Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-122): [#def1]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:41: included_from: Included from here.
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘xiconf_parse_section’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1023:36: warning[-Wanalyzer-out-of-bounds]: heap-based buffer over-read
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:814:34: note: in expansion of macro ‘tmpbuf_get’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:814:34: note: in expansion of macro ‘tmpbuf_get’
# 1021|   	 * at the end are allowed here.
# 1022|   	 */
# 1023|-> 	while(isspace(xifile->inmem[xifile->inoff]))
# 1024|   		++xifile->inoff;
# 1025|   	if (xifile->inmem[xifile->inoff] != '{')

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c: scope_hint: In function ‘op_remove_strl’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1634:29: warning[-Wanalyzer-null-argument]: use of NULL ‘string_array_val’ where non-null expected
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:53: included_from: Included from here.
openscap-1.4.5/src/common/debug_priv.h:54:33: note: in expansion of macro ‘__dlprintf_wrapper’
openscap-1.4.5/src/common/debug_priv.h:64:17: note: in expansion of macro ‘oscap_dlprintf’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1630:25: note: in expansion of macro ‘dD’
openscap-1.4.5/src/common/debug_priv.h:54:33: note: in expansion of macro ‘__dlprintf_wrapper’
openscap-1.4.5/src/common/debug_priv.h:64:17: note: in expansion of macro ‘oscap_dlprintf’
openscap-1.4.5/src/OVAL/probes/unix/xinetd_probe.c:1630:25: note: in expansion of macro ‘dD’
/usr/include/string.h:171:12: note: argument 1 of ‘strcmp’ must be non-null
# 1632|   			// Otherwise move it to the new string array
# 1633|   			dD("cmp: %s ?= %s", string_array_val, delete_val);
# 1634|-> 			if (strcmp(string_array_val, delete_val) == 0) {
# 1635|   				free(string_array_val);
# 1636|   				string_array_val = NULL;

Scan Properties