/share/doc/git/contrib/completion/git-prompt.sh:317:47: warning[SC2154]: __git_ESC is referenced but not assigned.
#  315|   		# which bash/readline identify while calculating the prompt
#  316|   		# on-screen width - to exclude 0-screen-width esc sequences.
#  317|-> 		local c_pre="${GIT_PS1_COLOR_PRE-$__git_SOH}${__git_ESC}["
#  318|   		local c_post="m${GIT_PS1_COLOR_POST-$__git_STX}"
#  319|   

Error: SHELLCHECK_WARNING (CWE-457): [#def140]
/usr/share/doc/git/contrib/completion/git-prompt.sh:359:22: warning[SC2154]: __git_CRLF is referenced but not assigned.
#  357|   __git_eread ()
#  358|   {
#  359|-> 	test -r "$1" && IFS=$__git_CRLF read -r "$2" <"$1"
#  360|   }
#  361|   

Error: SHELLCHECK_WARNING (CWE-569): [#def141]
/usr/share/doc/git/contrib/completion/git-prompt.sh:575:6: warning[SC2221]: This pattern always overrides a later one on line 575.
#  573|   				(describe)
#  574|   					git describe HEAD ;;
#  575|-> 				(* | default)
#  576|   					git describe --tags --exact-match HEAD ;;
#  577|   				esac 2>/dev/null)" ||

Error: SHELLCHECK_WARNING (CWE-569): [#def142]
/usr/share/doc/git/contrib/completion/git-prompt.sh:575:10: warning[SC2222]: This pattern never matches because of a previous pattern on line 575.
#  573|   				(describe)
#  574|   					git describe HEAD ;;
#  575|-> 				(* | default)
#  576|   					git describe --tags --exact-match HEAD ;;
#  577|   				esac 2>/dev/null)" ||

Error: SHELLCHECK_WARNING (CWE-477): [#def143]
/usr/share/doc/git/contrib/fast-import/git-import.sh:7:14: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#    5|   # but is meant to be a simple fast-import example.
#    6|   
#    7|-> if [ -z "$1" -o -z "$2" ]; then
#    8|   	echo "usage: git-import branch import-message"
#    9|   	exit 1

Error: SHELLCHECK_WARNING (CWE-477): [#def144]
/usr/share/doc/git/contrib/fast-import/git-import.sh:15:21: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   13|   EMAIL="$(git config user.email)"
#   14|   
#   15|-> if [ -z "$USERNAME" -o -z "$EMAIL" ]; then
#   16|   	echo "You need to set user name and email"
#   17|   	exit 1

Error: SHELLCHECK_WARNING (CWE-156): [#def145]
/usr/share/doc/git/contrib/fast-import/git-import.sh:33:13: warning[SC2046]: Quote this to prevent word splitting.
#   31|   	find * -type f|while read i;do
#   32|   		echo "M 100644 inline $i"
#   33|-> 		echo data $(stat -c '%s' "$i")
#   34|   		cat "$i"
#   35|   		echo

Error: SHELLCHECK_WARNING (CWE-563): [#def146]
/usr/share/doc/git/contrib/rerere-train.sh:14:1: warning[SC2034]: SUBDIRECTORY_OK appears unused. Verify use (or export if used externally).
#   12|   )
#   13|   
#   14|-> SUBDIRECTORY_OK=Yes
#   15|   
#   16|   overwrite=0

Error: SHELLCHECK_WARNING (CWE-758): [#def147]
/usr/share/git-core/contrib/completion/git-prompt.sh:1:1: error[SC2148]: Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.
#    1|-> # bash/zsh git prompt support
#    2|   #
#    3|   # Copyright (C) 2006,2007 Shawn O. Pearce <spearce@spearce.org>

Error: SHELLCHECK_WARNING (CWE-563): [#def148]
/usr/share/git-core/contrib/completion/git-prompt.sh:159:48: warning[SC2034]: n appears unused. Verify use (or export if used externally).
#  157|   {
#  158|   	local key value
#  159|-> 	local svn_remotes="" svn_url_pattern="" count n
#  160|   	local upstream_type=git legacy="" verbose="" name=""
#  161|   	local LF="$__git_LF"

Error: SHELLCHECK_WARNING (CWE-457): [#def149]
/usr/share/git-core/contrib/completion/git-prompt.sh:161:12: warning[SC2154]: __git_LF is referenced but not assigned.
#  159|   	local svn_remotes="" svn_url_pattern="" count n
#  160|   	local upstream_type=git legacy="" verbose="" name=""
#  161|-> 	local LF="$__git_LF"
#  162|   
#  163|   	# get some config options from git-config

Error: SHELLCHECK_WARNING (CWE-571): [#def150]
/usr/share/git-core/contrib/completion/git-prompt.sh:164:8: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  162|   
#  163|   	# get some config options from git-config
#  164|-> 	local output="$(git config -z --get-regexp '^(svn-remote\..*\.url|bash\.showupstream)$' 2>/dev/null | tr '\0\n' '\n ')"
#  165|   	while read -r key value; do
#  166|   		case "$key" in

Error: SHELLCHECK_WARNING (CWE-571): [#def151]
/usr/share/git-core/contrib/completion/git-prompt.sh:207:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#  205|   		# get upstream from "git-svn-id: UPSTRM@N HASH" in a commit message
#  206|   		# (git-svn uses essentially the same procedure internally)
#  207|-> 		local svn_upstream="$(
#  208|   			git log --first-parent -1 \
#  209|   				--grep="^git-svn-id: \(${svn_url_pattern#??}\)" 2>/dev/null

Error: SHELLCHECK_WARNING (CWE-457): [#def152]
/usr/share/git-core/contrib/completion/git-prompt.sh:317:47: warning[SC2154]: __git_ESC is referenced but not assigned.
#  315|   		# which bash/readline identify while calculating the prompt
#  316|   		# on-screen width - to exclude 0-screen-width esc sequences.
#  317|-> 		local c_pre="${GIT_PS1_COLOR_PRE-$__git_SOH}${__git_ESC}["
#  318|   		local c_post="m${GIT_PS1_COLOR_POST-$__git_STX}"
#  319|   

Error: SHELLCHECK_WARNING (CWE-457): [#def153]
/usr/share/git-core/contrib/completion/git-prompt.sh:359:22: warning[SC2154]: __git_CRLF is referenced but not assigned.
#  357|   __git_eread ()
#  358|   {
#  359|-> 	test -r "$1" && IFS=$__git_CRLF read -r "$2" <"$1"
#  360|   }
#  361|   

Error: SHELLCHECK_WARNING (CWE-569): [#def154]
/usr/share/git-core/contrib/completion/git-prompt.sh:575:6: warning[SC2221]: This pattern always overrides a later one on line 575.
#  573|   				(describe)
#  574|   					git describe HEAD ;;
#  575|-> 				(* | default)
#  576|   					git describe --tags --exact-match HEAD ;;
#  577|   				esac 2>/dev/null)" ||

Error: SHELLCHECK_WARNING (CWE-569): [#def155]
/usr/share/git-core/contrib/completion/git-prompt.sh:575:10: warning[SC2222]: This pattern never matches because of a previous pattern on line 575.
#  573|   				(describe)
#  574|   					git describe HEAD ;;
#  575|-> 				(* | default)
#  576|   					git describe --tags --exact-match HEAD ;;
#  577|   				esac 2>/dev/null)" ||

Error: SHELLCHECK_WARNING (CWE-156): [#def156]
/usr/share/git-core/templates/hooks/pre-commit.sample:31:7: warning[SC2046]: Quote this to prevent word splitting.
#   29|   	# even required, for portability to Solaris 10's /usr/bin/tr), since
#   30|   	# the square bracket bytes happen to fall in the designated range.
#   31|-> 	test $(git diff-index --cached --name-only --diff-filter=A -z $against |
#   32|   	  LC_ALL=C tr -d '[ -~]\0' | wc -c) != 0
#   33|   then

Error: SHELLCHECK_WARNING (CWE-563): [#def157]
/usr/share/git-core/templates/hooks/pre-push.sample:22:1: warning[SC2034]: remote appears unused. Verify use (or export if used externally).
#   20|   # with "WIP" (work in progress).
#   21|   
#   22|-> remote="$1"
#   23|   url="$2"
#   24|   

Error: SHELLCHECK_WARNING (CWE-563): [#def158]
/usr/share/git-core/templates/hooks/pre-push.sample:23:1: warning[SC2034]: url appears unused. Verify use (or export if used externally).
#   21|   
#   22|   remote="$1"
#   23|-> url="$2"
#   24|   
#   25|   zero=$(git hash-object --stdin </dev/null | tr '[0-9a-f]' '0')

Error: SHELLCHECK_WARNING (CWE-563): [#def159]
/usr/share/git-core/templates/hooks/pre-push.sample:27:32: warning[SC2034]: remote_ref appears unused. Verify use (or export if used externally).
#   25|   zero=$(git hash-object --stdin </dev/null | tr '[0-9a-f]' '0')
#   26|   
#   27|-> while read local_ref local_oid remote_ref remote_oid
#   28|   do
#   29|   	if test "$local_oid" = "$zero"

Error: SHELLCHECK_WARNING (CWE-563): [#def160]
/usr/share/git-core/templates/hooks/pre-rebase.sample:19:1: warning[SC2034]: basebranch appears unused. Verify use (or export if used externally).
#   17|   
#   18|   publish=next
#   19|-> basebranch="$1"
#   20|   if test "$#" = 2
#   21|   then

Error: SHELLCHECK_WARNING (CWE-569): [#def161]
/usr/share/git-core/templates/hooks/pre-rebase.sample:91:1: warning[SC2188]: This redirection doesn't have a command. Move to its command (or use 'true' as no-op).
#   89|   fi
#   90|   
#   91|-> <<\DOC_END
#   92|   
#   93|   This sample hook safeguards topic branches that have been

Error: SHELLCHECK_WARNING (CWE-457): [#def162]
/usr/share/git-core/templates/hooks/pre-receive.sample:15:9: warning[SC2154]: value is referenced but not assigned.
#   13|   	do
#   14|   		eval "value=\$GIT_PUSH_OPTION_$i"
#   15|-> 		case "$value" in
#   16|   		echoback=*)
#   17|   			echo "echo from the pre-receive-hook: ${value#*=}" >&2

Error: SHELLCHECK_WARNING (CWE-563): [#def163]
/usr/share/git-core/templates/hooks/prepare-commit-msg.sample:24:1: warning[SC2034]: COMMIT_SOURCE appears unused. Verify use (or export if used externally).
#   22|   
#   23|   COMMIT_MSG_FILE=$1
#   24|-> COMMIT_SOURCE=$2
#   25|   SHA1=$3
#   26|   

Error: SHELLCHECK_WARNING (CWE-563): [#def164]
/usr/share/git-core/templates/hooks/prepare-commit-msg.sample:25:1: warning[SC2034]: SHA1 appears unused. Verify use (or export if used externally).
#   23|   COMMIT_MSG_FILE=$1
#   24|   COMMIT_SOURCE=$2
#   25|-> SHA1=$3
#   26|   
#   27|   /usr/bin/perl -i.bak -ne 'print unless(m/^. Please enter the commit message/..m/^#$/)' "$COMMIT_MSG_FILE"

Error: SHELLCHECK_WARNING (CWE-477): [#def165]
/usr/share/git-core/templates/hooks/update.sample:40:20: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   38|   fi
#   39|   
#   40|-> if [ -z "$refname" -o -z "$oldrev" -o -z "$newrev" ]; then
#   41|   	echo "usage: $0 <ref> <oldrev> <newrev>" >&2
#   42|   	exit 1

Error: SHELLCHECK_WARNING (CWE-477): [#def166]
/usr/share/git-core/templates/hooks/update.sample:40:36: warning[SC2166]: Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.
#   38|   fi
#   39|   
#   40|-> if [ -z "$refname" -o -z "$oldrev" -o -z "$newrev" ]; then
#   41|   	echo "usage: $0 <ref> <oldrev> <newrev>" >&2
#   42|   	exit 1

Error: SHELLCHECK_WARNING (CWE-477): [#def167]
/usr/share/git-core/templates/hooks/update.sample:98:28: warning[SC2166]: Prefer [ p ] && [ q ] as [ p -a q ] is not well defined.
#   96|   	refs/heads/*,commit)
#   97|   		# branch
#   98|-> 		if [ "$oldrev" = "$zero" -a "$denycreatebranch" = "true" ]; then
#   99|   			echo "*** Creating a branch is not allowed in this repository" >&2
#  100|   			exit 1

Error: GCC_ANALYZER_WARNING: [#def168]
git-2.54.0/archive-tar.c:509:13: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘1’
git-2.54.0/archive-tar.c:479:12: branch_false: following ‘false’ branch...
git-2.54.0/archive-tar.c:482:14: branch_false: ...to here
git-2.54.0/archive-tar.c:482:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
git-2.54.0/archive-tar.c:497:9: branch_false: ...to here
git-2.54.0/archive-tar.c:506:12: branch_false: following ‘false’ branch...
git-2.54.0/archive-tar.c:508:9: branch_false: ...to here
git-2.54.0/archive-tar.c:508:9: release_resource: closed here
git-2.54.0/archive-tar.c:509:13: danger: ‘1’ could be invalid
#  507|   		die_errno(_("unable to start '%s' filter"), cmd.buf);
#  508|   	close(1);
#  509|-> 	if (dup2(filter.in, 1) < 0)
#  510|   		die_errno(_("unable to redirect descriptor"));
#  511|   	close(filter.in);

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def169]
git-2.54.0/archive-tar.c:515:9: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘1’
git-2.54.0/archive-tar.c:471:12: enter_function: entry to ‘write_tar_filter_archive’
git-2.54.0/archive-tar.c:479:12: branch_false: following ‘false’ branch...
git-2.54.0/archive-tar.c:482:14: branch_false: ...to here
git-2.54.0/archive-tar.c:482:12: branch_false: following ‘false’ branch (when the strings are non-equal)...
git-2.54.0/archive-tar.c:497:9: branch_false: ...to here
git-2.54.0/archive-tar.c:506:12: branch_false: following ‘false’ branch...
git-2.54.0/archive-tar.c:508:9: branch_false: ...to here
git-2.54.0/archive-tar.c:508:9: release_resource: first ‘close’ here
git-2.54.0/archive-tar.c:509:12: branch_false: following ‘false’ branch...
git-2.54.0/archive-tar.c:511:9: branch_false: ...to here
git-2.54.0/archive-tar.c:513:13: call_function: calling ‘write_tar_archive’ from ‘write_tar_filter_archive’
git-2.54.0/archive-tar.c:513:13: return_function: returning to ‘write_tar_filter_archive’ from ‘write_tar_archive’
git-2.54.0/archive-tar.c:515:9: danger: second ‘close’ here; first ‘close’ was at [(8)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/7)
#  513|   	r = write_tar_archive(ar, args);
#  514|   
#  515|-> 	close(1);
#  516|   	if (finish_command(&filter) != 0)
#  517|   		die(_("'%s' filter reported error"), cmd.buf);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def170]
git-2.54.0/blame.c:2843:24: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘c’
git-2.54.0/blame.c:2765:6: enter_function: entry to ‘setup_scoreboard’
git-2.54.0/blame.c:2778:12: branch_false: following ‘false’ branch...
git-2.54.0/blame.c:2781:12: branch_false: ...to here
git-2.54.0/blame.c:2782:29: call_function: calling ‘find_single_final’ from ‘setup_scoreboard’
git-2.54.0/blame.c:2782:29: return_function: returning to ‘setup_scoreboard’ from ‘find_single_final’
git-2.54.0/blame.c:2789:12: branch_true: following ‘true’ branch...
git-2.54.0/blame.c:2792:12: branch_false: following ‘false’ branch...
git-2.54.0/blame.c:2836:12: branch_false: following ‘false’ branch...
git-2.54.0/blame.c:2839:13: branch_false: ...to here
git-2.54.0/blame.c:2839:12: branch_true: following ‘true’ branch...
git-2.54.0/blame.c:2843:24: danger: dereference of NULL ‘c’
# 2841|   
# 2842|   		sb->revs->children.name = "children";
# 2843|-> 		while (c->parents &&
# 2844|   		       !oideq(&c->object.oid, &sb->final->object.oid)) {
# 2845|   			struct commit_list *l = xcalloc(1, sizeof(*l));

Error: GCC_ANALYZER_WARNING (CWE-476): [#def171]
git-2.54.0/branch.c:168:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
git-2.54.0/branch.c:652:6: enter_function: entry to ‘dwim_and_setup_tracking’
git-2.54.0/branch.c:657:9: call_function: calling ‘dwim_branch_start’ from ‘dwim_and_setup_tracking’
git-2.54.0/branch.c:657:9: return_function: returning to ‘dwim_and_setup_tracking’ from ‘dwim_branch_start’
git-2.54.0/branch.c:658:9: call_function: calling ‘setup_tracking’ from ‘dwim_and_setup_tracking’
#  166|   			 * upstream branch.
#  167|   			 */
#  168|-> 			printf_ln(rebasing ?
#  169|   				_("branch '%s' set up to track '%s' by rebasing.") :
#  170|   				_("branch '%s' set up to track '%s'."),

Error: GCC_ANALYZER_WARNING (CWE-775): [#def172]
git-2.54.0/builtin/archive.c:16:20: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(xopen(output_file, 577, 438), 1)’
git-2.54.0/builtin/archive.c:15:12: branch_true: following ‘true’ branch...
git-2.54.0/builtin/archive.c:16:21: branch_true: ...to here
git-2.54.0/builtin/archive.c:16:21: acquire_resource: opened here
git-2.54.0/builtin/archive.c:16:20: danger: ‘dup2(xopen(output_file, 577, 438), 1)’ leaks here; was opened at [(3)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/2)
#   14|   	int output_fd = xopen(output_file, O_CREAT | O_WRONLY | O_TRUNC, 0666);
#   15|   	if (output_fd != 1) {
#   16|-> 		if (dup2(output_fd, 1) < 0)
#   17|   			die_errno(_("could not redirect output"));
#   18|   		else

Error: GCC_ANALYZER_WARNING (CWE-457): [#def173]
git-2.54.0/builtin/cat-file.c:152:36: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘type’
git-2.54.0/builtin/cat-file.c:1046:5: enter_function: entry to ‘cmd_cat_file’
git-2.54.0/builtin/cat-file.c:1194:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/cat-file.c:1208:13: branch_false: ...to here
git-2.54.0/builtin/cat-file.c:1208:12: branch_true: following ‘true’ branch...
git-2.54.0/builtin/cat-file.c:1209:20: branch_true: ...to here
git-2.54.0/builtin/cat-file.c:1217:25: branch_false: following ‘false’ branch...
git-2.54.0/builtin/cat-file.c:1220:25: branch_false: ...to here
git-2.54.0/builtin/cat-file.c:1220:25: branch_true: following ‘true’ branch...
git-2.54.0/builtin/cat-file.c:1221:25: branch_true: ...to here
git-2.54.0/builtin/cat-file.c:1235:15: call_function: calling ‘cat_one_file’ from ‘cmd_cat_file’
#  150|   			die("git cat-file: could not get object info");
#  151|   
#  152|-> 		if (use_mailmap && (type == OBJ_COMMIT || type == OBJ_TAG)) {
#  153|   			size_t s = size;
#  154|   			buf = replace_idents_using_mailmap(buf, &s);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def174]
git-2.54.0/builtin/clone.c:1113:26: warning[-Wanalyzer-null-argument]: use of NULL ‘work_tree’ where non-null expected
git-2.54.0/builtin/clone.c:867:5: enter_function: entry to ‘cmd_clone’
git-2.54.0/builtin/clone.c:901:21: release_memory: ‘real_git_dir’ is NULL
git-2.54.0/builtin/clone.c:902:21: release_memory: ‘real_git_dir’ is NULL
git-2.54.0/builtin/clone.c:912:21: release_memory: ‘real_git_dir’ is NULL
git-2.54.0/builtin/clone.c:1001:28: release_memory: ‘real_git_dir’ is NULL
git-2.54.0/builtin/clone.c:1015:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/clone.c:1019:12: branch_false: ...to here
git-2.54.0/builtin/clone.c:1019:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/clone.c:1023:13: branch_false: ...to here
git-2.54.0/builtin/clone.c:1052:16: call_function: calling ‘get_repo_path’ from ‘cmd_clone’
git-2.54.0/builtin/clone.c:1052:16: return_function: returning to ‘cmd_clone’ from ‘get_repo_path’
git-2.54.0/builtin/clone.c:1053:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/clone.c:1056:20: branch_false: ...to here
git-2.54.0/builtin/clone.c:1056:19: branch_true: following ‘true’ branch...
git-2.54.0/builtin/clone.c:1058:32: branch_true: ...to here
git-2.54.0/builtin/clone.c:1097:12: branch_true: following ‘true’ branch...
git-2.54.0/builtin/clone.c:1098:27: branch_true: ...to here
git-2.54.0/builtin/clone.c:1107:12: branch_true: following ‘true’ branch...
git-2.54.0/builtin/clone.c:1108:21: branch_true: ...to here
git-2.54.0/builtin/clone.c:1108:20: branch_false: following ‘false’ branch...
git-2.54.0/builtin/clone.c:1111:20: branch_false: ...to here
git-2.54.0/builtin/clone.c:1111:20: branch_false: following ‘false’ branch...
git-2.54.0/builtin/clone.c:1113:26: branch_false: ...to here
git-2.54.0/builtin/clone.c:1113:26: danger: argument 1 (‘work_tree’) NULL where non-null expected
# 1111|   		if (dest_exists)
# 1112|   			junk_work_tree_flags |= REMOVE_DIR_KEEP_TOPLEVEL;
# 1113|-> 		else if (mkdir(work_tree, 0777))
# 1114|   			die_errno(_("could not create work tree dir '%s'"),
# 1115|   				  work_tree);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def175]
git-2.54.0/builtin/gc.c:2877:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘cron_list’ where non-null expected
git-2.54.0/builtin/gc.c:2834:12: enter_function: entry to ‘crontab_update_schedule’
git-2.54.0/builtin/gc.c:2844:22: call_function: calling ‘get_random_minute’ from ‘crontab_update_schedule’
git-2.54.0/builtin/gc.c:2844:22: return_function: returning to ‘crontab_update_schedule’ from ‘get_random_minute’
git-2.54.0/builtin/gc.c:2846:9: call_function: calling ‘get_schedule_cmd’ from ‘crontab_update_schedule’
git-2.54.0/builtin/gc.c:2846:9: return_function: returning to ‘crontab_update_schedule’ from ‘get_schedule_cmd’
git-2.54.0/builtin/gc.c:2853:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/gc.c:2859:9: branch_false: ...to here
git-2.54.0/builtin/gc.c:2862:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/gc.c:2866:19: branch_false: ...to here
git-2.54.0/builtin/gc.c:2867:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/gc.c:2876:21: branch_false: ...to here
git-2.54.0/builtin/gc.c:2876:21: acquire_memory: this call could return NULL
git-2.54.0/builtin/gc.c:2877:9: danger: argument 1 (‘cron_list’) from [(20)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/19) could be NULL where non-null expected
# 2875|   	 */
# 2876|   	cron_list = fdopen(fd, "r");
# 2877|-> 	rewind(cron_list);
# 2878|   
# 2879|   	while (!strbuf_getline_lf(&line, cron_list)) {

Error: GCC_ANALYZER_WARNING (CWE-688): [#def176]
git-2.54.0/builtin/ls-files.c:339:25: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
git-2.54.0/builtin/ls-files.c:576:5: enter_function: entry to ‘cmd_ls_files’
git-2.54.0/builtin/ls-files.c:667:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/ls-files.c:670:16: branch_false: ...to here
git-2.54.0/builtin/ls-files.c:730:12: branch_true: following ‘true’ branch...
git-2.54.0/builtin/ls-files.c:734:26: branch_true: ...to here
git-2.54.0/builtin/ls-files.c:734:26: call_function: calling ‘get_common_prefix_len’ from ‘cmd_ls_files’
git-2.54.0/builtin/ls-files.c:734:26: return_function: returning to ‘cmd_ls_files’ from ‘get_common_prefix_len’
git-2.54.0/builtin/ls-files.c:736:9: call_function: calling ‘prune_index’ from ‘cmd_ls_files’
git-2.54.0/builtin/ls-files.c:736:9: return_function: returning to ‘cmd_ls_files’ from ‘prune_index’
git-2.54.0/builtin/ls-files.c:763:9: call_function: calling ‘show_files’ from ‘cmd_ls_files’
#  337|   
#  338|   		if (!show_stage) {
#  339|-> 			fputs(tag, stdout);
#  340|   		} else {
#  341|   			printf("%s%06o %s %d\t",

Error: GCC_ANALYZER_WARNING (CWE-476): [#def177]
git-2.54.0/builtin/name-rev.c:223:46: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
git-2.54.0/builtin/name-rev.c:555:5: enter_function: entry to ‘cmd_name_rev’
git-2.54.0/builtin/name-rev.c:607:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/name-rev.c:611:12: branch_false: ...to here
git-2.54.0/builtin/name-rev.c:657:9: call_function: calling ‘name_tips’ from ‘cmd_name_rev’
#  221|   				distance = name->distance + MERGE_TRAVERSAL_WEIGHT;
#  222|   			} else {
#  223|-> 				generation = name->generation + 1;
#  224|   				distance = name->distance + 1;
#  225|   			}

Error: GCC_ANALYZER_WARNING (CWE-688): [#def178]
git-2.54.0/builtin/pull.c:630:22: warning[-Wanalyzer-null-argument]: use of NULL ‘remote’ where non-null expected
git-2.54.0/builtin/pull.c:856:5: enter_function: entry to ‘cmd_pull’
git-2.54.0/builtin/pull.c:1034:9: call_function: inlined call to ‘parse_repo_refspecs’ from ‘cmd_pull’
git-2.54.0/builtin/pull.c:1036:13: branch_false: ...to here
git-2.54.0/builtin/pull.c:1058:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/pull.c:1061:13: branch_false: ...to here
git-2.54.0/builtin/pull.c:1061:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/pull.c:1064:13: branch_false: ...to here
git-2.54.0/builtin/pull.c:1067:12: branch_true: following ‘true’ branch...
git-2.54.0/builtin/pull.c:1068:21: branch_true: ...to here
git-2.54.0/builtin/pull.c:1079:21: call_function: calling ‘get_rebase_fork_point’ from ‘cmd_pull’
#  628|   
#  629|   	if (*spec_src) {
#  630|-> 		if (!strcmp(remote, "."))
#  631|   			merge_branch = mkpath("refs/heads/%s", spec_src);
#  632|   		else

Error: GCC_ANALYZER_WARNING (CWE-688): [#def179]
git-2.54.0/builtin/sparse-checkout.c:1159:17: warning[-Wanalyzer-null-argument]: use of NULL ‘xfopen(check_rules_opts.rules_file, "r")’ where non-null expected
git-2.54.0/builtin/sparse-checkout.c:1128:12: enter_function: entry to ‘sparse_checkout_check_rules’
git-2.54.0/builtin/sparse-checkout.c:1156:12: branch_true: following ‘true’ branch...
git-2.54.0/builtin/sparse-checkout.c:1157:22: branch_true: ...to here
git-2.54.0/builtin/sparse-checkout.c:1158:17: call_function: calling ‘add_patterns_from_input’ from ‘sparse_checkout_check_rules’
git-2.54.0/builtin/sparse-checkout.c:1158:17: return_function: returning to ‘sparse_checkout_check_rules’ from ‘add_patterns_from_input’
git-2.54.0/builtin/sparse-checkout.c:1159:17: danger: argument 1 (‘xfopen(check_rules_opts.rules_file, "r")’) NULL where non-null expected
# 1157|   		fp = xfopen(check_rules_opts.rules_file, "r");
# 1158|   		add_patterns_from_input(&pl, argc, argv, fp);
# 1159|-> 		fclose(fp);
# 1160|   	} else {
# 1161|   		sparse_filename = get_sparse_checkout_filename();

Error: GCC_ANALYZER_WARNING: [#def180]
git-2.54.0/column.c:395:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘1’
git-2.54.0/column.c:370:12: branch_false: following ‘false’ branch...
git-2.54.0/column.c:373:9: branch_false: ...to here
git-2.54.0/column.c:390:12: branch_false: following ‘false’ branch...
git-2.54.0/column.c:393:18: branch_false: ...to here
git-2.54.0/column.c:394:9: release_resource: closed here
git-2.54.0/column.c:395:9: danger: ‘1’ could be invalid
#  393|   	fd_out = dup(1);
#  394|   	close(1);
#  395|-> 	dup2(column_process.in, 1);
#  396|   	close(column_process.in);
#  397|   	return 0;

Error: GCC_ANALYZER_WARNING: [#def181]
git-2.54.0/column.c:408:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘1’
git-2.54.0/column.c:402:12: branch_false: following ‘false’ branch...
git-2.54.0/column.c:405:9: branch_false: ...to here
git-2.54.0/column.c:406:9: release_resource: closed here
git-2.54.0/column.c:408:9: danger: ‘1’ could be invalid
#  406|   	close(1);
#  407|   	finish_command(&column_process);
#  408|-> 	dup2(fd_out, 1);
#  409|   	close(fd_out);
#  410|   	fd_out = -1;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def182]
git-2.54.0/combine-diff.c:1073:46: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(*elem.path, 0)’
git-2.54.0/combine-diff.c:1282:6: enter_function: entry to ‘show_combined_diff’
git-2.54.0/combine-diff.c:1288:12: branch_false: following ‘false’ branch...
git-2.54.0/combine-diff.c:1292:18: branch_false: ...to here
git-2.54.0/combine-diff.c:1292:17: branch_true: following ‘true’ branch...
git-2.54.0/combine-diff.c:1293:17: branch_true: ...to here
git-2.54.0/combine-diff.c:1293:17: call_function: calling ‘show_patch_diff’ from ‘show_combined_diff’
# 1071|   			free_filespec(df);
# 1072|   		} else if (0 <= (fd = open(elem->path, O_RDONLY))) {
# 1073|-> 			size_t len = xsize_t(st.st_size);
# 1074|   			ssize_t done;
# 1075|   			int is_file, i;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def183]
git-2.54.0/diagnose.c:210:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(xopen(*zip_path.buf, 577, 438), 1)’
git-2.54.0/diagnose.c:198:12: branch_false: following ‘false’ branch (when ‘mode != 0’)...
git-2.54.0/diagnose.c:203:21: branch_false: ...to here
git-2.54.0/diagnose.c:204:12: branch_false: following ‘false’ branch (when ‘stdout_fd >= 0’)...
git-2.54.0/diagnose.c:209:29: branch_false: ...to here
git-2.54.0/diagnose.c:210:13: acquire_resource: opened here
git-2.54.0/diagnose.c:210:12: danger: ‘dup2(xopen(*zip_path.buf, 577, 438), 1)’ leaks here; was opened at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  208|   
#  209|   	archiver_fd = xopen(zip_path->buf, O_CREAT | O_WRONLY | O_TRUNC, 0666);
#  210|-> 	if (dup2(archiver_fd, STDOUT_FILENO) < 0) {
#  211|   		res = error_errno(_("could not redirect output"));
#  212|   		goto diagnose_cleanup;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def184]
git-2.54.0/diff-lib.c:322:22: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ce’
git-2.54.0/diff-lib.c:442:13: enter_function: entry to ‘do_oneway_diff’
git-2.54.0/diff-lib.c:453:12: branch_true: following ‘true’ branch...
git-2.54.0/diff-lib.c:454:13: branch_true: ...to here
git-2.54.0/diff-lib.c:453:13: branch_true: following ‘true’ branch...
git-2.54.0/diff-lib.c:453:13: branch_true: ...to here
git-2.54.0/diff-lib.c:462:18: branch_true: following ‘true’ branch...
git-2.54.0/diff-lib.c:462:18: branch_true: ...to here
git-2.54.0/diff-lib.c:467:12: branch_false: following ‘false’ branch...
git-2.54.0/diff-lib.c:479:12: branch_false: ...to here
git-2.54.0/diff-lib.c:479:12: branch_true: following ‘true’ branch (when ‘tree’ is NULL)...
git-2.54.0/diff-lib.c:480:17: branch_true: ...to here
git-2.54.0/diff-lib.c:480:17: call_function: calling ‘show_new_file’ from ‘do_oneway_diff’
#  320|   {
#  321|   	const struct object_id *oid = &ce->oid;
#  322|-> 	unsigned int mode = ce->ce_mode;
#  323|   
#  324|   	if (!cached && !ce_uptodate(ce)) {

Error: GCC_ANALYZER_WARNING (CWE-121): [#def185]
git-2.54.0/diff-lib.c:599:17: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
git-2.54.0/diff-lib.c:586:20: branch_false: following ‘false’ branch...
git-2.54.0/diff-lib.c:584:43: branch_false: ...to here
git-2.54.0/diff-lib.c:595:12: branch_false: following ‘false’ branch...
git-2.54.0/diff-lib.c:595:12: branch_false: ...to here
git-2.54.0/diff-lib.c:598:21: branch_true: following ‘true’ branch...
git-2.54.0/diff-lib.c:599:72: branch_true: ...to here
git-2.54.0/diff-lib.c:598:21: branch_true: following ‘true’ branch...
git-2.54.0/diff-lib.c:599:72: branch_true: ...to here
git-2.54.0/diff-lib.c:598:21: branch_true: following ‘true’ branch...
git-2.54.0/diff-lib.c:599:72: branch_true: ...to here
git-2.54.0/diff-lib.c:599:17: danger: out-of-bounds write from byte 16 till byte 23 but ‘mb_child’ ends at byte 16
#  597|   
#  598|   	for (i = 0; i < revs->pending.nr; i++)
#  599|-> 		mb_child[i] = lookup_commit_reference(the_repository, &revs->pending.objects[i].item->oid);
#  600|   	if (revs->pending.nr == 1) {
#  601|   		struct object_id oid;

Error: GCC_ANALYZER_WARNING (CWE-416): [#def186]
git-2.54.0/dir.c:3558:46: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘pl’
git-2.54.0/dir.c:3545:6: enter_function: entry to ‘dir_clear’
git-2.54.0/dir.c:3553:28: branch_true: following ‘true’ branch (when ‘i != 3’)...
git-2.54.0/dir.c:3553:28: branch_true: ...to here
git-2.54.0/dir.c:3557:28: branch_false: following ‘false’ branch (when ‘i != 1’)...
git-2.54.0/dir.c:3559:25: branch_false: ...to here
git-2.54.0/dir.c:3559:25: call_function: calling ‘clear_pattern_list’ from ‘dir_clear’
git-2.54.0/dir.c:3559:25: return_function: returning to ‘dir_clear’ from ‘clear_pattern_list’
git-2.54.0/dir.c:3555:29: branch_false: following ‘false’ branch...
git-2.54.0/dir.c:3561:22: branch_false: ...to here
git-2.54.0/dir.c:3561:17: release_memory: freed here
git-2.54.0/dir.c:3553:28: branch_true: following ‘true’ branch (when ‘i != 3’)...
git-2.54.0/dir.c:3553:28: branch_true: ...to here
git-2.54.0/dir.c:3555:29: branch_true: following ‘true’ branch...
git-2.54.0/dir.c:3556:31: branch_true: ...to here
git-2.54.0/dir.c:3557:28: branch_true: following ‘true’ branch (when ‘i == 1’)...
git-2.54.0/dir.c:3558:46: branch_true: ...to here
git-2.54.0/dir.c:3558:46: danger: use after ‘free’ of ‘pl’; freed at [(16)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/15)
# 3556|   			pl = &group->pl[j];
# 3557|   			if (i == EXC_DIRS)
# 3558|-> 				free((char *)pl->src);
# 3559|   			clear_pattern_list(pl);
# 3560|   		}

Error: GCC_ANALYZER_WARNING (CWE-415): [#def187]
git-2.54.0/dir.c:3561:17: warning[-Wanalyzer-double-free]: double-‘free’ of ‘*dir.internal.exclude_list_group[i].pl’
git-2.54.0/dir.c:3545:6: enter_function: entry to ‘dir_clear’
git-2.54.0/dir.c:3553:28: branch_true: following ‘true’ branch (when ‘i != 3’)...
git-2.54.0/dir.c:3553:28: branch_true: ...to here
git-2.54.0/dir.c:3557:28: branch_false: following ‘false’ branch (when ‘i != 1’)...
git-2.54.0/dir.c:3559:25: branch_false: ...to here
git-2.54.0/dir.c:3559:25: call_function: calling ‘clear_pattern_list’ from ‘dir_clear’
git-2.54.0/dir.c:3559:25: return_function: returning to ‘dir_clear’ from ‘clear_pattern_list’
git-2.54.0/dir.c:3555:29: branch_false: following ‘false’ branch...
git-2.54.0/dir.c:3561:22: branch_false: ...to here
git-2.54.0/dir.c:3561:17: release_memory: first ‘free’ here
git-2.54.0/dir.c:3553:28: branch_true: following ‘true’ branch (when ‘i != 3’)...
git-2.54.0/dir.c:3553:28: branch_true: ...to here
git-2.54.0/dir.c:3555:29: branch_false: following ‘false’ branch...
git-2.54.0/dir.c:3561:22: branch_false: ...to here
git-2.54.0/dir.c:3561:17: danger: second ‘free’ here; first ‘free’ was at [(16)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/15)
# 3559|   			clear_pattern_list(pl);
# 3560|   		}
# 3561|-> 		free(group->pl);
# 3562|   	}
# 3563|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def188]
git-2.54.0/dir.c:3962:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ucd’
git-2.54.0/dir.c:3992:12: enter_function: entry to ‘invalidate_one_component’
git-2.54.0/dir.c:3998:12: branch_true: following ‘true’ branch (when ‘rest’ is non-NULL)...
git-2.54.0/dir.c:3999:37: branch_true: ...to here
git-2.54.0/dir.c:4001:25: call_function: calling ‘lookup_untracked’ from ‘invalidate_one_component’
git-2.54.0/dir.c:4001:25: return_function: returning to ‘invalidate_one_component’ from ‘lookup_untracked’
git-2.54.0/dir.c:4003:25: call_function: calling ‘invalidate_one_component’ from ‘invalidate_one_component’
# 3960|   {
# 3961|   	uc->dir_invalidated++;
# 3962|-> 	ucd->valid = 0;
# 3963|   	for (size_t i = 0; i < ucd->untracked_nr; i++)
# 3964|   		free(ucd->untracked[i]);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def189]
git-2.54.0/git-compat-util.h:740:17: warning[-Wanalyzer-null-argument]: use of NULL ‘dst’ where non-null expected
git-2.54.0/split-index.c:164:6: enter_function: entry to ‘merge_base_index’
git-2.54.0/split-index.c:174:9: release_memory: ‘*istate.cache’ is NULL
git-2.54.0/split-index.c:176:9: branch_false: following ‘false’ branch...
git-2.54.0/split-index.c:177:9: branch_false: ...to here
git-2.54.0/split-index.c:177:9: release_memory: ‘*istate.cache’ is NULL
git-2.54.0/split-index.c:177:9: call_function: inlined call to ‘copy_array’ from ‘merge_base_index’
#  738|   {
#  739|   	if (n)
#  740|-> 		memcpy(dst, src, st_mult(size, n));
#  741|   }
#  742|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def190]
git-2.54.0/graph.c:1115:46: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘parents’
git-2.54.0/graph.c:1519:6: enter_function: entry to ‘graph_show_commit_msg’
git-2.54.0/graph.c:1528:9: call_function: calling ‘graph_show_strbuf’ from ‘graph_show_commit_msg’
# 1113|   
# 1114|   			for (j = 0; j < graph->num_parents; j++) {
# 1115|-> 				par_column = graph_find_new_column_by_commit(graph, parents->item);
# 1116|   				assert(par_column >= 0);
# 1117|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def191]
git-2.54.0/graph.c:1148:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
git-2.54.0/graph.c:1519:6: enter_function: entry to ‘graph_show_commit_msg’
git-2.54.0/graph.c:1528:9: call_function: calling ‘graph_show_strbuf’ from ‘graph_show_commit_msg’
# 1146|   		}
# 1147|   
# 1148|-> 		if (col_commit == first_parent->item)
# 1149|   			parent_col = col;
# 1150|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def192]
git-2.54.0/line-log.c:160:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rb’
git-2.54.0/line-log.c:1188:5: enter_function: entry to ‘line_log_filter’
git-2.54.0/line-log.c:1194:16: branch_true: following ‘true’ branch (when ‘list’ is non-NULL)...
git-2.54.0/line-log.c:1196:17: branch_true: ...to here
git-2.54.0/line-log.c:1197:21: call_function: calling ‘line_log_process_ranges_arbitrary_commit’ from ‘line_log_filter’
#  158|   		struct range *new_range;
#  159|   		if (i < a->nr && j < b->nr) {
#  160|-> 			if (ra[i].start < rb[j].start)
#  161|   				new_range = &ra[i++];
#  162|   			else if (ra[i].start > rb[j].start)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def193]
git-2.54.0/line-log.c:172:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘new_range’
git-2.54.0/line-log.c:1188:5: enter_function: entry to ‘line_log_filter’
git-2.54.0/line-log.c:1194:16: branch_true: following ‘true’ branch (when ‘list’ is non-NULL)...
git-2.54.0/line-log.c:1196:17: branch_true: ...to here
git-2.54.0/line-log.c:1197:21: call_function: calling ‘line_log_process_ranges_arbitrary_commit’ from ‘line_log_filter’
#  170|   		else                       /* a exhausted */
#  171|   			new_range = &rb[j++];
#  172|-> 		if (new_range->start == new_range->end)
#  173|   			; /* empty range */
#  174|   		else if (!out->nr || out->ranges[out->nr-1].end < new_range->start) {

Error: GCC_ANALYZER_WARNING (CWE-1341): [#def194]
git-2.54.0/midx.c:233:17: warning[-Wanalyzer-fd-double-close]: double ‘close’ of file descriptor ‘git_open_cloexec(midx_name, 0)’
git-2.54.0/midx.c:895:5: enter_function: entry to ‘verify_midx_file’
git-2.54.0/midx.c:901:38: call_function: calling ‘load_multi_pack_index’ from ‘verify_midx_file’
#  231|   		munmap(midx_map, midx_size);
#  232|   	if (0 <= fd)
#  233|-> 		close(fd);
#  234|   	return NULL;
#  235|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def195]
git-2.54.0/pack-bitmap.c:526:39: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘*bitmap_git.base’
git-2.54.0/pack-bitmap.c:3056:5: enter_function: entry to ‘test_bitmap_pseudo_merge_objects’
git-2.54.0/pack-bitmap.c:3062:22: call_function: calling ‘prepare_bitmap_git’ from ‘test_bitmap_pseudo_merge_objects’
#  524|   	if (midx->base_midx) {
#  525|   		bitmap_git->base = prepare_midx_bitmap_git(midx->base_midx);
#  526|-> 		bitmap_git->base_nr = bitmap_git->base->base_nr + 1;
#  527|   	} else {
#  528|   		bitmap_git->base_nr = 0;

Error: GCC_ANALYZER_WARNING: [#def196]
git-2.54.0/pager.c:55:9: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘1’
git-2.54.0/pager.c:47:6: enter_function: entry to ‘wait_for_pager’
git-2.54.0/pager.c:49:12: branch_false: following ‘false’ branch...
git-2.54.0/pager.c:52:9: branch_false: ...to here
git-2.54.0/pager.c:52:9: call_function: calling ‘finish_pager’ from ‘wait_for_pager’
git-2.54.0/pager.c:52:9: return_function: returning to ‘wait_for_pager’ from ‘finish_pager’
git-2.54.0/pager.c:55:9: danger: ‘1’ could be invalid
#   53|   	sigchain_pop_common();
#   54|   	unsetenv("GIT_PAGER_IN_USE");
#   55|-> 	dup2(old_fd1, 1);
#   56|   	close(old_fd1);
#   57|   	old_fd1 = -1;

Error: GCC_ANALYZER_WARNING: [#def197]
git-2.54.0/pager.c:59:17: warning[-Wanalyzer-fd-use-without-check]: ‘dup2’ on possibly invalid file descriptor ‘2’
git-2.54.0/pager.c:47:6: enter_function: entry to ‘wait_for_pager’
git-2.54.0/pager.c:49:12: branch_false: following ‘false’ branch...
git-2.54.0/pager.c:52:9: branch_false: ...to here
git-2.54.0/pager.c:52:9: call_function: calling ‘finish_pager’ from ‘wait_for_pager’
git-2.54.0/pager.c:52:9: return_function: returning to ‘wait_for_pager’ from ‘finish_pager’
git-2.54.0/pager.c:58:12: branch_true: following ‘true’ branch...
git-2.54.0/pager.c:59:17: branch_true: ...to here
git-2.54.0/pager.c:59:17: danger: ‘2’ could be invalid
#   57|   	old_fd1 = -1;
#   58|   	if (old_fd2 != -1) {
#   59|-> 		dup2(old_fd2, 2);
#   60|   		close(old_fd2);
#   61|   		old_fd2 = -1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def198]
git-2.54.0/read-cache.h:42:31: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ce’
git-2.54.0/diff-lib.c:517:12: enter_function: entry to ‘oneway_diff’
git-2.54.0/diff-lib.c:530:12: branch_true: following ‘true’ branch...
git-2.54.0/diff-lib.c:530:12: branch_true: ...to here
git-2.54.0/diff-lib.c:533:13: branch_false: following ‘false’ branch (when ‘idx’ is NULL)...
git-2.54.0/diff-lib.c:533:13: branch_false: ...to here
git-2.54.0/diff-lib.c:533:13: call_function: calling ‘ce_path_match’ from ‘oneway_diff’
#   40|   {
#   41|   	return match_pathspec(istate, pathspec, ce->name, ce_namelen(ce), 0, seen,
#   42|-> 			      S_ISDIR(ce->ce_mode) || S_ISGITLINK(ce->ce_mode));
#   43|   }
#   44|   

Error: GCC_ANALYZER_WARNING (CWE-126): [#def199]
git-2.54.0/refs.c:2767:31: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
git-2.54.0/refs.c:2904:28: enter_function: entry to ‘refs_verify_refname_available’
git-2.54.0/refs.c:2918:16: call_function: calling ‘refs_verify_refnames_available’ from ‘refs_verify_refname_available’
# 2765|   
# 2766|   	for_each_string_list_item(item, refnames) {
# 2767|-> 		const size_t *update_idx = (size_t *)item->util;
# 2768|   		const char *refname = item->string;
# 2769|   		const char *extra_refname;

Error: GCC_ANALYZER_WARNING (CWE-126): [#def200]
git-2.54.0/refs.c:2768:29: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
git-2.54.0/refs.c:2904:28: enter_function: entry to ‘refs_verify_refname_available’
git-2.54.0/refs.c:2918:16: call_function: calling ‘refs_verify_refnames_available’ from ‘refs_verify_refname_available’
# 2766|   	for_each_string_list_item(item, refnames) {
# 2767|   		const size_t *update_idx = (size_t *)item->util;
# 2768|-> 		const char *refname = item->string;
# 2769|   		const char *extra_refname;
# 2770|   		struct object_id oid;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def201]
git-2.54.0/refs/packed-backend.c:184:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
git-2.54.0/refs/packed-backend.c:2065:12: enter_function: entry to ‘packed_fsck’
git-2.54.0/refs/packed-backend.c:2069:41: call_function: calling ‘packed_downcast’ from ‘packed_fsck’
git-2.54.0/refs/packed-backend.c:2069:41: return_function: returning to ‘packed_fsck’ from ‘packed_downcast’
git-2.54.0/refs/packed-backend.c:2077:12: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2080:13: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2084:12: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2103:20: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2103:19: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2106:21: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2106:19: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2115:14: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2115:14: call_function: calling ‘allocate_snapshot_buffer’ from ‘packed_fsck’
git-2.54.0/refs/packed-backend.c:2115:14: return_function: returning to ‘packed_fsck’ from ‘allocate_snapshot_buffer’
git-2.54.0/refs/packed-backend.c:2115:12: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2125:39: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2126:13: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2130:1: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2131:12: branch_true: following ‘true’ branch...
git-2.54.0/refs/packed-backend.c:2132:17: branch_true: ...to here
git-2.54.0/refs/packed-backend.c:2133:9: call_function: calling ‘clear_snapshot_buffer’ from ‘packed_fsck’
#  182|   	if (snapshot->mmapped) {
#  183|   		if (munmap(snapshot->buf, snapshot->eof - snapshot->buf))
#  184|-> 			die_errno("error ummapping packed-refs file %s",
#  185|   				  snapshot->refs->path);
#  186|   		snapshot->mmapped = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def202]
git-2.54.0/refs/packed-backend.c:538:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
git-2.54.0/refs/packed-backend.c:2065:12: enter_function: entry to ‘packed_fsck’
git-2.54.0/refs/packed-backend.c:2069:41: call_function: calling ‘packed_downcast’ from ‘packed_fsck’
git-2.54.0/refs/packed-backend.c:2069:41: return_function: returning to ‘packed_fsck’ from ‘packed_downcast’
git-2.54.0/refs/packed-backend.c:2077:12: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2080:13: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2084:12: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2103:20: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2103:19: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2106:21: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2106:19: branch_false: following ‘false’ branch...
git-2.54.0/refs/packed-backend.c:2115:14: branch_false: ...to here
git-2.54.0/refs/packed-backend.c:2115:14: call_function: calling ‘allocate_snapshot_buffer’ from ‘packed_fsck’
#  536|   		bytes_read = read_in_full(fd, snapshot->buf, size);
#  537|   		if (bytes_read < 0 || bytes_read != size)
#  538|-> 			die_errno("couldn't read %s", snapshot->refs->path);
#  539|   		snapshot->mmapped = 0;
#  540|   	} else {

Error: GCC_ANALYZER_WARNING (CWE-122): [#def203]
git-2.54.0/reftable/basics.c:238:9: warning[-Wanalyzer-out-of-bounds]: heap-based buffer overflow
git-2.54.0/reftable/basics.c:198:5: enter_function: entry to ‘parse_names’
git-2.54.0/reftable/basics.c:207:16: branch_true: following ‘true’ branch (when ‘p < end’)...
git-2.54.0/reftable/basics.c:208:30: branch_true: ...to here
git-2.54.0/reftable/basics.c:209:20: branch_false: following ‘false’ branch (when ‘next’ is non-NULL)...
git-2.54.0/reftable/basics.c:212:27: branch_false: ...to here
git-2.54.0/reftable/basics.c:212:27: branch_true: following ‘true’ branch (when ‘end > next’)...
git-2.54.0/reftable/basics.c:213:25: branch_true: ...to here
git-2.54.0/reftable/basics.c:218:20: branch_true: following ‘true’ branch (when ‘p < next’)...
git-2.54.0/reftable/basics.c:219:29: branch_true: ...to here
git-2.54.0/reftable/basics.c:219:28: branch_true: following ‘true’ branch...
git-2.54.0/reftable/basics.c:219:29: branch_true: ...to here
git-2.54.0/reftable/basics.c:219:29: call_function: calling ‘reftable_alloc_grow’ from ‘parse_names’
git-2.54.0/reftable/basics.c:219:29: return_function: returning to ‘parse_names’ from ‘reftable_alloc_grow’
git-2.54.0/reftable/basics.c:219:29: branch_false: following ‘false’ branch...
git-2.54.0/reftable/basics.c:225:30: branch_false: ...to here
git-2.54.0/reftable/basics.c:225:44: call_function: calling ‘reftable_strdup’ from ‘parse_names’
git-2.54.0/reftable/basics.c:225:44: return_function: returning to ‘parse_names’ from ‘reftable_strdup’
git-2.54.0/reftable/basics.c:226:28: branch_false: following ‘false’ branch...
git-2.54.0/reftable/basics.c:231:17: branch_false: ...to here
git-2.54.0/reftable/basics.c:234:12: branch_false: following ‘false’ branch...
git-2.54.0/reftable/basics.c:238:14: branch_false: ...to here
git-2.54.0/reftable/basics.c:238:9: danger: out-of-bounds write from byte 8 till byte 15 but region ends at byte 8
#  236|   		goto done;
#  237|   	}
#  238|-> 	names[names_len] = NULL;
#  239|   
#  240|   	*out = names;

Error: GCC_ANALYZER_WARNING (CWE-416): [#def204]
git-2.54.0/reftable/basics.c:244:17: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘names’
git-2.54.0/reftable/basics.c:198:5: enter_function: entry to ‘parse_names’
git-2.54.0/reftable/basics.c:207:16: branch_true: following ‘true’ branch (when ‘p < end’)...
git-2.54.0/reftable/basics.c:208:30: branch_true: ...to here
git-2.54.0/reftable/basics.c:209:20: branch_false: following ‘false’ branch (when ‘next’ is non-NULL)...
git-2.54.0/reftable/basics.c:212:27: branch_false: ...to here
git-2.54.0/reftable/basics.c:212:27: branch_true: following ‘true’ branch (when ‘end > next’)...
git-2.54.0/reftable/basics.c:213:25: branch_true: ...to here
git-2.54.0/reftable/basics.c:218:20: branch_true: following ‘true’ branch (when ‘p < next’)...
git-2.54.0/reftable/basics.c:219:29: branch_true: ...to here
git-2.54.0/reftable/basics.c:219:28: branch_true: following ‘true’ branch...
git-2.54.0/reftable/basics.c:219:29: branch_true: ...to here
git-2.54.0/reftable/basics.c:219:29: call_function: calling ‘reftable_alloc_grow’ from ‘parse_names’
git-2.54.0/reftable/basics.c:219:29: return_function: returning to ‘parse_names’ from ‘reftable_alloc_grow’
git-2.54.0/reftable/basics.c:219:29: branch_false: following ‘false’ branch...
git-2.54.0/reftable/basics.c:225:30: branch_false: ...to here
git-2.54.0/reftable/basics.c:225:44: call_function: calling ‘reftable_strdup’ from ‘parse_names’
git-2.54.0/reftable/basics.c:225:44: return_function: returning to ‘parse_names’ from ‘reftable_strdup’
git-2.54.0/reftable/basics.c:226:28: branch_false: following ‘false’ branch...
git-2.54.0/reftable/basics.c:231:17: branch_false: ...to here
git-2.54.0/reftable/basics.c:234:12: branch_true: following ‘true’ branch...
git-2.54.0/reftable/basics.c:234:13: branch_true: ...to here
git-2.54.0/reftable/basics.c:234:13: call_function: calling ‘reftable_alloc_grow’ from ‘parse_names’
git-2.54.0/reftable/basics.c:234:13: return_function: returning to ‘parse_names’ from ‘reftable_alloc_grow’
git-2.54.0/reftable/basics.c:234:13: branch_true: following ‘true’ branch...
git-2.54.0/reftable/basics.c:236:17: branch_true: ...to here
git-2.54.0/reftable/basics.c:243:28: branch_true: following ‘true’ branch (when ‘names_len > i’)...
git-2.54.0/reftable/basics.c:244:36: branch_true: ...to here
git-2.54.0/reftable/basics.c:244:17: danger: use after ‘free’ of ‘names + i * 8’; freed at [(61)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/60)
#  242|   done:
#  243|   	for (size_t i = 0; i < names_len; i++)
#  244|-> 		reftable_free(names[i]);
#  245|   	reftable_free(names);
#  246|   	return err;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def205]
git-2.54.0/reftable/stack.c:308:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cur’
git-2.54.0/reftable/stack.c:621:5: enter_function: entry to ‘reftable_stack_reload’
git-2.54.0/reftable/stack.c:625:24: call_function: calling ‘reftable_stack_reload_maybe_reuse’ from ‘reftable_stack_reload’
#  306|   		}
#  307|   
#  308|-> 		new_tables[new_tables_len] = table;
#  309|   		new_tables_len++;
#  310|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def206]
git-2.54.0/reftable/stack.c:308:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘new_tables’
git-2.54.0/reftable/stack.c:621:5: enter_function: entry to ‘reftable_stack_reload’
git-2.54.0/reftable/stack.c:625:24: call_function: calling ‘reftable_stack_reload_maybe_reuse’ from ‘reftable_stack_reload’
#  306|   		}
#  307|   
#  308|-> 		new_tables[new_tables_len] = table;
#  309|   		new_tables_len++;
#  310|   	}

Error: GCC_ANALYZER_WARNING (CWE-476): [#def207]
git-2.54.0/reftable/stack.c:308:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘reused’
git-2.54.0/reftable/stack.c:621:5: enter_function: entry to ‘reftable_stack_reload’
git-2.54.0/reftable/stack.c:625:24: call_function: calling ‘reftable_stack_reload_maybe_reuse’ from ‘reftable_stack_reload’
#  306|   		}
#  307|   
#  308|-> 		new_tables[new_tables_len] = table;
#  309|   		new_tables_len++;
#  310|   	}

Error: GCC_ANALYZER_WARNING (CWE-775): [#def208]
git-2.54.0/run-command.c:342:12: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘dup2(fd,  to)’
git-2.54.0/run-command.c:1996:22: enter_function: entry to ‘start_bg_command’
git-2.54.0/run-command.c:2013:12: branch_false: following ‘false’ branch...
git-2.54.0/run-command.c:2016:14: branch_false: ...to here
git-2.54.0/run-command.c:2019:15: call_function: calling ‘start_command’ from ‘start_bg_command’
#  340|   static void child_dup2(int fd, int to)
#  341|   {
#  342|-> 	if (dup2(fd, to) < 0)
#  343|   		child_die(CHILD_ERR_DUP2);
#  344|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def209]
git-2.54.0/strbuf.c:116:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
git-2.54.0/strbuf.c:1085:6: enter_function: entry to ‘strbuf_stripspace’
git-2.54.0/strbuf.c:1092:9: call_function: calling ‘strbuf_grow’ from ‘strbuf_stripspace’
#  114|   	ALLOC_GROW(sb->buf, sb->len + extra + 1, sb->alloc);
#  115|   	if (new_buf)
#  116|-> 		sb->buf[0] = '\0';
#  117|   }
#  118|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def210]
git-2.54.0/strbuf.h:310:9: warning[-Wanalyzer-null-argument]: use of NULL ‘s’ where non-null expected
git-2.54.0/builtin/config.c:1594:5: enter_function: entry to ‘cmd_config’
git-2.54.0/builtin/config.c:1621:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/config.c:1627:16: branch_false: ...to here
git-2.54.0/builtin/config.c:1627:16: call_function: calling ‘cmd_config_actions’ from ‘cmd_config’
#  308|   static inline void strbuf_addstr(struct strbuf *sb, const char *s)
#  309|   {
#  310|-> 	strbuf_add(sb, s, strlen(s));
#  311|   }
#  312|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def211]
git-2.54.0/t/helper/test-pack-deltas.c:69:27: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘delta_size’
git-2.54.0/t/helper/test-pack-deltas.c:46:13: enter_function: entry to ‘write_ref_delta’
git-2.54.0/t/helper/test-pack-deltas.c:57:12: branch_false: following ‘false’ branch...
git-2.54.0/t/helper/test-pack-deltas.c:60:50: branch_false: ...to here
git-2.54.0/t/helper/test-pack-deltas.c:63:12: branch_false: following ‘false’ branch...
git-2.54.0/t/helper/test-pack-deltas.c:66:21: branch_false: ...to here
git-2.54.0/t/helper/test-pack-deltas.c:66:21: call_function: calling ‘diff_delta’ from ‘write_ref_delta’
git-2.54.0/t/helper/test-pack-deltas.c:66:21: return_function: returning to ‘write_ref_delta’ from ‘diff_delta’
git-2.54.0/t/helper/test-pack-deltas.c:69:27: danger: use of uninitialized value ‘delta_size’ here
#   67|   			       buf, size, &delta_size, 0);
#   68|   
#   69|-> 	compressed_size = do_compress(&delta_buf, delta_size);
#   70|   
#   71|   	hdrlen = encode_in_pack_object_header(header, sizeof(header),

Error: CPPCHECK_WARNING (CWE-664): [#def212]
git-2.54.0/t/unit-tests/clar/clar.c:744: error[va_list_usedBeforeStarted]: va_list 'args_copy' used before va_start() was called.
#  742|   		int len;
#  743|   
#  744|-> 		va_copy(args_copy, args);
#  745|   		if ((len = p_vsnprintf(NULL, 0, description, args_copy)) < 0)
#  746|   			clar_abort("Failed to compute description.");

Error: CPPCHECK_WARNING (CWE-664): [#def213]
git-2.54.0/t/unit-tests/clar/clar.c:745: error[va_list_usedBeforeStarted]: va_list 'args_copy' used before va_start() was called.
#  743|   
#  744|   		va_copy(args_copy, args);
#  745|-> 		if ((len = p_vsnprintf(NULL, 0, description, args_copy)) < 0)
#  746|   			clar_abort("Failed to compute description.");
#  747|   		va_end(args_copy);

Error: CPPCHECK_WARNING (CWE-664): [#def214]
git-2.54.0/t/unit-tests/clar/clar.c:747: error[va_list_usedBeforeStarted]: va_list 'args_copy' used before va_start() was called.
#  745|   		if ((len = p_vsnprintf(NULL, 0, description, args_copy)) < 0)
#  746|   			clar_abort("Failed to compute description.");
#  747|-> 		va_end(args_copy);
#  748|   
#  749|   		if ((error->description = calloc(1, len + 1)) == NULL)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def215]
git-2.54.0/t/unit-tests/u-reftable-basics.c:200:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
git-2.54.0/t/unit-tests/u-reftable-basics.c:192:6: enter_function: entry to ‘test_reftable_basics__alloc_grow’
git-2.54.0/t/unit-tests/u-reftable-basics.c:197:9: call_function: calling ‘reftable_alloc_grow’ from ‘test_reftable_basics__alloc_grow’
git-2.54.0/t/unit-tests/u-reftable-basics.c:197:9: return_function: returning to ‘test_reftable_basics__alloc_grow’ from ‘reftable_alloc_grow’
git-2.54.0/t/unit-tests/u-reftable-basics.c:197:9: branch_true: following ‘true’ branch...
git-2.54.0/t/unit-tests/u-reftable-basics.c:197:9: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-basics.c:200:9: danger: dereference of NULL ‘reftable_alloc_grow(0, 1, 4, &alloc)’
#  198|   	cl_assert(arr != NULL);
#  199|   	cl_assert(alloc >= 1);
#  200|-> 	arr[0] = 42;
#  201|   
#  202|   	old_alloc = alloc;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def216]
git-2.54.0/t/unit-tests/u-reftable-basics.c:227:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘arr’
git-2.54.0/t/unit-tests/u-reftable-basics.c:219:6: enter_function: entry to ‘test_reftable_basics__alloc_grow_or_null’
git-2.54.0/t/unit-tests/u-reftable-basics.c:224:9: call_function: calling ‘reftable_alloc_grow’ from ‘test_reftable_basics__alloc_grow_or_null’
git-2.54.0/t/unit-tests/u-reftable-basics.c:224:9: return_function: returning to ‘test_reftable_basics__alloc_grow_or_null’ from ‘reftable_alloc_grow’
git-2.54.0/t/unit-tests/u-reftable-basics.c:224:9: branch_true: following ‘true’ branch...
git-2.54.0/t/unit-tests/u-reftable-basics.c:224:9: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-basics.c:227:9: danger: dereference of NULL ‘arr’
#  225|   	cl_assert(arr != NULL);
#  226|   	cl_assert(alloc >= 1);
#  227|-> 	arr[0] = 42;
#  228|   
#  229|   	old_alloc = alloc;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def217]
git-2.54.0/t/unit-tests/u-reftable-merged.c:183:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘out’
git-2.54.0/t/unit-tests/u-reftable-merged.c:105:6: enter_function: entry to ‘test_reftable_merged__refs’
git-2.54.0/t/unit-tests/u-reftable-merged.c:160:17: call_function: calling ‘merged_table_from_records’ from ‘test_reftable_merged__refs’
git-2.54.0/t/unit-tests/u-reftable-merged.c:160:17: return_function: returning to ‘test_reftable_merged__refs’ from ‘merged_table_from_records’
git-2.54.0/t/unit-tests/u-reftable-merged.c:176:16: branch_true: following ‘true’ branch (when ‘len != 100’)...
git-2.54.0/t/unit-tests/u-reftable-merged.c:177:44: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:179:20: branch_false: following ‘false’ branch...
git-2.54.0/t/unit-tests/u-reftable-merged.c:182:17: branch_false: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:182:17: branch_true: following ‘true’ branch...
git-2.54.0/t/unit-tests/u-reftable-merged.c:182:17: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:182:17: call_function: calling ‘reftable_alloc_grow’ from ‘test_reftable_merged__refs’
git-2.54.0/t/unit-tests/u-reftable-merged.c:182:17: return_function: returning to ‘test_reftable_merged__refs’ from ‘reftable_alloc_grow’
git-2.54.0/t/unit-tests/u-reftable-merged.c:182:17: branch_true: following ‘true’ branch...
git-2.54.0/t/unit-tests/u-reftable-merged.c:182:17: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:183:17: danger: dereference of NULL ‘out + len * 96’
#  181|   
#  182|   		cl_assert(REFTABLE_ALLOC_GROW(out, len + 1, cap) == 0);
#  183|-> 		out[len++] = ref;
#  184|   	}
#  185|   	reftable_iterator_destroy(&it);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def218]
git-2.54.0/t/unit-tests/u-reftable-merged.c:456:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘out’
git-2.54.0/t/unit-tests/u-reftable-merged.c:373:6: enter_function: entry to ‘test_reftable_merged__logs’
git-2.54.0/t/unit-tests/u-reftable-merged.c:432:44: call_function: calling ‘merged_table_from_log_records’ from ‘test_reftable_merged__logs’
git-2.54.0/t/unit-tests/u-reftable-merged.c:432:44: return_function: returning to ‘test_reftable_merged__logs’ from ‘merged_table_from_log_records’
git-2.54.0/t/unit-tests/u-reftable-merged.c:449:16: branch_true: following ‘true’ branch (when ‘len != 100’)...
git-2.54.0/t/unit-tests/u-reftable-merged.c:450:44: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:452:20: branch_false: following ‘false’ branch...
git-2.54.0/t/unit-tests/u-reftable-merged.c:455:17: branch_false: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:455:17: branch_true: following ‘true’ branch...
git-2.54.0/t/unit-tests/u-reftable-merged.c:455:17: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:455:17: call_function: calling ‘reftable_alloc_grow’ from ‘test_reftable_merged__logs’
git-2.54.0/t/unit-tests/u-reftable-merged.c:455:17: return_function: returning to ‘test_reftable_merged__logs’ from ‘reftable_alloc_grow’
git-2.54.0/t/unit-tests/u-reftable-merged.c:455:17: branch_true: following ‘true’ branch...
git-2.54.0/t/unit-tests/u-reftable-merged.c:455:17: branch_true: ...to here
git-2.54.0/t/unit-tests/u-reftable-merged.c:456:17: danger: dereference of NULL ‘out + len * 144’
#  454|   
#  455|   		cl_assert(REFTABLE_ALLOC_GROW(out, len + 1, cap) == 0);
#  456|-> 		out[len++] = log;
#  457|   	}
#  458|   	reftable_iterator_destroy(&it);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def219]
git-2.54.0/tempfile.c:273:9: warning[-Wanalyzer-malloc-leak]: leak of ‘fdopen(*tempfile.fd,  mode)’
git-2.54.0/tempfile.c:268:12: branch_false: following ‘false’ branch (when ‘tempfile’ is non-NULL)...
git-2.54.0/tempfile.c:270:13: branch_false: ...to here
git-2.54.0/tempfile.c:270:12: branch_false: following ‘false’ branch...
git-2.54.0/tempfile.c:273:31: branch_false: ...to here
git-2.54.0/tempfile.c:273:24: acquire_memory: allocated here
git-2.54.0/tempfile.c:273:9: danger: ‘fdopen(*tempfile.fd,  mode)’ leaks here; was allocated at [(5)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/4)
#  271|   		BUG("fdopen_tempfile() called for open object");
#  272|   
#  273|-> 	tempfile->fp = fdopen(tempfile->fd, mode);
#  274|   	return tempfile->fp;
#  275|   }

Error: GCC_ANALYZER_WARNING (CWE-775): [#def220]
git-2.54.0/tempfile.c:332:9: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(*tempfile.filename.buf, 513)’
git-2.54.0/tempfile.c:328:12: branch_false: following ‘false’ branch (when ‘tempfile’ is non-NULL)...
git-2.54.0/tempfile.c:330:18: branch_false: ...to here
git-2.54.0/tempfile.c:330:12: branch_false: following ‘false’ branch...
git-2.54.0/tempfile.c:332:29: branch_false: ...to here
git-2.54.0/tempfile.c:332:24: acquire_resource: opened here
git-2.54.0/tempfile.c:332:9: danger: ‘open(*tempfile.filename.buf, 513)’ leaks here; was opened at [(5)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/4)
#  330|   	if (0 <= tempfile->fd)
#  331|   		BUG("reopen_tempfile called for an open object");
#  332|-> 	tempfile->fd = open(tempfile->filename.buf, O_WRONLY|O_TRUNC);
#  333|   	return tempfile->fd;
#  334|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def221]
git-2.54.0/unpack-trees.c:2333:13: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ce’
git-2.54.0/unpack-trees.c:2476:12: enter_function: entry to ‘verify_absent_1’
git-2.54.0/unpack-trees.c:2487:12: branch_false: following ‘false’ branch...
git-2.54.0/unpack-trees.c:2497:44: branch_false: ...to here
git-2.54.0/unpack-trees.c:2498:12: branch_false: following ‘false’ branch...
git-2.54.0/unpack-trees.c:2500:17: branch_false: ...to here
git-2.54.0/unpack-trees.c:2500:17: branch_true: following ‘true’ branch...
git-2.54.0/unpack-trees.c:2504:24: branch_true: ...to here
git-2.54.0/unpack-trees.c:2505:20: branch_false: following ‘false’ branch...
git-2.54.0/unpack-trees.c:2508:29: branch_false: ...to here
git-2.54.0/unpack-trees.c:2508:28: branch_false: following ‘false’ branch...
git-2.54.0/unpack-trees.c:2513:39: branch_false: ...to here
git-2.54.0/unpack-trees.c:2513:39: call_function: calling ‘check_ok_to_remove’ from ‘verify_absent_1’
# 2331|   	int cnt = 0;
# 2332|   
# 2333|-> 	if (S_ISGITLINK(ce->ce_mode)) {
# 2334|   		struct object_id oid;
# 2335|   		int sub_head = repo_resolve_gitlink_ref(the_repository, ce->name,

Error: GCC_ANALYZER_WARNING (CWE-476): [#def222]
git-2.54.0/utf8.c:137:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘s’
git-2.54.0/utf8.c:804:5: enter_function: entry to ‘is_hfs_dotmailmap’
git-2.54.0/utf8.c:806:16: call_function: calling ‘is_hfs_dot_str’ from ‘is_hfs_dotmailmap’
#  135|   	if (remainder < 1) {
#  136|   		goto invalid;
#  137|-> 	} else if (*s < 0x80) {
#  138|   		/* 0xxxxxxx */
#  139|   		ch = *s;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def223]
git-2.54.0/utf8.h:46:16: warning[-Wanalyzer-null-argument]: use of NULL ‘in’ where non-null expected
git-2.54.0/builtin/fast-export.c:1307:5: enter_function: entry to ‘cmd_fast_export’
git-2.54.0/builtin/fast-export.c:1366:12: branch_false: following ‘false’ branch (when ‘argc != 1’)...
git-2.54.0/builtin/fast-export.c:1370:9: branch_false: ...to here
git-2.54.0/builtin/fast-export.c:1380:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/fast-export.c:1383:13: branch_false: ...to here
git-2.54.0/builtin/fast-export.c:1398:13: branch_false: following ‘false’ branch...
git-2.54.0/builtin/fast-export.c:1400:12: branch_false: ...to here
git-2.54.0/builtin/fast-export.c:1401:17: call_function: calling ‘import_marks’ from ‘cmd_fast_export’
git-2.54.0/builtin/fast-export.c:1401:17: return_function: returning to ‘cmd_fast_export’ from ‘import_marks’
git-2.54.0/builtin/fast-export.c:1411:12: branch_false: following ‘false’ branch...
git-2.54.0/builtin/fast-export.c:1414:9: branch_false: ...to here
git-2.54.0/builtin/fast-export.c:1420:16: branch_true: following ‘true’ branch...
git-2.54.0/builtin/fast-export.c:1421:17: branch_true: ...to here
git-2.54.0/builtin/fast-export.c:1421:17: call_function: calling ‘handle_commit’ from ‘cmd_fast_export’
#   44|   				    const char *in_encoding)
#   45|   {
#   46|-> 	return reencode_string_len(in, strlen(in),
#   47|   				   out_encoding, in_encoding,
#   48|   				   NULL);

Error: GCC_ANALYZER_WARNING (CWE-775): [#def224]
git-2.54.0/worktree.c:970:23: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘open(gitdir.buf, 0)’
git-2.54.0/worktree.c:949:12: branch_false: following ‘false’ branch...
git-2.54.0/worktree.c:954:9: branch_false: ...to here
git-2.54.0/worktree.c:955:12: branch_false: following ‘false’ branch...
git-2.54.0/worktree.c:958:18: branch_false: ...to here
git-2.54.0/worktree.c:958:12: branch_false: following ‘false’ branch...
git-2.54.0/worktree.c:963:19: branch_false: ...to here
git-2.54.0/worktree.c:963:14: acquire_resource: opened here
git-2.54.0/worktree.c:964:12: branch_false: following ‘false’ branch...
git-2.54.0/worktree.c:970:23: branch_false: ...to here
git-2.54.0/worktree.c:970:23: danger: ‘open(gitdir.buf, 0)’ leaks here; was opened at [(7)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/6)
#  968|   		goto done;
#  969|   	}
#  970|-> 	len = xsize_t(st.st_size);
#  971|   	path = xmallocz(len);
#  972|   

Scan Properties