libnotify-0.8.8-1.fc44

List of Findings

Error: COMPILER_WARNING (CWE-252): [#def1]
libnotify-0.8.8/tools/notify-send.c: scope_hint: In function ‘handle_action’
libnotify-0.8.8/tools/notify-send.c:184:17: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  184 |                 write (action_data->selected_action_fd, action, strlen (action));
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  182|   
#  183|           if (action_data->selected_action_fd >= 0) {
#  184|->                 write (action_data->selected_action_fd, action, strlen (action));
#  185|                   write (action_data->selected_action_fd, "\n", 1);
#  186|                   fsync (action_data->selected_action_fd);

Error: COMPILER_WARNING (CWE-252): [#def2]
libnotify-0.8.8/tools/notify-send.c:185:17: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  185 |                 write (action_data->selected_action_fd, "\n", 1);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  183|           if (action_data->selected_action_fd >= 0) {
#  184|                   write (action_data->selected_action_fd, action, strlen (action));
#  185|->                 write (action_data->selected_action_fd, "\n", 1);
#  186|                   fsync (action_data->selected_action_fd);
#  187|           }

Error: COMPILER_WARNING (CWE-252): [#def3]
libnotify-0.8.8/tools/notify-send.c:198:25: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  198 |                         write (action_data->activation_token_fd,
#      |                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  199 |                                activation_token, strlen (activation_token));
#      |                                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  196|   
#  197|                   if (action_data->activation_token_fd) {
#  198|->                         write (action_data->activation_token_fd,
#  199|                                  activation_token, strlen (activation_token));
#  200|                   }

Error: COMPILER_WARNING (CWE-252): [#def4]
libnotify-0.8.8/tools/notify-send.c:204:17: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  204 |                 write (action_data->activation_token_fd, "\n", 1);
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  202|   
#  203|           if (action_data->activation_token_fd) {
#  204|->                 write (action_data->activation_token_fd, "\n", 1);
#  205|                   fsync (action_data->activation_token_fd);
#  206|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
libnotify-0.8.8/tools/notify-send.c:499:47: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘name’
libnotify-0.8.8/tools/notify-send.c:256:1: enter_function: entry to ‘main’
libnotify-0.8.8/tools/notify-send.c:354:12: branch_false: following ‘false’ branch...
libnotify-0.8.8/tools/notify-send.c:360:13: branch_false: ...to here
libnotify-0.8.8/tools/notify-send.c:360:12: branch_false: following ‘false’ branch...
libnotify-0.8.8/tools/notify-send.c:365:13: branch_false: ...to here
libnotify-0.8.8/tools/notify-send.c:371:17: call_function: calling ‘validate_utf8_or_die’ from ‘main’
libnotify-0.8.8/tools/notify-send.c:371:17: return_function: returning to ‘main’ from ‘validate_utf8_or_die’
libnotify-0.8.8/tools/notify-send.c:374:12: branch_false: following ‘false’ branch...
libnotify-0.8.8/tools/notify-send.c:379:19: branch_false: ...to here
libnotify-0.8.8/tools/notify-send.c:393:12: branch_false: following ‘false’ branch...
libnotify-0.8.8/tools/notify-send.c:396:9: branch_false: ...to here
libnotify-0.8.8/tools/notify-send.c:471:12: branch_true: following ‘true’ branch...
libnotify-0.8.8/tools/notify-send.c:477:32: branch_true: ...to here
libnotify-0.8.8/tools/notify-send.c:485:24: branch_true: following ‘true’ branch...
libnotify-0.8.8/tools/notify-send.c:486:42: release_memory: ‘name’ is NULL
libnotify-0.8.8/tools/notify-send.c:499:28: branch_true: following ‘true’ branch...
libnotify-0.8.8/tools/notify-send.c:499:47: branch_true: ...to here
libnotify-0.8.8/tools/notify-send.c:499:47: release_memory: ‘name’ is NULL
libnotify-0.8.8/tools/notify-send.c:499:47: danger: dereference of NULL ‘name’
#  497|                           }
#  498|   
#  499|->                         if (*label != '\0' && *name != '\0') {
#  500|                                   g_autofree ActionData *action_data = NULL;
#  501|   

Error: COMPILER_WARNING (CWE-252): [#def6]
libnotify-0.8.8/tools/notify-send.c: scope_hint: In function ‘main’
libnotify-0.8.8/tools/notify-send.c:557:17: warning[-Wunused-result]: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’
#  557 |                 write (id_fd, id_str, strlen (id_str));
#      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#  555|                   g_object_get (notify, "id", &notification_id, NULL);
#  556|                   id_str = g_strdup_printf ("%d\n", notification_id);
#  557|->                 write (id_fd, id_str, strlen (id_str));
#  558|                   fsync (id_fd);
#  559|           }

Scan Properties