Task #12228 - osbuild-composer-120-1.20240919211711792703.pr4336.4.g388076f7d/scan-results.js
back to task #12228download
{
"scan": {
"analyzer-version-clippy": "1.81.0",
"analyzer-version-cppcheck": "2.15.0",
"analyzer-version-gcc": "14.2.1",
"analyzer-version-gcc-analyzer": "14.2.1",
"analyzer-version-shellcheck": "0.10.0",
"analyzer-version-unicontrol": "0.0.2",
"enabled-plugins": "clippy, cppcheck, gcc, shellcheck, unicontrol",
"exit-code": 0,
"host": "ip-172-16-1-159.us-west-2.compute.internal",
"mock-config": "fedora-rawhide-x86_64",
"project-name": "osbuild-composer-120-1.20240919211711792703.pr4336.4.g388076f7d",
"store-results-to": "/tmp/tmp0ilkyodl/osbuild-composer-120-1.20240919211711792703.pr4336.4.g388076f7d.tar.xz",
"time-created": "2024-09-19 21:54:01",
"time-finished": "2024-09-19 22:03:26",
"tool": "csmock",
"tool-args": "'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,shellcheck,cppcheck,clippy,unicontrol' '-o' '/tmp/tmp0ilkyodl/osbuild-composer-120-1.20240919211711792703.pr4336.4.g388076f7d.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '/tmp/tmp0ilkyodl/osbuild-composer-120-1.20240919211711792703.pr4336.4.g388076f7d.src.rpm'",
"tool-version": "csmock-3.7.0-1.el9"
},
"defects": [
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 775,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "dc5edfaca2d678f91e8a40b586f87c08908ee9e3",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 0,
"event": "scope_hint",
"message": "In function ‘parse_proc_stringlist’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 120,
"column": 25,
"event": "warning[-Wanalyzer-fd-leak]",
"message": "leak of file descriptor ‘fd’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 275,
"column": 12,
"event": "note",
"message": "(1) entry to ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 279,
"column": 16,
"event": "note",
"message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 103,
"column": 15,
"event": "note",
"message": "(3) entry to ‘parse_proc_stringlist’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 108,
"column": 14,
"event": "note",
"message": "(4) opened here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(5) assuming ‘fd’ is a valid file descriptor (>= 0)",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(6) following ‘false’ branch (when ‘fd != -1’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(7) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(8) when ‘realloc’ fails",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(9) following ‘true’ branch (when ‘new_buf’ is NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 119,
"column": 25,
"event": "note",
"message": "(10) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 120,
"column": 25,
"event": "note",
"message": "(11) ‘fd’ leaks here; was opened at (4)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 118| \t\tif (new_buf == NULL) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 119| \t\t\tfree(buf);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 120|-> \t\t\tfprintf(stderr, \"realloc(%ld): out of memory\\n\", (long)(size + BUFSTEP));",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 121| \t\t\treturn NULL;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 122| \t\t}",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 775,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "2e549b8c8d6f609498271e962be72382bc0c21c1",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 128,
"column": 25,
"event": "warning[-Wanalyzer-fd-leak]",
"message": "leak of file descriptor ‘fd’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 275,
"column": 12,
"event": "note",
"message": "(1) entry to ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 279,
"column": 16,
"event": "note",
"message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 103,
"column": 15,
"event": "note",
"message": "(3) entry to ‘parse_proc_stringlist’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 108,
"column": 14,
"event": "note",
"message": "(4) opened here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(5) assuming ‘fd’ is a valid file descriptor (>= 0)",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(6) following ‘false’ branch (when ‘fd != -1’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(7) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(8) when ‘realloc’ succeeds, moving buffer",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(9) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 125,
"column": 28,
"event": "note",
"message": "(10) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 127,
"column": 20,
"event": "note",
"message": "(11) following ‘true’ branch (when ‘n < 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 128,
"column": 25,
"event": "note",
"message": "(12) ...to here (13) ‘fd’ leaks here; was opened at (4)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 126| \t\tn = read(fd, buf + used, size - used - 1);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 127| \t\tif (n < 0) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 128|-> \t\t\tfprintf(stderr, \"read(): %m\\n\");",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 129| \t\t\treturn NULL;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 130| \t\t}",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 401,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "a9c24e32d22ef04fd9720ebb9efb6267b09a191d",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 128,
"column": 25,
"event": "warning[-Wanalyzer-malloc-leak]",
"message": "leak of ‘buf’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 275,
"column": 12,
"event": "note",
"message": "(1) entry to ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 279,
"column": 16,
"event": "note",
"message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 103,
"column": 15,
"event": "note",
"message": "(3) entry to ‘parse_proc_stringlist’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(4) following ‘false’ branch (when ‘fd != -1’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(5) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(6) allocated here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(7) when ‘realloc’ succeeds, moving buffer",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 125,
"column": 28,
"event": "note",
"message": "(9) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 127,
"column": 20,
"event": "note",
"message": "(10) following ‘false’ branch (when ‘n >= 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 131,
"column": 20,
"event": "note",
"message": "(11) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 131,
"column": 20,
"event": "note",
"message": "(12) following ‘false’ branch (when ‘n != 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 134,
"column": 22,
"event": "note",
"message": "(13) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(14) when ‘realloc’ succeeds, without moving buffer",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(15) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 125,
"column": 28,
"event": "note",
"message": "(16) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 128,
"column": 25,
"event": "note",
"message": "(17) ‘buf’ leaks here; was allocated at (6)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 126| \t\tn = read(fd, buf + used, size - used - 1);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 127| \t\tif (n < 0) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 128|-> \t\t\tfprintf(stderr, \"read(): %m\\n\");",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 129| \t\t\treturn NULL;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 130| \t\t}",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 401,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "0bcee3de649061afb9aaa25e91b3cba2f273f55f",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 128,
"column": 25,
"event": "warning[-Wanalyzer-malloc-leak]",
"message": "leak of ‘new_buf’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 275,
"column": 12,
"event": "note",
"message": "(1) entry to ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 279,
"column": 16,
"event": "note",
"message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 103,
"column": 15,
"event": "note",
"message": "(3) entry to ‘parse_proc_stringlist’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(4) following ‘false’ branch (when ‘fd != -1’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(5) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(6) allocated here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(7) when ‘realloc’ succeeds, moving buffer",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 125,
"column": 28,
"event": "note",
"message": "(9) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 127,
"column": 20,
"event": "note",
"message": "(10) following ‘true’ branch (when ‘n < 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 128,
"column": 25,
"event": "note",
"message": "(11) ...to here (12) ‘new_buf’ leaks here; was allocated at (6)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 126| \t\tn = read(fd, buf + used, size - used - 1);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 127| \t\tif (n < 0) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 128|-> \t\t\tfprintf(stderr, \"read(): %m\\n\");",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 129| \t\t\treturn NULL;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 130| \t\t}",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 401,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "c6e186ebb11873671fdd2bfe8007ff31cf6e4c9f",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 145,
"column": 17,
"event": "warning[-Wanalyzer-malloc-leak]",
"message": "leak of ‘new_buf’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 275,
"column": 12,
"event": "note",
"message": "(1) entry to ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 279,
"column": 16,
"event": "note",
"message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 103,
"column": 15,
"event": "note",
"message": "(3) entry to ‘parse_proc_stringlist’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(4) following ‘false’ branch (when ‘fd != -1’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(5) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(6) allocated here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(7) when ‘realloc’ succeeds, moving buffer",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 125,
"column": 28,
"event": "note",
"message": "(9) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 127,
"column": 20,
"event": "note",
"message": "(10) following ‘false’ branch (when ‘n >= 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 131,
"column": 20,
"event": "note",
"message": "(11) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 131,
"column": 20,
"event": "note",
"message": "(12) following ‘true’ branch (when ‘n == 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 136,
"column": 9,
"event": "note",
"message": "(13) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 138,
"column": 23,
"event": "note",
"message": "(14) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 143,
"column": 32,
"event": "note",
"message": "(15) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 144,
"column": 12,
"event": "note",
"message": "(16) following ‘true’ branch (when ‘ret’ is NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 145,
"column": 17,
"event": "note",
"message": "(17) ...to here (18) ‘new_buf’ leaks here; was allocated at (6)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 143| \tret = calloc(n_strings + 1, sizeof(char *));",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 144| \tif (ret == NULL) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 145|-> \t\tfprintf(stderr, \"calloc(): out of memory\\n\");",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 146| \t\treturn NULL;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 147| \t}",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 401,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "49c1906110c04f9cd75b3bd0fc97857e891d1604",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 0,
"event": "scope_hint",
"message": "In function ‘containers_reexec’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 288,
"column": 12,
"event": "warning[-Wanalyzer-malloc-leak]",
"message": "leak of ‘argv’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 275,
"column": 12,
"event": "note",
"message": "(1) entry to ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 279,
"column": 16,
"event": "note",
"message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 103,
"column": 15,
"event": "note",
"message": "(3) entry to ‘parse_proc_stringlist’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 109,
"column": 12,
"event": "note",
"message": "(4) following ‘false’ branch (when ‘fd != -1’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(5) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(6) when ‘realloc’ succeeds, moving buffer",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(7) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 125,
"column": 28,
"event": "note",
"message": "(8) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 127,
"column": 20,
"event": "note",
"message": "(9) following ‘false’ branch (when ‘n >= 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 131,
"column": 20,
"event": "note",
"message": "(10) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 131,
"column": 20,
"event": "note",
"message": "(11) following ‘false’ branch (when ‘n != 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 134,
"column": 22,
"event": "note",
"message": "(12) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 117,
"column": 27,
"event": "note",
"message": "(13) when ‘realloc’ succeeds, without moving buffer",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 118,
"column": 20,
"event": "note",
"message": "(14) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 125,
"column": 28,
"event": "note",
"message": "(15) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 127,
"column": 20,
"event": "note",
"message": "(16) following ‘false’ branch (when ‘n >= 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 131,
"column": 20,
"event": "note",
"message": "(17) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 139,
"column": 20,
"event": "note",
"message": "(18) following ‘true’ branch (when ‘n == 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 140,
"column": 34,
"event": "note",
"message": "(19) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 143,
"column": 15,
"event": "note",
"message": "(20) allocated here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 144,
"column": 12,
"event": "note",
"message": "(21) assuming ‘ret’ is non-NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 144,
"column": 12,
"event": "note",
"message": "(22) following ‘false’ branch (when ‘ret’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(23) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 149,
"column": 23,
"event": "note",
"message": "(24) following ‘true’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 150,
"column": 20,
"event": "note",
"message": "(25) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 150,
"column": 20,
"event": "note",
"message": "(26) following ‘true’ branch (when ‘n == 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 151,
"column": 30,
"event": "note",
"message": "(27) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 279,
"column": 16,
"event": "note",
"message": "(28) returning to ‘containers_reexec’ from ‘parse_proc_stringlist’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 280,
"column": 12,
"event": "note",
"message": "(29) following ‘false’ branch (when ‘argv’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 284,
"column": 19,
"event": "note",
"message": "(30) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 288,
"column": 12,
"event": "note",
"message": "(31) following ‘true’ branch (when ‘fd < 0’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(32) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
"line": 288,
"column": 12,
"event": "note",
"message": "(33) ‘argv’ leaks here; was allocated at (20)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 286| \tif (fd < 0)",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 287| \t\tfd = copy_self_proc_exe(argv);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 288|-> \tif (fd < 0)",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 289| \t\treturn fd;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 290| ",
"verbosity_level": 1
}
]
},
{
"checker": "CPPCHECK_WARNING",
"language": "c/c++",
"tool": "cppcheck",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c",
"line": 0,
"event": "internal warning",
"message": "child 13102 timed out after 30s",
"verbosity_level": 0
}
]
},
{
"checker": "COMPILER_WARNING",
"language": "c/c++",
"tool": "gcc",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c",
"line": 0,
"event": "internal warning",
"message": "child 13104 timed out after 30s",
"verbosity_level": 0
}
]
},
{
"checker": "CPPCHECK_WARNING",
"language": "c/c++",
"tool": "cppcheck",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c",
"line": 0,
"event": "internal warning",
"message": "child 5121 timed out after 30s",
"verbosity_level": 0
}
]
},
{
"checker": "COMPILER_WARNING",
"language": "c/c++",
"tool": "gcc",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c",
"line": 0,
"event": "internal warning",
"message": "child 5126 timed out after 30s",
"verbosity_level": 0
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 476,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "bb1bd2180b8a628d5700f0874e7ddac954fc911e",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 0,
"event": "scope_hint",
"message": "In function 'New'",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 77,
"column": 19,
"event": "warning[-Wanalyzer-possible-null-dereference]",
"message": "dereference of possibly-NULL 'c'",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 76,
"column": 25,
"event": "note",
"message": "(1) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 77,
"column": 19,
"event": "note",
"message": "(2) 'c' could be NULL: unchecked value from (1)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 75| \tCK_C_GetFunctionList list;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 76| \tstruct ctx *c = calloc(1, sizeof(struct ctx));",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 77|-> \tc->handle = dlopen(module, RTLD_LAZY);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 78| \tif (c->handle == NULL) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 79| \t\tfree(c);",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 476,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "0811470f479db68e9c7398570f2c21a25e194e24",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 0,
"event": "scope_hint",
"message": "In function ‘New’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 77,
"column": 19,
"event": "warning[-Wanalyzer-possible-null-dereference]",
"message": "dereference of possibly-NULL ‘c’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 76,
"column": 25,
"event": "note",
"message": "(1) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 77,
"column": 19,
"event": "note",
"message": "(2) ‘c’ could be NULL: unchecked value from (1)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 75| \tCK_C_GetFunctionList list;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 76| \tstruct ctx *c = calloc(1, sizeof(struct ctx));",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 77|-> \tc->handle = dlopen(module, RTLD_LAZY);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 78| \tif (c->handle == NULL) {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 79| \t\tfree(c);",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 401,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "c84659da768cd4aaf3e7e3fbb53259058805ad0a",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 0,
"event": "scope_hint",
"message": "In function ‘GetAttributeValue.part.0’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 316,
"column": 32,
"event": "warning[-Wanalyzer-malloc-leak]",
"message": "leak of ‘*((CK_ATTRIBUTE *)temp).pValue’",
"verbosity_level": 0
},
{
"file_name": "cgo-gcc-prolog",
"line": 684,
"column": 1,
"event": "note",
"message": "(1) entry to ‘_cgo_6020a31fdefd_Cfunc_GetAttributeValue’",
"verbosity_level": 2
},
{
"file_name": "cgo-gcc-prolog",
"line": 697,
"column": 11,
"event": "note",
"message": "(2) calling ‘GetAttributeValue’ from ‘_cgo_6020a31fdefd_Cfunc_GetAttributeValue’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 300,
"column": 7,
"event": "note",
"message": "(3) entry to ‘GetAttributeValue’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 307,
"column": 12,
"event": "note",
"message": "(4) following ‘false’ branch (when ‘e == 0’)...",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(5) ...to here",
"verbosity_level": 2
},
{
"file_name": "cc1",
"line": 0,
"event": "note",
"message": "(6) calling ‘GetAttributeValue.part.0’ from ‘GetAttributeValue’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 300,
"column": 7,
"event": "note",
"message": "(7) entry to ‘GetAttributeValue.part.0’",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 311,
"column": 23,
"event": "note",
"message": "(8) following ‘true’ branch (when ‘i < templen’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 312,
"column": 35,
"event": "note",
"message": "(9) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 312,
"column": 20,
"event": "note",
"message": "(10) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 316,
"column": 34,
"event": "note",
"message": "(11) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 316,
"column": 34,
"event": "note",
"message": "(12) allocated here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/miekg/pkcs11/pkcs11.go",
"line": 316,
"column": 32,
"event": "note",
"message": "(13) ‘*((CK_ATTRIBUTE *)temp).pValue’ leaks here; was allocated at (12)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 314| \t\t\tcontinue;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 315| \t\t}",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 316|-> \t\ttemp[i].pValue = calloc(temp[i].ulValueLen, sizeof(CK_BYTE));",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 317| \t}",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 318| \treturn c->sym->C_GetAttributeValue(session, object, temp, templen);",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 688,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "3f3467fb150f6f09a623f20f251826515be194d2",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 0,
"event": "scope_hint",
"message": "In function 'gnu_ext_crypt'",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 60,
"column": 17,
"event": "warning[-Wanalyzer-possible-null-argument]",
"message": "use of possibly-NULL 'ret' where non-null expected",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 55,
"column": 19,
"event": "note",
"message": "(1) following 'false' branch (when 'enc' is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 59,
"column": 39,
"event": "note",
"message": "(2) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 59,
"column": 31,
"event": "note",
"message": "(3) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 60,
"column": 17,
"event": "note",
"message": "(4) argument 1 ('ret') from (3) could be NULL where non-null expected",
"verbosity_level": 2
},
{
"file_name": "<built-in>",
"line": 0,
"event": "note",
"message": "argument 1 of '__builtin_strcpy' must be non-null",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 58| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 59| \t\tret = (char *)malloc((strlen(enc)+1) * sizeof(char)); // for trailing null",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 60|-> \t\tstrcpy(ret, enc);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 61| \t\tret[strlen(enc)]= '\\0';",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 62| ",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 688,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "977ebf7ec0fa2440e86d3a87dc2bec987f85e40a",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 0,
"event": "scope_hint",
"message": "In function ‘gnu_ext_crypt’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 60,
"column": 17,
"event": "warning[-Wanalyzer-possible-null-argument]",
"message": "use of possibly-NULL ‘ret’ where non-null expected",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 55,
"column": 19,
"event": "note",
"message": "(1) following ‘false’ branch (when ‘enc’ is non-NULL)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 59,
"column": 39,
"event": "note",
"message": "(2) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 59,
"column": 31,
"event": "note",
"message": "(3) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/osbuild/images/pkg/crypt/crypt_impl.go",
"line": 60,
"column": 17,
"event": "note",
"message": "(4) argument 1 (‘ret’) from (3) could be NULL where non-null expected",
"verbosity_level": 2
},
{
"file_name": "<built-in>",
"line": 0,
"event": "note",
"message": "argument 1 of ‘__builtin_strcpy’ must be non-null",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 58| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 59| \t\tret = (char *)malloc((strlen(enc)+1) * sizeof(char)); // for trailing null",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 60|-> \t\tstrcpy(ret, enc);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 61| \t\tret[strlen(enc)]= '\\0';",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 62| ",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 476,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "571703381474d8b90f05494d6fc2905889756971",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 0,
"event": "scope_hint",
"message": "In function ‘base64_encode’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 49,
"column": 16,
"event": "warning[-Wanalyzer-possible-null-dereference]",
"message": "dereference of possibly-NULL ‘out’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 45,
"column": 28,
"event": "note",
"message": "(1) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 47,
"column": 17,
"event": "note",
"message": "(2) following ‘true’ branch (when ‘vlen > 2’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 49,
"column": 32,
"event": "note",
"message": "(3) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 49,
"column": 16,
"event": "note",
"message": "(4) ‘out’ could be NULL: unchecked value from (1)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 47| while (vlen >= 3)",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 48| {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 49|-> *out++ = basis_64[value[0] >> 2];",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 50| *out++ = basis_64[((value[0] << 4) & 0x30) | (value[1] >> 4)];",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 51| *out++ = basis_64[((value[1] << 2) & 0x3C) | (value[2] >> 6)];",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 476,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "571703381474d8b90f05494d6fc2905889756971",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 58,
"column": 16,
"event": "warning[-Wanalyzer-possible-null-dereference]",
"message": "dereference of possibly-NULL ‘out’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 45,
"column": 28,
"event": "note",
"message": "(1) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 47,
"column": 17,
"event": "note",
"message": "(2) following ‘false’ branch (when ‘vlen <= 2’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 56,
"column": 8,
"event": "note",
"message": "(3) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 56,
"column": 8,
"event": "note",
"message": "(4) following ‘true’ branch (when ‘vlen != 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 58,
"column": 32,
"event": "note",
"message": "(5) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 58,
"column": 16,
"event": "note",
"message": "(6) ‘out’ could be NULL: unchecked value from (1)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 56| if (vlen > 0)",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 57| {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 58|-> *out++ = basis_64[value[0] >> 2];",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 59| unsigned char oval = (value[0] << 4) & 0x30;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 60| if (vlen > 1) oval |= value[1] >> 4;",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 476,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "c6415b01f71bca39c4f260f0bf2dfc2ea37af8b8",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 65,
"column": 10,
"event": "warning[-Wanalyzer-possible-null-dereference]",
"message": "dereference of possibly-NULL ‘out’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 45,
"column": 28,
"event": "note",
"message": "(1) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 47,
"column": 17,
"event": "note",
"message": "(2) following ‘false’ branch (when ‘vlen <= 2’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 56,
"column": 8,
"event": "note",
"message": "(3) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 56,
"column": 8,
"event": "note",
"message": "(4) following ‘false’ branch (when ‘vlen == 0’)...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 65,
"column": 10,
"event": "note",
"message": "(5) ...to here (6) ‘out’ could be NULL: unchecked value from (1)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 63| *out++ = '=';",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 64| }",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 65|-> *out = '\\0';",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 66| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 67| return result;",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 476,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "1137ea7f856e6ac326aa1082f6f46b6aea0d6842",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 0,
"event": "scope_hint",
"message": "In function ‘base64_decode’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 106,
"column": 16,
"event": "warning[-Wanalyzer-possible-null-dereference]",
"message": "dereference of possibly-NULL ‘out’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 81,
"column": 45,
"event": "note",
"message": "(1) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 85,
"column": 12,
"event": "note",
"message": "(2) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 88,
"column": 12,
"event": "note",
"message": "(3) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 89,
"column": 12,
"event": "note",
"message": "(4) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 92,
"column": 19,
"event": "note",
"message": "(5) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 93,
"column": 12,
"event": "note",
"message": "(6) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 96,
"column": 19,
"event": "note",
"message": "(7) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 106,
"column": 16,
"event": "note",
"message": "(8) ‘out’ could be NULL: unchecked value from (1)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 104| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 105| value += 4;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 106|-> *out++ = (CHAR64(c1) << 2) | (CHAR64(c2) >> 4);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 107| *rlen += 1;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 108| ",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 476,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "b0edcc11d2dd73053c5f39bb5305ce048ab30767",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 121,
"column": 13,
"event": "warning[-Wanalyzer-possible-null-dereference]",
"message": "dereference of possibly-NULL ‘result’",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 81,
"column": 45,
"event": "note",
"message": "(1) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 85,
"column": 12,
"event": "note",
"message": "(2) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 88,
"column": 12,
"event": "note",
"message": "(3) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/base64.c",
"line": 121,
"column": 13,
"event": "note",
"message": "(4) ‘result’ could be NULL: unchecked value from (1)",
"verbosity_level": 2
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 119| ",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 120| base64_decode_error:",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 121|-> *result = 0;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 122| *rlen = 0;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 123| ",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 688,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "2658942ddf35bab61496d9448ca3234580539b8a",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 0,
"event": "scope_hint",
"message": "In function ‘authenticate_gss_client_step’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 219,
"column": 13,
"event": "warning[-Wanalyzer-possible-null-argument]",
"message": "use of possibly-NULL ‘*state.username’ where non-null expected",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 186,
"column": 8,
"event": "note",
"message": "(1) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 193,
"column": 21,
"event": "note",
"message": "(2) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 199,
"column": 8,
"event": "note",
"message": "(3) following ‘true’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 200,
"column": 20,
"event": "note",
"message": "(4) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 202,
"column": 12,
"event": "note",
"message": "(5) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 208,
"column": 27,
"event": "note",
"message": "(6) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 210,
"column": 12,
"event": "note",
"message": "(7) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 218,
"column": 56,
"event": "note",
"message": "(8) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 218,
"column": 39,
"event": "note",
"message": "(9) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 219,
"column": 13,
"event": "note",
"message": "(10) argument 1 (‘malloc(name_token.length + 1)’) from (9) could be NULL where non-null expected",
"verbosity_level": 2
},
{
"file_name": "<built-in>",
"line": 0,
"event": "note",
"message": "argument 1 of ‘__builtin_strncpy’ must be non-null",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 217| } else {",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 218| state->username = (char *)malloc(name_token.length + 1);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 219|-> strncpy(state->username, (char*) name_token.value, name_token.length);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 220| state->username[name_token.length] = 0;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 221| gss_release_buffer(&state->min_stat, &name_token);",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 688,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "1e22e8263c3e074f88f39255cb5633b8602f955a",
"key_event_idx": 1,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 0,
"event": "scope_hint",
"message": "In function ‘authenticate_gss_server_step’",
"verbosity_level": 1
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 386,
"column": 5,
"event": "warning[-Wanalyzer-possible-null-argument]",
"message": "use of possibly-NULL ‘*state.username’ where non-null expected",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 339,
"column": 8,
"event": "note",
"message": "(1) following ‘true’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 341,
"column": 29,
"event": "note",
"message": "(2) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 364,
"column": 8,
"event": "note",
"message": "(3) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 370,
"column": 21,
"event": "note",
"message": "(4) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 381,
"column": 8,
"event": "note",
"message": "(5) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 385,
"column": 50,
"event": "note",
"message": "(6) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 385,
"column": 31,
"event": "note",
"message": "(7) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 386,
"column": 5,
"event": "note",
"message": "(8) argument 1 (‘malloc(output_token.length + 1)’) from (7) could be NULL where non-null expected",
"verbosity_level": 2
},
{
"file_name": "<built-in>",
"line": 0,
"event": "note",
"message": "argument 1 of ‘__builtin_strncpy’ must be non-null",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 384| }",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 385| state->username = (char *)malloc(output_token.length + 1);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 386|-> strncpy(state->username, (char*) output_token.value, output_token.length);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 387| state->username[output_token.length] = 0;",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 388| ",
"verbosity_level": 1
}
]
},
{
"checker": "GCC_ANALYZER_WARNING",
"cwe": 688,
"language": "c/c++",
"tool": "gcc-analyzer",
"hash_v1": "e137063a1c49d823c3f8fc86404fc91487e162b0",
"key_event_idx": 0,
"events": [
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 408,
"column": 9,
"event": "warning[-Wanalyzer-possible-null-argument]",
"message": "use of possibly-NULL ‘*state.targetname’ where non-null expected",
"verbosity_level": 0
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 339,
"column": 8,
"event": "note",
"message": "(1) following ‘true’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 341,
"column": 29,
"event": "note",
"message": "(2) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 364,
"column": 8,
"event": "note",
"message": "(3) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 370,
"column": 21,
"event": "note",
"message": "(4) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 381,
"column": 8,
"event": "note",
"message": "(5) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 385,
"column": 50,
"event": "note",
"message": "(6) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 386,
"column": 5,
"event": "note",
"message": "(7) when ‘strncpy’ copies the full source string",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 390,
"column": 8,
"event": "note",
"message": "(8) following ‘true’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 391,
"column": 20,
"event": "note",
"message": "(9) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 396,
"column": 12,
"event": "note",
"message": "(10) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 400,
"column": 27,
"event": "note",
"message": "(11) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 403,
"column": 12,
"event": "note",
"message": "(12) following ‘false’ branch...",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 407,
"column": 56,
"event": "note",
"message": "(13) ...to here",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 407,
"column": 37,
"event": "note",
"message": "(14) this call could return NULL",
"verbosity_level": 2
},
{
"file_name": "osbuild-composer-120-build/osbuild-composer-120/vendor/github.com/ubccr/kerby/kerberosgss.c",
"line": 408,
"column": 9,
"event": "note",
"message": "(15) argument 1 (‘malloc(output_token.length + 1)’) from (14) could be NULL where non-null expected",
"verbosity_level": 2
},
{
"file_name": "<built-in>",
"line": 0,
"event": "note",
"message": "argument 1 of ‘__builtin_strncpy’ must be non-null",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 406| }",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 407| state->targetname = (char *)malloc(output_token.length + 1);",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 408|-> strncpy(",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 409| state->targetname, (char*) output_token.value, output_token.length",
"verbosity_level": 1
},
{
"file_name": "",
"line": 0,
"event": "#",
"message": " 410| );",
"verbosity_level": 1
}
]
}
]
}