Error: CPPCHECK_WARNING (CWE-457): [#def1] gtk-4.23.0/demos/icon-editor/shape-editor.c:1158: error[legacyUninitvar]: Uninitialized variable: attr # 1156| return b1 && b2 && # 1157| can_edit_shape (self->shape) && # 1158|-> svg_property_applies_to (attr, svg_element_get_type (self->shape)); # 1159| } # 1160| Error: GCC_ANALYZER_WARNING (CWE-457): [#def2] gtk-4.23.0/gdk/gdkdmabuf.c:155:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_data[0]’ gtk-4.23.0/gdk/gdkdmabuf.c:147:6: branch_false: following ‘false’ branch... gtk-4.23.0/gdk/gdkdmabuf.c:147:6: branch_false: ...to here gtk-4.23.0/gdk/gdkdmabuf.c:150:15: branch_true: following ‘true’ branch... gtk-4.23.0/gdk/gdkdmabuf.c:152:11: branch_true: ...to here gtk-4.23.0/gdk/gdkdmabuf.c:152:10: branch_true: following ‘true’ branch... gtk-4.23.0/gdk/gdkdmabuf.c:155:25: branch_true: ...to here gtk-4.23.0/gdk/gdkdmabuf.c:155:25: danger: use of uninitialized value ‘src_data[0]’ here # 153| { # 154| g_assert (i > 0); # 155|-> src_data[i] = src_data[0]; # 156| sizes[i] = sizes[0]; # 157| continue; Error: CPPCHECK_WARNING (CWE-369): [#def3] gtk-4.23.0/gsk/gpu/gskgpucachedatlas.c:70: error[zerodiv]: Division by zero. # 68| total += ((GskGpuCached *) self)->pixels; # 69| } # 70|-> g_string_append_printf (string, "%zu%%", used_total * 100 / total); # 71| # 72| g_string_append (string, " … "); Error: CPPCHECK_WARNING (CWE-758): [#def4] gtk-4.23.0/gsk/gpu/gskgpucachedtile.c:114: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour # 112| self->tile_id ^ # 113| (self->lod_level << 24) ^ # 114|-> (self->lod_linear << 31); # 115| } # 116| Error: GCC_ANALYZER_WARNING (CWE-476): [#def5] gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:431:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘self’ gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3959:1: enter_function: entry to ‘gsk_container_node_occlusion’ gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3969:6: branch_false: following ‘false’ branch... gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3972:8: branch_false: ...to here gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3972:24: branch_true: following ‘true’ branch (when ‘i > 0’)... gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3974:16: branch_true: ...to here gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3975:10: branch_false: following ‘false’ branch... gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3979:6: branch_false: following ‘false’ branch (when ‘i >= 0’)... gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3982:3: branch_false: ...to here gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3982:13: branch_true: following ‘true’ branch... gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3983:54: branch_true: ...to here gtk-4.23.0/gsk/gpu/gskgpunodeprocessor.c:3983:5: call_function: calling ‘gsk_gpu_node_processor_add_node’ from ‘gsk_container_node_occlusion’ # 429| gsize pos) # 430| { # 431|-> gsk_gpu_frame_start_node (self->frame, node, pos); # 432| # 433| gsk_gpu_node_processor_add_node_untracked (self, node); Error: GCC_ANALYZER_WARNING (CWE-476): [#def6] gtk-4.23.0/gtk/gtkimcontextwayland.c:169:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’ gtk-4.23.0/gtk/gtkimcontextwayland.c:1245:1: enter_function: entry to ‘gtk_im_context_wayland_commit’ gtk-4.23.0/gtk/gtkimcontextwayland.c:1248:3: call_function: calling ‘notify_im_change’ from ‘gtk_im_context_wayland_commit’ # 167| global = gtk_im_context_wayland_get_global (context); # 168| # 169|-> if (zwp_text_input_v3_get_version (global->text_input) < # 170| ZWP_TEXT_INPUT_V3_SET_AVAILABLE_ACTIONS_SINCE_VERSION) # 171| return; Error: COMPILER_WARNING (CWE-476): [#def7] gtk-4.23.0/gtk/svg/gtksvgenum.c:80:11: warning[-Wnull-dereference]: potential null pointer dereference # 80 | return e->value; # | ~^~~~~~~ # 78| { # 79| const SvgEnum *e = (const SvgEnum *) value; # 80|-> return e->value; # 81| } # 82| Error: COMPILER_WARNING (CWE-476): [#def8] gtk-4.23.0/gtk/svg/gtksvgerror.c:46:15: warning[-Wnull-dereference]: potential null pointer dereference # 46 | dest->input = g_strdup (src->input); # 44| g_assert (dest != NULL); # 45| g_assert (src != NULL); # 46|-> dest->input = g_strdup (src->input); # 47| dest->element = g_strdup (src->element); # 48| dest->attribute = g_strdup (src->attribute); Error: COMPILER_WARNING (CWE-476): [#def9] gtk-4.23.0/gtk/svg/gtksvgerror.c:47:17: warning[-Wnull-dereference]: potential null pointer dereference # 47 | dest->element = g_strdup (src->element); # 45| g_assert (src != NULL); # 46| dest->input = g_strdup (src->input); # 47|-> dest->element = g_strdup (src->element); # 48| dest->attribute = g_strdup (src->attribute); # 49| dest->start = src->start; Error: COMPILER_WARNING (CWE-476): [#def10] gtk-4.23.0/gtk/svg/gtksvgerror.c:48:19: warning[-Wnull-dereference]: potential null pointer dereference # 48 | dest->attribute = g_strdup (src->attribute); # 46| dest->input = g_strdup (src->input); # 47| dest->element = g_strdup (src->element); # 48|-> dest->attribute = g_strdup (src->attribute); # 49| dest->start = src->start; # 50| dest->end = src->end; Error: COMPILER_WARNING (CWE-476): [#def11] gtk-4.23.0/gtk/svg/gtksvgerror.c:49:15: warning[-Wnull-dereference]: potential null pointer dereference # 49 | dest->start = src->start; # | ~~~~~~~~~~~~^~~~~~~~~~~~ # 47| dest->element = g_strdup (src->element); # 48| dest->attribute = g_strdup (src->attribute); # 49|-> dest->start = src->start; # 50| dest->end = src->end; # 51| } Error: COMPILER_WARNING (CWE-476): [#def12] gtk-4.23.0/gtk/svg/gtksvgerror.c:50:13: warning[-Wnull-dereference]: potential null pointer dereference # 50 | dest->end = src->end; # | ~~~~~~~~~~^~~~~~~~~~ # 48| dest->attribute = g_strdup (src->attribute); # 49| dest->start = src->start; # 50|-> dest->end = src->end; # 51| } # 52| Error: COMPILER_WARNING (CWE-476): [#def13] gtk-4.23.0/gtk/svg/gtksvgerror.c:57:15: warning[-Wnull-dereference]: potential null pointer dereference # 57 | g_free (priv->input); # 55| { # 56| g_assert (priv != NULL); # 57|-> g_free (priv->input); # 58| g_free (priv->element); # 59| g_free (priv->attribute); Error: COMPILER_WARNING (CWE-476): [#def14] gtk-4.23.0/gtk/svg/gtksvgerror.c:58:15: warning[-Wnull-dereference]: potential null pointer dereference # 58 | g_free (priv->element); # 56| g_assert (priv != NULL); # 57| g_free (priv->input); # 58|-> g_free (priv->element); # 59| g_free (priv->attribute); # 60| } Error: COMPILER_WARNING (CWE-476): [#def15] gtk-4.23.0/gtk/svg/gtksvgerror.c:59:15: warning[-Wnull-dereference]: potential null pointer dereference # 59 | g_free (priv->attribute); # 57| g_free (priv->input); # 58| g_free (priv->element); # 59|-> g_free (priv->attribute); # 60| } # 61| Error: COMPILER_WARNING (CWE-476): [#def16] gtk-4.23.0/gtk/svg/gtksvgerror.c: scope_hint: In function ‘gtk_svg_error_set_element’ gtk-4.23.0/gtk/svg/gtksvgerror.c:70:17: warning[-Wnull-dereference]: potential null pointer dereference # 70 | priv->element = g_strdup (element); # 68| GtkSvgErrorPrivate *priv = gtk_svg_error_get_private (error); # 69| g_assert (error->domain == GTK_SVG_ERROR); # 70|-> priv->element = g_strdup (element); # 71| } # 72| Error: COMPILER_WARNING (CWE-476): [#def17] gtk-4.23.0/gtk/svg/gtksvgerror.c: scope_hint: In function ‘gtk_svg_error_set_attribute’ gtk-4.23.0/gtk/svg/gtksvgerror.c:79:19: warning[-Wnull-dereference]: potential null pointer dereference # 79 | priv->attribute = g_strdup (attribute); # 77| GtkSvgErrorPrivate *priv = gtk_svg_error_get_private (error); # 78| g_assert (error->domain == GTK_SVG_ERROR); # 79|-> priv->attribute = g_strdup (attribute); # 80| } # 81| Error: COMPILER_WARNING (CWE-476): [#def18] gtk-4.23.0/gtk/svg/gtksvgerror.c:90:17: warning[-Wnull-dereference]: potential null pointer dereference # 90 | priv->start = *start; # | ~~~~~~~~~~~~^~~~~~~~ # 88| g_assert (error->domain == GTK_SVG_ERROR); # 89| if (start) # 90|-> priv->start = *start; # 91| if (end) # 92| priv->end = *end; Error: COMPILER_WARNING (CWE-476): [#def19] gtk-4.23.0/gtk/svg/gtksvgerror.c:92:15: warning[-Wnull-dereference]: potential null pointer dereference # 92 | priv->end = *end; # | ~~~~~~~~~~^~~~~~ # 90| priv->start = *start; # 91| if (end) # 92|-> priv->end = *end; # 93| } # 94| Error: COMPILER_WARNING (CWE-476): [#def20] gtk-4.23.0/gtk/svg/gtksvgerror.c: scope_hint: In function ‘gtk_svg_error_set_input’ gtk-4.23.0/gtk/svg/gtksvgerror.c:101:15: warning[-Wnull-dereference]: potential null pointer dereference # 101 | priv->input = g_strdup (input); # 99| GtkSvgErrorPrivate *priv = gtk_svg_error_get_private (error); # 100| g_assert (error->domain == GTK_SVG_ERROR); # 101|-> priv->input = g_strdup (input); # 102| } # 103| Error: COMPILER_WARNING (CWE-476): [#def21] gtk-4.23.0/gtk/svg/gtksvgkeyword.c:188:15: warning[-Wnull-dereference]: potential null pointer dereference # 188 | return value->class == &SVG_KEYWORD_CLASS && # | ~~~~~^~~~~~~ # 186| svg_value_is_unset (const SvgValue *value) # 187| { # 188|-> return value->class == &SVG_KEYWORD_CLASS && # 189| ((const SvgKeyword *) value)->keyword == SVG_UNSET; # 190| } Error: COMPILER_WARNING (CWE-476): [#def22] gtk-4.23.0/gtk/svg/gtksvgnumber.c:560:11: warning[-Wnull-dereference]: potential null pointer dereference # 560 | return n->unit; # | ~^~~~~~ # 558| g_assert (value->class == &SVG_NUMBER_CLASS); # 559| # 560|-> return n->unit; # 561| } # 562|
| analyzer-version-clippy | 1.95.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.95.0 |
| diffbase-analyzer-version-cppcheck | 2.20.0 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-137.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | gtk4-4.22.1-2.fc44 |
| diffbase-store-results-to | /tmp/tmptrhu0sjm/gtk4-4.22.1-2.fc44.tar.xz |
| diffbase-time-created | 2026-06-01 12:46:26 |
| diffbase-time-finished | 2026-06-01 13:12:29 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmptrhu0sjm/gtk4-4.22.1-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmptrhu0sjm/gtk4-4.22.1-2.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.5.20260529.133039.g6f3b5c6-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-137.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | gtk4-4.23.0-1.fc45 |
| store-results-to | /tmp/tmpbaguy1id/gtk4-4.23.0-1.fc45.tar.xz |
| time-created | 2026-06-01 13:12:53 |
| time-finished | 2026-06-01 13:40:31 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpbaguy1id/gtk4-4.23.0-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpbaguy1id/gtk4-4.23.0-1.fc45.src.rpm' |
| tool-version | csmock-3.8.5.20260529.133039.g6f3b5c6-1.el9 |