Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
QATzip-1.3.1/src/qatzip.c:2516:9: warning[-Wanalyzer-null-dereference]: dereference of NULL 'qz_sess'
QATzip-1.3.1/src/qatzip.c:4155:5: enter_function: entry to 'qzDecompress2'
QATzip-1.3.1/src/qatzip.c:4160:8: branch_false: following 'false' branch (when 'qzResults' is non-NULL)...
QATzip-1.3.1/src/qatzip.c:4165:8: branch_false: ...to here
QATzip-1.3.1/src/qatzip.c:4165:8: branch_true: following 'true' branch (when 'callback' is NULL)...
QATzip-1.3.1/src/qatzip.c:4167:35: branch_true: ...to here
QATzip-1.3.1/src/qatzip.c:4171:14: call_function: calling 'qzDecompressCrcExt' from 'qzDecompress2'
# 2514|           sess->hw_session_stat == QZ_NO_HW                               ||
# 2515|           !(isQATProcessable(src, src_len, qz_sess))                      ||
# 2516|->         qz_sess->inflate_stat == InflateOK) {
# 2517|           QZ_INFO("decompression src_len=%u, hdr->extra.qz_e.src_sz = %u, "
# 2518|                   "g_process.qz_init_status = %d, sess->hw_session_stat = %ld, "

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
QATzip-1.3.1/src/qatzip_utils.c:1566:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL '*m.latency_array + (long unsigned int)i * 8'
QATzip-1.3.1/src/qatzip_utils.c:343:5: enter_function: entry to 'qzSetupSessionInternal'
QATzip-1.3.1/src/qatzip_utils.c:348:5: branch_true: following 'true' branch (when 'sess' is non-NULL)...
QATzip-1.3.1/src/qatzip_utils.c:349:5: branch_true: ...to here
QATzip-1.3.1/src/qatzip_utils.c:349:5: branch_true: following 'true' branch...
QATzip-1.3.1/src/qatzip_utils.c:353:10: branch_true: ...to here
QATzip-1.3.1/src/qatzip_utils.c:353:10: call_function: calling 'qzSetupDcSessionData' from 'qzSetupSessionInternal'
QATzip-1.3.1/src/qatzip_utils.c:353:10: return_function: returning to 'qzSetupSessionInternal' from 'qzSetupDcSessionData'
QATzip-1.3.1/src/qatzip_utils.c:355:8: branch_false: following 'false' branch...
QATzip-1.3.1/src/qatzip_utils.c:360:9: branch_false: ...to here
QATzip-1.3.1/src/qatzip_utils.c:360:8: branch_true: following 'true' branch...
QATzip-1.3.1/src/qatzip_utils.c:361:9: branch_true: ...to here
QATzip-1.3.1/src/qatzip_utils.c:361:9: call_function: calling 'metrixReset' from 'qzSetupSessionInternal'
# 1564|   
# 1565|       for (int i = 0; i < LSM_MET_DEPTH; i++) {
# 1566|->         m->latency_array[i] = 0;
# 1567|       }
# 1568|       m->arr_total = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
QATzip-1.3.1/src/qatzip_utils.c:1566:9: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL '*m.latency_array'
QATzip-1.3.1/src/qatzip_utils.c:1556:13: enter_function: entry to 'metrixReset'
QATzip-1.3.1/src/qatzip_utils.c:1558:8: branch_false: following 'false' branch (when 'm' is non-NULL)...
QATzip-1.3.1/src/qatzip_utils.c:1561:9: branch_false: ...to here
QATzip-1.3.1/src/qatzip_utils.c:1561:8: branch_true: following 'true' branch...
QATzip-1.3.1/src/qatzip_utils.c:1562:35: branch_true: ...to here
QATzip-1.3.1/src/qatzip_utils.c:1562:28: acquire_memory: this call could return NULL
 call_function: calling 'metrixReset' from 'metrixReset'
# 1564|   
# 1565|       for (int i = 0; i < LSM_MET_DEPTH; i++) {
# 1566|->         m->latency_array[i] = 0;
# 1567|       }
# 1568|       m->arr_total = 0;

Error: CPPCHECK_WARNING (CWE-476): [#def4]
QATzip-1.3.1/src/qatzip_utils.c:1758: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ring
# 1756|       QzRing_T *ring;
# 1757|       ring = (QzRing_T *)calloc(1, sizeof(QzRing_T));
# 1758|->     ring->elems = (void *)calloc(size, sizeof(void *));
# 1759|       ring->size = size;
# 1760|       ring->mask = size - 1;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
QATzip-1.3.1/src/qatzip_utils.c:1758:5: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'ring'
QATzip-1.3.1/src/qatzip_utils.c:1752:8: branch_false: following 'false' branch (when 'size > 0')...
QATzip-1.3.1/src/qatzip_utils.c:1757:24: branch_false: ...to here
QATzip-1.3.1/src/qatzip_utils.c:1757:24: acquire_memory: this call could return NULL
QATzip-1.3.1/src/qatzip_utils.c:1758:5: danger: 'ring' could be NULL: unchecked value from [(3)](sarif:/runs/0/results/2/codeFlows/0/threadFlows/0/locations/2)
# 1756|       QzRing_T *ring;
# 1757|       ring = (QzRing_T *)calloc(1, sizeof(QzRing_T));
# 1758|->     ring->elems = (void *)calloc(size, sizeof(void *));
# 1759|       ring->size = size;
# 1760|       ring->mask = size - 1;

Error: CPPCHECK_WARNING (CWE-476): [#def6]
QATzip-1.3.1/src/qatzip_utils.c:1759: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ring
# 1757|       ring = (QzRing_T *)calloc(1, sizeof(QzRing_T));
# 1758|       ring->elems = (void *)calloc(size, sizeof(void *));
# 1759|->     ring->size = size;
# 1760|       ring->mask = size - 1;
# 1761|       ring->capacity = size;

Error: CPPCHECK_WARNING (CWE-476): [#def7]
QATzip-1.3.1/src/qatzip_utils.c:1760: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ring
# 1758|       ring->elems = (void *)calloc(size, sizeof(void *));
# 1759|       ring->size = size;
# 1760|->     ring->mask = size - 1;
# 1761|       ring->capacity = size;
# 1762|       return ring;

Error: CPPCHECK_WARNING (CWE-476): [#def8]
QATzip-1.3.1/src/qatzip_utils.c:1761: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: ring
# 1759|       ring->size = size;
# 1760|       ring->mask = size - 1;
# 1761|->     ring->capacity = size;
# 1762|       return ring;
# 1763|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
QATzip-1.3.1/utils/qzip_7z.c:2586:29: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
QATzip-1.3.1/utils/qzip_7z.c:2711:18: enter_function: entry to ‘generateEndHeader’
QATzip-1.3.1/utils/qzip_7z.c:2715:5: branch_false: following ‘false’ branch (when ‘header’ is non-NULL)...
QATzip-1.3.1/utils/qzip_7z.c:2717:28: branch_false: ...to here
QATzip-1.3.1/utils/qzip_7z.c:2718:27: call_function: calling ‘generateStreamsInfo’ from ‘generateEndHeader’
# 2584|       for (int i = 0; i < digests->numDefined; ++i) {
# 2585|           Qz7zFileItem_T *p = (Qz7zFileItem_T *)qzListGet(head, i);
# 2586|->         (digests->crc)[i] = p->crc;
# 2587|       }
# 2588|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def10]
QATzip-1.3.1/utils/qzip_7z.c:2642:59: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
QATzip-1.3.1/utils/qzip_7z.c:2711:18: enter_function: entry to ‘generateEndHeader’
QATzip-1.3.1/utils/qzip_7z.c:2715:5: branch_false: following ‘false’ branch (when ‘header’ is non-NULL)...
QATzip-1.3.1/utils/qzip_7z.c:2717:28: branch_false: ...to here
QATzip-1.3.1/utils/qzip_7z.c:2717:28: call_function: calling ‘generatePropertyInfo’ from ‘generateEndHeader’
QATzip-1.3.1/utils/qzip_7z.c:2717:28: return_function: returning to ‘generateEndHeader’ from ‘generatePropertyInfo’
QATzip-1.3.1/utils/qzip_7z.c:2718:27: call_function: calling ‘generateStreamsInfo’ from ‘generateEndHeader’
# 2640|           for (int j = 0; j < h->total - 1; ++j) {
# 2641|               fi = qzListGet(h, j);
# 2642|->             substreamsInfo->unPackSize[index_of_file++] = fi->size;
# 2643|           }
# 2644|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def11]
QATzip-1.3.1/utils/qzip_7z.c:2996:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
QATzip-1.3.1/utils/qzip_7z.c:2981:23: enter_function: entry to ‘genNamesPart’
QATzip-1.3.1/utils/qzip_7z.c:2994:17: branch_true: following ‘true’ branch...
QATzip-1.3.1/utils/qzip_7z.c:2995:31: branch_true: ...to here
QATzip-1.3.1/utils/qzip_7z.c:2995:31: call_function: calling ‘qzListGet’ from ‘genNamesPart’
QATzip-1.3.1/utils/qzip_7z.c:2995:31: return_function: returning to ‘genNamesPart’ from ‘qzListGet’
QATzip-1.3.1/utils/qzip_7z.c:2996:25: danger: dereference of NULL ‘qzListGet(head_dir,  i)’
# 2994|       for (i = 0; i < n_dir; ++i) {
# 2995|           p = (Qz7zFileItem_T *)qzListGet(head_dir, i);
# 2996|->         buf_len += 2 * (p->nameLength - p->baseNameLength);
# 2997|       }
# 2998|       for (i = 0; i < n_file; ++i) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def12]
QATzip-1.3.1/utils/qzip_7z.c:3000:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
QATzip-1.3.1/utils/qzip_7z.c:2981:23: enter_function: entry to ‘genNamesPart’
QATzip-1.3.1/utils/qzip_7z.c:2998:17: branch_true: following ‘true’ branch...
QATzip-1.3.1/utils/qzip_7z.c:2999:31: branch_true: ...to here
QATzip-1.3.1/utils/qzip_7z.c:2999:31: call_function: calling ‘qzListGet’ from ‘genNamesPart’
QATzip-1.3.1/utils/qzip_7z.c:2999:31: return_function: returning to ‘genNamesPart’ from ‘qzListGet’
QATzip-1.3.1/utils/qzip_7z.c:3000:25: danger: dereference of NULL ‘qzListGet(head_file,  i)’
# 2998|       for (i = 0; i < n_file; ++i) {
# 2999|           p = (Qz7zFileItem_T *)qzListGet(head_file, i);
# 3000|->         buf_len += 2 * (p->nameLength - p->baseNameLength);
# 3001|       }
# 3002|       buf = malloc(buf_len + 1);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def13]
QATzip-1.3.1/utils/qzip_7z.c:3009:18: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
QATzip-1.3.1/utils/qzip_7z.c:2981:23: enter_function: entry to ‘genNamesPart’
QATzip-1.3.1/utils/qzip_7z.c:2995:31: call_function: calling ‘qzListGet’ from ‘genNamesPart’
QATzip-1.3.1/utils/qzip_7z.c:2995:31: return_function: returning to ‘genNamesPart’ from ‘qzListGet’
QATzip-1.3.1/utils/qzip_7z.c:3003:5: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
QATzip-1.3.1/utils/qzip_7z.c:3006:5: branch_false: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3007:17: branch_true: following ‘true’ branch...
QATzip-1.3.1/utils/qzip_7z.c:3008:31: branch_true: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3008:31: call_function: calling ‘qzListGet’ from ‘genNamesPart’
QATzip-1.3.1/utils/qzip_7z.c:3008:31: return_function: returning to ‘genNamesPart’ from ‘qzListGet’
QATzip-1.3.1/utils/qzip_7z.c:3009:37: branch_false: following ‘false’ branch...
QATzip-1.3.1/utils/qzip_7z.c:3007:28: branch_false: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3007:17: branch_true: following ‘true’ branch...
QATzip-1.3.1/utils/qzip_7z.c:3008:31: branch_true: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3009:18: danger: dereference of NULL ‘qzListGet(head_dir,  i)’
# 3007|       for (i = 0; i < n_dir; ++i) {
# 3008|           p = (Qz7zFileItem_T *)qzListGet(head_dir, i);
# 3009|->         for (j = p->baseNameLength; j < p->nameLength; ++j) {
# 3010|               buf[k++] = p->fileName[j];
# 3011|               buf[k++] = 0;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def14]
QATzip-1.3.1/utils/qzip_7z.c:3041:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
QATzip-1.3.1/utils/qzip_7z.c:3026:18: enter_function: entry to ‘genAttributes’
QATzip-1.3.1/utils/qzip_7z.c:3036:5: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
QATzip-1.3.1/utils/qzip_7z.c:3036:5: branch_false: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3039:17: branch_true: following ‘true’ branch...
QATzip-1.3.1/utils/qzip_7z.c:3040:31: branch_true: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3040:31: call_function: calling ‘qzListGet’ from ‘genAttributes’
QATzip-1.3.1/utils/qzip_7z.c:3040:31: return_function: returning to ‘genAttributes’ from ‘qzListGet’
QATzip-1.3.1/utils/qzip_7z.c:3041:20: danger: dereference of NULL ‘qzListGet(head_dir,  i)’
# 3039|       for (i = 0; i < n_dir; ++i) {
# 3040|           p = (Qz7zFileItem_T *)qzListGet(head_dir, i);
# 3041|->         buf[k++] = p->attribute;
# 3042|       }
# 3043|       for (i = 0; i < n_file; ++i) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def15]
QATzip-1.3.1/utils/qzip_7z.c:3045:20: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
QATzip-1.3.1/utils/qzip_7z.c:3026:18: enter_function: entry to ‘genAttributes’
QATzip-1.3.1/utils/qzip_7z.c:3036:5: branch_false: following ‘false’ branch (when ‘buf’ is non-NULL)...
QATzip-1.3.1/utils/qzip_7z.c:3036:5: branch_false: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3043:17: branch_true: following ‘true’ branch...
QATzip-1.3.1/utils/qzip_7z.c:3044:31: branch_true: ...to here
QATzip-1.3.1/utils/qzip_7z.c:3044:31: call_function: calling ‘qzListGet’ from ‘genAttributes’
QATzip-1.3.1/utils/qzip_7z.c:3044:31: return_function: returning to ‘genAttributes’ from ‘qzListGet’
QATzip-1.3.1/utils/qzip_7z.c:3045:20: danger: dereference of NULL ‘qzListGet(head_file,  i)’
# 3043|       for (i = 0; i < n_file; ++i) {
# 3044|           p = (Qz7zFileItem_T *)qzListGet(head_file, i);
# 3045|->         buf[k++] = p->attribute;
# 3046|       }
# 3047|   

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-251.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameqatzip-1.3.2-1.fc45
diffbase-store-results-to/tmp/tmpwlurokxp/qatzip-1.3.2-1.fc45.tar.xz
diffbase-time-created2026-06-01 16:31:04
diffbase-time-finished2026-06-01 16:32:39
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpwlurokxp/qatzip-1.3.2-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpwlurokxp/qatzip-1.3.2-1.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-251.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameqatzip-1.3.1-3.fc44
store-results-to/tmp/tmp46nlsst2/qatzip-1.3.1-3.fc44.tar.xz
time-created2026-06-01 16:28:41
time-finished2026-06-01 16:30:42
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp46nlsst2/qatzip-1.3.1-3.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp46nlsst2/qatzip-1.3.1-3.fc44.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9