# python-psutil-7.2.2-1.fc44

## List of Findings

    Error: GCC_ANALYZER_WARNING (CWE-124): [#def1]
    psutil-release-7.2.2/psutil/arch/posix/net.c:116:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer underwrite
    psutil-release-7.2.2/psutil/arch/posix/net.c:131:1: enter_function: entry to ‘psutil_net_if_addrs’
    psutil-release-7.2.2/psutil/arch/posix/net.c:142:8: branch_false: following ‘false’ branch...
    psutil-release-7.2.2/psutil/arch/posix/net.c:144:9: branch_false: ...to here
    psutil-release-7.2.2/psutil/arch/posix/net.c:144:8: branch_false: following ‘false’ branch...
    psutil-release-7.2.2/psutil/arch/posix/net.c:149:10: branch_false: ...to here
    psutil-release-7.2.2/psutil/arch/posix/net.c:149:24: branch_true: following ‘true’ branch (when ‘ifa’ is non-NULL)...
    psutil-release-7.2.2/psutil/arch/posix/net.c:150:14: branch_true: ...to here
    psutil-release-7.2.2/psutil/arch/posix/net.c:153:22: call_function: calling ‘psutil_convert_ipaddr’ from ‘psutil_net_if_addrs’
    psutil-release-7.2.2/psutil/arch/posix/net.c:153:22: return_function: returning to ‘psutil_net_if_addrs’ from ‘psutil_convert_ipaddr’
    psutil-release-7.2.2/psutil/arch/posix/net.c:158:12: branch_false: following ‘false’ branch...
    psutil-release-7.2.2/psutil/arch/posix/net.c:160:22: branch_false: ...to here
    psutil-release-7.2.2/psutil/arch/posix/net.c:160:22: call_function: calling ‘psutil_convert_ipaddr’ from ‘psutil_net_if_addrs’
    #  114|               ptr += 3;
    #  115|           }
    #  116|->         *--ptr = '\0';
    #  117|           return Py_BuildValue("s", buf);
    #  118|       }

## Scan Properties

analyzer-version-clippy | 1.95.0
analyzer-version-cppcheck | 2.20.0
analyzer-version-gcc | 16.1.1
analyzer-version-gcc-analyzer | 16.1.1
analyzer-version-shellcheck | 0.11.0
analyzer-version-unicontrol | 0.0.2
enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol
exit-code | 0
host | ip-172-16-1-85.us-west-2.compute.internal
known-false-positives | /usr/share/csmock/known-false-positives.js
known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-config | fedora-rawhide-x86_64
project-name | python-psutil-7.2.2-1.fc44
store-results-to | /tmp/tmphul7l8lt/python-psutil-7.2.2-1.fc44.tar.xz
time-created | 2026-06-01 16:13:32
time-finished | 2026-06-01 16:15:15
tool | csmock
tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmphul7l8lt/python-psutil-7.2.2-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmphul7l8lt/python-psutil-7.2.2-1.fc44.src.rpm'
tool-version | csmock-3.8.5.20260529.133039.g6f3b5c6-1.el9