Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-401): [#def1]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘xiconf_getservice’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:374:16: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
#  372|   	xiconf->defaults = NULL;
#  373|   
#  374|-> 	return (xiconf);
#  375|   }
#  376|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def2]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘xiconf_add_cfile’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:374:16: warning[-Wanalyzer-malloc-leak]: leak of ‘cfile’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:53: included_from: Included from here.
openscap-1.4.5/src/common/debug_priv.h:54:33: note: in expansion of macro ‘__dlprintf_wrapper’
openscap-1.4.5/src/common/debug_priv.h:64:17: note: in expansion of macro ‘oscap_dlprintf’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:561:9: note: in expansion of macro ‘dD’
openscap-1.4.5/src/common/debug_priv.h:54:33: note: in expansion of macro ‘__dlprintf_wrapper’
openscap-1.4.5/src/common/debug_priv.h:63:17: note: in expansion of macro ‘oscap_dlprintf’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:572:17: note: in expansion of macro ‘dE’
#  372|   	xiconf->defaults = NULL;
#  373|   
#  374|-> 	return (xiconf);
#  375|   }
#  376|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def3]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘xiconf_getservice’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:493:16: warning[-Wanalyzer-malloc-leak]: leak of ‘xiconf_parse(path, 32)’
#  491|   	}
#  492|   
#  493|-> 	if ((st.st_mode & S_IFMT) != S_IFREG) {
#  494|   		dE("Not a regular file: %s", path);
#  495|   		close (fd);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def4]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:653:47: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
#  651|   			memcpy (buffer, l_pbeg, l_size);
#  652|   			buffer[l_size] = ' ';
#  653|-> 			*strchr(buffer,  ' ') = '\0';
#  654|   
#  655|   			/* skip whitespaces before the keyword */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:679:71: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
#  677|   					}
#  678|   
#  679|-> 					*strchr(buffer + bufidx, ' ') = '\0';
#  680|   
#  681|   					if (xiconf_parse_section (xiconf, xifile, XICONF_SECTION_SERVICE, buffer + bufidx) != 0) {

Error: GCC_ANALYZER_WARNING (CWE-401): [#def6]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘xiconf_parse_section’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:909:32: warning[-Wanalyzer-malloc-leak]: leak of ‘xiconf_service_new()’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:925:26: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:925:26: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:41: included_from: Included from here.
#  907|   		 * Find out the line boundaries.
#  908|   		 */
#  909|-> 		l_pbeg = xifile->inmem + xifile->inoff;
#  910|   		l_pend = strchr(l_pbeg, '\n');
#  911|   

Error: GCC_ANALYZER_WARNING (CWE-688): [#def7]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:928:17: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL ‘buffer’ where non-null expected
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:649:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:925:26: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:925:26: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:925:26: note: in expansion of macro ‘tmpbuf_get’
/usr/include/string.h:47:14: note: argument 1 of ‘memcpy’ must be non-null
#  926|   		bufidx = 0;
#  927|   
#  928|-> 		memcpy (buffer, l_pbeg, l_size);
#  929|   
#  930|   		buffer[l_size] = '\0';

Error: GCC_ANALYZER_WARNING (CWE-401): [#def8]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘xiconf_getservice’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1230:16: warning[-Wanalyzer-malloc-leak]: leak of ‘<unknown>’
# 1228|   	rbt_str_get(xiconf->ttree, strans_key, (void *)&strans);
# 1229|   
# 1230|-> 	return (strans);
# 1231|   }
# 1232|   

Scan Properties

analyzer-version-clippy1.96.0
analyzer-version-cppcheck2.21.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.96.0
diffbase-analyzer-version-cppcheck2.21.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-49.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameopenscap-1.4.5-0.20260612181445294709.pr2371.77.g71434563d
diffbase-store-results-to/tmp/tmpj6nqo1ys/openscap-1.4.5-0.20260612181445294709.pr2371.77.g71434563d.tar.xz
diffbase-time-created2026-06-12 18:35:13
diffbase-time-finished2026-06-12 18:42:26
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,shellcheck,gcc,clippy,cppcheck' '-o' '/tmp/tmpj6nqo1ys/openscap-1.4.5-0.20260612181445294709.pr2371.77.g71434563d.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpj6nqo1ys/openscap-1.4.5-0.20260612181445294709.pr2371.77.g71434563d.src.rpm'
diffbase-tool-versioncsmock-3.8.6.20260603.095741.gbb48252-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-49.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameopenscap-1.4.5-0.20260612153003619487.main.75.gd94494148
store-results-to/tmp/tmpv3elv2by/openscap-1.4.5-0.20260612153003619487.main.75.gd94494148.tar.xz
time-created2026-06-12 18:26:29
time-finished2026-06-12 18:34:51
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,shellcheck,gcc,clippy,cppcheck' '-o' '/tmp/tmpv3elv2by/openscap-1.4.5-0.20260612153003619487.main.75.gd94494148.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpv3elv2by/openscap-1.4.5-0.20260612153003619487.main.75.gd94494148.src.rpm'
tool-versioncsmock-3.8.6.20260603.095741.gbb48252-1.el9