Newly introduced findings

List of Findings

Error: CPPCHECK_WARNING (CWE-457): [#def1]
gtk-4.23.2/demos/icon-editor/shape-editor.c:1260: error[legacyUninitvar]: Uninitialized variable: attr
# 1258|     return b1 && b2 &&
# 1259|            can_edit_shape (self->shape) &&
# 1260|->          svg_property_applies_to (attr, svg_element_get_type (self->shape));
# 1261|   }
# 1262|   

Error: GCC_ANALYZER_WARNING (CWE-457): [#def2]
gtk-4.23.2/gdk/gdkdmabuf.c:155:25: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘src_data[0]’
gtk-4.23.2/gdk/gdkdmabuf.c:147:6: branch_false: following ‘false’ branch...
gtk-4.23.2/gdk/gdkdmabuf.c:147:6: branch_false: ...to here
gtk-4.23.2/gdk/gdkdmabuf.c:150:15: branch_true: following ‘true’ branch...
gtk-4.23.2/gdk/gdkdmabuf.c:152:11: branch_true: ...to here
gtk-4.23.2/gdk/gdkdmabuf.c:152:10: branch_true: following ‘true’ branch...
gtk-4.23.2/gdk/gdkdmabuf.c:155:25: branch_true: ...to here
gtk-4.23.2/gdk/gdkdmabuf.c:155:25: danger: use of uninitialized value ‘src_data[0]’ here
#  153|           {
#  154|             g_assert (i > 0);
#  155|->           src_data[i] = src_data[0];
#  156|             sizes[i] = sizes[0];
#  157|             continue;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def3]
gtk-4.23.2/gdk/gdkframeclock.c:876:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
#  874|      * a buffer.
#  875|      */
#  876|->   g_warn_if_fail (timings->result == GDK_FRAME_PREPARING || timings->result == GDK_FRAME_OUTSTANDING);
#  877|   
#  878|     timings->result = GDK_FRAME_OUTSTANDING;

Error: CPPCHECK_WARNING (CWE-369): [#def4]
gtk-4.23.2/gsk/gpu/gskgpucachedatlas.c:70: error[zerodiv]: Division by zero.
#   68|             total += ((GskGpuCached *) self)->pixels;
#   69|         }
#   70|->       g_string_append_printf (string, "%zu%%", used_total * 100 / total);
#   71|   
#   72|         g_string_append (string, " … ");

Error: CPPCHECK_WARNING (CWE-758): [#def5]
gtk-4.23.2/gsk/gpu/gskgpucachedtile.c:114: error[shiftTooManyBitsSigned]: Shifting signed 32-bit value by 31 bits is undefined behaviour
#  112|            self->tile_id ^
#  113|            (self->lod_level << 24) ^
#  114|->          (self->lod_linear << 31);
#  115|   }
#  116|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:437:3: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘self’
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4255:1: enter_function: entry to ‘gsk_container_node_occlusion’
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4265:6: branch_false: following ‘false’ branch...
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4268:8: branch_false: ...to here
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4268:24: branch_true: following ‘true’ branch (when ‘i > 0’)...
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4270:16: branch_true: ...to here
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4271:10: branch_false: following ‘false’ branch...
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4275:6: branch_false: following ‘false’ branch (when ‘i >= 0’)...
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4278:3: branch_false: ...to here
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4278:13: branch_true: following ‘true’ branch...
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4279:54: branch_true: ...to here
gtk-4.23.2/gsk/gpu/gskgpunodeprocessor.c:4279:5: call_function: calling ‘gsk_gpu_node_processor_add_node’ from ‘gsk_container_node_occlusion’
#  435|                                    gsize                pos)
#  436|   {
#  437|->   gsk_gpu_frame_start_node (self->frame, node, pos);
#  438|   
#  439|     gsk_gpu_node_processor_add_node_untracked (self, node);

Error: COMPILER_WARNING (CWE-476): [#def7]
gtk-4.23.2/gtk/gtkbuilderparser.c:2187:27: warning[-Wnull-dereference]: potential null pointer dereference
# 2187 |       if (strcmp (req_info->library, "gtk") == 0)
#      |                   ~~~~~~~~^~~~~~~~~
# 2185|          * to check their library versions here.
# 2186|          */
# 2187|->       if (strcmp (req_info->library, "gtk") == 0)
# 2188|           {
# 2189|             if (req_info->major == 4 && req_info->minor == 0)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def8]
gtk-4.23.2/gtk/gtkimcontextwayland.c:172:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
gtk-4.23.2/gtk/gtkimcontextwayland.c:1342:1: enter_function: entry to ‘gtk_im_context_wayland_commit’
gtk-4.23.2/gtk/gtkimcontextwayland.c:1345:3: call_function: calling ‘notify_im_change’ from ‘gtk_im_context_wayland_commit’
#  170|     global = gtk_im_context_wayland_get_global (context);
#  171|   
#  172|->   if (zwp_text_input_v3_get_version (global->text_input) <
#  173|         ZWP_TEXT_INPUT_V3_SET_AVAILABLE_ACTIONS_SINCE_VERSION)
#  174|       return;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def9]
gtk-4.23.2/gtk/gtkimcontextwayland.c:479:7: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
gtk-4.23.2/gtk/gtkimcontextwayland.c:1395:1: enter_function: entry to ‘on_content_type_changed’
gtk-4.23.2/gtk/gtkimcontextwayland.c:1397:3: call_function: calling ‘notify_content_type’ from ‘on_content_type_changed’
#  477|     global = gtk_im_context_wayland_get_global (context);
#  478|   
#  479|->   if (zwp_text_input_v3_get_version (global->text_input) >=
#  480|         ZWP_TEXT_INPUT_V3_CONTENT_HINT_NO_EMOJI_SINCE_VERSION)
#  481|       {

Error: CPPCHECK_WARNING (CWE-758): [#def10]
gtk-4.23.2/gtk/gtkwidget.c:4590: warning[objectIndex]: The address of variable 'keyval' might be accessed at non-zero index.
# 4588|     for (unsigned int i = 0; i < n_keys; i++)
# 4589|       {
# 4590|->       shortcut = gtk_shortcut_new (gtk_keyval_trigger_new (keys[i], mods),
# 4591|                                      gtk_callback_action_new (callback, NULL, NULL));
# 4592|         if (format_string)

Error: CPPCHECK_WARNING (CWE-758): [#def11]
gtk-4.23.2/gtk/gtkwidget.c:4658: warning[objectIndex]: The address of variable 'keyval' might be accessed at non-zero index.
# 4656|     for (unsigned int i = 0; i < n_keys; i++)
# 4657|       {
# 4658|->       shortcut = gtk_shortcut_new (gtk_keyval_trigger_new (keys[i], mods),
# 4659|                                      gtk_signal_action_new (signal));
# 4660|         if (format_string)

Error: CPPCHECK_WARNING (CWE-758): [#def12]
gtk-4.23.2/gtk/gtkwidget.c:4723: warning[objectIndex]: The address of variable 'keyval' might be accessed at non-zero index.
# 4721|     for (unsigned int i = 0; i < n_keys; i++)
# 4722|       {
# 4723|->       shortcut = gtk_shortcut_new (gtk_keyval_trigger_new (keys[i], mods),
# 4724|                                      gtk_named_action_new (action_name));
# 4725|         if (format_string)

Error: GCC_ANALYZER_WARNING (CWE-476): [#def13]
gtk-4.23.2/gtk/print/gtkprinteroptionwidget.c:613:11: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘0’
gtk-4.23.2/gtk/print/gtkprinteroptionwidget.c:643:1: enter_function: entry to ‘handle_combo_entry_change’
gtk-4.23.2/gtk/print/gtkprinteroptionwidget.c:653:11: call_function: calling ‘combo_box_get’ from ‘handle_combo_entry_change’
gtk-4.23.2/gtk/print/gtkprinteroptionwidget.c:653:11: return_function: returning to ‘handle_combo_entry_change’ from ‘combo_box_get’
gtk-4.23.2/gtk/print/gtkprinteroptionwidget.c:656:6: branch_true: following ‘true’ branch...
gtk-4.23.2/gtk/print/gtkprinteroptionwidget.c:658:15: branch_true: ...to here
gtk-4.23.2/gtk/print/gtkprinteroptionwidget.c:661:26: call_function: calling ‘filter_numeric’ from ‘handle_combo_entry_change’
#  611|     for (i = 0, j = 0; i < len; i++)
#  612|       {
#  613|->       if (g_ascii_isdigit (val[i]))
#  614|           {
#  615|             filtered_val[j] = val[i];

Error: COMPILER_WARNING (CWE-476): [#def14]
gtk-4.23.2/gtk/svg/gtksvgenum.c:80:11: warning[-Wnull-dereference]: potential null pointer dereference
#   80 |   return e->value;
#      |          ~^~~~~~~
#   78|   {
#   79|     const SvgEnum *e = (const SvgEnum *) value;
#   80|->   return e->value;
#   81|   }
#   82|   

Error: COMPILER_WARNING (CWE-476): [#def15]
gtk-4.23.2/gtk/svg/gtksvgerror.c:46:15: warning[-Wnull-dereference]: potential null pointer dereference
#   46 |   dest->input = g_strdup (src->input);
#   44|     g_assert (dest != NULL);
#   45|     g_assert (src != NULL);
#   46|->   dest->input = g_strdup (src->input);
#   47|     dest->element = g_strdup (src->element);
#   48|     dest->attribute = g_strdup (src->attribute);

Error: COMPILER_WARNING (CWE-476): [#def16]
gtk-4.23.2/gtk/svg/gtksvgerror.c:47:17: warning[-Wnull-dereference]: potential null pointer dereference
#   47 |   dest->element = g_strdup (src->element);
#   45|     g_assert (src != NULL);
#   46|     dest->input = g_strdup (src->input);
#   47|->   dest->element = g_strdup (src->element);
#   48|     dest->attribute = g_strdup (src->attribute);
#   49|     dest->start = src->start;

Error: COMPILER_WARNING (CWE-476): [#def17]
gtk-4.23.2/gtk/svg/gtksvgerror.c:48:19: warning[-Wnull-dereference]: potential null pointer dereference
#   48 |   dest->attribute = g_strdup (src->attribute);
#   46|     dest->input = g_strdup (src->input);
#   47|     dest->element = g_strdup (src->element);
#   48|->   dest->attribute = g_strdup (src->attribute);
#   49|     dest->start = src->start;
#   50|     dest->end = src->end;

Error: COMPILER_WARNING (CWE-476): [#def18]
gtk-4.23.2/gtk/svg/gtksvgerror.c:49:15: warning[-Wnull-dereference]: potential null pointer dereference
#   49 |   dest->start = src->start;
#      |   ~~~~~~~~~~~~^~~~~~~~~~~~
#   47|     dest->element = g_strdup (src->element);
#   48|     dest->attribute = g_strdup (src->attribute);
#   49|->   dest->start = src->start;
#   50|     dest->end = src->end;
#   51|   }

Error: COMPILER_WARNING (CWE-476): [#def19]
gtk-4.23.2/gtk/svg/gtksvgerror.c:50:13: warning[-Wnull-dereference]: potential null pointer dereference
#   50 |   dest->end = src->end;
#      |   ~~~~~~~~~~^~~~~~~~~~
#   48|     dest->attribute = g_strdup (src->attribute);
#   49|     dest->start = src->start;
#   50|->   dest->end = src->end;
#   51|   }
#   52|   

Error: COMPILER_WARNING (CWE-476): [#def20]
gtk-4.23.2/gtk/svg/gtksvgerror.c:57:15: warning[-Wnull-dereference]: potential null pointer dereference
#   57 |   g_free (priv->input);
#   55|   {
#   56|     g_assert (priv != NULL);
#   57|->   g_free (priv->input);
#   58|     g_free (priv->element);
#   59|     g_free (priv->attribute);

Error: COMPILER_WARNING (CWE-476): [#def21]
gtk-4.23.2/gtk/svg/gtksvgerror.c:58:15: warning[-Wnull-dereference]: potential null pointer dereference
#   58 |   g_free (priv->element);
#   56|     g_assert (priv != NULL);
#   57|     g_free (priv->input);
#   58|->   g_free (priv->element);
#   59|     g_free (priv->attribute);
#   60|   }

Error: COMPILER_WARNING (CWE-476): [#def22]
gtk-4.23.2/gtk/svg/gtksvgerror.c:59:15: warning[-Wnull-dereference]: potential null pointer dereference
#   59 |   g_free (priv->attribute);
#   57|     g_free (priv->input);
#   58|     g_free (priv->element);
#   59|->   g_free (priv->attribute);
#   60|   }
#   61|   

Error: COMPILER_WARNING (CWE-476): [#def23]
gtk-4.23.2/gtk/svg/gtksvgerror.c: scope_hint: In function ‘gtk_svg_error_set_element’
gtk-4.23.2/gtk/svg/gtksvgerror.c:70:17: warning[-Wnull-dereference]: potential null pointer dereference
#   70 |   priv->element = g_strdup (element);
#   68|     GtkSvgErrorPrivate *priv = gtk_svg_error_get_private (error);
#   69|     g_assert (error->domain == GTK_SVG_ERROR);
#   70|->   priv->element = g_strdup (element);
#   71|   }
#   72|   

Error: COMPILER_WARNING (CWE-476): [#def24]
gtk-4.23.2/gtk/svg/gtksvgerror.c: scope_hint: In function ‘gtk_svg_error_set_attribute’
gtk-4.23.2/gtk/svg/gtksvgerror.c:79:19: warning[-Wnull-dereference]: potential null pointer dereference
#   79 |   priv->attribute = g_strdup (attribute);
#   77|     GtkSvgErrorPrivate *priv = gtk_svg_error_get_private (error);
#   78|     g_assert (error->domain == GTK_SVG_ERROR);
#   79|->   priv->attribute = g_strdup (attribute);
#   80|   }
#   81|   

Error: COMPILER_WARNING (CWE-476): [#def25]
gtk-4.23.2/gtk/svg/gtksvgerror.c:90:17: warning[-Wnull-dereference]: potential null pointer dereference
#   90 |     priv->start = *start;
#      |     ~~~~~~~~~~~~^~~~~~~~
#   88|     g_assert (error->domain == GTK_SVG_ERROR);
#   89|     if (start)
#   90|->     priv->start = *start;
#   91|     if (end)
#   92|       priv->end = *end;

Error: COMPILER_WARNING (CWE-476): [#def26]
gtk-4.23.2/gtk/svg/gtksvgerror.c:92:15: warning[-Wnull-dereference]: potential null pointer dereference
#   92 |     priv->end = *end;
#      |     ~~~~~~~~~~^~~~~~
#   90|       priv->start = *start;
#   91|     if (end)
#   92|->     priv->end = *end;
#   93|   }
#   94|   

Error: COMPILER_WARNING (CWE-476): [#def27]
gtk-4.23.2/gtk/svg/gtksvgerror.c: scope_hint: In function ‘gtk_svg_error_set_input’
gtk-4.23.2/gtk/svg/gtksvgerror.c:101:15: warning[-Wnull-dereference]: potential null pointer dereference
#  101 |   priv->input = g_strdup (input);
#   99|     GtkSvgErrorPrivate *priv = gtk_svg_error_get_private (error);
#  100|     g_assert (error->domain == GTK_SVG_ERROR);
#  101|->   priv->input = g_strdup (input);
#  102|   }
#  103|   

Error: COMPILER_WARNING (CWE-476): [#def28]
gtk-4.23.2/gtk/svg/gtksvgnumber.c:560:11: warning[-Wnull-dereference]: potential null pointer dereference
#  560 |   return n->unit;
#      |          ~^~~~~~
#  558|     g_assert (value->class == &SVG_NUMBER_CLASS);
#  559|   
#  560|->   return n->unit;
#  561|   }
#  562|   

Scan Properties