Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-122): [#def1]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:41: included_from: Included from here.
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘xiconf_parse_section’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:964:36: warning[-Wanalyzer-out-of-bounds]: heap-based buffer over-read
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:814:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:814:34: note: in expansion of macro ‘tmpbuf_get’
#  962|   	 * at the end are allowed here.
#  963|   	 */
#  964|-> 	while(isspace(xifile->inmem[xifile->inoff]))
#  965|   		++xifile->inoff;
#  966|   	if (xifile->inmem[xifile->inoff] != '{')

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘op_remove_strl’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1617:29: warning[-Wanalyzer-null-argument]: use of NULL ‘string_array_val’ where non-null expected
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:53: included_from: Included from here.
openscap-1.4.5/src/common/debug_priv.h:54:33: note: in expansion of macro ‘__dlprintf_wrapper’
openscap-1.4.5/src/common/debug_priv.h:64:17: note: in expansion of macro ‘oscap_dlprintf’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1613:25: note: in expansion of macro ‘dD’
openscap-1.4.5/src/common/debug_priv.h:54:33: note: in expansion of macro ‘__dlprintf_wrapper’
openscap-1.4.5/src/common/debug_priv.h:64:17: note: in expansion of macro ‘oscap_dlprintf’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1613:25: note: in expansion of macro ‘dD’
/usr/include/string.h:171:12: note: argument 1 of ‘strcmp’ must be non-null
# 1615|   			// Otherwise move it to the new string array
# 1616|   			dD("cmp: %s ?= %s", string_array_val, delete_val);
# 1617|-> 			if (strcmp(string_array_val, delete_val) == 0) {
# 1618|   				free(string_array_val);
# 1619|   				string_array_val = NULL;

Scan Properties