Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-369): [#def1]
gnome-software-51.beta/lib/tests/utils.c:95: error[zerodiv]: Division by zero.
#   93|   		}
#   94|   
#   95|-> 		simple_mean = simple_mean * 20 /* convert to percentage points */ / total_votes;
#   96|   
#   97|   		if (should_show_score) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def2]
gnome-software-51.beta/plugins/dnf5/gs-plugin-dnf5.c:873:17: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘local_error’
gnome-software-51.beta/plugins/dnf5/gs-plugin-dnf5.c:4510:1: enter_function: entry to ‘gs_dnf5_system_upgrade_sync’
gnome-software-51.beta/plugins/dnf5/gs-plugin-dnf5.c:4525:24: call_function: calling ‘gs_dnf5_open_session’ from ‘gs_dnf5_system_upgrade_sync’
#  871|   		g_hash_table_insert (self->session_data.active_calls, (gpointer) request_id, call_data);
#  872|   	} else {
#  873|-> 		g_warning ("%s: %s", G_STRFUNC, local_error->message);
#  874|   	}
#  875|   }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:1960:58: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘expected_bus_policies’
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2002:1: enter_function: entry to ‘gs_plugins_flatpak_app_permissions’
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2245:28: branch_true: following ‘true’ branch (when ‘i != 51’)...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2246:34: branch_true: ...to here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2261:20: branch_true: following ‘true’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2263:41: branch_true: ...to here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2268:20: branch_false: following ‘false’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2275:21: branch_false: ...to here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2275:20: branch_false: following ‘false’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2283:17: branch_false: ...to here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2303:17: branch_false: following ‘false’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2303:17: branch_false: ...to here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2306:17: branch_true: following ‘true’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2308:17: branch_true: ...to here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2308:17: branch_true: following ‘true’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2309:17: branch_true: following ‘true’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2315:17: branch_true: following ‘true’ branch...
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2318:80: branch_true: ...to here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2318:46: release_memory: using NULL here
gnome-software-51.beta/plugins/flatpak/tests/flatpak.c:2317:17: call_function: calling ‘assert_compare_bus_policies’ from ‘gs_plugins_flatpak_app_permissions’
# 1958|   
# 1959|   	for (size_t i = 0; i < n_bus_policies; i++) {
# 1960|-> 		const GsBusPolicy *a = bus_policies[i], *b = expected_bus_policies[i];
# 1961|   
# 1962|   		g_assert_cmpint (a->bus_type, ==, b->bus_type);

Error: GCC_ANALYZER_WARNING (CWE-685): [#def4]
gnome-software-51.beta/plugins/rpm-ostree/tests/rpm-ostree.c:68:55: warning[-Wanalyzer-va-list-exhausted]: ‘va’ has no more arguments (3 consumed)
gnome-software-51.beta/plugins/rpm-ostree/tests/rpm-ostree.c:324:1: enter_function: entry to ‘gs_rpm_ostree_split_changelogs_remove’
gnome-software-51.beta/plugins/rpm-ostree/tests/rpm-ostree.c:333:9: call_function: calling ‘create_app’ from ‘gs_rpm_ostree_split_changelogs_remove’
gnome-software-51.beta/plugins/rpm-ostree/tests/rpm-ostree.c:333:9: return_function: returning to ‘gs_rpm_ostree_split_changelogs_remove’ from ‘create_app’
gnome-software-51.beta/plugins/rpm-ostree/tests/rpm-ostree.c:333:9: call_function: calling ‘create_app’ from ‘gs_rpm_ostree_split_changelogs_remove’
gnome-software-51.beta/plugins/rpm-ostree/tests/rpm-ostree.c:333:9: return_function: returning to ‘gs_rpm_ostree_split_changelogs_remove’ from ‘create_app’
gnome-software-51.beta/plugins/rpm-ostree/tests/rpm-ostree.c:333:9: call_function: calling ‘verify_split_changelogs’ from ‘gs_rpm_ostree_split_changelogs_remove’ with 3 variadic arguments
#   66|   	va_start (va, input);
#   67|   
#   68|-> 	for (app = va_arg (va, GsApp *); app != NULL; app = va_arg (va, GsApp *)) {
#   69|   		g_ptr_array_add (expected_apps, app);
#   70|   	}

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-245.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namegnome-software-50.0-2.fc44
diffbase-store-results-to/tmp/tmpagy6umun/gnome-software-50.0-2.fc44.tar.xz
diffbase-time-created2026-08-03 14:35:20
diffbase-time-finished2026-08-03 14:43:08
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpagy6umun/gnome-software-50.0-2.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpagy6umun/gnome-software-50.0-2.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.7.HEAD-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-245.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegnome-software-51~beta-1.fc45
store-results-to/tmp/tmp6nv6x3em/gnome-software-51~beta-1.fc45.tar.xz
time-created2026-08-03 14:43:21
time-finished2026-08-03 14:51:09
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmp6nv6x3em/gnome-software-51~beta-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp6nv6x3em/gnome-software-51~beta-1.fc45.src.rpm'
tool-versioncsmock-3.8.7.HEAD-1.el9