Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-457): [#def1]
gawk-5.4.1/gawkapi.h:1010:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'string'
gawk-5.4.1/extension/ordchr.c:115:1: enter_function: entry to 'do_chr'
gawk-5.4.1/extension/ordchr.c:123:9: branch_true: following 'true' branch (when 'result' is non-NULL)...
gawk-5.4.1/extension/ordchr.c:125:13: branch_true: ...to here
gawk-5.4.1/extension/ordchr.c:125:12: branch_true: following 'true' branch...
gawk-5.4.1/extension/ordchr.c:126:17: branch_true: ...to here
gawk-5.4.1/extension/ordchr.c:128:20: branch_true: following 'true' branch...
gawk-5.4.1/extension/ordchr.c:129:25: branch_true: ...to here
gawk-5.4.1/extension/ordchr.c:147:16: call_function: inlined call to 'r_make_string' from 'do_chr'
# 1008|   	if (duplicate) {
# 1009|   		emalloc(cp, char *, length + 1, "r_make_string");
# 1010|-> 		memcpy(cp, string, length);
# 1011|   		cp[length] = '\0';
# 1012|   		result->str_value.str = cp;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
gawk-5.4.1/io.c:4160:33: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘rtval’
gawk-5.4.1/io.c:3997:12: branch_false: following ‘false’ branch...
gawk-5.4.1/io.c:4018:13: branch_false: ...to here
gawk-5.4.1/io.c:4045:20: branch_false: following ‘false’ branch...
gawk-5.4.1/io.c:4053:20: branch_false: ...to here
gawk-5.4.1/io.c:4099:20: branch_false: following ‘false’ branch...
gawk-5.4.1/io.c:4105:27: branch_false: ...to here
gawk-5.4.1/io.c:4113:28: branch_true: following ‘true’ branch...
gawk-5.4.1/io.c:4114:33: branch_true: ...to here
gawk-5.4.1/io.c:4128:12: branch_false: following ‘false’ branch...
gawk-5.4.1/io.c:4131:13: branch_false: ...to here
gawk-5.4.1/io.c:4131:12: branch_false: following ‘false’ branch...
gawk-5.4.1/io.c:4135:17: branch_false: ...to here
gawk-5.4.1/io.c:4135:17: branch_true: following ‘true’ branch...
gawk-5.4.1/io.c:4149:21: branch_true: ...to here
gawk-5.4.1/io.c:4149:20: branch_false: following ‘false’ branch...
gawk-5.4.1/io.c:4152:27: branch_false: following ‘false’ branch...
gawk-5.4.1/io.c:4157:27: branch_false: ...to here
gawk-5.4.1/io.c:4157:27: branch_true: following ‘true’ branch...
gawk-5.4.1/io.c:4158:28: branch_true: ...to here
gawk-5.4.1/io.c:4158:28: branch_true: following ‘true’ branch...
gawk-5.4.1/io.c:4160:33: danger: dereference of NULL ‘rtval’
# 4158|   			if (! do_traditional && (rtval->stlen >= recm.rt_len)) {
# 4159|   				rtval->stlen = recm.rt_len;
# 4160|-> 				free_wstr(rtval);
# 4161|   			} else
# 4162|   				set_RT(recm.rt_start, recm.rt_len);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
gawk-5.4.1/printf.c:1183:22: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
gawk-5.4.1/printf.c:1166:12: branch_false: following ‘false’ branch...
gawk-5.4.1/printf.c:1183:22: danger: argument 1 (‘format_nan_inf(arg, *flags.format)’) NULL where non-null expected
# 1181|   
# 1182|   	// A NaN or Inf, deal with a field width, if any
# 1183|-> 	size_t len = strlen(nan_inf_val);
# 1184|   	if (flags->field_width > len) {
# 1185|   		char *buf = estrdup(nan_inf_val, len);

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-124.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namegawk-5.3.2-3.fc44
diffbase-store-results-to/tmp/tmpjalknikk/gawk-5.3.2-3.fc44.tar.xz
diffbase-time-created2026-08-03 14:18:41
diffbase-time-finished2026-08-03 14:23:03
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpjalknikk/gawk-5.3.2-3.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpjalknikk/gawk-5.3.2-3.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.7.HEAD-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-124.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegawk-5.4.1-1.fc45
store-results-to/tmp/tmpbh27o2dw/gawk-5.4.1-1.fc45.tar.xz
time-created2026-08-03 14:23:28
time-finished2026-08-03 14:26:57
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpbh27o2dw/gawk-5.4.1-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpbh27o2dw/gawk-5.4.1-1.fc45.src.rpm'
tool-versioncsmock-3.8.7.HEAD-1.el9