Error: CPPCHECK_WARNING (CWE-457): [#def1] ghostscript-10.06.0/base/gdevp14.c:8818: warning[uninitvar]: Uninitialized variable: comp_value # 8816| for (i = pgs->color_component_map.num_components - 1; i >= 0; i--) # 8817| comp_value[i] = all; # 8818|-> map_components_to_colorants(comp_value, &(pgs->color_component_map), cm_comps); # 8819| } # 8820| Error: COMPILER_WARNING (CWE-457): [#def2] ghostscript-10.06.0/base/gsicc_manage.c:856:59: warning[-Wmaybe-uninitialized]: ‘icc_profile’ may be used uninitialized # 856 | srcgtag->gray_profiles[gsSRC_TEXTPRO] = icc_profile; # | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~ ghostscript-10.06.0/base/gsicc_manage.c: scope_hint: In function ‘gs_setsrcgtagicc’ ghostscript-10.06.0/base/gsicc_manage.c:648:20: note: ‘icc_profile’ was declared here # 648 | cmm_profile_t *icc_profile; # | ^~~~~~~~~~~ # 854| break; # 855| case TEXT_GRAY: # 856|-> srcgtag->gray_profiles[gsSRC_TEXTPRO] = icc_profile; # 857| srcgtag->gray_rend_cond[gsSRC_TEXTPRO].cmm = cmm; # 858| if (cmm == gsCMM_DEFAULT) { Error: COMPILER_WARNING (CWE-563): [#def3] ghostscript-10.06.0/base/sdctc.c: scope_hint: In function ‘stream_dct_end_passthrough’ ghostscript-10.06.0/base/sdctc.c:89:10: warning[-Wunused-variable]: unused variable ‘EOI’ # 89 | char EOI[2] = {0xff, 0xD9}; # | ^~~ # 87| stream_dct_end_passthrough(jpeg_decompress_data *jddp) # 88| { # 89|-> char EOI[2] = {0xff, 0xD9}; # 90| # 91| if (jddp != NULL && jddp->PassThrough != 0 && jddp->PassThroughfn != NULL) { Error: CPPCHECK_WARNING (CWE-682): [#def4] ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:232: error[nullPointerArithmetic]: Pointer addition with NULL pointer. # 230| size_t i; # 231| uint32_t* BROTLI_RESTRICT const sizes = u32 + 0 * HISTOGRAMS_PER_BATCH; # 232|-> uint32_t* BROTLI_RESTRICT const new_clusters = u32 + 1 * HISTOGRAMS_PER_BATCH; # 233| uint32_t* BROTLI_RESTRICT const symbols = u32 + 2 * HISTOGRAMS_PER_BATCH; # 234| uint32_t* BROTLI_RESTRICT const remap = u32 + 3 * HISTOGRAMS_PER_BATCH; Error: CPPCHECK_WARNING (CWE-682): [#def5] ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:233: error[nullPointerArithmetic]: Pointer addition with NULL pointer. # 231| uint32_t* BROTLI_RESTRICT const sizes = u32 + 0 * HISTOGRAMS_PER_BATCH; # 232| uint32_t* BROTLI_RESTRICT const new_clusters = u32 + 1 * HISTOGRAMS_PER_BATCH; # 233|-> uint32_t* BROTLI_RESTRICT const symbols = u32 + 2 * HISTOGRAMS_PER_BATCH; # 234| uint32_t* BROTLI_RESTRICT const remap = u32 + 3 * HISTOGRAMS_PER_BATCH; # 235| uint32_t* BROTLI_RESTRICT const block_lengths = Error: CPPCHECK_WARNING (CWE-682): [#def6] ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:234: error[nullPointerArithmetic]: Pointer addition with NULL pointer. # 232| uint32_t* BROTLI_RESTRICT const new_clusters = u32 + 1 * HISTOGRAMS_PER_BATCH; # 233| uint32_t* BROTLI_RESTRICT const symbols = u32 + 2 * HISTOGRAMS_PER_BATCH; # 234|-> uint32_t* BROTLI_RESTRICT const remap = u32 + 3 * HISTOGRAMS_PER_BATCH; # 235| uint32_t* BROTLI_RESTRICT const block_lengths = # 236| u32 + 4 * HISTOGRAMS_PER_BATCH; Error: CPPCHECK_WARNING (CWE-682): [#def7] ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:236: error[nullPointerArithmetic]: Pointer addition with NULL pointer. # 234| uint32_t* BROTLI_RESTRICT const remap = u32 + 3 * HISTOGRAMS_PER_BATCH; # 235| uint32_t* BROTLI_RESTRICT const block_lengths = # 236|-> u32 + 4 * HISTOGRAMS_PER_BATCH; # 237| /* TODO(eustas): move to arena? */ # 238| HistogramType* tmp = BROTLI_ALLOC(m, HistogramType, 2); Error: GCC_ANALYZER_WARNING (CWE-476): [#def8] ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:278:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘u32’ ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:201:13: enter_function: entry to ‘ClusterBlocksDistance’ ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:206:33: branch_true: following ‘true’ branch (when ‘num_blocks != 0’)... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:206:33: branch_true: ...to here ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:208:7: branch_false: following ‘false’ branch (when ‘num_blocks == 18446744073709551360’)... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:210:7: branch_false: ...to here ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:214:7: branch_false: following ‘false’ branch (when ‘expected_num_clusters == 0’)... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:219:31: branch_false: ...to here ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:219:31: branch_true: following ‘true’ branch (when ‘num_blocks != 0’)... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:219:31: call_function: inlined call to ‘brotli_min_size_t’ from ‘ClusterBlocksDistance’ ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:252:17: branch_false: following ‘false’ branch (when ‘i >= length’)... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:252:17: branch_false: ...to here ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:263:15: branch_true: following ‘true’ branch (when ‘i < num_blocks’)... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:265:9: branch_true: ...to here ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:268:17: branch_true: following ‘true’ branch... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:270:43: branch_true: ...to here ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:272:19: branch_false: following ‘false’ branch (when ‘k >= block_length’)... ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:275:33: branch_false: ...to here ghostscript-10.06.0/brotli/c/enc/block_splitter_inc.h:278:7: danger: dereference of NULL ‘u32 + j * 4’ # 276| new_clusters[j] = (uint32_t)j; # 277| symbols[j] = (uint32_t)j; # 278|-> sizes[j] = 1; # 279| } # 280| num_new_clusters = FN(BrotliHistogramCombine)( Error: COMPILER_WARNING (CWE-563): [#def9] ghostscript-10.06.0/devices/gdevjpeg.c: scope_hint: In function ‘jpeg_put_params’ ghostscript-10.06.0/devices/gdevjpeg.c:237:10: warning[-Wunused-variable]: unused variable ‘embed_profile’ # 237 | bool embed_profile = jdev->EmbedProfile, bparam; # | ^~~~~~~~~~~~~ # 235| float qf = jdev->QFactor; # 236| float fparam; # 237|-> bool embed_profile = jdev->EmbedProfile, bparam; # 238| # 239| ecode = gx_downscaler_read_params(plist, &jdev->downscale, 0); Error: CPPCHECK_WARNING (CWE-457): [#def10] ghostscript-10.06.0/devices/gdevpdfimg.c:620: error[uninitvar]: Uninitialized variable: buf # 618| stream_cursor_write_init(&w, buf, sizeof(buf)); # 619| status = (*templat->process) (st, &r, &w, true); # 620|-> stream_write(s, buf, (uint) (w.ptr + 1 - buf)); # 621| } # 622| while (status == 1); Error: GCC_ANALYZER_WARNING (CWE-457): [#def11] ghostscript-10.06.0/devices/gdevpng.c:433:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ecode’ ghostscript-10.06.0/devices/gdevpng.c:423:8: branch_false: following ‘false’ branch... ghostscript-10.06.0/devices/gdevpng.c:426:17: branch_false: ...to here ghostscript-10.06.0/devices/gdevpng.c:426:8: branch_false: following ‘false’ branch... ghostscript-10.06.0/devices/gdevpng.c:429:12: branch_false: ...to here ghostscript-10.06.0/devices/gdevpng.c:430:8: branch_false: following ‘false’ branch... ghostscript-10.06.0/devices/gdevpng.c:433:12: branch_false: ...to here ghostscript-10.06.0/devices/gdevpng.c:433:12: danger: use of uninitialized value ‘ecode’ here # 431| ecode = code; # 432| # 433|-> return ecode; # 434| } # 435| Error: COMPILER_WARNING (CWE-457): [#def12] ghostscript-10.06.0/devices/gdevpng.c: scope_hint: In function ‘png_get_params_mfs’ ghostscript-10.06.0/devices/gdevpng.c:433:12: warning[-Wmaybe-uninitialized]: ‘ecode’ may be used uninitialized # 433 | return ecode; # | ^~~~~ ghostscript-10.06.0/devices/gdevpng.c:421:15: note: ‘ecode’ was declared here # 421 | int code, ecode; # | ^~~~~ # 431| ecode = code; # 432| # 433|-> return ecode; # 434| } # 435| Error: COMPILER_WARNING (CWE-563): [#def13] ghostscript-10.06.0/devices/gdevpsd.c:162:21: warning[-Wunused-variable]: unused variable ‘dsep’ # 162 | gs_separations *dsep, *ssep; # | ^~~~ # 160| gs_devn_params *dst_params = &dev->devn_params; # 161| gs_devn_params *src_params = si->params; # 162|-> gs_separations *dsep, *ssep; # 163| equivalent_cmyk_color_params *dequiv = &dev->equiv_cmyk_colors; # 164| equivalent_cmyk_color_params *sequiv = si->equiv; Error: COMPILER_WARNING (CWE-563): [#def14] ghostscript-10.06.0/devices/gdevpsd.c: scope_hint: In function ‘update_spots’ ghostscript-10.06.0/devices/gdevpsd.c:162:28: warning[-Wunused-variable]: unused variable ‘ssep’ # 162 | gs_separations *dsep, *ssep; # | ^~~~ # 160| gs_devn_params *dst_params = &dev->devn_params; # 161| gs_devn_params *src_params = si->params; # 162|-> gs_separations *dsep, *ssep; # 163| equivalent_cmyk_color_params *dequiv = &dev->equiv_cmyk_colors; # 164| equivalent_cmyk_color_params *sequiv = si->equiv; Error: COMPILER_WARNING (CWE-9001): [#def15] ghostscript-10.06.0/pdf/pdf_annot.c:4555:53: warning[-Wcomment]: ‘/*’ within comment # 4555 | /* {"Screen", pdfi_annot_preserve_default}, /* TODO: fts_07_0709.pdf */ # 4553| {"PolyLine", pdfi_annot_preserve_default}, # 4554| {"Popup", pdfi_annot_preserve_default}, # 4555|-> /* {"Screen", pdfi_annot_preserve_default}, /* TODO: fts_07_0709.pdf */ # 4556| {"Sound", pdfi_annot_preserve_default}, # 4557| {"Square", pdfi_annot_preserve_default}, Error: COMPILER_WARNING (CWE-9001): [#def16] ghostscript-10.06.0/pdf/pdf_pattern.c: scope_hint: In function ‘pdfi_setpattern_type1’ ghostscript-10.06.0/pdf/pdf_pattern.c:506:43: warning[-Wcomment]: ‘/*’ within comment # 506 | /* templat.uses_transparency = false; /* disable */ # 504| templat.uses_transparency = transparency; # 505| templat.BM_Not_Normal = BM_Not_Normal; # 506|-> /* templat.uses_transparency = false; /* disable */ # 507| # 508| code = pdfi_gsave(ctx);
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.97.1 |
| diffbase-analyzer-version-cppcheck | 2.21.1 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-246.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | ghostscript-10.07.1-2.fc45 |
| diffbase-store-results-to | /tmp/tmpcsleuix8/ghostscript-10.07.1-2.fc45.tar.xz |
| diffbase-time-created | 2026-08-03 14:30:00 |
| diffbase-time-finished | 2026-08-03 14:36:46 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpcsleuix8/ghostscript-10.07.1-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpcsleuix8/ghostscript-10.07.1-2.fc45.src.rpm' |
| diffbase-tool-version | csmock-3.8.7.HEAD-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-246.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | ghostscript-10.06.0-2.fc44 |
| store-results-to | /tmp/tmpjq2l4asj/ghostscript-10.06.0-2.fc44.tar.xz |
| time-created | 2026-08-03 14:21:46 |
| time-finished | 2026-08-03 14:29:25 |
| title | Fixed findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpjq2l4asj/ghostscript-10.06.0-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpjq2l4asj/ghostscript-10.06.0-2.fc44.src.rpm' |
| tool-version | csmock-3.8.7.HEAD-1.el9 |