Newly introduced findings

List of Findings

Error: GCC_ANALYZER_WARNING (CWE-688): [#def1]
gst-plugins-base-1.28.5/gst-libs/gst/rtsp/gstrtspmessage.c:351:20: warning[-Wanalyzer-null-argument]: use of NULL ‘header’ where non-null expected
gst-plugins-base-1.28.5/gst-libs/gst/rtsp/gstrtspmessage.c:282:1: enter_function: entry to ‘gst_rtsp_message_new_response’
gst-plugins-base-1.28.5/gst-libs/gst/rtsp/gstrtspmessage.c:287:3: branch_true: following ‘true’ branch (when ‘msg’ is non-NULL)...
gst-plugins-base-1.28.5/gst-libs/gst/rtsp/gstrtspmessage.c:289:12: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/rtsp/gstrtspmessage.c:293:10: call_function: calling ‘gst_rtsp_message_init_response’ from ‘gst_rtsp_message_new_response’
#  349|   
#  350|           header = g_strdup (header);
#  351|->         if ((pos = strchr (header, ';'))) {
#  352|             *pos = '\0';
#  353|           }

Error: GCC_ANALYZER_WARNING (CWE-688): [#def2]
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3076:22: warning[-Wanalyzer-null-argument]: use of NULL ‘str2’ where non-null expected
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3180:1: enter_function: entry to ‘gst_sdp_message_parse_buffer’
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3190:3: branch_true: following ‘true’ branch (when ‘msg’ is non-NULL)...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3191:3: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3191:3: branch_true: following ‘true’ branch (when ‘data’ is non-NULL)...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3192:3: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3192:3: branch_true: following ‘true’ branch (when ‘size != 0’)...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3194:3: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3209:5: branch_false: following ‘false’ branch...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3211:13: branch_false: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3212:8: branch_false: following ‘false’ branch (when ‘type != 0’)...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3215:5: branch_false: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3215:5: branch_false: following ‘false’ branch...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3217:9: branch_false: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3221:5: branch_false: following ‘false’ branch...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3221:5: branch_false: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3228:8: branch_false: following ‘false’ branch (when ‘bufsize > len’)...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3228:8: branch_false: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3235:5: call_function: calling ‘gst_sdp_parse_line’ from ‘gst_sdp_message_parse_buffer’
# 3074|   
# 3075|         str2 = p;
# 3076|->       while ((str2 = strchr (str2, '/')))
# 3077|           *str2++ = ' ';
# 3078|         READ_STRING (conn.nettype);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def3]
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3472:3: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3465:1: enter_function: entry to ‘gst_sdp_parse_rtpmap’
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:3472:3: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#argument 1 of ‘__builtin_strchr’ must be non-null
# 3470|     p = orig_value = g_strdup (rtpmap);
# 3471|   
# 3472|->   PARSE_INT (p, " ", *payload);
# 3473|     if (*payload == -1)
# 3474|       goto fail;

Error: GCC_ANALYZER_WARNING (CWE-688): [#def4]
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4669:5: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4642:1: enter_function: entry to ‘gst_sdp_media_add_rid_attributes’
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4649:3: branch_true: following ‘true’ branch (when ‘attributes’ is non-NULL)...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4650:3: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4650:3: branch_true: following ‘true’ branch...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4651:3: branch_true: following ‘true’ branch...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4653:7: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4655:15: branch_true: following ‘true’ branch...
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4660:13: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/sdp/gstsdpmessage.c:4669:5: danger: argument 1 (‘<unknown>’) NULL where non-null expected
#argument 1 of ‘__builtin_strchr’ must be non-null
# 4667|       to_free = p = g_strdup (rid);
# 4668|   
# 4669|->     PARSE_STRING (p, " ", id);
# 4670|       if (id == NULL || *id == '\0') {
# 4671|         GST_ERROR ("Invalid rid \'%s\'", to_free);

Error: GCC_ANALYZER_WARNING (CWE-688): [#def5]
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:364:15: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:314:1: enter_function: entry to ‘parse_text’
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:322:15: branch_true: following ‘true’ branch (when ‘i != 18’)...
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:323:31: branch_true: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:327:6: branch_false: following ‘false’ branch (when ‘i != 18’)...
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:330:11: branch_false: ...to here
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:362:7: branch_true: following ‘true’ branch...
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:363:26: call_function: inlined call to ‘g_strdup_inline’ from ‘parse_text’
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:363:7: release_memory: using NULL here
gst-plugins-base-1.28.5/gst-libs/gst/tag/mklicensestables.c:364:15: danger: argument 2 (‘<unknown>’) NULL where non-null expected
#  362|         g_assert (license->version == NULL);
#  363|         license->version = g_strdup (text);
#  364|->       found = strstr (known_versions, license->version);
#  365|         if (found == NULL || found[strlen (license->version)] != '/')
#  366|           g_error ("Unexpected version '%s', please add to table.", text);

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-242.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namegstreamer1-plugins-base-1.28.1-1.fc44
diffbase-store-results-to/tmp/tmpa5iiejr8/gstreamer1-plugins-base-1.28.1-1.fc44.tar.xz
diffbase-time-created2026-08-03 14:49:07
diffbase-time-finished2026-08-03 14:55:42
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpa5iiejr8/gstreamer1-plugins-base-1.28.1-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpa5iiejr8/gstreamer1-plugins-base-1.28.1-1.fc44.src.rpm'
diffbase-tool-versioncsmock-3.8.7.HEAD-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-242.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegstreamer1-plugins-base-1.28.5-2.fc45
store-results-to/tmp/tmpn43ea76u/gstreamer1-plugins-base-1.28.5-2.fc45.tar.xz
time-created2026-08-03 14:55:58
time-finished2026-08-03 15:01:38
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpn43ea76u/gstreamer1-plugins-base-1.28.5-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpn43ea76u/gstreamer1-plugins-base-1.28.5-2.fc45.src.rpm'
tool-versioncsmock-3.8.7.HEAD-1.el9