Fixed findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
findutils-4.10.0/build/gl/lib/parse-datetime.c:1814:3: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value '*<unknown>'
findutils-4.10.0/build/gl/lib/parse-datetime.y:2389:1: enter_function: entry to 'parse_datetime'
findutils-4.10.0/build/gl/lib/parse-datetime.y:2394:6: branch_false: following 'false' branch...
findutils-4.10.0/build/gl/lib/parse-datetime.y:2396:13: branch_false: ...to here
findutils-4.10.0/build/gl/lib/parse-datetime.y:2396:13: call_function: calling 'parse_datetime_body' from 'parse_datetime'

Error: COMPILER_WARNING (CWE-704): [#def2]
findutils-4.10.0/gl/lib/c-strstr.c: scope_hint: In function 'c_strstr'
findutils-4.10.0/gl/lib/c-strstr.c:31:10: warning[-Wdiscarded-qualifiers]: return discards 'const' qualifier from pointer target type
#   31 |   return strstr (haystack, needle);
#      |          ^~~~~~
#   29|     /* POSIX says that strstr() interprets the strings as byte sequences, not
#   30|        as character sequences in the current locale.  */
#   31|->   return strstr (haystack, needle);
#   32|   }

Error: COMPILER_WARNING (CWE-704): [#def3]
findutils-4.10.0/gl/lib/c-strstr.c:31:10: warning[-Wdiscarded-qualifiers]: return discards 'const' qualifier from pointer target type
#   29|     /* POSIX says that strstr() interprets the strings as byte sequences, not
#   30|        as character sequences in the current locale.  */
#   31|->   return strstr (haystack, needle);
#   32|   }

Error: CPPCHECK_WARNING (CWE-562): [#def4]
findutils-4.10.0/gl/lib/mktime.c:262: error[returnDanglingLifetime]: Returning pointer to local variable 'x' that will be invalid when returning.
#  260|   {
#  261|     __time64_t x = t;
#  262|->   return convert (&x, tm);
#  263|   }
#  264|   

Error: GCC_ANALYZER_WARNING (CWE-401): [#def5]
findutils-4.10.0/gl/lib/time_rz.c:210:9: warning[-Wanalyzer-malloc-leak]: leak of 'set_tz(tz)'
findutils-4.10.0/build/gl/lib/time.h:1034:1: enter_function: entry to 'mktime_z'
findutils-4.10.0/gl/lib/time_rz.c:287:6: branch_false: following 'false' branch (when 'tz' is non-NULL)...
findutils-4.10.0/gl/lib/time_rz.c:291:27: branch_false: ...to here
findutils-4.10.0/gl/lib/time_rz.c:291:27: call_function: calling 'set_tz' from 'mktime_z'
findutils-4.10.0/gl/lib/time_rz.c:291:27: return_function: returning to 'mktime_z' from 'set_tz'
findutils-4.10.0/gl/lib/time_rz.c:292:10: branch_true: following 'true' branch...
findutils-4.10.0/gl/lib/time_rz.c:295:25: branch_true: ...to here
findutils-4.10.0/gl/lib/time_rz.c:306:16: branch_false: following 'false' branch...
findutils-4.10.0/gl/lib/time_rz.c:306:16: branch_false: ...to here
findutils-4.10.0/gl/lib/time_rz.c:210:9: danger: 'set_tz(tz)' leaks here; was allocated at [(8)](sarif:/runs/0/results/1/codeFlows/0/threadFlows/0/locations/7)
#  208|     char *env_tz = getenv_TZ ();
#  209|     if (env_tz
#  210|->       ? tz->tz_is_set && strcmp (tz->abbrs, env_tz) == 0
#  211|         : !tz->tz_is_set)
#  212|       return local_tz;

Scan Properties