Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-758): [#def1]
lua-5.5.0/src/ldump.c:82: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
#   80|   static void dumpByte (DumpState *D, int y) {
#   81|     lu_byte x = (lu_byte)y;
#   82|->   dumpVar(D, x);
#   83|   }
#   84|   

Error: CPPCHECK_WARNING (CWE-758): [#def2]
lua-5.5.0/src/ldump.c:117: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
#  115|   
#  116|   static void dumpNumber (DumpState *D, lua_Number x) {
#  117|->   dumpVar(D, x);
#  118|   }
#  119|   

Error: CPPCHECK_WARNING (CWE-758): [#def3]
lua-5.5.0/src/ldump.c:278: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  276|     dumpByte(D, LUAC_FORMAT);
#  277|     dumpLiteral(D, LUAC_DATA);
#  278|->   dumpNumInfo(D, int, LUAC_INT);
#  279|     dumpNumInfo(D, Instruction, LUAC_INST);
#  280|     dumpNumInfo(D, lua_Integer, LUAC_INT);

Error: CPPCHECK_WARNING (CWE-758): [#def4]
lua-5.5.0/src/ldump.c:279: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  277|     dumpLiteral(D, LUAC_DATA);
#  278|     dumpNumInfo(D, int, LUAC_INT);
#  279|->   dumpNumInfo(D, Instruction, LUAC_INST);
#  280|     dumpNumInfo(D, lua_Integer, LUAC_INT);
#  281|     dumpNumInfo(D, lua_Number, LUAC_NUM);

Error: CPPCHECK_WARNING (CWE-758): [#def5]
lua-5.5.0/src/ldump.c:280: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  278|     dumpNumInfo(D, int, LUAC_INT);
#  279|     dumpNumInfo(D, Instruction, LUAC_INST);
#  280|->   dumpNumInfo(D, lua_Integer, LUAC_INT);
#  281|     dumpNumInfo(D, lua_Number, LUAC_NUM);
#  282|   }

Error: CPPCHECK_WARNING (CWE-758): [#def6]
lua-5.5.0/src/ldump.c:281: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  279|     dumpNumInfo(D, Instruction, LUAC_INST);
#  280|     dumpNumInfo(D, lua_Integer, LUAC_INT);
#  281|->   dumpNumInfo(D, lua_Number, LUAC_NUM);
#  282|   }
#  283|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def7]
lua-5.5.0/src/lgc.c:188:3: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
lua-5.5.0/src/lgc.c:1786:6: enter_function: entry to 'luaC_fullgc'
lua-5.5.0/src/lgc.c:1791:24: call_function: calling 'fullgen' from 'luaC_fullgc'
#  186|   static void linkgclist_ (GCObject *o, GCObject **pnext, GCObject **list) {
#  187|     lua_assert(!isgray(o));  /* cannot be in a gray list */
#  188|->   *pnext = *list;
#  189|     *list = o;
#  190|     set2gray(o);  /* now it is */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def8]
lua-5.5.0/src/lgc.c:730:13: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
lua-5.5.0/src/lgc.c:1786:6: enter_function: entry to 'luaC_fullgc'
lua-5.5.0/src/lgc.c:1791:24: call_function: calling 'fullgen' from 'luaC_fullgc'
#  728|     GCObject *o = g->gray;
#  729|     nw2black(o);
#  730|->   g->gray = *getgclist(o);  /* remove from 'gray' list */
#  731|     switch (o->tt) {
#  732|       case LUA_VTABLE: return traversetable(g, gco2t(o));

Error: CPPCHECK_WARNING (CWE-476): [#def9]
lua-5.5.0/src/lstring.c:223: error[nullPointer]: Null pointer dereference
#  221|     for (ts = *list; ts != NULL; ts = ts->u.hnext) {
#  222|       if (l == cast_uint(ts->shrlen) &&
#  223|->         (memcmp(str, getshrstr(ts), l * sizeof(char)) == 0)) {
#  224|         /* found! */
#  225|         if (isdead(g, ts))  /* dead (but not collected yet)? */

Error: CPPCHECK_WARNING (CWE-476): [#def10]
lua-5.5.0/src/lstring.c:238: error[nullPointer]: Null pointer dereference
#  236|     ts->shrlen = cast(ls_byte, l);
#  237|     getshrstr(ts)[l] = '\0';  /* ending 0 */
#  238|->   memcpy(getshrstr(ts), str, l * sizeof(char));
#  239|     ts->u.hnext = *list;
#  240|     *list = ts;

Error: CPPCHECK_WARNING (CWE-476): [#def11]
lua-5.5.0/src/lstring.c:257: error[nullPointer]: Null pointer dereference
#  255|         luaM_toobig(L);
#  256|       ts = luaS_createlngstrobj(L, l);
#  257|->     memcpy(getlngstr(ts), str, l * sizeof(char));
#  258|       return ts;
#  259|     }

Error: CPPCHECK_WARNING (CWE-758): [#def12]
lua-5.5.0/src/lundump.c:124: warning[objectIndex]: The address of variable 'x' might be accessed at non-zero index.
#  122|   static lua_Number loadNumber (LoadState *S) {
#  123|     lua_Number x;
#  124|->   loadVar(S, x);
#  125|     return x;
#  126|   }

Error: CPPCHECK_WARNING (CWE-758): [#def13]
lua-5.5.0/src/lundump.c:385: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  383|       error(S, "format mismatch");
#  384|     checkliteral(S, LUAC_DATA, "corrupted chunk");
#  385|->   checknum(S, int, LUAC_INT, "int");
#  386|     checknum(S, Instruction, LUAC_INST, "instruction");
#  387|     checknum(S, lua_Integer, LUAC_INT, "Lua integer");

Error: CPPCHECK_WARNING (CWE-758): [#def14]
lua-5.5.0/src/lundump.c:386: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  384|     checkliteral(S, LUAC_DATA, "corrupted chunk");
#  385|     checknum(S, int, LUAC_INT, "int");
#  386|->   checknum(S, Instruction, LUAC_INST, "instruction");
#  387|     checknum(S, lua_Integer, LUAC_INT, "Lua integer");
#  388|     checknum(S, lua_Number, LUAC_NUM, "Lua number");

Error: CPPCHECK_WARNING (CWE-758): [#def15]
lua-5.5.0/src/lundump.c:387: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  385|     checknum(S, int, LUAC_INT, "int");
#  386|     checknum(S, Instruction, LUAC_INST, "instruction");
#  387|->   checknum(S, lua_Integer, LUAC_INT, "Lua integer");
#  388|     checknum(S, lua_Number, LUAC_NUM, "Lua number");
#  389|   }

Error: CPPCHECK_WARNING (CWE-758): [#def16]
lua-5.5.0/src/lundump.c:388: warning[objectIndex]: The address of variable 'i' might be accessed at non-zero index.
#  386|     checknum(S, Instruction, LUAC_INST, "instruction");
#  387|     checknum(S, lua_Integer, LUAC_INT, "Lua integer");
#  388|->   checknum(S, lua_Number, LUAC_NUM, "Lua number");
#  389|   }
#  390|   

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-77.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namelua-5.4.8-5.fc44
diffbase-store-results-to/tmp/tmpc36uar26/lua-5.4.8-5.fc44.tar.xz
diffbase-time-created2026-06-01 14:59:13
diffbase-time-finished2026-06-01 15:01:15
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpc36uar26/lua-5.4.8-5.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpc36uar26/lua-5.4.8-5.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-77.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namelua-5.5.0-1.fc45
store-results-to/tmp/tmpw08y2ar9/lua-5.5.0-1.fc45.tar.xz
time-created2026-06-01 15:01:37
time-finished2026-06-01 15:03:34
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpw08y2ar9/lua-5.5.0-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpw08y2ar9/lua-5.5.0-1.fc45.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9