Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘where’
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:36:1: enter_function: entry to ‘_dl_relocate_static_pie’
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:72:3: call_function: inlined call to ‘elf_get_dynamic_info’ from ‘_dl_relocate_static_pie’
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_true: following ‘true’ branch (when ‘r < end’)...
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc-static-pie.c:80:3: danger: dereference of NULL ‘where + (long unsigned int)i * 8’
#   78|     /* Relocate ourselves so we can do normal function calls and
#   79|        data access using the global offset table.  */
#   80|->   ELF_DYNAMIC_RELOCATE (main_map, NULL, 0, 0, 0);
#   81|     main_map->l_relocated = 1;
#   82|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc.c:296:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘where’
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc.c:341:1: enter_function: entry to ‘_dl_relocate_object’
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc.c:344:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc.c:346:3: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/elf/dl-reloc.c:346:3: call_function: calling ‘_dl_relocate_object_no_relro’ from ‘_dl_relocate_object’
#  294|       /* Do the actual relocation of the object's GOT and other data.  */
#  295|   
#  296|->     ELF_DYNAMIC_RELOCATE (l, scope, lazy, consider_profiling, skip_ifunc);
#  297|   
#  298|       if ((consider_profiling || consider_symbind)

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
glibc-2.43-8-g48f5a05a7a/io/ftw.c:263:1: warning[-Wanalyzer-malloc-leak]: leak of ‘newp’
glibc-2.43-8-g48f5a05a7a/io/ftw.c:836:1: enter_function: entry to ‘__new_nftw’
glibc-2.43-8-g48f5a05a7a/io/ftw.c:838:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/io/ftw.c:844:10: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/io/ftw.c:844:10: call_function: calling ‘ftw_startup’ from ‘__new_nftw’
#  261|     newp->ino = st->st_ino;
#  262|     return __tsearch (newp, &data->known_objects, object_compare) ? 0 : -1;
#  263|-> }
#  264|   
#  265|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def4]
glibc-2.43-8-g48f5a05a7a/io/ftw.c:272:10: warning[-Wanalyzer-malloc-leak]: leak of ‘newp’
glibc-2.43-8-g48f5a05a7a/io/ftw.c:836:1: enter_function: entry to ‘__new_nftw’
glibc-2.43-8-g48f5a05a7a/io/ftw.c:838:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/io/ftw.c:844:10: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/io/ftw.c:844:10: call_function: calling ‘ftw_startup’ from ‘__new_nftw’
#  270|     obj.dev = st->st_dev;
#  271|     obj.ino = st->st_ino;
#  272|->   return __tfind (&obj, &data->known_objects, object_compare) != NULL;
#  273|   }
#  274|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def5]
glibc-2.43-8-g48f5a05a7a/string/bits/string_fortified.h:29:10: warning[-Wanalyzer-null-argument]: use of NULL ‘address’ where non-null expected
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:291:1: enter_function: entry to ‘__check_pf’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:315:10: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:318:11: call_function: inlined call to ‘memset’ from ‘__check_pf’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:323:14: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:324:18: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:323:15: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:326:38: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:326:20: call_function: calling ‘make_request’ from ‘__check_pf’
#argument 2 of ‘__builtin___memcpy_chk’ must be non-null
#   27|   	       size_t __len))
#   28|   {
#   29|->   return __builtin___memcpy_chk (__dest, __src, __len,
#   30|   				 __glibc_objsize0 (__dest));
#   31|   }

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1135:8: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(192)’
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1169:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1172:6: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1172:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1178:3: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1135:8: danger: ‘xmalloc(192)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
# 1133|     };
# 1134|   
# 1135|->   if (!config.disable_redirect)
# 1136|       resolv_test_init ();
# 1137|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def7]
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1135:8: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(288)’
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1169:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1172:6: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1172:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1178:3: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/support/resolv_test.c:1135:8: danger: ‘xmalloc(288)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0)
# 1133|     };
# 1134|   
# 1135|->   if (!config.disable_redirect)
# 1136|       resolv_test_init ();
# 1137|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def8]
glibc-2.43-8-g48f5a05a7a/support/timespec.c:88:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘norm.<Uc1e0>’
glibc-2.43-8-g48f5a05a7a/support/timespec.c:84:6: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/support/timespec.c:86:20: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/support/timespec.c:88:13: danger: use of uninitialized value ‘norm.<Uc1e0>’ here
#   86|        norm.tv_sec = (time.tv_nsec < 0) ? TYPE_MINIMUM (time_t): TYPE_MAXIMUM (time_t);
#   87|        norm.tv_nsec = (time.tv_nsec < 0) ? -1 * (TIMESPEC_HZ - 1) : TIMESPEC_HZ - 1;
#   88|->      return norm;
#   89|      }
#   90|     norm.tv_nsec = time.tv_nsec % TIMESPEC_HZ;

Error: GCC_ANALYZER_WARNING (CWE-457): [#def9]
glibc-2.43-8-g48f5a05a7a/support/timespec.c:91:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘norm.<Uc1e0>’
glibc-2.43-8-g48f5a05a7a/support/timespec.c:84:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/support/timespec.c:90:18: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/support/timespec.c:91:10: danger: use of uninitialized value ‘norm.<Uc1e0>’ here
#   89|      }
#   90|     norm.tv_nsec = time.tv_nsec % TIMESPEC_HZ;
#   91|->   return norm;
#   92|   }
#   93|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def10]
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:242:35: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘address’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:291:1: enter_function: entry to ‘__check_pf’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:315:10: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:318:11: call_function: inlined call to ‘memset’ from ‘__check_pf’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:323:14: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:324:18: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:323:15: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:326:38: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:326:20: call_function: calling ‘make_request’ from ‘__check_pf’
#  240|   		  info->addr[1] = 0;
#  241|   		  info->addr[2] = htonl (0xffff);
#  242|-> 		  info->addr[3] = *(const in_addr_t *) address;
#  243|   		}
#  244|   	      else

Error: GCC_ANALYZER_WARNING (CWE-416): [#def11]
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:242:35: warning[-Wanalyzer-use-after-free]: use after ‘free’ of ‘address’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:291:1: enter_function: entry to ‘__check_pf’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:315:10: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:318:11: call_function: inlined call to ‘memset’ from ‘__check_pf’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:323:14: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:324:18: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:323:15: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:326:38: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/check_pf.c:326:20: call_function: calling ‘make_request’ from ‘__check_pf’
#  240|   		  info->addr[1] = 0;
#  241|   		  info->addr[2] = htonl (0xffff);
#  242|-> 		  info->addr[3] = *(const in_addr_t *) address;
#  243|   		}
#  244|   	      else

Error: GCC_ANALYZER_WARNING (CWE-457): [#def12]
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:67:20: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ts64.<U7640>’
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:34:6: branch_false: following ‘false’ branch (when ‘clock_id != 3’)...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:36:6: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:51:6: branch_false: following ‘false’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:51:6: branch_false: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:64:10: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:66:15: branch_true: ...to here
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:66:14: branch_true: following ‘true’ branch...
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:67:20: danger: use of uninitialized value ‘ts64.<U7640>’ here
#   65|   	{
#   66|   	  if (r == -EINTR && rem != NULL && (flags & TIMER_ABSTIME) == 0)
#   67|-> 	    *rem = valid_timespec_to_timespec64 (tr32);
#   68|   	}
#   69|       }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def13]
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/clock_nanosleep.c:84:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ts64.<U7640>’
#   82|     struct __timespec64 treq64, trem64;
#   83|   
#   84|->   treq64 = valid_timespec_to_timespec64 (*req);
#   85|     r = __clock_nanosleep_time64 (clock_id, flags, &treq64,
#   86|                                   rem != NULL ? &trem64 : NULL);

Error: GCC_ANALYZER_WARNING (CWE-457): [#def14]
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/nanosleep.c:41:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ts64.<U7640>’
#   39|     struct __timespec64 treq64, trem64;
#   40|   
#   41|->   treq64 = valid_timespec_to_timespec64 (*req);
#   42|     int ret = __nanosleep64 (&treq64, rem != NULL ? &trem64 : NULL);
#   43|   

Error: COMPILER_WARNING: [#def15]
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/include/sys/mount.h:22: included_from: Included from here.
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/umount.c:18: included_from: Included from here.
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/sys/mount.h:268:9: warning: ‘OPEN_TREE_CLONE’ redefined
#  268 | #define OPEN_TREE_CLONE    1         /* Clone the target tree and attach the clone */
#      |         ^~~~~~~~~~~~~~~
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/sys/mount.h:32: included_from: Included from here.
/usr/include/linux/mount.h:64:9: note: this is the location of the previous definition
#   64 | #define OPEN_TREE_CLONE         (1 << 0)        /* Clone the target tree and attach the clone */
#      |         ^~~~~~~~~~~~~~~
#  266|   
#  267|   /* open_tree flags.  */
#  268|-> #define OPEN_TREE_CLONE    1         /* Clone the target tree and attach the clone */
#  269|   #define OPEN_TREE_CLOEXEC  O_CLOEXEC /* Close the file on execve() */
#  270|   

Error: COMPILER_WARNING: [#def16]
glibc-2.43-8-g48f5a05a7a/sysdeps/unix/sysv/linux/sys/mount.h:268:9: warning[warning]: ‘OPEN_TREE_CLONE’ redefined
#  266|   
#  267|   /* open_tree flags.  */
#  268|-> #define OPEN_TREE_CLONE    1         /* Clone the target tree and attach the clone */
#  269|   #define OPEN_TREE_CLOEXEC  O_CLOEXEC /* Close the file on execve() */
#  270|   

Error: CPPCHECK_WARNING (CWE-457): [#def17]
glibc-2.43-8-g48f5a05a7a/timezone/zdump.c:541: error[uninitvar]: Uninitialized variable: hi
#  539|   				       loend + 1 != hiend && !*hiend)) {
#  540|   				cutloyear = lo;
#  541|-> 				cuthiyear = hi;
#  542|   			} else {
#  543|   				fprintf(stderr, _("%s: wild -c argument %s\n"),

Error: CPPCHECK_WARNING (CWE-369): [#def18]
glibc-2.43-8-g48f5a05a7a/timezone/zic.c:1270: error[zerodiv]: Division by zero.
# 1268|       uint_fast64_t rand_max = RAND_MAX,
# 1269|         nrand = rand_max < UINT_FAST64_MAX ? rand_max + 1 : 0,
# 1270|->       rmod = INT_MAX < UINT_FAST64_MAX ? 0 : UINT_FAST64_MAX / nrand + 1,
# 1271|         r = 0, rmax = 0;
# 1272|   

Error: CPPCHECK_WARNING (CWE-457): [#def19]
glibc-2.43-8-g48f5a05a7a/timezone/zic.c:2001: warning[uninitvar]: Uninitialized variables: z.z_isdst, z.z_save, z.z_rules, z.z_nrules
# 1999|   	}
# 2000|   	zones = growalloc(zones, sizeof *zones, nzones, &nzones_alloc);
# 2001|-> 	zones[nzones++] = z;
# 2002|   	/*
# 2003|   	** If there was an UNTIL field on this line,

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-148.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameglibc-2.43.9000-18.fc45
diffbase-store-results-to/tmp/tmp4dz0m25v/glibc-2.43.9000-18.fc45.tar.xz
diffbase-time-created2026-06-01 14:03:29
diffbase-time-finished2026-06-01 15:44:36
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp4dz0m25v/glibc-2.43.9000-18.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp4dz0m25v/glibc-2.43.9000-18.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-148.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameglibc-2.43-2.fc44
store-results-to/tmp/tmpxs4w60i_/glibc-2.43-2.fc44.tar.xz
time-created2026-06-01 12:23:11
time-finished2026-06-01 14:02:10
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpxs4w60i_/glibc-2.43-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpxs4w60i_/glibc-2.43-2.fc44.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9