Error: CPPCHECK_WARNING (CWE-476): [#def1] glibc-2.43.9000-536-ga5aa0df24a/elf/dl-deps.c:451: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: l_initfini # 449| N_("cannot allocate dependency list")); # 450| } # 451|-> l_initfini[0] = l; # 452| memcpy (&l_initfini[1], needed, nneeded * sizeof needed[0]); # 453| memcpy (&l_initfini[nneeded + 1], l_initfini, Error: CPPCHECK_WARNING (CWE-476): [#def2] glibc-2.43.9000-536-ga5aa0df24a/elf/dl-deps.c:453: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: l_initfini # 451| l_initfini[0] = l; # 452| memcpy (&l_initfini[1], needed, nneeded * sizeof needed[0]); # 453|-> memcpy (&l_initfini[nneeded + 1], l_initfini, # 454| nneeded * sizeof needed[0]); # 455| atomic_write_barrier (); Error: GCC_ANALYZER_WARNING (CWE-476): [#def3] glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘where’ glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:39:1: enter_function: entry to ‘_dl_relocate_static_pie’ glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:75:3: call_function: inlined call to ‘elf_get_dynamic_info’ from ‘_dl_relocate_static_pie’ glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_true: following ‘true’ branch (when ‘r < end’)... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_true: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: branch_true: following ‘true’ branch... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc-static-pie.c:83:3: danger: dereference of NULL ‘where + (long unsigned int)i * 8’ # 81| /* Relocate ourselves so we can do normal function calls and data access # 82| using the global offset table. IRELATIVE entries are deferred. */ # 83|-> ELF_DYNAMIC_RELOCATE_NOIFUNC (main_map, NULL, 0, 0); # 84| # 85| /* Initialize _r_debug_extended. */ Error: GCC_ANALYZER_WARNING (CWE-476): [#def4] glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘where’ glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: branch_true: following ‘true’ branch (when ‘r < end’)... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: branch_true: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: branch_true: following ‘true’ branch... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-reloc.c:281:5: danger: dereference of NULL ‘where + (long unsigned int)i * 8’ # 279| initialiser bytes that were placed into the slot by the early # 280| _dl_allocate_tls_init. */ # 281|-> ELF_DYNAMIC_RELOCATE_NOIFUNC (l, scope, lazy, consider_profiling); # 282| # 283| #ifdef SHARED Error: GCC_ANALYZER_WARNING (CWE-457): [#def5] glibc-2.43.9000-536-ga5aa0df24a/include/time.h:415:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ts64.<U8640>’ glibc-2.43.9000-536-ga5aa0df24a/nptl/pthread_clockjoin.c:46:6: branch_true: following ‘true’ branch (when ‘abstime’ is non-NULL)... glibc-2.43.9000-536-ga5aa0df24a/nptl/pthread_clockjoin.c:46:6: branch_true: ...to here glibc-2.43.9000-536-ga5aa0df24a/nptl/pthread_clockjoin.c:48:34: call_function: inlined call to ‘valid_timespec_to_timespec64’ from ‘___pthread_clockjoin_np’ # 413| ts64.tv_nsec = ts.tv_nsec; # 414| # 415|-> return ts64; # 416| } # 417| Error: GCC_ANALYZER_WARNING (CWE-401): [#def6] glibc-2.43.9000-536-ga5aa0df24a/io/ftw-common.c:215:1: warning[-Wanalyzer-malloc-leak]: leak of ‘newp’ glibc-2.43.9000-536-ga5aa0df24a/io/ftw-common.c:921:1: enter_function: entry to ‘ftw’ glibc-2.43.9000-536-ga5aa0df24a/io/ftw-common.c:923:10: call_function: calling ‘ftw_startup’ from ‘ftw’ # 213| newp->ino = st->st_ino; # 214| return __tsearch (newp, &data->known_objects, object_compare) ? 0 : -1; # 215|-> } # 216| # 217| Error: GCC_ANALYZER_WARNING (CWE-465): [#def7] glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:334:6: warning[-Wanalyzer-deref-before-check]: check of ‘fp’ for NULL after already dereferencing it glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:261:1: enter_function: entry to ‘_IO_new_file_fopen’ glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:272:6: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:274:11: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:295:15: branch_true: following ‘true’ branch (when ‘i != 7’)... glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:297:7: branch_true: ...to here glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:331:12: call_function: calling ‘_IO_file_open’ from ‘_IO_new_file_fopen’ glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:331:12: return_function: returning to ‘_IO_new_file_fopen’ from ‘_IO_file_open’ glibc-2.43.9000-536-ga5aa0df24a/libio/fileops.c:334:6: danger: pointer ‘fp’ is checked for NULL here but it was already dereferenced at [(2)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/1) # 332| is32not64); # 333| # 334|-> if (result != NULL) # 335| { # 336| /* Test whether the mode string specifies the conversion. */ Error: GCC_ANALYZER_WARNING (CWE-401): [#def8] glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1138:8: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(196)’ glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1172:6: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1175:6: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1175:6: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1181:3: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1138:8: danger: ‘xmalloc(196)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0) # 1136| }; # 1137| # 1138|-> if (!config.disable_redirect) # 1139| resolv_test_init (); # 1140| Error: GCC_ANALYZER_WARNING (CWE-401): [#def9] glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1138:8: warning[-Wanalyzer-malloc-leak]: leak of ‘xmalloc(296)’ glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1172:6: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1175:6: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1175:6: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1181:3: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/support/resolv_test.c:1138:8: danger: ‘xmalloc(296)’ leaks here; was allocated at [(1)](sarif:/runs/0/results/3/codeFlows/0/threadFlows/0/locations/0) # 1136| }; # 1137| # 1138|-> if (!config.disable_redirect) # 1139| resolv_test_init (); # 1140| Error: GCC_ANALYZER_WARNING (CWE-457): [#def10] glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:88:13: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘norm.<Uf1e0>’ glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:84:6: branch_true: following ‘true’ branch... glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:86:20: branch_true: ...to here glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:88:13: danger: use of uninitialized value ‘norm.<Uf1e0>’ here # 86| norm.tv_sec = (time.tv_nsec < 0) ? TYPE_MINIMUM (time_t): TYPE_MAXIMUM (time_t); # 87| norm.tv_nsec = (time.tv_nsec < 0) ? -1 * (TIMESPEC_HZ - 1) : TIMESPEC_HZ - 1; # 88|-> return norm; # 89| } # 90| norm.tv_nsec = time.tv_nsec % TIMESPEC_HZ; Error: GCC_ANALYZER_WARNING (CWE-457): [#def11] glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:91:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘norm.<Uf1e0>’ glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:84:6: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:90:18: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/support/timespec.c:91:10: danger: use of uninitialized value ‘norm.<Uf1e0>’ here # 89| } # 90| norm.tv_nsec = time.tv_nsec % TIMESPEC_HZ; # 91|-> return norm; # 92| } # 93| Error: GCC_ANALYZER_WARNING (CWE-476): [#def12] glibc-2.43.9000-536-ga5aa0df24a/sysdeps/generic/dl-cache.h:324:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘cache’ glibc-2.43.9000-536-ga5aa0df24a/elf/dl-cache.c:610:1: enter_function: entry to ‘_dl_load_cache_tunables’ glibc-2.43.9000-536-ga5aa0df24a/elf/dl-cache.c:617:6: branch_true: following ‘true’ branch... glibc-2.43.9000-536-ga5aa0df24a/elf/dl-cache.c:618:5: branch_true: ...to here glibc-2.43.9000-536-ga5aa0df24a/elf/dl-cache.c:618:5: call_function: calling ‘_dl_maybe_load_ldsocache’ from ‘_dl_load_cache_tunables’ # 322| { # 323| memset (loaded, 0, sizeof (*loaded)); # 324|-> if (cache->extension_offset == 0) # 325| /* No extensions present. This is not a format error. */ # 326| return true; Error: GCC_ANALYZER_WARNING (CWE-457): [#def13] glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:67:20: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ts64.<U8640>’ glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:34:6: branch_false: following ‘false’ branch (when ‘clock_id != 3’)... glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:36:6: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:51:6: branch_false: following ‘false’ branch... glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:51:6: branch_false: ...to here glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:64:10: branch_true: following ‘true’ branch... glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:66:15: branch_true: ...to here glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:66:14: branch_true: following ‘true’ branch... glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:67:20: danger: use of uninitialized value ‘ts64.<U8640>’ here # 65| { # 66| if (r == -EINTR && rem != NULL && (flags & TIMER_ABSTIME) == 0) # 67|-> *rem = valid_timespec_to_timespec64 (tr32); # 68| } # 69| } Error: GCC_ANALYZER_WARNING (CWE-457): [#def14] glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/clock_nanosleep.c:84:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ts64.<U8640>’ # 82| struct __timespec64 treq64, trem64; # 83| # 84|-> treq64 = valid_timespec_to_timespec64 (*req); # 85| r = __clock_nanosleep_time64 (clock_id, flags, &treq64, # 86| rem != NULL ? &trem64 : NULL); Error: GCC_ANALYZER_WARNING (CWE-457): [#def15] glibc-2.43.9000-536-ga5aa0df24a/sysdeps/unix/sysv/linux/nanosleep.c:41:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘ts64.<U8640>’ # 39| struct __timespec64 treq64, trem64; # 40| # 41|-> treq64 = valid_timespec_to_timespec64 (*req); # 42| int ret = __nanosleep64 (&treq64, rem != NULL ? &trem64 : NULL); # 43|
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.97.1 |
| diffbase-analyzer-version-cppcheck | 2.21.1 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-232.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | glibc-2.43-2.fc44 |
| diffbase-store-results-to | /tmp/tmp64mnw3q0/glibc-2.43-2.fc44.tar.xz |
| diffbase-time-created | 2026-08-03 14:23:51 |
| diffbase-time-finished | 2026-08-03 16:03:55 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmp64mnw3q0/glibc-2.43-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp64mnw3q0/glibc-2.43-2.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.7.HEAD-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-232.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | glibc-2.43.9000-25.fc45 |
| store-results-to | /tmp/tmp9p3ny31j/glibc-2.43.9000-25.fc45.tar.xz |
| time-created | 2026-08-03 16:05:13 |
| time-finished | 2026-08-03 17:48:47 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmp9p3ny31j/glibc-2.43.9000-25.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp9p3ny31j/glibc-2.43.9000-25.fc45.src.rpm' |
| tool-version | csmock-3.8.7.HEAD-1.el9 |