Newly introduced findings

List of Findings

Error: CLIPPY_WARNING: [#def1]
crates/goose-cli/src/session/streaming_buffer.rs:528:17: warning: this `if` can be collapsed into the outer `match`
#      |
#  528 | /                 if state.in_link_url {
#  529 | |                     state.in_link_url = false;
#  530 | |                 }
#      | |_________________^
#      |
#      = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.96.0/index.html#collapsible_match
#      = note: `#[warn(clippy::collapsible_match)]` on by default
#  help: collapse nested if block
#      |
#  527 ~             ")"
#  528 ~                 if state.in_link_url => {
#  529 |                     state.in_link_url = false;
#  530 ~                 }
#      |

Error: CLIPPY_WARNING: [#def2]
crates/goose/src/agents/agent.rs:1994:45: warning: called `unwrap_err` on `request.tool_call` after checking its variant with `is_ok`
#       |
#  1968 | ...                   if request.tool_call.is_ok() {
#       |                       ---------------------------- help: try: `if let Err(<item>) = &request.tool_call`
#  ...
#  1994 | ...                           request.tool_call.as_ref().unwrap_err(),
#       |                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
#       |
#       = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.96.0/index.html#unnecessary_unwrap
#       = note: `#[warn(clippy::unnecessary_unwrap)]` on by default

Error: CLIPPY_WARNING: [#def3]
crates/goose/src/agents/platform_extensions/analyze/format.rs:51:9: warning: consider using `sort_by_key`
#     |
#  51 |         langs.sort_by(|a, b| b.1.cmp(&a.1));
#     |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
#     |
#     = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.96.0/index.html#unnecessary_sort_by
#     = note: `#[warn(clippy::unnecessary_sort_by)]` on by default
#  help: try
#     |
#  51 -         langs.sort_by(|a, b| b.1.cmp(&a.1));
#  51 +         langs.sort_by_key(|b| std::cmp::Reverse(b.1));
#     |

Error: CLIPPY_WARNING: [#def4]
crates/goose/src/agents/platform_extensions/orchestrator.rs:185:9: warning: consider using `sort_by_key`
#      |
#  185 |         sessions.sort_by(|a, b| b.updated_at.cmp(&a.updated_at));
#      |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
#      |
#      = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.96.0/index.html#unnecessary_sort_by
#  help: try
#      |
#  185 -         sessions.sort_by(|a, b| b.updated_at.cmp(&a.updated_at));
#  185 +         sessions.sort_by_key(|b| std::cmp::Reverse(b.updated_at));
#      |

Error: CLIPPY_WARNING: [#def5]
crates/goose/src/providers/utils.rs:580:17: warning: this `if` can be collapsed into the outer `match`
#      |
#  580 | /                 if closers.last() == Some(&c) {
#  581 | |                     closers.pop();
#  582 | |                 }
#      | |_________________^
#      |
#      = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.96.0/index.html#collapsible_match
#  help: collapse nested if block
#      |
#  579 ~             '}' | ']'
#  580 ~                 if closers.last() == Some(&c) => {
#  581 |                     closers.pop();
#  582 ~                 }
#      |

Error: GCC_ANALYZER_WARNING (CWE-775): [#def6]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c: scope_hint: In function 'conn_state'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c:181:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor '*bio.num'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/bio.h:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c:4: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:242:31: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:242:52: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c:180:9: note: in expansion of macro 'BIO_clear_retry_flags'
#  179|   
#  180|           BIO_clear_retry_flags(bio);
#  181|->         ret = connect(bio->num, (struct sockaddr*) &c->them, c->them_length);
#  182|           if (ret < 0) {
#  183|             if (bio_socket_should_retry(ret)) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def7]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/decrepit/cast/cast.c: scope_hint: In function 'aws_lc_0_41_0_CAST_set_key'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/decrepit/cast/cast.c:304:31: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'k[<unknown>]'
#  302|     for (i = 0; i < 16; i++) {
#  303|       key->data[i * 2] = k[i];
#  304|->     key->data[i * 2 + 1] = ((k[i + 16]) + 16) & 0x1f;
#  305|     }
#  306|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def8]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c: scope_hint: In function 'aws_lc_0_41_0_dsa_internal_paramgen.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:265:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'buf[i]'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/dsa.h:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:5: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3422:31: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3422:52: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:184:5: note: in expansion of macro 'dsa_internal_paramgen'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:391:22: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:391:43: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:229:3: note: in expansion of macro 'BN_CTX_start'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/fipsmodule/bn/internal.h:24: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:23: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:1330:15: note: in definition of macro 'AWS_LC_ENSURE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:254:9: note: in expansion of macro 'AWSLC_ABORT_IF_NOT_ONE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:15:36: note: in expansion of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2070:20: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2070:41: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:254:32: note: in expansion of macro 'RAND_bytes'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:1356:35: note: in expansion of macro 'AWS_LC_ENSURE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:254:9: note: in expansion of macro 'AWSLC_ABORT_IF_NOT_ONE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c: scope_hint: In function 'aws_lc_0_41_0_dsa_internal_paramgen.part.0'
#  263|         // precompute "SEED + 1" for step 7:
#  264|         for (size_t i = qsize - 1; i < qsize; i--) {
#  265|->         buf[i]++;
#  266|           if (buf[i] != 0) {
#  267|             break;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c: scope_hint: In function 'aws_lc_0_41_0_EVP_PKEY_asn1_find'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:666:14: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/evp.h:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:4: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1294:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1294:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:663:29: note: in expansion of macro 'EVP_PKEY_asn1_find'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:665:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:665:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:656:29: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:657:25: note: in expansion of macro 'EVP_PKEY_asn1_get_count'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:665:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
#  664|     for (size_t i = 0; i < (size_t)EVP_PKEY_asn1_get_count(); i++) {
#  665|       const EVP_PKEY_ASN1_METHOD *ameth = EVP_PKEY_asn1_get0(i);
#  666|->     if (ameth->pkey_id == type) {
#  667|         return ameth;
#  668|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def10]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c: scope_hint: In function 'aws_lc_0_41_0_EVP_PKEY_asn1_find_str'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:685:30: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1295:32: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1295:53: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:673:29: note: in expansion of macro 'EVP_PKEY_asn1_find_str'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1835:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1835:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:679:27: note: in expansion of macro 'OPENSSL_strnlen'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:682:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:682:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:656:29: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:657:25: note: in expansion of macro 'EVP_PKEY_asn1_get_count'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:682:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
#  683|   
#  684|       const size_t pem_str_len =
#  685|->         OPENSSL_strnlen(ameth->pem_str, MAX_PEM_STR_LEN);
#  686|   
#  687|       // OPENSSL_strncasecmp(a, b, n) compares up to index n-1

Error: GCC_ANALYZER_WARNING (CWE-457): [#def11]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c: scope_hint: In function 'aws_lc_0_41_0_pkcs12_key_gen.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:167:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'B[j]'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/pkcs8.h:9: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:5: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3934:24: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3934:45: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:57:5: note: in expansion of macro 'pkcs12_key_gen'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1230:27: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1230:48: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:81:23: note: in expansion of macro 'EVP_MD_block_size'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1796:24: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1796:45: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:111:7: note: in expansion of macro 'OPENSSL_malloc'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1152:27: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1152:48: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:131:10: note: in expansion of macro 'EVP_DigestInit_ex'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:132:10: note: in expansion of macro 'EVP_DigestUpdate'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:133:10: note: in expansion of macro 'EVP_DigestUpdate'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1150:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1150:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:134:10: note: in expansion of macro 'EVP_DigestFinal_ex'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c: scope_hint: In function 'aws_lc_0_41_0_pkcs12_key_gen.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:14: included_from: Included from here.
#  165|         unsigned carry = 1;
#  166|         for (size_t j = block_size - 1; j < block_size; j--) {
#  167|->         carry += I[i + j] + B[j];
#  168|           I[i + j] = (uint8_t)carry;
#  169|           carry >>= 8;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def12]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/rand_extra/urandom.c: scope_hint: In function 'init_try_urandom_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/rand_extra/urandom.c:269:6: warning[-Wanalyzer-fd-leak]: leak of file descriptor '<unknown>'
#  267|     } while (fd == -1 && errno == EINTR);
#  268|   
#  269|->   if (fd < 0) {
#  270|       perror("failed to open /dev/urandom");
#  271|       goto out;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def13]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c: scope_hint: In function 'aws_lc_0_41_0_CRYPTO_set_thread_local'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:231:1: warning[-Wanalyzer-malloc-leak]: leak of 'pointers'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/crypto.h:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:760:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:760:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:283:5: note: in expansion of macro 'CRYPTO_set_thread_local'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:21: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:42: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:285:3: note: in expansion of macro 'CRYPTO_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:21: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:42: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:227:6: note: in expansion of macro 'CRYPTO_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:21: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:42: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:285:3: note: in expansion of macro 'CRYPTO_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c: scope_hint: In function 'aws_lc_0_41_0_CRYPTO_set_thread_local'
#  229|       abort();
#  230|     }
#  231|-> }
#  232|   
#  233|   static pthread_mutex_t g_destructors_lock = PTHREAD_MUTEX_INITIALIZER;

Error: GCC_ANALYZER_WARNING (CWE-131): [#def14]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_lu.c: scope_hint: In function 'x509_object_cmp.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_lu.c:85:57: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1826:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1826:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/stack.h:419:21: note: in expansion of macro 'OPENSSL_sk_value'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/stack.h:44:3: note: in expansion of macro 'BORINGSSL_DEFINE_STACK_OF_IMPL'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/stack.h:51:31: note: in expansion of macro 'DEFINE_NAMED_STACK_OF'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/x509.h:2531:1: note: in expansion of macro 'DEFINE_STACK_OF'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_lu.c: scope_hint: In function 'x509_object_cmp.part.0'
#   83|     switch (a->type) {
#   84|       case X509_LU_X509:
#   85|->       return X509_subject_name_cmp(a->data.x509, b->data.x509);
#   86|       case X509_LU_CRL:
#   87|         return X509_CRL_cmp(a->data.crl, b->data.crl);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def15]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c: scope_hint: In function 'aws_lc_0_41_0_X509_check_trust'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:52:12: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/err.h:10: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2708:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2708:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:35:5: note: in expansion of macro 'X509_check_trust'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:47:13: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:47:13: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:64:5: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:47:13: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:51:26: note: in expansion of macro 'X509_TRUST_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:51:26: note: in expansion of macro 'X509_TRUST_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:57:19: note: in expansion of macro 'X509_TRUST_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:51:26: note: in expansion of macro 'X509_TRUST_get0'
#   50|     }
#   51|     const X509_TRUST *pt = X509_TRUST_get0(idx);
#   52|->   return pt->check_trust(pt, x);
#   53|   }
#   54|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def16]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c: scope_hint: In function 'aws_lc_0_41_0_X509_add1_trust_object'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:107:10: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/asn1t.h:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2694:32: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2694:53: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:101:5: note: in expansion of macro 'X509_add1_trust_object'
#  105|     }
#  106|     X509_CERT_AUX *aux = aux_get(x);
#  107|->   if (aux->trust == NULL) {
#  108|       aux->trust = sk_ASN1_OBJECT_new_null();
#  109|       if (aux->trust == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def17]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c: scope_hint: In function 'aws_lc_0_41_0_X509_add1_reject_object'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:129:10: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2693:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2693:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:123:5: note: in expansion of macro 'X509_add1_reject_object'
#  127|     }
#  128|     X509_CERT_AUX *aux = aux_get(x);
#  129|->   if (aux->reject == NULL) {
#  130|       aux->reject = sk_ASN1_OBJECT_new_null();
#  131|       if (aux->reject == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def18]
goose-1.36.0/vendor/sys-info-0.9.1/c/linux.c: scope_hint: In function 'seen_before'
goose-1.36.0/vendor/sys-info-0.9.1/c/linux.c:130:24: warning[-Wanalyzer-malloc-leak]: leak of 'np'
#  128|   	for (hashval=0; *s != '\0'; s++)
#  129|   		hashval = *s + 31 * hashval;
#  130|-> 	return hashval % DFHASHSIZE;
#  131|   }
#  132|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def19]
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:408:13: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL '*(Scanner *)payload.delimiters.contents' where non-null expected
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:396:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:396:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:406:13: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:406:13: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h: scope_hint: In function 'tree_sitter_python_external_scanner_deserialize'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h:188:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h:188:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:406:13: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c: scope_hint: In function 'tree_sitter_python_external_scanner_deserialize'
/usr/include/string.h:47:14: note: argument 1 of 'memcpy' must be non-null
#  406|               array_reserve(&scanner->delimiters, delimiter_count);
#  407|               scanner->delimiters.size = delimiter_count;
#  408|->             memcpy(scanner->delimiters.contents, &buffer[size], delimiter_count);
#  409|               size += delimiter_count;
#  410|           }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c: scope_hint: In function 'tree_sitter_python_external_scanner_deserialize'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h:65:37: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL '*(Scanner *)payload.indents.contents + (long unsigned int)*(Scanner *)payload.indents.size * 2'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:397:5: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:395:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:395:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:396:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h:165:5: note: in expansion of macro 'ts_free'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:396:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:397:5: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h: scope_hint: In function 'tree_sitter_python_external_scanner_deserialize'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h:188:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/tree_sitter/array.h:188:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c: scope_hint: In function 'tree_sitter_python_external_scanner_deserialize'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:397:5: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-python-0.25.0/src/scanner.c:397:5: note: in expansion of macro 'array_push'
#   63|   #define array_push(self, element)                            \
#   64|     (_array__grow((Array *)(self), 1, array_elem_size(self)), \
#   65|->    (self)->contents[(self)->size++] = (element))
#   66|   
#   67|   /// Increase the array's size by `count` elements.

Error: GCC_ANALYZER_WARNING (CWE-688): [#def21]
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:154:9: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'heredoc.word.contents' where non-null expected
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:153:9: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:153:9: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:14: included_from: Included from here.
/usr/include/string.h:47:14: note: argument 1 of 'memcpy' must be non-null
#  152|           uint8_t word_length = buffer[size++];
#  153|           array_reserve(&heredoc.word, word_length);
#  154|->         memcpy(heredoc.word.contents, &buffer[size], word_length);
#  155|           heredoc.word.size = word_length;
#  156|           size += word_length;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def22]
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:161:1: warning[-Wanalyzer-malloc-leak]: leak of 'heredoc.word.contents'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:83:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:164:5: note: in expansion of macro 'ts_free'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:83:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:153:9: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:153:9: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'deserialize'
#  159|   
#  160|       assert(size == length);
#  161|-> }
#  162|   
#  163|   static inline bool scan_whitespace(Scanner *scanner, TSLexer *lexer, const bool *valid_symbols) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def23]
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:2: included_from: Included from here.
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:64:37: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL '*scanner.literal_stack.contents + (long unsigned int)*scanner.literal_stack.size * 20'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:141:9: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:83:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:1: included_from: Included from here.
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:164:5: note: in expansion of macro 'ts_free'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:83:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:141:9: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:141:9: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:141:9: note: in expansion of macro 'array_push'
#   62|   #define array_push(self, element)                            \
#   63|     (_array__grow((Array *)(self), 1, array_elem_size(self)), \
#   64|->    (self)->contents[(self)->size++] = (element))
#   65|   
#   66|   /// Increase the array's size by `count` elements.

Error: GCC_ANALYZER_WARNING (CWE-476): [#def24]
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:64:37: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL '*scanner.open_heredocs.contents + (long unsigned int)*scanner.open_heredocs.size * 24'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:157:9: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:83:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:164:5: note: in expansion of macro 'ts_free'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:83:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:164:5: note: in expansion of macro 'ts_free'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:87:5: note: in expansion of macro 'array_delete'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:153:9: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:153:9: note: in expansion of macro 'array_reserve'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:157:9: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'deserialize'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:157:9: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:157:9: note: in expansion of macro 'array_push'
#   62|   #define array_push(self, element)                            \
#   63|     (_array__grow((Array *)(self), 1, array_elem_size(self)), \
#   64|->    (self)->contents[(self)->size++] = (element))
#   65|   
#   66|   /// Increase the array's size by `count` elements.

Error: GCC_ANALYZER_WARNING (CWE-476): [#def25]
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'scan_heredoc_word'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:64:37: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'word.contents'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:608:17: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'scan_heredoc_word'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'scan_heredoc_word'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:608:17: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:608:17: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h: scope_hint: In function 'scan_heredoc_word'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/tree_sitter/array.h:187:24: note: in expansion of macro 'ts_malloc'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c: scope_hint: In function 'scan_heredoc_word'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:608:17: note: in expansion of macro 'array_push'
goose-1.36.0/vendor/tree-sitter-ruby-0.23.1/src/scanner.c:608:17: note: in expansion of macro 'array_push'
#   62|   #define array_push(self, element)                            \
#   63|     (_array__grow((Array *)(self), 1, array_elem_size(self)), \
#   64|->    (self)->contents[(self)->size++] = (element))
#   65|   
#   66|   /// Increase the array's size by `count` elements.

Scan Properties

analyzer-version-clippy1.96.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.96.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-186.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namegoose-1.23.2-1.20260521165302153583.main
diffbase-store-results-to/tmp/tmp8lvrkbos/goose-1.23.2-1.20260521165302153583.main.tar.xz
diffbase-time-created2026-06-05 00:31:38
diffbase-time-finished2026-06-05 01:49:46
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp8lvrkbos/goose-1.23.2-1.20260521165302153583.main.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp8lvrkbos/goose-1.23.2-1.20260521165302153583.main.src.rpm'
diffbase-tool-versioncsmock-3.8.6.20260603.095741.gbb48252-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-186.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegoose-1.36.0-1.20260604211338807794.pr40
store-results-to/tmp/tmp1hot5sci/goose-1.36.0-1.20260604211338807794.pr40.tar.xz
time-created2026-06-05 01:53:02
time-finished2026-06-05 02:52:26
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp1hot5sci/goose-1.36.0-1.20260604211338807794.pr40.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp1hot5sci/goose-1.36.0-1.20260604211338807794.pr40.src.rpm'
tool-versioncsmock-3.8.6.20260603.095741.gbb48252-1.el9