Fixed findings

List of Findings

Error: CPPCHECK_WARNING (CWE-476): [#def1]
gst-plugins-base-1.28.1/gst-libs/gst/tag/gstexiftag.c:1451: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1449|       /* +1 because it could be a string without the \0 */
# 1450|       data = malloc (alloc_size);
# 1451|->     memcpy (data, info.data + real_offset, count);
# 1452|       data[count] = 0;
# 1453|   

Error: CPPCHECK_WARNING (CWE-476): [#def2]
gst-plugins-base-1.28.1/gst-libs/gst/tag/gstexiftag.c:1452: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1450|       data = malloc (alloc_size);
# 1451|       memcpy (data, info.data + real_offset, count);
# 1452|->     data[count] = 0;
# 1453|   
# 1454|       gst_buffer_unmap (reader->buffer, &info);

Error: CPPCHECK_WARNING (CWE-476): [#def3]
gst-plugins-base-1.28.1/gst-libs/gst/tag/gstexiftag.c:1457: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1455|     } else {
# 1456|       data = malloc (count + 1);
# 1457|->     memcpy (data, (guint8 *) offset_as_data, count);
# 1458|       data[count] = 0;
# 1459|     }

Error: CPPCHECK_WARNING (CWE-476): [#def4]
gst-plugins-base-1.28.1/gst-libs/gst/tag/gstexiftag.c:1458: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: data
# 1456|       data = malloc (count + 1);
# 1457|       memcpy (data, (guint8 *) offset_as_data, count);
# 1458|->     data[count] = 0;
# 1459|     }
# 1460|   

Error: CPPCHECK_WARNING (CWE-758): [#def5]
gst-plugins-base-1.28.1/gst/typefind/gsttypefindfunctions.c:6810: error[shiftTooManyBits]: Shifting 32-bit value by 49 bits is undefined behaviour
# 6808|     for (i = 0; i < 8; i++) {
# 6809|       leb128_byte = data[i];
# 6810|->     value |= (((gint) leb128_byte & 0x7f) << (i * 7));
# 6811|       if (!(leb128_byte & 0x80))
# 6812|         break;

Scan Properties

analyzer-version-clippy1.97.1
analyzer-version-cppcheck2.21.1
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.97.1
diffbase-analyzer-version-cppcheck2.21.1
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-242.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namegstreamer1-plugins-base-1.28.5-2.fc45
diffbase-store-results-to/tmp/tmpn43ea76u/gstreamer1-plugins-base-1.28.5-2.fc45.tar.xz
diffbase-time-created2026-08-03 14:55:58
diffbase-time-finished2026-08-03 15:01:38
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpn43ea76u/gstreamer1-plugins-base-1.28.5-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpn43ea76u/gstreamer1-plugins-base-1.28.5-2.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.7.HEAD-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-242.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namegstreamer1-plugins-base-1.28.1-1.fc44
store-results-to/tmp/tmpa5iiejr8/gstreamer1-plugins-base-1.28.1-1.fc44.tar.xz
time-created2026-08-03 14:49:07
time-finished2026-08-03 14:55:42
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpa5iiejr8/gstreamer1-plugins-base-1.28.1-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpa5iiejr8/gstreamer1-plugins-base-1.28.1-1.fc44.src.rpm'
tool-versioncsmock-3.8.7.HEAD-1.el9