Newly introduced findings

List of Findings

Error: COMPILER_WARNING (CWE-9001): [#def1]
findutils-4.11.0/gl/lib/mbiter-aux.c: scope_hint: In function 'mbiter_is_utf8'
findutils-4.11.0/gl/lib/mbiter-aux.c:32:41: warning[-Wcomment]: '/*' within comment
#   32 |          to U+0100.  (See libiconv/tests/*.TXT for all the mapping tables.)
#   30|       {
#   31|         /* UTF-8 is the only encoding in use which maps the bytes 0xC4 0x80
#   32|->          to U+0100.  (See libiconv/tests/*.TXT for all the mapping tables.)
#   33|            We can assume that in this case, the char32_t encoding is Unicode
#   34|            (not platform-dependent like for other locale encodings).  */

Error: CPPCHECK_WARNING (CWE-457): [#def2]
findutils-4.11.0/gl/lib/printf-parse.c:251: error[uninitvar]: Uninitialized variable: memory_size
#  249|                       goto error;
#  250|                   }
#  251|->               REGISTER_ARG (dp->width_arg_index, TYPE_INT);
#  252|               }
#  253|             else if (*cp >= '0' && *cp <= '9')

Error: CPPCHECK_WARNING (CWE-457): [#def3]
findutils-4.11.0/gl/lib/printf-parse.c:309: error[uninitvar]: Uninitialized variable: memory_size
#  307|                           goto error;
#  308|                       }
#  309|->                   REGISTER_ARG (dp->precision_arg_index, TYPE_INT);
#  310|                   }
#  311|                 else

Error: CPPCHECK_WARNING (CWE-457): [#def4]
findutils-4.11.0/gl/lib/printf-parse.c:647: error[uninitvar]: Uninitialized variable: memory_size
#  645|                         goto error;
#  646|                     }
#  647|->                 REGISTER_ARG (dp->arg_index, type);
#  648|                 }
#  649|               dp->conversion = c;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
findutils-4.11.0/gl/lib/time_rz.c:218:9: warning[-Wanalyzer-malloc-leak]: leak of 'set_tz(tz)'
findutils-4.11.0/build/gl/lib/time.h:1122:1: enter_function: entry to 'mktime_z'
findutils-4.11.0/gl/lib/time_rz.c:293:6: branch_false: following 'false' branch (when 'tz' is non-NULL)...
findutils-4.11.0/gl/lib/time_rz.c:297:27: branch_false: ...to here
findutils-4.11.0/gl/lib/time_rz.c:297:27: call_function: calling 'set_tz' from 'mktime_z'
findutils-4.11.0/gl/lib/time_rz.c:297:27: return_function: returning to 'mktime_z' from 'set_tz'
findutils-4.11.0/gl/lib/time_rz.c:298:10: branch_true: following 'true' branch...
findutils-4.11.0/gl/lib/time_rz.c:301:25: branch_true: ...to here
findutils-4.11.0/gl/lib/time_rz.c:311:16: branch_false: following 'false' branch...
findutils-4.11.0/gl/lib/time_rz.c:311:16: branch_false: ...to here
findutils-4.11.0/gl/lib/time_rz.c:218:9: danger: 'set_tz(tz)' leaks here; was allocated at [(8)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/7)
#  216|     char *env_tz = getenv_TZ ();
#  217|     if (env_tz
#  218|->       ? tz->tz_is_set && streq (tz->abbrs, env_tz)
#  219|         : !tz->tz_is_set)
#  220|       return local_tz;

Scan Properties