Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-476): [#def1]
util-linux-2.43.devel/disk-utils/fdformat.c: scope_hint: In function ‘verify_disk’
util-linux-2.43.devel/disk-utils/fdformat.c:129:49: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL ‘xmalloc(track_size) + count’
util-linux-2.43.devel/disk-utils/fdformat.c:28: included_from: Included from here.
#  127|   				}
#  128|   				for (count = 0; count < track_size; count++)
#  129|-> 					if (data[count] != FD_FILL_BYTE) {
#  130|   						if (retries_left) {
#  131|   							format_begin(ctrl);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def2]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:85:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:85:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#   83|   	| '(' expr ')'		{ $$ = $2; }
#   84|   	| expr T_AND expr	{
#   85|-> 		$$ = filter_new_expr(fltr, F_EXPR_AND, $1, $3);
#   86|   		if (!$$) {
#   87|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def3]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:87:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:87:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#   85|   		$$ = filter_new_expr(fltr, F_EXPR_AND, $1, $3);
#   86|   		if (!$$) {
#   87|-> 			filter_unref_node($1);
#   88|   			filter_unref_node($3);
#   89|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def4]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:93:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:93:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#   91|   	}
#   92|   	| expr T_OR expr	{
#   93|-> 		$$ = filter_new_expr(fltr, F_EXPR_OR, $1, $3);
#   94|   		if (!$$) {
#   95|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def5]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:95:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:95:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#   93|   		$$ = filter_new_expr(fltr, F_EXPR_OR, $1, $3);
#   94|   		if (!$$) {
#   95|-> 			filter_unref_node($1);
#   96|   			filter_unref_node($3);
#   97|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def6]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:108:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:108:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  106|   	}
#  107|   	| expr T_EQ expr	{
#  108|-> 		$$ = filter_new_expr(fltr, F_EXPR_EQ, $1, $3);
#  109|   		if (!$$) {
#  110|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def7]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:110:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:110:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  108|   		$$ = filter_new_expr(fltr, F_EXPR_EQ, $1, $3);
#  109|   		if (!$$) {
#  110|-> 			filter_unref_node($1);
#  111|   			filter_unref_node($3);
#  112|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def8]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:116:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:116:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  114|   	}
#  115|   	| expr T_NE expr	{
#  116|-> 		$$ = filter_new_expr(fltr, F_EXPR_NE, $1, $3);
#  117|   		if (!$$) {
#  118|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def9]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:118:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:118:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  116|   		$$ = filter_new_expr(fltr, F_EXPR_NE, $1, $3);
#  117|   		if (!$$) {
#  118|-> 			filter_unref_node($1);
#  119|   			filter_unref_node($3);
#  120|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def10]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:124:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:124:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  122|   	}
#  123|   	| expr T_LE expr	{
#  124|-> 		$$ = filter_new_expr(fltr, F_EXPR_LE, $1, $3);
#  125|   		if (!$$) {
#  126|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def11]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:126:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:126:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  124|   		$$ = filter_new_expr(fltr, F_EXPR_LE, $1, $3);
#  125|   		if (!$$) {
#  126|-> 			filter_unref_node($1);
#  127|   			filter_unref_node($3);
#  128|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def12]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:132:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:132:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  130|   	}
#  131|   	| expr T_LT expr	{
#  132|-> 		$$ = filter_new_expr(fltr, F_EXPR_LT, $1, $3);
#  133|   		if (!$$) {
#  134|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def13]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:134:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:134:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  132|   		$$ = filter_new_expr(fltr, F_EXPR_LT, $1, $3);
#  133|   		if (!$$) {
#  134|-> 			filter_unref_node($1);
#  135|   			filter_unref_node($3);
#  136|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def14]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:140:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:140:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  138|   	}
#  139|   	| expr T_GE expr	{
#  140|-> 		$$ = filter_new_expr(fltr, F_EXPR_GE, $1, $3);
#  141|   		if (!$$) {
#  142|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def15]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:142:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:142:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  140|   		$$ = filter_new_expr(fltr, F_EXPR_GE, $1, $3);
#  141|   		if (!$$) {
#  142|-> 			filter_unref_node($1);
#  143|   			filter_unref_node($3);
#  144|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def16]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:148:33: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:148:33: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  146|   	}
#  147|   	| expr T_GT expr	{
#  148|-> 		$$ = filter_new_expr(fltr, F_EXPR_GT, $1, $3);
#  149|   		if (!$$) {
#  150|   			filter_unref_node($1);

Error: GCC_ANALYZER_WARNING (CWE-127): [#def17]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:150:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:150:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  148|   		$$ = filter_new_expr(fltr, F_EXPR_GT, $1, $3);
#  149|   		if (!$$) {
#  150|-> 			filter_unref_node($1);
#  151|   			filter_unref_node($3);
#  152|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def18]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:161:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:161:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  159|   			$$ = filter_new_expr(fltr, F_EXPR_REG, $1, $3);
#  160|   		if (!$$) {
#  161|-> 			filter_unref_node($1);
#  162|   			filter_unref_node($3);
#  163|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-127): [#def19]
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:172:25: warning[-Wanalyzer-out-of-bounds]: stack-based buffer under-read
util-linux-2.43.devel/libsmartcols/src/filter-parser.c:1360:17: note: in expansion of macro 'YYTRANSLATE'
util-linux-2.43.devel/libsmartcols/src/filter-parser.y:172:25: note: valid subscripts for 'yyvsa' are '[0]' to '[199]'
#  170|   			$$ = filter_new_expr(fltr, F_EXPR_NREG, $1, $3);
#  171|   		if (!$$) {
#  172|-> 			filter_unref_node($1);
#  173|   			filter_unref_node($3);
#  174|   			YYERROR;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def20]
util-linux-2.43.devel/misc-utils/blkid.c: scope_hint: In function ‘main’
util-linux-2.43.devel/misc-utils/blkid.c:886:43: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘xcalloc((long unsigned int)(argc - optind), 8) + (long unsigned int)numdev * 8’
util-linux-2.43.devel/misc-utils/blkid.c:49: included_from: Included from here.
util-linux-2.43.devel/misc-utils/blkid.c:18: included_from: Included from here.
#  884|   				continue;
#  885|   
#  886|-> 			devices[numdev++] = dev;
#  887|   		}
#  888|

Scan Properties

analyzer-version-clippy1.96.0
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.96.0
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-204.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-nameutil-linux-2.43.devel-1.20260623101934655504.master.914.gcf32e5200
diffbase-store-results-to/tmp/tmp23g4sh5p/util-linux-2.43.devel-1.20260623101934655504.master.914.gcf32e5200.tar.xz
diffbase-time-created2026-06-23 14:03:22
diffbase-time-finished2026-06-23 14:18:48
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,shellcheck,gcc,clippy,cppcheck' '-o' '/tmp/tmp23g4sh5p/util-linux-2.43.devel-1.20260623101934655504.master.914.gcf32e5200.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp23g4sh5p/util-linux-2.43.devel-1.20260623101934655504.master.914.gcf32e5200.src.rpm'
diffbase-tool-versioncsmock-3.8.6.20260622.142223.gdf61adf-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-204.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-nameutil-linux-2.43.devel-1.20260623134615188157.pr4436.919.g878ee5d04
store-results-to/tmp/tmp1qkijaea/util-linux-2.43.devel-1.20260623134615188157.pr4436.919.g878ee5d04.tar.xz
time-created2026-06-23 14:19:15
time-finished2026-06-23 14:32:29
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,shellcheck,gcc,clippy,cppcheck' '-o' '/tmp/tmp1qkijaea/util-linux-2.43.devel-1.20260623134615188157.pr4436.919.g878ee5d04.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp1qkijaea/util-linux-2.43.devel-1.20260623134615188157.pr4436.919.g878ee5d04.src.rpm'
tool-versioncsmock-3.8.6.20260622.142223.gdf61adf-1.el9