Error: GCC_ANALYZER_WARNING (CWE-476): [#def1] fwupd-2.1.1/src/fu-engine-config.c:212:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘error_local’ fwupd-2.1.1/src/fu-engine-config.c:111:1: enter_function: entry to ‘fu_engine_config_reload’ fwupd-2.1.1/src/fu-engine-config.c:206:12: branch_true: following ‘true’ branch... fwupd-2.1.1/src/fu-engine-config.c:206:12: branch_true: ...to here fwupd-2.1.1/src/fu-engine-config.c:207:35: branch_true: following ‘true’ branch... fwupd-2.1.1/src/fu-engine-config.c:208:43: branch_true: ...to here fwupd-2.1.1/src/fu-engine-config.c:208:43: release_memory: ‘error_local’ is NULL fwupd-2.1.1/src/fu-engine-config.c:210:29: call_function: calling ‘fu_engine_config_report_from_spec’ from ‘fu_engine_config_reload’ fwupd-2.1.1/src/fu-engine-config.c:210:29: return_function: returning to ‘fu_engine_config_reload’ from ‘fu_engine_config_report_from_spec’ fwupd-2.1.1/src/fu-engine-config.c:211:28: branch_true: following ‘true’ branch... fwupd-2.1.1/src/fu-engine-config.c:212:33: branch_true: ...to here fwupd-2.1.1/src/fu-engine-config.c:212:33: release_memory: ‘error_local’ is NULL fwupd-2.1.1/src/fu-engine-config.c:212:33: danger: dereference of NULL ‘error_local’ # 210| fu_engine_config_report_from_spec(self, report_specs[i], &error_local); # 211| if (report == NULL) { # 212|-> g_warning("failed to parse %s: %s", # 213| report_specs[i], # 214| error_local->message); Error: GCC_ANALYZER_WARNING (CWE-688): [#def2] fwupd-2.1.1/src/fu-release.c:1378:16: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected fwupd-2.1.1/src/fu-release.c:1348:1: enter_function: entry to ‘fu_release_compare’ fwupd-2.1.1/src/fu-release.c:1350:29: call_function: calling ‘fu_release_get_device’ from ‘fu_release_compare’ fwupd-2.1.1/src/fu-release.c:1350:29: return_function: returning to ‘fu_release_compare’ from ‘fu_release_get_device’ fwupd-2.1.1/src/fu-release.c:1351:29: call_function: calling ‘fu_release_get_device’ from ‘fu_release_compare’ fwupd-2.1.1/src/fu-release.c:1351:29: return_function: returning to ‘fu_release_compare’ from ‘fu_release_get_device’ fwupd-2.1.1/src/fu-release.c:1354:12: branch_false: following ‘false’ branch... fwupd-2.1.1/src/fu-release.c:1362:13: branch_false: ...to here fwupd-2.1.1/src/fu-release.c:1362:12: branch_false: following ‘false’ branch... fwupd-2.1.1/src/fu-release.c:1364:12: branch_false: ...to here fwupd-2.1.1/src/fu-release.c:1364:12: branch_false: following ‘false’ branch... fwupd-2.1.1/src/fu-release.c:1368:13: branch_false: ...to here fwupd-2.1.1/src/fu-release.c:1378:16: danger: argument 1 (‘fu_release_get_device(release1)’) NULL where non-null expected # 1376| # 1377| /* FWUPD_DEVICE_FLAG_INSTALL_ALL_RELEASES has to be from oldest to newest */ # 1378|-> return fu_version_compare(fu_release_get_version(release1), # 1379| fu_release_get_version(release2), # 1380| fu_device_get_version_format(device1));
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.97.1 |
| diffbase-analyzer-version-cppcheck | 2.21.1 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-229.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | fwupd-2.1.7-1.fc45 |
| diffbase-store-results-to | /tmp/tmpi53oylxu/fwupd-2.1.7-1.fc45.tar.xz |
| diffbase-time-created | 2026-08-03 14:35:27 |
| diffbase-time-finished | 2026-08-03 14:53:30 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpi53oylxu/fwupd-2.1.7-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpi53oylxu/fwupd-2.1.7-1.fc45.src.rpm' |
| diffbase-tool-version | csmock-3.8.7.HEAD-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-229.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | fwupd-2.1.1-1.fc44 |
| store-results-to | /tmp/tmpod1zp95h/fwupd-2.1.1-1.fc44.tar.xz |
| time-created | 2026-08-03 14:18:18 |
| time-finished | 2026-08-03 14:35:05 |
| title | Fixed findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpod1zp95h/fwupd-2.1.1-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpod1zp95h/fwupd-2.1.1-1.fc44.src.rpm' |
| tool-version | csmock-3.8.7.HEAD-1.el9 |