Error: CPPCHECK_WARNING (CWE-457): [#def1] libxml2-2.13.9/HTMLparser.c:2504: warning[uninitvar]: Uninitialized variable: loc # 2502| } # 2503| # 2504|-> ret = xmlDictLookup(ctxt->dict, loc, i); # 2505| if (ret == NULL) # 2506| htmlErrMemory(ctxt); Error: GCC_ANALYZER_WARNING (CWE-401): [#def2] libxml2-2.13.9/globals.c:867:29: warning[-Wanalyzer-malloc-leak]: leak of 'xmlGetThreadLocalStorage(0)' libxml2-2.13.9/globals.c:906:1: enter_function: entry to 'xmlGetLocalRngState' libxml2-2.13.9/globals.c:907:8: branch_false: following 'false' branch... libxml2-2.13.9/globals.c:910:16: branch_false: ...to here libxml2-2.13.9/globals.c:910:16: call_function: calling 'xmlGetThreadLocalStorage' from 'xmlGetLocalRngState' libxml2-2.13.9/globals.c:910:16: return_function: returning to 'xmlGetLocalRngState' from 'xmlGetThreadLocalStorage' libxml2-2.13.9/globals.c:867:29: danger: 'xmlGetThreadLocalStorage(0)' leaks here; was allocated at [(10)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/9) # 865| xmlInitGlobalState(gs); # 866| #elif defined(HAVE_POSIX_THREADS) # 867|-> gs = (xmlGlobalState *) pthread_getspecific(globalkey); # 868| if (gs == NULL) # 869| gs = xmlNewGlobalState(allowFailure); Error: GCC_ANALYZER_WARNING (CWE-401): [#def3] libxml2-2.13.9/globals.c:867:29: warning[-Wanalyzer-malloc-leak]: leak of 'xmlGetThreadLocalStorage(1)' libxml2-2.13.9/globals.c:975:1: enter_function: entry to 'xmlCheckThreadLocalStorage' libxml2-2.13.9/globals.c:977:8: branch_true: following 'true' branch... libxml2-2.13.9/globals.c:977:42: branch_true: ...to here libxml2-2.13.9/globals.c:977:42: call_function: calling 'xmlGetThreadLocalStorage' from 'xmlCheckThreadLocalStorage' libxml2-2.13.9/globals.c:977:42: return_function: returning to 'xmlCheckThreadLocalStorage' from 'xmlGetThreadLocalStorage' libxml2-2.13.9/globals.c:867:29: danger: 'xmlGetThreadLocalStorage(1)' leaks here; was allocated at [(10)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/9) # 865| xmlInitGlobalState(gs); # 866| #elif defined(HAVE_POSIX_THREADS) # 867|-> gs = (xmlGlobalState *) pthread_getspecific(globalkey); # 868| if (gs == NULL) # 869| gs = xmlNewGlobalState(allowFailure); Error: GCC_ANALYZER_WARNING (CWE-476): [#def4] libxml2-2.13.9/list.c:280:5: warning[-Wanalyzer-null-dereference]: dereference of NULL '0' libxml2-2.13.9/list.c:268:1: enter_function: entry to 'xmlListInsert' libxml2-2.13.9/list.c:274:15: call_function: calling 'xmlListLowerSearch' from 'xmlListInsert' libxml2-2.13.9/list.c:274:15: return_function: returning to 'xmlListInsert' from 'xmlListLowerSearch' libxml2-2.13.9/list.c:277:8: branch_false: following 'false' branch... libxml2-2.13.9/list.c:279:5: branch_false: ...to here libxml2-2.13.9/list.c:280:5: danger: dereference of NULL 'xmlListLowerSearch(l, data)' # 278| return (1); # 279| lkNew->data = data; # 280|-> lkPlace = lkPlace->prev; # 281| lkNew->next = lkPlace->next; # 282| (lkPlace->next)->prev = lkNew; Error: CPPCHECK_WARNING (CWE-457): [#def5] libxml2-2.13.9/parser.c:8660: warning[uninitvar]: Uninitialized variable: p.hashValue # 8658| } # 8659| # 8660|-> *prefix = p; # 8661| return(l); # 8662| } Error: CPPCHECK_WARNING (CWE-401): [#def6] libxml2-2.13.9/xmlmemory.c:287: error[memleak]: Memory leak: p # 285| memcpy(s, str, size); # 286| # 287|-> return(s); # 288| } # 289| Error: CPPCHECK_WARNING (CWE-457): [#def7] libxml2-2.13.9/xpath.c:8503: warning[uninitvar]: Uninitialized variable: theLang # 8501| cur = cur->parent; # 8502| } # 8503|-> if ((theLang != NULL) && (lang != NULL)) { # 8504| for (i = 0;lang[i] != 0;i++) # 8505| if (toupper(lang[i]) != toupper(theLang[i]))
| analyzer-version-clippy | 1.95.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.95.0 |
| diffbase-analyzer-version-cppcheck | 2.20.0 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-174.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | libxml2-2.12.10-6.fc44 |
| diffbase-store-results-to | /tmp/tmpjpfumcy1/libxml2-2.12.10-6.fc44.tar.xz |
| diffbase-time-created | 2026-06-01 14:51:31 |
| diffbase-time-finished | 2026-06-01 14:55:42 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpjpfumcy1/libxml2-2.12.10-6.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpjpfumcy1/libxml2-2.12.10-6.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.5.20260529.133039.g6f3b5c6-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-174.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | libxml2-2.13.9-1.fc45 |
| store-results-to | /tmp/tmpetjb8u_w/libxml2-2.13.9-1.fc45.tar.xz |
| time-created | 2026-06-01 14:56:00 |
| time-finished | 2026-06-01 14:59:44 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpetjb8u_w/libxml2-2.13.9-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpetjb8u_w/libxml2-2.13.9-1.fc45.src.rpm' |
| tool-version | csmock-3.8.5.20260529.133039.g6f3b5c6-1.el9 |