Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
openscap-1.4.5/src/CPE/cpedict_priv.c:925:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘product’
#  923|   			version = cpe_version_new();
#  924|   			version->value = (char *)xmlTextReaderGetAttribute(reader, ATTR_VALUE_STR);
#  925|-> 			oscap_list_add(product->versions, version);
#  926|   		} else if (xmlStrcmp(xmlTextReaderConstLocalName(reader), TAG_UPDATE_STR) == 0) {
#  927|   			// initialization

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
openscap-1.4.5/src/CPE/cpedict_priv.c:930:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘version’
#  928|   			update = cpe_update_new();
#  929|   			update->value = (char *)xmlTextReaderGetAttribute(reader, ATTR_VALUE_STR);
#  930|-> 			oscap_list_add(version->updates, update);
#  931|   		} else if (xmlStrcmp(xmlTextReaderConstLocalName(reader), TAG_EDITION_STR) == 0) {
#  932|   			// initialization

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
openscap-1.4.5/src/CPE/cpedict_priv.c:935:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘update’
#  933|   			edition = cpe_edition_new();
#  934|   			edition->value = (char *)xmlTextReaderGetAttribute(reader, ATTR_VALUE_STR);
#  935|-> 			oscap_list_add(update->editions, edition);
#  936|   		} else if (xmlStrcmp(xmlTextReaderConstLocalName(reader), TAG_LANGUAGE_STR) == 0) {
#  937|   			// initialization

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
openscap-1.4.5/src/CPE/cpedict_priv.c:940:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘edition’
#  938|   			language = cpe_language_new();
#  939|   			language->value = (char *)xmlTextReaderGetAttribute(reader, ATTR_VALUE_STR);
#  940|-> 			oscap_list_add(edition->languages, language);
#  941|   		} else {
#  942|   			oscap_seterr(OSCAP_EFAMILY_OSCAP, "Unknown XML element withinin CPE vendor element, local name is '%s'.",

Error: GCC_ANALYZER_WARNING (CWE-688): [#def5]
openscap-1.4.5/src/DS/rds_index.c: scope_hint: In function ‘rds_index_get_report_request’
openscap-1.4.5/src/DS/rds_index.c:104:21: warning[-Wanalyzer-null-argument]: use of NULL ‘id’ where non-null expected
openscap-1.4.5/src/common/util.h:34: included_from: Included from here.
openscap-1.4.5/src/common/list.h:34: included_from: Included from here.
openscap-1.4.5/src/DS/rds_index.c:28: included_from: Included from here.
/usr/include/string.h:171:12: note: argument 2 of ‘strcmp’ must be non-null
#  102|   	{
#  103|   		struct rds_report_request_index* rr_index = rds_report_request_index_iterator_next(it);
#  104|-> 		if (strcmp(rds_report_request_index_get_id(rr_index), id) == 0) {
#  105|   			ret = rr_index;
#  106|   			break;

Scan Properties