Error: GCC_ANALYZER_WARNING (CWE-457): [#def1] guestfs-tools-1.56.0/builder/index-parse.y:118:29: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘yyvsp[2305843009213693951].section’ guestfs-tools-1.56.0/builder/index-parse.y:167:1: enter_function: entry to ‘do_parse’ guestfs-tools-1.56.0/builder/index-parse.y:173:9: call_function: calling ‘yyparse’ from ‘do_parse’ # 116| { $$ = $1; } # 117| | section sections # 118|-> { $$ = $1; $$->next = $2; } # 119| # 120| section: Error: GCC_ANALYZER_WARNING (CWE-401): [#def2] guestfs-tools-1.56.0/builder/index-scan.c:1549:54: warning[-Wanalyzer-malloc-leak]: leak of ‘yyalloc(64, yyscanner)’ guestfs-tools-1.56.0/builder/index-scan.c:1536:21: enter_function: entry to ‘yy_create_buffer’ guestfs-tools-1.56.0/builder/index-scan.c:1540:24: call_function: calling ‘yyalloc’ from ‘yy_create_buffer’ guestfs-tools-1.56.0/builder/index-scan.c:1540:24: return_function: returning to ‘yy_create_buffer’ from ‘yyalloc’ guestfs-tools-1.56.0/builder/index-scan.c:1541:12: branch_false: following ‘false’ branch... guestfs-tools-1.56.0/builder/index-scan.c:1544:2: branch_false: ...to here guestfs-tools-1.56.0/builder/index-scan.c:1549:54: danger: ‘yyalloc(64, yyscanner)’ leaks here; was allocated at [(4)](sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/3) # 1547| /* yy_ch_buf has to be 2 characters longer than the size given because # 1548| * we need to put in 2 end-of-buffer characters. # 1549|-> */ # 1550| b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) , yyscanner ); # 1551| if ( ! b->yy_ch_buf ) Error: GCC_ANALYZER_WARNING (CWE-401): [#def3] guestfs-tools-1.56.0/builder/index-scan.c:1810:26: warning[-Wanalyzer-malloc-leak]: leak of ‘yyalloc(n, yyscanner)’ guestfs-tools-1.56.0/builder/index-scan.c:1794:17: enter_function: entry to ‘yy_scan_bytes’ guestfs-tools-1.56.0/builder/index-scan.c:1803:24: call_function: calling ‘yyalloc’ from ‘yy_scan_bytes’ guestfs-tools-1.56.0/builder/index-scan.c:1803:24: return_function: returning to ‘yy_scan_bytes’ from ‘yyalloc’ guestfs-tools-1.56.0/builder/index-scan.c:1804:12: branch_false: following ‘false’ branch... guestfs-tools-1.56.0/builder/index-scan.c:1804:12: branch_false: ...to here guestfs-tools-1.56.0/builder/index-scan.c:1812:6: call_function: calling ‘yy_scan_buffer’ from ‘yy_scan_bytes’ # 1808| for ( i = 0; i < _yybytes_len; ++i ) # 1809| buf[i] = yybytes[i]; # 1810|-> # 1811| buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR; # 1812| Error: CPPCHECK_WARNING (CWE-476): [#def4] guestfs-tools-1.56.0/common/options/keys.c:145: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: out # 143| * rest of the code simpler. # 144| */ # 145|-> memcpy (out, "base64:", 7); # 146| out[7 + outlen] = '\0'; # 147| out += 7; Error: CPPCHECK_WARNING (CWE-476): [#def5] guestfs-tools-1.56.0/common/options/keys.c:146: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: out # 144| */ # 145| memcpy (out, "base64:", 7); # 146|-> out[7 + outlen] = '\0'; # 147| out += 7; # 148| Error: CPPCHECK_WARNING (CWE-682): [#def6] guestfs-tools-1.56.0/common/options/keys.c:147: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer. # 145| memcpy (out, "base64:", 7); # 146| out[7 + outlen] = '\0'; # 147|-> out += 7; # 148| # 149| for (i = 0, j = 0; i < inplen;) {
| analyzer-version-clippy | 1.97.1 |
| analyzer-version-cppcheck | 2.21.1 |
| analyzer-version-gcc | 16.1.1 |
| analyzer-version-gcc-analyzer | 16.1.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| diffbase-analyzer-version-clippy | 1.97.1 |
| diffbase-analyzer-version-cppcheck | 2.21.1 |
| diffbase-analyzer-version-gcc | 16.1.1 |
| diffbase-analyzer-version-gcc-analyzer | 16.1.1 |
| diffbase-analyzer-version-shellcheck | 0.11.0 |
| diffbase-analyzer-version-unicontrol | 0.0.2 |
| diffbase-enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-111.us-west-2.compute.internal |
| diffbase-known-false-positives | /usr/share/csmock/known-false-positives.js |
| diffbase-known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| diffbase-mock-config | fedora-rawhide-x86_64 |
| diffbase-project-name | guestfs-tools-1.55.5-1.fc44 |
| diffbase-store-results-to | /tmp/tmpvm6wa34w/guestfs-tools-1.55.5-1.fc44.tar.xz |
| diffbase-time-created | 2026-08-03 14:52:52 |
| diffbase-time-finished | 2026-08-03 14:57:54 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpvm6wa34w/guestfs-tools-1.55.5-1.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpvm6wa34w/guestfs-tools-1.55.5-1.fc44.src.rpm' |
| diffbase-tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-111.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | guestfs-tools-1.56.0-3.fc45 |
| store-results-to | /tmp/tmpvq5p0vy5/guestfs-tools-1.56.0-3.fc45.tar.xz |
| time-created | 2026-08-03 14:58:20 |
| time-finished | 2026-08-03 15:01:25 |
| title | Newly introduced findings |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'gcc,clippy,unicontrol,shellcheck,cppcheck' '-o' '/tmp/tmpvq5p0vy5/guestfs-tools-1.56.0-3.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpvq5p0vy5/guestfs-tools-1.56.0-3.fc45.src.rpm' |
| tool-version | csmock-3.8.7.20260803.142340.gb75b18e-1.el9 |