Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-457): [#def1]
libxml2-2.13.9/HTMLparser.c:2504: warning[uninitvar]: Uninitialized variable: loc
# 2502|       }
# 2503|   
# 2504|->     ret = xmlDictLookup(ctxt->dict, loc, i);
# 2505|       if (ret == NULL)
# 2506|           htmlErrMemory(ctxt);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
libxml2-2.13.9/globals.c:867:29: warning[-Wanalyzer-malloc-leak]: leak of 'xmlGetThreadLocalStorage(0)'
libxml2-2.13.9/globals.c:906:1: enter_function: entry to 'xmlGetLocalRngState'
libxml2-2.13.9/globals.c:907:8: branch_false: following 'false' branch...
libxml2-2.13.9/globals.c:910:16: branch_false: ...to here
libxml2-2.13.9/globals.c:910:16: call_function: calling 'xmlGetThreadLocalStorage' from 'xmlGetLocalRngState'
libxml2-2.13.9/globals.c:910:16: return_function: returning to 'xmlGetLocalRngState' from 'xmlGetThreadLocalStorage'
libxml2-2.13.9/globals.c:867:29: danger: 'xmlGetThreadLocalStorage(0)' leaks here; was allocated at [(10)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/9)
#  865|           xmlInitGlobalState(gs);
#  866|   #elif defined(HAVE_POSIX_THREADS)
#  867|->     gs = (xmlGlobalState *) pthread_getspecific(globalkey);
#  868|       if (gs == NULL)
#  869|           gs = xmlNewGlobalState(allowFailure);

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
libxml2-2.13.9/globals.c:867:29: warning[-Wanalyzer-malloc-leak]: leak of 'xmlGetThreadLocalStorage(1)'
libxml2-2.13.9/globals.c:975:1: enter_function: entry to 'xmlCheckThreadLocalStorage'
libxml2-2.13.9/globals.c:977:8: branch_true: following 'true' branch...
libxml2-2.13.9/globals.c:977:42: branch_true: ...to here
libxml2-2.13.9/globals.c:977:42: call_function: calling 'xmlGetThreadLocalStorage' from 'xmlCheckThreadLocalStorage'
libxml2-2.13.9/globals.c:977:42: return_function: returning to 'xmlCheckThreadLocalStorage' from 'xmlGetThreadLocalStorage'
libxml2-2.13.9/globals.c:867:29: danger: 'xmlGetThreadLocalStorage(1)' leaks here; was allocated at [(10)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/9)
#  865|           xmlInitGlobalState(gs);
#  866|   #elif defined(HAVE_POSIX_THREADS)
#  867|->     gs = (xmlGlobalState *) pthread_getspecific(globalkey);
#  868|       if (gs == NULL)
#  869|           gs = xmlNewGlobalState(allowFailure);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
libxml2-2.13.9/list.c:280:5: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
libxml2-2.13.9/list.c:268:1: enter_function: entry to 'xmlListInsert'
libxml2-2.13.9/list.c:274:15: call_function: calling 'xmlListLowerSearch' from 'xmlListInsert'
libxml2-2.13.9/list.c:274:15: return_function: returning to 'xmlListInsert' from 'xmlListLowerSearch'
libxml2-2.13.9/list.c:277:8: branch_false: following 'false' branch...
libxml2-2.13.9/list.c:279:5: branch_false: ...to here
libxml2-2.13.9/list.c:280:5: danger: dereference of NULL 'xmlListLowerSearch(l,  data)'
#  278|           return (1);
#  279|       lkNew->data = data;
#  280|->     lkPlace = lkPlace->prev;
#  281|       lkNew->next = lkPlace->next;
#  282|       (lkPlace->next)->prev = lkNew;

Error: CPPCHECK_WARNING (CWE-457): [#def5]
libxml2-2.13.9/parser.c:8660: warning[uninitvar]: Uninitialized variable: p.hashValue
# 8658|       }
# 8659|   
# 8660|->     *prefix = p;
# 8661|       return(l);
# 8662|   }

Error: CPPCHECK_WARNING (CWE-401): [#def6]
libxml2-2.13.9/xmlmemory.c:287: error[memleak]: Memory leak: p
#  285|       memcpy(s, str, size);
#  286|   
#  287|->     return(s);
#  288|   }
#  289|   

Error: CPPCHECK_WARNING (CWE-457): [#def7]
libxml2-2.13.9/xpath.c:8503: warning[uninitvar]: Uninitialized variable: theLang
# 8501|           cur = cur->parent;
# 8502|       }
# 8503|->     if ((theLang != NULL) && (lang != NULL)) {
# 8504|           for (i = 0;lang[i] != 0;i++)
# 8505|               if (toupper(lang[i]) != toupper(theLang[i]))

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-174.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelibxml2-2.12.10-6.fc44
diffbase-store-results-to/tmp/tmpjpfumcy1/libxml2-2.12.10-6.fc44.tar.xz
diffbase-time-created2026-06-01 14:51:31
diffbase-time-finished2026-06-01 14:55:42
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpjpfumcy1/libxml2-2.12.10-6.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpjpfumcy1/libxml2-2.12.10-6.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-174.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelibxml2-2.13.9-1.fc45
store-results-to/tmp/tmpetjb8u_w/libxml2-2.13.9-1.fc45.tar.xz
time-created2026-06-01 14:56:00
time-finished2026-06-01 14:59:44
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpetjb8u_w/libxml2-2.13.9-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpetjb8u_w/libxml2-2.13.9-1.fc45.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9