Error: GCC_ANALYZER_WARNING (CWE-476): [#def1] sqlite-src-3510200/src/tclsqlite.c:1717:9: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘apColName’ sqlite-src-3510200/src/tclsqlite.c:2051:26: enter_function: entry to ‘DbObjCmd’ sqlite-src-3510200/src/tclsqlite.c:2095:5: branch_false: following ‘false’ branch (when ‘objc > 1’)... sqlite-src-3510200/src/tclsqlite.c:2099:7: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:2099:5: branch_false: following ‘false’ branch... sqlite-src-3510200/src/tclsqlite.c:2103:11: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:2934:7: branch_false: following ‘false’ branch... sqlite-src-3510200/src/tclsqlite.c:2940:7: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:2940:7: branch_false: following ‘false’ branch (when ‘objc != 3’)... sqlite-src-3510200/src/tclsqlite.c:2965:9: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:2972:7: call_function: calling ‘dbEvalInit’ from ‘DbObjCmd’ sqlite-src-3510200/src/tclsqlite.c:2972:7: return_function: returning to ‘DbObjCmd’ from ‘dbEvalInit’ sqlite-src-3510200/src/tclsqlite.c:2976:12: call_function: calling ‘DbEvalNextCmd’ from ‘DbObjCmd’ # 1715| Tcl_IncrRefCount(pStar); # 1716| for(i=0; i<nCol; i++){ # 1717|-> Tcl_ListObjAppendElement(interp, pColList, apColName[i]); # 1718| } # 1719| if( 0==(SQLITE_EVAL_ASDICT & p->evalFlags) ){ Error: GCC_ANALYZER_WARNING (CWE-476): [#def2] sqlite-src-3510200/src/tclsqlite.c:2015:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘ppHook’ sqlite-src-3510200/src/tclsqlite.c:2051:26: enter_function: entry to ‘DbObjCmd’ sqlite-src-3510200/src/tclsqlite.c:2095:5: branch_false: following ‘false’ branch (when ‘objc > 1’)... sqlite-src-3510200/src/tclsqlite.c:2099:7: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:2099:5: branch_false: following ‘false’ branch... sqlite-src-3510200/src/tclsqlite.c:2103:11: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:3753:7: branch_false: following ‘false’ branch... sqlite-src-3510200/src/tclsqlite.c:3754:7: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:3754:7: branch_false: following ‘false’ branch... sqlite-src-3510200/src/tclsqlite.c:3755:7: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:3755:7: branch_false: following ‘false’ branch... sqlite-src-3510200/src/tclsqlite.c:3756:7: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:3756:7: branch_false: following ‘false’ branch (when ‘objc <= 3’)... sqlite-src-3510200/src/tclsqlite.c:3761:5: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:3761:5: branch_false: following ‘false’ branch (when ‘objc != 3’)... sqlite-src-3510200/src/tclsqlite.c:3761:5: branch_false: ...to here sqlite-src-3510200/src/tclsqlite.c:3761:5: call_function: calling ‘DbHookCmd’ from ‘DbObjCmd’ # 2013| sqlite3 *db = pDb->db; # 2014| # 2015|-> if( *ppHook ){ # 2016| Tcl_SetObjResult(interp, *ppHook); # 2017| if( pArg ){ Error: GCC_ANALYZER_WARNING (CWE-686): [#def3] sqlite-src-3510200/tool/lemon.c:188:13: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘int’ but received ‘const char *’ for variadic argument 1 of ‘ap’ sqlite-src-3510200/tool/lemon.c:3972:13: enter_function: entry to ‘translate_code’ sqlite-src-3510200/tool/lemon.c:3997:5: branch_false: following ‘false’ branch... sqlite-src-3510200/tool/lemon.c:4000:13: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4000:11: branch_false: following ‘false’ branch... sqlite-src-3510200/tool/lemon.c:4011:13: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4011:11: branch_false: following ‘false’ branch... sqlite-src-3510200/tool/lemon.c:4014:13: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4014:11: branch_false: following ‘false’ branch (when the strings are non-equal)... sqlite-src-3510200/tool/lemon.c:4028:5: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4028:5: call_function: calling ‘lemon_sprintf’ from ‘translate_code’ with 2 variadic arguments # 186| } # 187| if( c=='d' ){ # 188|-> int v = va_arg(ap, int); # 189| if( v<0 ){ # 190| lemon_addtext(str, &nUsed, "-", 1, iWidth); Error: GCC_ANALYZER_WARNING (CWE-686): [#def4] sqlite-src-3510200/tool/lemon.c:207:9: warning[-Wanalyzer-va-arg-type-mismatch]: ‘va_arg’ expected ‘int’ but received ‘const char *’ for variadic argument 1 of ‘ap’ sqlite-src-3510200/tool/lemon.c:3972:13: enter_function: entry to ‘translate_code’ sqlite-src-3510200/tool/lemon.c:3997:5: branch_false: following ‘false’ branch... sqlite-src-3510200/tool/lemon.c:4000:13: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4000:11: branch_false: following ‘false’ branch... sqlite-src-3510200/tool/lemon.c:4011:13: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4011:11: branch_false: following ‘false’ branch... sqlite-src-3510200/tool/lemon.c:4014:13: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4014:11: branch_false: following ‘false’ branch (when the strings are non-equal)... sqlite-src-3510200/tool/lemon.c:4028:5: branch_false: ...to here sqlite-src-3510200/tool/lemon.c:4028:5: call_function: calling ‘lemon_sprintf’ from ‘translate_code’ with 2 variadic arguments # 205| }else if( c=='.' && memcmp(&zFormat[i], ".*s", 3)==0 ){ # 206| i += 2; # 207|-> k = va_arg(ap, int); # 208| z = va_arg(ap, const char*); # 209| lemon_addtext(str, &nUsed, z, k, iWidth);
| analyzer-version-clippy | 1.95.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.95.0 |
| diffbase-analyzer-version-cppcheck | 2.20.0 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-162.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | sqlite-3.53.1-1.fc45 |
| diffbase-store-results-to | /tmp/tmp7_mwyrfn/sqlite-3.53.1-1.fc45.tar.xz |
| diffbase-time-created | 2026-06-01 16:55:26 |
| diffbase-time-finished | 2026-06-01 17:02:14 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp7_mwyrfn/sqlite-3.53.1-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp7_mwyrfn/sqlite-3.53.1-1.fc45.src.rpm' |
| diffbase-tool-version | csmock-3.8.5.20260529.133039.g6f3b5c6-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-162.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | sqlite-3.51.2-1.fc44 |
| store-results-to | /tmp/tmpoe_xi7kz/sqlite-3.51.2-1.fc44.tar.xz |
| time-created | 2026-06-01 16:49:15 |
| time-finished | 2026-06-01 16:55:18 |
| title | Fixed findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpoe_xi7kz/sqlite-3.51.2-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpoe_xi7kz/sqlite-3.51.2-1.fc44.src.rpm' |
| tool-version | csmock-3.8.5.20260529.133039.g6f3b5c6-1.el9 |