Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-775): [#def1]
libuv-v1.52.1/src/unix/pipe.c:174:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*handle.io_watcher.fd’
libuv-v1.52.1/src/unix/pipe.c:154:6: branch_false: following ‘false’ branch...
libuv-v1.52.1/src/unix/pipe.c:157:7: branch_false: ...to here
libuv-v1.52.1/src/unix/pipe.c:157:6: branch_false: following ‘false’ branch...
libuv-v1.52.1/src/unix/pipe.c:169:7: branch_false: ...to here
libuv-v1.52.1/src/unix/pipe.c:169:6: branch_false: following ‘false’ branch...
libuv-v1.52.1/src/unix/pipe.c:172:3: branch_false: ...to here
libuv-v1.52.1/src/unix/pipe.c:174:10: danger: ‘*handle.io_watcher.fd’ leaks here
#  172|     handle->connection_cb = cb;
#  173|     uv__io_cb_set(&handle->io_watcher, UV__SERVER_IO);
#  174|->   return uv__io_start(handle->loop, &handle->io_watcher, POLLIN);
#  175|   }
#  176|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def2]
libuv-v1.52.1/src/unix/tcp.c:449:10: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘*tcp.io_watcher.fd’
libuv-v1.52.1/src/unix/tcp.c:421:5: enter_function: entry to ‘uv__tcp_listen’
libuv-v1.52.1/src/unix/tcp.c:425:6: branch_false: following ‘false’ branch...
libuv-v1.52.1/src/unix/tcp.c:436:9: branch_false: ...to here
libuv-v1.52.1/src/unix/tcp.c:436:9: call_function: calling ‘maybe_new_socket’ from ‘uv__tcp_listen’
libuv-v1.52.1/src/unix/tcp.c:436:9: return_function: returning to ‘uv__tcp_listen’ from ‘maybe_new_socket’
libuv-v1.52.1/src/unix/tcp.c:437:6: branch_false: following ‘false’ branch...
libuv-v1.52.1/src/unix/tcp.c:440:7: branch_false: ...to here
libuv-v1.52.1/src/unix/tcp.c:440:6: branch_false: following ‘false’ branch...
libuv-v1.52.1/src/unix/tcp.c:443:3: branch_false: ...to here
libuv-v1.52.1/src/unix/tcp.c:449:10: danger: ‘*tcp.io_watcher.fd’ leaks here
#  447|     uv__io_cb_set(&tcp->io_watcher, UV__SERVER_IO);
#  448|   
#  449|->   return uv__io_start(tcp->loop, &tcp->io_watcher, POLLIN);
#  450|   }
#  451|   

Error: GCC_ANALYZER_WARNING (CWE-775): [#def3]
libuv-v1.52.1/test/test-poll.c:473:7: warning[-Wanalyzer-fd-leak]: leak of file descriptor ‘create_bound_socket(addr)’
libuv-v1.52.1/test/test-poll.c:523:13: enter_function: entry to ‘start_server’
libuv-v1.52.1/test/test-poll.c:529:3: branch_false: following ‘false’ branch (when ‘eval_a == 0’)...
libuv-v1.52.1/test/test-poll.c:530:10: branch_false: ...to here
libuv-v1.52.1/test/test-poll.c:530:10: call_function: calling ‘create_bound_socket’ from ‘start_server’
libuv-v1.52.1/test/test-poll.c:530:10: return_function: returning to ‘start_server’ from ‘create_bound_socket’
libuv-v1.52.1/test/test-poll.c:531:13: call_function: calling ‘create_server_context’ from ‘start_server’
libuv-v1.52.1/test/test-poll.c:531:13: return_function: returning to ‘start_server’ from ‘create_server_context’
libuv-v1.52.1/test/test-poll.c:473:7: danger: ‘create_bound_socket(addr)’ leaks here
#  471|     context->connections = 0;
#  472|   
#  473|->   r = uv_poll_init_socket(uv_default_loop(), &context->poll_handle, sock);
#  474|     context->poll_handle.data = context;
#  475|     ASSERT_OK(r);

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-182.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelibuv-1.51.0-3.fc44
diffbase-store-results-to/tmp/tmp4ifovbpm/libuv-1.51.0-3.fc44.tar.xz
diffbase-time-created2026-06-01 14:56:25
diffbase-time-finished2026-06-01 14:58:58
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp4ifovbpm/libuv-1.51.0-3.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp4ifovbpm/libuv-1.51.0-3.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-182.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibuv-1.52.1-1.fc45
store-results-to/tmp/tmpm42r2daz/libuv-1.52.1-1.fc45.tar.xz
time-created2026-06-01 14:59:09
time-finished2026-06-01 15:01:10
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpm42r2daz/libuv-1.52.1-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpm42r2daz/libuv-1.52.1-1.fc45.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9